last executing test programs: 7m32.402594583s ago: executing program 0 (id=50): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x80040, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2208}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x40000) rt_sigaction(0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000240)) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0xa0, r1, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x4b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="9e4b3269273c"}, @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fc00}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a0}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}]]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x40050) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xffffffff]}, 0x0, 0x8) r2 = gettid() tkill(r2, 0x11) io_pgetevents(0x0, 0x9, 0x0, 0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={[0x5]}, 0x8}) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x80040, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2208}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x40000) (async) rt_sigaction(0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000240)) (async) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0xa0, r1, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x4b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="9e4b3269273c"}, @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fc00}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a0}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}]]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x40050) (async) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xffffffff]}, 0x0, 0x8) (async) gettid() (async) tkill(r2, 0x11) (async) io_pgetevents(0x0, 0x9, 0x0, 0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={[0x5]}, 0x8}) (async) 7m32.298847496s ago: executing program 0 (id=53): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept$alg(r3, 0x0, 0x0) accept(r4, 0x0, 0x0) (async) r5 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[], 0x314}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x20000010) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000012000501000000000000000028001a000000000000000000000000000000000000000001020001001ea1a0363491f0b6f60ec1"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040810) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000012000501000000000000000028001a000000000000000000000000000000000000000001020001001ea1a0363491f0b6f60ec1"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040810) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) 7m32.134569884s ago: executing program 0 (id=56): r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000006900)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43", 0x43, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000040)={r2, 0x64, 0xba}, &(0x7f0000000080)={'enc=', 'pkcs1', ' hash=', {'md4-generic\x00'}}, &(0x7f0000000100)="a725fc7c4010c6ea6fd635912ec3453b2915dad3b2a4a76df6fe6757c0ed9cd49957724c82b84893184e83e0817c0de6d7c265b66f09163bb9dd5efc6dd5688549864de58bf6845cb45f07d00aa5654d46f888c8cd4fc2f95fa9696ba51379b984183a2c", &(0x7f0000000180)=""/186) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) 7m30.9594776s ago: executing program 0 (id=65): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$vcsa(&(0x7f00000000c0), 0x2000000000003, 0x400083) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000000)=0x4) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x3, 0x0, 0x7, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0xfffffffffffff000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 7m30.721206923s ago: executing program 0 (id=68): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="a2", 0xfffffd2a}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) (async) close(r1) close(r0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r2 = geteuid() (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0xfffffff7, 0x9f3, {0xffffffffffffffff}, {0x0}, 0x800, 0x7}) lstat(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000340)={0xde, 0x100, {}, {0xffffffffffffffff}, 0x2, 0x9}) mount$cgroup(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000140), 0x40000, &(0x7f0000000400)={[{}, {@xattr}, {@none}, {@subsystem='freezer'}], [{@obj_type={'obj_type', 0x3d, '^'}}, {@fowner_lt={'fowner<', r2}}, {@fowner_gt={'fowner>', r3}}, {@obj_user={'obj_user', 0x3d, 'overlay\x00'}}, {@uid_gt={'uid>', r4}}, {@uid_lt={'uid<', r5}}]}) 7m30.362244083s ago: executing program 0 (id=71): syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xe8, 0x2, 0x49, 0x40, 0x8ca, 0x103, 0xd098, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4f, 0x0, 0x3, 0x9e, 0x8d, 0xe, 0x0, [], [{{0x9, 0x5, 0x8, 0x10, 0x200, 0x2, 0x9, 0xe}}, {{0x9, 0x5, 0x80, 0x2, 0x20, 0x1, 0xff, 0x5}}, {{0x9, 0x5, 0x3, 0x8, 0x200, 0x9, 0xf0, 0xa5}}]}}]}}]}}, 0x0) r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r1 = memfd_create(&(0x7f0000000300)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4O$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\x19\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\xcdSL\b\x7f\xfe\xab\xd7\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\xa4\x83t\xdcyx', 0x8) umount2(&(0x7f0000000100)='./cgroup\x00', 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000001180)=ANY=[@ANYBLOB="120100030102030109021b000101021000090400540107010202097ac65bed4a79ed40d97238ded7050102000205070900"/58], &(0x7f0000001a40)={0xa, &(0x7f0000001840)={0xa, 0x6, 0x110, 0x40, 0x4, 0x8, 0x20, 0xf1}, 0xf, &(0x7f0000001880)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x0, 0x4}]}, 0x4, [{0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x1809}}, {0x23, &(0x7f0000001900)=@string={0x23, 0x3, "5c595ea2e7e2af7b82f66e63609501c9e396ae292e586206fb8b0f5aba317ad5a0"}}, {0x73, &(0x7f0000001940)=@string={0x73, 0x3, "dc20a15d4a39d77062e4611338bf6c315139d7882ce4632529ec761cf3f7149a86f4a588c340c85a2a92ffafe6cc64c8f1d7e9537dc272e6a2398de9e298fe1fb0cb663aa82bceedbd9bc81bc1fcd0a268f5590d27e448a0ec9255aa971c1a3a15be2e05078a2ea7933fec202b132e1223"}}, {0x74, &(0x7f00000019c0)=@string={0x74, 0x3, "5177d30c2aa6d72d755f7706893c8a985ce68767ef0e4077acf87a843b1317ba3aefeaf821ec82666aab03eb8383a6f64555fcd3e804cfebc5e73680c2e8162cf2eb2e9f3e20f1c6f679f51bf8ea551f4f5d7b202936cb3269fdf5213afa5e943e5c0791aba573dffce6ce99f07dbf0cb7ff"}}]}) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000001800)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000001200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000001280)={0x2, 0x0, &(0x7f0000001240)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000013c0)={&(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001300)=[0x0, 0x0], &(0x7f0000001340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x2, 0x6, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000001500)={&(0x7f0000001400)=[0x0], &(0x7f0000001440)=[0x0, 0x0], &(0x7f0000001480)=[0x0], &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x1, 0x6}) r6 = syz_pidfd_open(0xffffffffffffffff, 0x0) pidfd_getfd(r6, r0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000001680)={&(0x7f0000001580)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000015c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0xa, 0x4, 0x9}) r8 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x20, 0x3, 0x3, 0x5, 0x0, 0x7, 0x7, 0x5, 0x5, 0x1, 0x8000000, 0x1, 0x1003, 0x2, 0xffff, 0xffff, 0xffffffa8, 0x80000000, 0x1ff, 0x3, 0x10, 0xbf9, 0x8, 0xe2df, 0x800746f, 0x8, 0x5, 0x0, 0x1, 0x4, 0x8049]}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000001700)={&(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000001780)={&(0x7f0000001540)=[r3, r4, r5], 0x3, r7, r9, 0x9, 0x9, 0x1, 0x5, {0x4, 0x5, 0x0, 0x9, 0x5, 0x2, 0x0, 0xa, 0x5, 0x2, 0x3, 0x2, 0x10, 0x8000, "43b86e3282da52f044349e80eea9166c191661cac89b7d5ac70c78c9d7b3525c"}}) fallocate(r1, 0x0, 0x0, 0x400001) fcntl$addseals(r1, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) syz_clone(0x8000, &(0x7f00000000c0)="b64639bac328ff8bf0ab1390a8f840f05d9b1858391d7deaf639207fb9d485df26d0ce1344e32d374071b365f8232728f4a61dd6f746a73f1fd2411c0643a3ca37507003fcac7ded6a103c387913bd17193ee346a4e2e4ec4806bcf74baee4754368f75b4e67f02dd9bbdb354bc095a74965b6a73c2e19abe8d5417042e159619d1d42ef30304362fa4d8bd7ba0dcbd88418aeb582aacf70d8d81222815d601d57de745c5a18f0af4a68d6398595095f4b9b352bad1e70f94e1cc3e4371b3d0e63f56d9d46ed7c5750f1e0dac6f5ed9472b64bc3d55fae745b8bfe51feb599593c7d4a32bde1616c045b6639e9a292e76777cee0629385d4e5cbf93ed979a15a99db0053af46e9fd0e6ea8f9eea6d249af83286476a53a837df738979e87f83cdb89ffa1e4d6250405ca9536b5521e32ace701fd60c79866897af3e7ebdc3a7837bca91735b1c1dd54325b138bb834cf774dd2c4fa6313d57e23eac39ab42855bd4cbd07cd4b9c1a6bb2e755a8cd04a5eb7f3da3abec0853d6693d298bc2932741bdff4a88bf28c7da0a292db3f4033b361c295e87c1b22deba9ea04174466a097517d20277526ef8ae0682e70106c5990d16459a03e5e703335c3a5398a9dd495ca7d359f2e6dd02cb6fdd4611dd60f643ddbb22adce01d7817862bad6f77fa73cf0e58ab560f38d89a2fe1099761ea1bf4e724006ab81e3085f8b87f36b473fa049a11f00e3ef357fde3f455402a54b0b0aa69b7a364f643ee2fbd855ba29c0e62e5d5477af0be8c5359145cf3695b9cc87a87e206b4e28177644b711b0901bbb9bd59de8b749a538f95f15e703754b6d5c8fa91df4d30dd1cb8566f86c5eb16b00895ecf9ee038191b392bbdba586f0d6a4f6244b3693548c32a12a2eac2a75b9928187d92348c589cf364db3ea88cd5f94f7912fff47991c26307157bf3a8ca720260b05ae1d3d27e16318d55b80df7b9722020c616ef646d7b4dd5586b0c2882db3c0906c382c0f6a0e65cf31e73a4c72b964b8da55a56d2640b6ba7e742da72d0ce26e3fda6b04ef40387948fb12228591037bc6e811eabdb13e69b5b8c99050413cf11a038707bf7e4e8995ff0e2f2f482f60078d0f1ae11b10934e8e491d4ef05633fbb4e823c8f5b273f015535926bb34f6ef4b4a8ba457caf54ca6d9e6fa37684372b93de7b04dee0302707989991fed636059654dcd6f6b00cbd130b62977417bdc5b9f8616a6fd42d0756e3f157f3b277c6bfaba29511ab4188010f07789cc494f3c5ee9c3e7f44861591176b7f3491f40adc3b970bb12872b22447776caa8530d537af530b1e8a52736885e6b1a891eda2d4128eb7c17402a19cc9c82646e9f26cd20de9c7f81e1fa712fff2cd89fc8e442a16a39f6d1f8f673a53997fa788c80b55fcf9bda35b9f6b4905606b4cd959b2a84550907859f1ae04c9042ad06296b51c87a192dc1abc346892eeaf07f9b624e384bacf908eb5d2bc98c65ce779c3034430dee4238e7a2b3cb24cf78cd375174cc6f4f76652a6d63e462b2d112442fc7e6796cadef2be0689ac00bfaa12162a33f35a02f83a377fd74139a8a2e2b57b756484123af95547c81da20e01ba5722049cf449b029fdedfd854145dfa2ce508bf54ce8545830fb4488a775a8f812cd0b4c2353402fd491d12cfcf957fbdb9943c58abcf2b4adce1f80c7108a9f683ea6f324b9f38ad913ee790f4571377225cbff5baa657bcc61bf07193a6b0a4327b595280c6ae2e0b6f2bc281b3b2c311a9cc71a087aabb80c4d33931282a78d41ad186ff0c32f4f3835bb07c11b97cb2d95266b821dce120f95be4b245b9689861989f2ff682475c86cfb7e1aa81ebd38f5da35912c83ad397773c45c98751f1d6a26a4ea4fdb65bcf5af831b2e70d12bc79bcb087f0ad2580856af3b64dd92c40b2a32bab17a5e3a9f9eb0248ebbb24eaabffb4eeb819a2862ca45ccaea36b867d1386352b6fe239e9ad0cb771416595a4312c4f70ff2b53238fe0f4954e977309363ac987b9129e99a42c1e09e023a69b8640f2338056ec3a7aceebdf9df171fe10ac816cff71b0c982183b2838551237185d949e10923ff7dfd0f307f90e31d16e847d45a6f3cd70b68fb5ff0ffe190641d3a740e0f881de6e2b6cad3f270d4633c2cb30fd6dec53b4903da7b37cc4e0f0138e7b2592a7ce2c6cb052f94a9f4013de3cf6207faed96dd4920e4e035b940341fb1d87cb98c85fb8f8173652e75f997992a0bbeae78d10e36be55070651a53d45835df46aec2560adfe478237971282c335270a8d7110c817f9dfb82af5bbcbd1ec57dbec6dd8e3db81e34e095c3557f8bdda16446c129273d3661b6afc75c07a9c3958b1efc36a4999af658b26ca928929217d569994ebd0218e83b05eaa00119bc35bfac4a9a63d630100a67a9f589493c6af02e2d741361de851976e67232d78ab24739de6b8029f58f5a59bf2b521dbe9c0e8fb53915b095c6498a271e56d8c586a23846183c28ae11cd0955299513d72582d9becb67835878d86ad2d0e0c58feebb7d6d1ad51acd0ff223b805ba170954398120cd61edf7d52f068e9bce43a8c2923ea5e2984f9c5165b8f0cc0facddfe4ece54e06ae4244850ffae69a1e44e68c8381b1033761362921d8d8a44a77775177c69ca172667afa5c8afecba49f174703e856c20ed061771ac394eac25334b361bb24b98e5d6db7dd67008f6ac0f8adaebca9585bfa2458f10c66c364785295270be7f41c30a6c22204e27a1a79d746fddc0387a11dfabac46302d5ab2941a705f3afacee291e26eb517953474dad69362f86330c2153a0b869a6cb75e376cfc20d6eb23016b5b250e9aeb6ac31cd9ef221f963dbaff3d3952c061d7ee81e8254bec72264608d1b8688fa62bd8942e01bd448db7371159fac67b8f624db4f1af750f85560d532212293c15aa48379b84315101c069d6f606f075030913faac8002e52598974f8a6a7c0ac463409dd6801d2c705d18134b5597237134d2d1ac551becbb5ddb399027730da108cfcd1a2cd598c68a6a2fa24ee5ec7e19b07a7113499c69fe3f3b197305af7b39b9bd0ee3fe7b6b43b02c29b2dd6ff9ab9757fa72680cbdf16b0012ba9974aab47c26cbd814d6c94f264b3dd593486a5b0428364b80da41b8081d625af7f2ed3c202052e15ddd78b2dd277288320a971112264f1d648c1f906723dbe9c2d292167af3c27be8677b74bdf7b41d81a7c37e0cdae2438860cc9846932a4323f2d17b942441846fe6504856661339525e18ef6843845c2f2167ff85bc3ac0d148be56ed000c3b7dd08faf4b8cad8bd1549e3358d4461b397a76b2562020803e1ecbebce9a9ce4d62b215e46a91c83bf959fd83a6610a03ee883f3a590eba638780436b4c18d29b236b1d61adb2bb3ef88c7c80214069b5da2fab4723f4eb8cd81aab1b2730cafc93c34a98a80a0d263d1af2817b7fbdd38eee65f67f87d19614711ddea0010329d78302414dda2304813b9423bf14e3831eeedefb6d5f106857002b45c789874d0ed0b3ece1f8f1e8446af127f7b667e93a9765e89b8a549083af133209d012ae7fa01cf42bca2fcb03f08e99ba446433a67a94e8f1a19e45ba9597b0b814ab003c0dade77f24f6073414d841fbe9490bf5aa532da48c4d850f7929dca3ed6f74492622a04cfc7b16b4df01c9e4a0c2d126903910aa6a1ac26bccf614032c3683adfb821a1836973509fe6ba6da6bfd8d1485177671861751355c1687c6877dde4bc9fbb150f8ba221b7da51fba6610229378ccf293ced54f005230fffada847ec5f63649b68463f3dd08abeac6f031f94fec4cbf914eb1cdd3834ffb5fe4818f9a93bfe62b35e144cd27be4bf86553c1f48c60b5da4f5154de92c791f561e23c10869580f6914e6e2f399b32ecd9be2113aeb4a69d78294ce0f8068cf7e5f64ea0eed267aa37b72b8f1d6989b2b0f6937a5fb7cdf65674c615af38510577c6b19f3b6df99bcffad3cb5f46d9341cccb9a5578e2ebea4d4763607d7db4629ff27e380d826a4cd0f6e2e808a4b4095c4b736432c94de0a99a83fd547b0060b5e4948dddb188ceb43353fa2acc3c22764bd8f7780ec4cbc68d76221b7adebf3b1fbf2180b7dd7a51c3d32c4529abf0b4970f5cbc25774fd06ceae01eb761f7e1eed2b8e6d84bc6c8ceb99e388be435c8e1c25301c994bbf8844e09bc59594943d93ac64d1b6515989ab27d006f65d69e76f18dace18f5e69868c511920b64ca01762d11ee0e68968e4ae05a12e9d25e17bc6cbbcdb975e11e2688db55c263b7d652e45e465cb0aa9f6666d27a810cb5b8853c05e552ef7ccdcb9cadfc0a8ab5dace167ca104a7195bf602aad2f765e8fae4a07e36da58ab3752d3f6a50d63bc6adb8a58437027af8d18e0272fce92ad1339bf496873b0f95e931e42b3941c534344585337575f0dd59d99ce6e01f56a3e04c3ddc5cdb92a30fdcad65365d86e27a0cb3c5eff1043c49dec3b63b39735fea7a64645af09252a2bb65ba0f5882f809396176b0e54f013baaeafcbd016e24f447e649e17efd72ef7b78ff88bea7adf3b17a84b35cfe3f491434b42a00092215218c3da423c69aabf073e57cd7ddb483338148c1f11b009b4e66b304d7174ec95eef90482dd3ee68e9d115a0dc456dddcb3a304843ed9d5fb2f34c61bb394b0253f311ed8aa617872eab6ced9658d445319fbec1087d0c19af25bf9f46fdd77ce5b77327c54f96e3988ca3bc85948250b6b36ff2c6ca719678c6e2991e722de7d893efee1e951fb6d11e7b426b388fbb32891b013aa6724eeb187cb654512e6bda40f202daed3d4eb4cd21f7479bc1cde3f30d6619db4fdfc5d10b08881a428ccf8596b1da4e4bafaa4c317a9dc965ce2277e6cea7d199359ac41a7e08a4de7b7d6c3ab4a19ed995390f65fd1db752b9822597c2a03320c6d996453bbb34f376eb3979498f238bb56b3fbf82d93b28e146b2340b2e858a6dd835ad917d8c74c3dfefb6b011c177fb7b6d2e150cb8f6217235b7ec1ee6929807225cf9e695273030dd03c5043c61eb597f4c95ab0f1285c8a10e76f32340d9f43f1ac2c434dfc5d2ee713e1f7203986ab85665ebf7053a5e049859b13e2434e949bb30d26700592c639f0740e8acda242e1318c49bd74c3dcd09aae8b88b862408b68c0db6c0e38b90ee4a0907832c09bad92551b1fe1fc3a4514c8460acad6951fc9855d74a0bc5d760b2f0cd507d0f3021e1445eb80b2243bca93cd31fd9b21d391a957efcf1b2b90f11ce3dbadb19b5fd6c333ce923f0a0d1a0b58ef8b3321fff7553c1a79ef75e72736553430d744edc92b29dbf002ab1197a4dbb6d5a79116ae8f629259345ab1d34ad712845c3924506246595ae2556a09bff130d12d6681a2f8331ad4e07cc1736e981d60e00f6bb1ba18498e8bab59060c3438586100d994caedd1434120645324d8ddf414de9bbe2a088c813571bb07249200d520f1dcd2d7d3ab06429fe4cc62d9f971e05fefa97864044db836cbbe2e4de386fdd609fde421f9e2b3f4faa9451004fba2190f64ce4d20bf2733a51f6b705112251c95a1013393ee3c746cc268c1b44353a0d1e722cd837f0cf35ca277d6263c933f1c94053623690af0231cb3e4c99f0e82d5fa443253a2f8addca39c8407c95e3966c51bd6198c364f2b3ac9de2cdad7054073711158f8b9204c49c4eb52308ee7f5754bd051a7e85c172f3b8996b17a6aa9c08a25bf7481b2c69b51646a6b309ee104dbaf2e1030a5", 0x1000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000010c0)="836123c6537e6d5eb3f63af8ec77a0a58bf9456226640950b8412340f1f844ef8e0c5df807287c7be5ae6560173b7d7eba776fb7b397f154ca8030dcbc243c11b78bf2d22c9e6735c3299e1da6bbcb0379e4062f8d12cad8075a89721c01f56b991df19f63add54a566cc4db6adb7a1da43e94c63ca81c4a7dee0f4787168caad7beaa82f360728738ce86") ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f00000011c0)) 7m30.188756894s ago: executing program 32 (id=71): syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xe8, 0x2, 0x49, 0x40, 0x8ca, 0x103, 0xd098, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4f, 0x0, 0x3, 0x9e, 0x8d, 0xe, 0x0, [], [{{0x9, 0x5, 0x8, 0x10, 0x200, 0x2, 0x9, 0xe}}, {{0x9, 0x5, 0x80, 0x2, 0x20, 0x1, 0xff, 0x5}}, {{0x9, 0x5, 0x3, 0x8, 0x200, 0x9, 0xf0, 0xa5}}]}}]}}]}}, 0x0) r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r1 = memfd_create(&(0x7f0000000300)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4O$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\x19\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\xcdSL\b\x7f\xfe\xab\xd7\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\xa4\x83t\xdcyx', 0x8) umount2(&(0x7f0000000100)='./cgroup\x00', 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000001180)=ANY=[@ANYBLOB="120100030102030109021b000101021000090400540107010202097ac65bed4a79ed40d97238ded7050102000205070900"/58], &(0x7f0000001a40)={0xa, &(0x7f0000001840)={0xa, 0x6, 0x110, 0x40, 0x4, 0x8, 0x20, 0xf1}, 0xf, &(0x7f0000001880)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x0, 0x4}]}, 0x4, [{0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x1809}}, {0x23, &(0x7f0000001900)=@string={0x23, 0x3, "5c595ea2e7e2af7b82f66e63609501c9e396ae292e586206fb8b0f5aba317ad5a0"}}, {0x73, &(0x7f0000001940)=@string={0x73, 0x3, "dc20a15d4a39d77062e4611338bf6c315139d7882ce4632529ec761cf3f7149a86f4a588c340c85a2a92ffafe6cc64c8f1d7e9537dc272e6a2398de9e298fe1fb0cb663aa82bceedbd9bc81bc1fcd0a268f5590d27e448a0ec9255aa971c1a3a15be2e05078a2ea7933fec202b132e1223"}}, {0x74, &(0x7f00000019c0)=@string={0x74, 0x3, "5177d30c2aa6d72d755f7706893c8a985ce68767ef0e4077acf87a843b1317ba3aefeaf821ec82666aab03eb8383a6f64555fcd3e804cfebc5e73680c2e8162cf2eb2e9f3e20f1c6f679f51bf8ea551f4f5d7b202936cb3269fdf5213afa5e943e5c0791aba573dffce6ce99f07dbf0cb7ff"}}]}) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000001800)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000001200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000001280)={0x2, 0x0, &(0x7f0000001240)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000013c0)={&(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001300)=[0x0, 0x0], &(0x7f0000001340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x2, 0x6, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000001500)={&(0x7f0000001400)=[0x0], &(0x7f0000001440)=[0x0, 0x0], &(0x7f0000001480)=[0x0], &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x1, 0x6}) r6 = syz_pidfd_open(0xffffffffffffffff, 0x0) pidfd_getfd(r6, r0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000001680)={&(0x7f0000001580)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000015c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0xa, 0x4, 0x9}) r8 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x20, 0x3, 0x3, 0x5, 0x0, 0x7, 0x7, 0x5, 0x5, 0x1, 0x8000000, 0x1, 0x1003, 0x2, 0xffff, 0xffff, 0xffffffa8, 0x80000000, 0x1ff, 0x3, 0x10, 0xbf9, 0x8, 0xe2df, 0x800746f, 0x8, 0x5, 0x0, 0x1, 0x4, 0x8049]}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000001700)={&(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000001780)={&(0x7f0000001540)=[r3, r4, r5], 0x3, r7, r9, 0x9, 0x9, 0x1, 0x5, {0x4, 0x5, 0x0, 0x9, 0x5, 0x2, 0x0, 0xa, 0x5, 0x2, 0x3, 0x2, 0x10, 0x8000, "43b86e3282da52f044349e80eea9166c191661cac89b7d5ac70c78c9d7b3525c"}}) fallocate(r1, 0x0, 0x0, 0x400001) fcntl$addseals(r1, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) syz_clone(0x8000, &(0x7f00000000c0)="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", 0x1000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000010c0)="836123c6537e6d5eb3f63af8ec77a0a58bf9456226640950b8412340f1f844ef8e0c5df807287c7be5ae6560173b7d7eba776fb7b397f154ca8030dcbc243c11b78bf2d22c9e6735c3299e1da6bbcb0379e4062f8d12cad8075a89721c01f56b991df19f63add54a566cc4db6adb7a1da43e94c63ca81c4a7dee0f4787168caad7beaa82f360728738ce86") ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f00000011c0)) 5m51.450755886s ago: executing program 3 (id=719): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455cb, 0x0) 5m51.415314422s ago: executing program 3 (id=720): r0 = socket$inet6(0xa, 0x80000, 0x4e) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@private1, 0x37, r1}) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x6}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x6}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x15}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xd}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xc}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x12}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x8881}, 0x20004000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000240)={0x3, 'ipvlan1\x00', {0x8}, 