last executing test programs: 3m42.015691543s ago: executing program 3 (id=718): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000080)) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x20, 0x30, 0x4, "02ab0e4b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m40.584847932s ago: executing program 3 (id=727): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "9bc68ff4ed48f376", "a5956aa3c17d12ed370855bb71126b0706c813360c85d1a29f55c4385007f643", "f84a6d59", "648267b83011e29a"}, 0x38) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$audion(&(0x7f00000001c0), 0x1ff, 0xa0202) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000000)={@val={0x70}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x2e) ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}]}, 0x2c}}, 0x0) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRES64=r5, @ANYRES64, @ANYRES64=0x2710, @ANYBLOB], 0x48}}, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r10, 0x400455c8, 0x4) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x40000) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x57}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r12, 0xc0502100, 0x0) ioctl$TIOCVHANGUP(r10, 0x5437, 0x0) 3m37.640542471s ago: executing program 3 (id=746): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x2, 0x2}, 0xc) (async) write(r0, 0x0, 0x97) 3m37.611795875s ago: executing program 3 (id=747): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0xa69, 0x0, 0x10003, 0x41, 0x400200cc4, 0xffd, 0x4, 0x0, 0x7, 0x0, 0x2, 0x0, 0x6a, 0x1000000000008d], 0xeeee8000, 0x410}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 3m37.595625876s ago: executing program 3 (id=748): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) (async) r2 = socket$inet6(0xa, 0x3, 0x5) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000200)=0x200, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) (async) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_GET_DYING(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) (async, rerun: 32) recvmsg(r8, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20) bind$xdp(r3, &(0x7f0000000a80)={0x2c, 0x1, r5, 0xa, r2}, 0x10) (async) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) linkat(r1, &(0x7f0000000100)='./file2\x00', 0xffffffffffffffff, 0x0, 0x1000) (async) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r9, 0x5420, 0x0) write$P9_RSTATu(r0, &(0x7f0000000580)={0x458, 0x7d, 0x3, {{0x500, 0x317, 0x4000, 0x0, {0x0, 0x0, 0x8}, 0xa0780000, 0x9, 0x0, 0x8, 0x1b, '\x04nodev{evoo~%9\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x260, 'u\xaf\xf5@\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1e\xe1,\xeaHY|fFF\xc9\xa7\x0f>I%3q\xc0B8wE\x8c\xe9C\xc5\xef\x03\xb9\x14e\x1f\xa3\xb8OAik\x90\x14\x16#\xd7\xc1CD\x190\xdf\xf2V\xf6\xe8\xd4\x83]\x9b;\xa5\xa7tKP\xbe \x96x7\x83&\x18OJ\xc3\xe0\xc3h\x1b\xb9Pu\xf3\x84}+s,\xd9\xbd\x96\xfb\x98M\x84\xe6\x9b\xa9\x92\'\x93\xd2c\x84\x86\xd6x\x0e\v\x85#e\xf08\xb0\f\x11\xc5\xd4Y\bC\xbcr\xa5\x9f\xa4\xa3s\x12\x9e28*\x15\xcfl\x88W\t\xfa\x1asD\x8d\x94\xde\x89e\x1e\xc2\x8c;\xdc\xc3\xd3\xb9Y\xbd~\xd0q\xabZ[\xe0\xfa)\x1c\xf1\x15\xab\xf0\x84\xc7\xbd\xfa\x15\f\xb8\xe4\xaa\xe2\xce\xbf\x98{\"H\x80kE\x9bZ_\xddZ\xa5\xbb\x90\xa5~\xe1\xf4\xe3TK\xd6\xd1\xb4\xca\x13yus\x80\x80\xc4hgJks\xa3\xdf(%n\a\x003!,\'{\x1d\xc1u\x81\xf4\xc6\xdd\xde\xf3\xaa\xe3\xadm\xca\xed\xf4\xf6\x7f\xdd7\x94\x83/\x89M\x10l\x9e\x8d\xfc\xd2c\xcc\t\xc0\\\x15\xe6\xc4\xbf\xb0\xdfmZ\xd6\a\xee\a\x05\xea\xcc\x8a \xaa\xfe\xfc\"\x88_\xb6\x1e\xf5{\xc8\f0T\x02t`\xf6G\xd1#\xd4\x8a_\xfcg8\xab\xe1\xc9@\t\x96xE-\xca\\\xc1v\xb6\xb6m\xcaV^\xe7\x83%\xb9!dn\xa0\xd8`\x0f\x1e/}\xfc\xd0`\xd4\xb7\xfe\xf2\xe0\xcd\xd3t^\x90\x9a\x14\xaa\x03W\x03\xe8m\xd9[<\x82O>{$\xfb(\x7f\xe8\xb3\xe3\x19w2\xf2c\x8a\xec\x8do\xa5\x9d\xa7\xc1D\xb3\xa1$[+5!\n\x0el:\xb2\x1e\xea#\xa4\xde#\xf2q\x8a\b\"\x8f\x12d\x8a\xf5\xb2\x9f\x91\xdb\"~z\xfa\x03M\xf1<_\xbf\x10k\x97\xa3\x00$\x84\xb4\xab\xbfqh\xc32\x183\xfe\xe63\x99\xad\x1e\xbb}\xd0{\xd7t\x8c\x83\x87\xf6\xd5\x04\xbf\xb9\x88,\x92\x8bA\x95\xba\xf7\xb85\xaap\x06\xe4\xb3\xd8\xb7Q\xec\xe4\x1f\xc8\x18\xbc^\xee\xe6\x972\xe2\x12\x91C\x00<,\x894\xb2\x04\x05\x04\xf7[y\n\xbf5\\Ag\xe5\xd8\xed?KF\xb6\'\xf0\xbb\x80:9\x00'/608, 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x458) 3m37.463452865s ago: executing program 3 (id=749): r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x1e, 0x0, &(0x7f0000000040)) r1 = epoll_create1(0x80000) fsopen(&(0x7f0000000200)='pstore\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x4}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(r2) 3m37.19503885s ago: executing program 32 (id=749): r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x1e, 0x0, &(0x7f0000000040)) r1 = epoll_create1(0x80000) fsopen(&(0x7f0000000200)='pstore\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x4}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(r2) 2m37.124533344s ago: executing program 4 (id=1107): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc038563b, &(0x7f0000000280)={0x0, 0x4}) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0xd67e937269a9f149, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfono=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=fscache,\x00']) 2m37.036106695s ago: executing program 4 (id=1108): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x5, &(0x7f0000000000)=[{0xd2e, 0x9, 0x3, 0xffffffff}, {0x1, 0x96, 0x8, 0xfffffffd}, {0x1, 0x4, 0x3, 0x2}, {0x401, 0x1a, 0x1, 0x2}, {0x7, 0x2, 0x4, 0xfffffff0}]}) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000001180)={0x320, 0x240, 0x0, 0x360, 0x0, 0x0, 0x0, 0x0, {0x0, 0xa24}, {0x10000, 0xfffffffe, 0xfffffffd}, {}, {0x80, 0x2}, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0xc}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r0) (async) close(r0) socket(0x1d, 0x2, 0x6) socket(0x2b, 0x80801, 0x1) (async) socket(0x2b, 0x80801, 0x1) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100), 0x1218002, &(0x7f0000000000)=ANY=[]) 2m37.025216442s ago: executing program 4 (id=1109): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r1, 0x376fecf7939fce67, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x5}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r0, 0x5, 0x1, 0x5}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0xfffffffffffffffc) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r1, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x78}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xac, r3, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1d}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}]}, 0xac}, 0x1, 0x0, 0x0, 0x40}, 0x4040804) ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x1) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r4, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r1, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xd5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000640)={0x1, &(0x7f0000000600)=[{0x9, 0x9, 0x6, 0x1}]}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e21, 0x57, @local, 0x1}}, 0xe, 0x3, 0x3ff, 0xa, 0xd0, 0x4, 0xf8}, &(0x7f0000000740)=0x9c) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000780)={r6, 0x101, 0xade4, 0xffffffff}, &(0x7f00000007c0)=0x10) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000840)={0x2, &(0x7f0000000800)=[{0x5, 0x26, 0x6, 0xf}, {0x8, 0x6, 0x61, 0xc}]}) inotify_add_watch(r2, &(0x7f0000000880)='./file0\x00', 0x54000c8f) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, r1, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x47}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x840) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000009c0)={0xcbfc, 0xfffd, 0x3, 0x0, 0x6, 0x0, 0x7, 0x2, r7}, &(0x7f0000000a00)=0x20) sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x48000004}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x68, r1, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x100, 0xb}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x22, 0x2a, [@dsss={0x3, 0x1, 0xb2}, @ssid={0x0, 0x19, @random="4652200f684ccb92f04bc219896c6522146dcb0f20aeb31573"}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x8) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x64, r1, 0xf05, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x80000001, 0x2d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x20004001) r9 = geteuid() ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000d00)=0x0) sendmsg$nl_netfilter(r4, &(0x7f0000001000)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000d40)={0x270, 0xa, 0x6, 0x201, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x9}, [@nested={0xfd, 0x49, 0x0, 0x1, [@typed={0x8, 0x56, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x33}}, @generic="0d0f51a0b4e32c3e4ac81e211eee17022402de4f740381aeeae8a253940255c3e384b59f4670376e6fffc6faec0bbc9d40a4f96f71e67375bcfebd9a22ab00989f348bb41cf7db0f37a8dd0ad0f1cecf422201a28a1c27343a752d7b6b73f841f132763710b613e8cd9319f42cf07977635cb394852905be7332e5077906651b7f25495092cd60501529988fd57f17697419944bad2c599629e3c4aa03013cd60c06bcfe2ab93f1356a07f24bf307f9aba2d934e291602b2b3d3fefb69b77e6913e91238bea39c80217cdb716b471b2fa34ca2bfc020dd6e9fbe11e239729a0e00", @nested={0x4, 0x14}, @typed={0x9, 0xea, 0x0, 0x0, @str='![-[\x00'}]}, @typed={0xc, 0x9a, 0x0, 0x0, @u64}, @nested={0x145, 0x73, 0x0, 0x1, [@nested={0x4, 0xfc}, @typed={0x8, 0x39, 0x0, 0x0, @uid=r9}, @generic="f602e370beb4e29fc974aa73e44c9a6f0cb37ac1437b587b25dd63b9a69f1dbed0cf661e94cdf8985e50dd9d77a190a4cb2109355118f2a9640e05680131ea295941e3dd98a13b02b7f910adb1934433e212b517b867b72304060b62dd3aeff6126bc76177021e0d23574c1b55da13cfc430fa25d77cf680af29337ea9a262ebb0e5ca8c7b0104b13313f0bc407c8b19c2b0d3464bedc5980db7925690d0f97ab2d77d055444513b8a325fdd8b0eeab16d52cc32e2d1c7dfe177371b019533c7e224a10717da0df0fc7c", @generic="9fb3c60dcbd1d38b8a00f000b0921df8c6487b1863f65fe34242e7bd827e9564932e5b7432e2a6d3010aca1610874410f3bde54be8dd0005e2028ac3a951a798416739f71be4f1800f559782f5b3f53b036eb95d24b69ec322cbcd7ea78c4da149f3b2c025924aa2496c3e"]}, @typed={0x8, 0x142, 0x0, 0x0, @uid=r10}]}, 0x270}, 0x1, 0x0, 0x0, 0x4001}, 0x54) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000001040)={{0x1, 0x1, 0x18, r0, {r2}}, './file0\x00'}) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r11, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)={0xb0, r3, 0x300, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7a7}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}, {0x6}, {0x8, 0xb, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0xe4e}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0xfffff1bb}}]}, 0xb0}}, 0x4810) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000001200)={{r8}, "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"}) r12 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r12, &(0x7f0000004900)={&(0x7f0000002200)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, &(0x7f0000002780)=[{&(0x7f0000002240)={0x19c, 0x1f, 0x200, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x8, 0x10b, 0x0, 0x0, @uid=r9}, @nested={0x149, 0x6f, 0x0, 0x1, [@generic="2a77294acc53738df4de4a720ec13e77d2a582424d6676d23d6845eb8f40f66168d1a3224fdcff421fd33c691689c27f4fe000cfa3210e119591bc9ecc95329731ebd4547346110e99465f6a5692259817985de6dddd31c95f47d15ece3d95e22c9bdb5a", @generic="cb98146487b60e68eb1d4bcab1f80367245d23719510d7fbc196062ddb9b64fb6e30744f45d3e87b636f565049a5e2c473b12514c9013e615c09af15d2d53d9984a714e2a579bfb71c4a0eb39232e817a767166602a4249ef82363a4bf1c61e61ccfadfb8299502e289449a9b25472687fc59f956623de2277e5f82b001a8f0d023f869257d20f0a6138a18275d90e0956eb7a3a1918ff0ba28db9ddd3369598ba6835513d46c10ee3fc53f72e685684902a59f3f05f2dab74b7c0fe89f6db38742ad6f8581b889894843975171a67c1f7b6e2fc6f5ce0719d090158456cb86049"]}, @typed={0xa, 0x53, 0x0, 0x0, @str='(\xfb:\xc6,\x00'}, @generic="d4cc3499d68ce6f0d32155ffa3cbc90a1707ee0dc39c71b72777873ce2cf380893d12997732f4a9c21"]}, 0x19c}, {&(0x7f00000024c0)={0xe4, 0x28, 0x8, 0x70bd28, 0x25dfdbfe, "", [@typed={0x14, 0x63, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @nested={0x8, 0x92, 0x0, 0x1, [@nested={0x4, 0x3b}]}, @typed={0x8, 0x113, 0x0, 0x0, @uid}, @typed={0x14, 0x117, 0x0, 0x0, @ipv6=@remote}, @generic="89e629076ab7174044eb5ae750f3498ed439a50a8390674ee2ed796e7076f75b5486ad5aee03a1c531bd7b4c81404414f287e14e11b6e9ccbbc4dfdb9655bb524472b4bd3fc23e4e0e9fa5b4d6462cb517823683790354ff32070fd1ab843e77bc106e149a1d85386cffafd1da6adba6b35a0db915c29601a730093faf21981e76073221a0c96e5da39d415a498699d2748cd7", @typed={0x8, 0x5f, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0xe4}, {&(0x7f00000025c0)={0x10, 0x18, 0x8, 0x70bd25, 0x25dfdbfd}, 0x10}, {&(0x7f0000002600)={0x178, 0x33, 0x800, 0x70bd2d, 0x25dfdbfb, "", [@nested={0x166, 0x66, 0x0, 0x1, [@typed={0x4, 0xf9}, @generic="40f24853e1cfa1a46df1248ae2764cd25e35aaefe8cd2c08af3ba3e9aa77483710193bd0bc3e5ab1b9fc988ba0cee1d9f6bdfbe9edd138107b87bd5cbd95dc8f42849a85deb45d1c17226e3d3ab9ea9faca7", @generic="ccbc4a64cc08eb73db496e0194eb69bf7c4588e650522a357827301469d1af00ce4145913df86a88a5ad12de067cabb22941ae561b3b1d4724a770184e0073768e011267775ffce2ae12a9cf0b24e8c8b3c4febf9e8e635bafc1e9f83f51fc74c6ebdcc34a2beace4ac438b9a91d7c473d52bb752087ea03d53e2e9265949767d5df27769fcb0ca75ba321bf", @typed={0x75, 0xe4, 0x0, 0x0, @binary="ea168de6f48343b2d0c54ce7f205768c6ef88b01b13cd11a18d0da444298c4f1c38fd5c92b38825e2ce6deae2325476d5722dd021b70693a0d688ab8d242b156e5c01d7f8eccf98b59cf7ef303e51f98d26b58351802181171636ef4d86aaac2765027c2b3c0f066cb050432ee72b3a1f5"}, @nested={0x4, 0x107}, @nested={0x4, 0xfc}]}]}, 0x178}], 0x4, &(0x7f00000048c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r9}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r10}}}], 0x40}, 0x4054) 2m36.964659305s ago: executing program 4 (id=1110): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000faf000/0xf000)=nil, &(0x7f0000c36000/0x3000)=nil, 0xf000, 0x3}) 2m36.91267556s ago: executing program 4 (id=1111): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9"], 0x17) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, 0x0, 0x0, 0x1000000000) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x2202, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat2(r2, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x8000, 0x93}, 0x18) close_range(r3, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r0, 0xc018aec0, &(0x7f0000000900)={0x10201, 0x40, 0x380, &(0x7f0000000500)=[0xffffffffffffff3c, 0x401, 0xa, 0x3, 0x6, 0x401, 0x9, 0x155e, 0xffff, 0xab, 0x3, 0x7, 0x1, 0x4d, 0x4, 0xfffffffffffffffd, 0x7, 0x7, 0x7, 0xfe, 0x8, 0x8, 0x1, 0x7f, 0xc, 0x200, 0xd01d, 0x3, 0xfffffffffffffff8, 0x2, 0x8000000000000001, 0x2a0e, 0x9, 0x1ecc34f1, 0x2, 0x4, 0x1b4a8125, 0x2, 0x3, 0x2, 0x7fffffffffffffff, 0x8, 0x4a0, 0x7, 0x3, 0x6, 0x5, 0x6, 0x200, 0x970, 0x7, 0x7, 0x9, 0x5, 0x8, 0x4, 0x3, 0x9, 0x6, 0x4, 0x7, 0x1, 0x4, 0x5, 0xffffffffffffffff, 0xc00000000000000, 0x4, 0x8, 0x8, 0x5d, 0x98a, 0x2d6, 0x81, 0xb2, 0x9, 0x10001, 0x1, 0x0, 0x1, 0x3, 0xc, 0x100000000, 0x86, 0x401, 0x7205b2a5, 0x9, 0x9, 0x0, 0x8, 0x1, 0x3, 0x21, 0x80000001, 0x0, 0x7ff, 0xbb57, 0x200, 0xe, 0x2, 0x5, 0x40, 0x7, 0x2, 0x9, 0x2, 0xb62, 0x7, 0x2, 0x7fffffff, 0x2, 0x9d, 0x1, 0x1, 0x99ef, 0x5, 0x16e, 0x8000000000000001, 0x5, 0x3, 0x0, 0x4, 0x0, 0x0, 0x4, 0x3, 0x40, 0x7]}) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r6, 0x7fc}, 0x8) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000000c0)={r7, 0xddeb}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x800, 0x800b, 0x9, 0x2, r6}, 0x10) r8 = socket$inet6(0x10, 0x3, 0x81) sendmsg(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) io_setup(0x2, &(0x7f0000000180)=0x0) io_submit(r9, 0x2, &(0x7f00000004c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0x7, r4, &(0x7f0000000340)="d75b6e1682926bff795fe091873b7dadb1696f496093a3a1498a96251904be7954d9bbb8922063a887b09042544b0daeab024ef2876ccbd6777b42e00b6467aeabe8a5b32a3c46cb", 0x48, 0xb, 0x0, 0x3, r1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xee2dd05013ec80d3, 0x8, r0, &(0x7f00000003c0)="921fcae2dd7c5beeefb9f59c44d3d8a7c65ab343b6cbe0b650ad345ce179c12cd96a7e6b5c5e8a7d0ea00f77655af5c3c030182968167647f7c418a43f574098f82eec3f0a5561cf63d5f8c37b81ab63bbd05e35ba79c0454bc88f9d06e7e01deaab85a0994d0f5afcbc096aba225a763bfbb4a1f8f32124df2a75c894480c08b55694b5dbf8fcc39f5008fa98b3b68d456201c82766f54a8be5df147be8f5e40dddad21200c0b5ca1eeb673329158db7d7a574bf94ed86e1f198b484b", 0xbd, 0x2, 0x0, 0x3, r2}]) write(r8, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000f00000000001c0000000000000005e1083bbd82d702f5f062c93dd60aa2c6f1a5a338b6f568", 0x44) 2m36.731577356s ago: executing program 4 (id=1112): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000640)='./file0\x00', 0x1c0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) sync() socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)={0x48, r2, 0x1, 0x0, 0xfffffffd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {0x9}, @device_b}, @ext_ch_sw={0x4, 0x4, {{}, @void}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x5, 0x5]}]}, 0x48}}, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x14c, 0x1200) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r6 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002f80)={0x0, 0x0, 0x0}, &(0x7f0000002fc0)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000003100)) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000003100)=0x0) r9 = getegid() syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000c40)="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", 0x2000, &(0x7f0000003280)={&(0x7f0000000480)={0x50, 0x0, 0x81, {0x7, 0x2b, 0x4, 0xffffffff80100000, 0x7, 0xfffc, 0x7, 0x10000, 0x0, 0x0, 0x40, 0x6}}, &(0x7f0000000500)={0x18, 0x0, 0x6, {0xffffffffffffffff}}, &(0x7f0000000540)={0x18, 0x0, 0x6, {0x6}}, &(0x7f0000000580)={0x18, 0x0, 0xffffffff, {0x1}}, &(0x7f00000005c0)={0x18, 0x0, 0x7, {0x7f}}, &(0x7f0000000600)={0x28, 0x0, 0x6, {{0x800, 0x8, 0x1}}}, &(0x7f0000000680)={0x60, 0x0, 0x9, {{0xffffffffffffff57, 0x5e8e, 0x3, 0x1, 0x8a, 0x8, 0x3, 0x8}}}, &(0x7f0000000700)={0x18, 0x0, 0x6}, &(0x7f0000000740)=ANY=[@ANYBLOB="1600"/22], &(0x7f0000000780)={0x20, 0x0, 0xfb, {0x0, 0x1}}, &(0x7f0000000a40)={0x78, 0x0, 0xfffffffffffffa82, {0x573, 0x7fff, 0x0, {0x5, 0x4, 0x63c6, 0x0, 0x1, 0x8, 0x3, 0x1, 0x2, 0x1000, 0x5, 0x0, 0x0, 0xfffffe00, 0x1}}}, &(0x7f0000000ac0)={0x90, 0xffffffffffffffda, 0x3, {0x5, 0x6, 0x2, 0x98c3, 0x6, 0x16d5, {0x5, 0x101, 0x100000000, 0x2, 0xd0, 0x6, 0x9, 0x80, 0x2, 0xc000, 0x100, 0xee00, 0xffffffffffffffff, 0x10000, 0x2}}}, &(0x7f0000000b80)={0x28, 0xfffffffffffffffe, 0x4, [{0x0, 0x400, 0x0, 0x5}]}, &(0x7f0000003340)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ffffff7f0900000000000000000000000000000069000000000000000500000000000000aaaaaaaaaa000000010000000000000000000000000000000000000000000000ac7a000000000000050000000400000006000000000000000200000000000000fdffffffffffffff01000000000000000000010000000000b95a00000000000006000000090000000000000000c0000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0300000040000000000000000100000000000000ffffffffffffff7f0d000000810000002f6465762f6869647261772300000000"], &(0x7f0000003000)={0xa0, 0x0, 0x9, {{0x2, 0x1, 0x80000000, 0x3, 0x6, 0xfffffffc, {0x3, 0x6, 0xa, 0x0, 0xe572, 0x0, 0x4, 0x5bfa, 0x9b12a734, 0x2000, 0x95, 0x0, r7, 0x800, 0x400}}, {0x0, 0x1}}}, &(0x7f00000030c0)={0x20, 0x0, 0xa, {0x3, 0x4, 0xb2c}}, &(0x7f0000003140)={0x130, 0xfffffffffffffffe, 0x3ff, {0xfffffffffffffffe, 0x8, 0x0, '\x00', {0x20, 0x9, 0x2, 0x7ff, r8, r9, 0xa000, '\x00', 0x5, 0x2, 0xffff, 0x100, {0x9, 0xffffffc0}, {0xffffffffffffffff, 0x9}, {0x7fffffff, 0x5}, {0x656}, 0xd, 0x7432, 0x8, 0x4}}}}) syz_usb_control_io(r6, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r6, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000440)=ANY=[@ANYBLOB="406018d64253983845aa5fb8c17818a27863fa520b2178fc9c1284f263c2166a165ad4600dfe0f536cb1c20c890e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) (async) syz_usb_control_io$uac1(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x1c, r5, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c000}, 0x20002011) (async) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x1c, r5, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c000}, 0x20002011) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000e5", @ANYRES16=r4, @ANYBLOB="0100280000000000000002000000200001"], 0x34}}, 0x0) 2m21.711784999s ago: executing program 33 (id=1112): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000640)='./file0\x00', 0x1c0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) sync() socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)={0x48, r2, 0x1, 0x0, 0xfffffffd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {0x9}, @device_b}, @ext_ch_sw={0x4, 0x4, {{}, @void}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x5, 0x5]}]}, 0x48}}, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x14c, 0x1200) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r6 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002f80)={0x0, 0x0, 0x0}, &(0x7f0000002fc0)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000003100)) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000003100)=0x0) r9 = getegid() syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000c40)="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", 0x2000, &(0x7f0000003280)={&(0x7f0000000480)={0x50, 0x0, 0x81, {0x7, 0x2b, 0x4, 0xffffffff80100000, 0x7, 0xfffc, 0x7, 0x10000, 0x0, 0x0, 0x40, 0x6}}, &(0x7f0000000500)={0x18, 0x0, 0x6, {0xffffffffffffffff}}, &(0x7f0000000540)={0x18, 0x0, 0x6, {0x6}}, &(0x7f0000000580)={0x18, 0x0, 0xffffffff, {0x1}}, &(0x7f00000005c0)={0x18, 0x0, 0x7, {0x7f}}, &(0x7f0000000600)={0x28, 0x0, 0x6, {{0x800, 0x8, 0x1}}}, &(0x7f0000000680)={0x60, 0x0, 0x9, {{0xffffffffffffff57, 0x5e8e, 0x3, 0x1, 0x8a, 0x8, 0x3, 0x8}}}, &(0x7f0000000700)={0x18, 0x0, 0x6}, &(0x7f0000000740)=ANY=[@ANYBLOB="1600"/22], &(0x7f0000000780)={0x20, 0x0, 0xfb, {0x0, 0x1}}, &(0x7f0000000a40)={0x78, 0x0, 0xfffffffffffffa82, {0x573, 0x7fff, 0x0, {0x5, 0x4, 0x63c6, 0x0, 0x1, 0x8, 0x3, 0x1, 0x2, 0x1000, 0x5, 0x0, 0x0, 0xfffffe00, 0x1}}}, &(0x7f0000000ac0)={0x90, 0xffffffffffffffda, 0x3, {0x5, 0x6, 0x2, 0x98c3, 0x6, 0x16d5, {0x5, 0x101, 0x100000000, 0x2, 0xd0, 0x6, 0x9, 0x80, 0x2, 0xc000, 0x100, 0xee00, 0xffffffffffffffff, 0x10000, 0x2}}}, &(0x7f0000000b80)={0x28, 0xfffffffffffffffe, 0x4, [{0x0, 0x400, 