last executing test programs: 2m31.482326914s ago: executing program 2 (id=365): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="000d4c276bb2a2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000640)=ANY=[@ANYBLOB="400006000000ae"], 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x1, 0x1, 0x3}, 0x0}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0xfe8f, 0x10}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={r2, 0x1662}, 0x8) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xe) shutdown(r1, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0), 0x0) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) read$alg(r3, &(0x7f0000000040)=""/188, 0xbc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000200)={r4, 0x1}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e21, 0x9, @remote, 0xa6bb}}}, &(0x7f00000001c0)=0x84) 2m30.868424412s ago: executing program 2 (id=370): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000640)={0x44, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x12}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc800}, 0x40) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="fc010000130001"], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendto$inet6(r2, &(0x7f0000000080)="b1", 0xfffd, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close(0x3) 2m30.850931248s ago: executing program 2 (id=371): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000200)={@multicast1, @local}, 0xc) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f00000000c0)=@attr_other={0x0, 0x1, 0x2, 0x0}) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x5, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "5893df66bf3ce816"}}, 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="0600"], 0x48}}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x28, &(0x7f0000000080)={@multicast2, @dev={0xac, 0x14, 0x14, 0x38}, r5}, 0xc) 2m30.747709166s ago: executing program 2 (id=372): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r2, &(0x7f00000005c0)="afbd88fc", 0x4) sync_file_range(0xffffffffffffffff, 0xba, 0x7, 0x1) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getpeername$llc(0xffffffffffffffff, &(0x7f0000001200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000001240)=0x10) poll(&(0x7f0000000180)=[{r1, 0x80}], 0x1, 0x8) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYRESHEX], 0x1c}}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = timerfd_create(0xe, 0x1000) timerfd_gettime(r4, &(0x7f0000000180)) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r5 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r5}, &(0x7f0000044000)=0x0) timer_settime(r6, 0x236bd4336e4642df, &(0x7f0000000300)={{0x77359400}, {0x0, 0xe4c}}, 0x0) r7 = gettid() tkill(r7, 0x12) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) setsockopt$inet_buf(r3, 0x0, 0x4, &(0x7f0000000040)="440910bc996c301c8107070400", 0x28) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc43, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r8, 0x40043311, 0x0) getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, &(0x7f0000000240)) socket$nl_xfrm(0x10, 0x3, 0x6) 2m27.602508509s ago: executing program 2 (id=383): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12fa00009c323f08a5040330b202010203010902120001000200000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000002000)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003160000000403"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405668, &(0x7f0000000100)={0x0, 0x0, 0xc}) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2c}, 0x78, r3}) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8916, &(0x7f0000000000)) ioctl(r4, 0x8936, &(0x7f0000000000)) syz_usb_control_io$printer(r0, 0x0, 0x0) 2m27.07539319s ago: executing program 2 (id=386): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x9e, 0xdc, 0x17, 0x40, 0x1286, 0x2046, 0x7e5f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xca, 0x0, 0x40, 0x8, [{{0x9, 0x4, 0x71, 0x9, 0x0, 0xff, 0x4, 0x1, 0x4}}]}}]}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) sync() 2m11.812866329s ago: executing program 32 (id=386): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x9e, 0xdc, 0x17, 0x40, 0x1286, 0x2046, 0x7e5f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xca, 0x0, 0x40, 0x8, [{{0x9, 0x4, 0x71, 0x9, 0x0, 0xff, 0x4, 0x1, 0x4}}]}}]}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) sync() 1m48.220078572s ago: executing program 1 (id=637): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000040)={'macvlan0\x00', @random="0100"}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) signalfd(r3, &(0x7f0000000200)={[0x7fff]}, 0x8) (async) r5 = signalfd(r3, &(0x7f0000000200)={[0x7fff]}, 0x8) write$tun(r5, &(0x7f00000002c0)={@void, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @private=0xa010101, @empty, @loopback}}, 0x1c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, 0x0, &(0x7f0000000000)=0xffffffffffffff4f) syz_usb_connect(0x5, 0x59, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000ec1bb2106c04e01401000102030109028f11010000000009046900000e010000182402010202f25d16876185782d8918b263b57fcb8a1c611b"], 0x0) (async) syz_usb_connect(0x5, 0x59, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000ec1bb2106c04e01401000102030109028f11010000000009046900000e010000182402010202f25d16876185782d8918b263b57fcb8a1c611b"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x3a, @rand_addr=0x64010102, 0x4e20, 0x1, 'rr\x00', 0x35, 0x7, 0x2b}, {@rand_addr=0x64010100, 0x5e22, 0x0, 0x80000001, 0x7ffffff7, 0x200004}}, 0x44) (async) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x3a, @rand_addr=0x64010102, 0x4e20, 0x1, 'rr\x00', 0x35, 0x7, 0x2b}, {@rand_addr=0x64010100, 0x5e22, 0x0, 0x80000001, 0x7ffffff7, 0x200004}}, 0x44) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x340, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) (async) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) 1m47.130691912s ago: executing program 1 (id=652): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) (async) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000002c0)=[0x80000000, 0x4]) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r2, 0x0, &(0x7f00000a0000)='LLL', 0x3}) 1m45.710151421s ago: executing program 1 (id=662): socket$key(0xf, 0x3, 0x2) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000044000180060001000a00000008000500000000000c00070000000000000000000800090030002300090006006e6f6e6500000000080008000000000008000b"], 0x58}}, 0x0) 1m45.5877738s ago: executing program 1 (id=663): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x400c800) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xdc, r1, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0xc8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "ba534764d7be5d7179fdc295cb9e26dc"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "30c3aa981e90313a9e6aed7cdc56b40f"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "97e7a790cdaf5bc4ae47301825a8665c62ed147d8fd1ed2a43cda771f40810e9"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "fd18c4f64d27705b786288b6f95d0abe"}, @NL802154_KEY_ATTR_ID={0x50, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}]}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4004040}, 0x4048000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) r5 = socket$inet6(0xa, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000500)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000800)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xd0, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x974}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '#{'}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20}, 0x10) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f0000000840)={'wpan3\x00'}) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000008c0)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r14, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4800) r16 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000a00), r6) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r16, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x401}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000045}, 0x4000000) r17 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSIGACCEPT(r17, 0x4b4e, 0x35) stat(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)) r18 = socket$nl_generic(0x10, 0x3, 0x10) r19 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r6) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000c40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r18, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x30, r19, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r20}, @val={0xc, 0x99, {0x9, 0x72}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) 1m45.159153492s ago: executing program 1 (id=665): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000040)={0x2, 0x9}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x200042, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f00000000c0)=0x1, 0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x101003, 0x0) ioctl(r1, 0x315, &(0x7f0000000140)="db6ef2001a959b2bd39364daba799a4fd0271c816405f500e71283d910fcdad96cda094ab62b86ac5d99da9ae05ebddb72ce5ca02c997b2fb78a7c3ae989d4fc933cdd6affc0d42b0bfe41a797e0") ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000200)={'wg1\x00', 0x0}) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xdc, 0x12, 0x20, 0x70bd29, 0x25dfdbfb, {0x10, 0x1, 0x81, 0x10, {0x4e24, 0x4e21, [0x1, 0x1, 0x7fffffff, 0x36], [0x2047, 0x7f, 0xa88, 0xfffffffb], r4, [0x3]}, 0x401, 0x6c}, [@INET_DIAG_REQ_BYTECODE={0x90, 0x1, "adc04c83feb1acb83d053e8876111f290c069cc3ee6d07dc6656f490c1b4ed0c268ee4a11ff0b253a5051e18a162e8afbff35ea1e50d2c09ba049596ba1e8f9db8b64e3dfe3cb687e1e2c3379ab2c2b6c55021f66f99a197142b178d25bcbfbfd26c087c68c24a3eff5fd0731476d515ef1396b2354b5c268fe082963434caf8d415c6a6f304d6cb0827ed42"}]}, 0xdc}}, 0x8000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000400)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000440), &(0x7f0000000480)=0x8) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000004c0), 0x4) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000580)={&(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, r5, 0xbbbbbbbb}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000005c0), 0x200000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000600)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x6, @mcast2}, @in6={0xa, 0x4e20, 0x2, @mcast1, 0x10}, @in6={0xa, 0x4e21, 0x2, @remote, 0x3}], 0x64) bind$isdn_base(r2, &(0x7f0000000680)={0x22, 0x7, 0x6, 0xf3, 0x9}, 0x6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x10}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1000}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040814}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r6, {r0}}, './file0\x00'}) ioctl$DRM_IOCTL_IRQ_BUSID(r7, 0xc0106403, &(0x7f0000000800)={0x0, 0x80, 0x2422, 0x9}) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000840), 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000008c0), r0) sendmsg$MPTCP_PM_CMD_REMOVE(r8, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x74, r9, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x65}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r2) sendmsg$BATADV_CMD_GET_ORIGINATORS(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x3c, r11, 0x22, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xb5dc}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000b40), 0x200800, 0x0) 1m44.996255882s ago: executing program 1 (id=667): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) r1 = syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000080)={0x0, 0x0, 0x0, @lost_msgs}) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000040)={0x87}, 0x8) getsockopt$inet6_opts(r2, 0x29, 0x37, 0x0, &(0x7f0000000140)) 1m34.282297893s ago: executing program 0 (id=731): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xb4}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "1f000000"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x1, 0xa0, 0x40}}, 0x28) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a01040000000000000000020000003c000480380401800b00010064796e7365740000280002800900010073797a3000000000080004400000000a080009400000000308000340000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x90}}, 0x0) 1m34.193662977s ago: executing program 0 (id=732): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000002000000e92c4bb8"], 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x7, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x2, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x8040) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a0006000140020203600e41b0000900ac00060311000000a4000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r3, 0x10e, 0x5, &(0x7f00000000c0)=""/72, &(0x7f0000000140)=0x48) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a010100"/48, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000028179ef5f27221"], 0x144}}, 0x20000000) r6 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0b080510"], 0xe) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01082cbd7000fbdbdf250b00000008000300", @ANYRES32=r8, @ANYBLOB="04e4270008006e80040008803130b8ca47d8d71f6f1b87da784c814b59ca13cbbb20501bb9a43eeac4ead5999301000000000000007ec1fd38a8ecd75505735d4c8c62b6633db3f0879b6129fa22cd5f794a4d1f33a44c9de62ba405089b"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x80840, 0x0) ioctl$IOMMU_GET_HW_INFO(r9, 0x3b8a, &(0x7f0000000380)={0x28, 0x0, 0x0, 0x0, 0x0}) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x17, 0x7a, 0x601, 0x4000000, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7800, 0x0, 0xc10, 0x8f2, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c060000", @ANYRES16=0x0, @ANYBLOB="00032abd7000fcdbdf25080000003805028004000100b4000380240001800a0002005d212b215d000000040003000800010051000000080001000000000024000180050002002a000000080001000500000008000100060000000800010035ffffff2c00018008000100090000000400030004000300040003000c000200677265746170300005000200000000003c00018008000100000000000c0002006e6c383032313100040003000c0002000400000000000000080001009d0e000005000200000000000400030064010380380001800500020040000000080001007f0000000800010004000000080001000500000004000300040003000400030008000100000000003c0001800400030025000200292ad72d2c00429e7acc6386218b3560f03c1e5c8a1d29d601f7c71e18d03052f000000009000200aaaaaaaaaa0000002400018009000200aaaaaaaaaa00000005000200000000000a000200776c616e30000000440001800400030008000100060000000c0002006e6c383032313100040003000d0002006d6163766c616e310000000008000100070000000400030008000100ffff0000240001800400030008000100ffff000004000300040003000c00020073797a746e6c300040000180080001000600000008000100050000000c0002006772657461703000080001000200000008000100060000000800010000000004040003000400030014000180080001000000008008000100e26800000c0001800400030004000300980103800c00018006000200260000008400018004000300700002002f2f5e233a00ba6616e1cb8929d17b256d6d6c252f4dffbdfd1a353b3d550e2b4279d9d1b5291cd005f82116b722f7b01b709b4cb786ecccd91a6a94060033ef79307194a48e7de9b31ffc1d3a14e379103cc58e6f9280bd4c24ce5e530ba21c0388ae3a8267633c76aef0fe0400030004000300040003009c00018008000100ff030000040003000500020000000000590002002dd4090000005f253c1402ec9910eb6484764af9b26e0b0501e07b5115454f9f8046828a0a5a3fb1dfd2f8dd1fc05cbfa23e139c3398fb7ee9a4404164382d8a224f1dcdbc1d2918123d58a0d17273cf745823ff8e0000000f0002002f6465762f696f6d6d750000080001000200000004000300080001000c000000040003001400018006000200260000000400030004000300240001800400030009000200aaaaaaaaaa000000040003000400030008000100010000002000018008000100af000000040003000a0002005d212b215d0000000400030010000180080001000700000004000300ad000500886104f1b00dd94d7a02c8ed3f3387c15f298396a419073e91e6f4b26f56c49a01ac5bfd3fbecd8f083b60fb4545e41b9383768c5b9c6f71f3b6cd7639611e058f0be5f3c93c757cd30f982d4b9690d8218477bfd509890abe7289732acd0dc9b6ffee4283deace9b287a20a305f4d8dbe3b796ce200504d5e7cdb848ad26ee03caadf5dd6c190a403e45ff5b66dcf574ebf3f81308ed9ed829a0aa553b62673be88a65ec67aa4a48900000078000380040001803400018004000300070002002b3a00000400030004000300080001000c00000005000200000000000a000200776c616e30000000140001800d0002006d6163766c616e310000000004000180200001800400030005000200000000000c00020073797a746e6c3000040003000400018050000380140001800800010003000000080001000200000038000180040003000d0002006d6163766c616e31000000000500020000000000080001000900000009000200aaaaaaaaaa000000040003000800020000000000100102800401038024000180040003000c0002006e6c3830323131000d00020025e95e2c272b5b26000000005000018008000100ffff000009000200aaaaaaaaaa0000000800010080ffffff110002005c7b2b5e242821275b27262600000000040003000800010016000000050002000000000008000100000400082400018006000200260000000400030008000100426a00000c00020067726574617030003c0021800d00020023285e2a0d28291c000000000400030008000100760700000400030004000300040003000400030008000100ff010000040003002c000180080002007b2e280005000200000000000400030008000100010000000400030008000100090000000800020007000000"], 0x65c}, 0x1, 0x0, 0x0, 0x4}, 0x40000a1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvlan1\x00'}) r12 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r12, &(0x7f00000000c0)={&(0x7f0000000480)=@phonet={0x23, 0x0, 0x4, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) 1m33.966231724s ago: executing program 0 (id=734): r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x7, 0x6, @local}, 0x14) sendmsg$netlink(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[], 0x34}], 0x1, 0x0, 0x0, 0x20000004}, 0x4000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009740)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x2408c000) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000003}, 0x8) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) 1m33.089070859s ago: executing program 0 (id=736): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10, 0x80000) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x3, 0x0, 0x20003}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000200)={0x33}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r6, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0, 0x7fdfee00}, {&(0x7f0000000140)="d9", 0x98}], 0x2, 0x0, 0x0, 0x3) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000aa2f145a3e2c69912a084ff1c90a9555fa7dfb4abb6f69a2badbbf2574ec259cf168ab1116e1fb1365ba480e3daddb144bb20f1ef69ab861819846015d3885612fe78401a593fcfcc1da4953e9ae4521d7e4c808b511a24cf30ac1a09a554c2529", @ANYRES16=r7, @ANYBLOB="01002cbd7000fbdbdf250100000008000300", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x8010) keyctl$instantiate(0xc, 0x0, &(0x7f0000000240)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', '/dev/input/mouse#\x00', 0x20, 0x1000}, 0xffffffffffffff4f, 0xfffffffffffffffb) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r7, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x1c}}, 0x8010) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, 0x0, 0x8e68779db2d4ce24, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x830) 1m33.026808158s ago: executing program 0 (id=737): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x6, 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1m32.088249861s ago: executing program 0 (id=741): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000000c0)={0x18, 0x3f, 0x1, 0x70bd29, 0x25dfdbfd, "", [@typed={0x4, 0x52}, @generic="f6"]}, 0x18}], 0x1, 0x0, 0x0, 0x1}, 0xc040) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x3) syz_clone(0x20042400, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0) (async) r1 = syz_clone(0x20042400, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0) ptrace(0x4206, r1) ptrace(0x8, r1) ptrace(0x4207, r1) (async) ptrace(0x4207, r1) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) sync() (async) sync() 1m29.971049159s ago: executing program 33 (id=667): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) r1 = syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000080)={0x0, 0x0, 0x0, @lost_msgs}) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000040)={0x87}, 0x8) getsockopt$inet6_opts(r2, 0x29, 0x37, 0x0, &(0x7f0000000140)) 1m17.07839346s ago: executing program 34 (id=741): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000000c0)={0x18, 0x3f, 0x1, 0x70bd29, 0x25dfdbfd, "", [@typed={0x4, 0x52}, @generic="f6"]}, 0x18}], 0x1, 0x0, 0x0, 0x1}, 0xc040) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x3) syz_clone(0x20042400, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0) (async) r1 = syz_clone(0x20042400, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0) ptrace(0x4206, r1) ptrace(0x8, r1) ptrace(0x4207, r1) (async) ptrace(0x4207, r1) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) sync() (async) sync() 1m4.183882721s ago: executing program 3 (id=841): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r0, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x18, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}}, 0x84) 1m3.903315748s ago: executing program 3 (id=844): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x0, 0xb, 0x110, 0x2, 0xa1, 0x10001, 0x0}) (async) socketpair(0x11, 0x6, 0x25, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) (async) r2 = accept$phonet_pipe(r1, 0x0, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000040)={'xfrm0\x00', {0x2, 0x4e20, @rand_addr=0x64010100}}) 1m3.834698227s ago: executing program 3 (id=845): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000380)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='b 75:*\tm'], 0xa) syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904002c11018b7500090583"], 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='\xc0\a\xb0\xfd\xa3\x1c\n\x17\x1b\xfa\x81 \xdd!\xd9\xeb\x1d\nW\xc1\x81p\x92\nH\xb0i\x03\xbdv\xb4<\xb3\x7f/E+\x12\xf9\x1c\xf3\xad\x80\x9dxa\xbf\xa2\t\xee\xdc\xae\x19d\xa9\xb5\x8f\xb1\xfa\xb6)\v\xb8\xa7\xb1\xf0\xb7ysd\xe15\b\xe9\x91\xb6\xec\x8f\x922]\xe3\x0ez\xcd\x04\r\xb0\xe8\xff\xcd\xf8\xb6>\xe2\xa5\x04\xa9\v\x0f\xf2A\xf2\xf5\xf2\xd2\x1a\t\xf9R\xc6\xddO') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r2, &(0x7f0000003340)={0x2020}, 0x2020) syz_open_dev$mouse(&(0x7f0000000280), 0x1, 0x0) 1m2.498397718s ago: executing program 3 (id=851): socket(0x10, 0x6, 0x429) (async) r0 = socket(0x10, 0x6, 0x429) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000004000000080009000d000000", 0x24) 1m2.396174273s ago: executing program 3 (id=852): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0xc0, 0x8, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x7, 0x1, 0x1, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xb, 0x8, 0x3b}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x9, 0x7, 0xc}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x9, 0x6, 0x81, 0x50, 0x4e}, 0x4a, &(0x7f0000000140)={0x5, 0xf, 0x4a, 0x5, [@wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x91, 0x8, 0xa8, 0x5c}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "f03783230bd6cbcb1855207cab46e013"}, @ssp_cap={0x1c, 0x10, 0xa, 0xf, 0x4, 0x8000, 0x7700, 0x140, [0x3f00, 0xff3f0f, 0x30, 0x0]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0x0, 0xd}]}, 0x5, [{0xc4, &(0x7f00000002c0)=@string={0xc4, 0x3, "98c2fb6430ce896ba50e4f7c49ef34966a35a389ae2036e98ba55d6dc1e0a08a532bf32a5d3e4a3bf120c61bfe6bc854582f3590463129c4b579d4a90fcfa187b978e2edfdaafe037ea0764574ca2c1299b64907a6e7bd6ebc1361bd05a6f229c59f352899c279e34946a741620ab54bc03f2759ff19bdf0700c4d28806727f774ddbae508aa85a316441cf02a739e31670355e83fa1ac84cfe94aa2571f8de6c34d7762220d3bc57c150b6cfc3860540f790d7333dd747c59f7bfa49dc31c5def70"}}, {0xb4, &(0x7f00000001c0)=@string={0xb4, 0x3, "3351ec709b45a5caca608cf7d933ba5e96cbb334710680d0fd693a86355c86538ad8efe7bd75ad3cf7b3049cb0523a4d3a9db4170aa29c8bc4fabbc99a445475b4ed34c7b7d21770973bd0386585a79434cc86af00ac0951626bae5798c998c19f13c1c2f76f12369d0933a8f3cbd23eda3cf38aef311cbca90f11c8d7b0d99b4b38c29cd6fec102f8f5a1b45b8e69c9915d7e300eb02db1b7500e72d771e6f86bf4732f04a4e699a71a44e4775372c8eeca"}}, {0xd, &(0x7f00000000c0)=@string={0xd, 0x3, "3bd55ebe574d595d69354d"}}, {0x75, &(0x7f00000003c0)=@string={0x75, 0x3, "faa618db6629a0bfc364965baa59c4802bc6b8d1dd0eedfa1ccc702f9397c3735c72779ce28b71cc73163cd27e4cdaa4a087812af58069ca045286ff7898db49514be6fb0fdb9f0c8029991cf22cd0aa11d9407e488a669d40687439cda83e738558d0265e2608c543257b10720ac94c78080f"}}, {0xf9, &(0x7f0000000440)=@string={0xf9, 0x3, "1a60e5a8e081559488e9e4975d2e2f10106c21ad4ff70aa4c494b019baf1fc2ca3b6cd12db97ff20d1b6f665920976f904fc02f39e8b883eb4a42fc08e627c958a376472f15f268d38027f30efc66ec54e31119869a52ec9429abaf006e42918d46fa0adfa7afde4c41becf39721f7a7cf831151e1f1e54570ecd20d6f41b59dadba0e9077334d8c119305944f9e7f83211fae21d74e0a3b84b41ffac963d39fc242050da01f24f092c47d01d984f6ab69d8e0d1ed983eb69d2112acc57c4eeaafbd5de414e15790f061c7a883f59a26ba755ed328f8ff0241c529a0e0178625af976db60d1da06edb78dd9567872c13220f51bedc25c7"}}]}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) syz_usb_connect$cdc_ncm(0x0, 0xad, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x2, 0x1, 0x2, 0x100, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x3ff, 0x6, 0xd9}, {0x6, 0x24, 0x1a, 0x2, 0x1}, [@call_mgmt={0x5, 0x24, 0x1, 0x4, 0x8}, @dmm={0x7, 0x24, 0x14, 0x40, 0x2}, @mdlm={0x15, 0x24, 0x12, 0xfff5}, @mdlm={0x15, 0x24, 0x12, 0x5}, @acm={0x4, 0x24, 0x2, 0x1}, @obex={0x5, 0x24, 0x15, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0x4, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x40, 0x3, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x5e, 0x9, 0x5}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x300, 0xe4, 0x7, 0x4, 0xff, 0x29}, 