0x6}) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), r3) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000300)={0xff, r2, 'id1\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r12 = dup2(r0, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x90, r5, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SOCKETS={0x64, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}]}]}, 0x90}}, 0x20000000) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000640)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x4}) r14 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r14, &(0x7f0000000cc0)={&(0x7f0000000680)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @empty}, 0x0, 0x1, 0x1, 0x2}}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000700)="a0005ae347fbcda8d87d36a10cf3815e1eff332c91ca9c853f33c9f403308ac81b7f37a519e4a20a6244d46d39683aad86e7e8f2fbf217febde8f757d783bd63583015b6d78dee7e85e874c210087526c7220364516ecb3e2db361dd8cc5f6c69558d746fbaadfcd67143443e61675188747a2e22f89fac36878f3c808f561897e79e343d9ff8470365e0c534173793b66e072ce8bb07a954d67908298f910951418430b0e4c65599efa076cba35f4747b1a0937d595e606b71b7b4ae07c27a9519ac3696f482a0748352801c2eaa6777bb8a2c009d1f3aca51929ff", 0xdc}, {&(0x7f0000000800)="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", 0xfe}, {&(0x7f0000000900)="3e57f8a3e5fa4ba9f5c5b7d75d3ce601553ad8540422a9287efd863d112ecc6a96337ddfcea475e3b1e1bc64607ea8d655714e64273dac849940ba1cb74a3931e1a6aac1b7fee3e9f1fc85dcdf41bb7807761c41a99308e5", 0x58}, {&(0x7f0000000980)="8c5e04eb322dd6b8751c3a5dcbcce2c290b681814f632a07aa364c4a319fae1da3d92ec47ffcda9cef03815e43ac34b4e1370993007406ea92912fdc89d535663c83913117d1f80169beab906e4052e12c18e803b8354ed9a25b5248223a2069e84c33f1022d4fdbf1d13f2cb2c124fad17a38b451d89d2aacc6e158b417dba2eb5b1e1ca58889faf99bdc71ffe021ba0cb9f68b8b131c85ceb48c7b973092cc23a84eb3b68d980011abbc3cb9559b24a13be17e0939b02684545f8f981186474fd06ed2fa199946e6a1697b4823856a417205a34785a06a5274b4", 0xdb}, {&(0x7f0000000a80)="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", 0xfe}], 0x5, &(0x7f0000000c00)=[{0x30, 0xc5, 0x1fa3a2eb, "9bdcb7a8c5128a2f4ad3c61a8aa9c0aab6000ce2274daedf54"}, {0x50, 0x109, 0xe32, "d56aa0491bf1f7207384f6429fea3905989f9207ad891019d18ab32a96a4fd10f8949eb80f65d5554f770e9cc7ccb9dd33c5847e2d939f23f2031059b7"}, {0x28, 0x116, 0x7a7, "ae06e3650157952d107a3a8446bf31e0e01ae045"}], 0xa8}, 0x4040040) setsockopt$inet_msfilter(r12, 0x0, 0x29, &(0x7f0000000d00)={@broadcast, @broadcast, 0x1, 0x5, [@multicast1, @dev={0xac, 0x14, 0x14, 0x24}, @local, @rand_addr=0x64010102, @loopback]}, 0x24) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000dc0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000e00)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000e40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000f40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0xa0008410}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x58, r15, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r17}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r18}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r6, 0xc0505510, &(0x7f0000000fc0)={0xd25d, 0x1, 0x200, 0x1ff, &(0x7f0000000f80)=[{}]}) setsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000001040)={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, r1}, 0x14) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0xb4, r5, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x766}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SOCKETS={0x70, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '{'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x24000005) 5m51.270645902s ago: executing program 3 (id=721): mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x4040, &(0x7f0000000000)={[{@name={'name', 0x3d, 'noprefix'}}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, 0x0, 0x0) mlockall(0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) recvmmsg(r0, &(0x7f0000005d80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/172, 0xac}], 0x1, &(0x7f0000000180)=""/140, 0x8c}, 0xfffffffb}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/2, 0x2}, {&(0x7f0000001340)=""/30, 0x1e}, {&(0x7f0000001380)=""/116, 0x74}], 0x5, &(0x7f0000001480)=""/130, 0x82}, 0xcf5}, {{&(0x7f0000001540)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f00000015c0)=""/217, 0xd9}, {&(0x7f00000016c0)=""/178, 0xb2}, {&(0x7f0000001780)=""/112, 0x70}, {&(0x7f0000001800)=""/241, 0xf1}, {&(0x7f0000001900)=""/203, 0xcb}, {&(0x7f0000001a00)=""/136, 0x88}, {&(0x7f0000001ac0)=""/220, 0xdc}], 0x7}, 0x75a}, {{&(0x7f0000001c40)=@nfc_llcp, 0x80, &(0x7f0000004140)=[{&(0x7f0000001cc0)=""/69, 0x45}, {&(0x7f0000001d40)=""/212, 0xd4}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000003e40)=""/160, 0xa0}, {&(0x7f0000003f00)=""/230, 0xe6}, {&(0x7f0000004000)=""/240, 0xf0}, {&(0x7f0000004100)=""/6, 0x6}], 0x8, &(0x7f00000041c0)=""/150, 0x96}, 0xfffff000}, {{&(0x7f0000004280)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000004300), 0x0, &(0x7f0000004340)=""/1, 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000005900)=[{&(0x7f0000004380)=""/230, 0xe6}, {&(0x7f0000004480)=""/22, 0x16}, {&(0x7f00000044c0)=""/151, 0x97}, {&(0x7f0000004580)=""/28, 0x1c}, {&(0x7f00000045c0)=""/252, 0xfc}, {&(0x7f00000046c0)=""/66, 0x42}, {&(0x7f0000004740)=""/158, 0x9e}, {&(0x7f0000004800)=""/204, 0xcc}, {&(0x7f0000004900)=""/4096, 0x1000}], 0x9}, 0x59}, {{&(0x7f00000059c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000005a80)=[{&(0x7f0000005a40)=""/38, 0x26}], 0x1, &(0x7f0000005ac0)=""/204, 0xcc}, 0x5}, {{&(0x7f0000005bc0)=@tipc=@id, 0x80, &(0x7f0000005cc0)=[{&(0x7f0000005c40)=""/103, 0x67}], 0x1, &(0x7f0000005d00)=""/122, 0x7a}, 0x1}], 0x8, 0x40, &(0x7f0000005f80)={0x77359400}) setuid(r2) mlock(&(0x7f00005a5000/0x3000)=nil, 0x3000) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) 5m51.240442455s ago: executing program 3 (id=723): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000200000008450c0b7600000000000109022400010000000009040000ff0300000009210400000122850009058103"], 0x0) pipe2$9p(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RRENAMEAT(r1, &(0x7f0000000900)={0x7, 0x4b, 0x2}, 0x7) syz_usb_connect$cdc_ecm(0x4, 0x77, &(0x7f0000000980)=ANY=[@ANYBLOB="12011003024000082505a1a44000010203010902650001017f30ff0904000002020600050b24060000286a1af5b3525072de2e05240003000d240f0109000000010000086608241c0100120900082407010200070006241a82000c07241402000700072414ff7f040009058202000250080609050302ff0301060f21e295dc65424b019ed90e7b8e5dbe909dcbc71b40bde81dea0e1982a8a2a92f658269d802f59021b39957d195feaeb8af"], &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0xe6, 0x3, 0x4, 0x50, 0x3}, 0x11b, &(0x7f00000000c0)={0x5, 0xf, 0x11b, 0x5, [@ptm_cap={0x3}, @generic={0xe9, 0x10, 0x3, "e97a371ebed1a45e8506f1c16a02fd70fee347c22a34974af1b05351ee9e0d922364c4ebe08282d0662d2d892f8dfcd6225d2d9ddedd06cb54cb22fb8de74887c5583a9bba04e03d9c3192e61c1e31d027dffe28f1ae91a525d5cfa163ee021294221d68dad2b45439a79a2177818c7049a1a14b6336f746faa9b4fdb44457855d08e073d68be9309ba6b4d3b9f2e8fcf725205ee67e1da241faf551d5e39b434ed89d8a61c88f97b0d78fdc12024ec6dd059ffba2717fa8c11c76bf5122c4df2e4db7b1651c68c7f7f4647c118d59c337ba49b286c635788fec0f2d1362df4ab63ff1b6fa79"}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x4226, 0x0, 0xc, [0x0, 0x3f00, 0x0]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x8, 0x10, 0xdf, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x5, 0x187}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x413}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="002185000000850a62fe9785d8f2d201a703e47d72a005b7cea16727d1d4cede0b47e356248835a54ad4e3d5c08ba5ba0a78d9b7e5b1fbec62d57262e0ba20670850163c9c08a9fd97b34d82c413c60118ad8a7b46323d1f26161c2585465e3c686fd889c2e4d36a95cd81"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000400)={@val={0x8, 0x800}, @val={0x2, 0x3, 0x9, 0x68, 0x8000, 0x9}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x1c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @multicast1}, {0x4e22, 0x4e22, 0x8}}}, 0x2a) fcntl$getown(r1, 0x9) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x2, &(0x7f0000001200)=[{0x87, 0x0, 0x0, 0x4}, {0x6}]}) truncate(&(0x7f0000000080)='./file0\x00', 0x8c) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4048aecb, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000940), 0x202000, 0x0) syz_usb_connect$uac1(0x1, 0xde, &(0x7f0000000540)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcc, 0x3, 0x1, 0x7f, 0x40, 0x42, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x630, 0x8}, [@mixer_unit={0x7, 0x24, 0x4, 0x4, 0x6, 'm\a'}, @feature_unit={0x11, 0x24, 0x6, 0x3, 0x2, 0x5, [0x2, 0xb, 0x5, 0x6, 0x6], 0x6}, @selector_unit={0x9, 0x24, 0x5, 0x6, 0x5, "0cd1a2fd"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x0, 0x4, 0x5, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x305, 0x3, 0x3}, @mixer_unit={0x8, 0x24, 0x4, 0x6, 0x4, "ad0de7"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x3, 0x80, 0x4, "e048"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xa, 0x1, 0x8, 0x2, "cf"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x9a, 0x2, 0x2, 0x0, "6a84", '. Q'}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xd3, 0x1, 0xff, {0x7, 0x25, 0x1, 0x0, 0x7c, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x800, 0x3851, 0xc0, 'S'}, @as_header={0x7, 0x24, 0x1, 0xa6, 0x1, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x2, 0xa0, 0x3, {0x7, 0x25, 0x1, 0x80, 0x0, 0x3}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x1, 0x2, 0x7, 0x20, 0x9}, 0xe3, &(0x7f0000000680)={0x5, 0xf, 0xe3, 0x5, [@generic={0xb1, 0x10, 0x4, "13f41040d2f51f76db376a91043402eb4a536d60912ab2372c885e242f9ea7471b374ecf8e7280db1a5beb20b14d7671b53afc5ad6668c62c14b00f0f9a8eafbdc2d79c0522b8bb2bba8b52d6848e3375e49d8628673cf19b63362331c2693c2d7a6d8535fedd15e36ec3ff286523429dab3f297e5eae0d85b66db379c037a7c0e08ef5519b2bf2ab387f91427dc339df33fed7295d9f52ff5e92b2e020fe15b0e14c8cb3eaeec309e5886cbc588"}, @ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0xff, 0xf, 0x3ff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0xa, 0x36, 0x193a}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "0331dc49b42ed858d7a95c631c4cd48e"}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x6026}}, {0x7d, &(0x7f00000007c0)=@string={0x7d, 0x3, "a58814b29f051e798a9d1fdcb3a5bed1ee542fced2e514994a2acb4e5728e28d0643d9450d0623362baa73acd7a5515a138fe2181066bbfd42642fb00e5d5af51552b940c6a09e8693515994f59e95e06d08d9c2ece996c1bb9c4746ac95a74a85faccf9bbf2c023f8a487e56ab246b86e2e371b92e7d1599536c2"}}]}) ioctl$KVM_CAP_PTP_KVM(r2, 0x4068aea3, &(0x7f0000000300)) 5m48.090901615s ago: executing program 3 (id=740): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000001640)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x10}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 5m47.072956897s ago: executing program 3 (id=744): r0 = socket(0x2, 0x1, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1, 0x7}}}, &(0x7f0000000000)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000404e040c12000000000001090224000100005000090400fefd0300000009210400080122080009e880030000070203"], 0x0) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, '#\r'}, @main=@item_4={0x3, 0x0, 0x8, "9fea28c8"}, @main=@item_4={0x3, 0x0, 0x9, "0600"}, @local=@item_012={0x2, 0x2, 0x2, "06c8"}, @global=@item_4={0x3, 0x1, 0x8, "0600"}, @main=@item_4={0x3, 0x0, 0x9, "d1d61e00"}, @main=@item_4={0x3, 0x0, 0xb, "0b77eae3"}, @main=@item_012={0x2, 0x0, 0x8, "c17b"}]}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@local=@item_012={0x2, 0x2, 0x4, "c3c8"}, @global=@item_012={0x0, 0x1, 0x2}, @global=@item_012={0x2, 0x1, 0x0, "d2e3"}]}}, 0x0}, 0x0) 5m46.524909069s ago: executing program 33 (id=744): r0 = socket(0x2, 0x1, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1, 0x7}}}, &(0x7f0000000000)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000404e040c12000000000001090224000100005000090400fefd0300000009210400080122080009e880030000070203"], 0x0) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, '#\r'}, @main=@item_4={0x3, 0x0, 0x8, "9fea28c8"}, @main=@item_4={0x3, 0x0, 0x9, "0600"}, @local=@item_012={0x2, 0x2, 0x2, "06c8"}, @global=@item_4={0x3, 0x1, 0x8, "0600"}, @main=@item_4={0x3, 0x0, 0x9, "d1d61e00"}, @main=@item_4={0x3, 0x0, 0xb, "0b77eae3"}, @main=@item_012={0x2, 0x0, 0x8, "c17b"}]}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@local=@item_012={0x2, 0x2, 0x4, "c3c8"}, @global=@item_012={0x0, 0x1, 0x2}, @global=@item_012={0x2, 0x1, 0x0, "d2e3"}]}}, 0x0}, 0x0) 1m28.822504603s ago: executing program 2 (id=1926): prlimit64(0x0, 0x6, &(0x7f0000000140)={0x79, 0x8b}, 0x0) setreuid(0xee00, 0x0) setreuid(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x1, 0x0, 0x9}) ioctl$VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000400)={0x0, 0xa}) mount$afs(&(0x7f0000000100)=ANY=[@ANYBLOB='#/yz1:'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x11, 0x42, 0x0, &(0x7f00000000c0)) 1m28.462678057s ago: executing program 2 (id=1929): setreuid(0xee00, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$dir(0xffffffffffffff9c, 0x0, 0x80040, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x77) r3 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x10) truncate(&(0x7f00000000c0)='./bus\x00', 0x9471) lsetxattr$security_ima(&(0x7f0000000080)='./bus\x00', &(0x7f0000000040), &(0x7f0000000000)=@sha1={0x1, "e4912e9587bfec964d1de6d9cd5dfc0997674727"}, 0x15, 0x1) dup3(r3, r2, 0x0) finit_module(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = syz_open_procfs(r0, &(0x7f0000000400)='ns\x00') readlinkat(r4, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000140)=""/173, 0xad) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001e80)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0}, 0x68) 1m28.342532449s ago: executing program 2 (id=1930): mremap(&(0x7f0000ff8000/0x3000)=nil, 0x7fffdf00a000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0x2, 0x3}, 0x6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x200}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d9, 0xa04a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="00030201"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r3, 0xc1086201, &(0x7f0000000f00)={'binder0\x00'}) r4 = socket$kcm(0x2, 0xa, 0x2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x2, 0x95, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r2], 0xfdef) 1m26.455111194s ago: executing program 2 (id=1935): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001880)}, 0x2) (async) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82}, 0x14) shutdown(r0, 0x1) (async) memfd_create(&(0x7f0000000000)='\xa3\xcb\x04=\x827\xe7\x81S\bDVK| \x8b\xdb\xb1\x03\xd0\x9d2\x9es\x19_=#n_\xeb\xbdR\xea\xb9o\xdbM\x11ca\v\xeb#\xaf\xcf\xb5\xfd`U\xa7k\xd0\xd8\xd2\xc0\x91\xc1\x98#\r\xa7\x16\xfd@\xd7V*^\xcf\x9f\b1\xce3\vN\xa6\x01\xb5\xb5\xba\xdc\xc8\xda\xd2\apY\vu\x80\xa9\x14X\xcf!\xd3W\'\xb44#\xf6\x7fHS\xa6l\x17\x97\x80\xea\xc5+T\xe3\"\xda\x14\xfe,\xf3\\\xeb\x1cp\xd6\xc1\b\xec\xe1\x94\xdf\xdb\xa1\xf7=B\xb2\x94o\xd5{\xd2_\x93\xa1)\xdem\'H\\e\x8bu\xbcVw\xaeb\xa1b\xb1\xc1\f\x9f0\x93\x0f\x16,\xeb!Z\xa9\\\xf7B\xf8L\x05\xc7\xf7q\x9d_\xb4\xbb3i[t\xb6\xbc\x824\x7f\xd7\xb7 \xd4\x7fUE\xcb7\xe3\xb4\xb6\xa0\xd8\x1b\a8\xfe$\xa1\x12&\xb2\xfc\xfb\x12U\xb9u\xb4=\xc4\xc5q\x8bk\xf1\x9c\xc3\xa4w\xf9!^#\x8c', 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) (async) socket(0x10, 0x3, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x43, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbc0, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8e, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa4, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x40, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x2, 0x5f, 0x4, 0xc66, 0xa8a9, 0x4, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x1, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x4, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fbf, 0x35db, 0x1cb, 0x1, 0x3, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x5, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x7ffd, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0x20bfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x107, 0x4, 0x9, 0x81, 0x3, 0x9, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x5393, 0x1, 0x1b18]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x80000000) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) (async) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000440)={0x3, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m26.307064897s ago: executing program 2 (id=1939): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000540)="10797fc86cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc9e3a", 0x22) write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7, 0x1b, 0x1}, 0x7) r2 = openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000056544820e105080411250102030109021b0001000000000904"], 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x20010, r3, 0x41e06000) 1m24.654587325s ago: executing program 2 (id=1954): r0 = socket(0x1, 0x1, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, 0x8) syz_usb_connect(0x0, 0x24, &(0x7f0000001440)={{0x12, 0x1, 0x0, 0xb7, 0x95, 0x4, 0x20, 0x4d8, 0xa30, 0xe9e9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1d, 0x0, 0x0, 0x95, 0xb, 0x4e}}]}}]}}, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000001440)={{0x12, 0x1, 0x0, 0xb7, 0x95, 0x4, 0x20, 0x4d8, 0xa30, 0xe9e9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1d, 0x0, 0x0, 0x95, 0xb, 0x4e}}]}}]}}, 0x0) 1m8.548338612s ago: executing program 34 (id=1954): r0 = socket(0x1, 0x1, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, 0x8) syz_usb_connect(0x0, 0x24, &(0x7f0000001440)={{0x12, 0x1, 0x0, 0xb7, 0x95, 0x4, 0x20, 0x4d8, 0xa30, 0xe9e9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1d, 0x0, 0x0, 0x95, 0xb, 0x4e}}]}}]}}, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000001440)={{0x12, 0x1, 0x0, 0xb7, 0x95, 0x4, 0x20, 0x4d8, 0xa30, 0xe9e9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1d, 0x0, 0x0, 0x95, 0xb, 0x4e}}]}}]}}, 0x0) 29.534307461s ago: executing program 1 (id=2196): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = syz_open_dev$usbmon(&(0x7f0000000280), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000140)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x40, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') socketpair(0x28, 0x3, 0x8940000, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00'}) mkdir(&(0x7f0000000600)='./file0\x00', 0xe8) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 29.353310108s ago: executing program 1 (id=2197): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0xa1f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0xfc, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xbd, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="002206e77e1ec55927ea2000895f7a8d0b7a007d1178b26b02c80a01272b22de3f4b2cd0fd4e9e0970a00bd636f21fdadc7c1a717017b233875e9a215664f711b6c560c177d420d0809f11b85f0a0e84ba06496184048f58bacb0bbe9d47509b0998c1fe342c1a6c94ddd48268af1812b5a967766a993369b2cb9480839be94ed97da11dc5364b87f75a97ea7d15fbe76fa1283ee2f5b252e1b96fcd9097b9ff53cce3a181cb068667c3d4e7197e2e3449ad355c66237ccba27175bbca9ed62f74701edcc4a3f647fb500b65f36e2a2d0a9c4bbfa81ee077df40919b18025828a885c7e3fdbf35bdf6517fd7683d"], 0x0}, 0x0) (async, rerun: 64) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x101800, 0x0) (rerun: 64) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f0000000140)={0x10, 0x0, "688a33db554bca623d93b24133ebe01c"}) (async) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x8080000, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="f78d9ca38fff", 0x6}], 0x1}], 0x1, 0x40800) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b8, 0x0, 0x800, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4], 0xeeee8000, 0x41400}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000100)) syz_usb_ep_write(r0, 0xfc, 0x3c, &(0x7f0000000080)="a1f887bee8cca058934ae691c8c35e09bab5ee33c0947f1c31af8c35e80bb7830d516501f01b9215962cdefa3aa3eb03ff4cbb423027d0ed685b02a1") 5.040877342s ago: executing program 1 (id=2209): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x3) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x2000) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x8c0, 0x0, 0x0) 5.040615524s ago: executing program 1 (id=2210): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000300)="c0f70fb5775ce0c2150b458afb55b071071eee59f7dae4c66883810095e1d6f848294196d63bdc8fe96b287a6d67d43602fadf7863a354f864981ab2bba4d05ad30fc35933689440788a0eff06c52b7a179e23aa44b79a09aef9a5c0fd0d024562d14a133a146b51054c62f766055d6a5b58c047e8b418fb00f9cba57fff31c12c2eb8c1951349b1a2b898e4a142ec99c35f10567c7c82db6af3358f542dca587a88ab4e637bc4c81bbdc319ce3ace2cfa1b9cb5a1e3b64d37a36b3f6f2ac347a2cd038bf5367a6af7a8b0dd560e5ff3a871b6f60bbfdb349daea454be793f2d945c1c2c8612f95c1e6af7a85c34478c0200"/251, 0xfb}, {&(0x7f0000000400)="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", 0x17f}], 0x2) (async) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="20011f"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r2 = socket(0x400000010, 0x3, 