last executing test programs: 8m26.005225962s ago: executing program 3 (id=106): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x9c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x5d, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0xae, 0x8}}, @void, @void, @val={0x2d, 0x1a, {0x8000, 0x1, 0x6, 0x0, {0x7, 0x5, 0x0, 0x7, 0x0, 0x1}, 0x1, 0x1, 0x9}}, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xac, r2, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_REG_RULES={0x70, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x401}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5b72}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xe0}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}]}, 0xac}, 0x1, 0x0, 0x0, 0x4}, 0x4010010) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000771a9c5e6474c0a5000000040400000004001d00"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x9c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x5d, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0xae, 0x8}}, @void, @void, @val={0x2d, 0x1a, {0x8000, 0x1, 0x6, 0x0, {0x7, 0x5, 0x0, 0x7, 0x0, 0x1}, 0x1, 0x1, 0x9}}, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xac, r2, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_REG_RULES={0x70, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x401}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5b72}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xe0}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}]}, 0xac}, 0x1, 0x0, 0x0, 0x4}, 0x4010010) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000771a9c5e6474c0a5000000040400000004001d00"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) (async) 8m25.989714435s ago: executing program 3 (id=107): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101502, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'virt_wifi0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0x6e) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x0, 0x926fdb2c68a18847, 0x1000, 0x0, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x24044815}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r5, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x14, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0x555c}]}]}, 0x40}}, 0x4000000) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r6, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000640)=@file={0x1}, 0x6e) 8m25.933251717s ago: executing program 3 (id=108): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfe, 0x10}, 0xc) nanosleep(&(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000300)) syz_80211_inject_frame(&(0x7f0000000340)=@device_b, &(0x7f0000000380)=@mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x2}, @device_b, @broadcast, @initial, {0xc, 0x8}, @value=@ver_80211n={0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1}}, @void, @val={0x1, 0x1, [{0x4}]}, @void, @val={0x2d, 0x1a, {0x10, 0x0, 0x0, 0x0, {0x8, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x3ff, 0x1}}, @void}, 0x3b) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x18080}, 0x4000) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x4000810, 0xffffffffffffffff, 0xd043d000) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={0x0}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) nanosleep(&(0x7f0000000a80)={0x0, 0x3938700}, &(0x7f0000000ac0)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_DOWN(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r3, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8}]}, 0x1c}}, 0xfd36f7001935bcfe) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000c40), r0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r2) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, r5, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x3}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x44014}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000e00)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000e40)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000e80)) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000001140)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001100)={&(0x7f0000001000)={0xd4, r4, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfe}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x26}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd0}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x44055}, 0x20000091) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000011c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000001300)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001200)={0x94, r1, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfffffffa, 0x4a}}}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac=@broadcast}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_MAC_HINT={0xa}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="63f39c3b0899"}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x400, {0x1, 0x2, 0x3, 0x7}}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x3, {0x0, 0x1000, 0xdf8, 0xb28}}}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac=@broadcast}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008840}, 0x30) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001340), 0x8000, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r7, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffff8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0xc834a2827cfd0e3f}, 0x2000c800) 8m25.285931269s ago: executing program 3 (id=111): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x51}], 0x1, 0x0, 0x0, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) close(0x3) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086d0493c2000000000001090224000100003000090400000503000000092100000801220b0009058103"], 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x48000) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x1) ioctl$NBD_DO_IT(r1, 0xc0101282) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00220c000000a98aab"], 0x0}, 0x0) 8m24.057261011s ago: executing program 3 (id=118): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000180)={0xc001, 0x1, 0x4, {0x2, @pix_mp={0x8897a1fa, 0xc0, 0x20533b53, 0x0, 0x5, [{0x2, 0x81}, {0x8, 0x8}, {0x7f, 0x9}, {0x81, 0x6}, {0x3ff, 0x6}, {0x1f5a, 0x5}, {0xc, 0x8}, {0x24, 0xd898}], 0x5, 0x8, 0x8, 0x1}}, 0xfffffffd}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x106}}, 0x20) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000cc0)={0x9, @pix_mp}) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x8) ioctl$KVM_SET_CPUID2(r7, 0x4048aecb, &(0x7f0000000080)=ANY=[]) ioctl$KVM_GET_VCPU_EVENTS(r7, 0xc048aeca, &(0x7f0000000080)) modify_ldt$write2(0x11, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$read(0x0, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x800248a0, 0x0) 8m22.637627825s ago: executing program 3 (id=122): pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}, {@cachetag={'cachetag', 0x3d, '\x14\xe2\xc3\x11\xe2\xcb\x86\xc8-Hs\xc6\xafm\xdc{\xdeU#\xebp7-\x9f\xb8\xf3A\xb2CX\xd3//\xdd28+\x9dS\"\x9bm\x19\xd0K4a\xe6\xfb\xdb\xf7\xe4K\xb5\xc8\x94_\a\xe61\x91\xe4<@\xc37+\x9c\xb2\xe8E=T\xd5\xb1\'\xc3w\f\'\xd4\x97\xf8\xba\xe8\xa0\n\x8d\xc7\xc9\x7f\xa8\x1d\x88\xa3\x17\xca\xa5e\x7fYj\x82Z\xe9K\xa0T\\\x87u\x8coL\a|\xc8f^\x01\x04\xe4\x8e\x0f\xfe\x16\xa7G\xd4\xa1\xef\xc5\xa7k\x1dE\xb0\x9d!i\x99\\^\\]G?E+\xcd}\xf7i\xe2\xa2\x8dEW\xab\xdc\x8c\xe9Y\xb1\xc8\xc4\x97!\xbc\xf4\xef\xc9\x03v\xf3 \xb2\xc5\xd5\xf0$\xa0KD5\xf4\x9c\xe1\r\xc4\xa0\xd1\'\xadC\xb7Z\f[t\xd1\xadYk\x90vU#\xebp7-\x9f\xb8\xf3A\xb2CX\xd3//\xdd28+\x9dS\"\x9bm\x19\xd0K4a\xe6\xfb\xdb\xf7\xe4K\xb5\xc8\x94_\a\xe61\x91\xe4<@\xc37+\x9c\xb2\xe8E=T\xd5\xb1\'\xc3w\f\'\xd4\x97\xf8\xba\xe8\xa0\n\x8d\xc7\xc9\x7f\xa8\x1d\x88\xa3\x17\xca\xa5e\x7fYj\x82Z\xe9K\xa0T\\\x87u\x8coL\a|\xc8f^\x01\x04\xe4\x8e\x0f\xfe\x16\xa7G\xd4\xa1\xef\xc5\xa7k\x1dE\xb0\x9d!i\x99\\^\\]G?E+\xcd}\xf7i\xe2\xa2\x8dEW\xab\xdc\x8c\xe9Y\xb1\xc8\xc4\x97!\xbc\xf4\xef\xc9\x03v\xf3 \xb2\xc5\xd5\xf0$\xa0KD5\xf4\x9c\xe1\r\xc4\xa0\xd1\'\xadC\xb7Z\f[t\xd1\xadYk\x90v0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r9, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r10, 0x112, 0xb, &(0x7f0000000000)=0x60, 0x2) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x124, r11, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x106, 0x2a, [@fast_bss_trans={0x37, 0x100, {0x60, 0x5, "757eb7c04c1d723db73fa40c6f699bbb", "eac53a88807a24fbb2c2d4f59c6477f8a778ccd162548b3ce22ba1f844cf8b73", "8ef97862e16b9bff05f448ebeedf6707bc488147e74f2feb0cc1fbb57f0589d6", [{0x3, 0x26, "6bda8bd865f5a6a49d2ffd61612dbe52c9dd612d72b19bd45267ac69303dd1ecc8d5f02fd730"}, {0x3, 0x26, "23f4479c450889485f54edd1c905f6fddc2647b2875f1f24d1a6d5ee991c8496f276ec85152f"}, {0x1, 0x12, "9d3a179cc66ce8c0c12a4b92ac6abe20fd9b"}, {0x4, 0x20, "55225d1858cf56e61c53b87c86cea0c2bd2b6d85ab4a59dcec1c662a872e8a35"}, {0x2, 0x26, "a27a65973448a37b290dea3feec9d6eceb7a606da896dd2d23647f8ae46ada028e17c76e3103"}]}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000006}, 0x40) (async) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x124, r11, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x106, 0x2a, [@fast_bss_trans={0x37, 0x100, {0x60, 0x5, "757eb7c04c1d723db73fa40c6f699bbb", "eac53a88807a24fbb2c2d4f59c6477f8a778ccd162548b3ce22ba1f844cf8b73", "8ef97862e16b9bff05f448ebeedf6707bc488147e74f2feb0cc1fbb57f0589d6", [{0x3, 0x26, "6bda8bd865f5a6a49d2ffd61612dbe52c9dd612d72b19bd45267ac69303dd1ecc8d5f02fd730"}, {0x3, 0x26, "23f4479c450889485f54edd1c905f6fddc2647b2875f1f24d1a6d5ee991c8496f276ec85152f"}, {0x1, 0x12, "9d3a179cc66ce8c0c12a4b92ac6abe20fd9b"}, {0x4, 0x20, "55225d1858cf56e61c53b87c86cea0c2bd2b6d85ab4a59dcec1c662a872e8a35"}, {0x2, 0x26, "a27a65973448a37b290dea3feec9d6eceb7a606da896dd2d23647f8ae46ada028e17c76e3103"}]}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000006}, 0x40) r12 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a4d2ff40f3054002241b0102030109021b00010000000009040000014eaf32000905", @ANYRES64], 0x0) syz_usb_control_io(r12, 0x0, 0x0) (async) syz_usb_control_io(r12, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r12, 0x0, 0x0) 8m7.587683561s ago: executing program 32 (id=122): pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}, {@cachetag={'cachetag', 0x3d, '\x14\xe2\xc3\x11\xe2\xcb\x86\xc8-Hs\xc6\xafm\xdc{\xdeU#\xebp7-\x9f\xb8\xf3A\xb2CX\xd3//\xdd28+\x9dS\"\x9bm\x19\xd0K4a\xe6\xfb\xdb\xf7\xe4K\xb5\xc8\x94_\a\xe61\x91\xe4<@\xc37+\x9c\xb2\xe8E=T\xd5\xb1\'\xc3w\f\'\xd4\x97\xf8\xba\xe8\xa0\n\x8d\xc7\xc9\x7f\xa8\x1d\x88\xa3\x17\xca\xa5e\x7fYj\x82Z\xe9K\xa0T\\\x87u\x8coL\a|\xc8f^\x01\x04\xe4\x8e\x0f\xfe\x16\xa7G\xd4\xa1\xef\xc5\xa7k\x1dE\xb0\x9d!i\x99\\^\\]G?E+\xcd}\xf7i\xe2\xa2\x8dEW\xab\xdc\x8c\xe9Y\xb1\xc8\xc4\x97!\xbc\xf4\xef\xc9\x03v\xf3 \xb2\xc5\xd5\xf0$\xa0KD5\xf4\x9c\xe1\r\xc4\xa0\xd1\'\xadC\xb7Z\f[t\xd1\xadYk\x90vU#\xebp7-\x9f\xb8\xf3A\xb2CX\xd3//\xdd28+\x9dS\"\x9bm\x19\xd0K4a\xe6\xfb\xdb\xf7\xe4K\xb5\xc8\x94_\a\xe61\x91\xe4<@\xc37+\x9c\xb2\xe8E=T\xd5\xb1\'\xc3w\f\'\xd4\x97\xf8\xba\xe8\xa0\n\x8d\xc7\xc9\x7f\xa8\x1d\x88\xa3\x17\xca\xa5e\x7fYj\x82Z\xe9K\xa0T\\\x87u\x8coL\a|\xc8f^\x01\x04\xe4\x8e\x0f\xfe\x16\xa7G\xd4\xa1\xef\xc5\xa7k\x1dE\xb0\x9d!i\x99\\^\\]G?E+\xcd}\xf7i\xe2\xa2\x8dEW\xab\xdc\x8c\xe9Y\xb1\xc8\xc4\x97!\xbc\xf4\xef\xc9\x03v\xf3 \xb2\xc5\xd5\xf0$\xa0KD5\xf4\x9c\xe1\r\xc4\xa0\xd1\'\xadC\xb7Z\f[t\xd1\xadYk\x90v0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r9, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r10, 0x112, 0xb, &(0x7f0000000000)=0x60, 0x2) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x124, r11, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x106, 0x2a, [@fast_bss_trans={0x37, 0x100, {0x60, 0x5, "757eb7c04c1d723db73fa40c6f699bbb", "eac53a88807a24fbb2c2d4f59c6477f8a778ccd162548b3ce22ba1f844cf8b73", "8ef97862e16b9bff05f448ebeedf6707bc488147e74f2feb0cc1fbb57f0589d6", [{0x3, 0x26, "6bda8bd865f5a6a49d2ffd61612dbe52c9dd612d72b19bd45267ac69303dd1ecc8d5f02fd730"}, {0x3, 0x26, "23f4479c450889485f54edd1c905f6fddc2647b2875f1f24d1a6d5ee991c8496f276ec85152f"}, {0x1, 0x12, "9d3a179cc66ce8c0c12a4b92ac6abe20fd9b"}, {0x4, 0x20, "55225d1858cf56e61c53b87c86cea0c2bd2b6d85ab4a59dcec1c662a872e8a35"}, {0x2, 0x26, "a27a65973448a37b290dea3feec9d6eceb7a606da896dd2d23647f8ae46ada028e17c76e3103"}]}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000006}, 0x40) (async) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x124, r11, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x106, 0x2a, [@fast_bss_trans={0x37, 0x100, {0x60, 0x5, "757eb7c04c1d723db73fa40c6f699bbb", "eac53a88807a24fbb2c2d4f59c6477f8a778ccd162548b3ce22ba1f844cf8b73", "8ef97862e16b9bff05f448ebeedf6707bc488147e74f2feb0cc1fbb57f0589d6", [{0x3, 0x26, "6bda8bd865f5a6a49d2ffd61612dbe52c9dd612d72b19bd45267ac69303dd1ecc8d5f02fd730"}, {0x3, 0x26, "23f4479c450889485f54edd1c905f6fddc2647b2875f1f24d1a6d5ee991c8496f276ec85152f"}, {0x1, 0x12, "9d3a179cc66ce8c0c12a4b92ac6abe20fd9b"}, {0x4, 0x20, "55225d1858cf56e61c53b87c86cea0c2bd2b6d85ab4a59dcec1c662a872e8a35"}, {0x2, 0x26, "a27a65973448a37b290dea3feec9d6eceb7a606da896dd2d23647f8ae46ada028e17c76e3103"}]}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000006}, 0x40) r12 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a4d2ff40f3054002241b0102030109021b00010000000009040000014eaf32000905", @ANYRES64], 0x0) syz_usb_control_io(r12, 0x0, 0x0) (async) syz_usb_control_io(r12, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r12, 0x0, 0x0) 7m12.028451849s ago: executing program 0 (id=455): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00!\a'], 0x0}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000002300)={{0x12, 0x1, 0x310, 0x35, 0xef, 0x61, 0x8, 0x7fa, 0x846, 0x8684, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x9, 0x0, 0x10, 0x7, [{{0x9, 0x4, 0x4e, 0x6, 0x1, 0x28, 0x66, 0x66, 0x7, [], [{{0x9, 0x5, 0x2, 0x3, 0x8, 0xfa, 0x5, 0x9}}]}}]}}]}}, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000040)={0x20, 0x23, 0x91, {0x91, 0x24, "a9e7030576d57ef936ac04be3be50e12815ea7b51899645877b109a6f64ba269dce13d48b2c9d3203f959516b3880f2982c6ed321eb40475b72b54f3eacff7a1595f607eadc39ab72abf8f612f95a044fd6935c7332029315af40dc9a1e092f6f5d4a617cbe7a3aa59fda5607c5624c56bcf7229c62856c001ff992742a84bce7d2fe6eebfa1fb6c8091da33b44ba5"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x861}}, &(0x7f00000001c0)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0x8, "fb78"}, @global=@item_4={0x3, 0x1, 0x1, "0a6cd43d"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0xa000, 0x3, 0x1, {0x22, 0xcb7}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000280)={0x0, 0x31, 0xe2, "95231a3dacbc5b96513238e04b89fc6a1576a625f7f77babd3d6776ff30586f164b9d744ad59c83c943b01d635da434f65e82883d538dbd16c64c581e6f9204f6208c7e8352cf9f79f71d45e7e1625d5182b22494f900f04de2cead68be725c54d4acf03341ec7d85c77330dc42e533d256e9e715e03bb1887c769542bcecacfa70d2b3efed3e4f64c72748282f0f5772a7dda6cf2220a4331ef5dd0967b263a23b005e35d824aad9c1ae0ef11e7413e64961ddfdb5b842748db50a97a91d61f2e393d027f30948c1245d531a9f1314b9b9bf2111e4177c63ddaf96ce70e0140055c"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000400)={0x20, 0x1, 0x5f, "7c9e65440ab532f9ad54bae100a0b16d59f3ebd4199ebc9f844a5dcb3494a2b1b11eefd465d37ffa3c6c13bd25f58424d3f4b7f8fb3ffb6177813756ba864c2b71817b126800640141b0e8e5d69091f97b972540c90dc8ac45c5be81aae577"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x2}}) 7m8.952848042s ago: executing program 0 (id=471): socket$key(0xf, 0x3, 0x2) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r3, 0x3b8c, &(0x7f00000000c0)={0x30, r5, 0x0, 0x0, 0x40, 0xfffffffffffffdfd, 0x100, 0x0}) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @dev, @multicast1}, &(0x7f00000000c0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev={0xfe, 0x80, '\x00', 0x1c}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r6}, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x8}, {}, 0x0, 0x100, 0x1, 0x0, 0x9833bf88d1b218f5, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x4d6, 0x3c}, 0x0, @in6=@loopback, 0x3500, 0x0, 0x0, 0x4, 0x8}}, 0xe8) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010002000000206d044fc2000000000001090224000100006000090400800203000200092106040b01220500090581012000080807d1f71cf949e427e02310aed8340a279363a17488b714c7645f9488b4219c76971c15a896ed286c"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pwritev2(r2, &(0x7f0000000340)=[{&(0x7f0000000400)="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", 0x1000}], 0x1, 0x3, 0x1, 0xc) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) syz_usb_control_io(r7, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 7m5.649708762s ago: executing program 0 (id=487): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@mcast1, 0x5, r1}) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x2}, 0x8) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80010000, 0x8, 0xc2, 0x4f, 0x3d, 0x0, 0x80, 0x1, 0x3, 0x44, 0x8, 0x2, 0x1}, {0xb, 0xa7f2, 0x8, 0x8, 0x9, 0xff, 0x4, 0x3, 0xa, 0x13, 0x7, 0x6, 0x1}, {0x21ff, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0xfb, 0x4, 0x15, 0x0, 0x2, 0x4}], 0x9}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x100, 0x8a, 0x9, 0x1, 0x3, 0xfffffffffffffffe, 0x4002004c4, 0x3, 0x6, 0x100, 0x800000010, 0x2, 0x3, 0x7ffffffffffdffff, 0x3], 0x3000, 0x1011c4}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="3400000010000100000000000000000008000000", @ANYRES32=r6, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="14002b800863fbc5", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="47d09875f8c18204aacc459be4ca7f5cd636430707c12c9e09578871a16fdcef83c877088c547697aa0b"], 0x34}], 0x1, 0x0, 0x0, 0x4010}, 0x4010) 7m5.42575138s ago: executing program 0 (id=489): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unshare(0x2c000080) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x40) unshare(0x4000000) fcntl$notify(r0, 0x402, 0x8000003d) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080), 0x583, 0xc400) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x41c480, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x0, 0x0, 0x50424752}}) utimensat(r2, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000540)={0x4, 0x8, 0xfa00, {r6, 0x7}}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0xb, 0x8, 0xfd, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xa, 0xff, 0x7c, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, 0x4}, {0x8000000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x26}, {0xffff1000}, {0x2000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x7fffffffffffffff]}) socket$netlink(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="0e82d7fa8c144f7c4d72ce7bfcbf9ed3f814b8be2e8cb8c0572a56b7faf354578218e6db2afe5f36fc51eeb4fd44c91204d808dc53a11eb228486f135d26b59a35c68bc7581eae1a45042597c306e87da0de724fb4e534940c09923ba2f68ba68454f81687547e494ae8378275eb2ed7e6022f2e18304bb57fbee61f13c5a483d417adcace9bdee15d57ed82b1491cf0f7c45cbaa98682061f49aea1d8050a6b56ff4e77efcff999257a5745ade3a30fd23049d5665148a9"], 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x20000000, 0x0) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000000c0)=0xc) 7m5.22989294s ago: executing program 0 (id=490): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x1) ioctl$sock_proto_private(r0, 0x89e2, 0x0) (async) ioctl$sock_proto_private(r0, 0x89e2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000131401"], 0x18}, 0x1, 0x0, 0x0, 0x20000800}, 0xc4) ioctl$TUNSETLINK(r1, 0x400454cd, 0x336) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x336) close(0x3) (async) close(0x3) 7m4.805811133s ago: executing program 0 (id=493): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000100)="f3a50f09cbd0640f01c4660f38817ac5baf80c66b814370f8766efbafc0cb000ef0f01c40f07568000048e3665660ff5649ff082622463baf80c66b8b8ba8a8966efbafc0cec8ed8", 0x48}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 7m4.542420328s ago: executing program 33 (id=493): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000100)="f3a50f09cbd0640f01c4660f38817ac5baf80c66b814370f8766efbafc0cb000ef0f01c40f07568000048e3665660ff5649ff082622463baf80c66b8b8ba8a8966efbafc0cec8ed8", 0x48}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2m25.839828679s ago: executing program 2 (id=1947): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r2) r4 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, 0x0, &(0x7f0000000100)=0x56) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r3, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x12, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6MASK={0x12, 0x3, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r3, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x12, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6MASK={0x12, 0x3, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000040)={0x17, 0x1, 0x0, "9611e6d6ffc88885163200000080d2b400000000000800"}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r7) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r7) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14010000", @ANYRES16=r8, @ANYBLOB="010025bd7000fddbdf25010000007c000380140002006970766c616e31000000000000000000140002006e696376663000000000000000000000060004000200000006000400c1000000080003000200000014000600fe88000000000000000000000000000114000600000000000000000000000000000000010800010000000000080023000300000008000400000000004000018008000b007369700008000b007369700007000600727200000c0007003200000003000000060005", @ANYBLOB="432b075d51108f7c66ff2cfae0506853102eaf14692e6a46f9e78ba9a762306136cd5d7a3b15a032445f3b503f86e1185c3c0f26aac274351a92addc5e9238ae6ac5159a20a8849240bfb36938e4eff4bcc8a095f0c7c6b439cd44f3289a084a7d4e5db2924fa98ebe92f1679227145ed93f9a2aef0e9731ec509f3e30872220dbd31fd7a848d85e0a0e0571c0f5f2e26b57b91518ccb0f1e61129f8b3fba70e6cd802d3baeebba55655cb6b43b1f3"], 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r8, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffb}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x80) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000003b80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001a00020000000800170003000000080013000000000008000300000000000800070000000000080002"], 0x5c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000003b80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001a00020000000800170003000000080013000000000008000300000000000800070000000000080002"], 0x5c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) 2m25.634294334s ago: executing program 2 (id=1950): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000840)={0x1c, &(0x7f0000000240)={0x40, 0x9, 0xd, "01fc1416642e194108161db6b4"}, 0x0, 0x0}) syz_usb_connect$uac1(0x5, 0xba, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x3, 0x1, 0x4, 0xe0, 0x1c, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xcf}, [@processing_unit={0x9, 0x24, 0x7, 0x4, 0x3, 0x1, "9f80"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x1ff, 0x5, 0x3, 0x2, 0x6, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x0, 0x3, 0xd, 0xf, "ac92c9c1d11947"}, @as_header={0x7, 0x24, 0x1, 0x9, 0xfa}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x3, 0x2, 0x1, 0x8, "d7dc82"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x9, 0x4, 0xff, 0x4, "357d92", '\t'}]}, {{0x9, 0x5, 0x1, 0x9, 0x210, 0x5, 0x8, 0x7, {0x7, 0x25, 0x1, 0xd06bd16b88aa7ead, 0xff, 0x253d}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0x8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x8, 0x8, 0x8, {0x7, 0x25, 0x1, 0x81, 0x2, 