0x0, 0x5}]}, &(0x7f0000003340)=ANY=[@ANYBLOB="58010000feffffff010000000100000006000000000000000300000000000000810000000000000000100000000000000200000043958b370600000000000000090000000000000000000000000000008600000000000000020000000000000009f2ff000000000007000000803d0000550000000020000003000000510a0000e9f5fe674e1b2ab3b39407daad244579c544947a2966301b989a8a4eb79540b1f0f7d5e9c9e8de9ace04410c531a17bd419816c2d66b44ea4cecb7d019016f1eab88dc3e75a8a669a297fb92d427745595d70d536e3459e653ab33988baaa036c4914e5f877ef0872892f3a0914d00447c91969307e2c7f40ac5bc7f4428b1ee27bf83658ca190ac611bbba852bcd039a0cbc3875547b27d325bae116321fb051e03889cce30332ef70c03c11032ecf644bc5d079983818371b6e83c3e07be015d82d636d07e6d8d6f01f17f84c78a516c84", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ffffff7f0900000000000000000000000000000069000000000000000500000000000000aaaaaaaaaa000000010000000000000000000000000000000000000000000000ac7a000000000000050000000400000006000000000000000200000000000000fdffffffffffffff01000000000000000000010000000000b95a00000000000006000000090000000000000000c0000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0300000040000000000000000100000000000000ffffffffffffff7f0d000000810000002f6465762f6869647261772300000000"], &(0x7f0000003000)={0xa0, 0x0, 0x9, {{0x2, 0x1, 0x80000000, 0x3, 0x6, 0xfffffffc, {0x3, 0x6, 0xa, 0x0, 0xe572, 0x0, 0x4, 0x5bfa, 0x9b12a734, 0x2000, 0x95, 0x0, r7, 0x800, 0x400}}, {0x0, 0x1}}}, &(0x7f00000030c0)={0x20, 0x0, 0xa, {0x3, 0x4, 0xb2c}}, &(0x7f0000003140)={0x130, 0xfffffffffffffffe, 0x3ff, {0xfffffffffffffffe, 0x8, 0x0, '\x00', {0x20, 0x9, 0x2, 0x7ff, r8, r9, 0xa000, '\x00', 0x5, 0x2, 0xffff, 0x100, {0x9, 0xffffffc0}, {0xffffffffffffffff, 0x9}, {0x7fffffff, 0x5}, {0x656}, 0xd, 0x7432, 0x8, 0x4}}}}) syz_usb_control_io(r6, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r6, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000440)=ANY=[@ANYBLOB="406018d64253983845aa5fb8c17818a27863fa520b2178fc9c1284f263c2166a165ad4600dfe0f536cb1c20c890e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) (async) syz_usb_control_io$uac1(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x1c, r5, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c000}, 0x20002011) (async) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x1c, r5, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c000}, 0x20002011) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000e5", @ANYRES16=r4, @ANYBLOB="0100280000000000000002000000200001"], 0x34}}, 0x0) 2m17.88563695s ago: executing program 1 (id=1235): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = syz_clone(0xb21e0000, 0x0, 0xfe3f, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = fsopen(&(0x7f0000000040)='securityfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x81) 2m17.79638288s ago: executing program 1 (id=1236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f00000000c0)=0x4e0, 0x4) bind$nfc_llcp(r1, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20000}, 0x0) r2 = syz_usb_connect(0x0, 0x5e, &(0x7f0000000000)=ANY=[], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d61746368000000300002800800024000000001180003006c7200006c7200000001000000000100070000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) syz_usb_control_io$hid(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f00000000c0)=0x4e0, 0x4) (async) bind$nfc_llcp(r1, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) (async) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20000}, 0x0) (async) syz_usb_connect(0x0, 0x5e, &(0x7f0000000000)=ANY=[], 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d61746368000000300002800800024000000001180003006c7200006c7200000001000000000100070000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) 2m14.748131972s ago: executing program 1 (id=1255): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'veth1_vlan\x00', 0xc203}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="000086dd0000120000000020000060fc030000402c00fe8000000000000000000000000000aaff0200000000000000000000000000013a00000000000000020090780000d93f640000000f081120ff020000000000000000000000000001fc0100"/118], 0x76) 2m14.553264939s ago: executing program 1 (id=1259): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x8, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0x6, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x40009, 0x2, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x400003, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x81000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800203, 0x1fe, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x210002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120002, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x10, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0x200ffff, 0x3, 0x80, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x2, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x10, 0x0, 0x4, 0x5, 0xb19, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x20000) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r1, 0x5) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2m12.847962316s ago: executing program 1 (id=1275): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000024c0)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0xa, 0x0, 0x8d}, @mpls={[], @ipv6=@icmpv6={0xc, 0x6, "2c6eab", 0x9a, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x3, '\x00', {0x8, 0x6, "9ceb84", 0xfff, 0x88, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [], "24e94f1dd9c63c4739690ca7f51b00fc0bde28938b9727be6851cde871cd4e5095c69a2865d90b4db53dec56f5ec28b32bb8f360015110fe7586663955f18b659fe3db6e98637ade5b274e9fb839bbc4e209795aa5a074cb72743c0a9a8ba51ef8bc19e6d33bbd1184e8"}}}}}}, 0xd0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x30, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c841}, 0x20000010) r6 = fsmount(r3, 0x0, 0x0) fchdir(r6) r7 = open(&(0x7f0000000340)='./bus\x00', 0x14927e, 0x102) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r7, 0x0) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x4000000}, 0xc) 2m12.719303142s ago: executing program 1 (id=1276): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x1265, 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000001080)={r3, 0x10}, 0x8) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000459bb2405804037000000000000109021b0b09110000000904"], 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000000000070000040"]) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x408000, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) lstat(&(0x7f0000000100)='./file0\x00', 0x0) r7 = socket$inet6(0xa, 0x3, 0x3c) r8 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r8, 0x29, 0x3a, &(0x7f0000000040)=0x7, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x578}], 0x1) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000000)={0x48}) 1m57.654119932s ago: executing program 34 (id=1276): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x1265, 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000001080)={r3, 0x10}, 0x8) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000459bb2405804037000000000000109021b0b09110000000904"], 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000000000070000040"]) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x408000, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) lstat(&(0x7f0000000100)='./file0\x00', 0x0) r7 = socket$inet6(0xa, 0x3, 0x3c) r8 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r8, 0x29, 0x3a, &(0x7f0000000040)=0x7, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x578}], 0x1) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000000)={0x48}) 5.978034668s ago: executing program 6 (id=2137): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044004) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x9, 0xffffffff, 'syz0\x00', 0x8}, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000005e0001"], 0x20}}, 0x0) recvmmsg(r1, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000005c0)=""/260, 0x104}, {&(0x7f0000000000)=""/18, 0x12}, {&(0x7f0000000b40)=""/95, 0x5f}, {&(0x7f00000018c0)=""/4109, 0x100d}, {&(0x7f0000000bc0)=""/226, 0xe2}, {&(0x7f0000000f40)=""/218, 0xda}], 0x6}, 0x80000002}], 0x4, 0x40000000, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000040)={{0x2, 0xfffffffa}, {0x3, 0x1003ff}, 0x0, 0x8}) clock_adjtime(0x7, &(0x7f0000000080)={0x7, 0x9, 0x0, 0x0, 0x8, 0x7, 0x1, 0x83, 0xfffffffffffffc01, 0x8, 0xf, 0x5c, 0x8, 0x3, 0x8, 0x1, 0x80, 0x1, 0x800, 0x5, 0x150, 0x2, 0x9, 0xfffffffffffffffe, 0x0, 0x9}) 5.88690104s ago: executing program 6 (id=2138): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000080)={0x690, 0x240, 0x320, 0x280, 0x7, 0x18ffe78d, 0x0, 0x1, {0x101, 0x6}, {0xfffffffa, 0x3}, {0xc, 0xadcf}, {0x4, 0x9, 0x1}, 0x0, 0x100, 0x6, 0x1, 0x0, 0x3, 0x1, 0x2, 0x7, 0xf066, 0x2, 0x97f4, 0x20, 0x100, 0x1, 0x4}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'erspan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x1a, 0x2c040000, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) 5.627912364s ago: executing program 6 (id=2139): socket$key(0xf, 0x3, 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x2000000}) remap_file_pages(&(0x7f0000f4c000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000140), 0x2, 0x216d40) ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f0000000200)) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)=@mmap={0xff62, 0x7, 0x4, 0x800, 0x3, {0x77359400}, {0x5, 0x8, 0x3, 0x9, 0x45, 0x16, "c6ab37ba"}, 0x12, 0x1, {}, 0xfc60, 0x0, r3}) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r5 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000000100)) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f00000002c0)={0x3, 0x2, 0x26}) syz_usb_control_io$sierra_net(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x8010, r1, 0x88166000) 5.072111041s ago: executing program 2 (id=2141): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x810}, 0x20044000) recvmmsg$unix(r1, &(0x7f0000000a00), 0x0, 0x12040, 0x0) 5.057496269s ago: executing program 2 (id=2142): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x2, 0x4e25, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000140)="77779f61af5fc1612fa12199f82eda5afce1afe0e6fc119befd79c41f15e2c8f84687627ae442893a93911acfa9f36a068779d40a06850c1d87e81251df0242545b9e3fd7216fb986e8f3e4bed1e3ef646bbcb039018fdab7b3056680a251f52b5288b67ea80f22cb06f723f1dda8ff58c7103175402ef9369bca2c43bef31f6ae3bca1522fcec0e5b5f9c71ca7f56022d4577c357c06425dd0390c0794b7e5621ae18baf3b84786d8c1ed3a1b500589e4020e7242ea5a9963e745239d7d5ce8e80c4b7faeb7574b504eaac2372a08598818500725582c97504a4218c75b591cdf2e5de4a9cb709e81", 0xe9}, {&(0x7f0000000540)="27a3f1c6630092c5601f80477819f0b774cc318aefcb2b517869f4382b36dc1a52364943287a4f316071baeb2424289fe5e28c00ab0da878ff131b6561ba421700b8c7dc4267f9059446cc745579ae0c20c48467a040eaa4d8f22327736678fe87d6e137c5f32dff2ea316a4d57919f1a454d83520f2551926aa35e351da99aaa6e195c200e3b58ed430ecf8367036521a1461", 0x93}, {&(0x7f0000000240)="ba3bb2dbdbda", 0x6}], 0x3, &(0x7f00000002c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}}}], 0x20}, 0x4800) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1f1b"], 0x22) syz_io_uring_setup(0x1b49, &(0x7f0000000180)={0x0, 0xffffffff, 0x30c0, 0x1, 0x18b}, &(0x7f0000000100), &(0x7f0000000140)) 4.985697962s ago: executing program 2 (id=2143): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d00010000600209040010050300010009210000360122050009058103e0000c000709058e19"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r0, &(0x7f0000000380)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000040)={0x40, 0x2, 0x83, {0x83, 0x9, "1540e67aeeccfcb89d14ad6b0594b427ce23b3e4135fa3f5c75ccd04c6261ad8ce56300d0c2a8a279707568ee864e7a3ab1d5a7b572b624fbcc65111755d7f2e03b3d4885e755bf37d825c4630f546d0d6a9b94cffc863c31e8aaabdf0a93a0cb8052cd6818d2a97807aa517a441b0e6548a571eafcf547d0a7e0dafc86c751496"}}, &(0x7f0000000140)={0x0, 0x3, 0x8c, @string={0x8c, 0x3, "e13f71e9a2c82af7f1b81a0054915fef53ecc75f3f2a639f8a0bfed53297bb012406e26d9809a5c1e67ce841e42d444f6eba8be8e7b1c594549c77ce15c6478af5e2a07b3ca585f45c18c5081afac6e53773782356358ae76609f873c6e17df5e79db0d61ca01efe5f82f89648364fd08a1802a25881322b7eba149d38408fcffcf43189234e52699139"}}, &(0x7f0000000200)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x3, "7ddbf3ae"}, @main=@item_4={0x3, 0x0, 0x8, "b87c00dd"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0xf, 0x5c, 0x1, {0x22, 0x869}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000400)={0x0, 0xc, 0xd4, "5baeec2cffcf3c28594b89091cdbe0c510f29d57eb29a7123c53172795f80a9ca7f71019df7eb2c63d3803e8c0b093b16deb52dd43d8a29affa35be2662040a56f192b86a4c40e11cd56d5c0a2a17d071949c99693565a41f65eacbd6c6f24d21b2e2e09ec97a8ed24a9bdf532fa3aefb1f9c68f74a5c81609720bb359e913f6dc5de5fb0843d27ad52fe3d50544f8bb631956a2d7a8c0d33e9ab9fed56398d12f59e0a8c64eac3e9778bf43b9c85b186ea01ed48091f6e57fcd3e29316b7b956337faf31ae13fc28fb225ed7b997c162e7e6ebd"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000500)={0x20, 0x1, 0x69, "5361d43375200261f17b1deafb7e060fb5b122d639bba824197c9ebf4dbdc0f9637e0d9ce8ed4ed6deffec927cf76c4a7be8e49ce4e9945fdf3e31eaff94a92352414db285741703793100634f3baab4229b4077860954259cea8c6ccded2cc517b42d009ef3ac7401"}, &(0x7f0000000340)={0x20, 0x3, 0x1, 0x3}}) (async, rerun: 64) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 64) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) 4.163854017s ago: executing program 2 (id=2144): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2cffff00", @ANYRES16=r1, @ANYBLOB="010000000000000000000300000008000100", @ANYRES32=0x0, @ANYBLOB="080002000000000008000400ac1414bb"], 0x2c}}, 0x0) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x52}}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, 0x5f) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) (async) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x9, 0x1, 0x10000, 0x4, 0x5, 0xcc7, 0x0, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0xf4, 0x0, 0x1a44b, 0x3, 0x40000003, 0x89, 0xcaa7, 0x4000, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0x5, 0x2000]}) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d3000000000000008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040800) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r5], 0x448}}, 0x0) sendmmsg$inet(r5, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r8, 0x3b88, 0x0) (async) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r8, 0x3b72, &(0x7f0000000300)=ANY=[@ANYBLOB="180000c730f507752344c30000d8bb873195af222965b900"]) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (rerun: 32) 3.325747776s ago: executing program 2 (id=2145): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x181000) fcntl$setlease(r1, 0x400, 0xf2d35e7ce30696e1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan1\x00'}) syz_usb_connect(0x2, 0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bd3619204433f0224def010203010902400001020000000904"], 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) socket$kcm(0x10, 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000000)={0x0, 0x2}) preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/223, 0xdf}], 0x2, 0x0, 0xfffffffc) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008001b0007000200060001c00200bc24eab556a705251e618294ff4051f60a84c9f4d4938037e786a6d000106b062e585e4a85dc9b1335d1", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) sendfile(r2, r3, 0x0, 0x8000002b) 2.912077408s ago: executing program 6 (id=2147): move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000000/0x800000)=nil], 0x0, &(0x7f0000000240), 0x2) (async) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x17e0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0xea, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x20, 0x0, 0x3}}}}}]}}]}}, 0x0) (async) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000000)=0x3, 0x4, 0x4) 1.790628777s ago: executing program 2 (id=2155): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="00000003000010"], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff}, {@in6=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x1}, {}, {}, 0x70bd27, 0x3502, 0x2}, [@etimer_thresh={0x8, 0xc, 0x6}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x144}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1.607850519s ago: executing program 6 (id=2156): r0 = socket(0xa, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f4070009040081000000000100000000000008", 0x1d) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x17b0, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x12, 0x2a, [@supported_rates={0x1, 0x6, [{0x9, 0x1}, {0x18}, {0x60}, {0x1b}, {0xc}, {0xc}]}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x0, 0x7c, 0x2}}]}, @NL80211_ATTR_FTM_RESPONDER={0x1488, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xdc, 0x3, "2e5027e689561df69990c7621338d1d426a070dcdbf80b6e209d1890f4145d11a4621987bf73ab101161eb44bfb1e3bedd8c793cc38ba848db31b74adf7937a08ee661f0321cdd11114b981a259bd1e1d352c6daa56f75b3da136df367c6193897b33a665207a95936b17c9684aebaf956070881dbe50b9ff2f16d08ec088d3068e927b4426df6f471abcc72c134bd589d0ed46bbdaabe81aa0a10f1956422bfe44fd537e0b8da45beb952fcbb059b815ea7dd5608391f18f06bf76722aed41661a486e78e2f0c7c2bcb364577699649bd01a5810afdb7f8"}, @NL80211_FTM_RESP_ATTR_LCI={0xac, 0x2, "142aaeed5eef13c1d4666d0f1a399a7df2280ec31f8edbe413526e27ae206196b9c7b4317dfc5856019e2f90a33aeaafee38fd41a6296be1a4b6819ebbb3e34f0340584ba58efe498de40b3c803bd538b7a3be73d1be00af52ba34215b41ecb37677d398223c4c5205bd41947061dfc7464cfbc68324f249868051cf316a5791fd70c502e930773a2bc4bb458c3306c9eb200abce1a5447631b41f498f5320f91a7a5cb2c726cad1"}, @NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xa6, 0x3, "6fe98d79de19e8dd05ef471318b3ce670551ba264f440cd38d1e2c2b0032aaa778835af2eccdd111d7d405d9ca284e3549bd147c221fda3982b4d472a3cb20f696ac859d068c3facbdc9a5b88ec3e0ba375a88cda31f6a5c9841a89030e74fc105f6867c631bfcddb7571c2fa23a9211eb8e5f1603f76f29b41c6bf1827c63e4b99b95c672de8855523527b138232adcd31c35e61f86755e27d42c385051f97702f5"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xb1, 0x3, "a7b1f590a8c8cbef9472275fc8245cb9bfda54ef3e4c6933c171866290bfc43ca4b113351f0e65406f20ed4c629cd29ad58da6ff809a8fdf9d30e3fad472ce81353839623c977dfeee725fc63afccc8613bf77faa14ca7d868b6fe88b5dd87bf27ca04b6cf779a493342d2915199024cc516712a098b61bc050110512122bae4db2d09fad96e8b79d27c5bab41abb019c67aaaf71ed5dbf5d3f556066ade177c8e0a3ed909b234ae0bde85ac5f"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xe1, 0x3, "ceabab910cd2bb803150cb8c1c769df3328ded621c9392afdf039df22416ba79ea7a29dadb700ef3e84c7110c4079e216940e1cdcb55831cbbba80af4c9172f479390a4988a9fe3cf04690d21c3e0a09916a0e09d3ebefc36006cba2d5d77dd5ff312d2c7cb8ad6d8b0754d8d61394710c9f469c891b732d8424700d5920d7100782244681d72cf214004782e009e7eea344301511fe3af63ac3ec2a3f45b4cc38d5dffeae989f99ef806a80457ef0dd386f5e285cde6d0258c466af23e361dfe6e729c9bdc1430e3fbb724d706f15130caefd0c13a422468c39536064"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x65, 0x3, "eda0810007321feb3ce1c9a6357176f3290259866fc4e1b52755e4198eae372f54a498985863c5475175be2a1ef5817912975e8de2cf765c9e193ba2c9f4643895daa0ed849cacd4afc9f91b934313c85e2399858b160827aa9379db11c53560d7"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4c, 0x3, "fa2d6d15362b823c1ac581e332ccdf10b0ed6a5de79a3a78b9cf0fca726c267b03a95a2df4ac783ac43e170a18c37182777e8cf37f85f388032b5525b13a9f62acc6608f4789482b"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x37, 0x7f, [@supported_rates={0x1, 0x1, [{0x6, 0x1}]}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x9, 0xf0, @device_b, 0x65abadbc, @value=@device_b, 0x7, 0x1000, @broadcast, 0x7}}, @supported_rates={0x1, 0x1, [{0x3, 0x1}]}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x4, 0xb3}}]}, @NL80211_ATTR_BEACON_HEAD={0x2c0, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x8}, @broadcast, @device_a, @random="e76b29a9fcc8", {0x9, 0x846}}, 0x6, @random=0x2, 0x40, @void, @void, @val={0x3, 0x1, 0x9d}, @val={0x4, 0x6, {0x7f, 0x84, 0xa, 0x1}}, @void, @val={0x5, 0x87, {0x16, 0xbf, 0x10, "6d28bf14a6de26a1149faf25fd000fe2923c862b15e9c6d555ce80d9416df52012f957d283c0c3537535aa19d9fc5aa36d92e4b4bec78a4cfe119407ca0a53d8c2aa714fc63b77a12c1d873f8e4b07b6ecb337d591de7e622162ad5dfbe9f40225e2c32be5fe18223bce4165d1c38fb85e6e160aecb959c3bc4fdbe43ac1e0072a481b4a"}}, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0, 0xdf, 0x41}}, @val={0x76, 0x6, {0x5c, 0x4, 0x31, 0x2}}, [{0xdd, 0x7e, "eb49cb0ea87a9a604dc7e92e873a97e98650406585251f33d97849b60805d1457e60bdb576502516fe44733621dba8eaf2ef00383834b01409378c25b5613cda1e27acba475bfb65b5ef4d7f0f8efe05fdde18f618dce5b90d0b90d7f0cb4ff93f441c0edb0673f18656811cd765fc3f753be043279f02ffcd7f3579a6b7"}, {0xdd, 0x60, "828d77875e989b4ca1c885710ab52d29c524556c4e78e35e055e07234c2a2aae976cd457863147e1b5a1fd39568fddc93bd2a7d3b87a0de524d0ef51c21e9afee9c8d0480fcf4dc85c2ea4614e47fec505f1276de95a668772286d37194132e2"}, {0xdd, 0x1a, "3a6158f9fa202ce73129a254da28642ba3152e9f5ca323d4dff9"}, {0xdd, 0xeb, "a871d5a96ec7ad54d61f6a967122898cbdc253f513a4445d155b00bab790bf6b688558fdf403222509bac4fd4da273a96e13250c71e9eb5e5b32e97ac4ef5b04e1ad325128c0a60829dac5c36d16565189368ffc44e37bfd6eb85ef80392d433cb05b0337c3f0164a9d8f4df41e577211a197faf5558e3b5f47e40317e4423e18adb906925a012e260bbbba4bba0215bbc510e51c9cb8dbb5e9b1f58f5ca78809efbce6f464ad386cb9743bbe213b577aca900dc22918420a35f124d0092067ff55959e7610382c3d1d808c4e3a19dfc1f4b752e43f8c44fee3ef1d0464c5f2100d4338c3eadea1fe5e13f"}]}}]}, 0x17b0}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x4}}}, 0x108) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000100)=0x1c, 0x80800) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000190001000000007c890000001d01f4fbcd5b0b8008002100", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x804) 1.501556704s ago: executing program 6 (id=2157): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000000c0)=0x1, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x0) 863.032417ms ago: executing program 0 (id=2161): r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000080)) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f00000000c0)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000100)={0x3}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x10a, 0x3}) r3 