0x0) write(r2, &(0x7f0000000200)="fc0000001400073eac093a00090007000aab0800080000000400e293210001c000000000060000000100000009000000fa2c1eff8656aaa79bffffffff0000002d00024000036c6c256f1a272fdf0d11512fd633d4400007f60eb8fa2e6b00000016fd368934d07302ade01720d7d5bbc91a3e2e80772c05f70c9ddef2fe082038f4f8b29d3ef3d92883170efdffffff3ae4f50504000000000040d815b2ccd243f295edbabc7c3f1a5f4e023dd16b176e83df150c3b8829a1ad0a4f41f0d48f6f0000080548deac270e37429f3694dec896592d69d381873cf1582740000000000000001ace36f071d0c22700"/252, 0xfc) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffffff) read$char_usb(r3, &(0x7f0000001c80)=""/110, 0x6e) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000015c0)={0x20, 0x2, 0x74, {0x74, 0x4, "9ed8c7afa2aeda9bd88330fa7dea41b1fca12b32b81795ec79ece66931ed83304ed2bc661cc6cc11ca5586cf8803ae1467d5d827c1f1feb2c9611a488f90e9954a3fa6a0e6830b5de3ed91eff94de0e247dc5db68d91bb1c55831a58b001763de65a71d169ac5dc12d41a3e419d727d12143"}}, &(0x7f0000001640)={0x0, 0x3, 0x69, @string={0x69, 0x3, "09710bcd076cb8b92060da3d868296ce748b949ce29ae7d65854d90290cf6179e477f3b3ef371c67cca54f06031d40ac8a5454d1716f42b51339e0393f65e92cb3027d9f68ef6105b4b0f44943033f580d7f3ef138046f5cd59da15f4c204b80b5bba3bd407b2e"}}, &(0x7f0000000000)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x18, 0x8, 0xed, "47e52e3d", "5181c025"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x0, 0xf8, 0x1, 0x4, 0x7f, 0x8000}}}, &(0x7f0000001b80)={0x84, &(0x7f00000016c0)={0x20, 0x0, 0xd1, "d1738ee1e58730873711bb4587893deca0533b5c417e95455b73230f3695fe91d0e1fe94b5e3799aa8db2603e1f00685ce4611d0b5428c447dca3e77b1478ff81db21ecf40a9864de12df2f24b88af72a599473d86d34680ec97d1facb888ecf5810e33bd01ac75d09d8f4b7bd547d185cc3408d7178ce6b738788df6209651f0cc10b04aa27612c996dd064cdbefb398e7db922d644451b1fc00fbb121cfa443d276760c20c6445fc46fc6ed2218ad8dd1b5d40b90653d4c5c9da2d0aae0453ecadffdc0ffb6dbbfcdba3ee9445ab9228"}, &(0x7f00000017c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001800)={0x0, 0x8, 0x1, 0x65}, &(0x7f0000001840)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001880)=ANY=[@ANYBLOB="20000800000000041000000f0000"], &(0x7f00000018c0)={0x40, 0x7, 0x2, 0xfffa}, &(0x7f0000001900)={0x40, 0x9, 0x1}, &(0x7f0000001940)={0x40, 0xb, 0x2, "f670"}, &(0x7f0000001980)={0x40, 0xf, 0x2, 0x4b1}, &(0x7f00000019c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001c40)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001a40)={0x40, 0x19, 0x2, "d658"}, &(0x7f0000001a80)={0x40, 0x1a, 0x2, 0x80}, &(0x7f0000001ac0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000001b00)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000001b40)={0x40, 0x21, 0x1, 0x3}}) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f00000005c0)={{r2}, "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"}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) (async) r5 = socket(0xa, 0x3, 0x3a) syz_usb_connect(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000267ff62440100840298a0010203015ad7080905080000000070084000044f49"], 0x0) (async) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0xc000000) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='timers\x00') read(r6, &(0x7f0000000200)=""/4096, 0x1000) (async) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd1, &(0x7f0000000400)=0x1, 0x4) (async, rerun: 64) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x10001, 0x2, 0x2}) (async, rerun: 64) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r0, 0x0, 0x0) (rerun: 64) 5.040383866s ago: executing program 1 (id=2211): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x18, 0x0, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) syz_open_dev$dri(&(0x7f00000001c0), 0x6d, 0x200) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[r3, r2], 0x2}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0}) (async) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000180)='1\x00', 0x2) (async) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000dd2a15fd49084c4d7d1ef62c000000000001eff90000000000000009040000010300020009210000000122"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x20, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "5f68dd"}, 0x0}) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204030, 0xffffffffffffffff, 0x7fffd000) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x208081, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000), 0x8) (async) syz_usb_disconnect(r5) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) (async) ioctl$EVIOCRMFF(r5, 0xc0085504, &(0x7f0000000080)) (async) creat(&(0x7f0000000080)='./bus\x00', 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './bus'}, 0x9) (async) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 4.275098491s ago: executing program 4 (id=2222): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[{0x18, 0x110, 0xc, ')'}], 0x18}, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket(0x23, 0x80805, 0x2) connect$llc(r2, &(0x7f0000000540)={0x1a, 0x205, 0x2, 0x1, 0x6, 0x0, @broadcast}, 0x10) getsockopt$bt_hci(r1, 0x84, 0x6c, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) r3 = memfd_secret(0x80000) ioctl(r3, 0x8, &(0x7f00000011c0)="500c8af9f7cc5aae9183fabd82183a8345e29f42c60fe4f37a73d27fceb37520f2688cddbb9add5625357206783d6816960bf0270485b822d6032daff30fdbfce4ea6abb331b94d846d466aa25ef02f3ee706020c9f67721e4353871f8651a0e07410e879a2ecb9110ba18b5621cc902de4a7f22cf7c55920fb9a9710374299de61534c5d2ca84fa0e107522a4ce") r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001080), r4) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}]}, 0x1c}}, 0x24044010) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000300)={0x0, 0x3, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSFLAG(r8, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(r8, 0xc018480b, 0x0) r9 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000aa697cbeaa42920e09"], 0x0) syz_usb_control_io$printer(r9, 0x0, 0x0) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r10, 0x3b88, &(0x7f0000000040)={0xc, 0x0, 0x1, 0x204}) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r9, &(0x7f00000013c0)={0x14, &(0x7f0000001280)={0x0, 0x3, 0xd2, {0xd2, 0x6, "c66bd5672a86a50452650a8aa6227c322cba0e8d672ac6ae4188a92c42e7fb1ff5ea2de61dc9f41a2a8226458631cd61c5c104a5b89d5db5757f833ac97f3c6a4d92943ed3a8c452a4295d220d7b8b5f496f3c3b12a6e6c6d119ba14803fc5c02da9dd140bc38a90ff87c524722423c0b217584172a832a5f96a5b9b9224fb55bc554b66e1d7f5de056770bcd963244712eedbcc4fe140f1e9b37c9ae70ca84dbaf807fd231f36e859b27e47fcbff69ea44992787999eaa777e75aea611a5cb7ebe485075b87050d3182501cefcd9ad2"}}, &(0x7f0000001380)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001680)={0x44, &(0x7f0000001400)={0x20, 0xd, 0x91, "5e24e92a15b7cec416e7f7cefc7765e94e66ff7f25e292d77b0faf9619e4344a3b2c7012ef6e5006224b187f310e06ce87bd07fbf23dab59be0b65e8bfe30e4c8eb06076d1a91a33c253271474afcb646d025243da65794a2838422d1680e7460de080b90604ddb8a91d86a66a7e0f134ed8ceefabd726f69a8ed64d35fac834a91bf7d0ed65177db83e0cf5e79f6e578b"}, &(0x7f00000014c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000001540)={0x20, 0x80, 0x1c, {0x8000, 0x6, 0x8000, 0x3, 0x0, 0x8, 0x3, 0x4, 0x8d, 0xfffd, 0x6, 0x401}}, &(0x7f0000001580)={0x20, 0x85, 0x4, 0x433fa94f}, &(0x7f00000015c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001600)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001640)={0x20, 0x89, 0x2, 0x1}}) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) 2.709501197s ago: executing program 6 (id=2233): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000025c0)=@newtaction={0x8fc, 0x30, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [{0x6c0, 0x1, [@m_ipt={0x25c, 0x17, 0x0, 0x0, {{0x8}, {0x1a0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xf1, 0x6, {0x0, 'raw\x00', 0xe, 0xb3, "01df771ed4aa468d466490bb6d3a762752b0276450737133d354ea68c13a92efe99064741e04d8a20e194e30a60295d386bccda0f3007979597e6d03b954a8f914ba7b899f16c20d6d72edd9b6f52db88f3ba2e308499f6252662a51fa4b12868b58f75e27ec9103b8068b9b811e21bd2aa37e31ee1bb8e60ecb8155c8e19ea1c7fdbb9aa819059c61aa86c434a7c8da18ab573d7585bec9c1d4494956d182e7b35a526fd48659ab60beb8f339651c715661a36a876cce3dd7a98863f318caef99752c65346980"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x3d, 0x6, {0xff3b, 'nat\x00', 0x6a, 0xfff, "ec6c358b1b02688c45d6891b8d39befc710e9c"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3ff}, @TCA_IPT_HOOK={0x8}]}, {0x95, 0x6, "33c428b1016ea0e62b6c917780554ec63a01a7382016d430730d1158d5469fa35f73d351ec348637d292a8c8699738644c304a14a0ca2e2c1422d9493ae361a88a61e76022334cc9eff1d9b15acf815ab9bf490688724773d3775e92953306fa3923bf0b3eb78ed4c4e43760fb360a12727f0000004fe4c5639595b4ce1706ccb85c9b5872240c31834297cfb06b7eaaa1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x14c, 0x11, 0x0, 0x0, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xb5, 0x6, {0x7, 'mangle\x00', 0x4, 0x7, "852c07967e4bde8acbdebf709c7f67b435415e9fad5eed399218069c30b3db399d5bdbdffc09aa13d6aef79a3360cf4b7d5e8a92b817394560aba652eb4e4ec31470dd9b8becbf6cad6f3328aec2ac14541a30a5f89f2a6e60534a70c1deccc519f73984d6d2ae8b9fe17278f03e9f60e876c3b1fc1ef49873f24bd44137256bfd0a27e100d2162e3f7b17"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x5}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x35, 0x6, "195244b493b69a109e343c48236a318aa067ccccb2000506f4e63246fce6276de9355aae82ccf014b3a51009a53cc597e7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0xa4, 0x17, 0x0, 0x0, {{0x8}, {0x4}, {0x79, 0x6, "828d51b8c024f3ba75276291fd744bf1d83ac94c40f59c2d7aabe5cffe85cb1235f3e723c7a0ca6f1a15a0e38afac0bc7115796816162cbc6d09aea501ff36a46772ec7a3aa4d7c60363ff8f0eeda2f3eb8c435fb1d254244779da6c44c5dc30ed21a60df465ec395bc4d898dc7104dc47d809383d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x94, 0x3, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x2a, 0x6, {0x3, 'security\x00', 0x84, 0x8}}]}, {0x35, 0x6, "1d4af027bf39e92f2bc3b16061477612108c4de6dbb9dbc37f978e20a11849888f1cfa0d69961cc5b133c25b0a606d8679"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x6c, 0x11, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x2, 'mangle\x00', 0x1, 0x1}}]}, {0x15, 0x6, "e7ba22f1ebc93a7960461c2acdaf1da6af"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ipt={0x64, 0x20, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x15, 0x6, "a0f801aae36e077609a01908bc70dd5a7c"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0x10c, 0x20, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x55, 0x6, {0x7, 'nat\x00', 0x4, 0x4c2d, "b112d50939750fa56623826275793a59f694cdc8bda79320bfe1d4c8997abe43daace6790afb2937cfb2e0"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_INDEX={0x8, 0x3, 0x6062ae06}]}, {0x79, 0x6, "080f497fef56763eb14339e04d8880b35d4fcb1f3ccd5757021fa31ef38a7d4c8fca4f32d5757fdee1a2aceaaeb6abdad810154a059435c356867b27c8df5015f90bffb81405bdefffef46fede1a8038897bb9fd967f32f04f15a8596894786759dc20093ddbffb2158f5c0591205638b11d518d45"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x97dd299ab8dc81d}}}}]}, {0xb8, 0x1, [@m_ipt={0xb4, 0x3, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x71, 0x6, {0x8, 'mangle\x00', 0x80, 0x100, "07625db7849301f3c760230789043c3c5de12e22cc8e1f5f20c97ba14d907f5a3eae7673340356d1e624a3f315c4d0b1439a387605ebd024be5895e6659813581fe54a8998e1ca"}}]}, {0x15, 0x6, "e2ebd2e0185a4d308803e9306ec5d2b0e6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x170, 0x1, [@m_ipt={0xf8, 0x6, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0xa9, 0x6, "f5fcf6c5d281ac07391f35700b5786a70ee288211391aef6ec3378d7dd4a7c7445b8d3046ec059dd382a214deedda165d8663d562a47b1afb15557c5ceab4960c0442cc36ea1e65aa9650e7ac2c900fbb08da34b73b6b699463a47761daa69afd529deea7f5c97d3f950af23793139f4c0c3cea503bb9a23d2f7677c9bf150e350defce66ec3eccbaabb1e8f7fe7c49b9e91ecca113edb7f81da88a113c1065219a1d6062e"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ipt={0x74, 0x1a, 0x0, 0x0, {{0x8}, {0x4}, {0x4b, 0x6, "4b6275823d714c9413915317da89818cb9f96e8938cf5d91ef0ce403d55fc9bdc74a0a5b88653980ed0af5c857ee3a0361bfe072c3d9c7b9f1648e75347ab9c4c22c5a146387bd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x8fc}}, 0x4000) recvmmsg$unix(r1, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000380)="34f21eaef60964", 0x7}], 0x1}}], 0x1, 0x10) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000105002, 0x0) r3 = dup(r2) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r4, &(0x7f0000000d40)={&(0x7f00000006c0)=@llc={0x1a, 0x334, 0x3f, 0x1, 0x6, 0x9b, @local}, 0x80, 0x0}, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000000)={"fe080800", 0x0, 0x6, 0x2, 0x0, 0x200, "3377f877c734c4f928875ab8db00", "b800", "020100", '\x00\x00\t\x00', ["a51c00a60100", "00000000fa66ee4000000200", "2c09000000ffd8ffff0000ff", "000500"]}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f00004ed000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="260f09f20f2a77a3f30f1edaf3f10f0966b810008ee00f01c466ba410066b8aaa366efc744240000700000c744240209000000c7442406000000000f0114240f21eb", 0x42}], 0x1, 0x2, &(0x7f0000000240), 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064d1, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)={0x6c, 0x2f, 0x0, 0x70bd29, 0x25dfdbfb, "", [@nested={0x49, 0x13e, 0x0, 0x1, [@generic="bf151d6273f667bf82189f96e9f3a20d5a006c531c22591e0226efa0825c00d02f422d90732e54f6d0", @nested={0x1c, 0xac, 0x0, 0x1, [@typed={0x4, 0xd}, @typed={0x4, 0xef}, @nested={0x4, 0x1b}, @nested={0x4, 0x4c}, @typed={0x8, 0x26, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}]}, @typed={0xe, 0xe0, 0x0, 0x0, @binary="6942b24d999d73f2c3ac"}]}, 0x6c}], 0x1, 0x0, 0x0, 0xfffffffd}, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x125f, 0x0) 2.621942212s ago: executing program 6 (id=2234): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x1, 0x101040) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x7f, 0x0, 0x3, [0x0], [0x0, 0xfffffffc, 0x9], [0x0, 0x9, 0x2], [0xffffffffffffffff, 0x0, 0x7fff, 0xfffffffffffffffd]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={r4}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000240)={0x0, @in6={{0x2, 0x0, 0x0, @local}}}, &(0x7f0000000040)=0xfee7) 2.482750087s ago: executing program 6 (id=2235): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r1) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r2) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1f, {[@global=@item_012={0x2, 0x1, 0x9, "2213"}, @main=@item_012={0x1, 0x0, 0xb, "15"}, @main=@item_4={0x3, 0x0, 0xb, "a29db92d"}, @local=@item_012={0x2, 0x2, 0x2, '\f\b'}, @global=@item_012={0x2, 0x1, 0x9, '_]'}, @local=@item_012={0x2, 0x2, 0x9, '\x00\x00'}, @local=@item_012={0x0, 0x2, 0x5}, @local=@item_012={0x0, 0x2, 0x4}, @global=@item_4={0x3, 0x1, 0x6, "c71bc317"}, @main=@item_4={0x3, 0x0, 0xa, "1686fd89"}]}}, 0x0}, 0x0) 1.605317497s ago: executing program 4 (id=2236): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="180140000000010000000000030000000701f9800c0001000000000000000000f4786e0c", @ANYRES32=0x0, @ANYBLOB="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d16b79408a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc013529ec47d7f69f514408049fc119a74fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd00"], 0x118}], 0x1}, 0x14) r2 = socket(0x2c, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300050018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) recvmmsg(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1}, 0x6ca}, {{0x0, 0x0, &(0x7f0000000b40), 0x1f}, 0x6}], 0x2, 0x40014102, 0x0) sendmmsg$sock(r3, &(0x7f0000006200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000001340)={0x28, 0x2, r0, 0x0, &(0x7f00007fd000/0x800000)=nil, 0x800000, 0x80}) 1.559102631s ago: executing program 4 (id=2237): r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100)=0x22) (async) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100)=0x22) close(r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001940)=@newsa={0x17c, 0x10, 0x1, 0x0, 0x25dfdbfc, {{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x0, 0x81e, 0x4, 0x0, 0x20, 0x80, 0x21}, {@in=@multicast1, 0x0, 0x33}, @in=@loopback, {0x401, 0x0, 0x8, 0x0, 0xffffffff, 0x3, 0x0, 0x8000000}, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0x80000001}, {0x0, 0x1, 0xfffffffc}, 0x2, 0x0, 0xa, 0x4, 0x1, 0x40}, [@algo_auth={0x89, 0x1, {{'rmd160\x00'}, 0x208, "d5deb33e8d02d5b4c6cdd277a6d0adde7a89a2677f61d0a96eb8706a52adfbdc312b5aeab8894c493c358ef75d4775e5384de91cac1e473fc9d56ec179b21865e3"}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x24040021}, 0x0) 1.4825144s ago: executing program 5 (id=2238): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x8, "1f"}, @main=@item_012={0x2, 0x0, 0x8, 'Q;'}, @local=@item_012={0x1, 0x2, 0x5, "94"}]}}, 0x0}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 1.476420484s ago: executing program 4 (id=2239): r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_req={{0x17, 0x2, 0xe}, {0x3, 0x2, 0xffff, 0x1, [0x1, 0x5, 0x9]}}}}, 0x1b) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101202, 0x0) socket(0xf, 0xa, 0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000100)=""/36, 0x24}, {&(0x7f0000000140)=""/39, 0x27}, {&(0x7f0000000180)=""/31, 0x1f}], 0x4, 0x0, 0x7fffffff) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000001b0a200000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a320000000009000100736f7a30000033000800054000000002600000000c0a010300000000000000000100000002000000000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e74657200040002801400018006000100636f756e7465720080040280140000001000010000000000000000000000000a"], 0xe4}}, 0x0) fallocate(r2, 0x2, 0x3, 0xb6) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000006c055080a115014cb62010203010902120001fe0000000904"], 0x0) read$nci(r1, &(0x7f00000002c0)=""/110, 0x1) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f003f0001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 1.134029067s ago: executing program 6 (id=2240): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000140)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=@newsa={0xf0, 0x10, 0x713, 0x2, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x5c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x543}, {0x7, 0x7fffffffffffffff}, {0x0, 0x10}, 0x70bd28, 0x34fc, 0xa, 0x4}}, 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b52, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000440)={0x5, @raw_data="8cac35a4dec0aa6349c03e4221927db2029895d43c4c87b716ebe0ac28525059d219b4aed28186475cb10b0b73a435e53db3707a6789423abe6c4aa6f90ab8562566e545a1ecaaeb7fbde3e2d06c90a863467adce5dc24f8b740cd3aaa0b22e0d0f1380cd8604e2416ad6337367ba801251986d6691d10146eda3529c24a2d0eeda87f0a599faee947f9e8659384b8f29790b193e0d7364ec20e56a798cced9117eabcb9efbfe5a4cecf2141bf7419692e954be9afe588e593f35b65a0d846f6912d3f2e96077377"}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="2e0400001c00810ce00f80ecdb4cb9f207c804a00d000000251d06fb0a0002000a0ada1b40d805481100c50083d291b937adb355d4ec19a6362168eab8", 0x3d}, {&(0x7f0000000400)="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", 0x3f1}], 0x2, 0x0, 0x0, 0x5865}, 0x0) 962.681269ms ago: executing program 6 (id=2241): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000180)={0xa, @output={0x1000, 0x1, {0x5, 0x101}, 0x1800000, 0x1ff}}) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r2, 0x4d, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r0, &(0x7f0000000040)="9880378312a63e112602d9670ab688dbd0d40a0f4d8b9cb3af17658e2e4f8be7a2f40caf8cadd95b1c97eda546798277b267dc15abe1a12eaf2f0ce524588df014e8d7e56e49bf5e852f0b98aa", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 874.533014ms ago: executing program 5 (id=2242): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000025c0)=@newtaction={0x8fc, 0x30, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [{0x6c0, 0x1, [@m_ipt={0x25c, 0x17, 0x0, 0x0, {{0x8}, {0x1a0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xf1, 0x6, {0x0, 'raw\x00', 0xe, 0xb3, "01df771ed4aa468d466490bb6d3a762752b0276450737133d354ea68c13a92efe99064741e04d8a20e194e30a60295d386bccda0f3007979597e6d03b954a8f914ba7b899f16c20d6d72edd9b6f52db88f3ba2e308499f6252662a51fa4b12868b58f75e27ec9103b8068b9b811e21bd2aa37e31ee1bb8e60ecb8155c8e19ea1c7fdbb9aa819059c61aa86c434a7c8da18ab573d7585bec9c1d4494956d182e7b35a526fd48659ab60beb8f339651c715661a36a876cce3dd7a98863f318caef99752c65346980"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x3d, 0x6, {0xff3b, 'nat\x00', 0x6a, 0xfff, "ec6c358b1b02688c45d6891b8d39befc710e9c"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3ff}, @TCA_IPT_HOOK={0x8}]}, {0x95, 0x6, "33c428b1016ea0e62b6c917780554ec63a01a7382016d430730d1158d5469fa35f73d351ec348637d292a8c8699738644c304a14a0ca2e2c1422d9493ae361a88a61e76022334cc9eff1d9b15acf815ab9bf490688724773d3775e92953306fa3923bf0b3eb78ed4c4e43760fb360a12727f0000004fe4c5639595b4ce1706ccb85c9b5872240c31834297cfb06b7eaaa1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x14c, 0x11, 0x0, 0x0, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xb5, 0x6, {0x7, 'mangle\x00', 0x4, 0x7, "852c07967e4bde8acbdebf709c7f67b435415e9fad5eed399218069c30b3db399d5bdbdffc09aa13d6aef79a3360cf4b7d5e8a92b817394560aba652eb4e4ec31470dd9b8becbf6cad6f3328aec2ac14541a30a5f89f2a6e60534a70c1deccc519f73984d6d2ae8b9fe17278f03e9f60e876c3b1fc1ef49873f24bd44137256bfd0a27e100d2162e3f7b17"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x5}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x35, 0x6, "195244b493b69a109e343c48236a318aa067ccccb2000506f4e63246fce6276de9355aae82ccf014b3a51009a53cc597e7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0xa4, 0x17, 0x0, 0x0, {{0x8}, {0x4}, {0x79, 