0x2}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0xd, 0x66, 0x0, 0x20, 0x5}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x5, 0x27, 0xfff7, 0x4f}]}, 0x6, [{0xc0, &(0x7f0000000340)=@string={0xc0, 0x3, "439bc20ac0dc093e1bf82480fe78c7f495ce5b7337b98b342f016218920abb72cdebf6d282f9dad0bbcc92e86167dab7e3c40c0707b96450c11632872d390ae82982169a6e82b2207196c9ec697d4e9ce94b84b42218dfc3fce52bffcb8455a63044edc9b41ed86677cfed70b5c548ad132d1037041a4dc66e1302a226266f94786915d368343c0f794eb5bef1c6bf3a40731b5a7b5a641f9a6820b52947b57791ad25c6a638bba258d54370ad3ba7a6e0464932521c73ea2969b463361d"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2409}}, {0x70, &(0x7f0000000400)=@string={0x70, 0x3, "3074e833c342542b48cb12011a418b433003f2b2cc3463ad861fe788f9394340498b77bc2b95c4976c7e497351b27b7db64460ddbfda1e6cfbc3b1c4a93a8321468acd83469dc0600b8d28937c8cbb3cdcc9ddc361880c885aeb2577b2851f6a821df130ec6d63ce741b4227b7b5"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1409}}]}) syz_usb_connect$hid(0x7, 0x3f, &(0x7f0000000b40)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x46a, 0x23, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xbb, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0xfa, 0x2, 0x3, 0x1, 0x3, 0x7, {0x9, 0x21, 0x5, 0x10, 0x1, {0x22, 0x116}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x5, 0x5b, 0xa2}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x0, 0xbe, 0xa8}}]}}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000b80)={0xa, 0x6, 0x10, 0x6, 0xb, 0x10, 0x10, 0x10}, 0x10, &(0x7f0000000bc0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x44, 0x3, 0x0, 0x3, 0xf9}]}, 0x4, [{0xc4, &(0x7f0000000c00)=@string={0xc4, 0x3, "5d78a4214946ed7ebfd5f375cbd7bd8afc211ef9950c90698e5f59ee1ddfb6505f43bc2dc3d1d5c7fe8b2ebba46e63372b64791d5e88d5f08728e3aa5dbed98b93542190ee57740729a20072a0c65f8c3109a59f28e36c033e863c47fbf8e6da85ea3f10b0ff7abf0b72c03cf3fc09bd89c3bb13d20f41cf1b7a45faf21e472b8b438a62079153a58661b5ddd81fcd7fb514c1ae34549f97dc04d438fecf5f4727136f0a39aac94aaf321fa1e51e243e0d4556216a1ae3bdd6806d5e2036c7537ac2"}}, {0xcc, &(0x7f0000000d00)=@string={0xcc, 0x3, "dd2a7c06fa77d83dbe8826ed771cb0593a879cd184ec6da006c98251f8cce5db1c182f04ea18d1c9bbabff0d4ff47d968c5973d0be2162015337c1981100bbcdf820600759437e6fd964f4149dcf174f294e9ae5370f85e7ae48e7e16e6986a9c3526cfeaa4898fc80c5dbdf23c33519b383a5ec1b5960fc3115517f10944307561017cb95555f02659711766abbafc9daf42ba9931c265bf4acbf620640d88df7a275cc332d4ec466ea1b8738e02c5411b88cff1e155d8c0fdfaa0730f906b94d8e3635c53467b07991"}}, {0x9e, &(0x7f0000000e00)=@string={0x9e, 0x3, "c67e1a5407fe80873cf4b069076c4afa985c60ef102d42c02e8ab1f60117be6fc98e02fb3050bf66d683f184c154296b592a4d4dea91e33ef5f4297e6093f3e3f26c9b61f9f788a1932024380eb4ce3267764292d727ed5dd7823235449446bab3e4ed01d805d06dbd5eaf420a315a3ff3b585833162f3d4804af3c69e02ccad5a638b085be662d40f6ebf493597016eb6e7f5cb70196beea65747ab"}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x414}}]}) 2m23.965325878s ago: executing program 2 (id=1957): add_key(&(0x7f0000000080)='rxrpc\x00', 0x0, &(0x7f0000000240)="fe", 0x1, 0xfffffffffffffffb) syz_usb_connect(0x3, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0xb2, 0xc9, 0x89, 0x8, 0x402, 0x5602, 0x7963, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x31, 0x4, 0x0, 0x48, 0x76, 0x8c, 0x8}}]}}]}}, 0x0) add_key(&(0x7f0000000080)='rxrpc\x00', 0x0, &(0x7f0000000240)="fe", 0x1, 0xfffffffffffffffb) (async) syz_usb_connect(0x3, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0xb2, 0xc9, 0x89, 0x8, 0x402, 0x5602, 0x7963, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x31, 0x4, 0x0, 0x48, 0x76, 0x8c, 0x8}}]}}]}}, 0x0) (async) 2m22.600417687s ago: executing program 2 (id=1960): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) setpgid(r2, 0x0) setpgid(0x0, r2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x4, @mcast2, 0xed}, 0x1c) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000300)=0x2, 0x4) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m22.368814621s ago: executing program 2 (id=1962): r0 = socket$qrtr(0x2a, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000bfd000/0x400000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000d88000/0x1000)=nil, &(0x7f0000f89000/0x2000)=nil, &(0x7f0000000000)="2d78c6a6dc8a0555a2f56369ea91007353e19f615acd677d57cad35a0522ab56e689788f52dbb98b1f5b048a3ae78ec88a9250a4a88071e75db20ff67428912a4979d0c90d7b17ceef4da28b6a2eb917dc444d9bf6c5602aa25ac2790d95a7fc34be5311ca04bb0fced27800426f789276f5469a3c1df9a6c19d7116efdb769744cb1f4d770041803bd8d75f30c6dd10b501345008ec64c37d38012f2466c06e4d7713a3faf55880e0e1f1e303f2a82517f9a537462bd59e31f9be20469f2b2676d5479bde5b00b1043dd2e6d858c80d9bf54fdd8d509d6ed43cfa987dbb8690f9df", 0xe2, r0}, 0x68) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000180)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80002402}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000805}, 0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r3, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x5c}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) bind$qrtr(r1, &(0x7f00000004c0)={0x2a, 0x1}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x9c, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x31}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x40}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2c}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7caf7998}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x4008004) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x68, r6, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xb}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x7}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xb6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000a80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000840)={0x1d8, r3, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x46}}}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}, @NL80211_ATTR_IE={0xe9, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x7f}, 0x7, 0x10, @device_b, 0x3ff, 0xe508, 0x7}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x8, 0xb9, 0x81}}, @mesh_chsw={0x76, 0x6, {0x8, 0x98, 0x16, 0x1}}, @random={0x9, 0xbe, "8c32820fd1a5e7bdcf6a9b6e7dd482a862a9e9dab6e63d90e210648df28c9d836b8a4234cede96f469257038de92e6d9c1c23d1e80b1c1a02015a3983e14625620d1478f207de383b9f55746c26623b2496bce4d9df45b6db6591bdb426721ada44686a7365e34a53168dabb2cb71b904532ca8846f7bdf9844e717c013012869768aa5c8bb1e1bec2c082f886f60f616a5b7eb93646edd72797b00ca7bd1acc7664e87821649af99223a6ae69c92724d22b2e8e731cc839dc90a9dae420"}]}, @NL80211_ATTR_IE={0x8c, 0x2a, [@ssid={0x0, 0x9, @random="2b94053f16388581d8"}, @rann={0x7e, 0x15, {{0x1, 0xb}, 0x8, 0x7f, @broadcast, 0xffff, 0x5, 0x2010}}, @rann={0x7e, 0x15, {{0x0, 0x1}, 0x1, 0x95, @device_a, 0x6, 0x8, 0x4}}, @mesh_id={0x72, 0x6}, @ibss={0x6, 0x2, 0x2}, @cf={0x4, 0x6, {0x10, 0x10, 0x4, 0x3}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x8, 0x9, @device_a, 0x2, @value, 0x3, 0xff}}, @ssid={0x0, 0x12, @random="4332c0b93c3e51e78d3df390343726028540"}]}, @NL80211_ATTR_IE={0x35, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x37}, 0x7, 0x7f, @device_a, 0xb, 0x6, 0xad0}}, @dsss={0x3, 0x1, 0x4}, @rann={0x7e, 0x15, {{0x0, 0x9}, 0x3, 0x59, @device_a, 0x4444, 0xffffffff, 0x9}}]}]}, 0x1d8}}, 0x20000041) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r7, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, r6, 0x200, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048007) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000c00), r7) sendmsg$NFC_CMD_LLC_SET_PARAMS(r7, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r8, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x7}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x4}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x3}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x5}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x9}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x191}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x259}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000d40), r1) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000dc0), r7) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x38, r9, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8020) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x24, 0x3, 0x3, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x9c7d309df6e67812) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x60, r3, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x800, 0x21}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x81}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xb}, @NL80211_ATTR_BANDS={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x94}, 0x14) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x80, r3, 0x0, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8001, 0x1}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "98a8afb35f9c57fab92fc1ab4e"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001280)={0x1b8, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x98, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xbe}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfc03}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xad4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x100, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "a9ad6a134b4b18054c057062224328fad6250a5adc2cd5977d56"}}, @TIPC_NLA_NODE_ID={0xb0, 0x3, "f864fd8b5814eaaa2737ca325d0d94bf2e7ceca19f6bbdc2bb16f307c7936b165170eec7d598fbb34aaaf4ad920241ae384ae8b8a6ae5195a686344b97af86c227cfb80b9a3d5e8d54a686bb4ab3c8c36d75dd2dce8c166410439f44ff7ea2e67fdc8f18817515d12a89dbaffa1352d03cbef1f49bb637c94a3397ec230762b58e9d911a4e7cd88f0c5fb0db35ec59c419a06ff55e23c62be88f56ed39530c3ad2e4ec1ba7782f28986598f2"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x84}, 0x4015) close_range(r1, r1, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x44, r6, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x45}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040004}, 0x8000) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000001600)=0x7fffffff) lsetxattr$trusted_overlay_opaque(&(0x7f0000001640)='.\x00', &(0x7f0000001680), &(0x7f00000016c0), 0x2, 0x0) 2m22.160308023s ago: executing program 2 (id=1964): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x20000000) 2m21.764167334s ago: executing program 34 (id=1964): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x20000000) 8.530259556s ago: executing program 1 (id=2620): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x18, 0x1412, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}}, 0x20000000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x9, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x200, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) 8.437601268s ago: executing program 1 (id=2621): sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x50}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2000000}) r1 = openat$dsp1(0xffffff9c, &(0x7f00000001c0), 0xd00, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)=0x17) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffffff, &(0x7f0000000200)='./file1/file4/file5\x00', 0x800, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c000000020601080000000000000000000000000900020073797a3000000000140007800800134000000800080006400000003012000300686173683a6e65742c043672740000001c00078008000a400000000605001500c000000005000700290000000500010006000000"], 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x98) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) landlock_restrict_self(r3, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) r5 = syz_open_dev$video(&(0x7f0000000180), 0x0, 0x12d081) ioctl$VIDIOC_G_PRIORITY(r5, 0x80045643, 0x4dd395b241fb0335) pipe(&(0x7f0000000040)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r7, &(0x7f0000000000), 0xfffffecc) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c02) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000000000000f8ffffffffffffff04000000000001000100000000000000078c710000000000de0d00000000000008000000000000000000000000000000000000000000000000f1ff000000000000000000"]) syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c02) splice(r6, 0x0, r8, 0x0, 0x5, 0xf) 8.210808073s ago: executing program 6 (id=2623): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff038}, {0x20, 0x0, 0x0, 0xffffefff}, {0x6}]}, 0x10) r1 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000300)={0x0, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, &(0x7f0000000040)={0x40, 0x2, 0x3c, {0x3c, 0x30, "6e103fd4380b586e02da899317a7845a850c09b083f614cdfdf2fdbe95579d9838ab13f6c9ec368c7b229142febbd12ef041eec4deb302bd7562"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x429}}, &(0x7f0000000140)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0xf05bfea037a767f4, "4b7f83bf"}, @global=@item_4={0x3, 0x1, 0x0, "92855cae"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x1f, 0x1, {0x22, 0x216}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000240)={0x40, 0x13, 0x4a, "e08829d61955e038216f05d6b5599999795a024880ab6778cd7563d1377698430b5c8e27b4dc884e8c02392d65d8f02af39b54781fffd5bb5b51a0af8d783e98bccb085b5126e8e9d017"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xbc}, &(0x7f0000000380)={0x20, 0x1, 0xbf, "10facaec65a8d544903d1e0c0432f239228dca6f93d8f776300ebd0bfcf1819c4013905e29aba77ae5a4ed74067a162986bc90b8aa491b3672375ef2a3d71220ae27e0756f8c4fdc888b6f76177867427e5289d763c439e5cd60e9dab7d603ad51c2a5ec7944a194e7f0048a0f91da3e50147d736ad4a03dfbd58b91fcba095b5d144aefb21b391327d43e9be60965a44684da638068699ea2aaac9e7e406c7f210a717483b7d101f9e875e0ae091c92736e68ebb700b2df97857ee3454eb7"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x5}}) 7.49370528s ago: executing program 1 (id=2630): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$inet6(0xa, 0x1, 0x100) (async) r1 = socket$inet6(0xa, 0x1, 0x100) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000040)=0x100, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x5c}}, 0x20004044) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000000c0)={0x4, {{0xa, 0x4e20, 0x5, @remote, 0x1}}}, 0x88) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000000c0)={0x4, {{0xa, 0x4e20, 0x5, @remote, 0x1}}}, 0x88) 7.449321288s ago: executing program 1 (id=2632): symlink(&(0x7f00000012c0)='.\x00', &(0x7f0000000100)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000240)=@nullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000280)='minix\x00', 0x218483, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) unlink(&(0x7f00000013c0)='./bus\x00') r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1}) ioctl$VIDIOC_QUERYMENU(r2, 0xc008561c, &(0x7f00000001c0)={0x980900, 0x8081, @name="6736516728a5678c18a4ec047f3f1fa52fe9a9987d0406b3a0c705c611b66f06"}) setuid(0xee01) write$UHID_INPUT(r1, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0xf47) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x12) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000001400)={'syz_tun\x00', &(0x7f0000001480)=@ethtool_rx_ntuple={0x35, {0x6, @ether_spec={@multicast, @broadcast, 0x5}, @udp_ip4_spec={@private=0xa010102, @broadcast, 0x4e21, 0x4e23, 0x2}, 0x0, 0xfff9, 0x973, 0x8, 0xfffffffffffffffe}}}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x842802, &(0x7f00000021c0)={[{@redirect_dir_off}, {@nfs_export_on}, {@index_on}], [{@func={'func', 0x3d, 'CREDS_CHECK'}}]}) sigaltstack(&(0x7f0000002180)={&(0x7f0000001180)=""/4096, 0x1, 0x1000}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{}, {0x0, 0x989680}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x20010, r0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000380)={@local, 0x1, 0x0, 0x90, 0x0, [{@dev}, {@multicast1}, {@dev}, {@dev}, {@loopback}, {@multicast2}, {@multicast1}, {@empty}, {@loopback}]}}) lsetxattr$trusted_overlay_opaque(&(0x7f0000001280)='./bus\x00', &(0x7f0000001300), &(0x7f0000001340), 0x2, 0x2) 6.868403057s ago: executing program 5 (id=2636): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) (async) recvmmsg(r0, &(0x7f0000001f80)=[{{&(0x7f0000000680)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000880)=[{&(0x7f0000001d80)=""/92, 0x5c}, {&(0x7f0000000780)=""/250, 0xfa}], 0x2, &(0x7f0000000700)=""/39, 0x27}, 0x4}, {{&(0x7f0000000b80)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000c00)=""/173, 0xad}, {&(0x7f0000000000)=""/57, 0x39}, {&(0x7f0000000cc0)=""/165, 0xa5}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000002000)=""/183, 0xb7}, {&(0x7f0000001e40)=""/96, 0x60}, {&(0x7f0000001ec0)=""/53, 0x35}], 0x7}, 0x8}], 0x2, 0x200, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x1411, 0x400, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x881) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010000d7d669f63b7e601d1eef010203018a1f42e3d499f4777e08048ad16bfa650902240001000000000904000002aa0f6000090504020000000000090582020000000000"], 0x0) (async) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) (async) ptrace$getenv(0x4201, r1, 0x0, &(0x7f0000000080)) syz_usb_connect$uac1(0x0, 0xdf, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcd, 0x3, 0x1, 0x5, 0x5ecc32ae02a97c6f, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xeb}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x202, 0x6, 0x4, 0x40, 0x0, 0x8}, @feature_unit={0x11, 0x24, 0x6, 0x6, 0x5, 0x5, [0xa, 0x8, 0xa, 0xa, 0x4], 0x10}, @mixer_unit={0x8, 0x24, 0x4, 0x4, 0xb, "a1abf8"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0x5, 0x3}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x4, 0x0, 0xfa, "9cacb5dfe945"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xc0, 0x1, 0x0, 0xf, "7d672e7a7c4d1e14df"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x2, 0x4, 0xfc, 0x80, "6cb44b4b90c11a"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x4a, 0xfc, {0x7, 0x25, 0x1, 0x80, 0x5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x81, 0x1002}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x90, 0x2, 0xeb, 0xfe, "34e64e32"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xf, 0x81, 0x4, {0x7, 0x25, 0x1, 0x83, 0xc0, 0x4}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x14, 0x5, 0x93, 0x10, 0x1}, 0x5e, &(0x7f0000000180)={0x5, 0xf, 0x5e, 0x4, [@generic={0x42, 0x10, 0x4, "704216083c885a715f40de50f8ef5436a6a6b73768bb7d760ac0a9b3c983690d8ba24c44ee4add56ba12cfa833ed2f786778d51d7f01a5186c0cf0b94f72e9"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8, 0x9, 0x200}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x7b, 0x80, 0x5}]}, 0x6, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x807}}, {0xc3, &(0x7f0000000280)=@string={0xc3, 0x3, "0f885df17024597c757b98d189c5d47aeae1b9a8b9ccd295f2ba0d44afeef350e980f558434674bb2b3ca6414712a95a875265d52dbb7120a9639df724ffa90e2c97509bdd48575d9b67f911c3725f6ac46ed2a7d0ef0d5fd42a48f3373a326f5923ed6b4f085edf7cb4bde6dacee4db6826becf74769931ba702b64176c57bf6113747d0ad6d30b5b120b38b99f816ed60893fc54a0105e454acf3882bf70049ef8fa15f00c78d824e6aa9eb86ffde3f32a1441008a1cae5bf75652cf4f06649b"}}, {0xbc, &(0x7f0000000380)=@string={0xbc, 0x3, "61f9e264b524f7a075adc2d8abae2dbd12628dced772aa19ae2b2801329efb00c76192e534e22373414d5cb18459ea418d2b2d516d1984f70e5a70ae47b7a8836fa7d14aeb766e91d7a4868e87d6f673c5983889f65396b503295b8a3e2ab0140abb4afc312a17e4d53070d73ea6967b144517cee8ae6860cb16dd3bfad87b7de9633a8ed036c7f56f683e6ccee682fca52470552f66a07bdb9ff50e71078e1e2157a162638a06975280eb3af6bb0cd3288d4c5f1905c5d66439"}}, {0x92, &(0x7f0000000440)=@string={0x92, 0x3, "aca669136a095efc39f06d42b6eb97922a213a6aba1c804c498307cfd2844d6b4d6716b552d69a9ab413b1e41c688cf09f6ddc6431dbf675c460476a1f7b3cd0c4bdd13e4426918bea62fdd4ddeaa975ac75d3592342051ce7f5ac53698fe217e93a896d4d788a3b2d83bcb6cb4d778c46dd1e1ca5b4dd1510a2b9b4d487a1d9ebe7a6983a422669f6e01497f4f8c735"}}, {0xc6, &(0x7f0000000500)=@string={0xc6, 0x3, "df79a1c1723fa02b412fe1db9865f52ee6f1ede2c0ab65722d0b8f09e8307c88a7c92c6191a5071e1c14d69b6dfaffe6084efba8a7808e3cb93640de85ddd9967c21e866807ff09c5e3f0bdc781b9f0926b82c75f6c680afb72ad461b41311aea71278fae73b00e0923901818e53c9f2a060186f31ec8c021666da70cc50cdb1622d5da5481c059351c9dfe988bda263ccdff3abb44776a17a543c79ac3b41fe450ed4cc246cd4d187b7954e7fe9912118b6c5599fc86d29eeefb26af677426aa83dfde2"}}]}) (async) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x12) (async) write(r0, &(0x7f0000000940)="680eba2d775d337dba3b87fa887c4dc0a2c12dbb34fe8349e653a7ae5fddec2d9b99e325edc7b36d60a37ca29a0182dc16b6ea164c4c1274390d148da0f1ac171be18e8566ed401f1fae086f74f43d22779a60ff6376689cd5d6d78e966b39710a4c4422d01e9d63327b61b31b7637e72a5a5694ab3e2c8f04c506641ca0ea5d87da4913d7c478849e268c6fbfa043193d57ce02e75aa4ec31de08e7138d300b01810fa3e06f8f9629c1ea1dd957045ed6ff5e4aa236ebdf60f8", 0xba) 6.753773218s ago: executing program 5 (id=2637): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x8, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x4}) accept(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="240000002800010023bd700000000000050000000c00"], 0x24}], 0x1}, 0x0) 6.685556707s ago: executing program 5 (id=2638): recvmmsg$unix(0xffffffffffffffff, &(0x7f0000009e80)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {&(0x7f0000002880)=""/82, 0x52}], 0x3}}], 0x1, 0x20, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="10015738dfb3cf0dc2e7625588f5068d8d0001000000407d1e38310000000000010902240001000040b109040004010300746c092101"], 0x0) splice(r0, &(0x7f00000000c0)=0x4bc, r0, &(0x7f0000000280), 0x6, 0xf) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x0, 0xf, 0x5, {0x5, 0x1, "0010c5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1, 0x7fff, 0x5, 0x5, 0x0, [{0x1, 0x9f, 0xa, '\x00', 0x3}, {0x8, 0x3b, 0x2, '\x00', 0xfb}, {0xe, 0x1, 0x5, '\x00', 0x8}, {0x2, 0x5, 0x9c, '\x00', 0xd}, {0x6, 0x8, 0x93, '\x00', 0x3}, {0x4, 0x8, 0xfa, '\x00', 0x40}, {0x8, 0xe, 0x9, '\x00', 0x2}, {0x5, 0xf, 0x3, '\x00', 0x3}, {0x1, 0x1, 0x9, '\x00', 0x8}, {0x4, 0xff, 0x10, '\x00', 0x3}, {0xff, 0xbf, 0x1, '\x00', 0xb9}, {0x7, 0x3, 0x5, '\x00', 0x7}, {0x81, 0x81, 0x0, '\x00', 0xfe}, {0x1, 0xfd, 0x1, '\x00', 0xa}, {0x7, 0x9, 0x8, '\x00', 0x4}, {0x5, 0x6, 0x4, '\x00', 0x9}, {0x5, 0x70, 0x8, '\x00', 0x6}, {0x3, 0xfd, 0x80}, {0xb4, 0x6, 0xfd, '\x00', 0x68}, {0xc, 0x8, 0x2d, '\x00', 0x5}, {0xc, 0x3, 0x3d, '\x00', 0x2}, {0x3, 0x1, 0x6, '\x00', 0x2}, {0x2, 0x1, 0x6, '\x00', 0x4}, {0x9, 0x9, 0x6}]}}) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRESHEX=r2, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x348100, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x1401, 0x209, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}}, 0x0) 6.566194257s ago: executing program 1 (id=2639): syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x3}]}}, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x86, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0xd, 0x40, 0x80, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, 'iW'}, {0x5, 0x24, 0x0, 0xa0}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0x7, 0x3, 0x2}, {0x6, 0x24, 0x1a, 0x0, 0x30}, [@obex={0x5, 0x24, 0x15, 0x4}, @dmm={0x7, 0x24, 0x14, 0xfffb, 0x22a}, @country_functional={0xa, 0x24, 0x7, 0x1, 0x480, [0x9c, 0x7]}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0xa7, 0xb7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x80, 0x4, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x3, 0x2, 0xc0}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x8, 0x4, 0xcb, 0xff, 0x6}, 0x105, &(0x7f0000000180)={0x5, 0xf, 0x105, 0x1, [@generic={0x100, 0x10, 