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x100000) setsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000200)=0x3, 0x4) r4 = dup2(r2, r1) lseek(r1, 0x9, 0x3) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000240)={0x8, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000280)={r5, 0xf1}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000300)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000340)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000380)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r6, 0xc02864c3, &(0x7f0000000400)={&(0x7f00000003c0)=[r7, r8, r9, 0x0], 0x9, 0x4, 0x7}) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000440)) openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x10b600, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, 0x0, 0x120, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x3, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x200c844}, 0x4004800) semget$private(0x0, 0x2, 0x15) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f00000005c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000640)={0x2, &(0x7f0000000600)=[{}, {0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r10, 0x40086424, &(0x7f0000000680)={r11, 0x2}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f00000006c0)={0x1, 'bridge_slave_1\x00', {}, 0xff0b}) ioctl$SNDRV_TIMER_IOCTL_CREATE(r6, 0xc02054a5, &(0x7f0000000700)={0x10001, r10, 'id1\x00'}) ioctl$IMSETDEVNAME(r12, 0x80184947, &(0x7f0000000780)={0x4, 'syz1\x00'}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r10, 0xc00c642d, &(0x7f00000007c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r13, 0xc0086420, &(0x7f0000000800)) 822.558144ms ago: executing program 0 (id=2162): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r2 = socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES16=r2], 0x20}}, 0x40816) 771.37868ms ago: executing program 5 (id=2163): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) pwrite64(r0, &(0x7f0000000a00)="e67ab166972ce298f4681ef5c755f60473b17b7887d68440dd9005bc69f6eeaeec2d13731c56a864fa45a465e64de6855c66e7190ed911b5d36f3db423da49146adf5742e2d98e81963fdb3911c91d94a7327708bacf3aeb1d10471980e3132947b42b079a9a09a3c48e452ca2446aa1569b8e1e028e6ebbcdd573302a47511455505e04f75899cb3edd2fd2073319dc1a43074fe7d24e00", 0x98, 0xef8d) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000010000000f000000080034000400000008000300", @ANYRES32=r3, @ANYBLOB="05003300f4"], 0x2c}}, 0x80) setfsuid(0x0) setfsuid(0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000100)={0x1, 0xee04}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r5, r5, 0x0) mount$pvfs2(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0xfffffffffffffffe, 0x20, &(0x7f0000000240)=ANY=[@ANYBLOB="2d2b292c202c76657468315f746f5f627269646765002c2c76657468315f746f5f627269646765002c2c76657468315f746f5f627269646765002c239328262c212e2c76657468315f746f5f627269646765002c657569643e", @ANYRESDEC=r5, @ANYBLOB="2c61707072616973655fea747970653d696d617369672c"]) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x81, 0xfd, 0x2, 0x100}, {0x6, 0x6, 0x6, 0x3}]}, 0x10) r6 = fsopen(&(0x7f0000000300)='selinuxfs\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r7, 0x8004e500, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r6, 0x0, 0x74) fchdir(r8) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000), 0x4) r9 = syz_open_dev$video4linux(&(0x7f0000000000), 0x200008f, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r9, 0xc040563e, &(0x7f0000000100)={0x1, 0x0, 0x102}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'dvmrp0\x00', 0x2000}) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r11, 0x0, 0x17, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_int(r11, 0x0, 0x17, &(0x7f0000000000)=0x3f7, 0x4) recvfrom$unix(r10, &(0x7f00000024c0)=""/4107, 0x100b, 0xec003bde627520fa, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) 723.751516ms ago: executing program 0 (id=2164): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000003c40)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xfe}, 0x6, 0x3}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000040)="817f", 0x2}, {&(0x7f0000000240)="7d94ad212f91", 0x6}], 0x2}, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x268, 0x1, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFQA_CT={0x1c0, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0xc4, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}]}, @CTA_NAT_DST={0x4c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x10}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x34, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1400}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_TUPLE_REPLY={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2f}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_LABELS_MASK={0xc, 0x17, [0xe, 0x8000]}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc}}, @NFQA_CT={0x88, 0xb, 0x0, 0x1, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xd}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x9b4}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x18}]}, @CTA_TUPLE_MASTER={0x18, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @empty}}}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}]}]}, 0x268}}, 0x4080) 631.992157ms ago: executing program 0 (id=2165): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) unshare(0x62040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x1000) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(0xffffffffffffffff, 0x7b3, &(0x7f0000000240)) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000000) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x1004}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000e80)=""/4083, 0xff3}, {&(0x7f0000000d80)=""/252, 0xfc}, {&(0x7f00000004c0)=""/250, 0xfa}, {&(0x7f0000000000)=""/141, 0x8d}, {&(0x7f00000000c0)=""/125, 0x7d}], 0x5}, 0xe68e}], 0x4, 0x10100, 0x0) (async) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x80100, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 629.226723ms ago: executing program 5 (id=2166): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000008004d564b"]) 475.954704ms ago: executing program 5 (id=2167): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xb}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008050}, 0x4010) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x2, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x9, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x43084) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x34324142}}) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f00000002c0)=@generic={0x0, 0x6}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r6, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r4, 0x3b8d, &(0x7f0000000000)={0x20, r8, &(0x7f00000003c0)=[{0x0, 0x2}, {0x0, 0x1}], 0xdeadbeef, 0x8, 0x2}) ioctl$sock_proto_private(r2, 0x89e0, &(0x7f0000001080)) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='adfs\x00', 0x10400, 0x0) 370.363814ms ago: executing program 5 (id=2168): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x810}, 0x20044000) recvmmsg$unix(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12040, 0x0) 250.467076ms ago: executing program 5 (id=2169): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4800) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1f1b"], 0x22) syz_io_uring_setup(0x1b49, &(0x7f0000000180)={0x0, 0xffffffff, 0x30c0, 0x1, 0x18b}, &(0x7f0000000100), &(0x7f0000000140)) 214.967228ms ago: executing program 5 (id=2170): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 120.103856ms ago: executing program 0 (id=2171): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r5, 0x4b32, 0xf1a) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x24, r2, 0x401, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x10) (async) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x24, r2, 0x401, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, r7, 0x105, 0xffffffff, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac0b, 0xfac05, 0x5]}]]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) (async) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, r7, 0x105, 0xffffffff, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac0b, 0xfac05, 0x5]}]]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000340)=0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) brk(0x200000ffa000) ioprio_set$uid(0x3, 0x0, 0x0) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x40, r9, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x67, 0x1c}}}}, [@NL80211_ATTR_KEY_SEQ={0x9, 0xa, "1806bb7ecb"}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "66f1d4eb71742c"}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x800) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) 0s ago: executing program 0 (id=2172): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e25, 0x0, @mcast1, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x10008001) sendmsg$inet6(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000840)="e5f1", 0x2}], 0x1}, 0x20000044) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00220500000093fd1759"], 0x0}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat2(r2, &(0x7f0000000080)='./cgroup/../file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x10}, 0x18) bind$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x100, 0x1}, 0x20) kernel console output (not intermixed with test programs): 396.604468][ T43] usbtest 7-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 396.641993][ T43] usb 7-1: USB disconnect, device number 23 [ 396.834432][ T5946] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 396.944683][ T43] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 396.970638][ T5928] uclogic 0003:5543:0781.001E: item fetching failed at offset 1/5 [ 396.977986][T11462] overlayfs: failed to clone upperpath [ 396.982163][ T5928] uclogic 0003:5543:0781.001E: parse failed [ 396.990180][ T5928] uclogic 0003:5543:0781.001E: probe with driver uclogic failed with error -22 [ 397.003125][ T5946] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 397.023180][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.039443][ T5946] usb 3-1: Product: syz [ 397.043816][ T5946] usb 3-1: Manufacturer: syz [ 397.049782][ T5946] usb 3-1: SerialNumber: syz [ 397.052263][T11464] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 397.073729][T11464] overlay: ./file1 is not a directory [ 397.074648][ T43] usb 7-1: device descriptor read/64, error -71 [ 397.165051][ T24] usb 6-1: USB disconnect, device number 33 [ 397.324596][ T43] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 397.454476][ T43] usb 7-1: device descriptor read/64, error -71 [ 397.566552][ T43] usb usb7-port1: attempt power cycle [ 397.904484][ T43] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 397.926586][ T43] usb 7-1: device descriptor read/8, error -71 [ 397.964451][ T24] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 398.094876][ T24] usb 6-1: device descriptor read/64, error -71 [ 398.164491][ T43] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 398.185442][ T43] usb 7-1: device descriptor read/8, error -71 [ 398.296084][ T43] usb usb7-port1: unable to enumerate USB device [ 398.334481][ T24] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 398.472923][ T5946] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 398.485316][ T24] usb 6-1: device descriptor read/64, error -71 [ 398.594890][ T24] usb usb6-port1: attempt power cycle [ 398.693028][ T5946] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO [ 398.709519][ T5946] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 398.723625][ T5946] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 398.733724][ T5946] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 398.744055][ T5946] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 398.759495][ T5946] usb 3-1: USB disconnect, device number 16 [ 398.935241][ T24] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 398.955145][ T24] usb 6-1: device descriptor read/8, error -71 [ 399.194492][ T24] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 399.215171][ T24] usb 6-1: device descriptor read/8, error -71 [ 399.325454][ T24] usb usb6-port1: unable to enumerate USB device [ 399.496750][ T5946] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 399.667852][ T5946] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 399.691737][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.700558][ T5946] usb 3-1: Product: syz [ 399.705095][ T5946] usb 3-1: Manufacturer: syz [ 399.709779][ T5946] usb 3-1: SerialNumber: syz [ 399.720376][ T5946] usb 3-1: config 0 descriptor?? [ 399.946769][ T24] usb 3-1: USB disconnect, device number 17 [ 400.104489][ T5946] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 400.220397][T11484] overlayfs: failed to clone lowerpath [ 400.229729][T11484] overlayfs: failed to clone lowerpath [ 400.254419][ T5946] usb 7-1: Using ep0 maxpacket: 8 [ 400.261823][ T5946] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 400.278087][ T5946] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 400.283984][T11489] overlayfs: failed to clone upperpath [ 400.287410][ T5946] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 400.303467][ T5946] usb 7-1: Product: syz [ 400.310373][ T5946] usb 7-1: Manufacturer: syz [ 400.316501][ T5946] usb 7-1: SerialNumber: syz [ 400.385846][ T5928] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 400.526059][ T5946] usb 7-1: Handspring Visor / Palm OS: No valid connect info available [ 400.540995][ T5946] usb 7-1: Handspring Visor / Palm OS: port 83, is for unknown use [ 400.551202][ T5946] usb 7-1: Handspring Visor / Palm OS: port 105, is for unknown use [ 400.554511][ T5928] usb 3-1: Using ep0 maxpacket: 8 [ 400.560579][ T5946] usb 7-1: Handspring Visor / Palm OS: Number of ports: 2 [ 400.573137][ T5928] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 400.588779][ T5928] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 400.600090][ T5928] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 400.614622][ T5928] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 400.638178][ T5928] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 400.656932][ T5928] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 400.672051][ T5928] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 400.684055][ T5928] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 400.702999][ T5928] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 400.714184][ T5928] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 400.725673][ T5928] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 400.728263][T11479] gfs2: path_lookup on c::: returned error -2 [ 400.735959][ T5928] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 400.763868][ T5928] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 400.774930][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.783752][ T5928] usb 3-1: Product: syz [ 400.795389][ T5928] usb 3-1: Manufacturer: syz [ 400.800180][ T5928] usb 3-1: SerialNumber: syz [ 400.806309][T11479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.835706][T11479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.875352][ T5946] usb 7-1: palm_os_3_probe - error -110 getting bytes available request [ 400.901985][ T5946] visor 7-1:1.0: Handspring Visor / Palm OS converter detected [ 400.902101][T11495] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1636'. [ 400.924561][T11495] netlink: 'syz.5.1636': attribute type 3 has an invalid length. [ 400.930055][ T5946] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 401.013108][ T5946] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 401.056472][ T5946] usb 7-1: USB disconnect, device number 28 [ 401.096449][T11499] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1638'. [ 401.151159][ T5946] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 401.158853][T11501] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1638'. [ 401.187773][ T5946] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 401.208741][ T5946] visor 7-1:1.0: device disconnected [ 401.444851][ T30] audit: type=1326 audit(1757748481.471:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11502 comm="syz.5.1639" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30fef8eba9 code=0x0 [ 401.466612][ C0] vkms_vblank_simulate: vblank timer overrun [ 401.641241][ T5928] adutux 3-1:168.0: interrupt endpoints not found [ 401.659106][ T5928] usb 3-1: USB disconnect, device number 18 [ 401.874071][T11489] kexec: Could not allocate control_code_buffer [ 402.018621][T11519] netlink: 'syz.0.1645': attribute type 10 has an invalid length. [ 402.026728][T11519] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1645'. [ 402.037835][ T5928] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 402.045087][ T24] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 402.194578][ T5928] usb 3-1: Using ep0 maxpacket: 16 [ 402.201181][ T5928] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 402.209729][ T5928] usb 3-1: config 0 has no interface number 0 [ 402.214604][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 402.223358][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.223445][ T5928] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 402.235052][ T24] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 402.249598][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.252453][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.264059][ T5928] usb 3-1: Product: syz [ 402.271139][ T24] usb 7-1: config 0 descriptor?? [ 402.274706][ T5928] usb 3-1: Manufacturer: syz [ 402.283442][ T5928] usb 3-1: SerialNumber: syz [ 402.298394][ T24] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 402.315469][ T5928] usb 3-1: config 0 descriptor?? [ 402.331925][ T5928] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 402.498426][T11511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.511670][T11511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.563785][T11527] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 402.579835][T11527] Error validating options; rc = [-22] [ 402.747309][T11511] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1641'. [ 402.815201][ T5928] gspca_spca1528: reg_w err -71 [ 402.828806][T11538] overlayfs: failed to clone upperpath [ 402.835441][ T5928] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 402.848162][ T5928] usb 3-1: USB disconnect, device number 19 [ 402.981615][ T24] gspca_vc032x: reg_w err -71 [ 402.988092][ T24] vc032x 7-1:0.0: probe with driver vc032x failed with error -71 [ 402.994464][ T929] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 402.999986][ T24] usb 7-1: USB disconnect, device number 29 [ 403.134749][ T929] usb 6-1: device descriptor read/64, error -71 [ 403.303442][T11557] netlink: 'syz.0.1656': attribute type 4 has an invalid length. [ 403.396137][ T929] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 403.438031][T11561] sock: sock_set_timeout: `syz.2.1658' (pid 11561) tries to set negative timeout [ 403.484042][T11564] overlayfs: failed to clone upperpath [ 403.534437][ T929] usb 6-1: device descriptor read/64, error -71 [ 403.655858][ T929] usb usb6-port1: attempt power cycle [ 403.864422][ T5928] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 404.004444][ T929] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 404.014540][ T5928] usb 3-1: Using ep0 maxpacket: 32 [ 404.021750][ T5928] usb 3-1: config 169 has an invalid interface number: 113 but max is 2 [ 404.030265][ T5928] usb 3-1: config 169 has an invalid interface number: 132 but max is 2 [ 404.039505][ T929] usb 6-1: device descriptor read/8, error -71 [ 404.045777][ T5928] usb 3-1: config 169 contains an unexpected descriptor of type 0x2, skipping [ 404.054746][ T5928] usb 3-1: config 169 contains an unexpected descriptor of type 0x1, skipping [ 404.063899][ T5928] usb 3-1: config 169 has an invalid interface number: 98 but max is 2 [ 404.072310][ T5928] usb 3-1: config 169 has no interface number 0 [ 404.078684][ T5928] usb 3-1: config 169 has no interface number 1 [ 404.085082][ T5928] usb 3-1: config 169 has no interface number 2 [ 404.091398][ T5928] usb 3-1: config 169 interface 113 altsetting 130 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 404.103102][ T5928] usb 3-1: config 169 interface 113 altsetting 130 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 404.114537][ T5928] usb 3-1: config 169 interface 113 altsetting 130 has a duplicate endpoint with address 0x9, skipping [ 404.129774][ T5928] usb 3-1: config 169 interface 113 altsetting 130 has a duplicate endpoint with address 0x9, skipping [ 404.142128][ T5928] usb 3-1: config 169 interface 113 altsetting 130 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 404.154003][ T5928] usb 3-1: config 169 interface 113 altsetting 130 has a duplicate endpoint with address 0xF, skipping [ 404.166202][ T5928] usb 3-1: config 169 interface 132 altsetting 6 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 404.181790][ T5928] usb 3-1: config 169 interface 132 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 404.192988][ T5928] usb 3-1: config 169 interface 132 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 404.211189][ T5928] usb 3-1: config 169 interface 132 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 404.222219][ T5928] usb 3-1: config 169 interface 132 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 404.235038][ T5928] usb 3-1: config 169 interface 132 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 404.247409][ T5928] usb 3-1: config 169 interface 132 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 404.258628][ T5928] usb 3-1: config 169 interface 132 altsetting 6 has an endpoint descriptor with address 0x1B, changing to 0xB [ 404.270802][ T5928] usb 3-1: config 169 interface 132 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 404.281752][ T5928] usb 3-1: config 169 interface 132 altsetting 6 has an endpoint descriptor with address 0x19, changing to 0x9 [ 404.293587][ T5928] usb 3-1: config 169 interface 132 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 404.304764][ T929] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 404.312425][ T5928] usb 3-1: config 169 interface 132 