0x6, "828d51b8c024f3ba75276291fd744bf1d83ac94c40f59c2d7aabe5cffe85cb1235f3e723c7a0ca6f1a15a0e38afac0bc7115796816162cbc6d09aea501ff36a46772ec7a3aa4d7c60363ff8f0eeda2f3eb8c435fb1d254244779da6c44c5dc30ed21a60df465ec395bc4d898dc7104dc47d809383d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x94, 0x3, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x2a, 0x6, {0x3, 'security\x00', 0x84, 0x8}}]}, {0x35, 0x6, "1d4af027bf39e92f2bc3b16061477612108c4de6dbb9dbc37f978e20a11849888f1cfa0d69961cc5b133c25b0a606d8679"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x6c, 0x11, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x2, 'mangle\x00', 0x1, 0x1}}]}, {0x15, 0x6, "e7ba22f1ebc93a7960461c2acdaf1da6af"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ipt={0x64, 0x20, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x15, 0x6, "a0f801aae36e077609a01908bc70dd5a7c"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0x10c, 0x20, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x55, 0x6, {0x7, 'nat\x00', 0x4, 0x4c2d, "b112d50939750fa56623826275793a59f694cdc8bda79320bfe1d4c8997abe43daace6790afb2937cfb2e0"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_INDEX={0x8, 0x3, 0x6062ae06}]}, {0x79, 0x6, "080f497fef56763eb14339e04d8880b35d4fcb1f3ccd5757021fa31ef38a7d4c8fca4f32d5757fdee1a2aceaaeb6abdad810154a059435c356867b27c8df5015f90bffb81405bdefffef46fede1a8038897bb9fd967f32f04f15a8596894786759dc20093ddbffb2158f5c0591205638b11d518d45"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x97dd299ab8dc81d}}}}]}, {0xb8, 0x1, [@m_ipt={0xb4, 0x3, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x71, 0x6, {0x8, 'mangle\x00', 0x80, 0x100, "07625db7849301f3c760230789043c3c5de12e22cc8e1f5f20c97ba14d907f5a3eae7673340356d1e624a3f315c4d0b1439a387605ebd024be5895e6659813581fe54a8998e1ca"}}]}, {0x15, 0x6, "e2ebd2e0185a4d308803e9306ec5d2b0e6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x170, 0x1, [@m_ipt={0xf8, 0x6, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0xa9, 0x6, "f5fcf6c5d281ac07391f35700b5786a70ee288211391aef6ec3378d7dd4a7c7445b8d3046ec059dd382a214deedda165d8663d562a47b1afb15557c5ceab4960c0442cc36ea1e65aa9650e7ac2c900fbb08da34b73b6b699463a47761daa69afd529deea7f5c97d3f950af23793139f4c0c3cea503bb9a23d2f7677c9bf150e350defce66ec3eccbaabb1e8f7fe7c49b9e91ecca113edb7f81da88a113c1065219a1d6062e"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ipt={0x74, 0x1a, 0x0, 0x0, {{0x8}, {0x4}, {0x4b, 0x6, "4b6275823d714c9413915317da89818cb9f96e8938cf5d91ef0ce403d55fc9bdc74a0a5b88653980ed0af5c857ee3a0361bfe072c3d9c7b9f1648e75347ab9c4c22c5a146387bd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x8fc}}, 0x4000) recvmmsg$unix(r1, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000380)="34f21eaef60964", 0x7}], 0x1}}], 0x1, 0x10) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000105002, 0x0) r3 = dup(r2) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r4, &(0x7f0000000d40)={&(0x7f00000006c0)=@llc={0x1a, 0x334, 0x3f, 0x1, 0x6, 0x9b, @local}, 0x80, 0x0}, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000000)={"fe080800", 0x0, 0x6, 0x2, 0x0, 0x200, "3377f877c734c4f928875ab8db00", "b800", "020100", '\x00\x00\t\x00', ["a51c00a60100", "00000000fa66ee4000000200", "2c09000000ffd8ffff0000ff", "000500"]}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f00004ed000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="260f09f20f2a77a3f30f1edaf3f10f0966b810008ee00f01c466ba410066b8aaa366efc744240000700000c744240209000000c7442406000000000f0114240f21eb", 0x42}], 0x1, 0x2, &(0x7f0000000240), 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064d1, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)={0x6c, 0x2f, 0x0, 0x70bd29, 0x25dfdbfb, "", [@nested={0x49, 0x13e, 0x0, 0x1, [@generic="bf151d6273f667bf82189f96e9f3a20d5a006c531c22591e0226efa0825c00d02f422d90732e54f6d0", @nested={0x1c, 0xac, 0x0, 0x1, [@typed={0x4, 0xd}, @typed={0x4, 0xef}, @nested={0x4, 0x1b}, @nested={0x4, 0x4c}, @typed={0x8, 0x26, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}]}, @typed={0xe, 0xe0, 0x0, 0x0, @binary="6942b24d999d73f2c3ac"}]}, 0x6c}], 0x1, 0x0, 0x0, 0xfffffffd}, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x125f, 0x0) 764.877276ms ago: executing program 6 (id=2243): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x5f, 0x2a, 0xb4, 0x20, 0xc72, 0xd, 0x279b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0xa2, 0x92}}]}}]}}, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b, 0x200000a00000}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000001c0)={0x20, 0x10}, 0x0, 0x0}) 708.34037ms ago: executing program 5 (id=2244): ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000340)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x80000001, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x2000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) (async) r0 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40186f40, &(0x7f0000000080)={0x0, 0x0, 0x1, 0xfffffffe, 'syz1\x00'}) (async) write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e000839a59434d90a2742a24e000000000000000000deef14b40028e27ebdfd74dafc20380003"], 0xfebe) (async) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 550.418456ms ago: executing program 5 (id=2245): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000040)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) (async) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) (async) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000280)="001d81c57c2030093f254aea526e732388a8", 0x12, 0x0, &(0x7f0000000000)={0x11, 0x8100, r6, 0x1, 0x0, 0x6, @remote}, 0x14) 437.718778ms ago: executing program 5 (id=2246): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)={0x4c, 0x42, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x142}, @nested={0x34, 0x1, 0x0, 0x1, [@typed={0x14, 0x94, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x14, 0x70, 0x0, 0x1, [@typed={0x8, 0xf1, 0x0, 0x0, @pid}, @typed={0x8, 0x117, 0x0, 0x0, @uid=0xffffffffffffffff}]}, @nested={0x8, 0x29, 0x0, 0x1, [@nested={0x4, 0xa2}]}]}]}, 0x4c}}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000a05edee700000100000a20000000000a01040000000000000000010080030900010021c77a30000000002c000000030a01010000000000000000010000000900010073797a3000000000060a010400000000000000000100000808000b40eaffffff70000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c000100626974776973650028000280d700034000000004080001400000000508000240000000120400058008000640000000020900010073"], 0x10c}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c8, 0x1a, 0x2, 0x70bd26, 0x25dfdbfb, {0x1e}, [@typed={0x8, 0x5e, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x2a9, 0xc7, 0x0, 0x1, [@typed={0x4, 0x118}, @nested={0x4, 0xab}, @nested={0x4, 0xe4}, @nested={0x4, 0x92}, @generic="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", @generic="eb186bec8701b3b816a9f49b36518946dd79e688ad2c81aafc5b66859fc1bac6ad6cb01d496da584add29c626598fb9380c0558be8f89e1e9bef00b1e690780b6e0a29ec2e3ba75ff373f8373f0e9c6f5f05a333bc1c5323b51980fef7656e667ba1548415b3789f0d6582b9d0a123dda942bb4c31767abc10a482274f313fca3c468e2295c9ac0f847c5834fac62d6f713289f445774e19c1a0dc395988081a843d360eda3ba7ea4b4303f8b6842f0ee59aca429ad1bd72f63a79c1d5dad9b2e921ac5652e1c7198339e2607f1e9706e6b08ee1", @generic="b3e574788030eb0c9ac7c0f01d621b7119812ba22ef54816f0f2fb075e13fb9a8b4e350b8a44acc8bd2e64d71dffaf5601f268614a6eff685e7ade078618189319a304729cba3f36ace8af242595a2b051911a6077c6d604d6c7d124f7eb087dfbf240c0955e1bc5f8ad01d31c47822a5fd41b0a9c54610fbe2a3c0157664d340cd5a14ca69d8c0b4a13db962026adfcb53c66b39ed2e8d28d0f70ad33f0e772a2c6ff1b2ccf932e9abb9ba54f98b0faf96d691b83d289048683dbff281f74957c551f59"]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 279.269307ms ago: executing program 5 (id=2247): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dsp(0xffffffffffffff9c, &(0x7f0000002440), 0x82000, 0x0) socket$packet(0x11, 0x3, 0x300) syz_usb_connect$uac1(0x4, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000aa1da0240109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r0, @ANYBLOB="5ccb4adfc4b4f6"], 0x0) 34.668645ms ago: executing program 4 (id=2248): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x100, 0x18) setpriority(0x1000000, 0x0, 0x4) (async) r1 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r1, 0x0) (async) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000040)={r1}) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) (async) preadv(r0, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) (async) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000000)) 34.163607ms ago: executing program 1 (id=2213): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x3c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x3c}}, 0x801) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x10040057}, 0x24000884) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000000706410400000000000000000500000a0500010007000000fefc16f8a8d6d130e17ab02ad18abbf50db1f2b087ab5d0f9a3a30a0a12f0e806b13d946d231d3460123c49fac1a448ebe5d374ded75e563cfa3142c3ee3c2b02344de762829a6ba594177e2996d8efe23ac314c29468026fca729ce9acc5ee4ac0de587a81c3e297c7ca8129a1e4967f52410aa77cdb3ab7fcea4fe8dbb4381238ad9d38335f3cd51c144cf6e41a1cf6a91287daa2cf4ec32cd88"], 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) setsockopt$sock_int(r2, 0x1, 0x31, &(0x7f0000001600), 0x4) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000080)={0x2, {0x0, 0x4096ffffffffd, 0x9ae, 0x82a, 0x4}}) socket$netlink(0x10, 0x3, 0x8000000004) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f0000000400)='./file0/file0\x00', 0x70) r4 = dup2(r3, r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000580)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @random=0xc, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @val={0x5, 0x2d, {0x8, 0x78, 0x1e, "f66e741ebd2658980a70d1e41bd6f4c37dda724e206e30e0f5069cd2bf54651ffcf6895d78f6459c2021"}}, @void, @void, @void, @void, @void, @void, @void}, 0x65) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, r6, 0x72b, 0x0, 0x327}, 0x14}}, 0x0) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r5, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r10, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0xfb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x20044000) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x5, 0x40000000, 0x10}) 0s ago: executing program 4 (id=2249): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4000000000000102, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000080)={0x9, 0x32315659, 0x2, @stepwise={0xbf1, 0x401, 0x100000, 0x3, 0x3, 0x27b7}}) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f00000000c0)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r5, 0xc008aec1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x37e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x13}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x37e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x13}], 0x1c) setsockopt(r9, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) ioctl$sock_TIOCINQ(r9, 0x541b, &(0x7f0000000000)) (async) ioctl$sock_TIOCINQ(r9, 0x541b, &(0x7f0000000000)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x10, 0x0, &(0x7f0000000180)=[@acquire, @increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r10, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192) (async) getsockopt$inet_buf(r10, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet6(0xa, 0x3, 0x3c) (async) r11 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r11, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) ioctl$KVM_GET_TSC_KHZ_cpu(r1, 0xaea3) sendmmsg$inet(r11, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000340)="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", 0x24a}, {&(0x7f00000006c0)="5be08105437c98b91b9455046f57b5fc090014bde2bb01000000000000001a7838d859207067c30aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d589863d5f323f6d5c", 0x58}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) (async) sendmmsg$inet(r11, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)="3aae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dea658eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7701448658864b429e9472edfeffbf34d6e7c78f4aa73c0", 0x2de}, {&(0x7f0000000340)="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", 0x24a}, {&(0x7f00000006c0)="5be08105437c98b91b9455046f57b5fc090014bde2bb01000000000000001a7838d859207067c30aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d589863d5f323f6d5c", 0x58}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) kernel console output (not intermixed with test programs): the connection abort to close the session. [ 468.999693][T12638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.023287][T12638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.077683][ T43] usb 5-1: USB disconnect, device number 74 [ 469.557099][T12644] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.1936'. [ 469.844457][T12657] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1940'. [ 469.883910][T12657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.909186][T12658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.920741][T12657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.929519][T12658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.974524][ T10] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 470.156201][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 470.169616][ T10] usb 3-1: config 0 has an invalid interface number: 99 but max is 0 [ 470.188579][ T10] usb 3-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 470.220469][ T10] usb 3-1: config 0 has no interface number 0 [ 470.241934][ T10] usb 3-1: too many endpoints for config 0 interface 99 altsetting 98: 45, using maximum allowed: 30 [ 470.268356][ T10] usb 3-1: config 0 interface 99 altsetting 98 has 0 endpoint descriptors, different from the interface descriptor's value: 45 [ 470.303461][ T10] usb 3-1: config 0 interface 99 has no altsetting 0 [ 470.332351][ T10] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 470.352964][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.378638][ T10] usb 3-1: Product: syz [ 470.386426][ T10] usb 3-1: Manufacturer: syz [ 470.395241][ T10] usb 3-1: SerialNumber: syz [ 470.406720][ T10] usb 3-1: config 0 descriptor?? [ 470.643637][T12653] binder: 12651:12653 ioctl c0306201 200000000080 returned -14 [ 470.658935][ T938] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 470.659105][ T10] usb 3-1: no audio or video endpoints found [ 470.697109][ T10] usb 3-1: USB disconnect, device number 73 [ 470.829639][ T938] usb 6-1: Using ep0 maxpacket: 32 [ 470.845872][ T938] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 470.861736][ T938] usb 6-1: config 0 has no interface number 0 [ 470.884654][ T938] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 470.899353][ T938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.909345][ T938] usb 6-1: Product: syz [ 470.913562][ T938] usb 6-1: Manufacturer: syz [ 470.919744][ T938] usb 6-1: SerialNumber: syz [ 470.928990][ T938] usb 6-1: config 0 descriptor?? [ 470.938107][ T938] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 471.025085][T12700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.034658][T12700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.156009][ T938] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 471.175645][ T938] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 471.257912][ T43] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 471.372378][T12711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.389004][T12711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.429347][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 471.447578][ T43] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 471.471186][ T43] usb 5-1: config 0 has no interface number 0 [ 471.481236][ T43] usb 5-1: New USB device found, idVendor=0856, idProduct=ac29, bcdDevice=a8.3c [ 471.491151][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.500574][ T43] usb 5-1: Product: syz [ 471.505281][ T43] usb 5-1: Manufacturer: syz [ 471.510010][ T43] usb 5-1: SerialNumber: syz [ 471.525498][ T43] usb 5-1: config 0 descriptor?? [ 471.612635][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 471.621109][ T5949] usb 6-1: USB disconnect, device number 14 [ 471.641906][ C1] hrtimer: interrupt took 87169 ns [ 471.665789][ T5949] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 471.712349][ T5949] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 471.751557][ T5869] Bluetooth: hci1: command 0x0406 tx timeout [ 471.765246][ T5949] quatech2 6-1:0.51: device disconnected [ 471.771528][T12721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.782835][T12721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.817966][T12721] netlink: 'syz.1.1957': attribute type 10 has an invalid length. [ 471.834376][T12721] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1957'. [ 471.854516][T12721] dummy0: entered promiscuous mode [ 471.867695][T12721] bridge0: port 3(dummy0) entered blocking state [ 471.888029][T12721] bridge0: port 3(dummy0) entered disabled state [ 471.894716][T12721] dummy0: entered allmulticast mode [ 471.944425][T12721] bridge0: port 3(dummy0) entered blocking state [ 471.951103][T12721] bridge0: port 3(dummy0) entered forwarding state [ 472.373685][ T43] mos7840 5-1:0.186: required endpoints missing [ 472.404066][ T43] usb 5-1: USB disconnect, device number 75 [ 472.668066][ T5950] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 472.851698][ T5950] usb 6-1: config 0 has an invalid interface number: 11 but max is 0 [ 472.859973][ T5950] usb 6-1: config 0 has no interface number 0 [ 472.895109][ T5950] usb 6-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=b4.ca [ 472.914082][ T5950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.933193][ T5950] usb 6-1: Product: syz [ 472.939653][ T5950] usb 6-1: Manufacturer: syz [ 472.949261][ T5950] usb 6-1: SerialNumber: syz [ 472.968199][ T5950] usb 6-1: config 0 descriptor?? [ 472.982447][ T5950] usb 6-1: Expected 3 endpoints, found: 0 [ 473.197414][ T5950] usb 6-1: USB disconnect, device number 15 [ 473.394937][ T5949] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 473.555285][ T5949] usb 5-1: Using ep0 maxpacket: 32 [ 473.563044][ T5949] usb 5-1: unable to get BOS descriptor or descriptor too short [ 473.588530][ T5949] usb 5-1: config 8 has an invalid interface number: 238 but max is 0 [ 473.607720][ T5949] usb 5-1: config 8 has no interface number 0 [ 473.619418][ T5949] usb 5-1: config 8 interface 238 has no altsetting 0 [ 473.635600][ T5949] usb 5-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 473.651697][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.660398][ T5949] usb 5-1: Product: syz [ 473.666461][ T5949] usb 5-1: Manufacturer: syz [ 473.671887][ T5949] usb 5-1: SerialNumber: syz [ 473.924140][ T5949] usb 5-1: USB disconnect, device number 76 [ 474.100421][ T43] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 474.271416][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 474.298800][ T43] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 474.307452][ T43] usb 6-1: config 0 has no interface number 0 [ 474.313642][ T43] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid maxpacket 12408, setting to 64 [ 474.349130][ T43] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 474.358721][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.378367][ T43] usb 6-1: Product: syz [ 474.389289][ T43] usb 6-1: Manufacturer: syz [ 474.394055][ T43] usb 6-1: SerialNumber: syz [ 474.403092][ T43] usb 6-1: config 0 descriptor?? [ 474.414297][ T43] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 474.442550][ T43] em28xx 6-1:0.132: Video interface 132 found: [ 474.840779][ T43] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 474.915468][ T5862] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 474.922250][ T5869] Bluetooth: hci4: command 0x1003 tx timeout [ 475.026249][T12754] can0: slcan on ttyS3. [ 475.226695][T12756] can0 (unregistered): slcan off ttyS3. [ 475.503624][ T43] em28xx 6-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 475.522577][ T43] em28xx 6-1:0.132: failed to read eeprom (err=-5) [ 475.529301][ T43] em28xx 6-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 475.613404][ T43] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 475.632327][ T43] em28xx 6-1:0.132: analog set to bulk mode. [ 475.638452][ T24] em28xx 6-1:0.132: Registering V4L2 extension [ 475.688330][ T43] usb 6-1: USB disconnect, device number 16 [ 475.711126][ T43] em28xx 6-1:0.132: Disconnecting em28xx [ 475.939275][T12785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.975071][T12785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.003027][ T24] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 476.013117][T12785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.030237][ T24] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 476.042452][T12785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.055736][ T24] em28xx 6-1:0.132: No AC97 audio processor [ 476.105956][ T24] usb 6-1: Decoder not found [ 476.131904][ T24] em28xx 6-1:0.132: failed to create media graph [ 476.138353][ T24] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 476.192528][ T24] em28xx 6-1:0.132: Remote control support is not available for this card. [ 476.223056][ T43] em28xx 6-1:0.132: Closing input extension [ 476.247647][ T43] em28xx 6-1:0.132: Freeing device [ 476.400427][ T5950] usb 5-1: new low-speed USB device number 77 using dummy_hcd [ 476.572044][ T5950] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 476.584039][ T5950] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 476.594423][ T43] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 476.604446][ T5950] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 476.624977][ T5950] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 476.649057][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 476.670112][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 476.692352][ T5950] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 476.728185][ T5950] usb 5-1: string descriptor 0 read error: -22 [ 476.735436][ T5950] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 476.749505][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.772889][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 476.773603][ T5950] usb 5-1: config 0 descriptor?? [ 476.784808][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.812331][ T5950] hub 5-1:0.0: bad descriptor, ignoring hub [ 476.816009][ T43] usb 6-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 476.824399][ T5950] hub 5-1:0.0: probe with driver hub failed with error -5 [ 476.835448][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.866034][ T43] usb 6-1: config 0 descriptor?? [ 476.869109][ T5950] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input68 [ 477.012455][ T5950] usb 5-1: USB disconnect, device number 77 [ 477.116033][ T43] usbhid 6-1:0.0: can't add hid device: -71 [ 477.128017][ T43] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 477.171512][ T43] usb 6-1: USB disconnect, device number 17 [ 478.130229][ T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 478.269222][ T24] usb 6-1: device descriptor read/64, error -71 [ 478.547129][ T24] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 478.697219][ T24] usb 6-1: device descriptor read/64, error -71 [ 478.788733][T12837] netlink: 'syz.4.1983': attribute type 10 has an invalid length. [ 478.828850][ T24] usb usb6-port1: attempt power cycle [ 479.156378][ T10] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 479.199223][ T24] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 479.221312][ T24] usb 6-1: device descriptor read/8, error -71 [ 479.329766][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 479.455648][ T10] usb 5-1: config 0 has no interface number 0 [ 479.476023][ T10] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 479.489520][ T24] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 479.498396][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.506442][ T10] usb 5-1: Product: syz [ 479.523702][T12844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.532258][ T10] usb 5-1: Manufacturer: syz [ 479.532285][ T10] usb 5-1: SerialNumber: syz [ 479.544867][ T24] usb 6-1: device descriptor read/8, error -71 [ 479.549695][ T10] usb 5-1: config 0 descriptor?? [ 479.552758][T12844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.673676][ T24] usb usb6-port1: unable to enumerate USB device [ 479.789998][ T10] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 479.805865][ T10] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 479.818645][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 479.827199][ T10] usb 5-1: media controller created [ 479.853733][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 480.006365][ T10] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 480.091454][ T10] usb 5-1: USB disconnect, device number 78 [ 480.963342][ T10] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 481.134177][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 481.150702][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.169432][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.181984][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 481.195138][ T10] usb 5-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 481.204467][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.220563][ T10] usb 5-1: config 0 descriptor?? [ 481.292789][T12857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.304038][T12857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.458676][T12851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.477448][T12851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.564247][ T5949] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 481.733014][ T10] nzxt-kraken2 0003:1E71:170E.004A: hidraw0: USB HID v0.04 Device [HID 1e71:170e] on usb-dummy_hcd.4-1/input0 [ 481.745285][ T5949] usb 6-1: Using ep0 maxpacket: 8 [ 481.768227][ T5949] usb 6-1: unable to get BOS descriptor or descriptor too short [ 481.788857][ T5949] usb 6-1: config 1 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 481.812910][ T5949] usb 6-1: config 1 interface 0 has no altsetting 0 [ 481.833046][ T5949] usb 6-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice= 0.40 [ 481.843857][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.861388][ T5949] usb 6-1: Product: syz [ 481.865673][ T5949] usb 6-1: Manufacturer: syz [ 481.870348][ T5949] usb 6-1: SerialNumber: syz [ 481.939905][ T5950] usb 5-1: USB disconnect, device number 79 [ 482.108608][ T5949] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input69 [ 482.135395][ T5218] bcm5974 6-1:1.0: could not read from device [ 482.143510][ T5218] bcm5974 6-1:1.0: could not read from device [ 482.152624][ T5218] bcm5974 6-1:1.0: could not read from device [ 482.158044][ T5949] usb 6-1: USB disconnect, device number 22 [ 482.179810][ T5218] bcm5974 6-1:1.0: could not read from device [ 482.380401][T12864] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1993'. [ 482.813077][ T5949] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 482.983098][ T5949] usb 5-1: Using ep0 maxpacket: 8 [ 483.070553][T12879] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 483.154119][ T24] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 483.173038][T12882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.184598][T12882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.340526][ T24] usb 6-1: config 0 has an invalid interface number: 93 but max is 0 [ 483.349103][ T24] usb 6-1: config 0 has no interface number 0 [ 483.358980][ T24] usb 6-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 483.369289][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.377384][ T24] usb 6-1: Product: syz [ 483.382744][ T24] usb 6-1: Manufacturer: syz [ 483.387405][ T24] usb 6-1: SerialNumber: syz [ 483.407234][ T24] usb 6-1: config 0 descriptor?? [ 483.627853][ T24] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 483.646911][ T24] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 483.663598][ T24] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 483.673273][ T24] usb 6-1: media controller created [ 483.682675][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 483.752836][ T24] DVB: Unable to find symbol dib7000p_attach() [ 483.764884][ T24] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 483.785175][ T24] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 483.809608][ T24] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 483.818482][ T24] usb 6-1: media controller created [ 483.822070][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 483.848638][ T24] dib0700: the master dib7090 has to be initialized first [ 483.886171][ T24] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 484.020068][ T24] rc_core: IR keymap rc-dib0700-rc5 not found [ 484.026308][ T24] Registered IR keymap rc-empty [ 484.044966][ T24] dvb-usb: could not initialize remote control. [ 484.056221][ T24] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 484.074177][ T24] usb 6-1: USB disconnect, device number 23 [ 484.124038][ T24] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 484.490266][ T24] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 484.655494][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 484.667289][ T24] usb 6-1: config 1 interface 0 has no altsetting 0 [ 484.682108][ T24] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 484.692905][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.725388][ T24] usb 6-1: Product: syz [ 484.729658][ T24] usb 6-1: Manufacturer: syz [ 484.734285][ T24] usb 6-1: SerialNumber: syz [ 484.849815][T12902] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2004'. [ 484.924168][T12904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.936899][T12904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.005050][T12906] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2002'. [ 485.205009][ T24] pxrc 6-1:1.0: Could not find endpoint [ 485.243691][ T24] usb 6-1: USB disconnect, device number 24 [ 485.328737][T12910] tipc: Started in network mode [ 485.333687][T12910] tipc: Node identity da862d0142bf, cluster identity 4711 [ 485.357312][T12910] tipc: Enabled bearer , priority 0 [ 485.400623][ T5949] usb 5-1: config 5 has an invalid interface number: 60 but max is 3 [ 485.419983][ T5949] usb 5-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 485.433025][ T5949] usb 5-1: config 5 has an invalid descriptor of length 148, skipping remainder of the config [ 485.454503][ T5949] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 4 [ 485.495344][ T5949] usb 5-1: config 5 has no interface number 0 [ 485.498548][T12910] syzkaller0: entered promiscuous mode [ 485.508659][ T5949] usb 5-1: config 5 interface 60 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 485.528600][T12910] syzkaller0: entered allmulticast mode [ 485.543682][ T5949] usb 5-1: config 5 interface 60 has no altsetting 0 [ 485.549815][T12910] tipc: Resetting bearer [ 485.559327][ T5949] usb 5-1: New USB device found, idVendor=046d, idProduct=082d, bcdDevice=e5.ad [ 485.580524][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.588759][ T5949] usb 5-1: Product: 缸ᱣ橷ކ앥豻汇懞嬦솯ₚ늭液癲遯२噷櫤㥕銹鰆㩁街ߌ今ꊊ㑇ϐꍕ꠫疇瀹ꉕ宄߃⇸逥挳侌嚇쭿퍴頟灶ᛣష˶ᘜ⑳㨷檽眗愂贪捖儋藖⩤䓃ᤉ덍楗熥锦ၻ喈賒껭擛츏刉̸漊郫ꍵ龲⎅淌ிꂴ猄˰쬔 [ 485.604734][T12911] vxcan1 speed is unknown, defaulting to 1000 [ 485.677102][ T5949] usb 5-1: SerialNumber: Т [ 485.840428][ T5949] uvcvideo 5-1:5.60: Found UVC 0.06 device 缸ᱣ橷ކ앥豻汇懞嬦솯ₚ늭液癲遯२噷櫤㥕銹鰆㩁街ߌ今ꊊ㑇ϐꍕ꠫疇瀹ꉕ宄߃⇸逥挳侌嚇쭿퍴頟灶ᛣష˶ᘜ⑳㨷檽眗愂贪捖儋藖⩤䓃ᤉ덍楗熥锦ၻ喈賒껭擛츏刉̸漊郫ꍵ龲⎅淌ிꂴ猄˰쬔 (046d:082d) [ 485.873306][ C1] vkms_vblank_simulate: vblank timer overrun [ 485.922786][ T5949] uvcvideo 5-1:5.60: No valid video chain found. [ 485.931709][ T5949] usb 5-1: USB disconnect, device number 80 [ 486.056439][T12921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.107132][T12921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.478938][ T10] tipc: Node number set to 2553883905 [ 486.489389][ T5949] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 486.649506][ T5949] usb 5-1: device descriptor read/64, error -71 [ 486.882199][T12925] overlayfs: invalid origin (0000) [ 486.927867][ T5949] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 487.077632][ T5949] usb 5-1: device descriptor read/64, error -71 [ 487.195516][ T5949] usb usb5-port1: attempt power cycle [ 487.479186][T12932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.515849][T12932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.558909][T12911] tipc: Resetting bearer [ 487.577059][ T5949] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 487.612649][ T5949] usb 5-1: device descriptor read/8, error -71 [ 487.805366][T12932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.838759][T12932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.879919][ T5949] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 487.906483][T12932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.959271][T12932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.974937][ T5949] usb 5-1: device descriptor read/8, error -71 [ 488.092946][ T5949] usb usb5-port1: unable to enumerate USB device [ 488.109843][ T5869] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 488.119888][ T5869] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 488.130897][ T5869] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 488.160500][ T5869] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 488.196685][ T5869] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 488.871194][T12936] netlink: 393 bytes leftover after parsing attributes in process `syz.1.2014'. [ 490.391235][T12911] tipc: Disabling bearer [ 490.392567][ T5862] Bluetooth: hci4: command tx timeout [ 490.486331][T12933] vxcan1 speed is unknown, defaulting to 1000 [ 490.903120][ T938] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 490.955667][T12953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.979281][T12953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.011109][T12953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.026216][T12953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.331766][T12933] chnl_net:caif_netlink_parms(): no params data found [ 491.352749][ T5950] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 491.424001][T12933] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.431392][T12933] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.439146][T12933] bridge_slave_0: entered allmulticast mode [ 491.446592][T12933] bridge_slave_0: entered promiscuous mode [ 491.456620][T12933] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.464078][T12933] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.471946][T12933] bridge_slave_1: entered allmulticast mode [ 491.480771][T12933] bridge_slave_1: entered promiscuous mode [ 491.513087][ T5950] usb 6-1: Using ep0 maxpacket: 16 [ 491.535929][ T5950] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 491.539822][T12933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.555069][ T5950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.560949][T12933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.573886][ T5950] usb 6-1: Product: syz [ 491.583929][ T5950] usb 6-1: Manufacturer: syz [ 491.589326][ T5950] usb 6-1: SerialNumber: syz [ 491.601821][ T5950] usb 6-1: config 0 descriptor?? [ 491.624590][ T5950] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 491.659376][T12933] team0: Port device team_slave_0 added [ 491.670217][T12933] team0: Port device team_slave_1 added [ 491.678314][T12967] tipc: Resetting bearer [ 491.713586][T12967] tipc: Disabling bearer [ 491.768541][T12933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.777609][T12933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.803656][T12933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.816439][T12933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.823493][T12933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.839487][T12957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.849765][T12933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.877007][T12957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.894238][T12957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.904574][T12957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.916676][ T5950] usb 6-1: clie_3_5_startup: get config number failed: -71 [ 491.932820][ T5950] visor 6-1:0.0: probe with driver visor failed with error -71 [ 491.962260][ T5950] usb 6-1: USB disconnect, device number 25 [ 491.965242][T12933] hsr_slave_0: entered promiscuous mode [ 491.982949][T12933] hsr_slave_1: entered promiscuous mode [ 491.999448][T12933] debugfs: 'hsr0' already exists in 'hsr' [ 492.006098][T12933] Cannot create hsr debugfs directory [ 492.024910][T12969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.039025][T12969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.186566][ T938] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 492.207679][T12933] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 492.218094][T12933] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 492.228689][T12933] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 492.241095][T12933] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 492.272865][T12969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.286670][T12969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.343158][T12933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.347079][ T938] usb 5-1: device descriptor read/64, error -71 [ 492.377145][T12933] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.394806][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.401994][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.417258][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.424438][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.476547][ T938] usb usb5-port1: attempt power cycle [ 492.485100][T12933] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 492.507274][T12933] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 492.614165][ T5862] Bluetooth: hci4: command tx timeout [ 492.715987][T12933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.860544][ T938] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 492.914863][ T938] usb 5-1: device descriptor read/8, error -71 [ 493.027844][T12933] veth0_vlan: entered promiscuous mode [ 493.051190][T12933] veth1_vlan: entered promiscuous mode [ 493.069855][T12992] afs: Unknown parameter 'dynr' [ 493.102990][T12933] veth0_macvtap: entered promiscuous mode [ 493.119020][T12933] veth1_macvtap: entered promiscuous mode [ 493.147923][T12933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.157636][T12998] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2028'. [ 493.167996][T12933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.177684][T12998] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2028'. [ 493.187589][T12998] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 493.204822][ T938] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 493.223879][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.232684][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.242712][ T938] usb 5-1: device descriptor read/8, error -71 [ 493.244278][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.258281][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.363441][ T938] usb usb5-port1: unable to enumerate USB device [ 493.388368][ T7329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.409530][ T7329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.422429][T13000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.433628][T13000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.474921][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.483720][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.637083][T13010] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2031'. [ 493.875452][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 494.033608][T13018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.045553][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.045689][T13018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.065697][ T10] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 494.078793][ T5905] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 494.086508][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.098214][ T10] usb 7-1: config 0 descriptor?? [ 494.107653][ T10] hdpvr 7-1:0.0: Could not find bulk-in endpoint [ 494.114896][ T10] hdpvr 7-1:0.0: probe with driver hdpvr failed with error -12 [ 494.249599][ T5905] usb 6-1: Using ep0 maxpacket: 32 [ 494.256647][ T5905] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 494.269717][ T5905] usb 6-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 494.279142][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.290211][ T5905] usb 6-1: config 0 descriptor?? [ 494.602971][T13008] nbd0: detected capacity change from 0 to 127 [ 494.619603][ T5869] block nbd0: Receive control failed (result -32) [ 494.623224][ T10] usb 7-1: USB disconnect, device number 2 [ 494.630955][ T5862] block nbd0: Receive control failed (result -32) [ 494.636187][ T7283] block nbd0: Send control failed (result -32) [ 494.654730][ T7283] block nbd0: Request send failed, requeueing [ 494.672715][ T25] block nbd0: Dead connection, failed to find a fallback [ 494.680778][ T25] block nbd0: shutting down sockets [ 494.686709][ T25] blk_print_req_error: 10 callbacks suppressed [ 494.686730][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 494.705410][ T25] buffer_io_error: 10 callbacks suppressed [ 494.705430][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 494.720942][ T7283] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 494.732889][ T7283] Buffer I/O error on dev nbd0, logical block 1, async page read [ 494.741876][ T7283] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 494.751227][ T7283] Buffer I/O error on dev nbd0, logical block 2, async page read [ 494.759774][ T7283] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 494.769323][ T7283] Buffer I/O error on dev nbd0, logical block 3, async page read [ 494.777712][ T7283] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 494.787201][ T7283] Buffer I/O error on dev nbd0, logical block 0, async page read [ 494.795249][ T7283] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 494.804498][ T7283] Buffer I/O error on dev nbd0, logical block 1, async page read [ 494.812992][ T7283] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 494.822185][ T7283] Buffer I/O error on dev nbd0, logical block 2, async page read [ 494.830536][ T7283] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 494.840353][ T7283] Buffer I/O error on dev nbd0, logical block 3, async page read [ 494.848584][ T5862] Bluetooth: hci4: command tx timeout [ 494.859077][ T7283] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 494.882865][ T5905] elecom 0003:056E:010C.004B: unknown main item tag 0x0 [ 494.888845][ T7283] Buffer I/O error on dev nbd0, logical block 0, async page read [ 494.904171][ T7283] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 494.914497][ T7283] Buffer I/O error on dev nbd0, logical block 1, async page read [ 494.921166][ T5905] elecom 0003:056E:010C.004B: unknown main item tag 0x0 [ 494.929479][ T7283] ldm_validate_partition_table(): Disk read failed. [ 494.932463][ T7283] Dev nbd0: unable to read RDB block 0 [ 494.946673][ T7283] nbd0: unable to read partition table [ 494.970642][ T5905] elecom 0003:056E:010C.004B: unknown main item tag 0x0 [ 494.984324][ T5905] elecom 0003:056E:010C.004B: unknown main item tag 0x0 [ 494.991223][ T7283] ldm_validate_partition_table(): Disk read failed. [ 494.994317][ T5905] elecom 0003:056E:010C.004B: unknown main item tag 0x0 [ 495.001644][ T7283] Dev nbd0: unable to read RDB block 0 [ 495.031077][ T7283] nbd0: unable to read partition table [ 495.041335][ T5905] elecom 0003:056E:010C.004B: hidraw0: USB HID v0.07 Device [HID 056e:010c] on usb-dummy_hcd.5-1/input0 [ 495.105241][ T5905] usb 6-1: USB disconnect, device number 26 [ 495.188675][T13037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2038'. [ 495.212800][T13033] fido_id[13033]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 495.324397][T13044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.339465][T13044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.357584][T13044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.366749][T13044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.596480][ T5950] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 495.767440][ T5950] usb 5-1: Using ep0 maxpacket: 16 [ 495.779341][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.791041][ T5950] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 495.806344][ T5950] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 495.816194][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.829615][ T5950] usb 5-1: config 0 descriptor?? [ 495.956373][T13063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.967575][T13063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.981667][T13063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.990532][T13063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.130950][ T938] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 496.272260][ T5950] microsoft 0003:045E:07DA.004C: unknown main item tag 0x0 [ 496.279596][ T5950] microsoft 0003:045E:07DA.004C: unknown main item tag 0x0 [ 496.286937][ T5950] microsoft 0003:045E:07DA.004C: unknown main item tag 0x0 [ 496.294895][ T5950] microsoft 0003:045E:07DA.004C: unknown main item tag 0x0 [ 496.302275][ T5950] microsoft 0003:045E:07DA.004C: unknown main item tag 0x0 [ 496.311826][ T5950] microsoft 0003:045E:07DA.004C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 496.323524][ T5950] microsoft 0003:045E:07DA.004C: no inputs found [ 496.329908][ T5950] microsoft 0003:045E:07DA.004C: could not initialize ff, continuing anyway [ 496.343507][ T938] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 496.353043][ T938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.366305][ T938] usb 6-1: config 0 descriptor?? [ 496.384885][ T938] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 496.496182][T13046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.505325][T13046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.578544][ T5912] usb 5-1: USB disconnect, device number 89 [ 496.597807][ T938] gp8psk: usb in 128 operation failed. [ 496.615066][ T938] gp8psk: usb in 137 operation failed. [ 496.619578][T13066] netlink: 'syz.1.2048': attribute type 27 has an invalid length. [ 496.621821][ T938] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 496.630137][T13066] netlink: 'syz.1.2048': attribute type 1 has an invalid length. [ 496.645765][ T938] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 496.656365][ T938] usb 6-1: media controller created [ 496.657238][T13066] netlink: 'syz.1.2048': attribute type 101 has an invalid length. [ 496.671394][T13066] netlink: 832 bytes leftover after parsing attributes in process `syz.1.2048'. [ 496.692498][ T938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 496.728300][ T938] gp8psk_fe: Frontend attached [ 496.734394][ T938] usb 6-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 496.743351][ T938] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 496.838816][ T938] gp8psk: usb in 138 operation failed. [ 496.844522][ T938] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 496.855402][ T938] gp8psk: found Genpix USB device pID = 203 (hex) [ 496.900578][T13074] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 496.916936][T13074] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 497.040353][T13076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.049290][T13076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.061404][ T5862] Bluetooth: hci4: command tx timeout [ 497.062679][T13076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.077194][T13076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.180767][T13081] ieee802154 phy0 wpan0: encryption failed: -22 [ 497.187160][T13081] ieee802154 phy0 wpan0: encryption failed: -22 [ 497.215692][T13083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.224625][T13083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.670297][T13085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.679556][T13085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.354424][ T5926] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 498.401873][T13095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.410766][T13095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.516528][ T5926] usb 5-1: Using ep0 maxpacket: 32 [ 498.527614][ T30] audit: type=1326 audit(1758812076.186:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.6.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ecb8eec9 code=0x7fc00000 [ 498.569616][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.583192][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.593484][ T5926] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 498.608096][ T5926] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 498.620918][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.634205][ T5926] usb 5-1: config 0 descriptor?? [ 499.041432][T13099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.051098][T13099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.085613][ T938] usb 6-1: USB disconnect, device number 27 [ 499.137813][ T5926] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.004D/input/input73 [ 499.146543][T13100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2059'. [ 499.158456][T13100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2059'. [ 499.177521][T13100] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2059'. [ 499.205330][ T5926] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.004D/input/input74 [ 499.251567][T13100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2059'. [ 499.286409][T13099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.306907][T13100] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2059'. [ 499.371575][T13099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.385812][ T5926] kye 0003:0458:5011.004D: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 499.413425][ T938] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 499.500499][ T5926] usb 5-1: USB disconnect, device number 90 [ 499.540200][T13108] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2061'. [ 499.541433][T13112] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2061'. [ 499.706895][T13111] fido_id[13111]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 500.043117][ T5912] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 500.236615][ T5912] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 500.245789][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.254802][ T5912] usb 6-1: Product: syz [ 500.259241][ T5912] usb 6-1: Manufacturer: syz [ 500.263876][ T5912] usb 6-1: SerialNumber: syz [ 500.296720][ T5912] usb 6-1: config 0 descriptor?? [ 500.304899][ T5912] ch341 6-1:0.0: ch341-uart converter detected [ 500.368602][T13133] dns_resolver: Unsupported content type (254) [ 500.412940][ T5950] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 500.523464][ T5912] usb 6-1: failed to receive control message: -71 [ 500.532123][T13136] No source specified [ 500.552367][ T5912] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 500.583217][ T5912] usb 6-1: USB disconnect, device number 28 [ 500.594337][ T5950] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 500.604211][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.614177][ T5912] ch341 6-1:0.0: device disconnected [ 500.621742][ T5950] usb 5-1: Product: syz [ 500.625998][ T5950] usb 5-1: Manufacturer: syz [ 500.630658][ T5950] usb 5-1: SerialNumber: syz [ 500.641443][ T5950] usb 5-1: config 0 descriptor?? [ 500.675687][ T5950] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 501.115912][ T5950] input: sonixb as /devices/platform/dummy_hcd.4/usb5/5-1/input/input75 [ 501.475450][ T5950] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 501.664333][ T5950] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 501.673838][ T5950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.686598][ T5950] usb 6-1: Product: syz [ 501.695302][ T5950] usb 6-1: Manufacturer: syz [ 501.702428][ T5950] usb 6-1: SerialNumber: syz [ 501.839530][ T5905] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 501.988686][ T5905] usb 7-1: device descriptor read/64, error -71 [ 502.255895][ T5905] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 502.416229][ T5905] usb 7-1: device descriptor read/64, error -71 [ 502.547987][ T5905] usb usb7-port1: attempt power cycle [ 502.872485][T13129] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2066'. [ 502.884130][ T5912] usb 5-1: USB disconnect, device number 91 [ 502.929580][ T5905] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 502.966523][ T5905] usb 7-1: device descriptor read/8, error -71 [ 503.012172][T13144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.022293][T13144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.239193][ T5905] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 503.262012][ T5905] usb 7-1: device descriptor read/8, error -71 [ 503.378448][ T5905] usb usb7-port1: unable to enumerate USB device [ 503.678250][T13151] syzkaller1: left promiscuous mode [ 503.683575][T13151] syzkaller1: left allmulticast mode [ 503.691704][T13151] netlink: 'syz.1.2073': attribute type 30 has an invalid length. [ 503.721801][ T5905] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 503.891381][ T5905] usb 5-1: Using ep0 maxpacket: 16 [ 503.904875][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 503.920319][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.930800][ T5905] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 503.943851][ T5905] usb 5-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 503.953074][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.964752][ T5905] usb 5-1: config 0 descriptor?? [ 504.242819][ T5905] usbhid 5-1:0.0: can't add hid device: -71 [ 504.262804][ T5905] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 504.283246][ T5905] usb 5-1: USB disconnect, device number 92 [ 504.543998][ T5950] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e0. ret = -EPROTO [ 504.560882][ T5950] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 504.571991][ T5950] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 504.582970][ T5950] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 504.606128][ T5950] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 504.629536][ T5905] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 504.639006][ T5950] usb 6-1: USB disconnect, device number 29 [ 507.098134][ T24] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 507.173095][ T5905] usb 5-1: device descriptor read/64, error -71 [ 507.260871][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 507.281102][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 507.302415][ T24] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 507.315066][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 507.332939][ T24] usb 7-1: SerialNumber: syz [ 507.429438][ T5905] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 507.462112][ T5950] IPVS: starting estimator thread 0... [ 507.469232][T13209] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 507.568383][T13214] IPVS: using max 31 ests per chain, 74400 per kthread [ 507.586082][T13220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.600905][T13220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.614592][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.615129][ T24] usb 7-1: 0:2 : does not exist [ 507.638764][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.650585][T13220] syz.1.2092 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 507.651036][ T5905] usb 5-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 507.680709][ T24] usb 7-1: USB disconnect, device number 7 [ 507.684369][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.710602][ T5905] usb 5-1: config 0 descriptor?? [ 507.732130][ T7283] udevd[7283]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 507.846559][ T5926] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 508.017321][ T5926] usb 6-1: Using ep0 maxpacket: 16 [ 508.024424][ T5926] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 508.037228][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 508.048558][ T5926] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 508.058480][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.070573][ T5926] usb 6-1: config 0 descriptor?? [ 508.086061][ T5926] pegasus_notetaker 6-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 508.313606][ T5950] usb 6-1: USB disconnect, device number 30 [ 508.537908][ T5905] hid_parser_main: 13 callbacks suppressed [ 508.537937][ T5905] stadia 0003:18D1:9400.004E: unknown main item tag 0x0 [ 508.563966][ T5905] stadia 0003:18D1:9400.004E: item fetching failed at offset 4/5 [ 508.574300][ T5905] stadia 0003:18D1:9400.004E: parse failed [ 508.580412][ T5905] stadia 0003:18D1:9400.004E: probe with driver stadia failed with error -22 [ 508.636766][T13224] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2093'. [ 508.810959][T13224] syz.6.2093 (13224) used greatest stack depth: 16952 bytes left [ 509.173332][T13232] netlink: 'syz.5.2095': attribute type 3 has an invalid length. [ 509.246591][ T5905] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 509.428348][ T5905] usb 7-1: Using ep0 maxpacket: 8 [ 509.449415][ T5905] usb 7-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 509.462852][ T5905] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.479006][ T5905] usb 7-1: Product: syz [ 509.483898][ T5905] usb 7-1: Manufacturer: syz [ 509.503236][ T5905] usb 7-1: SerialNumber: syz [ 509.517377][ T5905] usb 7-1: config 0 descriptor?? [ 509.530634][ T5905] radio-usb-si4713 7-1:0.0: Si4713 development board discovered: (10C4:8244) [ 510.083644][ T5950] usb 5-1: USB disconnect, device number 94 [ 510.240756][ T5926] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 510.412684][ T5926] usb 6-1: Using ep0 maxpacket: 16 [ 510.420055][ T5926] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 510.430275][ T5926] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 510.442249][ T5926] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 510.451532][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.459788][ T5926] usb 6-1: Product: syz [ 510.464220][ T5926] usb 6-1: Manufacturer: syz [ 510.469193][ T5926] usb 6-1: SerialNumber: syz [ 510.614171][ T5905] radio-usb-si4713 7-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 510.624223][ T5905] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 510.638460][ T5905] usb 7-1: USB disconnect, device number 8 [ 510.697885][T13251] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2102'. [ 510.813473][T13261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.823277][T13261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.924973][ T5926] usb 6-1: cannot find UAC_HEADER [ 510.947660][ T5926] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 510.960238][ T5926] usb 6-1: USB disconnect, device number 31 [ 510.976498][ T7283] udevd[7283]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 511.330647][T13267] tmpfs: Unknown parameter 'usrquotau' [ 511.448767][ T5926] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 511.470181][T13273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2109'. [ 511.597035][T13276] dns_resolver: Unsupported content type (254) [ 511.620072][ T5926] usb 7-1: Using ep0 maxpacket: 32 [ 511.631542][ T5926] usb 7-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 64 [ 511.644486][ T5926] usb 7-1: config 1 interface 0 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 511.657811][ T5926] usb 7-1: config 1 interface 0 has no altsetting 0 [ 511.665980][ T5926] usb 7-1: language id specifier not provided by device, defaulting to English [ 511.689456][ T5926] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 511.715874][ T5926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.723946][ T5926] usb 7-1: Manufacturer: ⠁ [ 511.739070][ T5926] usb 7-1: SerialNumber: syz [ 511.759119][T13265] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 511.769058][T13281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.788470][T13265] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 511.796895][T13281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.821527][T13281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.833467][T13281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.865535][ T24] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 511.891381][T13283] mkiss: ax0: crc mode is auto. [ 511.899993][T13285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2112'. [ 512.052575][ T24] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 512.052645][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.056488][ T24] usb 5-1: config 0 descriptor?? [ 512.088505][ T24] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 512.107372][ T5926] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 512.133780][ T5926] usb 7-1: USB disconnect, device number 9 [ 512.520732][ T24] gp8psk: usb out operation failed. [ 512.535650][ T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 512.560853][ T24] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 512.598515][ T24] usb 5-1: USB disconnect, device number 95 [ 512.763560][ T5905] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 512.934442][ T5905] usb 6-1: Using ep0 maxpacket: 16 [ 512.942619][ T5905] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.953688][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 512.965282][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 512.977451][ T5905] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 512.987203][ T5905] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 513.002163][ T5905] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 513.012610][ T5905] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 513.024467][ T5905] usb 6-1: Manufacturer: syz [ 513.043229][ T5905] usb 6-1: config 0 descriptor?? [ 513.362043][ T5905] rc_core: IR keymap rc-hauppauge not found [ 513.373788][ T5905] Registered IR keymap rc-empty [ 513.378904][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 513.426347][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 513.459493][ T5905] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 513.516840][ T5905] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input77 [ 513.595402][T13314] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 513.666244][T13317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.677338][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 513.705659][T13317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.736466][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 513.765104][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 513.818136][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 513.854096][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 513.876176][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 513.896925][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 513.937232][T13326] netlink: 'syz.4.2120': attribute type 1 has an invalid length. [ 513.945410][T13326] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2120'. [ 513.961653][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 513.972492][T13326] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2120'. [ 513.981500][T13326] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 513.982794][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 514.006481][T13326] Bluetooth: Invalid esc byte 0x09 [ 514.028961][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 514.034229][T13328] sp0: Synchronizing with TNC [ 514.062061][ T5905] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 514.071557][ T5905] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 514.090045][ T5912] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 514.109016][ T5905] usb 6-1: USB disconnect, device number 32 [ 514.128623][ T36] Bluetooth: (null): Invalid header checksum [ 514.138199][ T36] Bluetooth: (null): Invalid header checksum [ 514.251477][ T36] Bluetooth: (null): Invalid header checksum [ 514.326007][T13341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.334901][T13341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.367943][ T36] Bluetooth: (null): Invalid header checksum [ 514.371850][T13344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.383813][T13344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.485664][ T36] Bluetooth: (null): Invalid header checksum [ 514.603342][ T7329] Bluetooth: (null): Invalid header checksum [ 514.645515][ T5926] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 514.720670][ T36] Bluetooth: (null): Invalid header checksum [ 514.819052][ T5926] usb 5-1: unable to get BOS descriptor or descriptor too short [ 514.828797][ T5926] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 514.839502][ T36] Bluetooth: (null): Invalid header checksum [ 514.842724][ T5926] usb 5-1: string descriptor 0 read error: -22 [ 514.852140][ T5926] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 514.861276][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.956004][ T60] Bluetooth: (null): Invalid header checksum [ 514.979739][T13349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.991086][T13349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.009195][ T5926] usb 5-1: reset high-speed USB device number 96 using dummy_hcd [ 515.074012][ T60] Bluetooth: (null): Invalid header checksum [ 515.193122][ T36] Bluetooth: (null): Invalid header checksum [ 515.203956][T13358] netlink: 'syz.1.2131': attribute type 11 has an invalid length. [ 515.309356][ T36] Bluetooth: (null): Invalid header checksum [ 515.346714][T13361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.355880][T13361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.426681][ T36] Bluetooth: (null): Invalid header checksum [ 515.544301][ T50] Bluetooth: (null): Invalid header checksum [ 515.661898][ T60] Bluetooth: (null): Invalid header checksum [ 515.757762][ T5926] usb 5-1: device descriptor read/64, error -71 [ 515.790229][ T36] Bluetooth: (null): Invalid header checksum [ 515.907905][T13110] Bluetooth: (null): Invalid header checksum [ 516.015047][ T5926] usb 5-1: reset high-speed USB device number 96 using dummy_hcd [ 516.027347][ T5926] usb 5-1: device reset changed ep0 maxpacket size! [ 516.027410][ T36] Bluetooth: (null): Invalid header checksum [ 516.057259][ T5926] usb 5-1: USB disconnect, device number 96 [ 516.145568][T13110] Bluetooth: (null): Invalid header checksum [ 516.210159][T13368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.217702][ T5926] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 516.224345][T13368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.241636][T13368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.250894][T13368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.261334][ T36] Bluetooth: (null): Invalid header checksum [ 516.378421][ T50] Bluetooth: (null): Invalid header checksum [ 516.389027][ T5926] usb 5-1: Using ep0 maxpacket: 8 [ 516.405445][ T5926] usb 5-1: unable to get BOS descriptor or descriptor too short [ 516.414978][ T5926] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 516.427607][ T5926] usb 5-1: can't read configurations, error -71 [ 516.496350][ T36] Bluetooth: (null): Invalid header checksum [ 516.613870][ T36] Bluetooth: (null): Invalid header checksum [ 516.731999][ T36] Bluetooth: (null): Invalid header checksum [ 516.847691][T13370] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 516.874907][T13370] CIFS mount error: No usable UNC path provided in device string! [ 516.874907][T13370] [ 516.875234][ T36] Bluetooth: (null): Invalid header checksum [ 516.886347][T13370] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 516.990024][ T50] Bluetooth: (null): Invalid header checksum [ 517.050080][ T5912] usb 7-1: unable to get BOS descriptor or descriptor too short [ 517.065309][ T5912] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 517.076320][ T5912] usb 7-1: can't read configurations, error -71 [ 517.114047][ T36] Bluetooth: (null): Invalid header checksum [ 517.140867][T13379] netlink: 'syz.1.2138': attribute type 11 has an invalid length. [ 517.160692][T13382] fuse: Bad value for 'fd' [ 517.207468][T13383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.225221][T13110] Bluetooth: (null): Invalid header checksum [ 517.237145][T13383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.249859][T13379] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2138'. [ 517.262595][T13379] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 517.273895][T13379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.284344][T13379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.344828][T13110] Bluetooth: (null): Invalid header checksum [ 517.459410][T13110] Bluetooth: (null): Invalid header checksum [ 517.462964][T13390] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2142'. [ 517.577275][T13110] Bluetooth: (null): Invalid header checksum [ 517.695464][ T60] Bluetooth: (null): Invalid header checksum [ 517.757806][ T5912] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 517.800559][ T5926] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 517.822261][ T60] Bluetooth: (null): Invalid header checksum [ 517.932194][ T5912] usb 7-1: config 4 has an invalid interface number: 24 but max is 0 [ 517.934328][T13399] netlink: 'syz.1.2145': attribute type 28 has an invalid length. [ 517.941188][ T5912] usb 7-1: config 4 has no interface number 0 [ 517.953619][ T60] Bluetooth: (null): Invalid header checksum [ 517.962805][ T5912] usb 7-1: New USB device found, idVendor=17ef, idProduct=a387, bcdDevice=99.3c [ 517.964689][T13399] QAT: failed to copy from user cfg_data. [ 517.972274][ T5912] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.977877][ T5926] usb 6-1: Using ep0 maxpacket: 32 [ 517.986737][ T5912] usb 7-1: Product: syz [ 517.998745][ T5912] usb 7-1: Manufacturer: syz [ 518.000723][ T5926] usb 6-1: config 7 has an invalid interface number: 252 but max is 3 [ 518.003402][ T5912] usb 7-1: SerialNumber: syz [ 518.015260][ T5912] r8152-cfgselector 7-1: Unknown version 0x0000 [ 518.017607][ T5926] usb 6-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 518.025400][T13399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.034739][ T5926] usb 6-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 518.044956][T13399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.050510][ T5926] usb 6-1: config 7 has an invalid interface number: 68 but max is 3 [ 518.065063][ T5926] usb 6-1: config 7 has an invalid interface number: 161 but max is 3 [ 518.065247][T13110] Bluetooth: (null): Invalid header checksum [ 518.073706][ T5926] usb 6-1: config 7 has an invalid interface number: 249 but max is 3 [ 518.087908][ T5926] usb 6-1: config 7 has an invalid interface number: 88 but max is 3 [ 518.096349][ T5926] usb 6-1: config 7 has 5 interfaces, different from the descriptor's value: 4 [ 518.106516][ T5926] usb 6-1: config 7 has no interface number 0 [ 518.112784][ T5926] usb 6-1: config 7 has no interface number 1 [ 518.119043][ T5926] usb 6-1: config 7 has no interface number 2 [ 518.125295][ T5926] usb 6-1: config 7 has no interface number 3 [ 518.131414][ T5926] usb 6-1: config 7 has no interface number 4 [ 518.138351][ T5926] usb 6-1: config 7 interface 252 altsetting 4 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 518.149568][ T5926] usb 6-1: config 7 interface 252 altsetting 4 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 518.160939][ T5926] usb 6-1: config 7 interface 252 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 518.171912][ T5926] usb 6-1: config 7 interface 252 altsetting 4 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 518.183618][ T5926] usb 6-1: config 7 interface 68 altsetting 3 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 518.183853][ T60] Bluetooth: (null): Invalid header checksum [ 518.194687][ T5926] usb 6-1: config 7 interface 68 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 518.194715][ T5926] usb 6-1: config 7 interface 68 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 518.194738][ T5926] usb 6-1: config 7 interface 68 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 518.194763][ T5926] usb 6-1: config 7 interface 68 altsetting 3 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 518.194790][ T5926] usb 6-1: config 7 interface 68 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 518.194815][ T5926] usb 6-1: config 7 interface 68 altsetting 3 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 518.194856][ T5926] usb 6-1: config 7 interface 161 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 518.279914][ T5926] usb 6-1: config 7 interface 161 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 518.291258][ T5912] r8152-cfgselector 7-1: USB disconnect, device number 11 [ 518.300949][ T5926] usb 6-1: config 7 interface 161 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 13 [ 518.315529][ T50] Bluetooth: (null): Invalid header checksum [ 518.315550][ T5926] usb 6-1: too many endpoints for config 7 interface 249 altsetting 182: 148, using maximum allowed: 30 [ 518.332872][ T5926] usb 6-1: config 7 interface 249 altsetting 182 has a duplicate endpoint with address 0xD, skipping [ 518.344080][ T5926] usb 6-1: config 7 interface 249 altsetting 182 has a duplicate endpoint with address 0x7, skipping [ 518.355089][ T5926] usb 6-1: config 7 interface 249 altsetting 182 has a duplicate endpoint with address 0x8, skipping [ 518.367366][ T5926] usb 6-1: config 7 interface 249 altsetting 182 has a duplicate endpoint with address 0xD, skipping [ 518.379094][ T5926] usb 6-1: config 7 interface 249 altsetting 182 has an invalid descriptor for endpoint zero, skipping [ 518.390297][ T5926] usb 6-1: config 7 interface 249 altsetting 182 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 518.401630][ T5926] usb 6-1: config 7 interface 249 altsetting 182 has a duplicate endpoint with address 0x9, skipping [ 518.412895][ T5926] usb 6-1: config 7 interface 249 altsetting 182 has a duplicate endpoint with address 0x9, skipping [ 518.423965][ T5926] usb 6-1: config 7 interface 249 altsetting 182 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 518.435591][ T5926] usb 6-1: config 7 interface 249 altsetting 182 has a duplicate endpoint with address 0x9, skipping [ 518.436593][ T60] Bluetooth: (null): Invalid header checksum [ 518.447616][ T5926] usb 6-1: config 7 interface 249 altsetting 182 has 11 endpoint descriptors, different from the interface descriptor's value: 148 [ 518.467900][ T5926] usb 6-1: config 7 interface 88 altsetting 9 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 518.478956][ T5926] usb 6-1: config 7 interface 88 altsetting 9 has a duplicate endpoint with address 0xE, skipping [ 518.490064][ T5926] usb 6-1: config 7 interface 88 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 518.500944][ T5926] usb 6-1: config 7 interface 88 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 518.511676][ T5926] usb 6-1: config 7 interface 88 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 518.522363][ T5926] usb 6-1: config 7 interface 88 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 518.534535][ T5926] usb 6-1: config 7 interface 88 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 518.545303][ T5926] usb 6-1: config 7 interface 252 has no altsetting 0 [ 518.552448][ T5926] usb 6-1: config 7 interface 68 has no altsetting 0 [ 518.552854][ T50] Bluetooth: (null): Invalid header checksum [ 518.559161][ T5926] usb 6-1: config 7 interface 161 has no altsetting 0 [ 518.559186][ T5926] usb 6-1: config 7 interface 249 has no altsetting 0 [ 518.559208][ T5926] usb 6-1: config 7 interface 88 has no altsetting 0 [ 518.562805][ T5926] usb 6-1: New USB device found, idVendor=0bb4, idProduct=0a03, bcdDevice=63.50 [ 518.595298][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.603620][ T5926] usb 6-1: Product: syz [ 518.607839][ T5926] usb 6-1: Manufacturer: syz [ 518.612450][ T5926] usb 6-1: SerialNumber: syz [ 518.677946][ T50] Bluetooth: (null): Invalid header checksum [ 518.692025][T13401] binder: 13400:13401 ioctl c0306201 200000000680 returned -14 [ 518.707456][T13401] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 518.716975][T13401] VFS: Can't find a romfs filesystem on dev nullb0. [ 518.716975][T13401] [ 518.779099][T13403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.789859][T13403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.798643][ T50] Bluetooth: (null): Invalid header checksum [ 518.890500][ T5926] usb 6-1: USB disconnect, device number 33 [ 518.935398][ T50] Bluetooth: (null): Invalid header checksum [ 518.953677][T13405] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2148'. [ 519.042104][ T60] Bluetooth: (null): Invalid header checksum [ 519.170148][ T50] Bluetooth: (null): Invalid header checksum [ 519.299290][T13110] Bluetooth: (null): Invalid header checksum [ 519.416802][T13110] Bluetooth: (null): Invalid header checksum [ 519.444832][T13425] netlink: 'syz.5.2155': attribute type 4 has an invalid length. [ 519.463120][T13423] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 519.474836][ T5912] IPVS: starting estimator thread 0... [ 519.533684][T13110] Bluetooth: (null): Invalid header checksum [ 519.554073][T13430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.555119][ T5905] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 519.581911][T13430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.589817][T13427] IPVS: using max 30 ests per chain, 72000 per kthread [ 519.626171][T13434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.637590][T13434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.651545][T13110] Bluetooth: (null): Invalid header checksum [ 519.736380][ T5905] usb 7-1: Using ep0 maxpacket: 32 [ 519.743609][ T5905] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 519.753967][ T5905] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 519.769240][ T36] Bluetooth: (null): Invalid header checksum [ 519.776759][ T5905] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 519.786242][ T5905] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.794557][ T5905] usb 7-1: Product: syz [ 519.800110][ T5905] usb 7-1: Manufacturer: Џ [ 519.805047][ T5905] usb 7-1: SerialNumber: syz [ 519.886692][ T60] Bluetooth: (null): Invalid header checksum [ 520.004222][ T60] Bluetooth: (null): Invalid header checksum [ 520.116877][ T5905] usb 7-1: 0:2 : does not exist [ 520.134099][ T36] Bluetooth: (null): Invalid header checksum [ 520.140234][ T5905] usb 7-1: USB disconnect, device number 12 [ 520.170980][ T7283] udevd[7283]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 520.249387][T13448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.259890][T13448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.268904][ T36] Bluetooth: (null): Invalid header checksum [ 520.335740][ T5926] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 520.367718][ T60] Bluetooth: (null): Invalid header checksum [ 520.496266][ T5926] usb 6-1: Using ep0 maxpacket: 16 [ 520.498820][ T36] Bluetooth: (null): Invalid header checksum [ 520.504636][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.518898][ T5926] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 520.529012][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.539313][ T5926] usb 6-1: config 0 descriptor?? [ 520.571703][ T43] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 520.613857][ T36] Bluetooth: (null): Invalid header checksum [ 520.742057][ T50] Bluetooth: (null): Invalid header checksum [ 520.758930][ T43] usb 5-1: config index 0 descriptor too short (expected 2340, got 36) [ 520.776981][ T43] usb 5-1: config 0 has too many interfaces: 33, using maximum allowed: 32 [ 520.777881][T13443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.793337][ T43] usb 5-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 520.798204][T13443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.827061][ T43] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 33 [ 520.841722][ T43] usb 5-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 520.860467][ T36] Bluetooth: (null): Invalid header checksum [ 520.877913][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.896752][ T43] usb 5-1: config 0 descriptor?? [ 520.930627][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 520.951926][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 520.988383][ T36] Bluetooth: (null): Invalid header checksum [ 521.106126][ T60] Bluetooth: (null): Invalid header checksum [ 521.200594][ T5926] mcp2221 0003:04D8:00DD.004F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 521.223514][ T50] Bluetooth: (null): Invalid header checksum [ 521.266333][ T938] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 521.357555][ T50] Bluetooth: (null): Invalid header checksum [ 521.458293][ T938] usb 7-1: Using ep0 maxpacket: 32 [ 521.468448][ T938] usb 7-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 521.482570][ T938] usb 7-1: config 1 interface 0 has no altsetting 0 [ 521.493008][ T938] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 521.502856][ T938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.511057][ T938] usb 7-1: Product: 굫ᘀ㴶㳚沦䃶਒煳摍솓훧튓칀㜓 [ 521.521180][ T938] usb 7-1: Manufacturer: ঢ়薹깣觎쪶潦쪳ⴿ訴鸏Ⴇ촕촼毲權쟦퍦䑼㱚૝ᓞꛢ⋿ᇰÏ旹벍뢬닑钏꣦箄ﹰ䉓胔唫Ө貅㶛譪 [ 521.537874][ T938] usb 7-1: SerialNumber: 窠ꃭ㔴騱閛儯⬜왜᥶╏偯﹫襹閌뺛ꛥ¯畊ꢄ㮷鸒蔎ઽἿ요꾛缏霒쥅ࣝ핏⮻鹌죉叐ꦍ믺ꈶ₺홂胼诲슟湓ᦅ棾뮎櫝渎墣财稓꘨퐧旒龸ꮜᘢ鉞꼌ᦒᚶߨ爼됇駮꽿箌㍫Ⴂ樮ꟃ헤ኇ⦹虼䀣䘸䬳墹濚㸚通꿷睝㬐㊰ïụꪆ葥ᢢ퉿๣濕頯橘〸再궹Қ數罪鴣 [ 521.584147][ T60] Bluetooth: (null): Invalid header checksum [ 521.610991][ T60] Bluetooth: (null): Invalid header checksum [ 521.639016][T13461] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 521.715473][T13110] Bluetooth: (null): Invalid header checksum [ 521.833042][ T7329] Bluetooth: (null): Invalid header checksum [ 521.952430][ T50] Bluetooth: (null): Invalid header checksum [ 522.040200][T13477] netlink: 328 bytes leftover after parsing attributes in process `syz.1.2170'. [ 522.068784][ T36] Bluetooth: (null): Invalid header checksum [ 522.099548][T13478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.108854][T13478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.184161][T13483] hub 9-0:1.0: USB hub found [ 522.190298][T13110] Bluetooth: (null): Invalid header checksum [ 522.191486][T13483] hub 9-0:1.0: 1 port detected [ 522.304939][T13110] Bluetooth: (null): Invalid header checksum [ 522.318272][ T938] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 3 proto 1 vid 0x0525 pid 0xA4A8 [ 522.337965][ T938] usb 7-1: USB disconnect, device number 13 [ 522.362613][ T938] usblp0: removed [ 522.422215][ T7329] Bluetooth: (null): Invalid header checksum [ 522.539162][ T7329] Bluetooth: (null): Invalid header checksum [ 522.662402][T13110] Bluetooth: (null): Invalid header checksum [ 522.780363][ T7329] Bluetooth: (null): Invalid header checksum [ 522.862652][T13509] 9pnet_fd: Insufficient options for proto=fd [ 522.862695][T13510] 9pnet_fd: Insufficient options for proto=fd [ 522.894964][T13110] Bluetooth: (null): Invalid header checksum [ 523.004333][T13514] [U]  [ 523.007909][T13514] [U] K{ [ 523.010953][T13514] [U] t 1ŠFfˊ`GJgo/mC [ 523.017941][T13514] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 523.033482][T13514] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 523.043919][T13514] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 523.079785][T13514] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 523.103353][T13514] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 523.114479][T13514] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 523.126051][T13514] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 523.222309][T13514] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 523.230846][T13514] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 523.244490][T13514] [U] 22Ʃx?0;3u [ 523.248669][T13514] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 523.273770][T13514] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 523.283087][T13514] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 523.291689][T13514] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 523.297859][T13514] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 523.310513][T13514] [U] ec [ 523.313657][T13514] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 523.326001][ C0] vkms_vblank_simulate: vblank timer overrun [ 523.331767][ T60] Bluetooth: (null): Invalid header checksum [ 523.345894][ T5905] usb 6-1: USB disconnect, device number 34 [ 523.378195][T13513] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 523.397721][ T36] Bluetooth: (null): Invalid header checksum [ 523.501515][T13110] Bluetooth: (null): Invalid header checksum [ 523.530413][ T5950] usb 5-1: USB disconnect, device number 99 [ 523.621814][T13110] Bluetooth: (null): Invalid header checksum [ 523.736742][ T7329] Bluetooth: (null): Invalid header checksum [ 523.758823][T13528] netlink: 176 bytes leftover after parsing attributes in process `syz.6.2186'. [ 523.789861][ T5905] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 523.858839][ T7329] Bluetooth: (null): Invalid header