0xb, "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"}]}}) 5.306949212s ago: executing program 6 (id=2640): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)={0x1ac, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @nested={0x18a, 0x1d, 0x0, 0x1, [@generic="b112ed56", @nested={0x13, 0x14f, 0x0, 0x1, [@generic="a8c754e924b047c68ce9a2f003c5f1"]}, @typed={0x4, 0x1e}, @typed={0x8, 0x48, 0x0, 0x0, @str='-:]\x00'}, @generic="bdab99d45d627042dd64f1621b686c6b4791764d71f2f3802c03e54ef0332f58c697ced62f0b3e4926c3b06db3d54a3609eef35f0aa0a9f9c1bb87dd97f17fdf262d2b9c5d8cc4cb090f3d82edff50bc8483911190ae5a2cea03d107dc0bf60e6e12a71dde152b35dd307c0f83148f6f9ecaadaff06099b5fa36", @typed={0x8, 0xee, 0x0, 0x0, @u32=0x800}, @typed={0x14, 0x75, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0xcb, 0x144, 0x0, 0x0, @binary="3ac08c37595edbabb9adbc59da6904c5e6dd6034be405fb7185214601778c68ac095056acbbc13db1c05a673bdb4eb85d819cf11ce01e9c327aa7311543e68a086c21e68b1c03aab50d2a16e77d01a101e28119197b28ca00244508ce3e70a091c30bfd0e9c023cb2558af29c884287f39003b8b0a8dd97881c6ebf66e8a76a99795629b0ce2b2b8fd623b70d68dc353b17106144f260af4b64469e70ade3998d13639073683af6e087dfbabfd4624b911a8e4c5ca9b2e4f7d7fdc71b2774d79b18444b1e3e80c"}]}]}, 0x1ac}], 0x1}, 0x0) 5.197605736s ago: executing program 6 (id=2641): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_connect$cdc_ecm(0x0, 0x82, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x1, 0x1, 0x80, 0x80, 0x9, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x0, "0300000068d6"}, {0x5, 0x24, 0x0, 0xdc}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x4, 0x4, 0x8}, [@mdlm={0x15, 0x24, 0x12, 0xebd}, @mdlm={0x15, 0x24, 0x12, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf3, 0xb8, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x10, 0x0, 0xc6}}}}}]}}]}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x17, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc4}, 0x4) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) (async) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000), 0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x1, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050004000000fcdbdf252e00000008000300", @ANYRES32=r5, @ANYBLOB="0a003400020202020202000010009d00000200000700550104008ce46adcd56e20002a00821a06040003000000ffffff0f00ff01000000090000000e000000001000b00000000700188000000080ff010a00c8005050505050500000a8e4e5e25b2365e854830bac3d7c4691e0b06923c9fd0255c45d7b275c17619042b8e074741017ed9eb49ab44a1a23"], 0x78}, 0x1, 0x0, 0x0, 0x4800}, 0x8060040) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xfffffffffffffd7e, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, "1ae65a95", {0x1, 0xbf9, 0x6, 0x9c, 0x8}}) 5.136574203s ago: executing program 6 (id=2642): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r4, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0100ffdbdf25670000800800030000000000", @ANYRES32=r4], 0x28}}, 0x4004040) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x61ae, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x4, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x85}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x20, 0x24, 0x11, {0x11, 0x5, "3b069599d5e3863b5180c9e4ebc29d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) pwrite64(r6, &(0x7f0000001380)="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", 0x1000, 0x100000001) setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000000440), 0x4) sendmmsg$inet6(r6, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040) syz_usb_connect(0x5, 0x34, &(0x7f0000000e80)=ANY=[@ANYBLOB="12011001b1fb66101e090300bb35010203010902220001080540040904ce0109000000000705f71f22890b09050c020002"], 0x0) 4.28576018s ago: executing program 4 (id=2644): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x0) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, 0x0) 4.27454156s ago: executing program 4 (id=2645): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000000), 0x4) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYBLOB="070000000000000007000000ffffffff"]) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x1701) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x44, &(0x7f0000000080)={0x2, 0x3, 0x17, 0xff81}, 0x8, 0x20, 0x3, 0x0, 0x4bf, 0x404, 0x0}) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x57e, 0x200e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x81, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@local=@item_012={0x2, 0x2, 0xa, "df72"}, @global=@item_012={0x1, 0x1, 0xa, "d6"}, @global=@item_012={0x1, 0x1, 0x4, "1f"}]}}, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000001b00)=[{{&(0x7f0000000180)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)=""/176, 0xb0}, {&(0x7f0000000100)=""/7, 0x7}, {&(0x7f0000000340)=""/217, 0xd9}, {&(0x7f0000000440)=""/255, 0xff}, {&(0x7f0000000540)=""/189, 0xbd}], 0x5, &(0x7f0000000680)=""/86, 0x56}, 0x8}, {{&(0x7f0000000700)=@nfc, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000780)=""/135, 0x87}, {&(0x7f0000000840)=""/161, 0xa1}, {&(0x7f0000000900)=""/100, 0x64}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/241, 0xf1}], 0x5, &(0x7f0000000200)=""/34, 0x22}, 0xfffffff9}], 0x2, 0x2101, 0x0) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x2, &(0x7f0000ffc000/0x2000)=nil) ioctl$USBDEVFS_REAPURBNDELAY(r7, 0x4008550d, &(0x7f00000000c0)) 3.628861694s ago: executing program 5 (id=2646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d6feffffffffffffff537c4c3060c6a405106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000560900a1004daf25cee2d5d1c1"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGNAME(r2, 0x80404806, &(0x7f0000000640)) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = syz_open_procfs$pagemap(0x0, &(0x7f00000001c0)) fsmount(r2, 0x1, 0x2) (async) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000140)=@secondary) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000380)=[@timestamp, @mss={0x2, 0x4}, @timestamp, @sack_perm, @mss={0x2, 0xae03}, @timestamp, @window={0x3, 0x9, 0xfff9}], 0x7) utimes(&(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)={{0x77359400}, {0x77359400}}) keyctl$get_keyring_id(0x0, r5, 0x6) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f00002ee000/0x1000)=nil, 0x8000, &(0x7f0000000200)=[{0x0, 0x100000be63, 0x9}], 0x1, 0x8000e5, 0x0, 0x0, 0x0, 0xe4}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000840)={0x20, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r9, 0x2284, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000180), &(0x7f0000000340)='./file0/file0\x00', 0xe, 0x0) 3.473603139s ago: executing program 1 (id=2647): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) getsockopt$netlink(r1, 0x10e, 0x2, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x44, 0xe2, 0x20, 0x8, 0x13d3, 0x3224, 0xcb0d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xe7, 0x0, 0x0, 0x20, 0x1, 0xd6}}]}}]}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv\x00', 0x3) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x1e, 0x0, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0xffffff81, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 3.389054791s ago: executing program 6 (id=2648): r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x100, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc, 0x7c}}}}, [@NL80211_ATTR_NAN_FUNC={0xd8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "e99ff320ad66"}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0xc8, 0xd, 0x0, 0x1, [{0x39, 0x0, "3fd1d15aca8a09e3e8c6d5727c1ab6178161d48c398f8ee848328a05fa58f0c77d44806df37a114a8e530ddb83b26eef1ad592bb6b"}, {0x45, 0x0, "4672bcaaedcaccc59ead274245a7afec48e48e0ce71728dbbe8874d7fc42d8b2324cd91e3a38a30803efb263565e40fbb25177d9739f2fe465dcd658dc3d351143"}, {0x3d, 0x0, "8f77eeae26d07772311b736f7964845062e368ec79e36c54ba2825f26037f7f14ea1d0cb6451c8e340e5c7d480921ea2d5632a1c32a65216a3"}]}]}]}, 0x100}, 0x1, 0x0, 0x0, 0xa0}, 0x91) write$apparmor_current(r0, 0x0, 0xff) syz_usb_connect(0x4, 0x24, &(0x7f0000000040)=ANY=[], 0x0) 2.548439089s ago: executing program 4 (id=2649): pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000080)="6a3873ce130bc99a582b1f3a24c2147bc97092578ee1fc175b2509c494faa9f5baba491455c6c68514efe034d39bdd8bbddc86f60e", 0x35}], 0x1, 0xc6bf, 0xff) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="4d01000000000000000100e50414090b0092000080080043005ee4cc040c1e5fcc2eae7fc0dacea9ed192143db2c8381a3e349d8", 0x43, 0x81, &(0x7f0000000340)={0x11, 0x0, r1, 0x1, 0xe, 0x6, @random="645bcc77540e"}, 0x14) 2.449679506s ago: executing program 4 (id=2650): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001d906e20501dc6609b620103000109021b0001000010000904f7000176246700090582020002"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000380)=""/206, 0xce}], 0x1, 0x5ff, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x20f, 0xa}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0xc1) 567.104144ms ago: executing program 5 (id=2651): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r3 = socket(0xa, 0x1, 0x0) r4 = socket(0xa, 0x1, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x44, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000640)={0x0, @empty, @dev}, &(0x7f0000000680)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x3, 0x4, 0x0, @loopback, @mcast2, 0x8, 0x20, 0x800, 0x40}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x8, 0x8, 0x4, @dev={0xfe, 0x80, '\x00', 0x2f}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x10, 0x988, 0x8}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000001600)=ANY=[@ANYBLOB="e8030000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fddbdf250300000008000100", @ANYRES32=r9, @ANYBLOB="080102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400960f000008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="04010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004007500000008000600", @ANYRES32=r9, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400ff07000008000600", @ANYRES32=r9, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004001c040000080007000000000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000008000100", @ANYRES32=r8, @ANYBLOB="b001028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040003000000080007000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000300000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400ffff000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e670000000000000500030003000000080004001efea8ab4d3deaa622b4c9662b87fa25846f6bdd690d982e9af23c75bb0358f8edd1c36aea598c78eb5d48a076a50e6dac3281dd141ac1270ec366f58cc2b71d1dd480a34f5a54fc6967c9eba63d32fb5221f47d31baa2fa8ec9b8c4a15cfea191eaa11543760b5ee0857289b759f6880aed6c04c46fbb8976c3409a8d4ee00e2ad8bd6fa2c7", @ANYRES32=r9, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000100010040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400810000000800070000000000"], 0x3e8}, 0x1, 0x0, 0x0, 0x404c041}, 0x8810) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r13 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r13, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) sendmsg$can_raw(r13, &(0x7f0000000180)={&(0x7f00000005c0)={0x1d, r12}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@can={{}, 0xfb, 0x0, 0x4, 0x0, "500000b74b958e56"}, 0x10}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'pimreg1\x00', 0x0}) r15 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r15, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r15, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r15, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2298f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50d760048a3f6c5609063382a0c153cfdf9435e61c005", 0x48, 0x24008000, &(0x7f0000000540)={0xc9, 0x0, r16, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000900)=0x0, &(0x7f0000000940)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000011c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc070000", @ANYRES16=0x0, @ANYBLOB="100026bd7000fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="4c01028038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040002000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004001f00000008000600", @ANYRES32=0x0, @ANYRESDEC=r10, @ANYRESHEX=r5, @ANYBLOB="3c000100240001006d6f646500ce000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000008000100", @ANYRES32=0x0, @ANYBLOB="340102803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300033c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r14, @ANYRESOCT=r12, @ANYRESHEX=r2, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300c2e4080004000200000038000100240001006c625f73746174735f726566726573685f696e746572636efee3000000f0ffff0400030003000000080004008100000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000300080004000400000008000100", @ANYRES16, @ANYBLOB="b000028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400030000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYRESHEX=r2, @ANYRES32=r10, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000180000008000100", @ANYRES32=r12, @ANYBLOB="3401028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004001400000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000080000008000600", @ANYRES32=r14, @ANYRESDEC=r9, @ANYRES32=r16, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r17, @ANYBLOB="08000100", @ANYRES32=r18, @ANYBLOB="a800028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000000000080007000000000064000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003400040000000b0400020000010002020400000076ff0f0100000000ff030207040000000a001009070000006ae50609fb010000"], 0x7bc}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r5], 0x4) 268.09572ms ago: executing program 6 (id=2652): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x2, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x2, 0x2, 0x210, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x43f}}]}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ppoll(&(0x7f0000000500)=[{r1, 0x1fa}], 0x1, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f00000007c0)=ANY=[], &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "6966d85d"}]}}, 0x0}, 0x0) 141.396398ms ago: executing program 4 (id=2653): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x0) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, 0x0) 84.00253ms ago: executing program 4 (id=2654): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = fcntl$dupfd(r1, 0x406, r1) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f00000002c0)=""/153) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0x401070c9, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010411000000000000000a0000040900010073797a3100000073797a310000000008000a40fffffffc210011800e000100636f6e6e6c696d69fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900", 0x4}], 0x1}, 0x0) write$tun(r1, &(0x7f00000000c0)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0xfff9, 0x0, 0x27}, @mpls={[], @generic="89444fd80b6fa4af824158d3ac3cdccccdd9540fd5a6bba7a03dd0aa1a42619a98da6525489707f1f2ee98d9e14e6f227ecc4dbd6b2dfc9b26132a7e33971a27cb83326b4ba2a7107ad4c37f95a9cb752b1a"}}, 0x60) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 0s ago: executing program 5 (id=2655): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) fremovexattr(0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): t's busy [ 515.893278][T13420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.951090][T10761] playstation 0003:054C:0DF2.003E: unknown main item tag 0x0 [ 515.958744][T10761] playstation 0003:054C:0DF2.003E: unknown main item tag 0x0 [ 515.972181][T10761] playstation 0003:054C:0DF2.003E: unknown main item tag 0x0 [ 515.983411][T10761] playstation 0003:054C:0DF2.003E: unknown main item tag 0x0 [ 515.996935][T10761] playstation 0003:054C:0DF2.003E: unknown main item tag 0x0 [ 516.001498][T13422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.013392][T10761] playstation 0003:054C:0DF2.003E: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.6-1/input0 [ 516.030653][T13422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.050606][T13422] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2183'. [ 516.200044][T10761] playstation 0003:054C:0DF2.003E: Failed to retrieve feature with reportID 9: -71 [ 516.214480][T10761] playstation 0003:054C:0DF2.003E: Failed to retrieve DualSense pairing info: -71 [ 516.232825][T10761] playstation 0003:054C:0DF2.003E: Failed to get MAC address from DualSense [ 516.244358][T10761] playstation 0003:054C:0DF2.003E: Failed to create dualsense. [ 516.263047][T10761] playstation 0003:054C:0DF2.003E: probe with driver playstation failed with error -71 [ 516.282465][T10761] usb 7-1: USB disconnect, device number 20 [ 516.685978][T13446] program syz.4.2193 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 516.909205][T13454] input input77: cannot allocate more than FF_MAX_EFFECTS effects [ 517.075289][T10768] vhci_hcd: vhci_device speed not set [ 517.122849][T13404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.143315][T13404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.347295][ T5990] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 517.528703][T13477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.534085][ T5990] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 517.541253][T13477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.567837][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 517.575484][ T5990] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 517.596089][ T9] usb 2-1: USB disconnect, device number 73 [ 517.598052][ T5990] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 517.632851][ T5990] usb 7-1: config 220 has no interface number 2 [ 517.650152][ T5990] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 517.670095][ T5990] usb 7-1: config 220 interface 0 has no altsetting 0 [ 517.677056][ T5990] usb 7-1: config 220 interface 76 has no altsetting 0 [ 517.683935][ T5990] usb 7-1: config 220 interface 1 has no altsetting 0 [ 517.700787][ T5990] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 517.710992][ T5990] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.722091][ T5990] usb 7-1: Product: syz [ 517.727140][ T5990] usb 7-1: Manufacturer: syz [ 517.731758][ T5990] usb 7-1: SerialNumber: syz [ 517.998757][ T5990] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 518.010050][ T5990] usb 7-1: No valid video chain found. [ 518.016399][ T5990] usb 7-1: selecting invalid altsetting 0 [ 518.050906][ T5990] usb 7-1: selecting invalid altsetting 0 [ 518.061016][ T5990] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 518.095012][ T5990] usb 7-1: USB disconnect, device number 21 [ 518.354355][ T5868] Bluetooth: hci5: unexpected event for opcode 0x0002 [ 518.354766][T13493] PKCS8: Unsupported PKCS#8 version [ 518.362228][T13497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.405819][T13497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.412161][T13493] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 518.426776][T13493] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 518.471326][T13493] overlayfs: failed to set uuid (163/file1, err=-13); falling back to uuid=null. [ 518.520807][T13502] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2204'. [ 518.983875][ T5937] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 519.160340][ T5937] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 519.178393][ T5937] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.231235][ T5937] usb 7-1: config 0 descriptor?? [ 519.287123][ T5937] cp210x 7-1:0.0: cp210x converter detected [ 519.461170][T13510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.471356][T13510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.735745][ T5937] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 519.744467][T10768] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 519.746583][ T5937] cp210x 7-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 519.760052][ T5937] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 519.772166][ T5937] usb 7-1: cp210x converter now attached to ttyUSB0 [ 519.793782][ T5937] usb 7-1: USB disconnect, device number 22 [ 519.809873][ T5937] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 519.818833][ T5937] cp210x 7-1:0.0: device disconnected [ 519.903275][T10768] usb 2-1: Using ep0 maxpacket: 32 [ 519.911146][T10768] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 519.919538][T10768] usb 2-1: config 0 has no interface number 0 [ 519.925708][T10768] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 519.936120][T10768] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 519.946349][T10768] usb 2-1: config 0 interface 126 has no altsetting 0 [ 519.957141][T10768] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 519.966292][T10768] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.975117][T10768] usb 2-1: Product: syz [ 519.979292][T10768] usb 2-1: Manufacturer: syz [ 519.984168][T10768] usb 2-1: SerialNumber: syz [ 519.992587][T10768] usb 2-1: config 0 descriptor?? [ 519.999796][T13538] raw-gadget.6 gadget.1: fail, usb_ep_enable returned -22 [ 520.008611][T13538] raw-gadget.6 gadget.1: fail, usb_ep_enable returned -22 [ 520.223686][T10768] ir_usb 2-1:0.126: IR Dongle converter detected [ 520.258126][T10768] usb 2-1: IRDA class descriptor not found, device not bound [ 520.291635][T10768] usb 2-1: USB disconnect, device number 74 [ 520.355134][T13543] fuse: Unknown parameter '2™α?m+˜' [ 520.446787][ T30] audit: type=1326 audit(6048938846.159:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13546 comm="syz.1.2216" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f986798eba9 code=0x0 [ 520.634169][ T5990] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 520.796576][ T5990] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 520.820307][ T5990] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 520.829599][ T5990] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 520.857783][ T5990] usb 7-1: config 220 has no interface number 2 [ 520.865760][ T5990] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 520.889969][ T5990] usb 7-1: config 220 interface 0 has no altsetting 0 [ 520.897544][ T5990] usb 7-1: config 220 interface 76 has no altsetting 0 [ 520.916585][ T5990] usb 7-1: config 220 interface 1 has no altsetting 0 [ 520.934445][ T5990] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 520.945772][ T5990] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.954433][ T5990] usb 7-1: Product: syz [ 520.958938][ T5990] usb 7-1: Manufacturer: syz [ 520.974446][ T5990] usb 7-1: SerialNumber: syz [ 521.191922][ T5990] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 521.198527][ T5990] usb 7-1: No valid video chain found. [ 521.204732][T10768] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 521.212502][ T5990] usb 7-1: selecting invalid altsetting 0 [ 521.230000][ T5990] usb 7-1: selecting invalid altsetting 0 [ 521.236196][ T5990] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 521.251361][ T5990] usb 7-1: USB disconnect, device number 23 [ 521.365311][T10768] usb 2-1: config 0 has an invalid interface number: 139 but max is 0 [ 521.373604][T10768] usb 2-1: config 0 has no interface number 0 [ 521.379717][T10768] usb 2-1: config 0 interface 139 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 521.392054][T10768] usb 2-1: config 0 interface 139 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 521.404485][T10768] usb 2-1: config 0 interface 139 altsetting 