altsetting 6 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 404.324866][ T5928] usb 3-1: config 169 interface 132 altsetting 6 has a duplicate endpoint with address 0x8B, skipping [ 404.335938][ T5928] usb 3-1: config 169 interface 132 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 404.347784][ T5928] usb 3-1: config 169 interface 132 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 404.358787][ T5928] usb 3-1: config 169 interface 132 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 404.370178][ T929] usb 6-1: device descriptor read/8, error -71 [ 404.376438][ T5928] usb 3-1: config 169 interface 132 altsetting 6 has 17 endpoint descriptors, different from the interface descriptor's value: 15 [ 404.390084][ T5928] usb 3-1: config 169 interface 98 altsetting 162 has a duplicate endpoint with address 0x6, skipping [ 404.401240][ T5928] usb 3-1: config 169 interface 98 altsetting 162 has a duplicate endpoint with address 0x8, skipping [ 404.412447][ T5928] usb 3-1: config 169 interface 98 altsetting 162 has a duplicate endpoint with address 0xE, skipping [ 404.423436][ T5928] usb 3-1: config 169 interface 98 altsetting 162 has a duplicate endpoint with address 0xB, skipping [ 404.434682][ T5928] usb 3-1: config 169 interface 98 altsetting 162 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 404.446837][ T5928] usb 3-1: config 169 interface 98 altsetting 162 has a duplicate endpoint with address 0x7, skipping [ 404.457885][ T5928] usb 3-1: config 169 interface 98 altsetting 162 has a duplicate endpoint with address 0x8, skipping [ 404.469375][ T5928] usb 3-1: config 169 interface 113 has no altsetting 0 [ 404.476397][ T5928] usb 3-1: config 169 interface 132 has no altsetting 0 [ 404.483368][ T5928] usb 3-1: config 169 interface 98 has no altsetting 0 [ 404.490555][ T929] usb usb6-port1: unable to enumerate USB device [ 404.499517][ T5928] usb 3-1: New USB device found, idVendor=10c4, idProduct=8414, bcdDevice=45.5c [ 404.508622][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.516678][ T5928] usb 3-1: Product: â ‰ [ 404.520845][ T5928] usb 3-1: Manufacturer: У [ 404.525475][ T5928] usb 3-1: SerialNumber: à° [ 404.739207][T11569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.753426][T11569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.780422][ T5928] cp210x 3-1:169.113: cp210x converter detected [ 404.787627][ T5928] cp210x 3-1:169.113: failed to get vendor val 0x370b size 1: -71 [ 404.797741][ T5928] cp210x 3-1:169.113: querying part number failed [ 404.803138][T11585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1668'. [ 404.807863][ T5928] usb 3-1: cp210x converter now attached to ttyUSB0 [ 404.818086][T11585] overlayfs: failed to clone upperpath [ 404.832735][ T5928] cp210x 3-1:169.132: cp210x converter detected [ 404.840225][ T5928] cp210x 3-1:169.132: failed to get vendor val 0x370b size 1: -71 [ 404.850500][ T5928] cp210x 3-1:169.132: querying part number failed [ 404.859881][ T5928] usb 3-1: cp210x converter now attached to ttyUSB1 [ 404.878036][ T5928] cp210x 3-1:169.98: cp210x converter detected [ 404.887794][ T5928] cp210x 3-1:169.98: failed to get vendor val 0x370b size 1: -71 [ 404.895579][ T5928] cp210x 3-1:169.98: querying part number failed [ 404.904105][ T5928] usb 3-1: cp210x converter now attached to ttyUSB2 [ 404.923193][ T5928] usb 3-1: USB disconnect, device number 20 [ 404.935541][ T24] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 404.965051][ T5928] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 404.973755][ T5928] cp210x 3-1:169.113: device disconnected [ 404.990311][ T5928] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 404.998814][ T5928] cp210x 3-1:169.132: device disconnected [ 405.008241][ T5928] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 405.016674][ T5928] cp210x 3-1:169.98: device disconnected [ 405.114859][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 405.122952][ T24] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 405.132058][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.140117][ T24] usb 7-1: Product: syz [ 405.144276][ T24] usb 7-1: Manufacturer: syz [ 405.148901][ T24] usb 7-1: SerialNumber: syz [ 405.155737][ T24] usb 7-1: config 0 descriptor?? [ 405.166496][ T24] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 405.783295][T11609] netlink: 'syz.0.1675': attribute type 1 has an invalid length. [ 405.806273][ T24] gspca_stk1135: reg_w 0x7 err -71 [ 405.822846][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 405.829180][T11608] netlink: 'syz.5.1676': attribute type 7 has an invalid length. [ 405.829221][T11608] netlink: 'syz.5.1676': attribute type 1 has an invalid length. [ 405.855962][ T5953] IPVS: starting estimator thread 0... [ 405.871734][ T24] gspca_stk1135: Sensor write failed [ 405.882196][T11612] program syz.6.1677 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 405.895097][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 405.901918][ T24] gspca_stk1135: Sensor write failed [ 405.909040][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 405.939368][ T24] gspca_stk1135: Sensor read failed [ 405.954456][T11610] IPVS: using max 28 ests per chain, 67200 per kthread [ 405.977333][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 406.024461][ T24] gspca_stk1135: Sensor read failed [ 406.029702][ T24] gspca_stk1135: Detected sensor type unknown (0x0) [ 406.053838][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 406.067615][ T24] gspca_stk1135: Sensor read failed [ 406.077747][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 406.093346][ T24] gspca_stk1135: Sensor read failed [ 406.112211][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 406.119036][ T24] gspca_stk1135: Sensor write failed [ 406.139057][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 406.172698][ T24] gspca_stk1135: Sensor write failed [ 406.188644][ T24] stk1135 7-1:0.0: probe with driver stk1135 failed with error -71 [ 406.228898][ T24] usb 7-1: USB disconnect, device number 30 [ 406.324573][ T3657] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 406.411480][T11629] overlayfs: failed to clone upperpath [ 406.484612][ T3657] usb 6-1: Using ep0 maxpacket: 16 [ 406.510057][ T3657] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.523526][ T3657] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.544865][ T3657] usb 6-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.bf [ 406.559099][T11626] syz.2.1681 (11626): drop_caches: 2 [ 406.564740][ T3657] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.567368][ T3657] usb 6-1: config 0 descriptor?? [ 406.636207][ T30] audit: type=1326 audit(1757748486.671:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11633 comm="syz.0.1684" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7956b8eba9 code=0x0 [ 406.738965][T11623] netlink: 'syz.6.1680': attribute type 10 has an invalid length. [ 406.753748][T11623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.764962][T11623] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 407.031411][ T3657] usbhid 6-1:0.0: can't add hid device: -71 [ 407.037559][ T3657] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 407.055547][ T3657] usb 6-1: USB disconnect, device number 42 [ 407.164522][ T5953] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 407.326056][ T5953] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 407.334778][ T5953] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.345945][ T5953] usb 7-1: config 0 has no interface number 0 [ 407.352148][ T5953] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 407.363335][ T5953] usb 7-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 407.375729][ T5953] usb 7-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 407.391834][ T5953] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 407.401064][ T5953] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.409356][ T5928] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 407.417819][ T5953] usb 7-1: Product: syz [ 407.421984][ T5953] usb 7-1: Manufacturer: syz [ 407.426832][ T5953] usb 7-1: SerialNumber: syz [ 407.434155][ T5953] usb 7-1: config 0 descriptor?? [ 407.443148][ T5953] cyberjack 7-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 407.453150][ T5953] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 407.463775][ T5953] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 407.521894][T11645] netlink: 9892 bytes leftover after parsing attributes in process `syz.0.1688'. [ 407.627062][ T5928] usb 3-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 407.636874][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 407.649281][ T5928] usb 3-1: Product: syz [ 407.653498][ T5928] usb 3-1: SerialNumber: syz [ 407.688571][ T5928] usb 3-1: config 0 descriptor?? [ 407.848946][T11638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.874933][T11638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.919226][ T5928] ldusb 3-1:0.0: Interrupt in endpoint not found [ 407.944923][ T5928] usb 3-1: USB disconnect, device number 21 [ 407.960417][ T5877] usb 7-1: USB disconnect, device number 31 [ 407.979253][ T5877] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 407.993870][ T5877] cyberjack 7-1:0.69: device disconnected [ 408.134587][ T3657] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 408.294581][ T3657] usb 6-1: Using ep0 maxpacket: 32 [ 408.301452][ T3657] usb 6-1: config 4 has an invalid interface number: 128 but max is 0 [ 408.309687][ T3657] usb 6-1: config 4 has no interface number 0 [ 408.315859][ T3657] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.326957][ T3657] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.337873][ T3657] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 408.346979][ T3657] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.362384][ T3657] hub 6-1:4.128: USB hub found [ 408.579939][ T3657] hub 6-1:4.128: 2 ports detected [ 408.592364][ T3657] hub 6-1:4.128: Using single TT (err -22) [ 408.783113][ T3657] hub 6-1:4.128: hub_hub_status failed (err = -71) [ 408.792806][ T3657] hub 6-1:4.128: config failed, can't get hub status (err -71) [ 408.849764][ T3657] usb 6-1: USB disconnect, device number 43 [ 408.868675][T11692] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 408.968115][T11694] lo speed is unknown, defaulting to 1000 [ 409.007662][ T5928] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 409.144436][ T5928] usb 3-1: device descriptor read/64, error -71 [ 409.224462][ T24] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 409.379307][ T24] usb 7-1: config index 0 descriptor too short (expected 256, got 36) [ 409.394461][ T5928] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 409.396229][ T24] usb 7-1: config 0 has too many interfaces: 62, using maximum allowed: 32 [ 409.411564][ T24] usb 7-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 409.422380][ T24] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 62 [ 409.432872][ T24] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 409.451467][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.487430][ T24] usb 7-1: config 0 descriptor?? [ 409.534692][ T5928] usb 3-1: device descriptor read/64, error -71 [ 409.647704][ T5928] usb usb3-port1: attempt power cycle [ 409.944454][ T5877] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 409.955749][ T5876] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 410.022194][T11711] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1712'. [ 410.042411][ T5928] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 410.067659][T11711] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1712'. [ 410.091035][ T5928] usb 3-1: device descriptor read/8, error -71 [ 410.129333][ T5877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 410.142267][ T5877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 410.159872][ T5877] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 410.180334][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.189187][ T5877] usb 6-1: Product: syz [ 410.199539][ T5877] usb 6-1: Manufacturer: syz [ 410.214822][ T5877] usb 6-1: SerialNumber: syz [ 410.219693][T11717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1714'. [ 410.232480][ T5877] usb 6-1: config 0 descriptor?? [ 410.344471][ T5928] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 410.386350][ T5928] usb 3-1: device descriptor read/8, error -71 [ 410.441378][T11722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.472289][T11722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.496367][ T5928] usb usb3-port1: unable to enumerate USB device [ 410.517753][ T5877] usb 6-1: USB disconnect, device number 44 [ 411.092721][T11726] netlink: 'syz.5.1717': attribute type 1 has an invalid length. [ 411.426597][ T5953] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 411.594720][ T5953] usb 6-1: Using ep0 maxpacket: 16 [ 411.601859][ T5953] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 411.612745][ T5953] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.622735][ T5953] usb 6-1: config 0 descriptor?? [ 411.631760][ T5953] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 411.830291][T11726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.841585][T11726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.859793][T11726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.871590][T11726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.884107][T11726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.893471][T11726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.905381][T11726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.914197][T11726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.927190][T11726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.932639][T11740] overlayfs: failed to clone upperpath [ 411.938042][T11726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.061576][ T24] usb 7-1: USB disconnect, device number 32 [ 412.109507][T11745] netlink: 'syz.6.1722': attribute type 1 has an invalid length. [ 412.125185][ T5877] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 412.128464][T11745] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1722'. [ 412.296671][ T5877] usb 3-1: Using ep0 maxpacket: 16 [ 412.308287][ T5953] gspca_sonixj: reg_r err -71 [ 412.319635][ T5953] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 412.333853][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.352363][ T5953] usb 6-1: USB disconnect, device number 45 [ 412.362265][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.391120][ T5877] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 412.407230][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.427934][ T5877] usb 3-1: config 0 descriptor?? [ 412.714711][ T5953] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 412.788386][T11761] overlayfs: failed to clone upperpath [ 412.850640][ T5877] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 412.858056][ T5877] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 412.866925][ T5877] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 412.874025][ T5877] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 412.882224][ T5877] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 412.891236][ T5953] usb 6-1: unable to get BOS descriptor or descriptor too short [ 412.899123][ T5877] mcp2221 0003:04D8:00DD.001F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 412.910079][ T5953] usb 6-1: not running at top speed; connect to a high speed hub [ 412.918843][ T5953] usb 6-1: config 8 has an invalid interface number: 139 but max is 0 [ 412.927207][ T5953] usb 6-1: config 8 has no interface number 0 [ 412.933307][ T5953] usb 6-1: config 8 interface 139 has no altsetting 0 [ 412.943641][ T5953] usb 6-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02 [ 412.953167][ T5953] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.961267][ T5953] usb 6-1: Product: syz [ 412.971753][ T5953] usb 6-1: Manufacturer: syz [ 412.984371][ T5953] usb 6-1: SerialNumber: syz [ 413.058123][ T24] usb 3-1: USB disconnect, device number 26 [ 413.218736][ T5953] go7007 6-1:8.139: probe with driver go7007 failed with error -12 [ 413.229950][ T5953] usb 6-1: USB disconnect, device number 46 [ 413.663848][T11784] netlink: 30 bytes leftover after parsing attributes in process `syz.2.1733'. [ 413.663886][T11785] netlink: 30 bytes leftover after parsing attributes in process `syz.2.1733'. [ 414.444446][ T24] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 414.604730][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 414.612301][ T24] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 414.627281][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.642419][ T24] usb 6-1: config 0 descriptor?? [ 414.654157][ T24] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 414.704421][ T5877] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 414.883855][ T5877] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 414.914492][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.922535][ T5877] usb 3-1: Product: syz [ 414.926834][ T5877] usb 3-1: Manufacturer: syz [ 414.931432][ T5877] usb 3-1: SerialNumber: syz [ 414.953307][ T5877] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 415.015818][T11309] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 415.229532][ C0] usb 3-1: ath: unknown panic pattern! [ 415.374766][ T5953] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 415.416103][T11824] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1747'. [ 415.464495][ T5877] usb 3-1: USB disconnect, device number 27 [ 415.515674][T11826] overlayfs: failed to clone upperpath [ 415.554464][ T5953] usb 7-1: Using ep0 maxpacket: 8 [ 415.561084][ T5953] usb 7-1: config 162 has an invalid interface number: 246 but max is 1 [ 415.569911][ T5953] usb 7-1: config 162 has an invalid interface number: 245 but max is 1 [ 415.578337][ T5953] usb 7-1: config 162 has no interface number 0 [ 415.584721][ T5953] usb 7-1: config 162 has no interface number 1 [ 415.591034][ T5953] usb 7-1: config 162 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 415.605233][ T5953] usb 7-1: config 162 interface 245 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 415.616304][ T5953] usb 7-1: config 162 interface 245 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 415.631067][ T5953] usb 7-1: config 162 interface 245 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 415.642577][ T5953] usb 7-1: config 162 interface 245 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 415.653190][ T5953] usb 7-1: config 162 interface 245 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 415.674396][ T5953] usb 7-1: config 162 interface 246 has no altsetting 0 [ 415.682986][ T5953] usb 7-1: config 162 interface 245 has no altsetting 0 [ 415.692179][ T5953] usb 7-1: New USB device found, idVendor=8087, idProduct=0a5a, bcdDevice=5f.2c [ 415.701304][ T5953] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.711095][ T5953] usb 7-1: Product: syz [ 415.715580][ T5953] usb 7-1: Manufacturer: syz [ 415.720154][ T5953] usb 7-1: SerialNumber: syz [ 415.942250][ T5953] Bluetooth: failed to set interface 0, alt 0 -22 [ 415.948873][ T5953] btusb 7-1:162.245: probe with driver btusb failed with error -22 [ 415.964104][ T5953] usb 7-1: USB disconnect, device number 33 [ 416.065980][T11309] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 416.073489][T11309] ath9k_htc: Failed to initialize the device [ 416.083668][ T5877] usb 3-1: ath9k_htc: USB layer deinitialized [ 416.125701][T11834] overlayfs: failed to clone upperpath [ 416.277130][T11842] IPVS: persistence engine module ip_vs_pe_ not found [ 416.385417][ T5877] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 416.547409][ T5877] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 416.558319][ T5877] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 416.570152][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 416.591877][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 416.611922][ T5877] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 416.620502][T11848] netlink: 116 bytes leftover after parsing attributes in process `syz.6.1756'. [ 416.628151][ T5877] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 416.645817][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.675202][ T5877] usb 3-1: config 0 descriptor?? [ 416.686366][T11829] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 417.106290][ T5877] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 417.113773][ T5877] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 417.121950][ T5877] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 417.129615][ T5877] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 417.137126][ T5877] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 417.156655][ T5877] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 417.248919][ T5877] usb 6-1: USB disconnect, device number 47 [ 417.484682][ T5877] usb 3-1: USB disconnect, device number 28 [ 417.614495][ T3657] usb 7-1: new low-speed USB device number 34 using dummy_hcd [ 417.766050][ T3657] usb 7-1: config 7 has an invalid interface number: 82 but max is 0 [ 417.774257][ T3657] usb 7-1: config 7 has no interface number 0 [ 418.211586][T11880] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1767'. [ 418.256188][T11880] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 418.262748][T11880] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 418.277503][T11880] vhci_hcd vhci_hcd.0: Device attached [ 418.318736][T11884] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 418.331972][T11890] netlink: 'syz.0.1769': attribute type 10 has an invalid length. [ 418.349125][T11890] netlink: 'syz.0.1769': attribute type 10 has an invalid length. [ 418.357370][ T1154] vhci_hcd: stop threads [ 418.361635][ T1154] vhci_hcd: release socket [ 418.366649][ T1154] vhci_hcd: disconnect device [ 418.376257][T11890] team0: Port device dummy0 removed [ 418.391184][T11890] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 418.835071][T11309] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 418.878718][T11906] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1775'. [ 418.888964][T11906] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1775'. [ 