0x5, &(0x7f0000000700)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x1c21}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f00000007c0)=@string={0x4, 0x3, "569f"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x3c01}}]}) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) ioctl$SNDCTL_SYNTH_MEMAVL(r1, 0x8004510b, 0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m0.741028921s ago: executing program 3 (id=860): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000080)={0x41, 0x0, 0x27f}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc41, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40384708, &(0x7f0000000040)={0x8, 0x321d, 0xd8, 0x7f35, 0x1, "3eccd25569e20900"}) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1}) write$binfmt_misc(r4, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000400)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d960701000100a89de2b7fb0000e60080b8785d9680000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="1503000065ffff0600000008003950323030302e4c"], 0x15) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000200)={'veth1_to_hsr\x00', @random="c70287e22e0e"}) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000280)={0x40000000, 0x102, "bb49bf30f91c708796a629958ca0e3702c334142fac197bfdd29ce2476f2e7fd", 0x6, 0x391c, 0x1, 0x7211, 0x2, 0xfffffffb, 0x4, 0x4, [0x7, 0x20ec, 0x5, 0x8]}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@afid={'afid', 0x3d, 0x80000001}}], [], 0x6b}}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) r8 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "c3898e32"}]}}, 0x0}, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x541c, &(0x7f0000000180)) 45.381257327s ago: executing program 35 (id=860): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000080)={0x41, 0x0, 0x27f}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc41, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40384708, &(0x7f0000000040)={0x8, 0x321d, 0xd8, 0x7f35, 0x1, "3eccd25569e20900"}) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1}) write$binfmt_misc(r4, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000400)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d960701000100a89de2b7fb0000e60080b8785d9680000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="1503000065ffff0600000008003950323030302e4c"], 0x15) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000200)={'veth1_to_hsr\x00', @random="c70287e22e0e"}) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000280)={0x40000000, 0x102, "bb49bf30f91c708796a629958ca0e3702c334142fac197bfdd29ce2476f2e7fd", 0x6, 0x391c, 0x1, 0x7211, 0x2, 0xfffffffb, 0x4, 0x4, [0x7, 0x20ec, 0x5, 0x8]}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@afid={'afid', 0x3d, 0x80000001}}], [], 0x6b}}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) r8 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "c3898e32"}]}}, 0x0}, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x541c, &(0x7f0000000180)) 32.864336523s ago: executing program 6 (id=974): syz_open_procfs(0x0, &(0x7f0000000440)='net/hci\x00') r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x3, @pix_mp={0x1, 0x2, 0x34524742, 0x5, 0x3, [{0x8000}, {0x4, 0x4}, {0x1, 0x7}, {0x6, 0x54}, {0x7fffffff, 0x3}, {0x80000001, 0x5}, {0xfff, 0x29}, {0x8, 0x5}], 0x0, 0x0, 0x0, 0x0, 0x7}}) setuid(0xee01) (async) setuid(0xee01) syz_usb_connect(0x5, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x1f, 0xcd, 0x1b, 0x8, 0x10cf, 0x5503, 0x75af, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x9, 0x10, 0x3, [{{0x9, 0x4, 0x18, 0x2, 0x0, 0xb4, 0x1d, 0x3f, 0x1}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x2358f62e83659dbc, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, 0x20}, 0x1c) socket$qrtr(0x2a, 0x2, 0x0) (async) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x0, &(0x7f0000000040)=0x5c, 0x4) close_range(r4, 0xffffffffffffffff, 0x2) (async) close_range(r4, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) (async) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') (async) syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') 32.356983847s ago: executing program 6 (id=975): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) r1 = socket$kcm(0x2, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000004c0)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x1, 0x14}, @ipv4=@icmp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@cipso={0x86, 0x6, 0x1}]}}, @info_reply={0x10, 0x0, 0x0, 0x5, 0x5}}}, 0x32) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) (async) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 31.661815219s ago: executing program 6 (id=978): openat2(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x240, 0x108, 0x37}, 0x18) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x3, 0x2, 0x401, 0x4, 0xcc7, 0xc9, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1604, 0x1, 0x6, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x2, 0x8, 0x4, 0x8000000, 0xdffffff8]}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) syz_usbip_server_init(0xaa7f3cec63cbb9d) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000180)={r3, 0x0, 0x7f}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000540)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r4, 0x3, r2}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff7}]}) close_range(r5, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xc) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x2e, 0x10001, 0x7, 0x5, 0x80, 0x8, 0xfa, 0x40, 0xce, 0x5, [0x6, 0x0, 0x4b, 0x5f15, 0x0, 0x188, 0xffffffff, 0x2]}}) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) 30.788362508s ago: executing program 6 (id=986): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f00000001c0), 0x95) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) (async, rerun: 32) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r2, 0x6, 0x1f, 0x0, &(0x7f0000000100)) (async, rerun: 64) ioctl$int_in(r0, 0x40000000af01, 0x0) (rerun: 64) ioctl$int_in(r0, 0x73, &(0x7f0000000000)=0x889e) 30.771812755s ago: executing program 6 (id=987): r0 = syz_usb_connect(0x2, 0x35, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x54, 0x5e, 0xd, 0x20, 0x499, 0x6bb7, 0x682f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x97, 0x0, 0x1, 0xff, 0x70, 0x79, 0x0, [@uac_as={[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x21, 0x1, 0x26, 0xff}]}], [{{0x9, 0x5, 0x85, 0x3, 0x8, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x50, @string={0x50, 0x3, "608a6c5a6822cc40e7cfcf00c495aef1b9e01357bb717b053d8954fe3ea657cfb34bf8c3c4042a9b3fe9fde95f3dbdd17b4e6053a0012f3428be2a0bc047c0e30d913a3ea957d698006161e7bcf9"}}}, 0x0) 29.296407846s ago: executing program 6 (id=992): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x27, &(0x7f0000000180)="c3b6cbfb8b3df115f0e90c01b069f093309a1294e5112cc4c03830a75061283b", 0x20) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES8=r2, @ANYRES16=r2, @ANYBLOB="010009bd7000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="0600cd00000000005200330080200900ffffffffffff0802110000005050505050505f0004000000000000006400001001000301040602"], 0x78}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sync() r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x50, r2, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xc}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_SCAN_FREQUENCIES={0x24, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x2}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x9}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x810) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x2000c0, 0x2) mknodat$null(r5, &(0x7f0000000480)='./file0\x00', 0x1000, 0x103) 14.263181475s ago: executing program 36 (id=992): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x27, &(0x7f0000000180)="c3b6cbfb8b3df115f0e90c01b069f093309a1294e5112cc4c03830a75061283b", 0x20) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES8=r2, @ANYRES16=r2, @ANYBLOB="010009bd7000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="0600cd00000000005200330080200900ffffffffffff0802110000005050505050505f0004000000000000006400001001000301040602"], 0x78}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sync() r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x50, r2, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xc}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_SCAN_FREQUENCIES={0x24, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x2}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x9}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x810) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x2000c0, 0x2) mknodat$null(r5, &(0x7f0000000480)='./file0\x00', 0x1000, 0x103) 9.559796817s ago: executing program 7 (id=1069): mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0xffffffff) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x682, 0x90) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000a380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000005c0)={0x50, 0x0, r2, {0x7, 0x1f, 0xffffffff, 0x0, 0x1e64, 0x0, 0x1, 0x5, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r3, 0x3, 0x4) mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0xffffffff) (async) open$dir(&(0x7f0000000000)='./file0\x00', 0x682, 0x90) (async) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r1, &(0x7f000000a380)={0x2020}, 0x2020) (async) write$FUSE_INIT(r1, &(0x7f00000005c0)={0x50, 0x0, r2, {0x7, 0x1f, 0xffffffff, 0x0, 0x1e64, 0x0, 0x1, 0x5, 0x0, 0x0, 0x80}}, 0x50) (async) syz_fuse_handle_req(r1, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) (async) lseek(r3, 0x3, 0x4) (async) 6.302680476s ago: executing program 7 (id=1083): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x15) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000500050001000000080004000000000005000600000000000800030001"], 0x34}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_register(r1, &(0x7f0000000380)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x2, 0x3a, '\\', 0x3a, '@', 0x3a, './file0', 0x3a, [0x4f]}, 0x2a) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000057eb0020fd070400fa8e01020301d3a91f67cd6d061e7ec5c909021200010000000001e29c281d0fcc1a00"], 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x20044005) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), r6) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r7, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000040) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="4f9909a3c35b77c1aab9f0f96b240fc0309198639916dd4400c4f3", @ANYRES16=r8, @ANYBLOB="010000000000000000002c00000008000300020000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800580000000000"], 0x44}}, 0x0) r9 = dup3(r0, r2, 0x0) bind$rxrpc(r9, &(0x7f0000000540)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @private=0xa010102}}, 0x24) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x15) (async) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000500050001000000080004000000000005000600000000000800030001"], 0x34}}, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) (async) write$binfmt_register(r1, &(0x7f0000000380)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x2, 0x3a, '\\', 0x3a, '@', 0x3a, './file0', 0x3a, [0x4f]}, 0x2a) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000057eb0020fd070400fa8e01020301d3a91f67cd6d061e7ec5c909021200010000000001e29c281d0fcc1a00"], 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x20044005) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000400), r6) (async) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r7, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000040) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="4f9909a3c35b77c1aab9f0f96b240fc0309198639916dd4400c4f3", @ANYRES16=r8, @ANYBLOB="010000000000000000002c00000008000300020000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800580000000000"], 0x44}}, 0x0) (async) dup3(r0, r2, 0x0) (async) bind$rxrpc(r9, &(0x7f0000000540)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @private=0xa010102}}, 0x24) (async) 3.417908128s ago: executing program 8 (id=1091): syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x73, 0x86, 0x40, 0x20, 0xc72, 0x14, 0x39ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x1d, 0xf3, 0x0, 0x71, 0x6c, 0x75}}]}}]}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x8, 0x22000) (async) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8, 0x22000) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) r2 = fsopen(&(0x7f0000000040)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(,\xc7', 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000040)=0x5, 0x4) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, 0x0, &(0x7f0000000200)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000300)={0xe6, 0x8, 0x1, "43bb35807d1f6d872f8867f6e45263e7f1d9f691a1095c06a44821c875c252367ea2abe679cc83eff7333a588e54051b6d049db852301e4eef3a1b20f3617420a2c43360c6da58e5783184e5b8346be4173af0fd341ed43f8d80502a355d6b905c73180f6df9d0979046c741022c1d84779701695eac51e8b94bdda17f1931679008d32a01be031266b1d291556e9a0620256bdefbb0887860a93f27e97b77d37d3cd3942df705277136f7861987657e4fc364737f798da080136ffc96b7e07009fdaa031a1e93025457a08e5fb251f4c2db72b3425edd555cc63b00bd28e6b94e30dce1b63d"}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r4, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000000)={0x0, 0x1, 0xfffff8eb, 0x5, 0x1, "9a61ca7a230000767200", 0x8ca, 0xfbff}) syz_open_pts(r4, 0x0) (async) r5 = syz_open_pts(r4, 0x0) dup3(r5, r4, 0x0) (async) r6 = dup3(r5, r4, 0x0) read$FUSE(r6, &(0x7f0000003f80)={0x2020}, 0x2020) (async) read$FUSE(r6, &(0x7f0000003f80)={0x2020}, 0x2020) write$cgroup_subtree(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1a) (async) write$cgroup_subtree(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1a) syz_usb_control_io$uac1(r1, 0x0, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af25, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) (async) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000b00)={{}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000b00)={{}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r9, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000180)={0x0, 0x16, 0x4, "bf5f05e9"}, &(0x7f0000000240)={0x0, 0xa, 0x1}, 0x0}) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000180)={0x0, 0x16, 0x4, "bf5f05e9"}, &(0x7f0000000240)={0x0, 0xa, 0x1}, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000400)={0x0, 0xb, 0x4, "ae7a9499"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x18}, 0x0, 0x0}) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000640)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="1fb614a742d623306e39c0c723ea3f"], 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000080)=""/84) (async) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000080)=""/84) 3.156200243s ago: executing program 7 (id=1101): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x20000, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022d00010000000009040000035883b200090589"], 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@rdmsr={0x32, 0x18, {0x11}}], 0x18}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.068965538s ago: executing program 8 (id=1103): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000040)) 3.014923386s ago: executing program 8 (id=1104): r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') unshare(0x1010080) read$FUSE(r0, &(0x7f00000047c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000), &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080), &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7, 0x0, 0xa}) syz_usb_connect(0x1, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x5, 0x84, 0x7e, 0x8, 0xc45, 0x6240, 0x9259, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x0, 0xb, 0x64, 0xfa}}]}}]}}, 0x0) 2.373386466s ago: executing program 4 (id=1110): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x0, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_buf(r2, 0x0, 0x20, &(0x7f0000000040)="be9b568311a6338b983777dd", 0xc) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0xbfb, 0x2) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000003000/0x3000)=nil, 0x3000}, 0x1}) dup2(r3, r3) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000000c0)={0xf0f03e, 0x6b}) 2.300138199s ago: executing program 4 (id=1111): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x4, 0x7e, 0x25}, {@rand_addr=0xac1414aa, 0x4e22, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$rose(r1, 0x0, 0x0, 0x4000000, 0x0, 0x0) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2.20438925s ago: executing program 4 (id=1112): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) (async, rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 64) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) (async, rerun: 64) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000200)={0x4}) (rerun: 64) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000000)=0x7, 0x4) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x8001, 0x4, 0x1, 0x5, 0x67, 0xcc7, 0x8, 0x7, 0xa, 0x4, 0xfffffffe, 0x1, 0x820, 0x1, 0x6, 0xfffffeff, 0x979d, 0x1a44d, 0xf7ffffe3, 0x40000003, 0x89, 0x2, 0xf27, 0x20001e58, 0xfffffbff, 0x8, 0x3c, 0x8, 0x9, 0x10000, 0xfffffff8]}) (async) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000008, 0x11, r3, 0x52342000) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfffffff7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c805}, 0xc808) (async, rerun: 64) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="4000060000007eddbfcd067129bb700977f481650fa74ab87d4f955bf2be55e63330d0c9b1fa8907c22d1a68ae4276ad67d11425f4dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) 1.877648355s ago: executing program 5 (id=1113): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x4d) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'wlan1\x00', {}, 0x108}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x48}, 0x4800) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x101800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x2, 0x4002004c4, 0xffe, 0x0, 0x0, 0x0, 0x900f, 0x0, 0xd57b, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000141200006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) 1.792651915s ago: executing program 5 (id=1114): r0 = syz_usb_connect(0x4, 0x211, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4bfb, &(0x7f0000000580)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000028c0), 0x222000) r3 = userfaultfd(0x80001) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002900)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x8, 0x0, 0x5b) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000002940)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2, 0xff}}, './file0\x00'}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) read$FUSE(0xffffffffffffffff, &(0x7f0000002b00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = getpgid(0x0) fcntl$setownex(r10, 0xf, &(0x7f0000000080)={0x1, r11}) stat(&(0x7f0000004b40)='./file0\x00', &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = openat$null(0xffffffffffffff9c, &(0x7f0000004c00), 0x0, 0x0) pipe(&(0x7f0000004c40)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004c80), 0x802, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004d40)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000140)="96aa320d1ec66924b132ea52657c5c82db0788274db9cbf3321ebe43944241eccb6d25dfdd1cccab11030c2238d378c1a87a9797c0b75e44fe3b4a188aa448acb0f520a479e2c38a92d6cdc3da9fa9721bb67efd1f5ec481b977f6a44f38a9c02d1ffd572fd1e675cfcbbfbb8bdb84df4a26785ff0ba03de640ffaf545f1ff17c741bc2ae2a26b6f7fb04195532d65ee0e2738551c1f860b2b22f08a0921cf618c616c6274", 0xa5}, {&(0x7f0000000240)="53ddf4f873d3a320dabb8d85ea04b65dc21d36ff9559286fd88a525792628e6a0116c2f110a51055533978a08d463171af477c6c43ab8b279298087ceaabfdd06f446e1f67f8d6ff7faca5ca4a9bf3016ca3775ab6c1d2f182f773d4", 0x5c}, {&(0x7f0000000300)="b916e65b5851d134bbc49cbc1b27b5", 0xf}], 0x3, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r10]}}], 0x78, 0x1}}, {{&(0x7f00000008c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001d40)=[{&(0x7f0000000940)="04ab4fd666c4731aca6289a59f1c6fef8505532c9f2bbb67724cb04b77a7617c8f440bf6a93e7a8cec316c33dda124aa3a8d85027fd3d9b3bed316eeb306aadcf57c7d5323b126b6546af2bd0ad97a0728f2faf218812824e5e5feb3240fc9f2d63afffc5d7eea4b23567adb3769ef94d49af7960d85bbdf5b1e354086ae8ba0e1277b604a99ec39badfeee895b9857e4c05ea7aca04cc75bd87ad53949d90f34dfaddf254aca7f08d", 0xa9}, {&(0x7f0000000a00)="1d7eed74b3aeeefcfddc12a3c5f66fbe5127f94f1f28caeea3a3bb2f9aff4342d317b3548c7a7aaa9fc5f66a23e7443c42178594f6551eba0e6d6af48bd79bfcbac0f55a7831121ef2d5ebc0c631fc1b4034193ac6bcc9b5f4c38c3080dfe3edb3b9716845c4a370389954f9c7fec304fc1ace1e1ce280faaa9d05a39fe3762cb066b82522a501fb8bd255b4fad400eceb2f9d895509f6fff55904f8bb742d981d400fd29349974ab452433867f79ce13f5f9260e7b8ebeda202eca69cef1a53c5d0d3ad4ff879b7fc39bf72e53134088d478488d34fd27991ab39", 0xdb}, {&(0x7f0000000b00)="f421f8ffa212ed7c73775a9e4d4d7a9fbc8752fde0550d88935eefd578d05dc179a4ede24f665e06cb14674a593933e39ecdf6a4d255b88688fcf12c666d698d1a9048ea7d8975a10af56605d7f982977575322951ca10ec94387cf9cf4adcafd6383a7a2ecb47fbf4a0c8502bb0eb89871177a10f09bf5d9771cc113de12e300dd995d92e94b9a2816e50ffd2eda18f576f5590a9a9d9bc44c3a03af7144e4342cbc9a8ddafcadbc7eec20c485482514a61816872db4268794f434ae87a21c9c79eff116cc8fb0e65d57bf9e29dd7d200227663ea147de220fe0e286c0d9bf19d3bfdaf4f17653be58b195d6a5ef24d3a91fa274c62f25bef22f577c6aca4516412a9b1f2bf155852524c6b5ef76a65b9a728a3dc978e6bcf96288155a1b76d5dc761cc050847087bacdf17fa5db55b759db4b7d525a05d02299351957c90adbed536e538a7efb01c9682ac0bc28c9ecda13ed48a5fb0f001558e523f92d871800b2fb8a79dd0fb665e3d486f8dd18a036ad6ca6d7cc525ed484c6f41b96a6565a4906515c2b8ae59944ddeb402d89dee5f008f294dbc839025120b2f6dece5d22b8708e535245466e48896a41afb937f85e24f3dd305e995d65c2c00d42c1e4d052176c2eb0c55866c242e0aafac1de407d2194b3285c5c35a98072a637dbac0b3dce8cc2fd9215359976321340c5ef69956cccd6cf9e5368f281e010a42697aebf7b24d6f08f4567af44b2cc080a43d5041473b47c90c5747ac50641a6c97fdd6e838756fe125b684e96cb9bc99544f9c26f32cedc132f51eaeccbe964ccfae3a6e8764241d1915ff6352c47baec4b64b1dbb6d0bf7c129ae41bb425a8d80c0c5a0e0e678db23675cf3dca0ba3295f9d2090f0db52664595534b519cc4f4b2ff14d2530cb82903a5593a6a8749c09325b4963bace4840ab4ac0b44b1e90f32d37497e189eefc778f62ae905b204625a0454d8d3f521b88ce2de58e181cad1cbba00111a85cef9895d2688ddec5eb32fc4a630808248a3c6527d621038dfbaf77ae101ad04d5073414596bf4ccf2d42a16448592a5eb1de4f4938f7770774e2ac042337c9747c1d4f99b7173835b8dcafb546a8d8fd781439ac4ddc64d8a47423d61ae0f36552ee1d2408eed3bed6cba733ad24cf2520223c5ac557a55ae36904c4b750b9228a6be0e7c182bb1e48761a862bbea56800c3c0a7629ff68cc12d65ffd0f7a83644913761aa0b3acbf4627e8687c7875e3abba90dd487d58288f5c5a9e0f1754bda110396d2e13ce28c4e9e4a8224ad12985b9cda6292238215ade6941820aa97f65d72df7cb76d8bc5e946c0cd4dec98ff11c07496a7cdd23856e8abcfc76a3f08817ca2b4de5b30cce3ca2846d8de0aabc42d6cd67414751c358bf29bcf33931a23714313265e9d6cd1af7090a4f6a88652c462088d9e1b1c400b11f29bab6f952026d8b38a97203f7d40d0f80078180dd9730269b45a0a1a992ec72165699e55dee68c8cf8c726b6f4f1556ace195fc19897ada6bf16af6ae20965c06022513a55bbb28ce8a86b4a4d0e71918e105775f35e72d7d236e1a5e73595aaf2af24bd6873156a3ea800c0a6218a73856448fbb90c0c77ebb1f44bd1c0f20deeb5a9a9a30a3fd970517ad772b834ecbfcd887b3c0bf062cc5609ed6ff576b0c4768ea3e841c206ba4d0fdd8a6fb24af8d016ba91318e83a2503587d23344df34cb9ecf74d10e3ea24ae721d587799c9b19d084ade4c7f441a35fe3bbf89c7b5391070e511d57c75dcdd50841fa122e48a3c7adcedf8c87d50f5dc0305637622a93e32005b5730253bdd430cc9548af21fdc6f8635e0c66cb97444cfb2d41f2a06d67b0a3bbeb80388a353d16e391df3999f3dabb06ccbd9086c2d62e9301704b1b69c302ee2e6cf37e43f20c4651beeacee43f899ee4a9f3e02d5de65131a95af29c64c58d158a0017efbe55ac7c4e83f01748e704c0f1cf074c84f48c3c6b76fac72718ed14eb5baa88cfe3157e26dd03d5cbe5fdcf877ecb34d3ec376f9595d257f45c23cd831dda9e8ff7f61135663c7752749fb4620d470e3d337a40b9f33f24a7e1f2db99be6e54980658cb0c5683065a7872a5861424c3dcf78f686b11d6f3e18834c7a931242f9e81f67ab128763952ab2b8fe9faefe382fed60232d8d09a15109e4c43f550d537070113854eb382f4e07a4c1ac025e63b1968551019610658750602dac1fc64280713742ac0ab193bde00825f94bd967ac9197f6102dca4275c0e29f30c2de3a475af33a666f391bc8764e6bbfb1e9a93fd2e38ed6a5a64045662527f41242faa9eb749322172f075e7c7e6c9d41a2278ed1cdde1a82245f63f7391c9b8f5ce317659e70a74c6bc6fcec693d401fb056ac948d5de492e4e3b87987ab83fda0581d25dd8edb5ed484b42cefb9fb9ff8085b59da113d49ae9efd589f9e31a0e17b46ebdfdd61e3c3addb3ee6ac74bb2ba26690866a9c1f02cb954a84c15e78f0c36953c6c18389a422fed8897840f3b118f9408b74f37b72a11a47d324a370abd6de2b1110b12ef8b2b56af21eea42ae8a77a5bd04850ed82f7d5feb8ee55b757cbb29304f039e9e5a44d3d0a548e11e01010939ec7cbd7b96a4935d7e02d79c5d864eb37b804da7a62f6d8960ef269fe23fabd015e4a5a13a761fa673a69df4f673945cd5aeb3152c75262c91e0685611ac7e0b9f9af9923a421c3481f541957495c8eec077b9bfd010cfc2132408bcbecd477ca3215de89bf4ded23974255fd01a12b07c09d3d6dd7da6c327ea85d27ebd303f723e052521dd858590ba799add63221dc2503fbd3d0e4a67bc8fa56831c309b2964d0e56343cad8d9b661c4729d3be72f33bd97cc02a7243fcad11c52e87df4c201fa808eae53bb0bb56e9dbb0975b53e1d7baf199eb168ef3f913547f0d8336b143a37977d2e2238d05cf8c2ef00456836cb6737fb7a7b84cd1329945f4b2b0e16c72ddb7de904d63b88ada072169b54b73df52a5495d92fd2d000fcb4ae772e1098aeef8b01431c8b6fd7a105250e324001cd5f0411be153760500a68df8e55d6bbe199c7dd653d8b1a6aad783e3c1b8aa4b8c4f1a4b422ecdcea841052dbeffed42fb3491f36ef3d503420418c082e2125a78b112424a91ea5ecf9fa3fea08721af131c43a2cdb73a2c7f7c6a32c4628a6e0c849d5cf222d15da129af30003844759f20344866034ceb897f96627959e2b8d45221a6eacebb1673f4be611b578620bd343ab11dc6f94e6ae253646e287ff32dbd17d4f4ac5a4ef2360a726c902a8658eef28ab5bf93da8f9a6bec609894065154b6b88f97493172f3be766ff2a26f8109c93c6916c4c1f50298bb74336b1195db8f68098e5769a3d347acdea8c7e6816ded1c82356dd9d6eef75cf7230f013da362a2331b0b6487f2b510556832d84c524f2daac6aeeb81bbd0bd48e8fc0a195d6f4e7b9bbacfa8ace0bcd03e7525e131e378c94406692b2e8fb9a93f4c95e82ba21a535e1a75e682afe8d56688b494efd0b9b5f12fdf544233ffd34f3a36dc89427033ae20913e2bfb75d15e5b1ca84ea0d2dde76466d237f19ef178f20445aff0f75b8b0c09aa57c712069bb7ca54c831f3df5ef31be78e066edd252a5dfd3adbfed9084bcccd271393d7ac2da5140a439c65af26f52c55592734bdd0e8c367395a474565fc0b53a31d83ada6ea3b8e024454f5b4905a45b13169aacc1f2fab7c0c38172889ef7de2e5db93dc73fc7a1640246078321a3b2f9a8eb563b87f6c837b0f7b49c258e4712d0d3bc789791086863039eb979277f70b93c11ea65704f907797cf94731766e809eb55bd9c1f7eebdb2332695d6c9169608441ec8cb2a8e7575f74515347616029ab3ca3b8e9940d4e3095b958539d3920dd6835da4d60bb10c2cf72f86e13b195d3f0d54d25a609649e555ca68c10fbd2d7baae76cc39ae301abb60ca8d765b09edfbaee39d6a25eeb318e4e0dc21749f518f5307b670a7b85c9bcc2ba8a8ca7f6fed53e7940dda9b61334cb48385ad8f5611a3929b26635be370dc71fdc85595f79326f09f8b09f5e9330ee7ca1b51d7765667b3c5c34ec12100c278518a6cd88f0ca8a536a5d99d33265926c43e1500e5a870a31134f0bec7eae6a6924ad9b2bb93cbba772f7393aa355d85cc4d1d1c6a14119de2fc9151e796a5d8a50ee66fe3530a0b02141631e3d3def4ac931e2b409c7f1b45060f84b099dc9691e76f43fcf2a9f35b84710aae3d01b042cd30d26aab508dff03b74efee6de2873a4928fb40aed0aff403b678bb1778eb569e8302594926b142a8dc3203b4fe77497edffba3a18b184f3b64280714e23b38900eefea74a319dbf0f6bd05a675d0bcabedb07dcd891f4c20c06db4a91105ee8a60f63135b2c8bcb01158d6a472f644ae2c37517ec388ca84441d229edfff117a77d2517d771ff9f00c2a6a9cda4543b4bcb92e30bb436d50134b062bf3b68c8784f2b34dc8c42f6836a21ffe32ba7fd6b9fd3b009c1574afb5bb1274dbc0c24ce158fca2ff23e0cc3e7e9fa0612b00e1547f6d8c7da7e0731d0bd20ac5a33c815711cb55604b2c2d797a46c62d6c2caf0c75917dc36ccb908458c33cb70498b905aaa287aa0cb933578cf3a529ff7559e049ed332e1865776baddb85ff5a7e46dcea1ae606d4a9fb7c32710348ee59d73d385e320b1e9f005a1058988bc88ddf86231a6b6cb6a7c5b15b6d1c4959513a2bc1ba26023c5aafd4ff189a2baea34fb8c333da71602bfe2dec64e32ff24007e8a00485080c2852f9f6aea00d340601dba7e138ea8623ad85f0d42f46b764c118568c3fb64ec258db3db9b8a99d5d8da9d5ae5eac224ee9d5dd08c9e57e42337e82c7f2c708a2d81e4ad6ea476b1558cb1a1875294e7caa6eecc9da94b7461cab5b8b6babf8d37f2ad2af8e1c03e11e58b9e5e8c8d9dccd862d17fa8fde4a090a48dc55a8caa9c601abe0d933704e7dbd67fc9baed6bcd77c03072ea5dbb133e5bee65e2e1c03f26efbe2cc01edd14720828a07125ee17b95e41839105048e545121aba9727150c19ba70604d121f3b8c47ff4fe75b7f984b63ad2101aa3f811f554eb9a024feb86f952b8921752c5f60d676c205f377ce9fc26dfb2266f7cc4af872048a6563e177e804ddcf8591c30a42ea2b364ab40584fdabac1856b3e5fd7f486d513ac187d68d04b66a7f4873b103ca2f59923fb815e0e42e8966484b3d27a2387ef9430e578a8619ced309a22aafb879ba83b9b330f4ef49e18b19418f1d98dbfef3d3c1c8908aa8d9a531bdeefdd8038aa4e8dfaa956f8ad460b79dd787eaa02b362af0188c590bb01c66cefbbd95a41ad733e06820aa1394b347077af96798b1238571938e78e2ee6727938ce161e6820ee842710d9b43f802cf25c78d0e08aff2d2ff8668efdddc4cd2a0f610677b06c3558f8660809ecd7ac22cb01dc4c2bcb3eb03f00f9f65269963442bc2ddf8c65a585544633a558996cf0da84e09a5da6b6ae37c7a486d55a0add4b665df79d83361e013e9ec4dcc285dcffc6875f54ad64a0e15dd953775a536390918eab523f9ff73e243aa4d0fbcb973356b29cc6cb34113b82d7b10dd2db5010f71011498a9f770fbbb6eb50c0edbf2422f34c086e3d5b3a9de95fc7ee78df5e87055836121a159b19cc0d1603e664a137a3d8f514cfdc31d644e192731ed607385e596c37920ffcd20553e8af34fe451c3b05cadbcb0522a3f0af17ea90b1222926e91e72dcdf35d5c690c993584d3", 