0 endpoint 0x8D has invalid maxpacket 14158, setting to 64 [ 521.427921][T10768] usb 2-1: config 0 interface 139 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 521.441131][ T30] audit: type=1326 audit(6048938847.139:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13571 comm="syz.4.2221" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b2318eba9 code=0x0 [ 521.468488][ T30] audit: type=1326 audit(6048938847.139:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13571 comm="syz.4.2221" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b2318eba9 code=0x0 [ 521.506527][T10768] usb 2-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6 [ 521.519383][T10768] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.528946][T10768] usb 2-1: Product: syz [ 521.538246][T10768] usb 2-1: Manufacturer: syz [ 521.543601][T10768] usb 2-1: SerialNumber: syz [ 521.563328][T10768] usb 2-1: config 0 descriptor?? [ 521.569217][T13569] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 521.578438][T13569] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 521.794166][T10768] mct_u232 2-1:0.139: MCT U232 converter detected [ 521.816205][T10768] usb 2-1: MCT U232 converter now attached to ttyUSB0 [ 521.864927][T10768] usb 2-1: USB disconnect, device number 75 [ 521.879983][T10768] mct_u232 ttyUSB0: MCT U232 converter now disconnected from ttyUSB0 [ 521.898720][T10768] mct_u232 2-1:0.139: device disconnected [ 522.052317][ T10] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 522.212167][ T10] usb 7-1: device descriptor read/64, error -71 [ 522.472217][ T10] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 522.623643][ T10] usb 7-1: device descriptor read/64, error -71 [ 522.758002][ T10] usb usb7-port1: attempt power cycle [ 523.131652][ T10] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 523.152435][ T10] usb 7-1: device descriptor read/8, error -71 [ 523.357063][T13591] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 523.365536][T13591] overlayfs: failed to set xattr on upper [ 523.374794][T13591] overlayfs: ...falling back to redirect_dir=nofollow. [ 523.382276][T13591] overlayfs: ...falling back to metacopy=off. [ 523.391005][T13591] overlayfs: ...falling back to index=off. [ 523.397449][T13591] overlayfs: ...falling back to uuid=null. [ 523.406992][ T10] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 523.429120][T13591] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 523.442984][ T10] usb 7-1: device descriptor read/8, error -71 [ 523.453858][T13591] overlayfs: failed to set xattr on upper [ 523.459720][T13591] overlayfs: ...falling back to redirect_dir=nofollow. [ 523.482444][T13591] overlayfs: ...falling back to metacopy=off. [ 523.498651][T13599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.501151][T13591] overlayfs: ...falling back to index=off. [ 523.519256][T13599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.530287][T13591] overlayfs: ...falling back to uuid=null. [ 523.562042][ T10] usb usb7-port1: unable to enumerate USB device [ 523.881238][ T10] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 524.054814][ T10] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 524.063256][ T10] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 524.074666][ T10] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 524.085580][ T10] usb 2-1: config 220 has no interface number 2 [ 524.092052][ T10] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 524.105397][ T10] usb 2-1: config 220 interface 0 has no altsetting 0 [ 524.112328][ T10] usb 2-1: config 220 interface 76 has no altsetting 0 [ 524.119273][ T10] usb 2-1: config 220 interface 1 has no altsetting 0 [ 524.136639][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 524.146114][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.154306][ T10] usb 2-1: Product: syz [ 524.158577][ T10] usb 2-1: Manufacturer: syz [ 524.165069][ T10] usb 2-1: SerialNumber: syz [ 524.205412][T13605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.214608][T13605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.400884][ T10] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 524.408997][ T10] usb 2-1: No valid video chain found. [ 524.414992][ T10] usb 2-1: selecting invalid altsetting 0 [ 524.432875][ T10] usb 2-1: selecting invalid altsetting 0 [ 524.438858][ T10] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 524.453578][ T10] usb 2-1: USB disconnect, device number 76 [ 524.777055][T13607] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2232'. [ 524.794699][T13609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.804505][T13609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.813925][T13609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.828709][T13609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.848264][T13609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.859379][T13609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.874230][T13609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.893660][T13609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.925249][T13609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.947435][T13609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.961951][T13609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.974164][T13609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.288619][T10763] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 525.484969][T10763] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 525.497057][T10763] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.523665][T10763] usb 7-1: Product: syz [ 525.534298][T10763] usb 7-1: Manufacturer: syz [ 525.546900][T10763] usb 7-1: SerialNumber: syz [ 525.584858][T10763] usb 7-1: config 0 descriptor?? [ 525.638759][T13632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.648246][T13632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.803171][T10763] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 525.900461][ T10] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 526.064840][ T10] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 526.073370][ T10] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 526.083823][ T10] usb 2-1: config 220 has no interface number 2 [ 526.090286][ T10] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 526.103658][ T10] usb 2-1: config 220 interface 0 has no altsetting 0 [ 526.110576][ T10] usb 2-1: config 220 interface 76 has no altsetting 0 [ 526.117813][ T10] usb 2-1: config 220 interface 1 has no altsetting 0 [ 526.127064][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 526.137105][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.145354][ T10] usb 2-1: Product: syz [ 526.149623][ T10] usb 2-1: Manufacturer: syz [ 526.154332][ T10] usb 2-1: SerialNumber: syz [ 526.218129][T13634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.229059][T13634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.247208][T13634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.259351][T13634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.318956][T13639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.327988][T13639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.378021][ T10] usb 2-1: selecting invalid altsetting 0 [ 526.384395][ T10] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 526.391720][ T10] usb 2-1: No valid video chain found. [ 526.406831][ T10] usb 2-1: selecting invalid altsetting 0 [ 526.413279][ T10] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 526.427890][ T10] usb 2-1: USB disconnect, device number 77 [ 526.978680][T13646] net_ratelimit: 24 callbacks suppressed [ 526.978779][T13646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 527.030458][T13611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.040985][T13611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.264827][T10763] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 527.280126][T10763] usb 7-1: USB disconnect, device number 28 [ 527.489375][T10768] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 527.623686][T13664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.634551][T13664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.640352][T10768] usb 2-1: Using ep0 maxpacket: 8 [ 527.657353][T10768] usb 2-1: unable to get BOS descriptor or descriptor too short [ 527.666268][T10768] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 527.678134][T10768] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 527.685906][T10768] usb 2-1: can't read configurations, error -61 [ 527.763742][T13668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.773489][T13668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.819872][T10768] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 527.989281][T10768] usb 2-1: Using ep0 maxpacket: 8 [ 527.997573][T10768] usb 2-1: unable to get BOS descriptor or descriptor too short [ 528.006194][T10768] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 528.015823][T10768] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 528.023530][T10768] usb 2-1: can't read configurations, error -61 [ 528.030446][T10768] usb usb2-port1: attempt power cycle [ 528.179001][ T24] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 528.332808][ T24] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 528.341218][ T24] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 528.356406][ T24] usb 7-1: config 220 has no interface number 2 [ 528.366543][ T24] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 528.383649][T10768] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 528.401182][ T24] usb 7-1: config 220 interface 0 has no altsetting 0 [ 528.407987][ T24] usb 7-1: config 220 interface 76 has no altsetting 0 [ 528.416233][ T24] usb 7-1: config 220 interface 1 has no altsetting 0 [ 528.440403][T10768] usb 2-1: Using ep0 maxpacket: 8 [ 528.446166][ T24] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 528.457428][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.473515][ T24] usb 7-1: Product: syz [ 528.477729][ T24] usb 7-1: Manufacturer: syz [ 528.483338][ T24] usb 7-1: SerialNumber: syz [ 528.489787][T10768] usb 2-1: unable to get BOS descriptor or descriptor too short [ 528.498037][T10768] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 528.520444][T13680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.536747][T10768] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 528.544860][T10768] usb 2-1: can't read configurations, error -61 [ 528.556560][T13680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.678809][T10768] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 528.702189][T10768] usb 2-1: Using ep0 maxpacket: 8 [ 528.712163][T10768] usb 2-1: unable to get BOS descriptor or descriptor too short [ 528.726897][T10768] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 528.738355][ T24] usb 7-1: selecting invalid altsetting 0 [ 528.744955][ T24] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 528.751510][ T24] usb 7-1: No valid video chain found. [ 528.759924][T10768] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 528.771641][ T24] usb 7-1: selecting invalid altsetting 0 [ 528.777951][ T24] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 528.787220][T10768] usb 2-1: can't read configurations, error -61 [ 528.795019][T10768] usb usb2-port1: unable to enumerate USB device [ 528.813967][ T24] usb 7-1: USB disconnect, device number 29 [ 529.554102][T13687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 529.578417][T10763] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 529.696045][T13697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 529.758320][T10763] usb 7-1: Using ep0 maxpacket: 32 [ 529.766577][T10763] usb 7-1: config 0 has an invalid interface number: 108 but max is 0 [ 529.775243][T10763] usb 7-1: config 0 has no interface number 0 [ 529.781473][T10763] usb 7-1: config 0 interface 108 has no altsetting 0 [ 529.791449][T10763] usb 7-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=65.cd [ 529.802953][T10763] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.811138][T10763] usb 7-1: Product: syz [ 529.816104][T10763] usb 7-1: Manufacturer: syz [ 529.820926][T10763] usb 7-1: SerialNumber: syz [ 529.828642][T10763] usb 7-1: config 0 descriptor?? [ 529.838198][T10763] gspca_main: spca506-2.14.0 probing 99fa:8988 [ 530.146587][T13700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.161877][T13700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.175124][T13700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.188796][T13700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.190182][T10763] usb 7-1: USB disconnect, device number 30 [ 530.515208][T13706] netlink: 'syz.1.2261': attribute type 10 has an invalid length. [ 530.526197][T13706] batadv0: left allmulticast mode [ 530.547423][T13706] batadv0: left promiscuous mode [ 530.565939][T13706] bridge0: port 3(batadv0) entered disabled state [ 530.627590][T13706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.659846][T13706] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 530.785061][ T5990] hid-generic 0003:0004:0000.003F: unknown main item tag 0x0 [ 530.816104][ T5990] hid-generic 0003:0004:0000.003F: unknown main item tag 0x0 [ 530.845171][ T5990] hid-generic 0003:0004:0000.003F: unknown main item tag 0x0 [ 530.856004][ T5990] hid-generic 0003:0004:0000.003F: unknown main item tag 0x0 [ 530.870376][ T5990] hid-generic 0003:0004:0000.003F: unknown main item tag 0x0 [ 530.879296][ T5990] hid-generic 0003:0004:0000.003F: unknown main item tag 0x0 [ 530.886914][ T5990] hid-generic 0003:0004:0000.003F: unknown main item tag 0x0 [ 530.899855][ T5990] hid-generic 0003:0004:0000.003F: unknown main item tag 0x0 [ 530.913218][ T5990] hid-generic 0003:0004:0000.003F: unknown main item tag 0x0 [ 530.925932][ T5990] hid-generic 0003:0004:0000.003F: unknown main item tag 0x0 [ 530.951704][ T5990] hid-generic 0003:0004:0000.003F: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 531.456584][T13747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.480089][T13747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.846746][T13761] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2271'. [ 532.177063][ T10] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 532.237064][ T5990] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 532.316876][ T10] usb 2-1: device descriptor read/64, error -71 [ 532.390942][ T5990] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.400823][ T5990] usb 7-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 532.412965][ T5990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.428000][ T5990] usb 7-1: config 0 descriptor?? [ 532.531320][T13770] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 532.557386][ T10] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 532.716805][ T10] usb 2-1: device descriptor read/64, error -71 [ 532.784390][T13784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.794481][T13784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.837975][ T10] usb usb2-port1: attempt power cycle [ 532.854865][ T5990] nintendo 0003:057E:200E.0040: unbalanced delimiter at end of report description [ 532.869789][ T5990] nintendo 0003:057E:200E.0040: HID parse failed [ 532.889728][ T5990] nintendo 0003:057E:200E.0040: probe - fail = -22 [ 532.896399][ T5990] nintendo 0003:057E:200E.0040: probe with driver nintendo failed with error -22 [ 533.051028][ T5990] usb 7-1: USB disconnect, device number 31 [ 533.186531][ T10] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 533.207461][ T10] usb 2-1: device descriptor read/8, error -71 [ 533.432845][T13789] fuse: blksize only supported for fuseblk [ 533.466439][ T10] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 533.497318][ T10] usb 2-1: device descriptor read/8, error -71 [ 533.616884][ T10] usb usb2-port1: unable to enumerate USB device [ 534.176947][ T10] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 534.358673][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.363278][T13806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.379409][ T10] usb 7-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 534.388102][T13806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.409533][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.423797][ T10] usb 7-1: config 0 descriptor?? [ 534.660140][ T10] nintendo 0003:057E:200E.0041: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.6-1/input0 [ 534.739264][ T10] nintendo 0003:057E:200E.0041: Failed charging grip handshake [ 534.748987][ T10] nintendo 0003:057E:200E.0041: Failed to initialize controller; ret=-110 [ 534.772391][ T10] nintendo 0003:057E:200E.0041: probe - fail = -110 [ 534.779404][ T10] nintendo 0003:057E:200E.0041: probe with driver nintendo failed with error -110 [ 534.982807][T13819] netlink: 'syz.4.2286': attribute type 13 has an invalid length. [ 535.285900][ T10] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 535.468370][ T10] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 535.477093][ T10] usb 2-1: config 0 has no interface number 0 [ 535.487541][ T10] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 535.497777][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.506187][ T10] usb 2-1: Product: syz [ 535.510513][ T10] usb 2-1: Manufacturer: syz [ 535.515155][ T10] usb 2-1: SerialNumber: syz [ 535.530799][ T10] usb 2-1: config 0 descriptor?? [ 535.753312][T13821] syzkaller1: entered promiscuous mode [ 535.758915][T13821] syzkaller1: entered allmulticast mode [ 535.993757][T13830] syzkaller1: entered promiscuous mode [ 535.999957][T13830] syzkaller1: entered allmulticast mode [ 536.009008][T13829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.020008][T13829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.030277][T13829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.043302][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 536.045764][T13829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.112065][ T10] usb 2-1: USB disconnect, device number 86 [ 536.953075][ T24] usb 7-1: USB disconnect, device number 32 [ 537.319471][T13852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.332684][T13852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.394473][ T24] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 537.554357][ T24] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 537.562727][ T24] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 537.571748][ T24] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 537.583433][ T24] usb 7-1: config 220 has no interface number 2 [ 537.590101][ T24] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 537.608128][ T24] usb 7-1: config 220 interface 0 has no altsetting 0 [ 537.644300][ T24] usb 7-1: config 220 interface 76 has no altsetting 0 [ 537.659013][ T24] usb 7-1: config 220 interface 1 has no altsetting 0 [ 537.682429][ T24] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 537.692706][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.728875][ T24] usb 7-1: Product: syz [ 537.744857][ T24] usb 7-1: Manufacturer: syz [ 537.749651][ T24] usb 7-1: SerialNumber: syz [ 537.989408][ T24] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 538.015900][ T24] usb 7-1: No valid video chain found. [ 538.074235][ T24] usb 7-1: selecting invalid altsetting 0 [ 538.120206][ T24] usb 7-1: selecting invalid altsetting 0 [ 538.136313][ T24] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 538.170766][ T24] usb 7-1: USB disconnect, device number 33 [ 538.496656][T13871] PM: Enabling pm_trace changes system date and time during resume. [ 538.496656][T13871] PM: Correct system time has to be restored manually after resume. [ 538.649897][T13871] wlan1 speed is unknown, defaulting to 1000 [ 538.924237][ T10] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 539.122522][ T10] usb 7-1: config 7 has an invalid interface number: 192 but max is 0 [ 539.150136][ T10] usb 7-1: config 7 has no interface number 0 [ 539.160083][ T10] usb 7-1: config 7 interface 192 has no altsetting 0 [ 539.190817][ T10] usb 7-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=d4.8d [ 539.200078][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.210528][ T10] usb 7-1: Product: syz [ 539.214992][ T10] usb 7-1: Manufacturer: syz [ 539.219585][ T10] usb 7-1: SerialNumber: syz [ 539.517161][ T10] usb 7-1: USB disconnect, device number 34 [ 539.943214][ T9] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 540.019060][T13905] tipc: Started in network mode [ 540.028559][T13905] tipc: Node identity 7f000001, cluster identity 4711 [ 540.037084][T13905] tipc: Enabling of bearer rejected, failed to enable media [ 540.059964][T13905] tipc: Enabling of bearer rejected, failed to enable media [ 540.123610][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 540.142296][T13908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.155880][T13908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.161465][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 540.179333][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 540.190414][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 540.200630][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 540.212348][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 540.259313][ T9] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 540.291600][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.300857][ T9] usb 2-1: Product: syz [ 540.306245][ T9] usb 2-1: Manufacturer: syz [ 540.311029][ T9] usb 2-1: SerialNumber: syz [ 540.336185][ T9] usb 2-1: config 0 descriptor?? [ 540.522287][T13917] 9pnet_fd: Insufficient options for proto=fd [ 540.603730][ T5990] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 540.652799][T13918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.671675][T13918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.795473][ T5990] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 540.818438][ T5990] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 540.855898][ T5990] usb 7-1: config 220 has no interface number 2 [ 540.862261][ T5990] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 540.872717][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 540.889566][T13923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.918249][T13923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.926667][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 540.935390][ T5990] usb 7-1: config 220 interface 0 has no altsetting 0 [ 540.935836][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 540.949743][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 540.957891][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 540.966104][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 540.984974][ T5990] usb 7-1: config 220 interface 76 has no altsetting 0 [ 540.990887][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 540.991904][ T5990] usb 7-1: config 220 interface 1 has no altsetting 0 [ 540.992849][T13922] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2317'. [ 541.013235][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 541.037221][ T5990] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 541.051520][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 541.082621][ T5990] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.082706][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 541.090690][ T5990] usb 7-1: Product: syz [ 541.090713][ T5990] usb 7-1: Manufacturer: syz [ 541.090728][ T5990] usb 7-1: SerialNumber: syz [ 541.194855][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 541.202775][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 541.223093][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 541.240078][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 541.260666][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 541.272963][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 541.290729][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 541.303053][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 541.320577][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 541.333439][ T5990] usb 7-1: selecting invalid altsetting 0 [ 541.341400][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 541.347630][ T9] input input78: Timeout waiting for response from device. [ 541.358728][ T5990] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 541.389610][ T5990] usb 7-1: No valid video chain found. [ 541.413162][ T9] usb 2-1: USB disconnect, device number 87 [ 541.449623][ T5990] usb 7-1: selecting invalid altsetting 0 [ 541.487906][ T5990] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 541.537301][ T5990] usb 7-1: USB disconnect, device number 35 [ 541.778218][T13935] kAFS: No cell specified [ 541.791316][T13936] kAFS: No cell specified [ 541.797109][ T9] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 541.952434][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 541.970896][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219 [ 541.985774][ T9] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 541.995784][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.006111][T13945] FAULT_INJECTION: forcing a failure. [ 542.006111][T13945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.013905][ T9] usb 2-1: Product: syz [ 542.021302][T13945] CPU: 1 UID: 0 PID: 13945 Comm: syz.6.2325 Not tainted syzkaller #0 PREEMPT(full) [ 542.021329][T13945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 542.021342][T13945] Call Trace: [ 542.021349][T13945] [ 542.021356][T13945] dump_stack_lvl+0x189/0x250 [ 542.021379][T13945] ? __pfx____ratelimit+0x10/0x10 [ 542.021407][T13945] ? __pfx_dump_stack_lvl+0x10/0x10 [ 542.021426][T13945] ? __pfx__printk+0x10/0x10 [ 542.021453][T13945] ? __might_fault+0xb0/0x130 [ 542.021485][T13945] should_fail_ex+0x414/0x560 [ 542.021513][T13945] _copy_from_user+0x2d/0xb0 [ 542.021533][T13945] ___sys_sendmsg+0x158/0x2a0 [ 542.021556][T13945] ? __pfx____sys_sendmsg+0x10/0x10 [ 542.021612][T13945] ? __fget_files+0x2a/0x420 [ 542.021637][T13945] ? __fget_files+0x3a0/0x420 [ 542.021673][T13945] __x64_sys_sendmsg+0x19b/0x260 [ 542.021696][T13945] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 542.021727][T13945] ? __pfx_ksys_write+0x10/0x10 [ 542.021759][T13945] ? do_syscall_64+0xbe/0xfa0 [ 542.021791][T13945] do_syscall_64+0xfa/0xfa0 [ 542.021817][T13945] ? lockdep_hardirqs_on+0x9c/0x150 [ 542.021845][T13945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.021864][T13945] ? clear_bhb_loop+0x60/0xb0 [ 542.021888][T13945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.021913][T13945] RIP: 0033:0x7fdbcff8eba9 [ 542.021931][T13945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.021952][T13945] RSP: 002b:00007fdbd0e8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 542.021974][T13945] RAX: ffffffffffffffda RBX: 00007fdbd01d5fa0 RCX: 00007fdbcff8eba9 [ 542.021989][T13945] RDX: 0000000000008004 RSI: 0000200000000180 RDI: 000000000000000a [ 542.022002][T13945] RBP: 00007fdbd0e8e090 R08: 0000000000000000 R09: 0000000000000000 [ 542.022014][T13945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.022027][T13945] R13: 00007fdbd01d6038 R14: 00007fdbd01d5fa0 R15: 00007ffd8fe5bc88 [ 542.022058][T13945] [ 542.208813][T13951] program syz.6.2327 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 542.211423][ T9] usb 2-1: Manufacturer: syz [ 542.243969][ T9] usb 2-1: SerialNumber: syz [ 542.253331][ T9] usb 2-1: config 0 descriptor?? [ 542.259432][T13930] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 542.275001][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 542.279082][T13951] loop3: detected capacity change from 0 to 1 [ 542.302184][T12334] Dev loop3: unable to read RDB block 1 [ 542.308037][T12334] loop3: unable to read partition table [ 542.314703][T12334] loop3: partition table beyond EOD, truncated [ 542.324942][T13951] Dev loop3: unable to read RDB block 1 [ 542.330715][T13951] loop3: unable to read partition table [ 542.337265][T13951] loop3: partition table beyond EOD, truncated [ 542.343654][T13951] loop_reread_partitions: partition scan of loop3 (ώθ’«xό—ŸΡΰ– ) failed (rc=-5) [ 542.724127][ T9] usb 2-1: USB disconnect, device number 88 [ 542.775349][ T5990] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 542.791050][T11566] udevd[11566]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 542.884541][T13959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.893729][T13959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.954341][ T5990] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 542.963031][ T5990] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.974905][ T5990] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 542.984053][ T5990] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 542.993425][ T5990] usb 7-1: Manufacturer: syz [ 543.002382][ T5990] usb 7-1: config 0 descriptor?? [ 543.071761][ T5990] rc_core: IR keymap rc-hauppauge not found [ 543.077740][ T5990] Registered IR keymap rc-empty [ 543.085459][ T5990] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 543.098442][ T5990] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input79 [ 543.562048][ T5990] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 543.624495][T13957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.638433][T13957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.679039][T10761] usb 7-1: USB disconnect, device number 36 [ 543.694109][ T5990] usb 2-1: device descriptor read/64, error -71 [ 543.786952][T13976] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2333'. [ 543.845845][T13978] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 543.923694][T13978] netlink: 9088 bytes leftover after parsing attributes in process `syz.4.2334'. [ 543.971192][ T5990] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 544.007508][T13985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.017088][T13985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.050512][T13985] overlayfs: missing 'lowerdir' [ 544.067941][T13985] bcm5974 5-1:1.0: could not read from device [ 544.111310][ T5990] usb 2-1: device descriptor read/64, error -71 [ 544.145135][T13988] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2336'. [ 544.231487][ T5990] usb usb2-port1: attempt power cycle [ 544.440921][T10768] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 544.573624][ T5990] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 544.603563][T10768] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 544.612129][T10768] usb 7-1: config 0 has no interface number 0 [ 544.618652][ T5990] usb 2-1: device descriptor read/8, error -71 [ 544.628171][T10768] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 544.637451][T10768] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.646028][T10768] usb 7-1: Product: syz [ 544.650216][T10768] usb 7-1: Manufacturer: syz [ 544.654885][T10768] usb 7-1: SerialNumber: syz [ 544.664999][T10768] usb 7-1: config 0 descriptor?? [ 544.862869][ T5990] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 544.878654][T10768] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 544.894531][ T5990] usb 2-1: device descriptor read/8, error -71 [ 544.902556][T10768] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 544.914053][T10768] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 544.922221][T10768] usb 7-1: media controller created [ 544.964384][T10768] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 545.021056][ T5990] usb usb2-port1: unable to enumerate USB device [ 545.080648][T10768] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 545.121755][T10768] usb 7-1: USB disconnect, device number 37 [ 545.890175][ T9] usb 7-1: new full-speed USB device number 38 using dummy_hcd [ 546.066385][ T9] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 546.076362][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.084935][ T9] usb 7-1: Product: syz [ 546.089724][ T9] usb 7-1: Manufacturer: syz [ 546.094474][ T9] usb 7-1: SerialNumber: syz [ 546.102680][ T9] usb 7-1: config 0 descriptor?? [ 546.313783][ T9] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 546.611321][ T5990] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 546.769831][ T5990] usb 2-1: Using ep0 maxpacket: 32 [ 546.776819][ T5990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.788550][ T5990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.798465][ T5990] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 546.808447][ T5990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.819166][ T5990] usb 2-1: config 0 descriptor?? [ 546.942499][T14001] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 547.188771][T14016] ALSA: mixer_oss: invalid OSS volume '' [ 547.245224][T13999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.245910][T13999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.395532][ T5990] usbhid 2-1:0.0: can't add hid device: -71 [ 547.419874][ T5990] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 547.434712][ T5990] usb 2-1: USB disconnect, device number 93 [ 547.541745][T13997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.557214][T13997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.697822][T14036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.711983][T14036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.723239][T14036] netlink: 'syz.4.2349': attribute type 1 has an invalid length. [ 547.732776][T14036] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2349'. [ 547.952352][T14038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2350'. [ 547.976787][ T9] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 548.013978][ T9] usb 7-1: USB disconnect, device number 38 [ 548.145296][T14044] FAULT_INJECTION: forcing a failure. [ 548.145296][T14044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 548.158755][T14044] CPU: 0 UID: 0 PID: 14044 Comm: syz.5.2352 Not tainted syzkaller #0 PREEMPT(full) [ 548.158781][T14044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 548.158794][T14044] Call Trace: [ 548.158802][T14044] [ 548.158810][T14044] dump_stack_lvl+0x189/0x250 [ 548.158833][T14044] ? __pfx____ratelimit+0x10/0x10 [ 548.158864][T14044] ? __pfx_dump_stack_lvl+0x10/0x10 [ 548.158880][T14044] ? __pfx__printk+0x10/0x10 [ 548.158905][T14044] ? __might_fault+0xb0/0x130 [ 548.158934][T14044] should_fail_ex+0x414/0x560 [ 548.158960][T14044] _copy_from_iter+0x1de/0x1790 [ 548.158992][T14044] ? rcu_is_watching+0x15/0xb0 [ 548.159019][T14044] ? kmalloc_reserve+0xbd/0x290 [ 548.159048][T14044] ? __pfx__copy_from_iter+0x10/0x10 [ 548.159076][T14044] ? __build_skb_around+0x262/0x3f0 [ 548.159108][T14044] ? netlink_sendmsg+0x642/0xb30 [ 548.159123][T14044] ? skb_put+0x11b/0x210 [ 548.159142][T14044] netlink_sendmsg+0x6b2/0xb30 [ 548.159168][T14044] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.159188][T14044] ? aa_sock_msg_perm+0xf1/0x1d0 [ 548.159214][T14044] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 548.159238][T14044] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.159259][T14044] __sock_sendmsg+0x219/0x270 [ 548.159288][T14044] ____sys_sendmsg+0x505/0x830 [ 548.159312][T14044] ? __pfx_____sys_sendmsg+0x10/0x10 [ 548.159342][T14044] ? import_iovec+0x74/0xa0 [ 548.159364][T14044] ___sys_sendmsg+0x21f/0x2a0 [ 548.159389][T14044] ? __pfx____sys_sendmsg+0x10/0x10 [ 548.159444][T14044] ? __fget_files+0x2a/0x420 [ 548.159471][T14044] ? __fget_files+0x3a0/0x420 [ 548.159509][T14044] __x64_sys_sendmsg+0x19b/0x260 [ 548.159534][T14044] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 548.159573][T14044] ? __pfx_ksys_write+0x10/0x10 [ 548.159601][T14044] ? do_syscall_64+0xbe/0xfa0 [ 548.159635][T14044] do_syscall_64+0xfa/0xfa0 [ 548.159664][T14044] ? lockdep_hardirqs_on+0x9c/0x150 [ 548.159694][T14044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.159715][T14044] ? clear_bhb_loop+0x60/0xb0 [ 548.159740][T14044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.159761][T14044] RIP: 0033:0x7fbe4db8eba9 [ 548.159780][T14044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.159799][T14044] RSP: 002b:00007fbe4ea6b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 548.159822][T14044] RAX: ffffffffffffffda RBX: 00007fbe4ddd5fa0 RCX: 00007fbe4db8eba9 [ 548.159838][T14044] RDX: 0000000000008004 RSI: 0000200000000180 RDI: 000000000000000a [ 548.159853][T14044] RBP: 00007fbe4ea6b090 R08: 0000000000000000 R09: 0000000000000000 [ 548.159867][T14044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.159880][T14044] R13: 00007fbe4ddd6038 R14: 00007fbe4ddd5fa0 R15: 00007ffefe2195e8 [ 548.159915][T14044] [ 548.764344][T14061] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 548.797721][T14061] syzkaller1: entered promiscuous mode [ 548.804764][T14061] syzkaller1: entered allmulticast mode [ 549.208531][ T9] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 549.358391][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 549.366170][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 549.381789][ T9] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 549.391054][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.408140][ T9] usb 7-1: Product: syz [ 549.417611][ T9] usb 7-1: Manufacturer: syz [ 549.423634][ T9] usb 7-1: SerialNumber: syz [ 549.449345][ T9] usb 7-1: config 0 descriptor?? [ 549.500499][ T9] dm9601 7-1:0.0: probe with driver dm9601 failed with error -22 [ 549.516782][ T9] sr9700 7-1:0.0: probe with driver sr9700 failed with error -22 [ 549.549633][T14072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.560972][T14072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.573473][ T30] audit: type=1326 audit(6048938875.303:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14071 comm="syz.4.2359" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5b2318eba9 code=0x0 [ 549.704920][ T5990] usb 7-1: USB disconnect, device number 39 [ 549.848270][ T9] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 550.033956][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 550.046403][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.054643][ T9] usb 2-1: Product: syz [ 550.059038][ T9] usb 2-1: Manufacturer: syz [ 550.063975][ T9] usb 2-1: SerialNumber: syz [ 550.073900][ T9] usb 2-1: config 0 descriptor?? [ 550.282364][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 551.502718][T14074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.511710][T14074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.597371][ T5990] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 551.757696][ T5990] usb 7-1: Using ep0 maxpacket: 16 [ 551.770812][ T5990] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.781875][ T5990] usb 7-1: config 0 interface 0 has no altsetting 0 [ 551.793247][ T5990] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 551.803270][ T5990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.817050][ T5990] usb 7-1: config 0 descriptor?? [ 551.845119][T14093] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2366'. [ 551.955230][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 551.971990][ T9] usb 2-1: USB disconnect, device number 94 [ 552.045620][ T5990] nzxt-smart2 0003:1E71:2009.0042: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 553.534976][T14114] virtiofs: Unknown parameter 'always0:00000000 0 [ 553.534976][T14114] 23 veth0 : 1 V3 [ 553.534976][T14114] 010000E0 1 0:00000000 0 [ 553.534976][T14114] 24 veth1 : 1 V3 [ 553.534976][T14114] 010000E0 1 0:00000000 0 [ 553.534976][T14114] 25 wg0 : 1 V3 [ 553.534976][T14114] 010000E0 1 0:00000000 0 [ 553.534976][T14114] 26 wg1 : 1 V3 [ 553.534976][T14114] 010000E0 1 0:00000000 0 [ 553.534976][T14114] 27 wg2 : 1 V3 [ 553.534976][T14114] 010000E0 1 0:00000000 0 [ 553.534976][T14114] 28 veth0_to_bridge: 1 V3 [ 553.534976][T14114] 010000E0 1 0:00000000 0 [ 553.534976][T14114] 29 bridge_slave_0: 1 V3 [ 553.534976][T14114] 010000E0 1 0:00000000 0 [ 553.534976][T14114] 30 veth1_to_bridge: 1 V3 [ 553.534976][T14114] 010000E0 1 0:00000000 0 [ 553.534976][T14114] 32 veth0_to_bond: 1 V3 [ 553.534976][T14114] 010000E0 1 0:00000000 0 [ 553.534976][T14114] 33 bond_slave_0: 1 V3 [ 553.534976][T14114] 010000E0 1 0:00000000 0 [ 553.534976][T14114] 34 veth1_to_bond: 1 V3 [ 553.534976][T14114] 010000E0 1 0:00000000 0 [ 553.534976][T14114] 35 bond_slave_1: 1 V3 [ 553.534976][T14114] 010000E0 1 0:00000000 0 [ 553.534976][T14114] 36 veth0_to_team: 1 V3 [ 553.534976][T14114] 010000E0 1 0:00000000 0 [ 553.534976][T14114] 37 team_slave_0: 1 V3 [ 553.534976][T14114] 010000E0 1 0:00000000 0 [ 553.534976][T14114] 38 veth1_to_team: 1 V3 [ 553.534976][T14114] 010000E0 1 0:00000000 0 [ 553.534976][T14114] 39 team_sl [ 553.606957][T14118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.776840][T14118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.846264][ T9] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 554.014565][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 94, changing to 10 [ 554.025843][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33258, setting to 1024 [ 554.037187][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 554.046395][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.068858][ T9] usb 2-1: config 0 descriptor?? [ 554.385252][ T5990] usb 7-1: USB disconnect, device number 40 [ 554.494313][ T9] keytouch 0003:0926:3333.0043: fixing up Keytouch IEC report descriptor [ 554.524810][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0043/input/input80 [ 554.648333][ T9] keytouch 0003:0926:3333.0043: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 554.975651][ T9] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 555.115686][ T9] usb 7-1: device descriptor read/64, error -71 [ 555.223991][ T10] usb 2-1: USB disconnect, device number 95 [ 555.375474][ T9] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 555.525372][ T9] usb 7-1: device descriptor read/64, error -71 [ 555.605258][ T10] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 555.636136][ T9] usb usb7-port1: attempt power cycle [ 555.785376][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 555.793227][ T10] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 555.803449][ T10] usb 2-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 555.815864][ T10] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 555.825864][ T10] usb 2-1: config 6 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 555.838601][ T10] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 555.847800][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.855930][ T10] usb 2-1: Product: syz [ 555.860193][ T10] usb 2-1: Manufacturer: syz [ 555.864845][ T10] usb 2-1: SerialNumber: syz [ 555.892441][ T10] hso 2-1:6.0: Can't find BULK OUT endpoint [ 556.005136][ T9] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 556.026372][ T9] usb 7-1: device descriptor read/8, error -71 [ 556.087522][T14131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.096469][T14131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.106269][ T5990] usb 2-1: USB disconnect, device number 96 [ 556.265163][ T9] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 556.296076][ T9] usb 7-1: device descriptor read/8, error -71 [ 556.408832][ T9] usb usb7-port1: unable to enumerate USB device [ 556.672342][T14141] bcm5974 5-1:1.0: could not read from device [ 556.944660][ T5990] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 557.098183][ T5990] usb 2-1: unable to get BOS descriptor or descriptor too short [ 557.107004][ T5990] usb 2-1: not running at top speed; connect to a high speed hub [ 557.118341][ T5990] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 557.129050][ T5990] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 557.144332][ T5990] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 557.153462][ T5990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.161633][ T5990] usb 2-1: Product: syz [ 557.165838][ T5990] usb 2-1: Manufacturer: syz [ 557.170436][ T5990] usb 2-1: SerialNumber: syz [ 557.396722][ T5990] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 557.422159][ T5990] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 557.434825][ T5990] usb 2-1: USB disconnect, device number 97 [ 557.456194][T11547] udevd[11547]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 557.574639][T14145] syzkaller0: entered promiscuous mode [ 557.590666][T14145] syzkaller0 (unregistering): left promiscuous mode [ 558.006054][T14152] netlink: 'syz.1.2382': attribute type 21 has an invalid length. [ 558.017318][T14152] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2382'. [ 558.255115][ T9] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 558.344027][ T5990] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 558.419827][ T9] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 558.428631][ T9] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 558.438714][ T9] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 558.440046][T14158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 558.449774][ T9] usb 7-1: config 220 has no interface number 2 [ 558.471088][ T9] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 558.485095][ T9] usb 7-1: config 220 interface 0 has no altsetting 0 [ 558.492058][ T9] usb 7-1: config 220 interface 76 has no altsetting 0 [ 558.499072][ T9] usb 7-1: config 220 interface 1 has no altsetting 0 [ 558.508731][ T5990] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 558.516082][ T9] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 558.517505][ T5990] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 558.532778][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.540754][ T5990] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 558.543413][ T9] usb 7-1: Product: syz [ 558.556815][ T5990] usb 2-1: config 220 has no interface number 2 [ 558.558603][ T9] usb 7-1: Manufacturer: syz [ 558.565413][ T5990] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 558.569620][ T9] usb 7-1: SerialNumber: syz [ 558.584635][ T5990] usb 2-1: config 220 interface 0 has no altsetting 0 [ 558.598370][ T5990] usb 2-1: config 220 interface 76 has no altsetting 0 [ 558.609827][ T5990] usb 2-1: config 220 interface 1 has no altsetting 0 [ 558.621565][ T5990] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 558.630972][ T5990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.639136][ T5990] usb 2-1: Product: syz [ 558.643536][ T5990] usb 2-1: Manufacturer: syz [ 558.648548][ T5990] usb 2-1: SerialNumber: syz [ 558.821246][ T9] usb 7-1: selecting invalid altsetting 0 [ 558.827991][ T9] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 558.834606][ T9] usb 7-1: No valid video chain found. [ 558.850981][ T9] usb 7-1: selecting invalid altsetting 0 [ 558.857018][ T9] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 558.869613][ T5990] usb 2-1: selecting invalid altsetting 0 [ 558.877874][ T5990] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 558.886284][ T5990] usb 2-1: No valid video chain found. [ 