418.899143][T11907] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1775'. [ 418.910044][T11907] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1775'. [ 419.003205][T11309] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 419.015462][T11309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.030660][T11309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1628, setting to 1024 [ 419.048265][T11309] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 419.052653][ T30] audit: type=1326 audit(1757748499.081:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11908 comm="syz.5.1776" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30fef8eba9 code=0x0 [ 419.064046][T11309] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 419.106052][T11911] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 419.117426][T11911] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 419.131593][T11911] overlayfs: missing 'lowerdir' [ 419.137864][T11309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.195709][T11309] usb 3-1: config 0 descriptor?? [ 419.243402][T11904] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 419.438802][T11922] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1780'. [ 419.637990][T11929] lo speed is unknown, defaulting to 1000 [ 419.655052][ T929] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 419.685041][T11309] waterforce 0003:1044:7A4D.0021: hidraw0: USB HID v0.08 Device [HID 1044:7a4d] on usb-dummy_hcd.2-1/input0 [ 419.768393][T11309] waterforce 0003:1044:7A4D.0021: fw version request failed with -71 [ 419.794479][ T929] usb 6-1: device descriptor read/64, error -71 [ 419.876452][ T43] usb 3-1: USB disconnect, device number 29 [ 420.055131][ T929] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 420.204444][ T929] usb 6-1: device descriptor read/64, error -71 [ 420.318716][ T929] usb usb6-port1: attempt power cycle [ 420.382802][ T3657] usb 7-1: New USB device found, idVendor=0403, idProduct=9090, bcdDevice=1f.44 [ 420.409069][ T3657] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.446962][ T3657] usb 7-1: can't set config #7, error -71 [ 420.469014][ T3657] usb 7-1: USB disconnect, device number 34 [ 420.668627][ T929] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 420.689493][T11946] 9pnet_virtio: no channels available for device 127.0.0.1 [ 420.699876][T11947] 9pnet_virtio: no channels available for device 127.0.0.1 [ 420.717784][ T929] usb 6-1: device descriptor read/8, error -71 [ 420.954412][ T929] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 420.977475][ T929] usb 6-1: device descriptor read/8, error -71 [ 421.094661][ T929] usb usb6-port1: unable to enumerate USB device [ 421.151011][T11962] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1793'. [ 421.348148][T11969] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1796'. [ 421.360871][T11969] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1796'. [ 421.404621][ T3657] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 421.570053][ T3657] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 421.576976][T11979] ieee802154 phy0 wpan0: encryption failed: -22 [ 421.582118][ T3657] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 421.607221][ T3657] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 421.616535][ T3657] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.634899][ T3657] usb 3-1: config 0 descriptor?? [ 421.874557][ T43] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 422.027753][ T43] usb 7-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 422.038178][ T43] usb 7-1: config 48 interface 0 altsetting 114 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 422.049468][ T43] usb 7-1: config 48 interface 0 altsetting 114 endpoint 0x4 has invalid wMaxPacketSize 0 [ 422.060564][ T43] usb 7-1: config 48 interface 0 altsetting 114 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 422.080043][ T43] usb 7-1: config 48 interface 0 has no altsetting 0 [ 422.087608][ T3657] uclogic 0003:28BD:0042.0022: interface is invalid, ignoring [ 422.099124][ T43] usb 7-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 422.112635][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.120796][ T43] usb 7-1: Product: syz [ 422.125448][ T43] usb 7-1: Manufacturer: syz [ 422.130050][ T43] usb 7-1: SerialNumber: syz [ 422.316308][ T929] usb 3-1: USB disconnect, device number 30 [ 422.355436][ T43] usb 7-1: USB disconnect, device number 35 [ 422.824692][ T3657] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 422.880765][T11992] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1804'. [ 422.892068][T11992] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1804'. [ 422.984510][ T3657] usb 6-1: Using ep0 maxpacket: 8 [ 422.992290][ T3657] usb 6-1: unable to get BOS descriptor or descriptor too short [ 423.002346][ T3657] usb 6-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 423.021209][ T3657] usb 6-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=ad.d9 [ 423.033225][ T3657] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.046427][ T3657] usb 6-1: Product: syz [ 423.050682][ T3657] usb 6-1: Manufacturer: syz [ 423.055621][ T3657] usb 6-1: SerialNumber: syz [ 423.174474][ T929] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 423.272526][ T3657] s2255 6-1:192.0: Could not find bulk-in endpoint [ 423.279454][ T3657] Sensoray 2255 driver load failed: 0xfffffff4 [ 423.287340][ T3657] s2255 6-1:192.0: probe with driver s2255 failed with error -12 [ 423.297460][ T3657] usb 6-1: USB disconnect, device number 52 [ 423.326419][ T929] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.344791][ T24] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 423.345851][ T929] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.365850][ T929] usb 7-1: config 0 interface 0 has no altsetting 0 [ 423.378322][ T929] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 423.390439][ T929] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.408287][ T929] usb 7-1: config 0 descriptor?? [ 423.516801][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 423.528552][ T24] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 423.538013][ T24] usb 3-1: config 1 has no interface number 1 [ 423.550203][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 423.560340][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.568404][ T24] usb 3-1: Product: syz [ 423.572575][ T24] usb 3-1: Manufacturer: syz [ 423.577246][ T24] usb 3-1: SerialNumber: syz [ 423.803823][ T24] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 423.853157][ T24] usb 3-1: USB disconnect, device number 31 [ 423.910644][ T7191] udevd[7191]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 424.041282][T11994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.059464][T11994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.067948][ T126] block nbd1: Possible stuck request ffff88802575e000: control (read@0,2048B). Runtime 150 seconds [ 424.078864][ T126] block nbd1: Possible stuck request ffff88802575e1c0: control (read@2048,2048B). Runtime 150 seconds [ 424.094247][T11994] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 424.100803][T11994] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 424.114526][ T5953] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 424.123636][T11994] vhci_hcd vhci_hcd.0: Device attached [ 424.130599][T12012] vhci_hcd: cannot find the pending unlink 8 [ 424.219710][T12021] __nla_validate_parse: 2 callbacks suppressed [ 424.219724][T12021] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1814'. [ 424.264743][ T5953] usb 6-1: device descriptor read/64, error -71 [ 424.295079][ T24] vhci_hcd: vhci_device speed not set [ 424.343475][ T929] usb 7-1: string descriptor 0 read error: -71 [ 424.352589][T12012] vhci_hcd: connection closed [ 424.357321][ T3578] vhci_hcd: stop threads [ 424.360107][ T24] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 424.362035][ T3578] vhci_hcd: release socket [ 424.380462][ T929] uclogic 0003:256C:006D.0023: failed retrieving string descriptor #200: -71 [ 424.380515][ T929] uclogic 0003:256C:006D.0023: failed retrieving pen parameters: -71 [ 424.380533][ T929] uclogic 0003:256C:006D.0023: failed probing pen v2 parameters: -71 [ 424.380578][ T929] uclogic 0003:256C:006D.0023: failed probing parameters: -71 [ 424.380679][ T929] uclogic 0003:256C:006D.0023: probe with driver uclogic failed with error -71 [ 424.383955][ T3578] vhci_hcd: disconnect device [ 424.389023][ T929] usb 7-1: USB disconnect, device number 36 [ 424.504702][ T5953] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 424.634393][ T5953] usb 6-1: device descriptor read/64, error -71 [ 424.704903][ T5877] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 424.745620][ T5953] usb usb6-port1: attempt power cycle [ 424.872780][ T5877] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 424.893217][ T5877] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 424.911914][ T5877] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 424.933884][ T5877] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 424.959076][ T5877] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 424.986188][ T5877] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 424.999115][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.013138][ T5877] usb 3-1: Product: syz [ 425.039679][ T5877] usb 3-1: Manufacturer: syz [ 425.044662][ T5877] usb 3-1: SerialNumber: syz [ 425.057499][ T5877] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 425.067662][ T5877] imon 3-1:155.0: unable to initialize intf0, err -90 [ 425.076461][ T5877] imon:imon_probe: failed to initialize context! [ 425.082999][ T5877] imon 3-1:155.0: unable to register, err -19 [ 425.094415][ T5953] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 425.115066][ T5953] usb 6-1: device descriptor read/8, error -71 [ 425.256141][T12026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.265577][T12026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.278760][T11309] usb 7-1: new low-speed USB device number 37 using dummy_hcd [ 425.374584][ T5953] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 425.397820][ T5953] usb 6-1: device descriptor read/8, error -71 [ 425.438542][T11309] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 425.447733][T11309] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.461307][T11309] usb 7-1: config 0 descriptor?? [ 425.481290][ T5877] usb 3-1: USB disconnect, device number 32 [ 425.517408][ T5953] usb usb6-port1: unable to enumerate USB device [ 425.668436][T11309] asix 7-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 426.079883][T11309] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 426.090461][T11309] asix 7-1:0.0: probe with driver asix failed with error -61 [ 426.094426][ T3657] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 426.234500][ T3657] usb 3-1: device descriptor read/64, error -71 [ 426.474487][ T3657] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 426.626691][ T3657] usb 3-1: device descriptor read/64, error -71 [ 426.744758][ T3657] usb usb3-port1: attempt power cycle [ 426.897584][T12071] /dev/nullb0: Can't open blockdev [ 427.109201][ T3657] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 427.145949][ T3657] usb 3-1: device descriptor read/8, error -71 [ 427.394495][ T3657] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 427.414962][ T3657] usb 3-1: device descriptor read/8, error -71 [ 427.454480][T11309] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 427.525557][ T3657] usb usb3-port1: unable to enumerate USB device [ 427.605819][T11309] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 427.617361][T11309] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 427.628428][T11309] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 427.637752][T11309] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 427.645774][T11309] usb 6-1: SerialNumber: syz [ 427.867313][T11309] usb 6-1: 0:2 : does not exist [ 427.913725][T11309] usb 6-1: USB disconnect, device number 57 [ 427.959679][ T7191] udevd[7191]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 428.020606][ T929] usb 7-1: USB disconnect, device number 37 [ 428.465154][ T929] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 428.625712][ T929] usb 7-1: Using ep0 maxpacket: 32 [ 428.632570][ T929] usb 7-1: config 1 has an invalid interface number: 233 but max is 0 [ 428.641172][ T929] usb 7-1: config 1 has no interface number 0 [ 428.647311][ T929] usb 7-1: config 1 interface 233 has no altsetting 0 [ 428.656496][ T929] usb 7-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=34.ac [ 428.665719][ T929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.673731][ T929] usb 7-1: Product: syz [ 428.677927][ T929] usb 7-1: Manufacturer: syz [ 428.682545][ T929] usb 7-1: SerialNumber: syz [ 428.687233][T11309] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 428.862269][T11309] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.880804][T11309] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.900023][T11309] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 428.912876][T12100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.923029][T12100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.945269][T11309] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.956755][ T929] imon_raw 7-1:1.233: IR endpoint missing [ 428.978690][ T929] usb 7-1: USB disconnect, device number 38 [ 428.992984][T11309] usb 6-1: config 0 descriptor?? [ 429.108073][T12113] tmpfs: Unknown parameter 'noinode32' [ 429.118647][T12114] tmpfs: Unknown parameter 'noinode32' [ 429.220820][T12120] ./cgroup: Can't lookup blockdev [ 429.228766][T12120] netlink: 'syz.2.1845': attribute type 2 has an invalid length. [ 429.237167][T12120] netlink: 'syz.2.1845': attribute type 1 has an invalid length. [ 429.423441][T11309] hid_parser_main: 10 callbacks suppressed [ 429.423464][T11309] hid-thrustmaster 0003:044F:B65D.0024: unknown main item tag 0x0 [ 429.440808][T11309] hid-thrustmaster 0003:044F:B65D.0024: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 429.453844][T11309] hid-thrustmaster 0003:044F:B65D.0024: Wrong number of endpoints? [ 429.494540][ T24] vhci_hcd: vhci_device speed not set [ 429.610580][T12132] tmpfs: Unknown parameter 'usrquota_inode_hardlim' [ 429.624160][T12103] netlink: 'syz.5.1839': attribute type 1 has an invalid length. [ 429.651164][T12103] netlink: 'syz.5.1839': attribute type 3 has an invalid length. [ 429.660633][T12103] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1839'. [ 429.671639][ C0] hid-thrustmaster 0003:044F:B65D.0024: Unknown packet type 0x0, unable to proceed further with wheel init [ 429.713975][T12135] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1851'. [ 429.734589][T12135] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 429.744091][T12135] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 429.753525][T12135] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 429.889954][ T3657] usb 6-1: USB disconnect, device number 58 [ 430.211986][T12150] program syz.2.1857 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 430.222256][T12151] binder: BINDER_SET_CONTEXT_MGR already set [ 430.225607][ T929] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 430.233840][T12151] binder: 12149:12151 ioctl 40046207 0 returned -16 [ 430.376291][ T929] usb 7-1: device descriptor read/64, error -71 [ 430.462322][T12159] overlay: ./file1 is not a directory [ 430.479945][T12161] tmpfs: Unknown parameter 'usrquota_inode_hardlim' [ 430.541454][T12163] overlayfs: missing 'lowerdir' [ 430.574749][ T3657] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 430.616408][ T929] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 430.754443][ T3657] usb 3-1: Using ep0 maxpacket: 8 [ 430.765047][ T929] usb 7-1: device descriptor read/64, error -71 [ 430.766298][ T3657] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 430.785613][ T3657] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 430.802449][ T3657] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 430.811749][ T3657] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 430.832940][ T3657] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 430.853514][ T3657] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 430.873468][ T3657] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 430.889747][ T929] usb usb7-port1: attempt power cycle [ 430.895268][T11309] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 430.908909][ T3657] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 430.926064][ T3657] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 430.950360][ T3657] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.958826][ T3657] usb 3-1: Product: syz [ 430.962998][ T3657] usb 3-1: Manufacturer: syz [ 430.984332][ T3657] usb 3-1: SerialNumber: syz [ 430.991411][ T3657] usb 3-1: config 0 descriptor?? [ 431.009621][T12157] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 431.025407][ T3657] hub 3-1:0.0: bad descriptor, ignoring hub [ 431.031336][ T3657] hub 3-1:0.0: probe with driver hub failed with error -5 [ 431.043400][ T3657] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input46 [ 431.051448][T11309] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 431.066234][T11309] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.083329][T11309] usb 6-1: Product: syz [ 431.089791][T11309] usb 6-1: Manufacturer: syz [ 431.097490][T11309] usb 6-1: SerialNumber: syz [ 431.117404][T11309] usb 6-1: config 0 descriptor?? [ 431.143078][T11309] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 059 [ 431.245296][ T929] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 431.249644][T12157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.265818][T12157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.281383][ T929] usb 7-1: device descriptor read/8, error -71 [ 431.311733][ T5953] usb 3-1: USB disconnect, device number 37 [ 431.389799][T12170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.406171][T12170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.419471][T12170] netlink: 'syz.5.1864': attribute type 10 has an invalid length. [ 431.428216][T12170] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.435942][T12170] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.451026][T12170] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.458263][T12170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.465825][T12170] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.473094][T12170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.487102][T12170] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 431.497697][T12177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.524680][ T929] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 431.545925][ T929] usb 7-1: device descriptor read/8, error -71 [ 431.554607][T11309] (null): failure setting delay to 10us [ 431.563007][T11309] i2c-tiny-usb 6-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 431.580698][T11309] usb 6-1: USB disconnect, device number 59 [ 431.597671][T12179] overlayfs: failed to clone upperpath [ 431.664753][ T929] usb usb7-port1: unable to enumerate USB device [ 431.928743][T12191] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1872'. [ 432.114540][T11309] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 432.284465][T11309] usb 3-1: Using ep0 maxpacket: 32 [ 432.291316][T11309] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 432.300413][T11309] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 432.311563][T11309] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 432.323406][T11309] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 432.336577][T11309] usb 3-1: config 0 interface 0 has no altsetting 0 [ 432.346074][T11309] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 432.355191][T11309] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 432.363591][T11309] usb 3-1: Product: syz [ 432.367838][T11309] usb 3-1: Manufacturer: syz [ 432.372424][T11309] usb 3-1: SerialNumber: syz [ 432.377119][ T929] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 432.388062][T11309] usb 3-1: config 0 descriptor?? [ 432.396088][T11309] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 432.407628][T11309] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 432.536362][ T929] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 432.546847][ T929] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 432.557036][ T929] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 432.566303][ T929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 432.574466][ T929] usb 6-1: SerialNumber: syz [ 432.595723][T11309] usb 3-1: USB disconnect, device number 38 [ 432.607922][T11309] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 432.793397][ T929] usb 6-1: 0:2 : does not exist [ 432.798606][ T929] usb 6-1: unit 5 not found! [ 432.815121][ T929] usb 6-1: USB disconnect, device number 60 [ 432.841401][ T7191] udevd[7191]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 433.383047][ T5953] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 433.401917][T12210] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 433.568641][ T5953] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 433.583147][T12217] sp0: Synchronizing with TNC [ 433.585048][ T5953] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.597978][ T5953] usb 7-1: Product: syz [ 433.602176][ T5953] usb 7-1: Manufacturer: syz [ 433.621218][ T5953] usb 7-1: SerialNumber: syz [ 433.638892][ T5953] usb 7-1: config 0 descriptor?? [ 433.726907][T12222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1881'. [ 433.727119][ T24] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 433.852714][T12201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.861915][T12201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.874407][ T43] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 433.884408][ T24] usb 6-1: device descriptor read/64, error -71 [ 434.026277][ T43] usb 3-1: config 2 has an invalid interface number: 174 but max is 0 [ 434.034567][ T43] usb 3-1: config 2 has no interface number 0 [ 434.041795][ T43] usb 3-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 434.054258][ T43] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 