0x1000}, {&(0x7f0000001b00)="0cde568e1315209bb846d92028dfac75d7e28bbf582c9d627fbc2656dce8d2651046af8a563b6639b40f1bf77f94adb97399788b6807f73d4541d7cd490312200c14ca4dc650262f3c425ade", 0x4c}, {&(0x7f0000001b80)="561c03bbe6ffc894b358bd9e86f2e6d11f76a1ee3f7b9a8449395fec64e916fbb85d50c96e9672c3fe97e1b427558f57d18bd9", 0x33}, {&(0x7f0000001bc0)="080ecccbc33b1b1a49ac2d2fc0e381e1d525289d77d5fa00f981758b79fc8b6f59ff983d3b9dd2e6342c5a6b0b3ae85ab0548bad5331cd8b7431dda7be23a877e6b5522a50a8b1184edeaa9622900512a40293d77f707d2b8715be648f0688778a5439241293957a94093d6adf666f", 0x6f}, {&(0x7f0000001c40)="88eb7d97ea9a30bb6d6d84baee9584e80542b1cbf272d0c71bd7", 0x1a}, {&(0x7f0000001c80)="39a884aa7019fd77f7afc94da10e0c7cd8e585a8139b22f5529a7e7780e8798ff376e579cd6756227178fb456a961ee91ff77fd92c", 0x35}, {&(0x7f0000001cc0)="5a2a64f8a21afd0cbed4ec6a273f127fa57d9e3b050ed5ba6c68b77290a58f3e7c034e4c263af77dc5db1b2217b321181406dbbe74103ccd5ea51228253045f853176d5098e53277f6d2436355619248c4695351079a2ac7fd5c1d927e3e24a9b065d8fb4ebedbdd9f5845", 0x6b}], 0x9, 0x0, 0x0, 0x40000}}, {{&(0x7f0000001e00)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002040)=[{&(0x7f0000001e80)="900361e60a1be68378ab164a64a3bd401f12700535718c9d8929570e87768433f80a4633ee86d8a9c8c9c34eb51918c0dc1707d30a8cd30a853ecf8e25139f3244b96580181606ed0e566c24ae8a539df69dd2a1075eea7d9560101b2e0c4af83bc43306eb0646154adb243c98ccba3281d6f77772694504e78c2c976412477b608b7361313c59727770d7f8a91021df6fa5b0015f3a5f52f2761d91ce2ee70acb362eb7fc6c274f685e92d5c54db82c15cf3132aaa1acc2bf4e57", 0xbb}, {&(0x7f0000001f40)="d456e35769fdfd8efc653879646232f8c71c0180a6b04082d8f7bf6f55c3802a8f921076501cc4179081854f9c3dfe567823a17fac51ca8183ca0707726eb0ecbcc136dc6db57ae0fa2e75e9c022522c9f9a885bc69d02246592b0a76bfacc4579e269bc8a45ff356b0e1315a35399f6d083cc3546e305d4ba050334d4fe360fc96d4b8a6b38a0960005e82dfdf3379dfa55846f0a0d323064e497a479fd29c12e5630ce1c", 0xa5}, {&(0x7f0000002000)="e6003bf9f017a3a6969e325fd6c79c659b4f53b5bb8aab7913d5bb6c538e610d9900715411e786fa962f81a33c3e54a40d208d", 0x33}], 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000140000000000008b7f7800010000000100000068b86bece52d5de29419754de856fd9f2b2a992ebcb71a8a0b0a212aaf7bae69651965f955bb24f6a994f86256398338c32af4dfe78bb75b52dd01b0339128186317dafc44c18d020ef7840d5952c6d7504ee61027b9b33830c6108d0d2314bad12fd2ef0862a44294c5e559f800b675bb735eb77c1f4fe334fc354135541d219b69a87ca05b0423eddff813ad44606d0ef1af441f2518cbde8b8a411399ba431b658ea8acfdf8bf0654", @ANYRES32=r14, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x108, 0x810}}, {{&(0x7f0000002640)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002880)=[{&(0x7f00000026c0)="01e6b8a8ab91f1e7ac20729100137849ca3fe5bcd9f02022a61efda4ed375dad3005f1d4a9396947f46dee27aad992243af043456ba16b5b87db387666f37b376468e7795604b533a124d70420c12a40e93918c4f5d6389fee57357cbb99288b04c930054458b6e5cc9aacf350053493f42480a57177af3ca0aaa98f4c26d49c020c43d9a57a644eb7fb27c633e886e17e6708041dc84013ee2a3984c946634e7d6e1c221dde3507e1dc94cffcf9aaf008ad02153143c00f80e14c5fa370154b6e67ef7a800479328bc88f7f316fa360119623e5a04c56db84499759cb2816b6f4e9764b56da06", 0xe7}, {&(0x7f00000027c0)="0ed12a1eecbdf36503407d4fb4505c72b0e2b965aa0a5facb6566d6b4eeb4944570f273fbe1f1889d256abd8a8fce2ce54f169e2751d63bb2abe51fc28e7973fc088161301521abefb98c4", 0x4b}, {&(0x7f0000002840)="77ab905f423a6e3fbb71bec860d9fe17dde350d9f00f26", 0x17}], 0x3, &(0x7f0000002980)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r2, r3, r4, r5, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60, 0x5}}, {{&(0x7f0000002a00)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000002a80)="ffa24d60c0ba03914f54ba1739e89da8dcfbbb63ebe6321188", 0x19}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=0xee01, @ANYRES32=r12, @ANYBLOB="000000001d0000001cf10000deffffff0100000021129e6a", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB='\x00\x00\x00\x00'], 0x60}}], 0x5, 0x11) syz_usb_control_io$printer(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x843}, 0x44040) r16 = socket$inet6(0xa, 0x2, 0x0) r17 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r17, 0x127b, 0x0) connect$inet6(r16, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r16, &(0x7f00000092c0), 0x4ff, 0xfdff) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x12, &(0x7f0000000040)=ANY=[]) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r16, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) 1.708430478s ago: executing program 7 (id=1115): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x94, 0x7, 0xa8, 0x20, 0x5ac, 0x262, 0x6ac3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x10, 0x7, 0x0, 0x5, [{{0x9, 0x4, 0x65, 0xfa, 0x0, 0x3, 0xe3, 0x2, 0xf7}}]}}]}}, 0x0) sendto$inet(r0, &(0x7f0000000000)="5814a836388cbf0efdf0e7e9070000000000000004d96b261ae6892d3ec582", 0x1f, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x283a2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000200)=0x12) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) r2 = socket(0x22, 0x2, 0x3) recvmsg$unix(r2, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x40) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000040)='binfmt_misc\x00', 0x200002, 0x0) 1.677381754s ago: executing program 4 (id=1116): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="25b89ca38ffd48f3be52163448412ba88b3b3470", 0x14}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f7", 0x1d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5", 0x5e}, {&(0x7f0000000800)="38c4340e8710b8eaedd392cbf07690d4a3f2b8eadcac25284b2afc2a941cbe880cf2d0823ecd83a7b84b4154e5a802b7de51c5b236647c77656a585c60798db780", 0x41}], 0x4, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x20044014) recvmmsg(r1, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000a00)=""/66, 0x42}, {&(0x7f0000001b40)=""/154, 0x9a}], 0x2}, 0x3}], 0x1, 0x40, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000314100027bd7000fddbdf250900020073797a3100000000080041007369770013003300626164616476300000190000000000000900020073797a3200000000080041007278650014003300626f6e18b704e6ba5420645f736c6176655f3000ff0000"], 0x60}, 0x1, 0x0, 0x0, 0x4080}, 0x240080c0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002800010023bd700000000000100000000c00000000000001000000000c002300040001"], 0x2c}], 0x1}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000800000000003900000008000300", @ANYRES32=r5, @ANYBLOB="0c005a8008000380040001"], 0x28}}, 0x0) accept4$alg(r0, 0x0, 0x0, 0x80000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x3c, r7, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac04}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, '\x00\x00\x00 \x00'}]}]}, 0x3c}}, 0x40000) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="74120000", @ANYRES16=r4, @ANYBLOB="20002cbd7000fbdbdf254b000000ffff0000", @ANYRES32=r9, @ANYBLOB="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"], 0x1274}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) 1.626688158s ago: executing program 4 (id=1117): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r1, &(0x7f00000009c0)=[{{&(0x7f00000003c0)=@l2tp6={0xa, 0x0, 0x6, @local, 0x0, 0x4}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000c00)="b0a790b0cb3e883bb62265df5d559f629a1f7546a946f7e9efed679b222f2e6f1601002bb9580fcbe70ed82718f5a51f505eeb8b04e47d244e5ca686cf2baeddd72f63c89f02a94b057ff0ad1b2ad13efc07af2cd47f914968a95049abe328edf4bb70366013cb733ea67a8da9f626f1573c6f19e5f9630f86a45a6f779c6649cba0a96cf71ac6fd3690a1948b17512a06a21949a6c3d274ce6b41a5f3263350a0c29d80d6a996c64707ac97f333d2c4dc6334708530ece4b752a3ec1ff9bd371b", 0xc1}], 0x1, &(0x7f0000001680)=ANY=[@ANYBLOB="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"], 0x268}}, {{&(0x7f0000000580)=@l2={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000002a40)="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", 0x17e}, {&(0x7f0000000640)="69380c971ee18e0b104eb4583b3ccd03d1c183f5e779464269a59a5fd06f77cfca", 0x21}, {&(0x7f0000000880)="b0590523b5f6bafb2578dfbf5093449163600a", 0x13}, {&(0x7f0000001500)="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", 0x146}, {&(0x7f0000000a80)="291864b97e29fb6f6312edbbdc754545c9397fcf7bce73ab0b55145dd4db907d592b7582607f41bc112d4b7b02f33ba862a7c14aa7232d05d70f7575270df622ce96ec72807d63b3666bf060a92eaf97110318a8d5b5c1921393e179db4d492cbba23c9b32e6173913f4d88aca6d9ffec787a37c094b87e35aa8acffec5166eac058c24abde5aa7e60db71db6455", 0x8e}], 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x150}}, {{&(0x7f0000000d80)=@ieee802154={0x24, @none={0x0, 0x1}}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000e00)="f0b6c4d8e37c0676b4c83893c5f72033c7ef234b7304fb68de99469caa4b1674f54272362ffdcfff67d4912bd0501b73ee4673588f22c3c8ab654f11409d17ea47469385db08f0bde0fd910fb4994abc4bf54bef668e3a5c95f5fecee2e04f4f551e2bba4d841d796fb0bfbcaea9d22673bfb80b8d94fa07d215bd1a5da004c23f35b15b602c03d8f947ebd69f3ff14946a50d923a04", 0x96}, {&(0x7f0000000ec0)="cb5568905d0fd011c9a86f800e479467e16b1d43c77b892743643e8282cc0ecc2ba25080c15cf99d88f6c52e395872314fa98267c8479f83751633ad3039fcf5a42c473ce7a044f01e41f822e41a7475a4312b244575a1203ef65a1f91baadb28eef7dec403cb58f4d144cee233711efc649455e883664e756a18530a5c7c35b5e46996e37d28589825b8a3cd8305f72842cad11ea562851df40b73f0b352569590203d5cf86c1ff", 0xa8}, {&(0x7f0000000f80)="ab48b0a4cfbcd7c6b12a6450026383e56e76a4d7fb21d7308e5cc4344a45075e570929c4376e004cf1711540d8c8553ece2bd446e5fce81300d2667c00ad7f3b4506fc5f74b57e8b1d3c0969362a9a4eb5d1488da2b93e2edd363090beb1620531c1a54e5a19d551019b90c41a1a4b0ed43aebc737d1a932c428e2d310b4e60611d25388a32af7c3", 0x88}, {&(0x7f0000001040)="098520fe97c4ed01ecd272f3f41f5c402f1eeb97b69bfbaf08e3f9229b9b308324a79665cf6f3b7e87348892e44ad9912889059603a5cddea493f1e1655ee3eb8903f2d48c5ab93159b59a1e9c17d6feb5594c6de54bad1d07", 0x59}, {&(0x7f0000000600)="3ed809f9412f70a127fbda9713fe8a1590a9d7be4cf2f05d96d7b9d7acdcd2a31bc33cddde526a94bff034d7841e1eb309f7f8", 0x33}, {&(0x7f0000001340)="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", 0x1a9}], 0x6}}], 0x3, 0x44810) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x400501, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x1, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000440)=[{0x84, 0x74, 0x0, 0x4, @tick=0x1, {0x8, 0xfe}, {0x7}, @raw32={[0x10001, 0x0, 0x8000000]}}, {0x0, 0x0, 0x3, 0x83, @tick, {0xfd}, {0x4}, @addr={0xf6, 0x4}}, {0x6, 0x3, 0x9, 0x3, @time={0x2, 0xf227}, {0x7f, 0x27}, {0xc, 0x9}, @control={0x0, 0x7, 0x7fff}}, {0x8, 0x1, 0x6, 0x4, @time={0x1, 0xd93}, {0xba, 0x3}, {0xdb}, @note={0xfc, 0x10, 0x7, 0x6, 0x73ec}}], 0x70) accept$netrom(r2, &(0x7f0000000940)={{0x3, @rose}, [@bcast, @bcast, @rose, @netrom, @netrom, @rose, @bcast, @rose]}, &(0x7f0000000000)=0x48) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02010002020000ef08bf72627ef9fa6fe0597ba4e676c927c10223c90479595481ddaf6e95fd2b8ef2626363b8153476f9a9c1eb7757eeef44fefa1001cc883ef26e74edf18798d519f1"], 0x10}, 0x1, 0x7}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, 0x0}, 0x0) sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close(r4) socketpair(0x21, 0x2, 0x80000000, &(0x7f0000000280)) syz_usb_connect$uac1(0x2, 0x71, &(0x7f00000008c0)=ANY=[@ANYBLOB="1201f107000000206b1d010140000102030109025f0003018000090904000000010100000a2401050055020102090401000001020000090401010101020000090501090800000509072501800da70209040200000102000009040201010102000009058209000205004007008002080800"], &(0x7f0000000bc0)={0x0, 0x0, 0x41, &(0x7f00000010c0)=ANY=[@ANYBLOB="050f4100013c100a7ccbe48677133ba571fbe257ca14fc3d47c1f46fb975ec2f2f36b079ff1b38701af44a3372ca536c5fa64159d77eb538949806af4b60f2b4401468878dcb502efa2c5f987abbf2ab5f96b3c9175b409cb6b7d5e0377eea6c0a8706f78d187296952da00c05d76d82a3a66d358928b8ca50f486a0ec8852f8f033fced0e58ee02c653accc4ab01fc72a6a6e1867616b29860b16b82ce1f4893345b5bc0c305b44aead9dc8cab7ec6977ef5f411f6dc53638ac8b2cf6f4d049ea2f1b995259a5ef0d0e7928e753ed6886b471bfd966ee380b481fae447151cb565d7172495d9fbe40668dbdd024c731112840e34ab15943abac0ea4462ee1681417e21d047abc47da26819e21a9def0c213e10dbc3cb7f235377097a516121489823146101b0418419af3d4cb0d"]}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r6, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x19, 0x1, 0x0, r5, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) 1.560199244s ago: executing program 8 (id=1118): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3c) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r10], 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_DOWN(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r5, 0x200, 0x70bd2a, 0x8, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r5, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) 1.231143402s ago: executing program 5 (id=1119): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xffffffffffffffff) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x3ec0) close(0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x4e, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r1, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002a00)=""/4102, 0x1006}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000001640)=""/4115, 0x1013}, {&(0x7f00000015c0)=""/76, 0x4c}, {&(0x7f0000000180)=""/64, 0x40}], 0x5}, 0x1801}], 0x1, 0x120, 0x0) 653.82318ms ago: executing program 8 (id=1120): r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000080)={0x0, 0x1, [@local]}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r4, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r4, &(0x7f0000000b80)="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", 0x587, 0x0, &(0x7f0000000180)={0xa, 0x5e64, 0x100000, @mcast2, 0x4}, 0x1c) recvfrom(r4, 0x0, 0x0, 0x40, 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f00000000c0)={0x8}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000040)=0x200000) 653.299103ms ago: executing program 5 (id=1121): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0x98, 0xe6, 0xe2, 0x40, 0x9022, 0xd421, 0xc1e2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xa, 0x3, 0x40, 0x10, [{{0x9, 0x4, 0x66, 0x5, 0x1, 0x7e, 0xaf, 0x36, 0x7, [], [{{0x9, 0x5, 0xb, 0x10, 0x39f, 0x4, 0xa}}]}}]}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x800, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}], [{@obj_role={'obj_role', 0x3d, '$-@]@.,{\xd7$'}}, {@obj_type={'obj_type', 0x3d, '/dev/vga_arbiter\x00'}}, {@subj_user}]}}) write$vga_arbiter(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='target PCI:', @ANYRES16], 0x13) 464.38449ms ago: executing program 8 (id=1122): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x4c, r2, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000880) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xbd, 0x2, 0xc4, 0x40, 0x856, 0xac31, 0x931e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd2, 0xc8, 0x7f}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000940)={0x2c, &(0x7f0000000740)={0x40, 0x12, 0x1, "d6"}, 0x0, 0x0, 0x0, 0x0}) r4 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmmsg$inet6(r4, &(0x7f0000002c80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x985, @ipv4={'\x00', '\xff\xff', @remote}, 0x7ff}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @private=0xa010102}, r5}}}], 0x28}}], 0x1, 0x10) 463.756849ms ago: executing program 7 (id=1123): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) flistxattr(r1, &(0x7f0000000040)=""/27, 0x1b) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGUNIQ(r2, 0x80404508, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000001c0)) 362.00851ms ago: executing program 7 (id=1124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800034000000004080008400000005c05000500020000000500010006"], 0x70}}, 0x8000) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002180)=@newsa={0x2e0, 0x10, 0x200, 0x70bd29, 0x25dfdbfe, {{@in=@multicast1, @in6=@mcast2, 0x4e24, 0x0, 0x4e24, 0x7, 0x2, 0x20, 0xa0, 0x32, r2}, {@in=@dev={0xac, 0x14, 0x14, 0x14}, 0x4d4, 0x2b}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, {0x1, 0x7, 0xf414, 0x30c, 0x0, 0x4, 0x4, 0x3}, {0x4, 0xffffffff, 0x5, 0x400}, {0x1ff, 0xfff, 0x2}, 0x70bd2c, 0x3503, 0xa, 0x2, 0xe0}, [@XFRMA_SET_MARK_MASK={0x8}, @srcaddr={0x14, 0xd, @in=@local}, @proto={0x5, 0x19, 0x33}, @migrate={0x1cc, 0x11, [{@in=@private=0xa010102, @in=@local, @in=@broadcast, @in6=@local, 0x32, 0x2, 0x0, 0x0, 0xa}, {@in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, @in6=@mcast2, 0x3c, 0x3, 0x0, 0xc7, 0x2, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x3503, 0x2, 0xa}, {@in=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@private=0xa010102, @in=@empty, 0x33, 0x4, 0x0, 0x3503, 0x2, 0xa}, {@in6=@remote, @in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x2f}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x33, 0x1, 0x0, 0x3501, 0x2, 0x2}, {@in=@remote, @in=@private=0xa010100, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x4, 0x0, 0x34ff, 0x2, 0xa}]}]}, 0x2e0}}, 0x0) r3 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a0100001905"], 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x41, 0x0) syz_usb_control_io(r3, &(0x7f00000004c0)={0x2c, &(0x7f0000001880)={0x0, 0x1, 0xfc, {0xfc, 0x1, "af3f3fa31c181433cea7b5ce30f3342da45c3e3afaf3814dd434ee809cb50bdcbea69d80a9672ddceec2771c0ae4d9bd5edbcbb29530fed18d868a89f43ceda099e178b6467435bc0dcfbdd2f0fcca65e2d5faece9b7eebfb60779642d8fdff78f95045a78888247e7e7892cf128631ab48a5c5c4a724eeae490a8893a37169e7e6f65ccfb064f84c2b46887fd3616196520cbce2c796dda1d27bf0a04daf8f49241af575185ebe3e3be05ed22b89916005dfd6f291d2675c7df4410fb4b534da282800c12fc585a3e1ff18e176ae37b8b8fee962e7f727042f4eb7680f003e90e1d1fde20e2355bda6b6e0da327db39ba4800"/256}}, &(0x7f0000001f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb, 0x0, 0x2, 0x9, "0895650c", "0400"}}, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x60, 0x0, 0xf2, 0x0, 0x3c, 0x6}}}, &(0x7f00000009c0)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="2017e500000085a8fb28606aca9aeb8f1b22360379bc538c0d197256fb90e17bd448c8700d3a96c87755bfec8253a3ad520a1a956c6397aef41f91ac834c9287c5d9b6011ba6dbd0454b5d89c4c812f82b945a2fa533f415a484704af0c2318687b2463abc82e7788ad76ce6a959dc74c54494d695343af4d913aa9d31ebe1df940e9b9f027702e70def3e3a841558bb3e3b87bcd3b6c3eabf4fbe6c9c6d9bcfe7896b71be48efce0d6de64d3649eb096f8e44105cf89e17aa4318c2bcf8ec68a8d9993fb8d65a7a0d70664feda73d4ccc30546f1048289f50b2136def61075282"], &(0x7f0000000600)={0x0, 0xa, 0x0, 0x5}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000006c0)={0x20, 0x0, 0x8, {0x160, 0x4, [0xf0f0]}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000780)={0x40, 0xb, 0x2, 'a/'}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x861}, &(0x7f0000000800)={0x40, 0x13, 0x6, @local}, &(0x7f0000000840)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000880)={0x40, 0x19, 0x2, "a32c"}, &(0x7f00000002c0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0xce}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x10}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0xf7}}) r5 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x20000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0x40045731, &(0x7f0000000000)) mount$9p_fd(0x0, 0x0, 0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="41c5f998115122"]) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x29}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$UFFDIO_UNREGISTER(r6, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000564000/0x4000)=nil, 0x4000}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x7) r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="b00a07"], 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r8, 0x3b71, &(0x7f0000000180)={0x20, 0x5, 0x0, 0x100, 0x96}) r9 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGFEATURE(r9, 0xc0404807, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x3264, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x30, 0x9d, [{{0x9, 0x4, 0x0, 0x30, 0x1, 0x3, 0x1, 0x2, 0x7f, {0x9, 0x21, 0x8, 0xe, 0x1, {0x22, 0xe05}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x41, 0x7, 0xbd}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x54, 0x51, 0xd}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0xdc, 0xe6, 0x48, 0x40, 0x7}, 0x37, &(0x7f0000000100)={0x5, 0xf, 0x37, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0x7, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x6, 0x40, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "d7f6336976872e61479054d4263afff9"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x5, 0x0, 0x4ff}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x2809}}]}) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x80000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r10, 0x40a85321, &(0x7f0000000180)={{0x4, 0x7}, 'port0\x00', 0xc5, 0x820, 0x8, 0x5, 0x4, 0x3, 0x3, 0x0, 0x0, 0x40}) syz_usb_connect(0x4, 0xc9a, &(0x7f0000000a80)={{0x12, 0x1, 0x250, 0x5f, 0x3f, 0xc3, 0x28, 0x1fb9, 0x200, 0x7ab2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc88, 0x3, 0x3, 0x1, 0x40, 0x55, [{{0x9, 0x4, 0x4c, 0xa, 0xc, 0xf8, 0xc2, 0x98, 0x6, [], [{{0x9, 0x5, 0x5, 0x4, 0x40, 0x1, 0x6, 0x40, [@generic={0xdf, 0x5, "ef377912dc709ba274d5d29a49e1f808d4505002a75fab30819157e617658720614d30bbff9b0082f6a7dbfef50778b432915aabd4fd16c2532114bdafe41536ea6524b63b1a84d36809a7de0131c37d8ec607f7c5499a308c7b93dcd1f5da4ea1076e78dd185e394d8232bd78b8ab500c8afcaf98f2974c85f43a5a918e85f23d6f1cc64f016103fe4c9c0e7045a0186aa08bc01629638a8cb943fc534b314b7f47b4a90b7f7ff51f41c333f472239db663ee97482ec1b9184a7efa3af9b8d341eefbef18e245eb6858a2f8037ed796faa4e20272a8df6791b3009b12"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x48, 0x2, 0x6, [@generic={0x3f, 0x30, "8e26b250d2aab8c321d9e9be40223708fa360bc9d8437c0e148b71a35c05783aa03ea9e4ab7861d501682f3f04d8d375ba201c07ee8293bc472da34093"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x5, 0x80, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x1ff}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x9, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x84, 0x2, 0x5}, @generic={0xed, 0x10, "beeed2760697fb3ea8967b0ea05ecf3469dad4c8329fcf2eba7612a2ba8c708f08318a340e3ae44222c064e65c7bdfeac51a9fabd4e27b0d203804416d83b31b680809b51d6e11782eaabadbd4fd26e82b037437246bd8fb1c6af187ad4096159658f21bfa61cfe70ba3e41ae28d379394263420072ebe65c71aede4aeddc2d4c2bc58871a4dff6a790b54445e16fdceb2367d74ee219e65f3f3d91124687b9e6667e556a81a9c73daee80c2118d681e8121075bd377bcfe580b28c23fe35d6446549e1eb658d2ec7bb22da2557f113beb35da8e43f9c05bbdca1eae3e06749b65027fa1ae53bf0145c29c"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x12, 