558.899021][ T9] usb 7-1: USB disconnect, device number 45 [ 558.909424][ T5990] usb 2-1: selecting invalid altsetting 0 [ 558.926882][ T5990] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 558.956354][ T5990] usb 2-1: USB disconnect, device number 98 [ 559.126824][T14160] Bluetooth: MGMT ver 1.23 [ 559.526873][T14179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.574091][T14179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.788302][T14199] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 559.794859][T14199] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 559.805931][T14199] vhci_hcd vhci_hcd.0: Device attached [ 559.815052][T14201] vhci_hcd: connection closed [ 559.816947][ T13] vhci_hcd: stop threads [ 559.829311][ T13] vhci_hcd: release socket [ 559.834985][ T13] vhci_hcd: disconnect device [ 559.916008][T14206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.926678][T14206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.372656][T14209] netlink: 'syz.6.2397': attribute type 4 has an invalid length. [ 560.528786][T14216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.538181][T14216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.628585][T14218] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 561.106688][T14228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.116805][T14228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.127418][T14228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.136555][T10761] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 561.143892][T14228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.274320][T10761] usb 7-1: device descriptor read/64, error -71 [ 561.512466][T10761] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 561.652322][T10761] usb 7-1: device descriptor read/64, error -71 [ 561.763671][T10761] usb usb7-port1: attempt power cycle [ 561.840595][T14233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.852923][T14233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.102529][T10761] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 562.122678][T10761] usb 7-1: device descriptor read/8, error -71 [ 562.362505][T10761] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 562.404723][T10761] usb 7-1: device descriptor read/8, error -71 [ 562.424860][T14237] trusted_key: encrypted_key: master key parameter is missing [ 562.512499][T10761] usb usb7-port1: unable to enumerate USB device [ 562.667457][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.674686][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.012508][T10761] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 563.173595][T10761] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 563.188771][T10761] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.204250][T10761] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 563.219891][T10761] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 563.229210][T10761] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.241890][T14268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.256753][T14269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.257700][T10761] usb 2-1: config 0 descriptor?? [ 563.269179][T14269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.287988][T14268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.292731][T14269] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 563.716205][T10761] waterforce 0003:1044:7A4D.0044: item fetching failed at offset 0/3 [ 563.725397][T10761] waterforce 0003:1044:7A4D.0044: hid parse failed with -22 [ 563.734377][T10761] waterforce 0003:1044:7A4D.0044: probe with driver waterforce failed with error -22 [ 563.985116][ T24] usb 2-1: USB disconnect, device number 99 [ 564.143186][T14279] netlink: 'syz.4.2420': attribute type 46 has an invalid length. [ 564.372491][T14291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.398932][T14291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.772272][ T24] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 564.931582][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 564.943807][ T24] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 564.953398][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.974777][ T24] usb 2-1: config 0 descriptor?? [ 564.991203][ T24] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 564.991959][T14303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.009102][T14303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.184467][ T24] gspca_sonixj: reg_w1 err -71 [ 565.189392][ T24] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 565.209208][ T24] usb 2-1: USB disconnect, device number 100 [ 565.934242][T14332] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2435'. [ 565.940363][T14334] bcm5974 5-1:1.0: could not read from device [ 566.100203][ T24] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 566.260604][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 566.271250][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.281720][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 566.293319][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 566.304274][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 566.316668][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 566.329308][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 566.362747][ T24] usb 7-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 566.371882][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.385418][ T24] usb 7-1: Product: syz [ 566.389698][ T24] usb 7-1: Manufacturer: syz [ 566.395164][ T24] usb 7-1: SerialNumber: syz [ 566.415529][ T24] usb 7-1: config 0 descriptor?? [ 566.428028][T14324] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 566.965794][T14345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.977722][T14345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.993058][T14346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.002450][T14346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.106219][T14352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.115139][T14352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.126742][T14353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.136144][T14353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.439651][T14356] binder: 14355:14356 ioctl c018620c 200000000140 returned -22 [ 567.765815][T14369] Process accounting resumed [ 567.799232][ T24] rc_core: IR keymap rc-snapstream-firefly not found [ 567.815707][ T24] Registered IR keymap rc-empty [ 567.826878][ T24] rc rc0: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 567.870476][ T24] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input81 [ 567.902908][ T24] input: syz syz mouse as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input82 [ 567.947405][ C1] ati_remote 7-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 567.963285][ T24] usb 7-1: USB disconnect, device number 50 [ 568.139073][ T9] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 568.325954][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 568.335263][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.345069][ T9] usb 2-1: Product: syz [ 568.349456][ T9] usb 2-1: Manufacturer: syz [ 568.354170][ T9] usb 2-1: SerialNumber: syz [ 568.365070][ T9] usb 2-1: config 0 descriptor?? [ 568.572853][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 568.637211][T14381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 568.702269][T14386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.715574][T14386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.234790][T14389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 569.445428][T14398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.454484][T14398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.205338][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 570.223053][ T9] usb 2-1: USB disconnect, device number 101 [ 570.874574][T14422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 571.261137][T14451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.270891][T14451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.358896][T14453] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2465'. [ 571.406425][T14451] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2465'. [ 571.426077][T14457] vxcan0: tx address claim with different name [ 571.436837][T14455] 9pnet_fd: Insufficient options for proto=fd [ 571.459008][T14455] tmpfs: Unknown parameter 'SwcL"‘«ΠΊ:h 4nh_blocks' [ 571.589855][T14460] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2469'. [ 571.834083][T14469] gfs2: gfs2 mount does not exist [ 571.853988][T14467] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 572.075622][T14479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 572.557744][T10761] usb 7-1: new low-speed USB device number 51 using dummy_hcd [ 572.587961][ T10] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 572.695070][T14505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.697748][T10761] usb 7-1: device descriptor read/64, error -71 [ 572.704667][T14505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.757565][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 572.765881][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 572.791636][ T10] usb 2-1: config 9 has an invalid interface number: 136 but max is 0 [ 572.801598][ T10] usb 2-1: config 9 has no interface number 0 [ 572.813474][T14507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.822291][ T10] usb 2-1: too many endpoints for config 9 interface 136 altsetting 55: 89, using maximum allowed: 30 [ 572.823098][T14507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.834141][ T10] usb 2-1: config 9 interface 136 altsetting 55 has 0 endpoint descriptors, different from the interface descriptor's value: 89 [ 572.854837][ T10] usb 2-1: config 9 interface 136 has no altsetting 0 [ 572.863389][T14507] syzkaller1: entered promiscuous mode [ 572.867427][ T10] usb 2-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=93.30 [ 572.870684][T14507] syzkaller1: entered allmulticast mode [ 572.883070][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.892528][ T10] usb 2-1: Product: ఁ [ 572.907593][ T10] usb 2-1: Manufacturer: ␊ [ 572.912255][ T10] usb 2-1: SerialNumber: θŸ½γ–―μ¦™ιΎšε­‚μ»¦β”€ηŽ’ζ΄ξ‹Ύκžη­—β―‡η΄„α€”γŽξŠŒθ·‹ιη§œβΉ‡θΆ·ζŒ†ο©„δ‹¨ξ½šεžαͺΆκ‰°κ“β™—XγΈΈε“ŽιŸδŠ₯俕 [ 572.946628][T10761] usb 7-1: new low-speed USB device number 52 using dummy_hcd [ 573.077765][T10761] usb 7-1: device descriptor read/64, error -71 [ 573.186901][T10761] usb usb7-port1: attempt power cycle [ 573.199799][ T10] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 573.227429][ T10] usb 2-1: USB disconnect, device number 102 [ 573.537024][T10761] usb 7-1: new low-speed USB device number 53 using dummy_hcd [ 573.569636][T10761] usb 7-1: device descriptor read/8, error -71 [ 573.786917][T14511] wlan1 speed is unknown, defaulting to 1000 [ 573.816212][T10761] usb 7-1: new low-speed USB device number 54 using dummy_hcd [ 573.838303][T10761] usb 7-1: device descriptor read/8, error -71 [ 573.947794][T10761] usb usb7-port1: unable to enumerate USB device [ 574.505916][T10761] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 574.672686][T10761] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 574.681895][T10761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.690010][T10761] usb 2-1: Product: syz [ 574.694199][T10761] usb 2-1: Manufacturer: syz [ 574.698973][T10761] usb 2-1: SerialNumber: syz [ 574.706505][T10761] usb 2-1: config 0 descriptor?? [ 574.919612][T10761] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 575.675362][ T5990] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 575.837277][ T5990] usb 7-1: Using ep0 maxpacket: 8 [ 575.867625][ T5990] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 575.884217][ T5990] usb 7-1: can't read configurations, error -61 [ 575.940688][T14536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 576.045119][ T5990] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 576.197080][ T5990] usb 7-1: Using ep0 maxpacket: 8 [ 576.204264][ T5990] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 576.212581][ T5990] usb 7-1: can't read configurations, error -61 [ 576.220917][ T5990] usb usb7-port1: attempt power cycle [ 576.374330][T10761] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 576.389465][T10761] usb 2-1: USB disconnect, device number 103 [ 576.565336][ T5990] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 576.595991][ T5990] usb 7-1: Using ep0 maxpacket: 8 [ 576.609511][ T5990] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 576.618036][ T5990] usb 7-1: can't read configurations, error -61 [ 576.756515][ T5990] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 576.777755][ T5990] usb 7-1: Using ep0 maxpacket: 8 [ 576.789634][ T5990] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 576.798426][ T5990] usb 7-1: can't read configurations, error -61 [ 576.805201][ T5990] usb usb7-port1: unable to enumerate USB device [ 577.164598][ T5937] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 577.179749][T14561] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2501'. [ 577.284995][T14564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.297388][T14564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.350646][ T5937] usb 2-1: config 0 interface 0 has no altsetting 0 [ 577.361375][ T5937] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 577.371890][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.382658][T14566] 9pnet_fd: Insufficient options for proto=fd [ 577.393593][ T5937] usb 2-1: config 0 descriptor?? [ 577.419315][T14566] tmpfs: Unknown parameter 'SwcL"‘«ΠΊ:h 4nh_blocks' [ 577.635655][T14573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 577.820203][ T5937] video4linux radio48: keene_cmd_main failed (-71) [ 577.828374][ T5937] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 577.844896][ T5937] usb 2-1: USB disconnect, device number 104 [ 577.941510][T14577] netlink: 'syz.4.2506': attribute type 4 has an invalid length. [ 579.643619][T14643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 579.663611][T14641] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2514'. [ 579.691151][T14641] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 579.917663][T14660] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2519'. [ 580.046767][T14667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2519'. [ 580.058512][T14667] loop6: detected capacity change from 0 to 63 [ 580.067820][T14667] Buffer I/O error on dev loop6, logical block 0, async page read [ 580.079063][T14667] Buffer I/O error on dev loop6, logical block 0, async page read [ 580.090710][T14667] Buffer I/O error on dev loop6, logical block 0, async page read [ 580.099859][T14667] Buffer I/O error on dev loop6, logical block 0, async page read [ 580.110598][T14667] Buffer I/O error on dev loop6, logical block 0, async page read [ 580.131930][T14667] Buffer I/O error on dev loop6, logical block 0, async page read [ 580.143393][T14667] Buffer I/O error on dev loop6, logical block 0, async page read [ 580.151899][T14667] Buffer I/O error on dev loop6, logical block 0, async page read [ 580.161046][T14667] ldm_validate_partition_table(): Disk read failed. [ 580.168114][T14667] Buffer I/O error on dev loop6, logical block 0, async page read [ 580.176794][T14667] Buffer I/O error on dev loop6, logical block 0, async page read [ 580.184927][ T9] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 580.193866][T14667] Dev loop6: unable to read RDB block 0 [ 580.201174][T14667] loop6: unable to read partition table [ 580.207580][T14667] loop_reread_partitions: partition scan of loop6 (3Ÿ Ύ‚³˜) failed (rc=-5) [ 580.311519][ T5236] ldm_validate_partition_table(): Disk read failed. [ 580.318654][ T5236] Dev loop6: unable to read RDB block 0 [ 580.333597][ T5236] loop6: unable to read partition table [ 580.353613][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 580.365193][ T9] usb 2-1: config 4 has an invalid interface number: 128 but max is 0 [ 580.378151][ T9] usb 2-1: config 4 has no interface number 0 [ 580.386683][ T9] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.401420][ T9] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.439541][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 580.467874][ T5236] ldm_validate_partition_table(): Disk read failed. [ 580.482974][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.502362][ T5236] Dev loop6: unable to read RDB block 0 [ 580.515693][ T5236] loop6: unable to read partition table [ 580.537730][ T9] hub 2-1:4.128: USB hub found [ 580.793355][ T9] hub 2-1:4.128: config failed, can't read hub descriptor (err -22) [ 580.884512][ T9] usb 2-1: USB disconnect, device number 105 [ 580.962669][ T10] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 581.114959][T14681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.123984][T14681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.133346][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 581.140197][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.151654][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.161921][ T10] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 581.172046][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.184992][ T10] usb 7-1: config 0 descriptor?? [ 581.242840][ T9] usb 2-1: new low-speed USB device number 106 using dummy_hcd [ 581.414595][T14682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.425685][T14682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.431144][ T9] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 581.445793][ T9] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 581.458500][ T9] usb 2-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 581.484397][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 581.491144][ T9] usb 2-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 581.501146][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.522925][ T9] usb 2-1: config 0 descriptor?? [ 581.529006][T14679] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 581.580645][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 581.588344][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 581.606313][ T10] usb 7-1: USB disconnect, device number 59 [ 581.804626][T14692] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2529'. [ 581.956037][ T10] usb 7-1: new full-speed USB device number 60 using dummy_hcd [ 581.966400][T14692] syz.4.2529 (14692) used greatest stack depth: 16056 bytes left [ 581.966472][ T9] hid_parser_main: 15 callbacks suppressed [ 581.966492][ T9] nintendo 0003:057E:2009.0045: unknown main item tag 0x0 [ 582.028526][ T9] nintendo 0003:057E:2009.0045: unknown main item tag 0x0 [ 582.052024][ T9] nintendo 0003:057E:2009.0045: unknown main item tag 0x0 [ 582.059469][ T9] nintendo 0003:057E:2009.0045: unknown main item tag 0x0 [ 582.074183][ T9] nintendo 0003:057E:2009.0045: unknown main item tag 0x0 [ 582.081493][ T9] nintendo 0003:057E:2009.0045: unknown main item tag 0x0 [ 582.090501][ T9] nintendo 0003:057E:2009.0045: unknown main item tag 0x0 [ 582.099069][ T9] nintendo 0003:057E:2009.0045: unknown main item tag 0x0 [ 582.106924][ T9] nintendo 0003:057E:2009.0045: unknown main item tag 0x0 [ 582.114859][ T9] nintendo 0003:057E:2009.0045: unknown main item tag 0x0 [ 582.131363][ T9] nintendo 0003:057E:2009.0045: hidraw0: USB HID v80.00 Device [HID 057e:2009] on usb-dummy_hcd.1-1/input0 [ 582.143285][ T10] usb 7-1: device descriptor read/64, error -71 [ 582.153187][T14679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.163966][T14679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.178603][T14679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.192457][T14679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.205730][T14705] overlayfs: conflicting lowerdir path [ 582.219081][T14704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 582.234467][ T9] nintendo 0003:057E:2009.0045: Failed to get joycon info; ret=-38 [ 582.256536][ T9] nintendo 0003:057E:2009.0045: Failed to retrieve controller info; ret=-38 [ 582.291274][ T9] nintendo 0003:057E:2009.0045: Failed to initialize controller; ret=-38 [ 582.294995][T14705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.319543][ T9] nintendo 0003:057E:2009.0045: probe - fail = -38 [ 582.338435][ T9] nintendo 0003:057E:2009.0045: probe with driver nintendo failed with error -38 [ 582.359983][ T9] usb 2-1: USB disconnect, device number 106 [ 582.382056][T14705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.402249][ T10] usb 7-1: new full-speed USB device number 61 using dummy_hcd [ 582.415818][T14706] fido_id[14706]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 582.552005][ T10] usb 7-1: device descriptor read/64, error -71 [ 582.662517][ T10] usb usb7-port1: attempt power cycle [ 583.011715][ T10] usb 7-1: new full-speed USB device number 62 using dummy_hcd [ 583.037336][ T10] usb 7-1: device descriptor read/8, error -71 [ 583.291500][ T10] usb 7-1: new full-speed USB device number 63 using dummy_hcd [ 583.311863][T14733] 9pnet_fd: Insufficient options for proto=fd [ 583.312276][ T10] usb 7-1: device descriptor read/8, error -71 [ 583.432016][ T10] usb usb7-port1: unable to enumerate USB device [ 583.492977][T14738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.516664][T14738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.550387][T14738] netlink: 'syz.4.2538': attribute type 21 has an invalid length. [ 583.560440][T14738] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2538'. [ 583.575350][T14738] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2538'. [ 583.598530][T14740] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2539'. [ 583.607799][T14740] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2539'. [ 583.741565][ T5990] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 583.902845][ T5990] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 583.911948][ T5990] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 583.920834][ T5990] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 583.932097][ T5990] usb 2-1: config 220 has no interface number 2 [ 583.938414][ T5990] usb 2-1: config 220 interface 1 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 64 [ 583.948780][ T5990] usb 2-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 583.963077][ T5990] usb 2-1: config 220 interface 0 has no altsetting 0 [ 583.969878][ T5990] usb 2-1: config 220 interface 76 has no altsetting 0 [ 583.977710][ T5990] usb 2-1: config 220 interface 1 has no altsetting 0 [ 583.994203][ T5990] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 584.003572][ T5990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.012133][ T5990] usb 2-1: Product: syz [ 584.016658][ T5990] usb 2-1: Manufacturer: syz [ 584.021687][ T5990] usb 2-1: SerialNumber: syz [ 584.175596][T14753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.195212][T14753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.249723][ T5990] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 584.269339][ T5990] usb 2-1: No valid video chain found. [ 584.282154][ T5990] usb 2-1: selecting invalid altsetting 0 [ 584.309901][ T5990] usb 2-1: selecting invalid altsetting 0 [ 584.317161][ T5990] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 584.351116][ T5990] usb 2-1: USB disconnect, device number 107 [ 584.418126][T14758] netlink: 352 bytes leftover after parsing attributes