434.063597][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.078350][ T43] usb 3-1: Product: syz [ 434.082539][ T43] usb 3-1: Manufacturer: syz [ 434.087302][ T43] usb 3-1: SerialNumber: syz [ 434.094721][T12217] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 434.134451][ T24] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 434.274528][ T24] usb 6-1: device descriptor read/64, error -71 [ 434.384884][ T24] usb usb6-port1: attempt power cycle [ 434.429278][T12230] netlink: 'syz.0.1883': attribute type 4 has an invalid length. [ 434.438198][T12230] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1883'. [ 434.465353][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 434.502786][ T43] usb 3-1: probing VID:PID(0424:012C) [ 434.523422][ T43] usb 3-1: vub300 testing BULK IN EndPoint(0) 82 [ 434.533647][ T43] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 434.549777][ T43] vub300 3-1:2.174: probe with driver vub300 failed with error -22 [ 434.565223][ T43] usb 3-1: USB disconnect, device number 39 [ 434.774402][ T24] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 434.804978][ T24] usb 6-1: device descriptor read/8, error -71 [ 435.054424][ T24] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 435.078152][ T24] usb 6-1: device descriptor read/8, error -71 [ 435.189566][T12245] binder: 12243:12245 ioctl c0306201 200000000640 returned -22 [ 435.194796][ T24] usb usb6-port1: unable to enumerate USB device [ 435.206568][T12245] mkiss: ax0: crc mode is auto. [ 436.062142][ T5953] usb 7-1: USB disconnect, device number 43 [ 436.314470][ T24] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 436.454437][ T5953] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 436.464450][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 436.471691][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 4096, setting to 1024 [ 436.482979][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 436.497885][ T24] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 436.507619][ T24] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 436.517785][ T24] usb 3-1: Product: syz [ 436.534437][ T24] usb 3-1: Manufacturer: syz [ 436.539218][ T24] usb 3-1: SerialNumber: syz [ 436.562705][ T24] usb 3-1: config 0 descriptor?? [ 436.614602][ T5953] usb 7-1: Using ep0 maxpacket: 8 [ 436.621673][ T5953] usb 7-1: config 132 has an invalid descriptor of length 197, skipping remainder of the config [ 436.633814][ T5953] usb 7-1: config 132 has 0 interfaces, different from the descriptor's value: 1 [ 436.643284][ T5953] usb 7-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 436.652415][ T5953] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.773744][T11309] usb 3-1: USB disconnect, device number 40 [ 437.069421][ T5953] usb 7-1: string descriptor 0 read error: -71 [ 437.078846][ T5953] usb 7-1: USB disconnect, device number 44 [ 437.399566][T12264] nfs: Deprecated parameter 'intr' [ 437.764549][T11309] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 437.780531][ T5876] Bluetooth: hci6: unexpected event 0x32 length: 1 < 9 [ 437.922974][T11309] usb 3-1: Using ep0 maxpacket: 16 [ 437.935955][T11309] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 437.950125][T11309] usb 3-1: config 0 has no interface number 0 [ 437.962846][T11309] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 437.981942][T11309] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 438.010379][T11309] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 438.023912][T11309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.033899][T11309] usb 3-1: Product: syz [ 438.038388][ T929] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 438.056831][T11309] usb 3-1: Manufacturer: syz [ 438.061680][T11309] usb 3-1: SerialNumber: syz [ 438.075906][T11309] usb 3-1: config 0 descriptor?? [ 438.091248][T12268] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 438.098852][T12268] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 438.214469][ T929] usb 6-1: Using ep0 maxpacket: 8 [ 438.222913][ T929] usb 6-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 438.232609][ T929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.242103][ T929] usb 6-1: Product: syz [ 438.246487][ T929] usb 6-1: Manufacturer: syz [ 438.251115][ T929] usb 6-1: SerialNumber: syz [ 438.313057][T11309] asix 3-1:0.251: probe with driver asix failed with error -71 [ 438.334428][T11309] usb 3-1: USB disconnect, device number 41 [ 438.462813][ T929] mxuport 6-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 438.477632][ T929] mxuport 6-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 438.487117][ T929] mxuport 6-1:254.0: probe with driver mxuport failed with error -71 [ 438.498707][ T929] usb 6-1: USB disconnect, device number 65 [ 438.669313][T12307] ucma_write: process 301 (syz.6.1906) changed security contexts after opening file descriptor, this is not allowed. [ 438.705887][T12307] program syz.6.1906 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 438.923090][T12317] dvmrp1: entered allmulticast mode [ 439.166352][ T3657] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 439.182306][ T30] audit: type=1326 audit(1757748519.211:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12324 comm="syz.0.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7956b8eba9 code=0x7fc00000 [ 439.294656][ T43] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 439.324839][ T3657] usb 7-1: Using ep0 maxpacket: 16 [ 439.334766][T12331] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 439.342839][ T3657] usb 7-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 439.370761][ T3657] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.383472][ T3657] usb 7-1: Product: syz [ 439.389233][ T3657] usb 7-1: Manufacturer: syz [ 439.393987][ T3657] usb 7-1: SerialNumber: syz [ 439.407134][ T3657] usb 7-1: config 0 descriptor?? [ 439.420396][ T3657] visor 7-1:0.0: Sony Clie 3.5 converter detected [ 439.457097][ T43] usb 6-1: not running at top speed; connect to a high speed hub [ 439.477418][ T43] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 439.502088][ T43] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 439.524244][ T43] usb 6-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 439.533589][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.543720][ T43] usb 6-1: Product: syz [ 439.556778][ T43] usb 6-1: Manufacturer: syz [ 439.562923][ T43] usb 6-1: SerialNumber: syz [ 439.584246][T12327] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 439.616863][ T3657] usb 7-1: clie_3_5_startup: get config number failed: -71 [ 439.629486][ T3657] visor 7-1:0.0: probe with driver visor failed with error -71 [ 439.645679][ T3657] usb 7-1: USB disconnect, device number 45 [ 439.774458][ T10] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 439.810594][ T43] usbhid 6-1:1.0: can't add hid device: -71 [ 439.816777][ T43] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 439.831988][ T43] usb 6-1: USB disconnect, device number 66 [ 439.924499][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 439.931122][ T10] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 439.939413][ T10] usb 3-1: config 0 has no interface number 0 [ 439.945703][ T10] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 439.958285][ T10] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 439.967460][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.976964][ T10] usb 3-1: Product: syz [ 439.981165][ T10] usb 3-1: Manufacturer: syz [ 439.986162][ T10] usb 3-1: SerialNumber: syz [ 439.992763][ T10] usb 3-1: config 0 descriptor?? [ 440.003586][ T10] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 440.013468][ T10] em28xx 3-1:0.132: Video interface 132 found: [ 440.069947][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.076446][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.394032][T12358] netlink: 'syz.0.1926': attribute type 4 has an invalid length. [ 440.408383][ T10] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 440.417704][T12339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.432307][T12339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.450618][T12361] tmpfs: Invalid gid '0x00000000ffffffff' [ 440.544760][ T929] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 440.694523][ T5946] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 440.704538][ T929] usb 7-1: Using ep0 maxpacket: 32 [ 440.711262][ T929] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 440.719794][ T929] usb 7-1: config 0 has no interface number 0 [ 440.725999][ T929] usb 7-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 440.736716][ T929] usb 7-1: config 0 interface 1 has no altsetting 0 [ 440.747094][ T929] usb 7-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 440.756351][ T929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.764681][ T929] usb 7-1: Product: syz [ 440.769070][ T929] usb 7-1: Manufacturer: syz [ 440.773687][ T929] usb 7-1: SerialNumber: syz [ 440.780678][ T929] usb 7-1: config 0 descriptor?? [ 440.847170][ T5946] usb 6-1: unable to get BOS descriptor or descriptor too short [ 440.857931][ T5946] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 440.868651][ T5946] usb 6-1: can't read configurations, error -71 [ 440.991593][ T929] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 441.002234][ T929] cx231xx 7-1:0.1: Not found matching IAD interface [ 441.012052][ T929] usb 7-1: USB disconnect, device number 46 [ 441.074467][ T10] em28xx 3-1:0.132: failed to read eeprom (err=-110) [ 441.081244][ T10] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 441.314620][ T10] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 441.322480][ T10] em28xx 3-1:0.132: analog set to bulk mode. [ 441.329837][ T929] em28xx 3-1:0.132: Registering V4L2 extension [ 441.345436][ T10] usb 3-1: USB disconnect, device number 42 [ 441.372532][ T10] em28xx 3-1:0.132: Disconnecting em28xx [ 441.506457][ T929] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 441.520864][ T929] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 441.531296][ T929] em28xx 3-1:0.132: No AC97 audio processor [ 441.572025][ T929] usb 3-1: Decoder not found [ 441.586434][ T929] em28xx 3-1:0.132: failed to create media graph [ 441.592840][ T929] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 441.615432][T12372] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 441.631990][T12372] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 441.645515][ T929] em28xx 3-1:0.132: Remote control support is not available for this card. [ 441.658386][ T10] em28xx 3-1:0.132: Closing input extension [ 441.667459][T12376] netlink: 'syz.0.1933': attribute type 12 has an invalid length. [ 441.692083][ T10] em28xx 3-1:0.132: Freeing device [ 441.854587][ T3657] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 441.877136][T12382] bond0: mtu greater than device maximum [ 441.882909][T12383] bond0: mtu greater than device maximum [ 441.933228][T12388] program syz.2.1936 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 442.003751][T12391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1937'. [ 442.005576][ T3657] usb 7-1: device descriptor read/64, error -71 [ 442.268352][ T3657] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 442.278155][T12403] ieee802154 phy0 wpan0: encryption failed: -90 [ 442.367922][T12408] rtc_cmos 00:00: Alarms can be up to one day in the future [ 442.405400][ T3657] usb 7-1: device descriptor read/64, error -71 [ 442.461556][T12410] binder: 12409:12410 ioctl 4018620d 0 returned -22 [ 442.525946][ T3657] usb usb7-port1: attempt power cycle [ 442.541576][T12415] binder: 12409:12415 ioctl c018620c 0 returned -14 [ 442.553276][T12415] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1942'. [ 442.781052][T12429] cgroup: Invalid name [ 442.864544][ T3657] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 442.885152][ T3657] usb 7-1: device descriptor read/8, error -71 [ 443.057081][ T5946] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 443.124499][ T3657] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 443.155105][ T3657] usb 7-1: device descriptor read/8, error -71 [ 443.217054][ T5946] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 443.226013][ T5946] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 443.236473][ T5946] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 443.245526][ T5946] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 443.263518][ T5946] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 443.273223][ T3657] usb usb7-port1: unable to enumerate USB device [ 443.280054][ T5946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.290546][ T5946] usb 6-1: Product: syz [ 443.294958][ T5946] usb 6-1: Manufacturer: syz [ 443.299562][ T5946] usb 6-1: SerialNumber: syz [ 443.520283][ T5946] usb 6-1: 0:2 : does not exist [ 443.540792][ T5946] usb 6-1: USB disconnect, device number 69 [ 443.563762][ T7191] udevd[7191]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 443.644453][ T929] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 443.774464][ T929] usb 3-1: device descriptor read/64, error -71 [ 444.015768][ T929] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 444.164781][ T929] usb 3-1: device descriptor read/64, error -71 [ 444.274632][ T929] usb usb3-port1: attempt power cycle [ 444.614489][ T929] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 444.649130][ T929] usb 3-1: device descriptor read/8, error -71 [ 444.732595][T12452] 9pnet: Unknown protocol version 9 [ 444.842952][T12458] binder: 12457:12458 ioctl c0306201 200000000640 returned -22 [ 444.914446][ T929] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 444.935501][ T929] usb 3-1: device descriptor read/8, error -71 [ 444.990202][T12463] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1960'. [ 445.075293][ T929] usb usb3-port1: unable to enumerate USB device [ 445.207947][ T30] audit: type=1326 audit(1757748525.241:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12473 comm="syz.5.1964" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30fef8eba9 code=0x0 [ 445.272107][T12476] vcan0: tx drop: invalid da for name 0xfffffffffffffffe [ 445.284419][ T5946] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 445.434423][ T5946] usb 7-1: Using ep0 maxpacket: 32 [ 445.440975][ T5946] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 445.449300][ T5946] usb 7-1: config 0 has no interface number 0 [ 445.455447][ T5946] usb 7-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 445.468372][ T5946] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 445.477459][ T5946] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.485507][ T5946] usb 7-1: Product: syz [ 445.489676][ T5946] usb 7-1: Manufacturer: syz [ 445.494269][ T5946] usb 7-1: SerialNumber: syz [ 445.502299][ T5946] usb 7-1: config 0 descriptor?? [ 445.516633][ T5946] smsc95xx v2.0.0 [ 445.520336][ T5946] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 445.531082][ T5946] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -22 [ 445.724836][ T5946] usb 7-1: USB disconnect, device number 51 [ 446.073252][ T30] audit: type=1326 audit(1757748526.101:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.5.1965" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30fef8eba9 code=0x0 [ 446.844442][ T5946] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 446.996778][ T5946] usb 3-1: unable to get BOS descriptor or descriptor too short [ 447.005087][ T5946] usb 3-1: not running at top speed; connect to a high speed hub [ 447.013748][ T5946] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 447.023983][ T5946] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 447.033123][ T5946] usb 3-1: config 1 has no interface number 1 [ 447.039367][ T5946] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 447.053160][ T5946] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 447.066598][ T5946] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 447.075711][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.083680][ T5946] usb 3-1: Product: syz [ 447.087937][ T5946] usb 3-1: Manufacturer: syz [ 447.092550][ T5946] usb 3-1: SerialNumber: syz [ 447.187711][ T30] audit: type=1326 audit(1757748527.221:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12484 comm="syz.6.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f498eba9 code=0x7fc00000 [ 447.308471][ T5946] hub 3-1:1.0: Invalid hub with more than one config or interface [ 447.319270][ T5946] hub 3-1:1.0: probe with driver hub failed with error -22 [ 447.331394][ T5946] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 447.375143][ T5946] usb 3-1: USB disconnect, device number 47 [ 447.436902][ T7246] udevd[7246]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 447.648484][T12496] netlink: 'syz.6.1970': attribute type 4 has an invalid length. [ 447.675401][T12496] netlink: 'syz.6.1970': attribute type 4 has an invalid length. [ 447.934985][ T5946] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 448.544759][ T929] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 448.714355][ T929] usb 3-1: Using ep0 maxpacket: 8 [ 448.722552][ T929] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 448.734669][ T929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 448.747518][ T929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 448.761480][ T929] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 448.782776][ T929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.804777][ T929] usb 3-1: config 0 descriptor?? [ 448.810936][T12504] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 449.027674][ T929] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 449.061753][ T929] usb 3-1: USB disconnect, device number 48 [ 449.369761][T12519] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 449.899237][T12531] netlink: 14436 bytes leftover after parsing attributes in process `syz.0.1982'. [ 449.914041][T12531] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 450.124447][T12537] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1985'. [ 450.395317][ T929] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 450.418859][T12547] 9pnet_fd: Insufficient options for proto=fd [ 450.566467][ T929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.592798][ T929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.606858][ T929] usb 3-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 450.617424][ T929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.638540][ T929] usb 3-1: config 0 descriptor?? [ 450.738078][T12557] nbd: couldn't find a device at index -373156329 [ 451.267671][ T929] logitech 0003:046D:C294.0025: item fetching failed at offset 4/7 [ 451.276596][ T929] logitech 0003:046D:C294.0025: parse failed [ 451.282668][ T929] logitech 0003:046D:C294.0025: probe with driver logitech failed with error -22 [ 451.344486][ T10] usb 6-1: new full-speed USB device number 70 using dummy_hcd [ 451.414389][ T5946] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 451.474951][ T3657] usb 3-1: USB disconnect, device number 49 [ 451.507894][ T10] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 451.527053][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.555008][ T10] usb 6-1: config 0 descriptor?? [ 451.564508][ T5946] usb 7-1: Using ep0 maxpacket: 8 [ 451.579985][ T5946] usb 7-1: unable to get BOS descriptor or descriptor too short [ 451.590564][ T5946] usb 7-1: config 71 has an invalid interface number: 222 but max is 0 [ 451.595603][T12578] overlayfs: failed to clone upperpath [ 451.604044][ T5946] usb 7-1: config 71 has no interface number 0 [ 451.610715][ T5946] usb 7-1: config 71 interface 222 has no altsetting 0 [ 451.622137][ T5946] usb 7-1: New USB device found, idVendor=17ef, idProduct=7205, bcdDevice=69.4b [ 451.632324][ T5946] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.640721][ T5946] usb 7-1: Product: syz [ 451.645324][ T5946] usb 7-1: Manufacturer: syz [ 451.651086][ T5946] usb 7-1: SerialNumber: syz [ 451.660383][ T5946] r8152-cfgselector 7-1: Unknown version 0x0000 [ 451.794425][ T3657] usb 3-1: new low-speed USB device number 50 using dummy_hcd [ 451.871544][ T5946] hub 7-1:71.222: bad descriptor, ignoring hub [ 451.881655][ T5946] hub 7-1:71.222: probe with driver hub failed with error -5 [ 451.907546][ T5946] r8152-cfgselector 7-1: USB disconnect, device number 53 [ 451.944652][ T3657] usb 3-1: Invalid ep0 maxpacket: 32 [ 452.074516][ T3657] usb 3-1: new low-speed USB device number 51 using dummy_hcd [ 452.226798][ T3657] usb 3-1: Invalid ep0 maxpacket: 32 [ 452.232854][ T3657] usb usb3-port1: attempt power cycle [ 452.574412][ T3657] usb 3-1: new low-speed USB device number 52 using dummy_hcd [ 452.586885][ T10] pegasus 6-1:0.0: probe with driver pegasus failed with error -121 [ 452.618384][ T3657] usb 3-1: Invalid ep0 maxpacket: 32 [ 452.754599][ T3657] usb 3-1: new low-speed USB device number 53 using dummy_hcd [ 452.775204][ T3657] usb 3-1: Invalid ep0 maxpacket: 32 [ 452.776374][ T3657] usb usb3-port1: unable to enumerate USB device [ 452.865033][ T24] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 453.024521][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 453.026208][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 453.026240][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 453.026266][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 453.026290][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 453.026316][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 453.029563][ T24] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 453.029592][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.029613][ T24] usb 7-1: Product: syz [ 453.029628][ T24] usb 7-1: Manufacturer: syz [ 453.029643][ T24] usb 7-1: SerialNumber: syz [ 453.035730][ T24] usb 7-1: config 0 descriptor?? [ 453.373662][ T24] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 453.393097][ T24] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 453.407808][ T24] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 453.417656][ T24] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 453.424115][ T24] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 453.435390][ T24] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 453.445131][ T24] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 453.454584][ T24] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 453.479558][ T24] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 453.501683][T12605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.512548][ T24] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 453.520327][ T24] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 453.526969][T12605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.537240][ T24] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 453.543992][ T24] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 453.552903][ T24] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 453.564566][ T24] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 453.574837][ T24] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 453.585038][ T24] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 453.595638][ T24] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 453.616510][ T24] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 453.634850][ T24] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 453.641006][ T24] input input49: Timeout waiting for response from device. [ 453.681994][ T24] usb 7-1: USB disconnect, device number 54 [ 453.960544][T12627] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2015'. [ 454.151199][ T126] block nbd1: Possible stuck request ffff88802575e000: control (read@0,2048B). Runtime 180 seconds [ 454.162134][ T126] block nbd1: Possible stuck request ffff88802575e1c0: control (read@2048,2048B). Runtime 180 seconds [ 454.293558][T12640] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2018'. [ 454.334456][ T5953] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 454.496861][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.511840][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.522850][ T5953] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 454.536413][ T5953] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 454.546235][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.557018][ T5953] usb 3-1: config 0 descriptor?? [ 454.766381][T12629] binder: 12628:12629 ioctl c0306201 200000000080 returned -14 [ 454.784768][ T24] usb 6-1: USB disconnect, device number 70 [ 454.870043][T12650] tmpfs: Bad value for 'mpol' [ 454.999012][ T5953] usbhid 3-1:0.0: can't add hid device: -71 [ 455.023825][ T5953] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 455.045821][ T5953] usb 3-1: USB disconnect, device number 54 [ 455.387804][T12678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2030'. [ 455.509132][T12685] sctp: [Deprecated]: syz.6.2031 (pid 12685) Use of int in maxseg socket option. [ 455.509132][T12685] Use struct sctp_assoc_value instead [ 455.774372][ T24] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 455.934398][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 455.940891][ T24] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 455.952113][ T24] usb 7-1: config 0 has no interface number 0 [ 455.958488][ T24] usb 7-1: config 0 interface 196 altsetting 1 endpoint 0x5 has an invalid bInterval 32, changing to 7 [ 455.969562][ T24] usb 7-1: config 0 interface 196 altsetting 1 endpoint 0x5 has invalid maxpacket 8624, setting to 1024 [ 455.981222][ T24] usb 7-1: config 0 interface 196 has no altsetting 0 [ 455.998013][ T24] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 456.007299][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.007965][ T5953] kernel read not supported for file /dsp1 (pid: 5953 comm: kworker/0:7) [ 456.015557][ T24] usb 7-1: Product: syz [ 456.015576][ T24] usb 7-1: Manufacturer: syz [ 456.015589][ T24] usb 7-1: SerialNumber: syz [ 456.041030][ T24] usb 7-1: config 0 descriptor?? [ 456.088322][T12692] overlayfs: failed to resolve './file1': -2 [ 456.238616][ T30] audit: type=1400 audit(1757748536.261:35): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=5D9625292F2F2E212D pid=12695 comm="syz.5.2037" [ 456.276353][T12685] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2031'. [ 456.538611][T12713] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2040'. [ 456.578856][T12713] IPVS: length: 68 != 43032 [ 456.734746][ T5953] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 456.893824][ T5953] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 456.903100][ T5953] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 456.913735][ T5953] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 456.923099][ T5953] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 456.934675][ T5953] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 456.953195][ T5953] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 456.962895][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 456.971285][ T5953] usb 3-1: Product: syz [ 456.976608][ T5953] usb 3-1: Manufacturer: syz [ 456.987898][ T5953] cdc_wdm 3-1:1.0: skipping garbage [ 456.993134][ T5953] cdc_wdm 3-1:1.0: skipping garbage [ 457.017942][ T5953] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 457.023915][ T5953] cdc_wdm 3-1:1.0: Unknown control protocol [ 457.144852][T12717] 9pnet: Could not find request transport: à| [ 457.402298][T12725] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 457.761749][ T5953] usb 3-1: USB disconnect, device number 55 [ 457.948890][T12750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2053'. [ 457.960926][T12751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2053'. [ 458.197086][ T3657] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 458.334479][ T3657] usb 6-1: device descriptor read/64, error -71 [ 458.464246][ T24] ipheth 7-1:0.196: Unable to find endpoints [ 458.496138][ T24] usb 7-1: USB disconnect, device number 55 [ 458.574645][ T3657] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 458.597482][T12766] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 458.654443][ T5953] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 458.748660][ T3657] usb 6-1: device descriptor read/64, error -71 [ 458.816694][ T5953] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 458.828083][ T5953] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 458.840909][ T5953] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 458.850943][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 458.860352][ T5953] usb 3-1: SerialNumber: syz [ 458.865353][ T3657] usb usb6-port1: attempt power cycle [ 458.939712][T12785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2065'. [ 458.994450][T11309] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 459.087851][ T5953] usb 3-1: 0:2 : does not exist [ 459.092774][ T5953] usb 3-1: unit 5 not found! [ 459.107903][ T5953] usb 3-1: USB disconnect, device number 56 [ 459.146425][ T7191] udevd[7191]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 459.166259][T11309] usb 7-1: Using ep0 maxpacket: 32 [ 459.176332][T11309] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.192211][T11309] usb 7-1: config 0 interface 0 has no altsetting 0 [ 459.201794][T11309] usb 7-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 459.211148][T11309] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.222253][T11309] usb 7-1: config 0 descriptor?? [ 459.224854][ T3657] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 459.262463][T12789] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2066'. [ 459.273144][ T3657] usb 6-1: device descriptor read/8, error -71 [ 459.447183][T12775] netlink: 4416 bytes leftover after parsing attributes in process `syz.6.2062'. [ 459.514432][ T3657] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 459.538214][ T3657] usb 6-1: device descriptor read/8, error -71 [ 459.657942][ T3657] usb usb6-port1: unable to enumerate USB device [ 459.706498][T11309] asus 0003:048D:CE50.0026: unknown main item tag 0x0 [ 459.713333][T11309] asus 0003:048D:CE50.0026: unknown main item tag 0x0 [ 459.720691][T11309] asus 0003:048D:CE50.0026: unknown main item tag 0x0 [ 459.727774][T11309] asus 0003:048D:CE50.0026: unknown main item tag 0x0 [ 459.735411][T11309] asus 0003:048D:CE50.0026: unknown main item tag 0x0 [ 459.746252][T11309] asus 0003:048D:CE50.0026: hidraw0: USB HID v80.00 Device [HID 048d:ce50] on usb-dummy_hcd.6-1/input0 [ 459.762430][T11309] asus 0003:048D:CE50.0026: Asus input not registered [ 459.772369][T11309] asus 0003:048D:CE50.0026: probe with driver asus failed with error -12 [ 459.804424][ T5953] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 459.908251][T11309] usb 7-1: USB disconnect, device number 56 [ 459.957952][ T5953] usb 6-1: device descriptor read/64, error -71 [ 460.214439][ T5953] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 460.364393][ T5953] usb 6-1: device descriptor read/64, error -71 [ 460.450332][T12816] 9pnet_fd: Insufficient options for proto=fd [ 460.478497][ T5953] usb usb6-port1: attempt power cycle [ 460.834738][ T5953] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 460.855152][ T5953] usb 6-1: device descriptor read/8, error -71 [ 460.874536][ T929] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 460.974882][ T30] audit: type=1326 audit(1757748541.001:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12812 comm="syz.0.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7956b8eba9 code=0x7fc00000 [ 461.023253][ T30] audit: type=1326 audit(1757748541.001:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12812 comm="syz.0.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7956b8eba9 code=0x7fc00000 [ 461.078141][ T929] usb 7-1: config 0 has an invalid interface number: 156 but max is 1 [ 461.092358][ T929] usb 7-1: config 0 has no interface number 1 [ 461.120155][ T929] usb 7-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 461.130957][ T929] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.142083][ T929] usb 7-1: config 0 descriptor?? [ 461.152308][ T929] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 461.162059][ T929] usb 7-1: MIDIStreaming interface descriptor not found [ 461.250832][ T929] gspca_main: spca561-2.14.0 probing abcd:cdee [ 461.351517][T12823] netlink: 'syz.6.2076': attribute type 16 has an invalid length. [ 461.363910][T12823] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.2076'. [ 461.385186][ T929] spca561 7-1:0.0: probe with driver spca561 failed with error -22 [ 461.404643][ T5953] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 461.413954][ T929] usb 7-1: USB disconnect, device number 57 [ 461.435002][ T5953] usb 6-1: device descriptor read/8, error -71 [ 461.559854][T12842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.569494][ T5953] usb usb6-port1: unable to enumerate USB device [ 461.569543][T12842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.611610][T12842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.619320][T12842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.864537][ T5953] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 461.928018][T12850] netlink: 'syz.6.2086': attribute type 1 has an invalid length. [ 461.951092][ T3530] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.014546][ T5953] usb 3-1: Using ep0 maxpacket: 32 [ 462.021364][ T5953] usb 3-1: config 0 has an invalid interface number: 28 but max is 0 [ 462.030620][ T5953] usb 3-1: config 0 has no interface number 0 [ 462.039176][ T5953] usb 3-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=3f.37 [ 462.048290][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.056353][ T5953] usb 3-1: Product: syz [ 462.060580][ T5953] usb 3-1: Manufacturer: syz [ 462.065510][ T5953] usb 3-1: SerialNumber: syz [ 462.072064][ T5953] usb 3-1: config 0 descriptor?? [ 462.080782][ T5953] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 462.087269][ T5953] command write [95] error -22 [ 462.285674][T12846] 9pnet: Found fid 0 not clunked [ 462.371835][ T24] usb 3-1: USB disconnect, device number 57 [ 462.826850][T12861] tmpfs: Bad value for 'mpol' [ 463.244797][ T24] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 463.397095][ T24] usb 3-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.408253][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 463.414949][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 463.424002][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.435117][ T24] usb 3-1: config 0 descriptor?? [ 463.652414][ T24] apple 0003:05AC:027A.0027: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.2-1/input0 [ 463.851134][T12870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.861726][T12870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.874683][ T929] usb 3-1: USB disconnect, device number 58 [ 464.192657][T12900] netlink: 'syz.5.2104': attribute type 15 has an invalid length. [ 464.774599][ T5946] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 464.938631][ T5946] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.960577][ T5946] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.991147][ T5946] usb 7-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 465.019933][ T5946] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.072298][ T5946] usb 7-1: config 0 descriptor?? [ 465.188212][ T5953] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 465.298036][ T5946] usbhid 7-1:0.0: can't add hid device: -71 [ 465.324856][ T5946] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 465.375445][ T5946] usb 7-1: USB disconnect, device number 58 [ 465.379680][ T5953] usb 6-1: Using ep0 maxpacket: 32 [ 465.404035][ T5953] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 465.426831][ T5953] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 465.445077][ T5865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 465.446053][ T5953] usb 6-1: config 0 interface 0 has no altsetting 0 [ 465.467114][ T5865] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 465.477023][ T5865] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 465.486900][ T5865] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 465.490627][ T5953] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 465.507859][ T5865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 465.514115][ T5953] usb 6-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 465.571642][ T5953] usb 6-1: Product: syz [ 465.578145][ T5953] usb 6-1: Manufacturer: syz [ 465.582802][ T5953] usb 6-1: SerialNumber: syz [ 465.595432][ T5953] usb 6-1: config 0 descriptor?? [ 465.648140][T12932] lo speed is unknown, defaulting to 1000 [ 466.008509][ T5953] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 466.234680][ T24] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 466.275611][ T5946] usb 7-1: new low-speed USB device number 59 using dummy_hcd [ 466.280366][T12932] chnl_net:caif_netlink_parms(): no params data found [ 466.404426][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 466.411468][ T24] usb 3-1: config 47 has too many interfaces: 164, using maximum allowed: 32 [ 466.419748][ T5953] gs_usb 6-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 466.430390][ T5953] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71 [ 466.443814][ T5953] usb 6-1: USB disconnect, device number 79 [ 466.444529][ T24] usb 3-1: config 47 has 1 interface, different from the descriptor's value: 164 [ 466.462085][ T5946] usb 7-1: config 2 has an invalid interface number: 35 but max is -1 [ 466.471022][ T5946] usb 7-1: config 2 has 1 interface, different from the descriptor's value: 0 [ 466.511133][ T24] usb 3-1: config 47 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 466.525189][ T5946] usb 7-1: config 2 has no interface number 0 [ 466.531328][ T5946] usb 7-1: config 2 interface 35 has no altsetting 0 [ 466.543961][ T24] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 466.559475][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.566349][T12932] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.577101][ T5946] usb 7-1: string descriptor 0 read error: -22 [ 466.584813][T12932] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.586471][ T5946] usb 7-1: New USB device found, idVendor=1d19, idProduct=0110, bcdDevice=7a.e9 [ 466.595074][T12932] bridge_slave_0: entered allmulticast mode [ 466.622797][ T5946] usb 7-1: New USB device strings: Mfr=1, Product=241, SerialNumber=121 [ 466.626237][T12932] bridge_slave_0: entered promiscuous mode [ 466.643721][T12932] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.651714][T12932] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.659081][T12932] bridge_slave_1: entered allmulticast mode [ 466.667753][T12932] bridge_slave_1: entered promiscuous mode [ 466.713368][T12932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.728052][T12932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.762740][T12932] team0: Port device team_slave_0 added [ 466.771779][T12932] team0: Port device team_slave_1 added [ 466.817945][T12932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.825584][T12932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.851496][ C0] vkms_vblank_simulate: vblank timer overrun [ 466.858984][T12932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.871914][T12932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.879494][T12932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.905388][ C0] vkms_vblank_simulate: vblank timer overrun [ 466.913432][T12932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.931704][ T929] usb 7-1: USB disconnect, device number 59 [ 466.933749][T12940] vcan0: entered allmulticast mode [ 467.132195][T12932] hsr_slave_0: entered promiscuous mode [ 467.140025][T12932] hsr_slave_1: entered promiscuous mode [ 467.147543][T12932] debugfs: 'hsr0' already exists in 'hsr' [ 467.153449][T12932] Cannot create hsr debugfs directory [ 467.344988][ T929] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 467.403201][T12932] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.441880][ T24] usb 3-1: string descriptor 0 read error: -71 [ 467.452652][ T24] usbhid 3-1:47.0: couldn't find an input interrupt endpoint [ 467.462907][ T24] usb 3-1: USB disconnect, device number 59 [ 467.505577][ T929] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 467.519012][T12932] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.524138][ T929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.535787][ T5946] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 467.548750][ T929] usb 7-1: Product: syz [ 467.552966][ T929] usb 7-1: Manufacturer: syz [ 467.557839][ T929] usb 7-1: SerialNumber: syz [ 467.568511][ T929] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 467.587758][ T5953] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 467.597157][ T5876] Bluetooth: hci1: command tx timeout [ 467.650612][T12932] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.694449][ T5946] usb 6-1: Using ep0 maxpacket: 16 [ 467.701797][ T5946] usb 6-1: unable to get BOS descriptor or descriptor too short [ 467.716745][ T5946] usb 6-1: config 1 interface 0 altsetting 126 bulk endpoint 0x1 has invalid maxpacket 16 [ 467.728514][ T5946] usb 6-1: config 1 interface 0 altsetting 126 bulk endpoint 0x82 has invalid maxpacket 64 [ 467.739503][ T5946] usb 6-1: config 1 interface 0 has no altsetting 0 [ 467.757027][ T5946] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 467.766509][ T5946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.775776][ T5946] usb 6-1: Product: syz [ 467.777571][T12932] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.780049][ T5946] usb 6-1: Manufacturer: syz [ 467.799173][ T5946] usb 6-1: SerialNumber: syz [ 467.810064][T12960] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 467.819499][ C0] usb 7-1: ath9k_htc: invalid pkt_len (bf53) [ 467.819546][T12960] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 467.977044][T12932] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 467.991134][T12932] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 468.017480][T12932] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 468.050246][T12962] netlink: 'syz.2.2127': attribute type 1 has an invalid length. [ 468.051809][T12932] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 468.084108][ T5946] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 80 if 0 alt 126 proto 2 vid 0x0525 pid 0xA4A8 [ 468.121054][ T5946] usb 6-1: USB disconnect, device number 80 [ 468.148555][ T5946] usblp0: removed [ 468.231667][ T3657] usb 7-1: USB disconnect, device number 60 [ 468.354150][T12932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.390370][T12932] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.399335][T12979] bond0: (slave erspan0): Opening slave failed [ 468.415758][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.422925][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.447684][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.454896][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.530964][T12981] tipc: Trying to set illegal importance in message [ 468.627056][ T5953] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 468.655021][ T5953] ath9k_htc: Failed to initialize the device [ 468.679653][ T3657] usb 7-1: ath9k_htc: USB layer deinitialized [ 468.768790][ T30] audit: type=1326 audit(1757748548.781:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12990 comm="syz.2.2134" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e0718eba9 code=0x0 [ 468.863542][T12993] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2134'. [ 468.883386][T12993] bond_slave_0: entered promiscuous mode [ 468.889645][T12993] bond_slave_1: entered promiscuous mode [ 468.959170][T12932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.042682][T12932] veth0_vlan: entered promiscuous mode [ 469.058793][T13003] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 469.063322][T12932] veth1_vlan: entered promiscuous mode [ 469.074782][ T43] usb 6-1: new low-speed USB device number 81 using dummy_hcd [ 469.106298][T12932] veth0_macvtap: entered promiscuous mode [ 469.118735][T12932] veth1_macvtap: entered promiscuous mode [ 469.146260][T12932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.157988][T12932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.196963][ T3470] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.211428][ T3470] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.224140][ T3470] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.233886][ T1154] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.247906][ T43] usb 6-1: Invalid ep0 maxpacket: 32 [ 469.348383][ T3470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.362563][ T3470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.375814][ T43] usb 6-1: new low-speed USB device number 82 using dummy_hcd [ 469.403271][ T3530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.411355][ T3530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.464058][T13009] netlink: 'syz.0.2117': attribute type 8 has an invalid length. [ 469.473145][T13009] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2117'. [ 469.485822][T13009] netlink: 'syz.0.2117': attribute type 11 has an invalid length. [ 469.514419][ T3657] usb 7-1: new full-speed USB device number 61 using dummy_hcd [ 469.536163][ T43] usb 6-1: Invalid ep0 maxpacket: 32 [ 469.542308][ T43] usb usb6-port1: attempt power cycle [ 469.673966][ T3657] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 469.674885][ T5876] Bluetooth: hci1: command tx timeout [ 469.694894][ T3657] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.710809][ T3657] usb 7-1: Product: syz [ 469.715800][ T3657] usb 7-1: Manufacturer: syz [ 469.720501][ T3657] usb 7-1: SerialNumber: syz [ 469.729664][ T3657] usb 7-1: config 0 descriptor?? [ 469.755692][T13007] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 469.885414][ T43] usb 6-1: new low-speed USB device number 83 using dummy_hcd [ 469.910017][ T43] usb 6-1: Invalid ep0 maxpacket: 32 [ 469.928939][T13007] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 469.941494][ T3657] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 469.952548][T13007] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.962599][T13007] usb 1-1: Product: syz [ 469.971129][T13007] usb 1-1: Manufacturer: syz [ 469.987426][T13007] usb 1-1: SerialNumber: syz [ 470.064807][ T43] usb 6-1: new low-speed USB device number 84 using dummy_hcd [ 470.087630][ T43] usb 6-1: Invalid ep0 maxpacket: 32 [ 470.093211][ T43] usb usb6-port1: unable to enumerate USB device [ 470.214361][T11309] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 470.364680][T11309] usb 3-1: Using ep0 maxpacket: 32 [ 470.372032][T11309] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 470.383905][T11309] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x8E has invalid wMaxPacketSize 0 [ 470.400155][T11309] usb 3-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 470.413710][T11309] usb 3-1: config 0 interface 0 has no altsetting 0 [ 470.420791][T11309] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 470.430163][T11309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.444482][T11309] usb 3-1: config 0 descriptor?? [ 470.662476][T11309] hid-thrustmaster 0003:044F:B65D.0028: unknown main item tag 0x0 [ 470.673089][T11309] hid-thrustmaster 0003:044F:B65D.0028: unknown main item tag 0x0 [ 470.681597][T11309] hid-thrustmaster 0003:044F:B65D.0028: unknown main item tag 0x0 [ 470.704992][T11309] hid-thrustmaster 0003:044F:B65D.0028: unknown main item tag 0x0 [ 470.712881][T11309] hid-thrustmaster 0003:044F:B65D.0028: unknown main item tag 0x0 [ 470.748577][T11309] hid-thrustmaster 0003:044F:B65D.0028: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 470.775850][T11309] hid-thrustmaster 0003:044F:B65D.0028: Unexpected non-int endpoint [ 470.784255][ C0] hid-thrustmaster 0003:044F:B65D.0028: URB to get model id failed with error -71 [ 470.811775][T11309] usb 3-1: USB disconnect, device number 60 [ 470.851042][T13023] fido_id[13023]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 471.124630][T11309] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 471.278750][T11309] usb 3-1: config 0 interface 0 has no altsetting 0 [ 471.285557][T11309] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 471.295085][T11309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.308583][T11309] usb 3-1: config 0 descriptor?? [ 471.374170][ T3657] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 471.393215][ T3657] usb 7-1: USB disconnect, device number 61 [ 471.426730][T13007] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 471.556880][T11309] video4linux radio48: keene_cmd_main failed (-71) [ 471.563459][T11309] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 471.620434][T11309] usb 3-1: USB disconnect, device number 61 [ 471.645574][T13007] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO [ 471.688928][T13007] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 471.706613][T13007] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 471.718430][T13007] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 471.734464][T13007] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 471.744690][ T5876] Bluetooth: hci1: command tx timeout [ 471.750255][T13007] usb 1-1: USB disconnect, device number 18 [ 472.065236][T11309] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 472.229823][T11309] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 472.250028][T11309] usb 3-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 472.259888][ T10] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 472.272507][T11309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.281844][T11309] usb 3-1: Product: syz [ 472.291185][T11309] usb 3-1: Manufacturer: syz [ 472.298012][T11309] usb 3-1: SerialNumber: syz [ 472.424495][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 472.441577][ T10] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 472.453973][ T10] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.464837][ T10] usb 7-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 472.477966][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 472.484887][ T10] usb 7-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 472.494214][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.522733][ T10] usb 7-1: config 0 descriptor?? [ 472.526990][T13029] netlink: 'syz.2.2145': attribute type 27 has an invalid length. [ 472.544803][T13029] netlink: 'syz.2.2145': attribute type 1 has an invalid length. [ 472.552799][T13029] bridge0: port 1(bridge_slave_0) entered learning state [ 472.566655][T11309] usb 3-1: selecting invalid altsetting 1 [ 472.592765][T11309] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 472.592909][T11309] dvb_usb_lmedm04 3-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 472.612933][T11309] usb 3-1: USB disconnect, device number 62 [ 472.740758][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 472.749034][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 472.760362][ T10] usb 7-1: USB disconnect, device number 62 [ 472.815210][T13007] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 472.965859][T13007] usb 1-1: Using ep0 maxpacket: 8 [ 472.972177][T13007] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 472.983953][T13007] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.996354][T13007] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.006256][T13007] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 473.019623][T13007] usb 1-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 473.029884][T13007] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.041595][T13007] usb 1-1: config 0 descriptor?? [ 473.260203][T13007] redragon 0003:0C45:760B.0029: unknown main item tag 0x6 [ 473.273525][T13007] redragon 0003:0C45:760B.0029: item fetching failed at offset 7/133 [ 473.289122][T13007] redragon 0003:0C45:760B.0029: probe with driver redragon failed with error -22 [ 473.350972][T13063] netlink: 'syz.6.2156': attribute type 4 has an invalid length. [ 473.376581][T13060] netlink: 'syz.6.2156': attribute type 4 has an invalid length. [ 473.452384][ T3657] usb 1-1: USB disconnect, device number 19 [ 473.461745][ T24] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 473.604401][ T24] usb 3-1: device descriptor read/64, error -71 [ 473.684587][ T10] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 473.824479][ T5876] Bluetooth: hci1: command tx timeout [ 473.825504][ T10] usb 7-1: device descriptor read/64, error -71 [ 473.847250][ T24] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 473.997999][ T24] usb 3-1: device descriptor read/64, error -71 [ 474.076713][ T10] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 474.114673][ T24] usb usb3-port1: attempt power cycle [ 474.234670][ T10] usb 7-1: device descriptor read/64, error -71 [ 474.341401][T13087] lo speed is unknown, defaulting to 1000 [ 474.348699][ T10] usb usb7-port1: attempt power cycle [ 474.384725][ T5865] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 474.454410][ T24] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 474.462689][T13093] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 474.481207][T13093] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 474.492747][ T24] usb 3-1: device descriptor read/8, error -71 [ 474.694540][ T10] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 474.734710][ T24] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 474.766591][ T24] usb 3-1: device descriptor read/8, error -71 [ 474.775198][ T10] usb 7-1: device descriptor read/8, error -71 [ 474.874768][ T24] usb usb3-port1: unable to enumerate USB device [ 474.994674][T13007] usb 6-1: new full-speed USB device number 85 using dummy_hcd [ 475.014400][ T10] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 475.041299][ T10] usb 7-1: device descriptor read/8, error -71 [ 475.134407][ T929] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 475.139419][T13007] usb 6-1: device descriptor read/64, error -71 [ 475.154811][ T10] usb usb7-port1: unable to enumerate USB device [ 475.264805][ T31] INFO: task syz.4.1112:9698 blocked for more than 143 seconds. [ 475.272479][ T31] Not tainted syzkaller #0 [ 475.277763][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 475.286777][ T31] task:syz.4.1112 state:D stack:26184 pid:9698 tgid:9697 ppid:8398 task_flags:0x400140 flags:0x00004004 [ 475.299023][ T31] Call Trace: [ 475.300499][ T929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 475.302401][ T31] [ 475.314366][ T929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.326841][ T929] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 475.329665][ T31] __schedule+0x1798/0x4cc0 [ 475.336820][ T929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.352075][ T929] usb 1-1: config 0 descriptor?? [ 475.357579][ T31] ? __lock_acquire+0xab9/0xd20 [ 475.367425][ T31] ? __lock_acquire+0xab9/0xd20 [ 475.372371][ T31] ? __pfx___schedule+0x10/0x10 [ 475.381392][ T31] ? schedule+0x91/0x360 [ 475.384544][T13007] usb 6-1: new full-speed USB device number 86 using dummy_hcd [ 475.387905][ T31] schedule+0x165/0x360 [ 475.398531][ T31] schedule_preempt_disabled+0x13/0x30 [ 475.431295][ T31] __mutex_lock+0x7e6/0x1350 [ 475.454918][ T31] ? __mutex_lock+0x5bb/0x1350 [ 475.484561][ T31] ? sync_bdevs+0x1ac/0x340 [ 475.489152][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 475.494238][ T31] ? iput+0x5d5/0xc40 [ 475.514336][ T31] sync_bdevs+0x1ac/0x340 [ 475.518750][ T31] ksys_sync+0xb9/0x150 [ 475.522941][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 475.544431][T13007] usb 6-1: device descriptor read/64, error -71 [ 475.560794][ T31] ? do_syscall_64+0xbe/0xfa0 [ 475.584330][ T31] __ia32_sys_sync+0xe/0x20 [ 475.588950][ T31] do_syscall_64+0xfa/0xfa0 [ 475.593508][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 475.634351][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.654644][T13007] usb usb6-port1: attempt power cycle [ 475.666808][ T31] ? clear_bhb_loop+0x60/0xb0 [ 475.671592][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.689684][ T31] RIP: 0033:0x7f402678eba9 [ 475.695023][ T31] RSP: 002b:00007f40275b5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 475.703477][ T31] RAX: ffffffffffffffda RBX: 00007f40269d5fa0 RCX: 00007f402678eba9 [ 475.711552][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 475.721328][ T31] RBP: 00007f40269d5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 475.730160][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 475.738977][ T31] R13: 00007f40269d6038 R14: 00007f40269d5fa0 R15: 00007fffae9258d8 [ 475.747425][ T31] [ 475.750592][ T31] [ 475.750592][ T31] Showing all locks held in the system: [ 475.804944][ T31] 1 lock held by khungtaskd/31: [ 475.809839][ T31] #0: ffffffff8e53c820 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 475.850171][ T31] 3 locks held by kworker/1:1/43: [ 475.874731][ T31] #0: ffff88801a871548 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 475.923218][ T5876] Bluetooth: hci1: command 0x206a tx timeout [ 475.931707][ T31] #1: ffffc90000b37ba0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 475.934392][ T5865] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 475.996587][ T31] #2: ffffffff8e5422b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 476.024463][ T31] 5 locks held by kworker/0:2/929: [ 476.029638][ T31] #0: ffff888021a96148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 476.064330][ T31] #1: ffffc90003b47ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 476.094404][ T31] #2: ffff8880282ba198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 476.103384][ T31] #3: ffff88807c2a1198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 476.152025][ T31] #4: ffff88807c9e2160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 476.179511][ T31] 2 locks held by getty/5621: [ 476.184244][ T31] #0: ffff88814d6b10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 476.204148][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 476.244346][ T31] 3 locks held by kworker/u9:6/5874: [ 476.264302][ T31] #0: ffff88807bfbb148 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 476.299404][ T31] #1: ffffc9000409fba0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 476.334303][ T31] #2: ffff8880330f8dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 476.380885][ T31] 1 lock held by udevd/7377: [ 476.390692][ T31] #0: ffff888142f98358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 476.404442][ T31] 1 lock held by syz.4.1112/9698: [ 476.409500][ T31] #0: ffff888142f98358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ac/0x340 [ 476.419062][ T31] 1 lock held by syz.1.1276/10233: [ 476.424325][ T31] #0: ffff888142f98358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 476.435812][ T31] 1 lock held by syz.6.1452/10841: [ 476.440973][ T31] #0: ffffffff8f955108 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 476.454415][ T31] 3 locks held by kworker/0:0/11309: [ 476.462411][ T31] #0: ffff88801a871548 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 476.474157][ T31] #1: ffffc90005607ba0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 476.485528][ T31] #2: ffffffff8e542180 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 476.495591][ T31] 3 locks held by syz.2.1771/11900: [ 476.500819][ T31] #0: ffff888058bb4dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 476.511219][ T31] #1: ffff888058bb40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 476.521306][ T31] #2: ffffffff8fab9c08 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 476.531440][ T31] 5 locks held by syz.0.2172/13105: [ 476.537475][ T31] #0: ffff88807816cdc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 476.547568][ T31] #1: ffff88807816c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 476.558634][ T31] #2: ffffffff8fab9c08 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 476.568835][ T31] #3: ffff888050e96338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 476.578250][ T31] #4: ffffffff8e5422b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 476.593151][ T31] [ 476.611370][ T31] ============================================= [ 476.611370][ T31] [ 476.621216][ T31] NMI backtrace for cpu 0 [ 476.621238][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 476.621258][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 476.621269][ T31] Call Trace: [ 476.621281][ T31] [ 476.621288][ T31] dump_stack_lvl+0x189/0x250 [ 476.621314][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.621332][ T31] ? __pfx__printk+0x10/0x10 [ 476.621368][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 476.621398][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 476.621425][ T31] ? __pfx__printk+0x10/0x10 [ 476.621454][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 476.621476][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 476.621505][ T31] watchdog+0xf60/0xfa0 [ 476.621529][ T31] ? watchdog+0x1e2/0xfa0 [ 476.621554][ T31] kthread+0x711/0x8a0 [ 476.621582][ T31] ? __pfx_watchdog+0x10/0x10 [ 476.621600][ T31] ? __pfx_kthread+0x10/0x10 [ 476.621626][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 476.621645][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 476.621664][ T31] ? __pfx_kthread+0x10/0x10 [ 476.621690][ T31] ret_from_fork+0x4bc/0x870 [ 476.621715][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 476.621743][ T31] ? __switch_to_asm+0x39/0x70 [ 476.621760][ T31] ? __switch_to_asm+0x33/0x70 [ 476.621777][ T31] ? __pfx_kthread+0x10/0x10 [ 476.621803][ T31] ret_from_fork_asm+0x1a/0x30 [ 476.621838][ T31] [ 476.621864][ T31] Sending NMI from CPU 0 to CPUs 1: [ 476.706197][ T5865] Bluetooth: hci4: command 0x0c1a tx timeout [ 476.707997][ C1] NMI backtrace for cpu 1 [ 476.708011][ C1] CPU: 1 UID: 0 PID: 5865 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 476.708029][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 476.708040][ C1] Workqueue: hci4 hci_cmd_timeout [ 476.708063][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 476.708084][ C1] Code: e8 9e 36 64 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 8f b8 c8 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 5a 95 32 06 cc 44 89 f9 80 e1 07 [ 476.708098][ C1] RSP: 0018:ffffc9000401f290 EFLAGS: 00000002 [ 476.708112][ C1] RAX: 1ffffffff344c600 RBX: 00000000000003fd RCX: 0000000000000000 [ 476.708124][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 476.708135][ C1] RBP: ffffffff9a263530 R08: ffff888024aa8237 R09: 1ffff11004955046 [ 476.708147][ C1] R10: dffffc0000000000 R11: ffffffff855bd480 R12: dffffc0000000000 [ 476.708158][ C1] R13: 0000000000000000 R14: ffffffff9a2632a0 R15: 0000000000000000 [ 476.708170][ C1] FS: 0000000000000000(0000) GS:ffff8881258a7000(0000) knlGS:0000000000000000 [ 476.708183][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 476.708194][ C1] CR2: 0000557ecb66e000 CR3: 000000007c902000 CR4: 00000000003526f0 [ 476.708209][ C1] Call Trace: [ 476.708216][ C1] [ 476.708224][ C1] wait_for_lsr+0x1a1/0x2f0 [ 476.708248][ C1] serial8250_console_write+0x134c/0x1ba0 [ 476.708273][ C1] ? __lock_acquire+0xab9/0xd20 [ 476.708291][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 476.708310][ C1] ? console_flush_all+0x13a/0xb10 [ 476.708331][ C1] ? console_flush_all+0x13a/0xb10 [ 476.708353][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 476.708375][ C1] ? console_flush_all+0x13a/0xb10 [ 476.708396][ C1] console_flush_all+0x6f3/0xb10 [ 476.708417][ C1] ? console_flush_all+0x13a/0xb10 [ 476.708440][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 476.708465][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 476.708482][ C1] console_unlock+0xbb/0x190 [ 476.708500][ C1] ? vprintk_emit+0x2ee/0x590 [ 476.708517][ C1] ? __pfx_console_unlock+0x10/0x10 [ 476.708540][ C1] ? vprintk_emit+0x2ee/0x590 [ 476.708557][ C1] ? vprintk_emit+0x2ee/0x590 [ 476.708576][ C1] vprintk_emit+0x4c5/0x590 [ 476.708595][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 476.708612][ C1] ? rcu_read_lock_sched_held+0x89/0x100 [ 476.708634][ C1] ? __pfx___calc_delta+0x10/0x10 [ 476.708648][ C1] ? cpuacct_charge+0x117/0x320 [ 476.708672][ C1] _printk+0xcf/0x120 [ 476.708695][ C1] ? __pfx__printk+0x10/0x10 [ 476.708714][ C1] ? do_raw_spin_lock+0x121/0x290 [ 476.708733][ C1] ? look_up_lock_class+0x74/0x170 [ 476.708755][ C1] bt_err+0x10b/0x160 [ 476.708773][ C1] ? __lock_acquire+0xab9/0xd20 [ 476.708799][ C1] ? __pfx_bt_err+0x10/0x10 [ 476.708826][ C1] hci_cmd_timeout+0xd8/0x1e0 [ 476.708840][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 476.708859][ C1] process_scheduled_works+0xae1/0x17b0 [ 476.708890][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 476.708915][ C1] worker_thread+0x8a0/0xda0 [ 476.708946][ C1] kthread+0x711/0x8a0 [ 476.708968][ C1] ? __pfx_worker_thread+0x10/0x10 [ 476.708985][ C1] ? __pfx_kthread+0x10/0x10 [ 476.709006][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 476.709022][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 476.709037][ C1] ? __pfx_kthread+0x10/0x10 [ 476.709058][ C1] ret_from_fork+0x4bc/0x870 [ 476.709079][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 476.709099][ C1] ? __switch_to_asm+0x39/0x70 [ 476.709115][ C1] ? __switch_to_asm+0x33/0x70 [ 476.709130][ C1] ? __pfx_kthread+0x10/0x10 [ 476.709150][ C1] ret_from_fork_asm+0x1a/0x30 [ 476.709173][ C1] [ 476.714740][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 476.714757][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 476.714778][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 476.714790][ T31] Call Trace: [ 476.714798][ T31] [ 476.714807][ T31] dump_stack_lvl+0x99/0x250 [ 476.714829][ T31] ? __asan_memcpy+0x40/0x70 [ 476.714850][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.714872][ T31] ? __pfx__printk+0x10/0x10 [ 476.714907][ T31] vpanic+0x237/0x6d0 [ 476.714929][ T31] ? __pfx_vpanic+0x10/0x10 [ 476.714959][ T31] panic+0xb9/0xc0 [ 476.714980][ T31] ? __pfx_panic+0x10/0x10 [ 476.715009][ T31] ? __pfx_panic+0x10/0x10 [ 476.715031][ T31] watchdog+0xf9f/0xfa0 [ 476.715062][ T31] ? watchdog+0x1e2/0xfa0 [ 476.715086][ T31] kthread+0x711/0x8a0 [ 476.715114][ T31] ? __pfx_watchdog+0x10/0x10 [ 476.715132][ T31] ? __pfx_kthread+0x10/0x10 [ 476.715158][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 476.715179][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 476.715197][ T31] ? __pfx_kthread+0x10/0x10 [ 476.715223][ T31] ret_from_fork+0x4bc/0x870 [ 476.715246][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 476.715274][ T31] ? __switch_to_asm+0x39/0x70 [ 476.715292][ T31] ? __switch_to_asm+0x33/0x70 [ 476.715310][ T31] ? __pfx_kthread+0x10/0x10 [ 476.715336][ T31] ret_from_fork_asm+0x1a/0x30 [ 476.715371][ T31] [ 476.717269][ T31] Kernel Offset: disabled