0x88, 0xbd, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x5}]}}, {{0x9, 0x5, 0x8, 0x8, 0x3ff, 0x80, 0x5, 0x7}}, {{0x9, 0x5, 0x8, 0x10, 0x0, 0x9f, 0xfa, 0x60, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0xb}]}}, {{0x9, 0x5, 0xf, 0x3, 0x40, 0x3, 0xf, 0xb}}, {{0x9, 0x5, 0x4, 0x0, 0x761ad2ce77009b91, 0x2, 0x6, 0x9}}, {{0x9, 0x5, 0xc, 0xc, 0x3ff, 0x0, 0x7, 0x9, [@generic={0x70, 0x6, "849b0d2a00167f8c593a1cbab70576ca393258f2235c210041edfffe5e26f34ed0892b2d68bbc0310c840a14e3f28f8cd653ee39d53744c80ee92f7fb1cb5932e81bc670579290def266ff4f06c09b0bb207f782249ff0214f8c5fb06cb7e50bbc60e8abb8a3cb91bdb7b12adfc7"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x20, 0xe, 0xd, 0x1}}, {{0x9, 0x5, 0xe, 0x8, 0x10, 0x66, 0x1, 0x7, [@generic={0x17, 0xf, "b7b8adac18679525884e70d7f5f5713554a6e9db7f"}]}}]}}, {{0x9, 0x4, 0xb2, 0xc, 0x2, 0x7b, 0x98, 0x1b, 0xa, [@hid_hid={0x9, 0x21, 0x7f, 0x9, 0x1, {0x22, 0x164}}], [{{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x8, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x3}]}}, {{0x9, 0x5, 0xf, 0xc, 0x10, 0x6f, 0x10, 0x6, [@generic={0xb6, 0xb, "962e6f658f0eeb62ca6d192cf25b3fad479e3cd2106899b17d0d567e5eabbd59a72162674d67f68b92027a4dca60f9242def7cdcc06a866655e5329fd0792ec0ff3e019ffd1322c70e5955b986e1f1ba83c4ce970522165f88543b1eb4ca9a12e038b20a24711fa8485dec464e9806fa700b4d4a46e008f05a488de9cbc1d5fc957324d3d02169a5a529bcfccdba08abf217bc60602d0666ed0a60b1e14643ce9e9023e0993f4d18db553d23cf5f92cf0f580698"}]}}]}}, {{0x9, 0x4, 0x6c, 0xfc, 0xf, 0x8a, 0x80, 0xcf, 0xd6, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "0b474dc1ea77"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xfff, 0x2, 0x1, 0x1}, {0x6, 0x24, 0x1a, 0x7ff, 0x30}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0xc0, 0x2, 0xa4, 0x10}, @country_functional={0xe, 0x24, 0x7, 0x3, 0xbd, [0x9, 0x6, 0x8000, 0x9]}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0x3, 0x2}]}, @generic={0x18, 0x23, "328ef2142d0ea95b7922eca4c17b46f336f64466ece8"}], [{{0x9, 0x5, 0x7, 0x0, 0x400, 0x4, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x3ff}]}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0xa4, 0x2d, 0x9, [@generic={0xbe, 0xc, "10b4443abd1d1a2e8c406cb1be0ad4bf5843a67a4b83fa803c059ac157db4ca707428960f2dfb59b4f6089389aee83a5fb9402c99e55af5787db1fc08ac1130b83bf61916fd156ec4333b35c02bb255d330e70bc01d18eaa934271917aba7aab090b8ae08e9217e35827e74fdcbf654975f872adf3cf0f80571a3634c1e7c5d4e3d2dcf86a3eea8227ed52c0529927ed12bdfac205f9fb44dca7d619e042444b2b3d671df1bc82463b9bb6b8cf3442fe4d575bd0a7c2734266635393"}, @generic={0xf, 0x38, "2c07f572657c9332be57548a0d"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x78, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xd, 0xe}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x2}]}}, {{0x9, 0x5, 0x6, 0x2, 0x200, 0x6, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x1}, @generic={0x84, 0xc, "2680fefc4bfb6d6e7f292e2c2c65f0919af2e1045c084860648d3555cbd64657c460aee17609664f096d0f8ea8354a4d54a9841ccebbd326b20183645a083c40692354be60c9e96ec95c542984fd4e305e9f6224424d33e69dbba74c02628ea3aa176d04dc31aed4d35f7c89c5aa46407ef60cb54d21d54fc7a0523f6aa78c32f537"}]}}, {{0x9, 0x5, 0xc, 0x3a, 0x8, 0x5, 0xc, 0x6, [@generic={0xa7, 0xd, "4fcd40eeaabad56fa0d0747abdd37c1dc03bb4e244ca7506d832dfe7beefd18abcd857f9a93b0507c1a3c9a325def90f870324f65e6d3407a9dc256dc84d7d2a6f12ee5efc31399d9f49e37b78d470a3602acee8dfd2079f449b66ecb0ba56cf2cc7c3cfa977b06070cd9f8da25b3754f067a6169547aa8ce1a624eae77b648d0b4a9e6fd82cfde5a1d52fc945a68fcfdea9726214d42c5f28839cd6b1c01cee46a2d8cd10"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x9, 0x2, 0x7}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x5, 0x3, 0x12, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x571b}]}}, {{0x9, 0x5, 0x8, 0x1, 0x20, 0x40, 0x7f, 0x0, [@generic={0x9b, 0x22, "3acf90e3e5dda069c430ca81f02153444b1fbdbbfa8113805d1962fbb5f32c849084fe2873d56600afcca6570cd881450b35728295dd3a04718164350ae96e475df4682e5e0ed3c8bff028e0c8685d17edd75f300fa5295df8cf16a65c2694a22ed7cbb7edb4e23591e071bfb9a6a8d21c2c6b7bd540a9e9824f874c99ea3b86a9829822ac2e8a6e6fd004f9761be626eba6a56dfce85d2c6b"}, @generic={0x7c, 0x4, "a065595a795fc7e30d701bb5fbfc4a5c99acb5fed853e6e9fb32aea1eb11e822c7b7f4754c668b1c46874f3e0b33da86f4098707a1b967c6c9d19c972cee1ce9d1f5e7418587fa855e7be116c673097b5192d23e7c3ab382a9816fd0bb5720d47067fba564273d65f4090695edf6e8911da1fe172f1e64154add"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x200, 0x3, 0x6, 0x6, [@generic={0x2a, 0x9, "ffb29e75b854c62fab11c2a12744b25700e9cbab1fb89a64e6d02900e090fc3d2a1f2d2c82ee2e83"}, @generic={0xf2, 0xe, "351823f523efdca3f95746f1b697a53fec79a0d3b86b2e5a54392fd7ed963253787c5a51323f7a7ba9d68bb4c6794800a451d8c5d382bb45bdea039362bd912fd95452363ed53187774568b93d39615c8bcb29060c0ec9d304b30e6c98095f6207002fc49f8504a0a2f284e0e79843de08fcb9769d500fe23533d9c29bd15978c88514339dc711be1b41c11df7a9228dfb5ab4adeb0f1ce724ccc1dc8c0bb8cf6f557b74bc2f64e2500f25520ed2ed3c8d4d3771d83f55ef523d1f43dd2c0c2cb276290b2ca447da2a477d378a229ff8d9c382a43351309db1e1c561755a07a58ce14cf3e32b8f5f842d27fd70b72898"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0xd6, 0x40, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5e, 0xfffc}, @generic={0x77, 0x31, "25a958a6ceaed094e928186c518d316a2e747fe3bc89e416b094eb2e1f1785e6a8b4369c34b5ab55945b63be3f3ab8ef312c0b90916e9f95a37e7abb89196f878d063fc66528259c9b626e042271ab6c4f4620bfb4257a8cf8417185fe4e3139ada41ed757f36063e9e770cd0dc7f48a2df6c9b892"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x2, 0x8, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x9}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x2, 0x4, 0x67, [@generic={0x4b, 0x22, "bdf38ef31a58ef9a84f2c5de3bc38a5fb285f56cc952dcda3092afbb73fda413cf5871382b7364f5cd57d81a6f19eebc9c36671b4b4c4a0664a8d17dacc4792df863d3dcbe06130d07"}, @generic={0xf0, 0x10, "31bfc26d027c3bc354cd0b48aa9706b1acd3f3538d427411cd1c8be8a1af3d076e1784eeaf9ded16274e2284a488eae3a1df101f2851473edfe8cf8daa919f2afba758e01f5807b5d468fd7e207412eb644fbd7fb8b6eeb78c6a9a0a2fea005d006e2dbdec24dc7a5ffdea8ffdcae757bcb96ed21fbcf24d3e46e42be61dd08adf9109c217412fdaa2c239ec217f5dcfe6e6042d450f96cd9da23b2ee36db602ff249359f23712111752891586b542d50ee3526be1c7c23c3002f142336cb7379533e3e36c960fde611ed10bee3ab36bdf293c46f4995911bbb44fb34dc126b702aaa2d6dc542a5742b2e0bffcfa"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x200, 0x6, 0xc1, 0x8}}, {{0x9, 0x5, 0x4, 0x3, 0x400, 0x5e, 0x6, 0xc, [@generic={0x61, 0x5, "12b3e6f1cc0525fbff53032f3ec0cb05922834794070bfe5d0704c71e6392002dd7c61dcfdf60214e3a8aed8cd739e351fd0a6639facb394ca917b2c5e946a9129f61f8f3887ed6037e98da9d661d4cb4c24f14c46f6277af477c639b2db46"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0x6}]}}, {{0x9, 0x5, 0xa, 0x2, 0x40, 0x3, 0x1, 0x5, [@generic={0xfd, 0xd, "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"}, @generic={0xe, 0x23, "c2a9c8302ad18d8a39372b32"}]}}]}}]}}]}}, &(0x7f0000001840)={0xa, &(0x7f0000001740)={0xa, 0x6, 0x310, 0xd1, 0x0, 0x8, 0x20, 0x88}, 0x5, &(0x7f0000001780)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x415}}]}) 250.690666ms ago: executing program 4 (id=1125): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f00000000c0), 0x4) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x8000000000000001, 0x20000) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000044000180060001000a00000008000500000000000c00070000000000000000000800090030002300090006006e6f6e6500000000080008000000000008000b"], 0x58}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYRES16=r2], 0x0) 8.259409ms ago: executing program 5 (id=1126): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) (async) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x1, 0x0) read$msr(r0, &(0x7f0000000480)=""/230, 0xe6) r1 = syz_usb_connect$cdc_ncm(0x0, 0x7b, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002020000402505a1a44000010203010902690002010000000904000001020d0000052406000105240000000d240f01000000000000feff0006241a00000008241c0300027f0005240101020905810d40000000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x20, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4008850) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x0, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 64) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) ptrace$getregset(0x4205, r5, 0x2, &(0x7f0000000180)={0x0, 0xfffffffffffffe98}) (async) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x5b3393367dc26357) close(r6) (async) sendto$x25(r6, &(0x7f0000000000)="8c34965ed62e79c71cf3391d74dbd4db022b45cc8260ca21a152fd", 0x1b, 0x2014040, &(0x7f0000000040), 0x12) (async) socket$tipc(0x1e, 0x5, 0x0) (async) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000f, 0x8010, r7, 0x0) mprotect(&(0x7f0000271000/0x3000)=nil, 0x3000, 0x3000006) (async) r8 = socket(0x18, 0x0, 0x2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) 0s ago: executing program 5 (id=1127): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x1c}, {0x6, 0x4, 0x80, 0x7ffffeb9}]}) r0 = syz_open_dev$dmmidi(&(0x7f0000000040), 0xaac8, 0x240b00) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f00000000c0)) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x5, 0x0, &(0x7f0000000180)=0xfffffff4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x14, 0x2, 0x6, 0x801}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x1) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000280)=0x1) r8 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000280)={'pcmda12\x00', [0x4f27, 0xb, 0xcd, 0x400, 0x1, 0xcc7, 0xa34d, 0x5c95239b, 0x5, 0x3ff, 0x7fffffff, 0x1600, 0x3, 0x40009, 0x5, 0xe1cb, 0x6, 0xffffffff, 0x3, 0x3, 0x85, 0xfffffffd, 0xfffffffd, 0xfffffff5, 0x6, 0x200003, 0x2000003c, 0x4, 0x3528, 0x2, 0x3]}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2e, &(0x7f00000007c0)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x3}, 0x1}}}, 0x108) close_range(r9, 0xffffffffffffffff, 0x600000000000000) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000100)) kernel console output (not intermixed with test programs): command tx timeout [ 234.985821][ T93] usb 4-1: USB disconnect, device number 64 [ 235.226389][ T5913] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 235.246736][ T5913] usb 6-1: device descriptor read/8, error -71 [ 235.486224][ T5913] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 235.514385][ T5913] usb 6-1: device descriptor read/8, error -71 [ 235.636731][ T5913] usb usb6-port1: unable to enumerate USB device [ 235.876218][ T5963] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 236.006201][ T5963] usb 4-1: device descriptor read/64, error -71 [ 236.246284][ T5963] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 236.379161][ T5963] usb 4-1: device descriptor read/64, error -71 [ 236.487296][ T5963] usb usb4-port1: attempt power cycle [ 236.826327][ T5963] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 236.846862][ T5963] usb 4-1: device descriptor read/8, error -71 [ 237.087666][ T5963] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 237.117338][ T5963] usb 4-1: device descriptor read/8, error -71 [ 237.226974][ T5963] usb usb4-port1: unable to enumerate USB device [ 237.396256][ T5913] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 237.546460][ T5913] usb 6-1: Using ep0 maxpacket: 32 [ 237.555835][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.567536][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.577370][ T5913] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 237.586583][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.596215][ T5913] usb 6-1: config 0 descriptor?? [ 238.008545][ T5913] savu 0003:1E7D:2D5A.0009: unknown main item tag 0x0 [ 238.015450][ T5913] savu 0003:1E7D:2D5A.0009: unknown main item tag 0x0 [ 238.024714][ T5913] savu 0003:1E7D:2D5A.0009: unknown main item tag 0x0 [ 238.031688][ T5913] savu 0003:1E7D:2D5A.0009: unknown main item tag 0x0 [ 238.038994][ T5913] savu 0003:1E7D:2D5A.0009: unknown main item tag 0x0 [ 238.045786][ T5913] savu 0003:1E7D:2D5A.0009: unbalanced collection at end of report description [ 238.055336][ T5913] savu 0003:1E7D:2D5A.0009: parse failed [ 238.061720][ T5913] savu 0003:1E7D:2D5A.0009: probe with driver savu failed with error -22 [ 238.210814][ T6587] usb 6-1: USB disconnect, device number 8 [ 238.775263][ T8581] netlink: 'syz.5.783': attribute type 12 has an invalid length. [ 238.783368][ T8581] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.783'. [ 239.066480][ T6587] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 239.238915][ T6587] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.262878][ T6587] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.290831][ T6587] usb 4-1: config 0 interface 0 has no altsetting 0 [ 239.318365][ T6587] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 239.347759][ T6587] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.405820][ T6587] usb 4-1: config 0 descriptor?? [ 239.706001][ T5877] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 239.713994][ T5877] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 239.723970][ T5877] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 239.733274][ T5877] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 239.741464][ T5877] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 239.829561][ T6587] usb 4-1: string descriptor 0 read error: -22 [ 239.844518][ T5952] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 239.868347][ T6587] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000A/input/input27 [ 239.966508][ T6587] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000A/input/input28 [ 239.997821][ T6587] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000A/input/input29 [ 240.012372][ T5952] usb 6-1: Using ep0 maxpacket: 16 [ 240.037775][ T5952] usb 6-1: unable to get BOS descriptor or descriptor too short [ 240.068260][ T5952] usb 6-1: config 13 has an invalid interface number: 50 but max is 0 [ 240.085755][ T8610] chnl_net:caif_netlink_parms(): no params data found [ 240.086817][ T5952] usb 6-1: config 13 has no interface number 0 [ 240.106502][ T5952] usb 6-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 240.127452][ T6587] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000A/input/input30 [ 240.152453][ T5952] usb 6-1: config 13 interface 50 has no altsetting 0 [ 240.186234][ T5952] usb 6-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 240.214222][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.222757][ T5952] usb 6-1: Product: syz [ 240.227482][ T5952] usb 6-1: Manufacturer: syz [ 240.232095][ T5952] usb 6-1: SerialNumber: syz [ 240.248001][ T6587] uclogic 0003:256C:006D.000A: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 240.303465][ T8609] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 240.398916][ T8610] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.406289][ T8610] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.413510][ T8610] bridge_slave_0: entered allmulticast mode [ 240.420408][ T8579] input: syz0 as /devices/virtual/input/input31 [ 240.435104][ T8610] bridge_slave_0: entered promiscuous mode [ 240.448913][ T8610] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.465093][ T8610] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.472540][ T8610] bridge_slave_1: entered allmulticast mode [ 240.482302][ T8610] bridge_slave_1: entered promiscuous mode [ 240.531220][ T5952] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 240.538403][ T5952] usb 6-1: MIDIStreaming interface descriptor not found [ 240.576366][ T8610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.595936][ T8610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.612044][ T5913] usb 4-1: USB disconnect, device number 69 [ 240.651776][ T5952] usb 6-1: USB disconnect, device number 9 [ 240.668310][ T8615] fido_id[8615]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 240.837762][ T7574] udevd[7574]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 240.895181][ T8610] team0: Port device team_slave_0 added [ 240.923789][ T8610] team0: Port device team_slave_1 added [ 241.218469][ T8610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.225544][ T8610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.252925][ T8610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.272020][ T8610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.296755][ T8610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.323740][ T8610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.476441][ T30] audit: type=1800 audit(1757819932.579:25): pid=8643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.798" name="memory.events" dev="tmpfs" ino=335 res=0 errno=0 [ 241.528720][ T8610] hsr_slave_0: entered promiscuous mode [ 241.535077][ T8610] hsr_slave_1: entered promiscuous mode [ 241.542161][ T8610] debugfs: 'hsr0' already exists in 'hsr' [ 241.549861][ T8610] Cannot create hsr debugfs directory [ 241.827039][ T5866] Bluetooth: hci6: command tx timeout [ 241.836527][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 241.885994][ T8610] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 241.904479][ T8610] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 241.932469][ T8610] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 241.947204][ T8610] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 241.986231][ T9] usb 6-1: device descriptor read/64, error -71 [ 242.072811][ T8659] netlink: 72 bytes leftover after parsing attributes in process `syz.4.803'. [ 242.103394][ T8610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.126309][ T8610] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.142022][ T1017] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.149199][ T1017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.166753][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.173885][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.236379][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 242.376207][ T9] usb 6-1: device descriptor read/64, error -71 [ 242.393177][ T8610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.489602][ T9] usb usb6-port1: attempt power cycle [ 242.657566][ T8610] veth0_vlan: entered promiscuous mode [ 242.671361][ T8610] veth1_vlan: entered promiscuous mode [ 242.701009][ T8610] veth0_macvtap: entered promiscuous mode [ 242.712656][ T8610] veth1_macvtap: entered promiscuous mode [ 242.729593][ T8610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.742375][ T8610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.764122][ T3548] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.774058][ T1017] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.784341][ T1017] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.794233][ T1017] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.846716][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 242.873867][ T9] usb 6-1: device descriptor read/8, error -71 [ 242.886464][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.894426][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.927169][ T3548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.935305][ T3548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.118554][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 243.148228][ T9] usb 6-1: device descriptor read/8, error -71 [ 243.260013][ T9] usb usb6-port1: unable to enumerate USB device [ 243.317131][ T43] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 243.433049][ T8686] nfs4: Unknown parameter '`ÿî' [ 243.487165][ T43] usb 7-1: Using ep0 maxpacket: 32 [ 243.495415][ T43] usb 7-1: config 0 has an invalid interface number: 54 but max is 0 [ 243.503648][ T43] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.515935][ T43] usb 7-1: config 0 has no interface number 0 [ 243.526151][ T43] usb 7-1: too many endpoints for config 0 interface 54 altsetting 205: 134, using maximum allowed: 30 [ 243.537689][ T43] usb 7-1: config 0 interface 54 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 134 [ 243.552396][ T43] usb 7-1: config 0 interface 54 has no altsetting 0 [ 243.582870][ T43] usb 7-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 243.602308][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.610716][ T43] usb 7-1: Product: syz [ 243.614896][ T43] usb 7-1: Manufacturer: syz [ 243.619987][ T43] usb 7-1: SerialNumber: syz [ 243.631577][ T43] usb 7-1: config 0 descriptor?? [ 243.843104][ T8682] cifs: Bad value for 'port' [ 243.856286][ T5913] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 243.906501][ T5866] Bluetooth: hci6: command tx timeout [ 244.007043][ T5913] usb 4-1: too many configurations: 151, using maximum allowed: 8 [ 244.024078][ T5913] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 244.034104][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 244.042392][ T5913] usb 4-1: Product: syz [ 244.046856][ T5913] usb 4-1: Manufacturer: syz [ 244.051453][ T5913] usb 4-1: SerialNumber: syz [ 244.058002][ T5913] usb 4-1: config 0 descriptor?? [ 244.065516][ T5913] ims_pcu 4-1:0.0: Zero length descriptor [ 244.071590][ T5913] ims_pcu 4-1:0.0: probe with driver ims_pcu failed with error -22 [ 244.271544][ T5952] usb 4-1: USB disconnect, device number 70 [ 244.831659][ T8697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.853975][ T8697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.014670][ T8707] fuse: Unknown parameter '¥@' [ 245.056217][ T43] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 245.216366][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 245.224248][ T43] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219 [ 245.237725][ T43] usb 6-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 245.247993][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.255985][ T43] usb 6-1: Product: syz [ 245.260200][ T43] usb 6-1: Manufacturer: syz [ 245.264797][ T43] usb 6-1: SerialNumber: syz [ 245.272069][ T43] usb 6-1: config 0 descriptor?? [ 245.277870][ T8696] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 245.291181][ T43] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 245.511621][ T43] usb 6-1: USB disconnect, device number 14 [ 245.987773][ T5866] Bluetooth: hci6: command tx timeout [ 246.032647][ T43] usb 7-1: USB disconnect, device number 2 [ 246.387068][ T5952] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 246.486383][ T43] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 246.516239][ T6587] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 246.538778][ T5952] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 246.547794][ T5952] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 246.558877][ T5952] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 246.569148][ T5952] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 246.580692][ T5952] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 246.592095][ T5952] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 246.605569][ T5952] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 246.614918][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 246.623086][ T5952] usb 6-1: Product: syz [ 246.628437][ T5952] usb 6-1: Manufacturer: syz [ 246.635606][ T8722] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 246.644520][ T5952] cdc_wdm 6-1:1.0: skipping garbage [ 246.649829][ T43] usb 7-1: Using ep0 maxpacket: 32 [ 246.655012][ T5952] cdc_wdm 6-1:1.0: skipping garbage [ 246.665581][ T43] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 246.675501][ T43] usb 7-1: config 0 has no interface number 0 [ 246.675833][ T5952] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 246.688063][ T6587] usb 4-1: Using ep0 maxpacket: 8 [ 246.693238][ T43] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 246.703327][ T5952] cdc_wdm 6-1:1.0: Unknown control protocol [ 246.726654][ T6587] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 246.735750][ T6587] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.748102][ T6587] usb 4-1: Product: syz [ 246.752339][ T6587] usb 4-1: Manufacturer: syz [ 246.757248][ T43] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 246.767760][ T6587] usb 4-1: SerialNumber: syz [ 246.773783][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.783006][ T43] usb 7-1: Product: syz [ 246.787922][ T43] usb 7-1: Manufacturer: syz [ 246.794043][ T43] usb 7-1: SerialNumber: syz [ 246.801351][ T43] usb 7-1: config 0 descriptor?? [ 246.810093][ T43] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 246.819939][ T43] em28xx 7-1:0.132: Video interface 132 found: [ 246.848825][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 246.855524][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 246.862585][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 246.869205][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 246.875312][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 246.885032][ T9] usb 6-1: USB disconnect, device number 15 [ 247.011648][ T8724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.031728][ T8724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.202452][ T6587] mxuport 4-1:254.