in process `syz.5.2543'. [ 584.430182][T14758] netlink: 352 bytes leftover after parsing attributes in process `syz.5.2543'. [ 584.628621][T14766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.658678][T14766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.686246][T14766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.763016][T14766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.020964][T10761] usb 7-1: new full-speed USB device number 64 using dummy_hcd [ 585.039198][T14781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 585.182502][T10761] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 585.191215][T10761] usb 7-1: can't read configurations, error -61 [ 585.200827][ T9] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 585.320599][T10761] usb 7-1: new full-speed USB device number 65 using dummy_hcd [ 585.373983][ T9] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 585.383900][ T9] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 585.393355][ T9] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 585.403782][ T9] usb 2-1: config 220 has no interface number 2 [ 585.410131][ T9] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 585.423415][ T9] usb 2-1: config 220 interface 0 has no altsetting 0 [ 585.430297][ T9] usb 2-1: config 220 interface 76 has no altsetting 0 [ 585.437217][ T9] usb 2-1: config 220 interface 1 has no altsetting 0 [ 585.448003][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 585.458040][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.466146][ T9] usb 2-1: Product: syz [ 585.470424][ T9] usb 2-1: Manufacturer: syz [ 585.475465][ T9] usb 2-1: SerialNumber: syz [ 585.476462][T10761] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 585.488805][T10761] usb 7-1: can't read configurations, error -61 [ 585.498904][T10761] usb usb7-port1: attempt power cycle [ 585.643175][T14786] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2553'. [ 585.657648][T14786] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 585.687380][T14786] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 585.701137][T14786] qnx6: wrong signature (magic) in superblock #1. [ 585.707613][T14786] qnx6: unable to read the first superblock [ 585.731001][ T9] usb 2-1: selecting invalid altsetting 0 [ 585.735963][T14786] netlink: 'syz.5.2553': attribute type 16 has an invalid length. [ 585.737672][ T9] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 585.752278][ T9] usb 2-1: No valid video chain found. [ 585.758367][T14786] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2553'. [ 585.769867][ T9] usb 2-1: selecting invalid altsetting 0 [ 585.775896][ T9] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 585.800363][ T9] usb 2-1: USB disconnect, device number 108 [ 585.840239][T10761] usb 7-1: new full-speed USB device number 66 using dummy_hcd [ 585.885530][T10761] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 585.898154][T10761] usb 7-1: can't read configurations, error -61 [ 586.040210][T10761] usb 7-1: new full-speed USB device number 67 using dummy_hcd [ 586.063048][T10761] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 586.080069][T10761] usb 7-1: can't read configurations, error -61 [ 586.107673][T10761] usb usb7-port1: unable to enumerate USB device [ 586.619975][T10761] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 586.748329][T14819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.757563][T14819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.774589][T10761] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 586.784241][T10761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.792401][T10761] usb 2-1: Product: syz [ 586.796693][T10761] usb 2-1: Manufacturer: syz [ 586.801575][T10761] usb 2-1: SerialNumber: syz [ 586.809883][T10761] usb 2-1: config 0 descriptor?? [ 586.979941][T14823] kvm: apic: phys broadcast and lowest prio [ 586.986170][T14823] kvm: Disabled LAPIC found during irq injection [ 586.993063][T14824] kvm: apic: phys broadcast and lowest prio [ 587.020465][T10761] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 587.455080][ T10] usb 5-1: USB disconnect, device number 79 [ 587.861192][ T5873] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 587.882590][ T5873] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 587.892835][ T5873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 587.906028][ T5873] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 587.914423][ T5873] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 588.017396][T14831] wlan1 speed is unknown, defaulting to 1000 [ 588.218997][ T5990] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 588.258363][ T3490] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.291549][T14831] chnl_net:caif_netlink_parms(): no params data found [ 588.367183][ T3490] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.381275][ T5990] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 588.391236][ T5990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.407831][ T5990] usb 7-1: config 0 descriptor?? [ 588.447635][T10761] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 588.471601][T10761] usb 2-1: USB disconnect, device number 109 [ 588.524293][ T3490] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.626214][ T3490] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.650711][T14831] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.658003][T14831] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.666512][T14831] bridge_slave_0: entered allmulticast mode [ 588.677969][T14831] bridge_slave_0: entered promiscuous mode [ 588.687653][T14831] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.697168][T14831] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.706136][T14831] bridge_slave_1: entered allmulticast mode [ 588.714710][T14831] bridge_slave_1: entered promiscuous mode [ 588.777537][T14831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.821318][T14831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.837816][ T5990] ath6kl: Failed to read usb control message: -71 [ 588.854611][ T5990] ath6kl: Unable to read the bmi data from the device: -71 [ 588.865487][ T5990] ath6kl: Unable to recv target info: -71 [ 588.898956][ T5990] ath6kl: Failed to init ath6kl core: -71 [ 588.905240][ T5990] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 588.938242][ T5990] usb 7-1: USB disconnect, device number 68 [ 589.051780][T14831] team0: Port device team_slave_0 added [ 589.069594][T14831] team0: Port device team_slave_1 added [ 589.076574][ T3490] team0: left allmulticast mode [ 589.082396][ T3490] team_slave_0: left allmulticast mode [ 589.088003][ T3490] team_slave_1: left allmulticast mode [ 589.093849][ T3490] geneve0: left allmulticast mode [ 589.099491][ T3490] bridge0: port 3(team0) entered disabled state [ 589.108175][ T3490] bridge_slave_1: left allmulticast mode [ 589.114711][ T3490] bridge_slave_1: left promiscuous mode [ 589.120842][ T3490] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.131775][ T3490] bridge_slave_0: left allmulticast mode [ 589.137455][ T3490] bridge_slave_0: left promiscuous mode [ 589.144037][ T3490] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.258606][ T24] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 589.444723][ T24] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 589.462515][ T24] usb 2-1: config 0 has no interface number 0 [ 589.466192][ T3490] geneve0 (unregistering): left promiscuous mode [ 589.472731][ T24] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid maxpacket 5847, setting to 64 [ 589.487903][ T24] usb 2-1: config 0 interface 200 has no altsetting 0 [ 589.496607][ T3490] team0: Port device geneve0 removed [ 589.504129][ T24] usb 2-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 589.514073][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.522552][ T24] usb 2-1: Product: syz [ 589.526869][ T24] usb 2-1: Manufacturer: syz [ 589.531849][ T24] usb 2-1: SerialNumber: syz [ 589.540538][ T24] usb 2-1: config 0 descriptor?? [ 589.546051][ T3490] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 589.679608][ T5990] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 589.781943][ T24] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.200/input/input83 [ 589.814280][ T24] usb 2-1: USB disconnect, device number 110 [ 589.842634][ T5990] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 589.857818][ T5990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.863204][ T3490] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.883673][ T3490] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.897171][ T5990] usb 7-1: config 0 descriptor?? [ 589.906907][ T5990] cp210x 7-1:0.0: cp210x converter detected [ 589.915283][ T3490] bond0 (unregistering): Released all slaves [ 590.008345][ T5873] Bluetooth: hci3: command tx timeout [ 590.023017][T14831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 590.030330][T14831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.059245][T14831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 590.074437][T14831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.082498][T14831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.105932][ T5990] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 590.116452][T14831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.127523][ T5990] cp210x 7-1:0.0: querying part number failed [ 590.156000][ T5990] usb 7-1: cp210x converter now attached to ttyUSB0 [ 590.319116][T14845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.354197][T14845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.374041][T14845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.387483][T14851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.409274][T14845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.422119][T14831] hsr_slave_0: entered promiscuous mode [ 590.428325][T14851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.452299][T14831] hsr_slave_1: entered promiscuous mode [ 590.469494][T14831] debugfs: 'hsr0' already exists in 'hsr' [ 590.475433][T14831] Cannot create hsr debugfs directory [ 590.491830][T14855] IPVS: Error connecting to the multicast addr [ 590.498885][ T5937] usb 7-1: USB disconnect, device number 69 [ 590.512075][ T5937] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 590.566306][ T5937] cp210x 7-1:0.0: device disconnected [ 590.625982][T14857] IPVS: Error connecting to the multicast addr [ 591.097891][ T5990] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 591.154922][ T5930] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 591.324109][ T5990] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 591.337610][ T5930] usb 7-1: Using ep0 maxpacket: 32 [ 591.357441][ T5990] usb 2-1: config 1 has no interface number 0 [ 591.372731][ T5930] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 591.387688][ T5990] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 591.405967][ T5930] usb 7-1: config 0 has no interface number 0 [ 591.423698][ T5930] usb 7-1: config 0 interface 184 has no altsetting 0 [ 591.431719][ T5990] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 591.443932][ T5990] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.468353][ T5930] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 591.483152][ T5930] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.494801][ T5990] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 591.507363][ T5990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.515730][ T5990] usb 2-1: Product: syz [ 591.527022][ T5930] usb 7-1: Product: syz [ 591.533219][ T5990] usb 2-1: Manufacturer: syz [ 591.547372][ T5930] usb 7-1: Manufacturer: syz [ 591.561497][ T5930] usb 7-1: SerialNumber: syz [ 591.567023][ T5990] usb 2-1: SerialNumber: syz [ 591.587949][ T5930] usb 7-1: config 0 descriptor?? [ 591.611859][ T5930] smsc75xx v1.0.0 [ 591.623651][T14865] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 591.674499][ T3490] tipc: Left network mode [ 591.883605][T14865] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 592.087366][ T5873] Bluetooth: hci3: command tx timeout [ 592.119714][ T5990] usb 2-1: Incompatible driver and firmware versions [ 592.204567][T14831] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 592.253429][T14831] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 592.342487][T14831] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 592.378782][T14831] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 592.443160][ T5873] Bluetooth: hci1: unexpected event 0x36 length: 14 > 7 [ 592.486099][T14900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.559444][T14900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.619204][T14900] syzkaller1: entered promiscuous mode [ 592.625202][T14900] syzkaller1: entered allmulticast mode [ 592.853494][T14831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.920826][T14831] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.953893][ T3555] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.961106][ T3555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.988601][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.995828][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 593.468602][T14831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 593.895337][ T10] usb 2-1: USB disconnect, device number 111 [ 594.152441][T14831] veth0_vlan: entered promiscuous mode [ 594.159260][ T5930] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 594.176266][ T5873] Bluetooth: hci3: command tx timeout [ 594.202559][T14831] veth1_vlan: entered promiscuous mode [ 594.208398][ T5930] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 594.239811][ T5930] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 594.283850][ T5930] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 594.307536][ T5930] usb 7-1: USB disconnect, device number 70 [ 594.391762][T14831] veth0_macvtap: entered promiscuous mode [ 594.403813][T14831] veth1_macvtap: entered promiscuous mode [ 594.435538][T14831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 594.453220][T14831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 594.478297][ T3555] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.490035][ T3555] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.502398][ T3555] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.546187][ T3555] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.669040][ T5930] usb 7-1: new low-speed USB device number 71 using dummy_hcd [ 594.791024][T14931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.817356][T14931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.832654][ T5930] usb 7-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 594.866735][ T5930] usb 7-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 594.878471][ T5930] usb 7-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 594.893202][ T5930] usb 7-1: config 0 interface 0 has no altsetting 0 [ 594.904971][ T5930] usb 7-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 594.916403][ T5930] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.924478][ T3490] hsr_slave_0: left promiscuous mode [ 594.936630][ T5930] usb 7-1: config 0 descriptor?? [ 594.936958][ T3490] hsr_slave_1: left promiscuous mode [ 594.968809][ T3490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.978627][ T3490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.987676][ T3490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.999956][ T3490] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.034559][ T3490] veth1_macvtap: left promiscuous mode [ 595.040574][ T3490] veth0_macvtap: left promiscuous mode [ 595.047054][ T3490] veth1_vlan: left promiscuous mode [ 595.052421][ T3490] veth0_vlan: left promiscuous mode [ 595.349929][ T5930] usbhid 7-1:0.0: can't add hid device: -71 [ 595.361746][ T5930] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 595.395946][ T5930] usb 7-1: USB disconnect, device number 71 [ 595.976056][ T3490] team_slave_1 (unregistering): left promiscuous mode [ 595.997386][ T3490] team0 (unregistering): Port device team_slave_1 removed [ 596.132713][ T3490] team_slave_0 (unregistering): left promiscuous mode [ 596.146781][ T3490] team0 (unregistering): Port device team_slave_0 removed [ 596.244993][ T5873] Bluetooth: hci3: command tx timeout [ 596.644887][ T5937] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 596.787725][ T5937] usb 7-1: device descriptor read/64, error -71 [ 596.798818][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.819824][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.925133][T14974] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 596.934222][T14974] overlayfs: missing 'lowerdir' [ 597.009051][T14981] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 597.023907][T14981] overlayfs: missing 'lowerdir' [ 597.025931][T14979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2598'. [ 597.053202][T14982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 597.111388][ T5937] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 597.264649][ T5937] usb 7-1: device descriptor read/64, error -71 [ 597.375107][ T5937] usb usb7-port1: attempt power cycle [ 597.614270][T10768] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 597.724677][ T5937] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 597.744303][T10768] usb 2-1: device descriptor read/64, error -71 [ 597.755990][ T5937] usb 7-1: device descriptor read/8, error -71 [ 597.914233][ T9] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 597.985185][T10768] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 598.015140][ T5937] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 598.044721][ T5937] usb 7-1: device descriptor read/8, error -71 [ 598.085107][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 598.092004][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.102384][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 598.120496][T10768] usb 2-1: device descriptor read/64, error -71 [ 598.125394][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 598.138056][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.146426][ T9] usb 5-1: Product: syz [ 598.150677][ T9] usb 5-1: Manufacturer: syz [ 598.155899][ T5937] usb usb7-port1: unable to enumerate USB device [ 598.162326][ T9] usb 5-1: SerialNumber: syz [ 598.171448][ T9] usb 5-1: config 0 descriptor?? [ 598.180856][ T9] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 598.187344][ T9] gspca_stv06xx: st6422 sensor detected [ 598.234516][T10768] usb usb2-port1: attempt power cycle [ 598.380035][T14998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.390201][T14998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.399480][T14998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.409984][T14998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.414593][T14999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.428961][T14999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.447090][ T9] STV06xx 5-1:0.0: probe with driver STV06xx failed with error -71 [ 598.459648][ T9] usb 5-1: USB disconnect, device number 80 [ 598.573906][T10768] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 598.604600][T10768] usb 2-1: device descriptor read/8, error -71 [ 598.843831][T10768] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 598.864307][T10768] usb 2-1: device descriptor read/8, error -71 [ 598.974424][T10768] usb usb2-port1: unable to enumerate USB device [ 599.066313][T15007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2606'. [ 599.334502][T15016] syzkaller1: entered promiscuous mode [ 599.340021][T15016] syzkaller1: entered allmulticast mode [ 599.347317][T15015] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 599.463454][ T5937] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 599.593461][ T5937] usb 5-1: device descriptor read/64, error -71 [ 599.843572][ T5937] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 599.973104][ T5937] usb 5-1: device descriptor read/64, error -71 [ 600.084285][ T5937] usb usb5-port1: attempt power cycle [ 600.266110][T15027] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2613'. [ 600.443316][ T5937] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 600.499788][ T5937] usb 5-1: device descriptor read/8, error -71 [ 600.559644][T15036] Attempt to restore checkpoint with obsolete wellknown handles [ 600.742765][ T5937] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 600.765988][ T5937] usb 5-1: device descriptor read/8, error -71 [ 600.842863][ T9] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 600.873019][ T5937] usb usb5-port1: unable to enumerate USB device [ 600.892650][ T24] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 600.992563][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 601.002958][ T9] usb 2-1: New USB device found, idVendor=10b9, idProduct=8000, bcdDevice=c0.fa [ 601.012157][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.020328][ T9] usb 2-1: Product: syz [ 601.024681][ T9] usb 2-1: Manufacturer: syz [ 601.029384][ T9] usb 2-1: SerialNumber: syz [ 601.038429][ T9] usb 2-1: config 0 descriptor?? [ 601.052766][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 601.061089][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.072552][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.082333][ T24] usb 7-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 601.091718][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.106287][ T24] usb 7-1: config 0 descriptor?? [ 601.256748][ T9] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 601.264342][ T9] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 601.318768][T15043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.328135][T15043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.458743][T10768] usb 2-1: USB disconnect, device number 116 [ 601.546004][ T24] hid_parser_main: 1 callbacks suppressed [ 601.546027][ T24] aquacomputer_d5next 0003:0C70:F0B6.0046: unknown main item tag 0x2 [ 601.565974][ T24] aquacomputer_d5next 0003:0C70:F0B6.0046: hidraw0: USB HID vff.fc Device [HID 0c70:f0b6] on usb-dummy_hcd.6-1/input0 [ 601.742786][ T5937] usb 7-1: USB disconnect, device number 76 [ 602.295876][T15051] dlm: Unknown command passed to DLM device : 0 [ 602.295876][T15051] [ 602.615112][ T5937] usb 7-1: new full-speed USB device number 77 using dummy_hcd [ 602.752452][T15063] dvmrp0: entered allmulticast mode [ 602.764072][T15063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2627'. [ 602.774765][T15063] netlink: 'syz.4.2627': attribute type 10 has an invalid length. [ 602.788125][ T5937] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 602.798046][ T5937] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.800167][T15063] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 602.807138][ T5937] usb 7-1: Product: syz [ 602.821318][ T5937] usb 7-1: Manufacturer: syz [ 602.829831][ T5937] usb 7-1: SerialNumber: syz [ 602.848185][ T5937] usb 7-1: config 0 descriptor?? [ 603.067892][ T5937] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 603.230471][T15082] netlink: 'syz.5.2633': attribute type 1 has an invalid length. [ 603.238540][T15082] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2633'. [ 603.249153][T15082] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2633'. [ 603.262849][ T5990] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 603.285406][T15082] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 