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 247.210840][ T6587] mxuport 4-1:254.0: probe with driver mxuport failed with error -5 [ 247.292660][ T43] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 247.415300][ T8732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.821'. [ 247.474721][ T8732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.486010][ T8732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.501985][ T6587] usb 4-1: USB disconnect, device number 71 [ 247.936485][ T43] em28xx 7-1:0.132: failed to read eeprom (err=-110) [ 247.943348][ T43] em28xx 7-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 248.068687][ T5866] Bluetooth: hci6: command tx timeout [ 248.086464][ T8739] syzkaller1: entered promiscuous mode [ 248.092047][ T8739] syzkaller1: entered allmulticast mode [ 248.104106][ T8739] netlink: 52 bytes leftover after parsing attributes in process `syz.3.823'. [ 248.167371][ T43] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 248.175229][ T43] em28xx 7-1:0.132: analog set to bulk mode. [ 248.188819][ T5952] em28xx 7-1:0.132: Registering V4L2 extension [ 248.221042][ T43] usb 7-1: USB disconnect, device number 3 [ 248.254814][ T43] em28xx 7-1:0.132: Disconnecting em28xx [ 248.365878][ T8747] overlayfs: missing 'lowerdir' [ 248.440691][ T5952] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 248.448287][ T5952] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 248.455502][ T5952] em28xx 7-1:0.132: No AC97 audio processor [ 248.493837][ T5952] usb 7-1: Decoder not found [ 248.507223][ T5952] em28xx 7-1:0.132: failed to create media graph [ 248.521099][ T5952] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 248.537600][ T5952] em28xx 7-1:0.132: Remote control support is not available for this card. [ 248.548396][ T43] em28xx 7-1:0.132: Closing input extension [ 248.556570][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 248.570166][ T43] em28xx 7-1:0.132: Freeing device [ 248.631055][ T6587] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 248.728245][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 248.754255][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.767968][ T9] usb 6-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 248.779062][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.802310][ T6587] usb 4-1: config 0 has an invalid interface number: 42 but max is 0 [ 248.818210][ T9] usb 6-1: config 0 descriptor?? [ 248.821896][ T6587] usb 4-1: config 0 has no interface number 0 [ 248.834838][ T6587] usb 4-1: config 0 interface 42 has no altsetting 0 [ 248.842568][ T6587] usb 4-1: New USB device found, idVendor=1e0e, idProduct=9200, bcdDevice= 6.d8 [ 248.851791][ T6587] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.891730][ T6587] usb 4-1: config 0 descriptor?? [ 248.922393][ T6587] option 4-1:0.42: GSM modem (1-port) converter detected [ 249.233290][ T43] usb 4-1: USB disconnect, device number 72 [ 249.243805][ T43] option 4-1:0.42: device disconnected [ 249.247889][ T9] greenasia 0003:0E8F:0012.000B: unknown main item tag 0x0 [ 249.264979][ T9] greenasia 0003:0E8F:0012.000B: unknown main item tag 0x0 [ 249.275305][ T9] greenasia 0003:0E8F:0012.000B: unknown main item tag 0x0 [ 249.283016][ T9] greenasia 0003:0E8F:0012.000B: unknown main item tag 0x0 [ 249.290709][ T9] greenasia 0003:0E8F:0012.000B: unknown main item tag 0x0 [ 249.299051][ T9] greenasia 0003:0E8F:0012.000B: unknown main item tag 0x0 [ 249.299576][ T6587] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 249.306952][ T9] greenasia 0003:0E8F:0012.000B: unknown main item tag 0x0 [ 249.323108][ T9] greenasia 0003:0E8F:0012.000B: unknown main item tag 0x0 [ 249.330895][ T9] greenasia 0003:0E8F:0012.000B: unknown main item tag 0x0 [ 249.338405][ T9] greenasia 0003:0E8F:0012.000B: unknown main item tag 0x0 [ 249.350448][ T9] greenasia 0003:0E8F:0012.000B: hidraw0: USB HID v0.09 Device [HID 0e8f:0012] on usb-dummy_hcd.5-1/input0 [ 249.362230][ T9] greenasia 0003:0E8F:0012.000B: no inputs found [ 249.444675][ T43] usb 6-1: USB disconnect, device number 16 [ 249.453354][ T6587] usb 7-1: device descriptor read/64, error -71 [ 249.698863][ T6587] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 249.836264][ T6587] usb 7-1: device descriptor read/64, error -71 [ 249.946689][ T6587] usb usb7-port1: attempt power cycle [ 250.128861][ T9] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 250.236212][ T980] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 250.290739][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 250.299574][ T9] usb 4-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 250.310736][ T9] usb 4-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 250.316379][ T6587] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 250.321725][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 250.341421][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice= 0.40 [ 250.350917][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.361332][ T9] usb 4-1: Product: syz [ 250.365478][ T9] usb 4-1: Manufacturer: syz [ 250.366925][ T6587] usb 7-1: device descriptor read/8, error -71 [ 250.370099][ T9] usb 4-1: SerialNumber: syz [ 250.384506][ T8772] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 250.418984][ T980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 250.430126][ T980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.440268][ T980] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 250.449380][ T980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.461502][ T980] usb 6-1: config 0 descriptor?? [ 250.600860][ T9] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input32 [ 250.612711][ T5219] bcm5974 4-1:1.0: could not read from device [ 250.622194][ T5219] bcm5974 4-1:1.0: could not read from device [ 250.630416][ T5219] bcm5974 4-1:1.0: could not read from device [ 250.638634][ T9] usb 4-1: USB disconnect, device number 73 [ 250.643941][ T6587] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 250.667394][ T6587] usb 7-1: device descriptor read/8, error -71 [ 250.777291][ T6587] usb usb7-port1: unable to enumerate USB device [ 250.883423][ T980] konepure 0003:1E7D:2DBE.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.5-1/input0 [ 251.081005][ T980] usb 6-1: USB disconnect, device number 17 [ 251.228598][ T8778] kvm: vcpu 0: requested 64 ns lapic timer period limited to 200000 ns [ 252.076467][ T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 252.239634][ T8802] binder_alloc: 8801: pid 8801 spamming oneway? 1 buffers allocated for a total size of 4096 [ 252.251287][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 252.259881][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.280756][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 252.290197][ T8804] kernel profiling enabled (shift: 7) [ 252.298277][ T9] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 252.333642][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.368544][ T9] usb 6-1: config 0 descriptor?? [ 252.391604][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 252.403669][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 252.418331][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 252.441685][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 252.468518][ T9] usb 6-1: media controller created [ 252.496682][ T6587] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 252.511475][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 252.581171][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 252.594297][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 252.605866][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input33 [ 252.619970][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 252.627621][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 252.642237][ T9] usb 6-1: USB disconnect, device number 18 [ 252.657181][ T6587] usb 7-1: Using ep0 maxpacket: 32 [ 252.665029][ T6587] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 252.676924][ T6587] usb 7-1: config 0 has no interface number 0 [ 252.683048][ T6587] usb 7-1: config 0 interface 12 has no altsetting 0 [ 252.693155][ T6587] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 252.705931][ T6587] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.714584][ T6587] usb 7-1: Product: syz [ 252.715905][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 252.719161][ T6587] usb 7-1: Manufacturer: syz [ 252.734176][ T6587] usb 7-1: SerialNumber: syz [ 252.742734][ T6587] usb 7-1: config 0 descriptor?? [ 252.836240][ T43] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 252.986251][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 252.994759][ T43] usb 4-1: config 0 interface 0 altsetting 44 endpoint 0x83 has invalid wMaxPacketSize 0 [ 253.004952][ T43] usb 4-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 253.019167][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 253.028681][ T43] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 253.037763][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.045745][ T43] usb 4-1: Product: syz [ 253.049944][ T43] usb 4-1: Manufacturer: syz [ 253.054553][ T43] usb 4-1: SerialNumber: syz [ 253.061226][ T43] usb 4-1: config 0 descriptor?? [ 253.071629][ T43] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input34 [ 253.169073][ T8799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.188662][ T8820] netlink: 184 bytes leftover after parsing attributes in process `syz.5.846'. [ 253.198225][ T8799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.263708][ T6587] f81534 7-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 253.296036][ T6587] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 253.325093][ T43] usb 4-1: USB disconnect, device number 74 [ 253.346297][ T6587] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 253.353949][ T6587] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 253.420520][ T6587] usb 7-1: USB disconnect, device number 8 [ 253.546441][ T5934] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 253.697889][ T5934] usb 6-1: config 4 has an invalid interface number: 88 but max is 1 [ 253.706233][ T5934] usb 6-1: config 4 has an invalid interface number: 29 but max is 1 [ 253.714312][ T5934] usb 6-1: config 4 has no interface number 0 [ 253.721273][ T5934] usb 6-1: config 4 has no interface number 1 [ 253.727468][ T5934] usb 6-1: config 4 interface 88 altsetting 119 has a duplicate endpoint with address 0xB, skipping [ 253.738841][ T5934] usb 6-1: config 4 interface 88 altsetting 119 has an invalid endpoint descriptor of length 2, skipping [ 253.750808][ T5934] usb 6-1: config 4 interface 88 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 253.764077][ T5934] usb 6-1: config 4 interface 29 altsetting 9 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 253.775697][ T5934] usb 6-1: config 4 interface 29 altsetting 9 endpoint 0x86 has invalid maxpacket 1023, setting to 64 [ 253.786819][ T5934] usb 6-1: config 4 interface 88 has no altsetting 0 [ 253.793537][ T5934] usb 6-1: config 4 interface 29 has no altsetting 0 [ 253.803876][ T5934] usb 6-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 253.813005][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.821159][ T5934] usb 6-1: Product: syz [ 253.825357][ T5934] usb 6-1: Manufacturer: syz [ 253.830791][ T5934] usb 6-1: SerialNumber: syz [ 254.074546][ T5934] usb 6-1: USB disconnect, device number 19 [ 254.077000][ T8838] comedi comedi3: 8255: I/O port conflict (0x10003,4) [ 254.090250][ T8838] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 254.100175][ T8838] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 254.113285][ T8838] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 254.120496][ T8838] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 254.139661][ T8838] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 254.206718][ T5913] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 254.368367][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 254.379679][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.393309][ T5913] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 254.406275][ T5913] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 254.415307][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.426271][ T5913] usb 4-1: config 0 descriptor?? [ 254.496510][ T93] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 254.626778][ T93] usb 7-1: device descriptor read/64, error -71 [ 254.637604][ T8836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.646597][ T8836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.660310][ T8836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.669232][ T8836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.826205][ T43] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 254.866771][ T93] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 254.883231][ T5913] hid_parser_main: 151 callbacks suppressed [ 254.883250][ T5913] shield 0003:0955:7214.000D: unknown main item tag 0x0 [ 254.896294][ T5913] shield 0003:0955:7214.000D: unknown main item tag 0x0 [ 254.903249][ T5913] shield 0003:0955:7214.000D: unknown main item tag 0x0 [ 254.913152][ T5913] shield 0003:0955:7214.000D: unknown main item tag 0x0 [ 254.920204][ T5913] shield 0003:0955:7214.000D: unknown main item tag 0x0 [ 254.931241][ T5913] input: HID 0955:7214 Haptics as /devices/virtual/input/input35 [ 254.974909][ T5913] shield 0003:0955:7214.000D: Registered Thunderstrike controller [ 254.983020][ T5913] shield 0003:0955:7214.000D: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 254.999230][ T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.006293][ T93] usb 7-1: device descriptor read/64, error -71 [ 255.009710][ T43] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 255.025325][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.042307][ T43] usb 6-1: config 0 descriptor?? [ 255.050228][ T43] pwc: Askey VC010 type 2 USB webcam detected. [ 255.086942][ T5913] usb 4-1: USB disconnect, device number 75 [ 255.092980][ T5934] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 255.115074][ T5934] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 255.129765][ T93] usb usb7-port1: attempt power cycle [ 255.138616][ T5934] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 255.156578][ T5934] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 255.269787][ T43] pwc: send_video_command error -71 [ 255.279867][ T43] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 255.296271][ T43] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 255.319680][ T43] usb 6-1: USB disconnect, device number 20 [ 255.485883][ T93] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 255.520631][ T93] usb 7-1: device descriptor read/8, error -71 [ 255.671583][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.686186][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.700550][ T8857] loop3: detected capacity change from 0 to 1 [ 255.730503][ T8857] Dev loop3: unable to read RDB block 1 [ 255.748578][ T8857] loop3: unable to read partition table [ 255.768712][ T8857] loop3: partition table beyond EOD, truncated [ 255.777168][ T93] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 255.777342][ T43] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 255.816037][ T8857] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà–) failed (rc=-5) [ 255.831559][ T93] usb 7-1: device descriptor read/8, error -71 [ 255.946328][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 255.946629][ T93] usb usb7-port1: unable to enumerate USB device [ 255.958990][ T43] usb 6-1: config index 0 descriptor too short (expected 44, got 36) [ 255.973555][ T43] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 255.984336][ T43] usb 6-1: config 0 has no interface number 0 [ 256.000605][ T43] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 256.012612][ T43] usb 6-1: config 0 interface 126 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0 [ 256.025715][ T43] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0 [ 256.036206][ T43] usb 6-1: config 0 interface 126 has no altsetting 0 [ 256.047525][ T43] usb 6-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 256.056704][ T6587] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 256.077104][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.086739][ T43] usb 6-1: Product: syz [ 256.090916][ T43] usb 6-1: Manufacturer: syz [ 256.101632][ T43] usb 6-1: SerialNumber: syz [ 256.117260][ T43] usb 6-1: config 0 descriptor?? [ 256.122994][ T8853] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 256.238365][ T6587] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 256.269156][ T6587] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.289574][ T6587] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 256.298779][ T6587] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.312425][ T6587] usb 4-1: config 0 descriptor?? [ 256.553588][ T43] ir_usb 6-1:0.126: IR Dongle converter detected [ 256.742512][ T6587] hid-u2fzero 0003:10C4:8ACF.000E: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.3-1/input0 [ 256.777940][ T8853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.778249][ T6587] hid-u2fzero 0003:10C4:8ACF.000E: U2F Zero LED initialised [ 256.807348][ T6587] hid-u2fzero 0003:10C4:8ACF.000E: U2F Zero RNG initialised [ 256.832642][ T8853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.861991][ T43] usb 6-1: IR Dongle converter now attached to ttyUSB0 [ 257.070785][ T43] usb 6-1: USB disconnect, device number 21 [ 257.101688][ T43] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 257.122684][ T43] ir_usb 6-1:0.126: device disconnected [ 257.753894][ T8892] netlink: 256 bytes leftover after parsing attributes in process `syz.6.869'. [ 258.116321][ T93] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 258.277975][ T93] usb 7-1: config 1 has an invalid interface number: 236 but max is 1 [ 258.286945][ T93] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.297473][ T93] usb 7-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 258.306573][ T93] usb 7-1: config 1 has no interface number 2 [ 258.312737][ T93] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 258.325167][ T93] usb 7-1: config 1 interface 1 has no altsetting 0 [ 258.334365][ T93] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 258.344415][ T93] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.352526][ T93] usb 7-1: Product: syz [ 258.356769][ T93] usb 7-1: Manufacturer: syz [ 258.361358][ T93] usb 7-1: SerialNumber: syz [ 258.378483][ T8896] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 258.393936][ T93] cdc_ncm 7-1:1.0: skipping garbage [ 258.412450][ T93] cdc_ncm 7-1:1.0: NCM or ECM functional descriptors missing [ 258.426889][ T93] cdc_ncm 7-1:1.0: bind() failure [ 258.443842][ T93] cdc_ncm 7-1:1.236: CDC Union missing and no IAD found [ 258.451505][ T8899] netlink: 'syz.5.872': attribute type 10 has an invalid length. [ 258.451803][ T8898] netlink: 'syz.5.872': attribute type 10 has an invalid length. [ 258.467683][ T93] cdc_ncm 7-1:1.236: bind() failure [ 258.473053][ T8899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.485242][ T8899] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 258.736273][ T43] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 258.893475][ T43] usb 6-1: config 0 has an invalid interface number: 11 but max is 0 [ 258.905694][ T43] usb 6-1: config 0 has no interface number 0 [ 258.930903][ T43] usb 6-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 258.942484][ T43] usb 6-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 258.955918][ T43] usb 6-1: config 0 interface 11 has no altsetting 0 [ 258.963397][ T43] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 258.972516][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.982948][ T43] usb 6-1: config 0 descriptor?? [ 258.990945][ T43] keyspan 6-1:0.11: Keyspan 2 port adapter converter detected [ 259.000066][ T43] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 81 [ 259.008100][ T43] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 82 [ 259.015881][ T43] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 1 [ 259.023662][ T43] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 2 [ 259.031777][ T43] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 85 [ 259.040144][ T43] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 5 [ 259.049456][ T43] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 259.063605][ T43] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 83 [ 259.072379][ T43] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 84 [ 259.080597][ T43] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 3 [ 259.088559][ T43] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 4 [ 259.096725][ T43] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 86 [ 259.104516][ T43] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 6 [ 259.114638][ T43] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 259.189743][ T93] usb 6-1: USB disconnect, device number 22 [ 259.202705][ T93] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 259.219367][ T93] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 259.229661][ T93] keyspan 6-1:0.11: device disconnected [ 259.745511][ T8906] can0: slcan on ttyS3. [ 259.807643][ T8905] can0 (unregistered): slcan off ttyS3. [ 260.166328][ T43] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 260.182724][ T1167] block nbd1: Possible stuck request ffff88802559e1c0: control (read@0,1024B). Runtime 90 seconds [ 260.193953][ T1167] block nbd1: Possible stuck request ffff88802559e380: control (read@1024,1024B). Runtime 90 seconds [ 260.205485][ T1167] block nbd1: Possible stuck request ffff88802559e540: control (read@2048,1024B). Runtime 90 seconds [ 260.216793][ T1167] block nbd1: Possible stuck request ffff88802559e700: control (read@3072,1024B). Runtime 90 seconds [ 260.395813][ T43] usb 6-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 260.405074][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.413426][ T43] usb 6-1: Product: syz [ 260.419778][ T43] usb 6-1: Manufacturer: syz [ 260.424381][ T43] usb 6-1: SerialNumber: syz [ 260.433965][ T43] usb 6-1: config 0 descriptor?? [ 260.448880][ T43] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 260.647393][ T43] sonixb 6-1:0.0: Error reading register 00: -71 [ 260.666331][ T43] usb 6-1: USB disconnect, device number 23 [ 260.887767][ T93] usb 7-1: USB disconnect, device number 13 [ 261.336188][ T93] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 261.476331][ T6587] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 261.488258][ T93] usb 7-1: config index 0 descriptor too short (expected 2843, got 27) [ 261.496657][ T93] usb 7-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 261.508532][ T93] usb 7-1: config 17 has 1 interface, different from the descriptor's value: 9 [ 261.518411][ T93] usb 7-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice= 0.00 [ 261.527647][ T93] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.544932][ T93] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 261.639911][ T6587] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 261.648325][ T6587] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 261.657226][ T6587] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 261.672050][ T6587] usb 6-1: config 220 has no interface number 2 [ 261.680100][ T6587] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 261.693293][ T6587] usb 6-1: config 220 interface 0 has no altsetting 0 [ 261.700168][ T6587] usb 6-1: config 220 interface 76 has no altsetting 0 [ 261.707077][ T6587] usb 6-1: config 220 interface 1 has no altsetting 0 [ 261.719446][ T6587] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 261.728544][ T6587] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.738500][ T6587] usb 6-1: Product: syz [ 261.742582][ T93] gspca_sn9c2028: read1 error -71 [ 261.742657][ T6587] usb 6-1: Manufacturer: syz [ 261.753977][ T93] gspca_sn9c2028: read1 error -71 [ 261.754560][ T6587] usb 6-1: SerialNumber: syz [ 261.761285][ T93] gspca_sn9c2028: read1 error -71 [ 261.769062][ T93] sn9c2028 7-1:17.0: probe with driver sn9c2028 failed with error -71 [ 261.785799][ T93] usb 7-1: USB disconnect, device number 14 [ 262.005938][ T6587] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 262.014335][ T6587] usb 6-1: No valid video chain found. [ 262.021261][ T6587] usb 6-1: selecting invalid altsetting 0 [ 262.042003][ T6587] usb 6-1: selecting invalid altsetting 0 [ 262.048249][ T6587] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 262.064276][ T6587] usb 6-1: USB disconnect, device number 24 [ 262.424282][ T8951] overlay: ./file1 is not a directory [ 262.796231][ T93] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 262.846201][ T6587] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 262.957871][ T93] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.968281][ T93] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 262.977509][ T93] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.988856][ T93] usb 7-1: config 0 descriptor?? [ 262.998168][ T93] pwc: Askey VC010 type 2 USB webcam detected. [ 263.006350][ T6587] usb 6-1: Using ep0 maxpacket: 16 [ 263.013563][ T6587] usb 6-1: config 0 has an invalid interface number: 48 but max is 0 [ 263.021917][ T6587] usb 6-1: config 0 has no interface number 0 [ 263.037012][ T6587] usb 6-1: config 0 interface 48 has no altsetting 0 [ 263.048040][ T6587] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 263.057397][ T6587] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.065393][ T6587] usb 6-1: Product: syz [ 263.069922][ T6587] usb 6-1: Manufacturer: syz [ 263.074526][ T6587] usb 6-1: SerialNumber: syz [ 263.082146][ T6587] usb 6-1: config 0 descriptor?? [ 263.300802][ T5866] Bluetooth: hci5: Unknown advertising packet type: 0x35 [ 263.300906][ T5866] Bluetooth: hci5: adv larger than maximum supported [ 263.301928][ T6587] usb 6-1: USB disconnect, device number 25 [ 263.315360][ T5866] Bluetooth: hci5: Malformed LE Event: 0x0d [ 263.396284][ T93] pwc: recv_control_msg error -32 req 02 val 2b00 [ 263.403268][ T93] pwc: recv_control_msg error -32 req 02 val 2700 [ 263.410709][ T93] pwc: recv_control_msg error -32 req 02 val 2c00 [ 263.420520][ T93] pwc: recv_control_msg error -32 req 04 val 1000 [ 263.427764][ T93] pwc: recv_control_msg error -32 req 04 val 1300 [ 263.434755][ T93] pwc: recv_control_msg error -32 req 04 val 1400 [ 263.442235][ T93] pwc: recv_control_msg error -32 req 02 val 2000 [ 263.449297][ T93] pwc: recv_control_msg error -32 req 02 val 2100 [ 263.460950][ T93] pwc: recv_control_msg error -32 req 04 val 1500 [ 263.671263][ T93] pwc: recv_control_msg error -71 req 02 val 2400 [ 263.680456][ T93] pwc: recv_control_msg error -71 req 02 val 2600 [ 263.688686][ T93] pwc: recv_control_msg error -71 req 02 val 2900 [ 263.706208][ T93] pwc: recv_control_msg error -71 req 02 val 2800 [ 263.713269][ T93] pwc: recv_control_msg error -71 req 04 val 1100 [ 263.720311][ T93] pwc: recv_control_msg error -71 req 04 val 1200 [ 263.730508][ T93] pwc: Registered as video103. [ 263.743122][ T93] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input36 [ 263.762657][ T93] usb 7-1: USB disconnect, device number 15 [ 263.995002][ T8968] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 264.343694][ T8977] netlink: 1010 bytes leftover after parsing attributes in process `syz.5.889'. [ 264.355142][ T8977] bridge: RTM_NEWNEIGH with invalid state 0x1d25 [ 264.616473][ T93] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 264.766426][ T93] usb 6-1: Using ep0 maxpacket: 32 [ 264.773104][ T93] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 264.781397][ T93] usb 6-1: config 0 has no interface number 0 [ 264.788337][ T9] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 264.799104][ T93] usb 6-1: New USB device found, idVendor=11f5, idProduct=0005, bcdDevice=57.c1 [ 264.808717][ T93] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.816834][ T93] usb 6-1: Product: syz [ 264.820988][ T93] usb 6-1: Manufacturer: syz [ 264.825557][ T93] usb 6-1: SerialNumber: syz [ 264.832147][ T93] usb 6-1: config 0 descriptor?? [ 264.839293][ T93] pl2303 6-1:0.196: required interrupt-in endpoint missing [ 264.956248][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 264.963335][ T9] usb 7-1: config 1 has an invalid descriptor of length 188, skipping remainder of the config [ 264.973786][ T9] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 264.983723][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 264.993466][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 265.001579][ T9] usb 7-1: SerialNumber: syz [ 265.121816][ T8992] kvm: user requested TSC rate below hardware speed [ 265.248844][ T8994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.260675][ T8994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.114540][ T6587] usb 6-1: USB disconnect, device number 26 [ 267.568722][ T9] usb 7-1: USB disconnect, device number 16 [ 269.019310][ T9040] netlink: 4 bytes leftover after parsing attributes in process `syz.6.908'. [ 269.046341][ T6587] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 269.199312][ T6587] usb 6-1: config 8 has an invalid interface number: 223 but max is 0 [ 269.199342][ T6587] usb 6-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 269.199360][ T6587] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 269.199378][ T6587] usb 6-1: config 8 has no interface number 0 [ 269.199418][ T6587] usb 6-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 269.199441][ T6587] usb 6-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 269.201522][ T6587] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 269.201549][ T6587] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.201568][ T6587] usb 6-1: Product: syz [ 269.201583][ T6587] usb 6-1: Manufacturer: syz [ 269.201596][ T6587] usb 6-1: SerialNumber: syz [ 269.267102][ T980] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 269.415598][ T6587] usb 6-1: USB disconnect, device number 27 [ 269.446601][ T980] usb 7-1: device descriptor read/64, error -71 [ 269.686233][ T980] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 269.819318][ T980] usb 7-1: device descriptor read/64, error -71 [ 269.927167][ T980] usb usb7-port1: attempt power cycle [ 270.219362][ T9] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 270.276235][ T980] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 270.296915][ T980] usb 7-1: device descriptor read/8, error -71 [ 270.378458][ T9] usb 6-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 270.389017][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.399829][ T9] usb 6-1: config 0 descriptor?? [ 270.408331][ T9] pwc: Creative Labs Webcam Pro Ex detected. [ 270.536452][ T980] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 270.556875][ T980] usb 7-1: device descriptor read/8, error -71 [ 270.607846][ T9] pwc: Failed to set LED on/off time (-71) [ 270.614777][ T9] pwc: send_video_command error -71 [ 270.622172][ T9] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 270.632586][ T9] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 270.645800][ T9] usb 6-1: USB disconnect, device number 28 [ 270.666729][ T980] usb usb7-port1: unable to enumerate USB device [ 271.220212][ T5877] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 271.229572][ T5877] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 271.240764][ T5877] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 271.256693][ T5877] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 271.264708][ T5877] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 271.495132][ T9046] chnl_net:caif_netlink_parms(): no params data found [ 271.576385][ T9046] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.583564][ T9046] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.591944][ T9046] bridge_slave_0: entered allmulticast mode [ 271.600445][ T9046] bridge_slave_0: entered promiscuous mode [ 271.609395][ T9046] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.616896][ T9046] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.624062][ T9046] bridge_slave_1: entered allmulticast mode [ 271.631575][ T9046] bridge_slave_1: entered promiscuous mode [ 271.665698][ T9046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.679038][ T9046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.716019][ T9046] team0: Port device team_slave_0 added [ 271.724876][ T9046] team0: Port device team_slave_1 added [ 271.761002][ T9046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.768090][ T9046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.794701][ T9046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.808085][ T9046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.815048][ T9046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.870732][ T9057] netlink: 260 bytes leftover after parsing attributes in process `syz.5.913'. [ 271.871358][ T9046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.938288][ T9046] hsr_slave_0: entered promiscuous mode [ 271.944603][ T9046] hsr_slave_1: entered promiscuous mode [ 271.951564][ T9046] debugfs: 'hsr0' already exists in 'hsr' [ 271.958596][ T9046] Cannot create hsr debugfs directory [ 272.137260][ T43] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 272.194814][ T9046] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 272.205609][ T9046] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 272.218389][ T9046] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 272.229171][ T9046] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 272.264458][ T9046] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.271660][ T9046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.280088][ T9046] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.287312][ T9046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.310352][ T43] usb 6-1: config index 0 descriptor too short (expected 8028, got 92) [ 272.321705][ T43] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.333379][ T43] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.359055][ T43] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 272.372031][ T9046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.375131][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.392885][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.398982][ T43] usb 6-1: Product: syz [ 272.404209][ T43] usb 6-1: Manufacturer: syz [ 272.404903][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.409031][ T43] usb 6-1: SerialNumber: syz [ 272.436294][ T5913] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 272.453675][ T9046] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.473078][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.480293][ T4332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.495680][ T1017] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.502941][ T1017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.608165][ T5913] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.620351][ T5913] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 272.635811][ T5913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.649681][ T5913] usb 7-1: config 0 descriptor?? [ 272.802583][ T9046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.082914][ T5913] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 273.104720][ T9080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.111866][ T5913] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.000F/input/input37 [ 273.136644][ T9080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.232905][ T9046] veth0_vlan: entered promiscuous mode [ 273.262264][ T9046] veth1_vlan: entered promiscuous mode [ 273.275330][ T5913] keytouch 0003:0926:3333.000F: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 273.346540][ T5866] Bluetooth: hci7: command tx timeout [ 273.365911][ T9046] veth0_macvtap: entered promiscuous mode [ 273.415718][ T9046] veth1_macvtap: entered promiscuous mode [ 273.444295][ T9046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.472417][ T9046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.499016][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.523465][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.534469][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.544767][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.643814][ T93] usb 7-1: USB disconnect, device number 21 [ 273.649326][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.662631][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.752519][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.762721][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.286479][ T93] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 274.596379][ T5913] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 274.759576][ T5913] usb 7-1: config 0 has an invalid interface number: 156 but max is 0 [ 274.768014][ T5913] usb 7-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 274.780823][ T5913] usb 7-1: config 0 has no interface number 0 [ 274.791201][ T5913] usb 7-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 93, changing to 10 [ 274.812909][ T5913] usb 7-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid maxpacket 25088, setting to 1024 [ 274.831646][ T5913] usb 7-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 274.850365][ T5913] usb 7-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice=d6.b9 [ 274.859874][ T5913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.879692][ T5913] usb 7-1: config 0 descriptor?? [ 274.903825][ T5913] gspca_main: spca561-2.14.0 probing abcd:cdee [ 274.951919][ T43] cdc_ncm 6-1:1.0: bind() failure [ 274.982127][ T43] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 275.013727][ T43] usb 6-1: USB disconnect, device number 29 [ 275.056748][ T9113] netlink: 'syz.5.925': attribute type 10 has an invalid length. [ 275.105059][ T9100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.132062][ T9100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.153032][ T5913] spca561 7-1:0.156: probe with driver spca561 failed with error -22 [ 275.175926][ T5913] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 275.209412][ T5913] usb 7-1: MIDIStreaming interface descriptor not found [ 275.213192][ T30] audit: type=1326 audit(1757819966.329:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9116 comm="syz.5.927" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd90938eba9 code=0x0 [ 275.317691][ T93] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 275.388870][ T5913] usb 7-1: USB disconnect, device number 22 [ 275.428887][ T5866] Bluetooth: hci7: command tx timeout [ 275.477137][ T9124] Invalid source name [ 275.481474][ T9124] UBIFS error (pid: 9124): cannot open "ubifs", error -22 [ 275.506908][ T93] usb 8-1: Using ep0 maxpacket: 8 [ 275.534218][ T9126] netlink: 72 bytes leftover after parsing attributes in process `syz.5.931'. [ 275.577001][ T93] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.596364][ T9130] nilfs2: Unknown parameter 'ú6QbîB`N¶D"§Z|LÀWx¸aÂÄxã;?"¶~\þr-' [ 275.612839][ T93] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEF, changing to 0x8F [ 275.655053][ T93] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 275.704330][ T93] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 275.756672][ T9136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.769077][ T9136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.777968][ T93] usb 8-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 275.789172][ T93] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 275.797230][ T93] usb 8-1: SerialNumber: syz [ 275.803972][ T93] usb 8-1: config 0 descriptor?? [ 275.812803][ T93] hso 8-1:0.0: Can't find BULK IN endpoint [ 275.896390][ T43] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 275.976190][ T980] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 276.014039][ T5952] usb 8-1: USB disconnect, device number 3 [ 276.054594][ T43] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 276.065190][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.075742][ T43] usb 6-1: Product: syz [ 276.080056][ T43] usb 6-1: Manufacturer: syz [ 276.084646][ T43] usb 6-1: SerialNumber: syz [ 276.093963][ T43] usb 6-1: config 0 descriptor?? [ 276.101421][ T43] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 276.128539][ T980] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.139164][ T980] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 276.150813][ T980] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 276.161544][ T980] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 276.169633][ T980] usb 7-1: SerialNumber: syz [ 276.394178][ T980] usb 7-1: 0:2 : does not exist [ 276.399576][ T980] usb 7-1: unit 5: unexpected type 0x03 [ 276.416437][ T980] usb 7-1: USB disconnect, device number 23 [ 276.444834][ T8497] udevd[8497]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 276.826387][ T43] gspca_sunplus: reg_r err -110 [ 276.831477][ T43] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 277.506765][ T5866] Bluetooth: hci7: command tx timeout [ 277.890752][ T9171] netlink: 'syz.7.944': attribute type 1 has an invalid length. [ 278.256272][ T93] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 278.406297][ T93] usb 8-1: Using ep0 maxpacket: 32 [ 278.418261][ T93] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.435553][ T93] usb 8-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 278.445227][ T93] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.455919][ T93] usb 8-1: Product: syz [ 278.460701][ T93] usb 8-1: Manufacturer: syz [ 278.465284][ T93] usb 8-1: SerialNumber: syz [ 278.543352][ T9178] tipc: Started in network mode [ 278.543373][ T9178] tipc: Node identity 4, cluster identity 4711 [ 278.543383][ T9178] tipc: Node number set to 4 [ 278.712363][ T93] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input38 [ 278.733922][ T5219] bcm5974 8-1:1.0: could not read from device [ 278.742701][ T9185] netlink: 12 bytes leftover after parsing attributes in process `syz.6.949'. [ 278.761837][ T5219] bcm5974 8-1:1.0: could not read from device [ 278.769642][ T93] usb 8-1: USB disconnect, device number 4 [ 278.789019][ T5219] bcm5974 8-1:1.0: could not read from device [ 278.803478][ T43] usb 6-1: USB disconnect, device number 30 [ 278.983276][ T9191] cgroup: Invalid name [ 279.056369][ T9194] random: crng reseeded on system resumption [ 279.137238][ T93] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 279.296288][ T93] usb 8-1: Using ep0 maxpacket: 32 [ 279.303396][ T93] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 279.319165][ T93] usb 8-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 279.329264][ T93] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.340590][ T93] usb 8-1: Product: syz [ 279.344845][ T93] usb 8-1: Manufacturer: syz [ 279.350774][ T93] usb 8-1: SerialNumber: syz [ 279.478773][ T9207] netlink: 20 bytes leftover after parsing attributes in process `syz.6.955'. [ 279.550189][ T9209] netlink: 24 bytes leftover after parsing attributes in process `syz.6.956'. [ 279.586677][ T5866] Bluetooth: hci7: command tx timeout [ 279.608590][ T93] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input39 [ 279.629277][ T5219] bcm5974 8-1:1.0: could not read from device [ 279.646269][ T5219] bcm5974 8-1:1.0: could not read from device [ 279.657320][ T93] usb 8-1: USB disconnect, device number 5 [ 279.825627][ T9217] netlink: 12 bytes leftover after parsing attributes in process `syz.6.959'. [ 279.965918][ T9221] syzkaller1: entered promiscuous mode [ 279.971623][ T9221] syzkaller1: entered allmulticast mode [ 280.389775][ T43] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 280.486204][ T5952] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 280.529821][ T43] usb 8-1: device descriptor read/64, error -71 [ 280.638213][ T5952] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 280.648942][ T5952] usb 7-1: config 0 interface 0 has no altsetting 0 [ 280.663675][ T5952] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 280.672797][ T5952] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 280.681523][ T5952] usb 7-1: Product: syz [ 280.685713][ T5952] usb 7-1: Manufacturer: syz [ 280.690405][ T5952] usb 7-1: SerialNumber: syz [ 280.697313][ T5952] usb 7-1: config 0 descriptor?? [ 280.709375][ T5952] usb 7-1: selecting invalid altsetting 0 [ 280.776204][ T43] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 280.906229][ T43] usb 8-1: device descriptor read/64, error -71 [ 280.979373][ T5952] usb 7-1: USB disconnect, device number 24 [ 281.017368][ T43] usb usb8-port1: attempt power cycle [ 281.366186][ T43] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 281.408217][ T43] usb 8-1: device descriptor read/8, error -71 [ 281.656658][ T43] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 281.676910][ T43] usb 8-1: device descriptor read/8, error -71 [ 281.791802][ T43] usb usb8-port1: unable to enumerate USB device [ 282.016227][ T93] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 282.166463][ T93] usb 7-1: Using ep0 maxpacket: 8 [ 282.174109][ T93] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 282.184072][ T93] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 282.193926][ T93] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 282.206214][ T93] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 282.216385][ T93] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 282.230522][ T93] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 282.239627][ T93] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.452906][ T93] usb 7-1: GET_CAPABILITIES returned 0 [ 282.458669][ T93] usbtmc 7-1:16.0: can't read capabilities [ 282.665428][ T93] usb 7-1: USB disconnect, device number 25 [ 283.275413][ T93] IPVS: starting estimator thread 0... [ 283.366209][ T9258] IPVS: using max 30 ests per chain, 72000 per kthread [ 283.556331][ T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 283.710836][ T9] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 283.719086][ T9] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 283.730852][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 283.742706][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 283.754011][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 283.766962][ T9] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 283.776018][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.791835][ T9] usb 8-1: config 0 descriptor?? [ 283.797787][ T9255] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 284.042626][ T9273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.474730][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 284.480848][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 284.492873][ T9] usb 8-1: USB disconnect, device number 10 [ 284.738495][ T9287] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 284.746039][ T9287] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 284.752938][ T9287] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 284.762131][ T9287] comedi comedi3: 8255: I/O port conflict (0xc9,4) [ 284.768957][ T9287] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 284.776682][ T9287] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 284.783148][ T9287] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 284.790574][ T9287] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 284.799620][ T9287] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 284.807156][ T9287] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 284.813654][ T9287] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 284.820747][ T9287] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 284.827558][ T9287] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 284.834295][ T9287] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 284.843697][ T9287] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 285.154668][ T9297] sctp: [Deprecated]: syz.4.981 (pid 9297) Use of int in max_burst socket option. [ 285.154668][ T9297] Use struct sctp_assoc_value instead [ 285.186702][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 285.282608][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.982'. [ 285.856218][ T93] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 286.008072][ T93] usb 7-1: config 0 has an invalid interface number: 151 but max is 0 [ 286.016395][ T93] usb 7-1: config 0 has no interface number 0 [ 286.024351][ T93] usb 7-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 286.033523][ T93] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.041632][ T93] usb 7-1: Product: syz [ 286.045797][ T93] usb 7-1: Manufacturer: syz [ 286.050489][ T93] usb 7-1: SerialNumber: syz [ 286.057081][ T93] usb 7-1: config 0 descriptor?? [ 286.392362][ T24] usb 5-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 286.413146][ T24] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 286.427038][ T24] usb 5-1: USB disconnect, device number 21 [ 286.436390][ T6587] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 286.465897][ T93] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 286.504704][ T93] usb 7-1: USB disconnect, device number 26 [ 286.576745][ T6587] usb 8-1: device descriptor read/64, error -71 [ 286.736221][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 286.836317][ T6587] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 286.886156][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 286.894338][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 286.902502][ T24] usb 5-1: config 0 has no interface number 0 [ 286.911195][ T24] usb 5-1: config 0 interface 1 has no altsetting 0 [ 286.919968][ T24] usb 5-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 286.929034][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.937054][ T24] usb 5-1: Product: syz [ 286.941219][ T24] usb 5-1: Manufacturer: syz [ 286.945806][ T24] usb 5-1: SerialNumber: syz [ 286.956853][ T24] usb 5-1: config 0 descriptor?? [ 286.968251][ T6587] usb 8-1: device descriptor read/64, error -71 [ 287.051985][ T9322] binder: 9321:9322 ioctl ae9a 0 returned -22 [ 287.076926][ T6587] usb usb8-port1: attempt power cycle [ 287.089887][ T9324] overlayfs: conflicting lowerdir path [ 287.166775][ T9328] smc: net device bond0 applied user defined pnetid SYZ2 [ 287.182460][ T9306] program syz.4.985 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 287.205473][ T9306] trusted_key: encrypted_key: master key parameter is missing [ 287.233967][ T9306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.263630][ T9306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.353602][ T24] i2c-cp2615 5-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 287.426294][ T6587] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 287.457087][ T6587] usb 8-1: device descriptor read/8, error -71 [ 287.581261][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 287.586861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 287.589987][ T43] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 287.632994][ T5952] usb 5-1: USB disconnect, device number 22 [ 287.759273][ T6587] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 287.797312][ T6587] usb 8-1: device descriptor read/8, error -71 [ 287.804512][ T43] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 287.818044][ T43] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 287.835280][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 287.843542][ T43] usb 6-1: SerialNumber: syz [ 287.855155][ T43] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 287.913505][ T6587] usb usb8-port1: unable to enumerate USB device [ 288.053965][ T9332] netlink: 4416 bytes leftover after parsing attributes in process `syz.5.994'. [ 288.268012][ T43] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 288.308748][ T43] usb 6-1: USB disconnect, device number 31 [ 289.519458][ T9390] binder_alloc: binder_alloc_mmap_handler: 9389 200000735000-200000736000 already mapped failed -16 [ 289.531927][ T9390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1003'. [ 289.586579][ T43] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 289.736393][ T9] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 289.756244][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 289.763003][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.775288][ T43] usb 6-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 289.784513][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.796500][ T43] usb 6-1: config 0 descriptor?? [ 289.886328][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 289.896415][ T9] usb 8-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=71.c9 [ 289.905583][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.913669][ T9] usb 8-1: Product: syz [ 289.917998][ T9] usb 8-1: Manufacturer: syz [ 289.922589][ T9] usb 8-1: SerialNumber: syz [ 289.927348][ T5913] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 289.938033][ T9] usb 8-1: config 0 descriptor?? [ 289.948650][ T9] usb_ehset_test 8-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 290.007568][ T9379] afs: Unknown parameter 'dyn' [ 290.017000][ T43] usbhid 6-1:0.0: can't add hid device: -71 [ 290.023028][ T43] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 290.036801][ T43] usb 6-1: USB disconnect, device number 32 [ 290.095673][ T5913] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 290.103339][ T5913] usb 5-1: can't read configurations, error -71 [ 290.147154][ T9] usb 8-1: USB disconnect, device number 15 [ 290.233945][ T1167] block nbd1: Possible stuck request ffff88802559e1c0: control (read@0,1024B). Runtime 120 seconds [ 290.244775][ T1167] block nbd1: Possible stuck request ffff88802559e380: control (read@1024,1024B). Runtime 120 seconds [ 290.255986][ T1167] block nbd1: Possible stuck request ffff88802559e540: control (read@2048,1024B). Runtime 120 seconds [ 290.267157][ T1167] block nbd1: Possible stuck request ffff88802559e700: control (read@3072,1024B). Runtime 120 seconds [ 290.896414][ T43] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 290.996185][ T5952] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 291.058127][ T43] usb 6-1: config 0 has an invalid interface number: 62 but max is 0 [ 291.066548][ T43] usb 6-1: config 0 has no interface number 0 [ 291.072636][ T43] usb 6-1: config 0 interface 62 has no altsetting 0 [ 291.082145][ T43] usb 6-1: New USB device found, idVendor=2584, idProduct=4a8f, bcdDevice=a4.2c [ 291.091360][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.099445][ T43] usb 6-1: Product: syz [ 291.103628][ T43] usb 6-1: Manufacturer: syz [ 291.110196][ T43] usb 6-1: SerialNumber: syz [ 291.117900][ T43] usb 6-1: config 0 descriptor?? [ 291.169221][ T5952] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.179542][ T5952] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 291.194793][ T5952] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 291.203973][ T5952] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.215054][ T5952] usb 8-1: Product: syz [ 291.219326][ T5952] usb 8-1: Manufacturer: syz [ 291.224012][ T5952] usb 8-1: SerialNumber: syz [ 291.237878][ T9408] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 291.332453][ T43] usb-storage 6-1:0.62: USB Mass Storage device detected [ 291.414950][ T43] usb 6-1: USB disconnect, device number 33 [ 291.796748][ T980] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 291.948683][ T980] usb 5-1: unable to get BOS descriptor or descriptor too short [ 291.958099][ T980] usb 5-1: config 9 has an invalid interface number: 236 but max is 0 [ 291.966427][ T980] usb 5-1: config 9 has no interface number 0 [ 291.972623][ T980] usb 5-1: config 9 interface 236 altsetting 0 endpoint 0x4 has invalid maxpacket 16, setting to 8 [ 291.983471][ T980] usb 5-1: config 9 interface 236 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 291.994903][ T980] usb 5-1: config 9 interface 236 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1 [ 292.004207][ T9424] virtiofs: Unknown parameter 'always 1 V3 [ 292.004207][ T9424] 010000E0 1 0:00000000 0 [ 292.004207][ T9424] 21 vxcan0 : 1 V3 [ 292.004207][ T9424] 010000E0 1 0:00000000 0 [ 292.004207][ T9424] 22 vxcan1 : 1 V3 [ 292.004207][ T9424] 010000E0 1 0:00000000 0 [ 292.004207][ T9424] 23 veth0 : 1 V3 [ 292.004207][ T9424] 010000E0 1 0:00000000 0 [ 292.004207][ T9424] 24 veth1 : 1 V3 [ 292.004207][ T9424] 010000E0 1 0:00000000 0 [ 292.004207][ T9424] 25 wg0 : 1 V3 [ 292.004207][ T9424] 010000E0 1 0:00000000 0 [ 292.004207][ T9424] 26 wg1 : 1 V3 [ 292.004207][ T9424] 010000E0 1 0:00000000 0 [ 292.004207][ T9424] 27 wg2 : 1 V3 [ 292.004207][ T9424] 010000E0 1 0:00000000 0 [ 292.004207][ T9424] 28 veth0_to_bridge: 1 V3 [ 292.004207][ T9424] 010000E0 1 0:00000000 0 [ 292.004207][ T9424] 29 bridge_slave_0: 1 V3 [ 292.004207][ T9424] 010000E0 1 0:00000000 0 [ 292.004207][ T9424] 30 veth1_to_bridge: 1 V3 [ 292.004207][ T9424] 010000E0 1 0:00000000 0 [ 292.004207][ T9424] 31 bridge_slave_1: 1 V3 [ 292.004207][ T9424] 010000E0 1 0:00000000 0 [ 292.004207][ T9424] 32 veth0_to_bond: 1 V3 [ 292.004207][ T9424] 010000E0 1 0:00000000 0 [ 292.004207][ T9424] 33 bond_slave_0: 1 V3 [ 292.004207][ T9424] 010000E0 1 0:00000000 0 [ 292.004207][ T9424] 34 veth1_to_bond: 1 V3 [ 292.004207][ T9424] 010000E0 1 0:00000000 0 [ 292.004207][ T9424] 35 bond_slave_1: 1 V3 [ 292.004207][ T9424] 010000E0 [ 292.007567][ T980] usb 5-1: config 9 interface 236 altsetting 0 endpoint 0x1 has invalid maxpacket 18441, setting to 8 [ 292.163204][ C1] vkms_vblank_simulate: vblank timer overrun [ 292.184183][ T980] usb 5-1: config 9 interface 236 altsetting 0 endpoint 0x9 is Bulk; changing to Interrupt [ 292.195408][ T980] usb 5-1: config 9 interface 236 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 292.211927][ T980] usb 5-1: string descriptor 0 read error: -22 [ 292.218270][ T980] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice=55.e2 [ 292.227704][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.245956][ T9422] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 292.253362][ T9422] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 292.262428][ T980] usb 5-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 292.397579][ T5952] cdc_ncm 8-1:1.0: bind() failure [ 292.408054][ T5952] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 292.415023][ T5952] cdc_ncm 8-1:1.1: bind() failure [ 292.426677][ T5952] usb 8-1: USB disconnect, device number 16 [ 292.469947][ T9422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.479896][ T9422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.490053][ T980] usb 5-1: USB disconnect, device number 25 [ 293.006342][ T980] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 293.166324][ T980] usb 6-1: device descriptor read/64, error -71 [ 293.266358][ T43] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 293.416345][ T980] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 293.428734][ T43] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 293.439064][ T43] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 293.449329][ T43] usb 5-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=80.0a [ 293.458570][ T43] usb 5-1: New USB device strings: Mfr=252, Product=0, SerialNumber=0 [ 293.469233][ T43] usb 5-1: Manufacturer: syz [ 293.475502][ T43] usb 5-1: config 0 descriptor?? [ 293.549309][ T980] usb 6-1: device descriptor read/64, error -71 [ 293.656741][ T980] usb usb6-port1: attempt power cycle [ 293.685846][ T9433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.694936][ T9433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.996198][ T980] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 294.016898][ T980] usb 6-1: device descriptor read/8, error -71 [ 294.096403][ T43] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 294.246207][ T43] usb 8-1: Using ep0 maxpacket: 32 [ 294.252876][ T43] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 294.261397][ T980] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 294.269096][ T43] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 294.282244][ T43] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 294.292377][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2763, setting to 1024 [ 294.303571][ T43] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 294.313824][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 294.323754][ T980] usb 6-1: device descriptor read/8, error -71 [ 294.329986][ T43] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 294.339845][ T43] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 294.352849][ T43] usb 8-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 294.361915][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.372591][ T43] usb 8-1: config 0 descriptor?? [ 294.379308][ T9437] raw-gadget.5 gadget.7: fail, usb_ep_enable returned -22 [ 294.396308][ T43] usblp0: Disabling reads from problematic bidirectional printer [ 294.446627][ T980] usb usb6-port1: unable to enumerate USB device [ 295.120733][ T43] usblp 8-1:0.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x0004 [ 295.140800][ T43] usb 8-1: USB disconnect, device number 17 [ 295.171048][ T43] usblp0: removed [ 295.194572][ T9439] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1020'. [ 295.204536][ T9439] netlink: 43 bytes leftover after parsing attributes in process `syz.7.1020'. [ 295.213708][ T9439] netlink: 'syz.7.1020': attribute type 6 has an invalid length. [ 295.221472][ T9439] netlink: 'syz.7.1020': attribute type 5 has an invalid length. [ 295.229305][ T9439] netlink: 43 bytes leftover after parsing attributes in process `syz.7.1020'. [ 295.411544][ T9447] bpf: Bad value for 'gid' [ 295.996220][ T980] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 296.049656][ T5934] usb 5-1: USB disconnect, device number 26 [ 296.146306][ T980] usb 8-1: Using ep0 maxpacket: 16 [ 296.153676][ T980] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.165021][ T980] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 296.174120][ T980] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.184461][ T980] usb 8-1: config 0 descriptor?? [ 296.187508][ T5913] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 296.346235][ T5913] usb 6-1: Using ep0 maxpacket: 16 [ 296.353524][ T5913] usb 6-1: config 5 has an invalid interface number: 69 but max is 2 [ 296.362151][ T5913] usb 6-1: config 5 has an invalid interface number: 106 but max is 2 [ 296.370789][ T5913] usb 6-1: config 5 has no interface number 1 [ 296.381170][ T5913] usb 6-1: config 5 has no interface number 2 [ 296.387876][ T5913] usb 6-1: config 5 interface 69 altsetting 2 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 296.399350][ T5913] usb 6-1: config 5 interface 69 altsetting 2 endpoint 0xC has invalid maxpacket 1112, setting to 64 [ 296.410360][ T5913] usb 6-1: config 5 interface 0 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 296.420993][ T5913] usb 6-1: config 5 interface 0 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 296.432869][ T5913] usb 6-1: config 5 interface 0 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 296.443700][ T5913] usb 6-1: config 5 interface 0 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 296.454470][ T5913] usb 6-1: config 5 interface 0 altsetting 6 endpoint 0x6 has an invalid bInterval 168, changing to 7 [ 296.465518][ T5913] usb 6-1: config 5 interface 0 altsetting 6 endpoint 0x6 has invalid maxpacket 25426, setting to 1024 [ 296.477103][ T5913] usb 6-1: config 5 interface 0 altsetting 6 bulk endpoint 0x5 has invalid maxpacket 1024 [ 296.487099][ T5913] usb 6-1: config 5 interface 0 altsetting 6 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 296.498647][ T5913] usb 6-1: config 5 interface 0 altsetting 6 endpoint 0x84 has an invalid bInterval 148, changing to 11 [ 296.509949][ T5913] usb 6-1: config 5 interface 0 altsetting 6 endpoint 0x84 has invalid maxpacket 17780, setting to 1024 [ 296.521235][ T5913] usb 6-1: config 5 interface 0 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 296.532731][ T5913] usb 6-1: config 5 interface 0 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 296.543431][ T5913] usb 6-1: config 5 interface 0 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 296.554364][ T5913] usb 6-1: config 5 interface 0 altsetting 6 has an endpoint descriptor with address 0x7C, changing to 0xC [ 296.572956][ T5913] usb 6-1: config 5 interface 0 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 296.583694][ T5913] usb 6-1: config 5 interface 0 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 296.594804][ T5913] usb 6-1: config 5 interface 0 altsetting 6 has 14 endpoint descriptors, different from the interface descriptor's value: 11 [ 296.603227][ T9458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.608009][ T5913] usb 6-1: config 5 interface 69 has no altsetting 0 [ 296.608033][ T5913] usb 6-1: config 5 interface 106 has no altsetting 0 [ 296.608052][ T5913] usb 6-1: config 5 interface 0 has no altsetting 0 [ 296.630140][ T5913] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0124, bcdDevice=18.52 [ 296.630273][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.630293][ T5913] usb 6-1: Product: syz [ 296.630306][ T5913] usb 6-1: Manufacturer: syz [ 296.630320][ T5913] usb 6-1: SerialNumber: syz [ 296.670679][ T9458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.853252][ T9460] vivid-001: ================= START STATUS ================= [ 296.861409][ T9460] vivid-001: RDS Tx I/O Mode: Controls [ 296.869776][ T9460] vivid-001: RDS Program ID: 32904 [ 296.874981][ T9460] vivid-001: RDS Program Type: 0 [ 296.880408][ T9460] vivid-001: RDS PS Name: VIVID-TX [ 296.885374][ T980] usbhid 8-1:0.0: can't add hid device: -71 [ 296.885604][ T9460] vivid-001: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 296.901881][ T980] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 296.902432][ T9460] vivid-001: RDS Stereo: true [ 296.914816][ T9460] vivid-001: RDS Artificial Head: false [ 296.920874][ T9460] vivid-001: RDS Compressed: false [ 296.926342][ T9460] vivid-001: RDS Dynamic PTY: false [ 296.931514][ T980] usb 8-1: USB disconnect, device number 18 [ 296.931628][ T9460] vivid-001: RDS Traffic Announcement: false [ 296.954961][ T9460] vivid-001: RDS Traffic Program: true [ 296.960827][ T9460] vivid-001: RDS Music: true [ 296.965685][ T9460] vivid-001: ================== END STATUS ================== [ 297.007164][ T5913] option 6-1:5.69: GSM modem (1-port) converter detected [ 297.072454][ T5913] usb 6-1: USB disconnect, device number 38 [ 297.100738][ T5913] option 6-1:5.69: device disconnected [ 297.133961][ T9467] netlink: 'syz.4.1030': attribute type 12 has an invalid length. [ 297.142821][ T9467] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1030'. [ 297.231566][ T30] audit: type=1326 audit(1757819988.349:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9468 comm="syz.4.1031" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f198758eba9 code=0x0 [ 297.335082][ T9472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1031'. [ 297.588400][ T980] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 297.768601][ T980] usb 5-1: unable to get BOS descriptor or descriptor too short [ 297.787771][ T980] usb 5-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 297.801546][ T980] usb 5-1: string descriptor 0 read error: -22 [ 297.811808][ T980] usb 5-1: New USB device found, idVendor=1d19, idProduct=0180, bcdDevice=7a.e9 [ 297.821277][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.886184][ T43] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 298.023370][ T9499] netlink: 3464 bytes leftover after parsing attributes in process `syz.5.1039'. [ 298.058743][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.078571][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.088687][ T43] usb 8-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 298.098065][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.108161][ T43] usb 8-1: config 0 descriptor?? [ 298.925544][ T43] hid-led 0003:27B8:01ED.0010: hidraw1: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.7-1/input0 [ 298.955405][ T43] hid-led 0003:27B8:01ED.0010: ThingM blink(1) initialized [ 299.396279][ T9] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 299.546183][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 299.555841][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 299.565481][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.573608][ T9] usb 6-1: Product: syz [ 299.577874][ T9] usb 6-1: Manufacturer: syz [ 299.582452][ T9] usb 6-1: SerialNumber: syz [ 299.589989][ T9] usb 6-1: config 0 descriptor?? [ 299.646645][ T43] usb 8-1: USB disconnect, device number 19 [ 299.872452][ T9] dvb_usb_rtl28xxu 6-1:0.0: chip type detection failed -71 [ 299.880008][ T9] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 299.894950][ T9] usb 6-1: USB disconnect, device number 39 [ 300.036161][ T43] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 300.196433][ T43] usb 8-1: Using ep0 maxpacket: 8 [ 300.203618][ T43] usb 8-1: config 0 has an invalid interface number: 56 but max is 0 [ 300.216296][ T43] usb 8-1: config 0 has no interface number 0 [ 300.235455][ T980] usb 5-1: USB disconnect, device number 27 [ 300.244619][ T43] usb 8-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 300.257187][ T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.265244][ T43] usb 8-1: Product: syz [ 300.272310][ T43] usb 8-1: Manufacturer: syz [ 300.277072][ T43] usb 8-1: SerialNumber: syz [ 300.294604][ T43] usb 8-1: config 0 descriptor?? [ 300.306958][ T43] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 300.314973][ T43] pctv452e: pctv452e_power_ctrl: 1 [ 300.314973][ T43] [ 300.325405][ T43] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 300.325405][ T43] [ 300.340423][ T43] dvb-usb: bulk message failed: -22 (5/0) [ 300.352163][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 300.366032][ T43] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 300.386160][ T43] usb 8-1: media controller created [ 300.391903][ T43] dvb-usb: bulk message failed: -22 (8/0) [ 300.416735][ T43] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 300.437820][ T43] dvb-usb: MAC address reading failed. [ 300.465766][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 300.564690][ T43] DVB: Unable to find symbol stb0899_attach() [ 300.572651][ T43] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 300.628618][ T43] rc_core: IR keymap rc-tt-1500 not found [ 300.634485][ T43] Registered IR keymap rc-empty [ 300.643260][ T43] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 300.655464][ T43] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input40 [ 300.668291][ T43] dvb-usb: schedule remote query interval to 100 msecs. [ 300.675336][ T43] pctv452e: pctv452e_power_ctrl: 0 [ 300.675336][ T43] [ 300.682871][ T43] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 300.692180][ T980] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 300.704709][ T43] usb 8-1: USB disconnect, device number 20 [ 300.749614][ T9] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 300.770677][ T43] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 300.858535][ T980] usb 5-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.869084][ T980] usb 5-1: config 0 interface 0 altsetting 185 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 300.882196][ T980] usb 5-1: config 0 interface 0 has no altsetting 0 [ 300.888879][ T980] usb 5-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 300.898256][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.909005][ T980] usb 5-1: config 0 descriptor?? [ 300.931351][ T9] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 300.941110][ T9] usb 6-1: config 246 has too many interfaces: 38, using maximum allowed: 32 [ 300.950228][ T9] usb 6-1: config 246 has an invalid descriptor of length 118, skipping remainder of the config [ 300.961735][ T9] usb 6-1: config 246 has 0 interfaces, different from the descriptor's value: 38 [ 300.971112][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 300.982379][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.126659][ T980] usb 5-1: string descriptor 0 read error: -71 [ 301.145468][ T980] usbhid 5-1:0.0: can't add hid device: -71 [ 301.152728][ T980] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 301.165061][ T980] usb 5-1: USB disconnect, device number 28 [ 301.210079][ T9] usb 6-1: string descriptor 0 read error: -71 [ 301.223251][ T9] usb 6-1: USB disconnect, device number 40 [ 301.774300][ T9538] fuse: Bad value for 'group_id' [ 301.781026][ T9538] fuse: Bad value for 'group_id' [ 302.031685][ T9545] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 302.186239][ T5934] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 302.350161][ T5934] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 302.364804][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.385121][ T5934] usb 6-1: Product: syz [ 302.395222][ T5934] usb 6-1: Manufacturer: syz [ 302.409698][ T5934] usb 6-1: SerialNumber: syz [ 302.444464][ T5877] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 302.455353][ T5877] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 302.464124][ T5877] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 302.475145][ T5877] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 302.482284][ T6587] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 302.492465][ T5877] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 302.499686][ T9] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 302.636473][ T9] usb 8-1: device descriptor read/64, error -71 [ 302.654528][ T6587] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.674173][ T6587] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 302.699171][ T6587] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 302.721983][ T6587] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.731794][ T6587] usb 5-1: Product: syz [ 302.736018][ T6587] usb 5-1: Manufacturer: syz [ 302.749976][ T6587] usb 5-1: SerialNumber: syz [ 302.761435][ T9554] chnl_net:caif_netlink_parms(): no params data found [ 302.765141][ T9549] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 302.876200][ T9] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 302.915917][ T9554] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.923746][ T9554] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.938513][ T9554] bridge_slave_0: entered allmulticast mode [ 302.947967][ T9554] bridge_slave_0: entered promiscuous mode [ 302.960159][ T9554] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.967678][ T9554] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.974957][ T9554] bridge_slave_1: entered allmulticast mode [ 302.985731][ T9554] bridge_slave_1: entered promiscuous mode [ 303.016330][ T9] usb 8-1: device descriptor read/64, error -71 [ 303.039804][ T9554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.054200][ T9554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.113447][ T9554] team0: Port device team_slave_0 added [ 303.123891][ T9554] team0: Port device team_slave_1 added [ 303.137490][ T9] usb usb8-port1: attempt power cycle [ 303.178026][ T9554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.185149][ T9554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.211090][ C0] vkms_vblank_simulate: vblank timer overrun [ 303.220280][ T9554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.235179][ T9554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.242813][ T9554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.275284][ T9554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.346749][ T9554] hsr_slave_0: entered promiscuous mode [ 303.353841][ T9554] hsr_slave_1: entered promiscuous mode [ 303.360587][ T9554] debugfs: 'hsr0' already exists in 'hsr' [ 303.367149][ T9554] Cannot create hsr debugfs directory [ 303.496420][ T9] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 303.531749][ T9] usb 8-1: device descriptor read/8, error -71 [ 303.634335][ T9554] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 303.645010][ T9554] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 303.660482][ T9554] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 303.674948][ T9554] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 303.719511][ T9554] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.726727][ T9554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.734244][ T9554] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.741508][ T9554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.764851][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.773628][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.786411][ T9] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 303.807179][ T9] usb 8-1: device descriptor read/8, error -71 [ 303.834839][ T9549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.844131][ T5934] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 303.852996][ T9549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.880766][ T6587] cdc_ncm 5-1:1.0: bind() failure [ 303.910134][ T9554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.917497][ T9] usb usb8-port1: unable to enumerate