603.292091][T15082] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 603.298849][T15082] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 603.306204][T15082] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 603.314377][T15082] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 603.320912][T15082] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 603.327707][T15082] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 603.334327][T15082] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 603.340800][T15082] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 603.349052][T15082] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 603.356058][T15082] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 603.362749][T15082] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 603.431686][ T5990] usb 5-1: Using ep0 maxpacket: 32 [ 603.448587][ T5990] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 603.466273][ T5990] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 603.476962][ T5990] usb 5-1: config 0 interface 0 has no altsetting 0 [ 603.488754][ T5990] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 603.497983][ T5990] usb 5-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 603.507004][ T5990] usb 5-1: Product: syz [ 603.511202][ T5990] usb 5-1: Manufacturer: syz [ 603.515918][ T5990] usb 5-1: SerialNumber: syz [ 603.523664][ T5990] usb 5-1: config 0 descriptor?? [ 603.740971][T15074] netlink: 'syz.4.2631': attribute type 10 has an invalid length. [ 603.754231][T15074] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2631'. [ 603.775122][T15074] team0: entered promiscuous mode [ 603.780272][T15074] team_slave_0: entered promiscuous mode [ 603.787510][T15074] team_slave_1: entered promiscuous mode [ 603.794708][T15074] bridge0: port 3(team0) entered blocking state [ 603.804683][T15074] bridge0: port 3(team0) entered disabled state [ 603.812449][T15074] team0: entered allmulticast mode [ 603.818106][T15074] team_slave_0: entered allmulticast mode [ 603.824767][T15074] team_slave_1: entered allmulticast mode [ 603.846831][T15074] bridge0: port 3(team0) entered blocking state [ 603.853301][T15074] bridge0: port 3(team0) entered forwarding state [ 603.987790][T15104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.998739][T15104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.009046][T15104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.021693][ T5990] gs_usb 5-1:0.0: Configuring for 16 interfaces [ 604.028001][ T5990] gs_usb 5-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 604.028509][T15104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.036379][ T5990] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 604.230954][ T9] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 604.401993][ T9] usb 2-1: no configurations [ 604.406754][ T9] usb 2-1: can't read configurations, error -22 [ 604.551177][ T9] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 604.690761][ T5937] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 604.711420][ T5937] usb 7-1: USB disconnect, device number 77 [ 604.724103][ T9] usb 2-1: no configurations [ 604.728886][ T9] usb 2-1: can't read configurations, error -22 [ 604.741769][ T9] usb usb2-port1: attempt power cycle [ 605.090820][ T9] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 605.122358][ T9] usb 2-1: no configurations [ 605.127314][ T9] usb 2-1: can't read configurations, error -22 [ 605.239946][T15106] netlink: 'syz.6.2640': attribute type 29 has an invalid length. [ 605.276945][ T9] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 605.316332][ T9] usb 2-1: no configurations [ 605.321628][ T9] usb 2-1: can't read configurations, error -22 [ 605.324015][T15109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.340205][T15109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.359050][ T9] usb usb2-port1: unable to enumerate USB device [ 605.435046][T15113] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2642'. [ 605.740518][ T5990] usb 7-1: new full-speed USB device number 78 using dummy_hcd [ 605.892114][ T5990] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 605.905364][ T5990] usb 7-1: config 0 interface 0 has no altsetting 0 [ 605.912331][ T5990] usb 7-1: New USB device found, idVendor=17ef, idProduct=61ae, bcdDevice= 0.00 [ 605.921788][ T5990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.933481][ T5990] usb 7-1: config 0 descriptor?? [ 606.050543][T10768] usb 5-1: USB disconnect, device number 85 [ 606.130414][T15115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2643'. [ 606.291840][T15122] usb usb8: usbfs: process 15122 (syz.4.2645) did not claim interface 0 before use [ 606.301535][T15122] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 606.348915][ T5990] lenovo 0003:17EF:61AE.0047: unknown main item tag 0x1 [ 606.360142][ T5990] lenovo 0003:17EF:61AE.0047: hidraw0: USB HID v0.04 Device [HID 17ef:61ae] on usb-dummy_hcd.6-1/input0 [ 606.548484][T15113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.550041][T10768] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 606.557971][T15113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.578083][ T5930] usb 7-1: USB disconnect, device number 78 [ 606.725090][T10768] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.736857][T10768] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 606.746247][T10768] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.757199][T10768] usb 5-1: config 0 descriptor?? [ 607.183810][T10768] nintendo 0003:057E:200E.0048: unbalanced delimiter at end of report description [ 607.195082][T10768] nintendo 0003:057E:200E.0048: HID parse failed [ 607.202986][T10768] nintendo 0003:057E:200E.0048: probe - fail = -22 [ 607.209940][T10768] nintendo 0003:057E:200E.0048: probe with driver nintendo failed with error -22 [ 607.381297][ T9] usb 5-1: USB disconnect, device number 86 [ 607.402603][ T5990] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 607.569337][ T5990] usb 2-1: Using ep0 maxpacket: 8 [ 607.576016][ T5990] usb 2-1: config 4 has an invalid interface number: 231 but max is 0 [ 607.584810][ T5990] usb 2-1: config 4 has no interface number 0 [ 607.593599][ T5990] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 607.603496][ T5990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.612574][ T5990] usb 2-1: Product: syz [ 607.616764][ T5990] usb 2-1: Manufacturer: syz [ 607.621508][ T5990] usb 2-1: SerialNumber: syz [ 607.637210][ T5990] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 608.289085][T10761] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 608.448852][T10761] usb 5-1: Using ep0 maxpacket: 32 [ 608.456107][T10761] usb 5-1: config 0 has an invalid interface number: 247 but max is 0 [ 608.466883][T10761] usb 5-1: config 0 has no interface number 0 [ 608.476015][T10761] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 608.492078][T10761] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 608.503280][T10761] usb 5-1: Product: syz [ 608.507983][T10761] usb 5-1: Manufacturer: syz [ 608.517088][T10761] usb 5-1: config 0 descriptor?? [ 609.679000][ T5990] vp7045: USB control message 'out' went wrong. [ 609.685357][ T5990] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 609.696269][ T5990] dvbdev: DVB: registering new adapter (DigitalNow TinyUSB 2 DVB-t Receiver) [ 609.705519][ T5990] usb 2-1: media controller created [ 609.712303][ T5990] vp7045: USB control message 'out' went wrong. [ 609.718696][ T5990] dvb-usb: MAC address reading failed. [ 609.749037][ T5990] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 609.763535][ T5937] usb 5-1: USB disconnect, device number 87 [ 609.793627][ T5990] vp7045: USB control message 'out' went wrong. [ 609.802673][ T5990] vp7045: USB control message 'out' went wrong. [ 609.816033][ T5990] vp7045: USB control message 'out' went wrong. [ 609.823314][ T5990] usb 2-1: DVB: registering adapter 1 frontend 0 (Twinhan VP7045/46 USB DVB-T)... [ 609.836142][ T5990] dvbdev: dvb_create_media_entity: media entity 'Twinhan VP7045/46 USB DVB-T' registered. [ 609.967595][ T5990] rc_core: IR keymap rc-twinhan1027 not found [ 609.987833][ T5990] Registered IR keymap rc-empty [ 609.996490][ T5990] rc rc0: DigitalNow TinyUSB 2 DVB-t Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 610.012739][ T5990] input: DigitalNow TinyUSB 2 DVB-t Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input86 [ 610.032531][ T5990] dvb-usb: schedule remote query interval to 400 msecs. [ 610.049633][ T5990] vp7045: USB control message 'out' went wrong. [ 610.056012][ T5990] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver successfully initialized and connected. [ 610.222270][T10768] usb 2-1: USB disconnect, device number 121 [ 610.544667][T10768] ================================================================== [ 610.552775][T10768] BUG: KASAN: slab-use-after-free in media_devnode_unregister+0xe2/0xf0 [ 610.561128][T10768] Read of size 4 at addr ffff88807c51f4f0 by task kworker/1:12/10768 [ 610.569201][T10768] [ 610.571534][T10768] CPU: 1 UID: 0 PID: 10768 Comm: kworker/1:12 Not tainted syzkaller #0 PREEMPT(full) [ 610.571561][T10768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 610.571576][T10768] Workqueue: usb_hub_wq hub_event [ 610.571603][T10768] Call Trace: [ 610.571613][T10768] [ 610.571621][T10768] dump_stack_lvl+0x189/0x250 [ 610.571642][T10768] ? rcu_is_watching+0x15/0xb0 [ 610.571666][T10768] ? __kasan_check_byte+0x12/0x40 [ 610.571691][T10768] ? __pfx_dump_stack_lvl+0x10/0x10 [ 610.571708][T10768] ? rcu_is_watching+0x15/0xb0 [ 610.571737][T10768] ? lock_release+0x4b/0x3e0 [ 610.571760][T10768] ? __virt_addr_valid+0x1c8/0x5c0 [ 610.571789][T10768] ? __virt_addr_valid+0x4a5/0x5c0 [ 610.571818][T10768] print_report+0xca/0x240 [ 610.571838][T10768] ? media_devnode_unregister+0xe2/0xf0 [ 610.571864][T10768] kasan_report+0x118/0x150 [ 610.571887][T10768] ? media_devnode_unregister+0xe2/0xf0 [ 610.571916][T10768] media_devnode_unregister+0xe2/0xf0 [ 610.571942][T10768] media_device_unregister+0x37c/0x400 [ 610.571971][T10768] dvb_usb_adapter_dvb_exit+0xf3/0x1b0 [ 610.571994][T10768] dvb_usb_adapter_exit+0x8b/0x240 [ 610.572016][T10768] dvb_usb_device_exit+0x1b6/0x350 [ 610.572034][T10768] ? lockdep_hardirqs_on+0x9c/0x150 [ 610.572063][T10768] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 610.572080][T10768] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 610.572111][T10768] ? usb_disable_interface+0x31d/0x350 [ 610.572137][T10768] usb_unbind_interface+0x26e/0x910 [ 610.572163][T10768] ? __pfx_usb_unbind_interface+0x10/0x10 [ 610.572187][T10768] device_release_driver_internal+0x4d9/0x800 [ 610.572213][T10768] bus_remove_device+0x34d/0x410 [ 610.572232][T10768] device_del+0x511/0x8e0 [ 610.572255][T10768] ? __pm_runtime_barrier+0x212/0x460 [ 610.572277][T10768] ? __pfx_device_del+0x10/0x10 [ 610.572298][T10768] ? __pfx___mutex_lock+0x10/0x10 [ 610.572321][T10768] usb_disable_device+0x3e9/0x8a0 [ 610.572346][T10768] usb_disconnect+0x330/0x950 [ 610.572378][T10768] hub_event+0x1cf5/0x4a20 [ 610.572418][T10768] ? do_raw_spin_lock+0x121/0x290 [ 610.572447][T10768] ? register_lock_class+0x51/0x320 [ 610.572471][T10768] ? __pfx_hub_event+0x10/0x10 [ 610.572491][T10768] ? process_scheduled_works+0x9ef/0x17b0 [ 610.572518][T10768] ? _raw_spin_unlock_irq+0x23/0x50 [ 610.572544][T10768] ? process_scheduled_works+0x9ef/0x17b0 [ 610.572566][T10768] ? process_scheduled_works+0x9ef/0x17b0 [ 610.572587][T10768] process_scheduled_works+0xae1/0x17b0 [ 610.572623][T10768] ? __pfx_process_scheduled_works+0x10/0x10 [ 610.572653][T10768] worker_thread+0x8a0/0xda0 [ 610.572686][T10768] kthread+0x711/0x8a0 [ 610.572716][T10768] ? __pfx_worker_thread+0x10/0x10 [ 610.572740][T10768] ? __pfx_kthread+0x10/0x10 [ 610.572769][T10768] ? _raw_spin_unlock_irq+0x23/0x50 [ 610.572795][T10768] ? lockdep_hardirqs_on+0x9c/0x150 [ 610.572822][T10768] ? __pfx_kthread+0x10/0x10 [ 610.572850][T10768] ret_from_fork+0x47c/0x820 [ 610.572874][T10768] ? __pfx_ret_from_fork+0x10/0x10 [ 610.572901][T10768] ? __switch_to_asm+0x39/0x70 [ 610.572922][T10768] ? __switch_to_asm+0x33/0x70 [ 610.572942][T10768] ? __pfx_kthread+0x10/0x10 [ 610.572970][T10768] ret_from_fork_asm+0x1a/0x30 [ 610.572998][T10768] [ 610.573006][T10768] [ 610.573474][T15156] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2654'. [ 610.582542][T10768] Allocated by task 5990: [ 610.582559][T10768] kasan_save_track+0x3e/0x80 [ 610.582581][T10768] __kasan_kmalloc+0x93/0xb0 [ 610.582599][T10768] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 610.582618][T10768] __media_device_register+0x58/0x280 [ 610.582640][T10768] dvb_usb_device_init+0x1bed/0x2580 [ 610.582657][T10768] usb_probe_interface+0x665/0xc30 [ 610.582679][T10768] really_probe+0x26d/0x9e0 [ 610.582701][T10768] __driver_probe_device+0x18c/0x2f0 [ 610.582724][T10768] driver_probe_device+0x4f/0x430 [ 610.582747][T10768] __device_attach_driver+0x2ce/0x530 [ 610.582770][T10768] bus_for_each_drv+0x24e/0x2e0 [ 610.598250][ T5937] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 610.601098][T10768] __device_attach+0x2b8/0x400 [ 610.601128][T10768] bus_probe_device+0x185/0x260 [ 610.601144][T10768] device_add+0x7b6/0xb50 [ 610.601163][T10768] usb_set_configuration+0x1a87/0x20e0 [ 610.601184][T10768] usb_generic_driver_probe+0x8d/0x150 [ 610.982626][T10768] usb_probe_device+0x1c1/0x390 [ 610.987473][T10768] really_probe+0x26d/0x9e0 [ 610.991969][T10768] __driver_probe_device+0x18c/0x2f0 [ 610.997243][T10768] driver_probe_device+0x4f/0x430 [ 611.002253][T10768] __device_attach_driver+0x2ce/0x530 [ 611.007624][T10768] bus_for_each_drv+0x24e/0x2e0 [ 611.012473][T10768] __device_attach+0x2b8/0x400 [ 611.017226][T10768] bus_probe_device+0x185/0x260 [ 611.022068][T10768] device_add+0x7b6/0xb50 [ 611.026386][T10768] usb_new_device+0xa39/0x16f0 [ 611.031142][T10768] hub_event+0x2958/0x4a20 [ 611.035549][T10768] process_scheduled_works+0xae1/0x17b0 [ 611.041087][T10768] worker_thread+0x8a0/0xda0 [ 611.045668][T10768] kthread+0x711/0x8a0 [ 611.049733][T10768] ret_from_fork+0x47c/0x820 [ 611.054315][T10768] ret_from_fork_asm+0x1a/0x30 [ 611.059069][T10768] [ 611.061380][T10768] Freed by task 10768: [ 611.065431][T10768] kasan_save_track+0x3e/0x80 [ 611.070100][T10768] __kasan_save_free_info+0x46/0x50 [ 611.075300][T10768] __kasan_slab_free+0x5b/0x80 [ 611.080054][T10768] kfree+0x199/0x6d0 [ 611.083937][T10768] media_devnode_release+0x61/0xa0 [ 611.089044][T10768] device_release+0x99/0x1c0 [ 611.093635][T10768] kobject_put+0x228/0x480 [ 611.098037][T10768] media_devnode_unregister+0x6d/0xf0 [ 611.103400][T10768] media_device_unregister+0x37c/0x400 [ 611.108849][T10768] dvb_usb_adapter_dvb_exit+0xf3/0x1b0 [ 611.114297][T10768] dvb_usb_adapter_exit+0x8b/0x240 [ 611.119397][T10768] dvb_usb_device_exit+0x1b6/0x350 [ 611.124492][T10768] usb_unbind_interface+0x26e/0x910 [ 611.129689][T10768] device_release_driver_internal+0x4d9/0x800 [ 611.135764][T10768] bus_remove_device+0x34d/0x410 [ 611.140695][T10768] device_del+0x511/0x8e0 [ 611.145020][T10768] usb_disable_device+0x3e9/0x8a0 [ 611.150033][T10768] usb_disconnect+0x330/0x950 [ 611.154711][T10768] hub_event+0x1cf5/0x4a20 [ 611.159114][T10768] process_scheduled_works+0xae1/0x17b0 [ 611.164650][T10768] worker_thread+0x8a0/0xda0 [ 611.169235][T10768] kthread+0x711/0x8a0 [ 611.173303][T10768] ret_from_fork+0x47c/0x820 [ 611.177891][T10768] ret_from_fork_asm+0x1a/0x30 [ 611.182651][T10768] [ 611.184958][T10768] The buggy address belongs to the object at ffff88807c51f000 [ 611.184958][T10768] which belongs to the cache kmalloc-2k of size 2048 [ 611.198996][T10768] The buggy address is located 1264 bytes inside of [ 611.198996][T10768] freed 2048-byte region [ffff88807c51f000, ffff88807c51f800) [ 611.212956][T10768] [ 611.215275][T10768] The buggy address belongs to the physical page: [ 611.221686][T10768] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c518 [ 611.230435][T10768] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 611.238916][T10768] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 611.246443][T10768] page_type: f5(slab) [ 611.250418][T10768] raw: 00fff00000000040 ffff88801a842000 dead000000000100 dead000000000122 [ 611.258989][T10768] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 611.267571][T10768] head: 00fff00000000040 ffff88801a842000 dead000000000100 dead000000000122 [ 611.276236][T10768] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 611.284896][T10768] head: 00fff00000000003 ffffea0001f14601 00000000ffffffff 00000000ffffffff [ 611.293558][T10768] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 611.302214][T10768] page dumped because: kasan: bad access detected [ 611.308624][T10768] page_owner tracks the page as allocated [ 611.314323][T10768] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10, tgid 10 (kworker/0:1), ts 80494636386, free_ts 80444955936 [ 611.335264][T10768] post_alloc_hook+0x240/0x2a0 [ 611.340024][T10768] get_page_from_freelist+0x21e4/0x22c0 [ 611.345563][T10768] __alloc_frozen_pages_noprof+0x181/0x370 [ 611.351359][T10768] alloc_pages_mpol+0x232/0x4a0 [ 611.356196][T10768] allocate_slab+0x8a/0x330 [ 611.360700][T10768] ___slab_alloc+0xbd1/0x13f0 [ 611.365371][T10768] __slab_alloc+0x55/0xa0 [ 611.369692][T10768] __kmalloc_node_track_caller_noprof+0x5c7/0x800 [ 611.376093][T10768] kmalloc_reserve+0x136/0x290 [ 611.380852][T10768] __alloc_skb+0x142/0x2d0 [ 611.385271][T10768] mld_newpack+0x13c/0xc40 [ 611.389692][T10768] add_grhead+0x5a/0x2a0 [ 611.393928][T10768] add_grec+0x1452/0x1740 [ 611.398251][T10768] mld_ifc_work+0x6ed/0xd60 [ 611.402758][T10768] process_scheduled_works+0xae1/0x17b0 [ 611.408297][T10768] worker_thread+0x8a0/0xda0 [ 611.412878][T10768] page last free pid 5867 tgid 5867 stack trace: [ 611.419182][T10768] __free_frozen_pages+0xbc4/0xd30 [ 611.424279][T10768] __put_partials+0x146/0x170 [ 611.428945][T10768] put_cpu_partial+0x17c/0x250 [ 611.433700][T10768] __slab_free+0x2b9/0x390 [ 611.438107][T10768] qlist_free_all+0x97/0x140 [ 611.442683][T10768] kasan_quarantine_reduce+0x148/0x160 [ 611.448136][T10768] __kasan_slab_alloc+0x22/0x80 [ 611.452978][T10768] __kmalloc_cache_noprof+0x36f/0x6f0 [ 611.458344][T10768] kset_create_and_add+0x5a/0x170 [ 611.463358][T10768] netdev_register_kobject+0x1a2/0x310 [ 611.468808][T10768] register_netdevice+0x126c/0x1ae0 [ 611.473997][T10768] nsim_create+0xae8/0xf10 [ 611.478405][T10768] __nsim_dev_port_add+0x6b6/0xb10 [ 611.483510][T10768] nsim_dev_port_add_all+0x37/0xf0 [ 611.488616][T10768] nsim_drv_probe+0x88e/0xba0 [ 611.493280][T10768] really_probe+0x26d/0x9e0 [ 611.497783][T10768] [ 611.500090][T10768] Memory state around the buggy address: [ 611.505703][T10768] ffff88807c51f380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 611.513759][T10768] ffff88807c51f400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 611.521817][T10768] >ffff88807c51f480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 611.529870][T10768] ^ [ 611.537575][T10768] ffff88807c51f500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 611.545624][T10768] ffff88807c51f580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 611.553670][T10768] ================================================================== [ 611.575792][T15158] netlink: 'syz.4.2654': attribute type 10 has an invalid length. [ 611.596842][T15158] bridge0: port 3(team0) entered disabled state [ 611.617940][T15158] team0: left allmulticast mode [ 611.622922][T15158] team_slave_0: left allmulticast mode SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 611.666593][T15158] team_slave_1: left allmulticast mode [ 611.727267][ T5937] usb 7-1: Using ep0 maxpacket: 32 [ 611.744471][T15158] team0: left promiscuous mode [ 611.770397][T15158] team_slave_0: left promiscuous mode [ 611.817348][T15158] team_slave_1: left promiscuous mode [ 611.842900][T15158] bridge0: port 3(team0) entered disabled state [ 611.865619][T10768] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 611.872852][T10768] CPU: 1 UID: 0 PID: 10768 Comm: kworker/1:12 Not tainted syzkaller #0 PREEMPT(full) [ 611.882404][T10768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 611.892472][T10768] Workqueue: usb_hub_wq hub_event [ 611.897525][T10768] Call Trace: [ 611.900812][T10768] [ 611.903749][T10768] dump_stack_lvl+0x99/0x250 [ 611.908351][T10768] ? __asan_memcpy+0x40/0x70 [ 611.912957][T10768] ? __pfx_dump_stack_lvl+0x10/0x10 [ 611.918164][T10768] ? __pfx__printk+0x10/0x10 [ 611.922775][T10768] vpanic+0x237/0x6d0 [ 611.926765][T10768] ? __pfx_vpanic+0x10/0x10 [ 611.931274][T10768] ? preempt_schedule+0xae/0xc0 [ 611.936140][T10768] ? __pfx_preempt_schedule+0x10/0x10 [ 611.941526][T10768] panic+0xb9/0xc0 [ 611.945259][T10768] ? __pfx_panic+0x10/0x10 [ 611.949684][T10768] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 611.955600][T10768] ? media_devnode_unregister+0xe2/0xf0 [ 611.961154][T10768] check_panic_on_warn+0x89/0xb0 [ 611.966096][T10768] ? media_devnode_unregister+0xe2/0xf0 [ 611.971657][T10768] end_report+0x78/0x160 [ 611.975906][T10768] kasan_report+0x129/0x150 [ 611.980415][T10768] ? media_devnode_unregister+0xe2/0xf0 [ 611.985979][T10768] media_devnode_unregister+0xe2/0xf0 [ 611.991363][T10768] media_device_unregister+0x37c/0x400 [ 611.996836][T10768] dvb_usb_adapter_dvb_exit+0xf3/0x1b0 [ 612.002300][T10768] dvb_usb_adapter_exit+0x8b/0x240 [ 612.007422][T10768] dvb_usb_device_exit+0x1b6/0x350 [ 612.012540][T10768] ? lockdep_hardirqs_on+0x9c/0x150 [ 612.017754][T10768] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 612.023390][T10768] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 612.029299][T10768] ? usb_disable_interface+0x31d/0x350 [ 612.034772][T10768] usb_unbind_interface+0x26e/0x910 [ 612.039983][T10768] ? __pfx_usb_unbind_interface+0x10/0x10 [ 612.045710][T10768] device_release_driver_internal+0x4d9/0x800 [ 612.051793][T10768] bus_remove_device+0x34d/0x410 [ 612.056739][T10768] device_del+0x511/0x8e0 [ 612.061079][T10768] ? __pm_runtime_barrier+0x212/0x460 [ 612.066460][T10768] ? __pfx_device_del+0x10/0x10 [ 612.071323][T10768] ? __pfx___mutex_lock+0x10/0x10 [ 612.076352][T10768] usb_disable_device+0x3e9/0x8a0 [ 612.081382][T10768] usb_disconnect+0x330/0x950 [ 612.086074][T10768] hub_event+0x1cf5/0x4a20 [ 612.090508][T10768] ? do_raw_spin_lock+0x121/0x290 [ 612.095546][T10768] ? register_lock_class+0x51/0x320 [ 612.100745][T10768] ? __pfx_hub_event+0x10/0x10 [ 612.105499][T10768] ? process_scheduled_works+0x9ef/0x17b0 [ 612.111212][T10768] ? _raw_spin_unlock_irq+0x23/0x50 [ 612.116405][T10768] ? process_scheduled_works+0x9ef/0x17b0 [ 612.122112][T10768] ? process_scheduled_works+0x9ef/0x17b0 [ 612.127822][T10768] process_scheduled_works+0xae1/0x17b0 [ 612.133367][T10768] ? __pfx_process_scheduled_works+0x10/0x10 [ 612.139342][T10768] worker_thread+0x8a0/0xda0 [ 612.143933][T10768] kthread+0x711/0x8a0 [ 612.147996][T10768] ? __pfx_worker_thread+0x10/0x10 [ 612.153099][T10768] ? __pfx_kthread+0x10/0x10 [ 612.157682][T10768] ? _raw_spin_unlock_irq+0x23/0x50 [ 612.162870][T10768] ? lockdep_hardirqs_on+0x9c/0x150 [ 612.168058][T10768] ? __pfx_kthread+0x10/0x10 [ 612.172642][T10768] ret_from_fork+0x47c/0x820 [ 612.177224][T10768] ? __pfx_ret_from_fork+0x10/0x10 [ 612.182327][T10768] ? __switch_to_asm+0x39/0x70 [ 612.187085][T10768] ? __switch_to_asm+0x33/0x70 [ 612.191851][T10768] ? __pfx_kthread+0x10/0x10 [ 612.196435][T10768] ret_from_fork_asm+0x1a/0x30 [ 612.201199][T10768] [ 612.204461][T10768] Kernel Offset: disabled [ 612.208773][T10768] Rebooting in 86400 seconds..