USB device [ 303.918438][ T6587] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 303.945723][ T9554] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.950098][ T6587] cdc_ncm 5-1:1.1: bind() failure [ 303.961773][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.968968][ T4332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.985870][ T6587] usb 5-1: USB disconnect, device number 29 [ 303.994188][ T3548] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.001416][ T3548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.252663][ T9554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.547806][ T5877] Bluetooth: hci8: command tx timeout [ 304.548441][ T9554] veth0_vlan: entered promiscuous mode [ 304.568966][ T9554] veth1_vlan: entered promiscuous mode [ 304.601128][ T9554] veth0_macvtap: entered promiscuous mode [ 304.613947][ T9554] veth1_macvtap: entered promiscuous mode [ 304.638001][ T9554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.651624][ T9554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.671924][ T1017] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.682868][ T1017] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.690947][ T9540] netlink: 'syz.5.1052': attribute type 10 has an invalid length. [ 304.699357][ T1017] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.699412][ T1017] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.735156][ T9540] batman_adv: batadv0: Adding interface: team0 [ 304.736576][ T24] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 304.742883][ T9540] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.778195][ T9540] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 304.801260][ T5934] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -EPROTO [ 304.828388][ T5934] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 304.849948][ T5934] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 304.863955][ T5934] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 304.884727][ T5934] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 304.897599][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.914143][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.924469][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.925493][ T5934] usb 6-1: USB disconnect, device number 41 [ 304.939053][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.969412][ T24] usb 5-1: New USB device found, idVendor=056a, idProduct=0101, bcdDevice= 0.00 [ 304.979285][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.005570][ T4332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.011534][ T24] usb 5-1: config 0 descriptor?? [ 305.016176][ T4332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.396377][ T43] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 305.461358][ T24] wacom 0003:056A:0101.0011: ignoring exceeding usage max [ 305.579089][ T43] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.597325][ T43] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.610713][ T43] usb 9-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 305.620244][ T43] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.630727][ T43] usb 9-1: config 0 descriptor?? [ 306.122372][ T43] petalynx 0003:18B1:0037.0012: hidraw1: USB HID v0.00 Device [HID 18b1:0037] on usb-dummy_hcd.8-1/input0 [ 306.355638][ T9589] mkiss: ax0: crc mode is auto. [ 306.480269][ T93] usb 9-1: USB disconnect, device number 2 [ 306.626318][ T5877] Bluetooth: hci8: command tx timeout [ 306.654752][ T9614] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 306.665075][ T9614] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 306.891227][ T9623] tipc: Enabling of bearer rejected, failed to enable media [ 307.523787][ T980] usb 5-1: USB disconnect, device number 30 [ 308.096946][ T5934] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 308.257927][ T5934] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 308.269493][ T5934] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 308.280012][ T5934] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 308.289126][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.301974][ T9643] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 308.319401][ T5934] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 308.406165][ T93] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 308.524313][ T24] usb 6-1: USB disconnect, device number 42 [ 308.566578][ T93] usb 9-1: Using ep0 maxpacket: 32 [ 308.580421][ T93] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.605910][ T93] usb 9-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 308.623671][ T93] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.640286][ T93] usb 9-1: config 0 descriptor?? [ 308.650457][ T93] usbtouchscreen 9-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 308.706310][ T5877] Bluetooth: hci8: command tx timeout [ 308.850898][ T24] usb 9-1: USB disconnect, device number 3 [ 308.869052][ T980] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 309.047299][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 309.054323][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.065442][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.075279][ T980] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 309.084532][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.096293][ T980] usb 5-1: config 0 descriptor?? [ 309.656448][ T93] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 309.700015][ T24] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 309.806331][ T93] usb 9-1: Using ep0 maxpacket: 8 [ 309.814147][ T93] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.825344][ T93] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 309.835615][ T93] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 309.847156][ T93] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 309.858279][ T93] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 309.867509][ T93] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 309.875512][ T93] usb 9-1: SerialNumber: syz [ 309.876639][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 309.890872][ T9660] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 309.892862][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.912746][ T93] usb 9-1: bad CDC descriptors [ 309.920716][ T93] usb-storage 9-1:1.0: USB Mass Storage device detected [ 309.923834][ T980] letsketch 0003:6161:4D15.0013: Device info: п [ 309.935021][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.940554][ T93] usb-storage 9-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 309.948705][ T24] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 309.962276][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.964543][ T93] scsi host1: usb-storage 9-1:1.0 [ 309.982610][ T24] usb 6-1: config 0 descriptor?? [ 310.138842][ T9660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.152767][ T9660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.177536][ T980] usb 5-1: Max retries (5) exceeded reading string descriptor 201 [ 310.185485][ T980] letsketch 0003:6161:4D15.0013: probe with driver letsketch failed with error -71 [ 310.202690][ T9662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.213637][ T980] usb 5-1: USB disconnect, device number 31 [ 310.220707][ T9662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.336261][ T93] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 310.444552][ T9662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.453540][ T9662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.468442][ T24] isku 0003:1E7D:319C.0014: item fetching failed at offset 1/5 [ 310.476283][ T93] usb 8-1: device descriptor read/64, error -71 [ 310.476907][ T24] isku 0003:1E7D:319C.0014: parse failed [ 310.489682][ T24] isku 0003:1E7D:319C.0014: probe with driver isku failed with error -22 [ 310.520668][ T9668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.529971][ T9668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.673414][ T980] usb 6-1: USB disconnect, device number 43 [ 310.716259][ T93] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 310.786552][ T5877] Bluetooth: hci8: command tx timeout [ 310.814541][ T9676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.831966][ T9676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.842853][ T9676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.852920][ T9676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.856386][ T93] usb 8-1: device descriptor read/64, error -71 [ 310.872722][ T9676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.885285][ T9676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.976646][ T93] usb usb8-port1: attempt power cycle [ 311.056176][ T24] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 311.168239][ T9665] usb 9-1: reset high-speed USB device number 4 using dummy_hcd [ 311.208915][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 311.240823][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 311.259250][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 311.267649][ T24] usb 5-1: SerialNumber: syz [ 311.290026][ T24] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 311.316248][ T93] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 311.358852][ T93] usb 8-1: device descriptor read/8, error -71 [ 311.395250][ T9681] overlayfs: failed to clone upperpath [ 311.516328][ T24] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 311.544778][ T24] usb 5-1: USB disconnect, device number 32 [ 311.596776][ T93] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 311.623064][ T93] usb 8-1: device descriptor read/8, error -71 [ 311.746441][ T93] usb usb8-port1: unable to enumerate USB device [ 312.038724][ T5934] usb 9-1: USB disconnect, device number 4 [ 312.147825][ T9693] netlink: 'syz.5.1092': attribute type 6 has an invalid length. [ 312.186416][ T9695] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.237735][ T9695] binder: BINDER_SET_CONTEXT_MGR already set [ 312.244105][ T9695] binder: 9694:9695 ioctl 4018620d 200000004a80 returned -16 [ 312.596348][ T5934] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 312.759015][ T5934] usb 9-1: config 0 has an invalid interface number: 29 but max is 0 [ 312.767256][ T5934] usb 9-1: config 0 has no interface number 0 [ 312.773347][ T5934] usb 9-1: config 0 interface 29 has no altsetting 0 [ 312.782582][ T5934] usb 9-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 312.791847][ T5934] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.801312][ T5934] usb 9-1: Product: syz [ 312.805479][ T5934] usb 9-1: Manufacturer: syz [ 312.810217][ T5934] usb 9-1: SerialNumber: syz [ 312.824412][ T5934] usb 9-1: config 0 descriptor?? [ 312.984258][ T9707] netlink: 'syz.5.1097': attribute type 2 has an invalid length. [ 313.037874][ T9691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.063034][ T9691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.116984][ T9711] netlink: 'syz.5.1099': attribute type 2 has an invalid length. [ 313.152327][ T9711] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1099'. [ 313.275100][ T5934] peak_usb 9-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 313.303733][ T5934] peak_usb 9-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 313.387063][ T5934] peak_usb 9-1:0.29: probe with driver peak_usb failed with error -71 [ 313.398687][ T5934] usb 9-1: USB disconnect, device number 5 [ 313.496276][ T5913] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 313.649181][ T5913] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.659487][ T5913] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 313.670190][ T5913] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 313.683260][ T5913] usb 8-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 313.692430][ T5913] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.703214][ T5913] usb 8-1: config 0 descriptor?? [ 313.708861][ T5934] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 313.869603][ T5934] usb 9-1: config 1 has an invalid interface number: 67 but max is 0 [ 313.893107][ T5934] usb 9-1: config 1 has no interface number 0 [ 313.906239][ T5934] usb 9-1: New USB device found, idVendor=0c45, idProduct=6240, bcdDevice=92.59 [ 313.936758][ T5934] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.995868][ T5934] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6240 [ 314.063711][ T5913] usb 8-1: USB disconnect, device number 29 [ 314.198264][ T5934] gspca_sn9c20x: Write register 1000 failed -71 [ 314.207914][ T5934] gspca_sn9c20x: Device initialization failed [ 314.214036][ T5934] gspca_sn9c20x 9-1:1.67: probe with driver gspca_sn9c20x failed with error -71 [ 314.232920][ T5934] usb 9-1: USB disconnect, device number 6 [ 314.866465][ T24] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 315.006193][ T980] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 315.016364][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 315.023784][ T24] usb 8-1: config 16 has an invalid interface number: 101 but max is 0 [ 315.033182][ T24] usb 8-1: config 16 has no interface number 0 [ 315.039587][ T24] usb 8-1: config 16 interface 101 has no altsetting 0 [ 315.051353][ T24] usb 8-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice=6a.c3 [ 315.060542][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.070113][ T24] usb 8-1: Product: syz [ 315.074318][ T24] usb 8-1: Manufacturer: syz [ 315.080194][ T24] usb 8-1: SerialNumber: syz [ 315.172719][ T980] usb 5-1: not running at top speed; connect to a high speed hub [ 315.181670][ T980] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 315.191671][ T980] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 315.202327][ T980] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 315.214826][ T980] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 315.224231][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.232596][ T980] usb 5-1: Product: syz [ 315.237149][ T980] usb 5-1: Manufacturer: syz [ 315.241773][ T980] usb 5-1: SerialNumber: syz [ 315.314891][ T24] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:16.101/input/input42 [ 315.327138][ T5219] bcm5974 8-1:16.101: could not read from device [ 315.337517][ T24] bcm5974 8-1:16.101: could not read from device [ 315.347286][ T5219] bcm5974 8-1:16.101: could not read from device [ 315.354755][ T24] input: failed to attach handler mousedev to device input42, error: -5 [ 315.365415][ T5219] bcm5974 8-1:16.101: could not read from device [ 315.374618][ T24] usb 8-1: USB disconnect, device number 30 [ 315.385292][ T5219] bcm5974 8-1:16.101: could not read from device [ 315.437980][ T8497] udevd[8497]: Error opening device "/dev/input/event4": No such file or directory [ 315.447795][ T8497] udevd[8497]: Unable to EVIOCGABS device "/dev/input/event4" [ 315.455540][ T8497] udevd[8497]: Unable to EVIOCGABS device "/dev/input/event4" [ 315.470321][ T8497] udevd[8497]: Unable to EVIOCGABS device "/dev/input/event4" [ 315.482980][ T8497] udevd[8497]: Unable to EVIOCGABS device "/dev/input/event4" [ 315.487775][ T980] usb 5-1: 0:2 : does not exist [ 315.535780][ T980] usb 5-1: USB disconnect, device number 33 [ 316.106238][ T5934] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 316.246374][ T24] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 316.261242][ T5934] usb 9-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 316.270780][ T5934] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.282847][ T5934] usb 9-1: Product: syz [ 316.287330][ T5934] usb 9-1: Manufacturer: syz [ 316.292049][ T5934] usb 9-1: SerialNumber: syz [ 316.314728][ T5934] usb 9-1: config 0 descriptor?? [ 316.366928][ T980] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 316.396271][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 316.404850][ T24] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.415259][ T24] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 316.424439][ T24] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 316.437725][ T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10 [ 316.448876][ T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024 [ 316.460000][ T24] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 316.470841][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.496253][ T24] hub 8-1:1.0: bad descriptor, ignoring hub [ 316.504328][ T980] usb 5-1: device descriptor read/64, error -71 [ 316.512981][ T24] hub 8-1:1.0: probe with driver hub failed with error -5 [ 316.520850][ T24] cdc_wdm 8-1:1.0: skipping garbage [ 316.526272][ T24] cdc_wdm 8-1:1.0: skipping garbage [ 316.531562][ T24] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 316.697196][ T9777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.709221][ T9777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.725924][ T9777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.736931][ T9777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.766360][ T980] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 316.867205][ T9] usb 8-1: USB disconnect, device number 31 [ 316.896189][ T980] usb 5-1: device descriptor read/64, error -71 [ 316.943189][ T5934] mos7840 9-1:0.0: required endpoints missing [ 316.957433][ T5934] usb 9-1: USB disconnect, device number 7 [ 317.006925][ T980] usb usb5-port1: attempt power cycle [ 317.108385][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.115641][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.126573][ T31] INFO: task syz.2.386:7224 blocked for more than 143 seconds. [ 317.135487][ T31] Not tainted syzkaller #0 [ 317.141017][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 317.150122][ T31] task:syz.2.386 state:D stack:25224 pid:7224 tgid:7223 ppid:5861 task_flags:0x400140 flags:0x00004004 [ 317.163421][ T31] Call Trace: [ 317.166925][ T31] [ 317.169971][ T31] __schedule+0x1798/0x4cc0 [ 317.174515][ T31] ? __lock_acquire+0xab9/0xd20 [ 317.179487][ T31] ? __lock_acquire+0xab9/0xd20 [ 317.184345][ T31] ? __pfx___schedule+0x10/0x10 [ 317.189532][ T31] ? schedule+0x91/0x360 [ 317.193788][ T31] schedule+0x165/0x360 [ 317.198018][ T31] schedule_preempt_disabled+0x13/0x30 [ 317.203484][ T31] __mutex_lock+0x7e6/0x1350 [ 317.208318][ T31] ? __mutex_lock+0x5bb/0x1350 [ 317.213086][ T31] ? sync_bdevs+0x1ac/0x340 [ 317.218984][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 317.224036][ T31] ? iput+0x5d5/0xc40 [ 317.228117][ T31] sync_bdevs+0x1ac/0x340 [ 317.232461][ T31] ksys_sync+0xb9/0x150 [ 317.236733][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 317.241510][ T31] ? do_syscall_64+0xbe/0xfa0 [ 317.246680][ T31] __ia32_sys_sync+0xe/0x20 [ 317.251198][ T31] do_syscall_64+0xfa/0xfa0 [ 317.255714][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.261063][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.267282][ T31] ? clear_bhb_loop+0x60/0xb0 [ 317.273175][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.289392][ T31] RIP: 0033:0x7f90f198eba9 [ 317.293994][ T31] RSP: 002b:00007f90f2822038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 317.302480][ T31] RAX: ffffffffffffffda RBX: 00007f90f1bd5fa0 RCX: 00007f90f198eba9 [ 317.310696][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 317.320229][ T31] RBP: 00007f90f1bd5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 317.328263][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.336300][ T31] R13: 00007f90f1bd6038 R14: 00007f90f1bd5fa0 R15: 00007ffff16d73d8 [ 317.344288][ T31] [ 317.348540][ T980] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 317.350318][ T31] [ 317.350318][ T31] Showing all locks held in the system: [ 317.364493][ T31] 1 lock held by khungtaskd/31: [ 317.372212][ T31] #0: ffffffff8e53c820 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 317.382630][ T31] 5 locks held by kworker/1:2/980: [ 317.388400][ T980] usb 5-1: device descriptor read/8, error -71 [ 317.391068][ T31] 2 locks held by getty/5623: [ 317.401187][ T31] #0: ffff8880339500a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 317.411135][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 317.422524][ T31] 1 lock held by udevd/6193: [ 317.427259][ T31] #0: ffff88802545b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 317.436587][ T31] 1 lock held by syz.2.386/7224: [ 317.441527][ T31] #0: ffff88802545b358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ac/0x340 [ 317.450993][ T31] 1 lock held by syz.1.667/8180: [ 317.455927][ T31] #0: ffff88802545b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 317.465408][ T31] 1 lock held by syz.0.741/8411: [ 317.470721][ T31] #0: ffff88802545b358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ac/0x340 [ 317.481041][ T31] 1 lock held by syz.0.741/8413: [ 317.485989][ T31] #0: ffff88802545b358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ac/0x340 [ 317.495637][ T31] 1 lock held by syz.6.992/9324: [ 317.501909][ T31] #0: ffff88802545b358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ac/0x340 [ 317.514260][ T31] [ 317.530091][ T31] ============================================= [ 317.530091][ T31] [ 317.542482][ T31] NMI backtrace for cpu 1 [ 317.542503][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 317.542517][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 317.542526][ T31] Call Trace: [ 317.542531][ T31] [ 317.542538][ T31] dump_stack_lvl+0x189/0x250 [ 317.542560][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.542575][ T31] ? __pfx__printk+0x10/0x10 [ 317.542604][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 317.542638][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 317.542661][ T31] ? __pfx__printk+0x10/0x10 [ 317.542682][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 317.542699][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 317.542721][ T31] watchdog+0xf60/0xfa0 [ 317.542739][ T31] ? watchdog+0x1e2/0xfa0 [ 317.542756][ T31] kthread+0x711/0x8a0 [ 317.542778][ T31] ? __pfx_watchdog+0x10/0x10 [ 317.542791][ T31] ? __pfx_kthread+0x10/0x10 [ 317.542810][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 317.542824][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.542847][ T31] ? __pfx_kthread+0x10/0x10 [ 317.542867][ T31] ret_from_fork+0x4bc/0x870 [ 317.542884][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 317.542905][ T31] ? __switch_to_asm+0x39/0x70 [ 317.542919][ T31] ? __switch_to_asm+0x33/0x70 [ 317.542931][ T31] ? __pfx_kthread+0x10/0x10 [ 317.542951][ T31] ret_from_fork_asm+0x1a/0x30 [ 317.542979][ T31] [ 317.542985][ T31] Sending NMI from CPU 1 to CPUs 0: [ 317.690849][ C0] NMI backtrace for cpu 0 [ 317.690867][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 317.690885][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 317.690899][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 317.690922][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 63 ab 1c 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 317.690935][ C0] RSP: 0018:ffffffff8e207d80 EFLAGS: 000002c2 [ 317.690950][ C0] RAX: e7ce2aed8f07a500 RBX: ffffffff8196d208 RCX: e7ce2aed8f07a500 [ 317.690962][ C0] RDX: 0000000000000001 RSI: ffffffff8dca0cff RDI: ffffffff8c050400 [ 317.690973][ C0] RBP: ffffffff8e207ea8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 317.690984][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fe53a30 [ 317.690996][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1c52a38 [ 317.691006][ C0] FS: 0000000000000000(0000) GS:ffff8881257a7000(0000) knlGS:0000000000000000 [ 317.691018][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 317.691029][ C0] CR2: 000055558c4bf5c8 CR3: 0000000077d92000 CR4: 00000000003526f0 [ 317.691043][ C0] Call Trace: [ 317.691050][ C0] [ 317.691056][ C0] default_idle+0x13/0x20 [ 317.691075][ C0] default_idle_call+0x74/0xb0 [ 317.691094][ C0] do_idle+0x1e8/0x510 [ 317.691113][ C0] ? __pfx_do_idle+0x10/0x10 [ 317.691136][ C0] cpu_startup_entry+0x44/0x60 [ 317.691152][ C0] rest_init+0x2de/0x300 [ 317.691172][ C0] start_kernel+0x3a9/0x410 [ 317.691193][ C0] x86_64_start_reservations+0x24/0x30 [ 317.691210][ C0] x86_64_start_kernel+0x143/0x1c0 [ 317.691225][ C0] common_startup_64+0x13e/0x147 [ 317.691252][ C0] [ 317.692456][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 317.872877][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 317.881973][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 317.892017][ T31] Call Trace: [ 317.895284][ T31] [ 317.898201][ T31] dump_stack_lvl+0x99/0x250 [ 317.902772][ T31] ? __asan_memcpy+0x40/0x70 [ 317.907348][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.912593][ T31] ? __pfx__printk+0x10/0x10 [ 317.917175][ T31] vpanic+0x237/0x6d0 [ 317.921145][ T31] ? __pfx_vpanic+0x10/0x10 [ 317.925637][ T31] ? preempt_schedule_common+0x83/0xd0 [ 317.931089][ T31] panic+0xb9/0xc0 [ 317.934799][ T31] ? __pfx_panic+0x10/0x10 [ 317.939207][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 317.944574][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 317.950725][ T31] watchdog+0xf9f/0xfa0 [ 317.954874][ T31] ? watchdog+0x1e2/0xfa0 [ 317.959190][ T31] kthread+0x711/0x8a0 [ 317.963250][ T31] ? __pfx_watchdog+0x10/0x10 [ 317.967909][ T31] ? __pfx_kthread+0x10/0x10 [ 317.972487][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 317.977673][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.982861][ T31] ? __pfx_kthread+0x10/0x10 [ 317.990492][ T31] ret_from_fork+0x4bc/0x870 [ 317.995087][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 318.000216][ T31] ? __switch_to_asm+0x39/0x70 [ 318.004978][ T31] ? __switch_to_asm+0x33/0x70 [ 318.009723][ T31] ? __pfx_kthread+0x10/0x10 [ 318.014311][ T31] ret_from_fork_asm+0x1a/0x30 [ 318.019073][ T31] [ 318.022338][ T31] Kernel Offset: disabled [ 318.026655][ T31] Rebooting in 86400 seconds..