checksum [ 523.961799][ T5905] usb 6-1: Using ep0 maxpacket: 16 [ 523.971696][ T5950] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 523.972591][ T7329] Bluetooth: (null): Invalid header checksum [ 523.985938][ T5905] usb 6-1: config 5 has an invalid interface number: 20 but max is 0 [ 523.995976][ T5905] usb 6-1: config 5 has no interface number 0 [ 524.003189][ T5905] usb 6-1: config 5 interface 20 has no altsetting 0 [ 524.016325][ T5905] usb 6-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.08 [ 524.026283][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.034321][ T5905] usb 6-1: Product: syz [ 524.039167][ T5905] usb 6-1: Manufacturer: syz [ 524.043807][ T5905] usb 6-1: SerialNumber: syz [ 524.089868][ T7329] Bluetooth: (null): Invalid header checksum [ 524.144494][ T5971] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 524.167140][ T5950] usb 5-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 524.183556][ T5950] usb 5-1: config 0 interface 0 has no altsetting 0 [ 524.193283][ T5950] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 524.202957][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 524.207430][T13110] Bluetooth: (null): Invalid header checksum [ 524.212622][ T5950] usb 5-1: Product: syz [ 524.222508][ T5950] usb 5-1: Manufacturer: syz [ 524.227176][ T5950] usb 5-1: SerialNumber: syz [ 524.240044][ T5950] usb 5-1: config 0 descriptor?? [ 524.283700][ T5950] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 524.295160][ T5905] go7007 6-1:5.20: probe with driver go7007 failed with error -12 [ 524.310971][ T5905] usb 6-1: USB disconnect, device number 35 [ 524.324587][ T5971] usb 7-1: Using ep0 maxpacket: 16 [ 524.325011][T13110] Bluetooth: (null): Invalid header checksum [ 524.338050][ T5971] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.353948][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 524.356262][ T5971] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 524.383330][ T5971] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 524.393958][ T5971] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 524.404334][ T5971] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 524.418602][ T5971] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 524.428832][ T5971] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 524.437252][ T5971] usb 7-1: Manufacturer: syz [ 524.442575][ T36] Bluetooth: (null): Invalid header checksum [ 524.449838][ T5971] usb 7-1: config 0 descriptor?? [ 524.468953][ T10] usb 5-1: USB disconnect, device number 100 [ 524.560291][T13110] Bluetooth: (null): Invalid header checksum [ 524.681271][ T7329] Bluetooth: (null): Invalid header checksum [ 524.741714][ T5971] rc_core: IR keymap rc-hauppauge not found [ 524.747702][ T5971] Registered IR keymap rc-empty [ 524.756896][ T5971] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 524.784572][ T5971] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 524.806338][ T7329] Bluetooth: (null): Invalid header checksum [ 524.807187][ T5971] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 524.826489][ T5971] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input81 [ 524.846468][ T5971] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 524.870111][ T5971] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 524.895101][ T5971] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 524.923925][ T5971] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 524.934657][T13110] Bluetooth: (null): Invalid header checksum [ 524.945818][ T5971] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 524.966382][ T5971] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 524.988588][ T5971] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 525.009192][ T5971] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 525.034000][ T5971] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 525.053211][ T7329] Bluetooth: (null): Invalid header checksum [ 525.073324][ T5971] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 525.096607][ T5971] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 525.106952][ T5971] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 525.127339][ T10] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 525.169867][T13110] Bluetooth: (null): Invalid header checksum [ 525.287618][ T36] Bluetooth: (null): Invalid header checksum [ 525.296762][ T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 525.306778][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.315243][ T10] usb 6-1: Product: syz [ 525.320001][ T10] usb 6-1: Manufacturer: syz [ 525.324728][ T10] usb 6-1: SerialNumber: syz [ 525.341825][ T938] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 525.342196][ T10] usb 6-1: config 0 descriptor?? [ 525.396003][T13553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.405184][ T36] Bluetooth: (null): Invalid header checksum [ 525.413544][T13553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.522820][ T36] Bluetooth: (null): Invalid header checksum [ 525.539651][ T938] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=28.00 [ 525.555634][ T938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.563703][ T938] usb 5-1: Product: syz [ 525.577097][ T938] usb 5-1: Manufacturer: syz [ 525.581765][ T938] usb 5-1: SerialNumber: syz [ 525.587752][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880786f8000: rx timeout, send abort [ 525.596176][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880786f8000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 525.596408][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880786f8400: rx timeout, send abort [ 525.610956][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880786f8400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 525.641827][ T36] Bluetooth: (null): Invalid header checksum [ 525.645607][ T10] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 525.683516][ T938] usb 5-1: config 0 descriptor?? [ 525.737948][ T938] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 525.753129][ T5971] usb 7-1: USB disconnect, device number 14 [ 525.760032][ T938] usb 5-1: Detected FT2233HP [ 525.767572][T13556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.776970][ T7329] Bluetooth: (null): Invalid header checksum [ 525.784850][T13556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.876257][ T7329] Bluetooth: (null): Invalid header checksum [ 525.953052][ T938] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 525.993494][ T36] Bluetooth: (null): Invalid header checksum [ 526.111157][ T36] Bluetooth: (null): Invalid header checksum [ 526.172379][ T938] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 526.183305][ T938] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 526.194500][ T938] usb 5-1: USB disconnect, device number 101 [ 526.206421][ T938] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 526.218221][ T938] ftdi_sio 5-1:0.0: device disconnected [ 526.231834][T13110] Bluetooth: (null): Invalid header checksum [ 526.347534][T13110] Bluetooth: (null): Invalid header checksum [ 526.488607][T13110] Bluetooth: (null): Invalid header checksum [ 526.581624][T13110] Bluetooth: (null): Invalid header checksum [ 526.661416][T13567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.673449][T13567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.699303][ T7329] Bluetooth: (null): Invalid header checksum [ 526.827960][ T36] Bluetooth: (null): Invalid header checksum [ 526.936583][ T36] Bluetooth: (null): Invalid header checksum [ 527.055336][ T36] Bluetooth: (null): Invalid header checksum [ 527.090289][T13578] mmap: syz.4.2201 (13578): VmData 37597184 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 527.164335][T13582] input: syz1 as /devices/virtual/input/input82 [ 527.171201][ T36] Bluetooth: (null): Invalid header checksum [ 527.287660][ T36] Bluetooth: (null): Invalid header checksum [ 527.406261][ T7329] Bluetooth: (null): Invalid header checksum [ 527.491255][ T10] usb 6-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 527.512368][ T10] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 527.521636][ T10] usb 6-1: media controller created [ 527.522923][ T7329] Bluetooth: (null): Invalid header checksum [ 527.532241][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 527.597584][ T938] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 527.640534][ T7329] Bluetooth: (null): Invalid header checksum [ 527.662005][ T10] i2c i2c-2: Added multiplexed i2c bus 3 [ 527.678790][ T10] rtl2832 2-0010: Realtek RTL2832 successfully attached [ 527.700972][ T10] usb 6-1: DVB: registering adapter 2 frontend 0 (Realtek RTL2832 (DVB-T))... [ 527.715091][ T10] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 527.771106][ T50] Bluetooth: (null): Invalid header checksum [ 527.779396][ T938] usb 5-1: Using ep0 maxpacket: 8 [ 527.795385][ T938] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 527.829644][ T938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.854486][ T938] usb 5-1: Product: syz [ 527.858748][ T938] usb 5-1: Manufacturer: syz [ 527.874129][ T938] usb 5-1: SerialNumber: syz [ 527.880601][ T50] Bluetooth: (null): Invalid header checksum [ 527.992097][ T938] usb 5-1: config 0 descriptor?? [ 527.998790][ T60] Bluetooth: (null): Invalid header checksum [ 528.019944][ T938] gspca_main: se401-2.14.0 probing 047d:5003 [ 528.047343][ T10] DVB: Unable to find symbol r820t_attach() [ 528.111587][ T36] Bluetooth: (null): Invalid header checksum [ 528.229330][ T7329] Bluetooth: (null): Invalid header checksum [ 528.238339][ T5926] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 528.346762][ T50] Bluetooth: (null): Invalid header checksum [ 528.410202][ T5926] usb 7-1: Using ep0 maxpacket: 16 [ 528.418346][ T5926] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 528.427035][ T5926] usb 7-1: config 0 has no interface number 0 [ 528.433387][ T5926] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.444798][ T5926] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.455989][ T5926] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 528.466025][ T36] Bluetooth: (null): Invalid header checksum [ 528.476180][ T938] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 528.489073][ T5926] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.497559][ T938] se401 5-1:0.0: probe with driver se401 failed with error -71 [ 528.512573][ T5926] usb 7-1: config 0 descriptor?? [ 528.535302][ T938] usb 5-1: USB disconnect, device number 102 [ 528.585095][ T50] Bluetooth: (null): Invalid header checksum [ 528.699908][ T7329] Bluetooth: (null): Invalid header checksum [ 528.818109][ T10] usb 6-1: USB disconnect, device number 36 [ 528.824312][ T7329] Bluetooth: (null): Invalid header checksum [ 528.934819][ T7329] Bluetooth: (null): Invalid header checksum [ 529.063987][ T50] Bluetooth: (null): Invalid header checksum [ 529.180611][ T50] Bluetooth: (null): Invalid header checksum [ 529.227874][ T5926] uclogic 0003:28BD:0071.0050: pen parameters not found [ 529.244354][ T5926] uclogic 0003:28BD:0071.0050: interface is invalid, ignoring [ 529.298816][ T7329] Bluetooth: (null): Invalid header checksum [ 529.416639][ T60] Bluetooth: (null): Invalid header checksum [ 529.484360][T13606] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2206'. [ 529.536155][ T36] Bluetooth: (null): Invalid header checksum [ 529.677002][ T60] Bluetooth: (null): Invalid header checksum [ 529.768883][ T60] Bluetooth: (null): Invalid header checksum [ 529.886336][ T60] Bluetooth: (null): Invalid header checksum [ 530.005028][ T60] Bluetooth: (null): Invalid header checksum [ 530.014416][ T5926] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 530.038013][T13616] netlink: 'syz.1.2209': attribute type 4 has an invalid length. [ 530.117473][T13618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.128354][ T60] Bluetooth: (null): Invalid header checksum [ 530.139531][T13618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.155861][T13621] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2210'. [ 530.222094][ T5926] usb 5-1: config index 0 descriptor too short (expected 1572, got 36) [ 530.230664][ T5926] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.241260][ T36] Bluetooth: (null): Invalid header checksum [ 530.258448][ T5926] usb 5-1: config 0 has no interfaces? [ 530.264726][ T5926] usb 5-1: New USB device found, idVendor=0504, idProduct=05d8, bcdDevice= 0.00 [ 530.274226][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.307965][ T5926] usb 5-1: config 0 descriptor?? [ 530.336710][T13624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.354370][T13624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.367735][ T60] Bluetooth: (null): Invalid header checksum [ 530.485313][ T36] Bluetooth: (null): Invalid header checksum [ 530.617048][ T60] Bluetooth: (null): Invalid header checksum [ 530.731611][ T36] Bluetooth: (null): Invalid header checksum [ 530.859980][ T50] Bluetooth: (null): Invalid header checksum [ 530.977303][ T60] Bluetooth: (null): Invalid header checksum [ 531.106106][ T7329] Bluetooth: (null): Invalid header checksum [ 531.201011][ T5971] usb 7-1: USB disconnect, device number 15 [ 531.223421][ T36] Bluetooth: (null): Invalid header checksum [ 531.340980][ T36] Bluetooth: (null): Invalid header checksum [ 531.458800][ T60] Bluetooth: (null): Invalid header checksum [ 531.576311][ T36] Bluetooth: (null): Invalid header checksum [ 531.693876][ T60] Bluetooth: (null): Invalid header checksum [ 531.822210][ T7329] Bluetooth: (null): Invalid header checksum [ 531.950784][ T36] Bluetooth: (null): Invalid header checksum [ 532.068174][ T7329] Bluetooth: (null): Invalid header checksum [ 532.185849][ T36] Bluetooth: (null): Invalid header checksum [ 532.303677][ T7329] Bluetooth: (null): Invalid header checksum [ 532.421331][ T60] Bluetooth: (null): Invalid header checksum [ 532.539055][ T60] Bluetooth: (null): Invalid header checksum [ 532.656872][ T7329] Bluetooth: (null): Invalid header checksum [ 532.774312][ T36] Bluetooth: (null): Invalid header checksum [ 532.891814][ T36] Bluetooth: (null): Invalid header checksum [ 532.995342][ T938] usb 5-1: USB disconnect, device number 103 [ 533.009823][ T36] Bluetooth: (null): Invalid header checksum [ 533.127576][ T60] Bluetooth: (null): Invalid header checksum [ 533.244917][ T7329] Bluetooth: (null): Invalid header checksum [ 533.362522][ T60] Bluetooth: (null): Invalid header checksum [ 533.480091][ T60] Bluetooth: (null): Invalid header checksum [ 533.598425][ T60] Bluetooth: (null): Invalid header checksum [ 533.715487][ T36] Bluetooth: (null): Invalid header checksum [ 533.835199][ T7329] Bluetooth: (null): Invalid header checksum [ 533.961401][ T36] Bluetooth: (null): Invalid header checksum [ 534.079053][ T36] Bluetooth: (null): Invalid header checksum [ 534.196879][ T60] Bluetooth: (null): Invalid header checksum [ 534.325264][ T36] Bluetooth: (null): Invalid header checksum [ 534.453839][ T36] Bluetooth: (null): Invalid header checksum [ 534.571103][ T7329] Bluetooth: (null): Invalid header checksum [ 534.688635][ T7329] Bluetooth: (null): Invalid header checksum [ 534.816962][ T7329] Bluetooth: (null): Invalid header checksum [ 534.946458][ T7329] Bluetooth: (null): Invalid header checksum [ 535.063989][ T7329] Bluetooth: (null): Invalid header checksum [ 535.181483][ T60] Bluetooth: (null): Invalid header checksum [ 535.300448][ T50] Bluetooth: (null): Invalid header checksum [ 535.415913][ T50] Bluetooth: (null): Invalid header checksum [ 535.533537][ T50] Bluetooth: (null): Invalid header checksum [ 535.651093][ T50] Bluetooth: (null): Invalid header checksum [ 535.768774][ T36] Bluetooth: (null): Invalid header checksum [ 535.886399][ T50] Bluetooth: (null): Invalid header checksum [ 536.004051][ T36] Bluetooth: (null): Invalid header checksum [ 536.121714][ T60] Bluetooth: (null): Invalid header checksum [ 536.252449][ T36] Bluetooth: (null): Invalid header checksum [ 536.357334][ T50] Bluetooth: (null): Invalid header checksum [ 536.474696][ T60] Bluetooth: (null): Invalid header checksum [ 536.592292][ T36] Bluetooth: (null): Invalid header checksum [ 536.709956][ T60] Bluetooth: (null): Invalid header checksum [ 536.827662][ T60] Bluetooth: (null): Invalid header checksum [ 536.945223][ T60] Bluetooth: (null): Invalid header checksum [ 537.062814][ T60] Bluetooth: (null): Invalid header checksum [ 537.180828][ T60] Bluetooth: (null): Invalid header checksum [ 537.298140][ T50] Bluetooth: (null): Invalid header checksum [ 537.416080][ T50] Bluetooth: (null): Invalid header checksum [ 537.533448][ T60] Bluetooth: (null): Invalid header checksum [ 537.651316][ T36] Bluetooth: (null): Invalid header checksum [ 537.768914][ T50] Bluetooth: (null): Invalid header checksum [ 537.886392][ T36] Bluetooth: (null): Invalid header checksum [ 538.004346][ T50] Bluetooth: (null): Invalid header checksum [ 538.122027][ T36] Bluetooth: (null): Invalid header checksum [ 538.239686][ T36] Bluetooth: (null): Invalid header checksum [ 538.357171][ T50] Bluetooth: (null): Invalid header checksum [ 538.474674][ T50] Bluetooth: (null): Invalid header checksum [ 538.592556][ T36] Bluetooth: (null): Invalid header checksum [ 538.710099][ T60] Bluetooth: (null): Invalid header checksum [ 538.827624][ T60] Bluetooth: (null): Invalid header checksum [ 538.945591][ T60] Bluetooth: (null): Invalid header checksum [ 539.063134][ T60] Bluetooth: (null): Invalid header checksum [ 539.191350][ T60] Bluetooth: (null): Invalid header checksum [ 539.309077][ T60] Bluetooth: (null): Invalid header checksum [ 539.427300][ T50] Bluetooth: (null): Invalid header checksum [ 539.554963][ T60] Bluetooth: (null): Invalid header checksum [ 539.672628][ T50] Bluetooth: (null): Invalid header checksum [ 539.790409][ T50] Bluetooth: (null): Invalid header checksum [ 539.907910][ T60] Bluetooth: (null): Invalid header checksum [ 540.025530][ T36] Bluetooth: (null): Invalid header checksum [ 540.143467][ T60] Bluetooth: (null): Invalid header checksum [ 540.261234][ T50] Bluetooth: (null): Invalid header checksum [ 540.378502][ T50] Bluetooth: (null): Invalid header checksum [ 540.496173][ T50] Bluetooth: (null): Invalid header checksum [ 540.613751][ T36] Bluetooth: (null): Invalid header checksum [ 540.731433][ T60] Bluetooth: (null): Invalid header checksum [ 540.849192][ T50] Bluetooth: (null): Invalid header checksum [ 540.966891][ T60] Bluetooth: (null): Invalid header checksum [ 541.084679][ T60] Bluetooth: (null): Invalid header checksum [ 541.202199][ T36] Bluetooth: (null): Invalid header checksum [ 541.319822][ T60] Bluetooth: (null): Invalid header checksum [ 541.437201][ T36] Bluetooth: (null): Invalid header checksum [ 541.554940][ T60] Bluetooth: (null): Invalid header checksum [ 541.683414][ T60] Bluetooth: (null): Invalid header checksum [ 541.802230][ T36] Bluetooth: (null): Invalid header checksum [ 541.918524][ T50] Bluetooth: (null): Invalid header checksum [ 542.036235][ T50] Bluetooth: (null): Invalid header checksum [ 542.153777][ T36] Bluetooth: (null): Invalid header checksum [ 542.271478][ T50] Bluetooth: (null): Invalid header checksum [ 542.389034][ T50] Bluetooth: (null): Invalid header checksum [ 542.506971][ T36] Bluetooth: (null): Invalid header checksum [ 542.624355][ T50] Bluetooth: (null): Invalid header checksum [ 542.742317][ T50] Bluetooth: (null): Invalid header checksum [ 542.859640][ T50] Bluetooth: (null): Invalid header checksum [ 542.977374][ T50] Bluetooth: (null): Invalid header checksum [ 543.094973][ T60] Bluetooth: (null): Invalid header checksum [ 543.212520][ T60] Bluetooth: (null): Invalid header checksum [ 543.330288][ T36] Bluetooth: (null): Invalid header checksum [ 543.447877][ T50] Bluetooth: (null): Invalid header checksum [ 543.565977][ T60] Bluetooth: (null): Invalid header checksum [ 543.683338][ T60] Bluetooth: (null): Invalid header checksum [ 543.800931][ T50] Bluetooth: (null): Invalid header checksum [ 543.929195][ T36] Bluetooth: (null): Invalid header checksum [ 544.046764][ T50] Bluetooth: (null): Invalid header checksum [ 544.164560][ T36] Bluetooth: (null): Invalid header checksum [ 544.284003][ T50] Bluetooth: (null): Invalid header checksum [ 544.399697][ T50] Bluetooth: (null): Invalid header checksum [ 544.517390][ T50] Bluetooth: (null): Invalid header checksum [ 544.635027][ T60] Bluetooth: (null): Invalid header checksum [ 544.763396][ T36] Bluetooth: (null): Invalid header checksum [ 544.881575][ T60] Bluetooth: (null): Invalid header checksum [ 544.998646][ T60] Bluetooth: (null): Invalid header checksum [ 545.116402][ T60] Bluetooth: (null): Invalid header checksum [ 545.234006][ T60] Bluetooth: (null): Invalid header checksum [ 545.351623][ T50] Bluetooth: (null): Invalid header checksum [ 545.469896][ T50] Bluetooth: (null): Invalid header checksum [ 545.587040][ T60] Bluetooth: (null): Invalid header checksum [ 545.705249][ T36] Bluetooth: (null): Invalid header checksum [ 545.822477][ T36] Bluetooth: (null): Invalid header checksum [ 545.940459][ T36] Bluetooth: (null): Invalid header checksum [ 546.058422][ T36] Bluetooth: (null): Invalid header checksum [ 546.175665][ T36] Bluetooth: (null): Invalid header checksum [ 546.293380][ T36] Bluetooth: (null): Invalid header checksum [ 546.411666][ T36] Bluetooth: (null): Invalid header checksum [ 546.528832][ T50] Bluetooth: (null): Invalid header checksum [ 546.646738][ T50] Bluetooth: (null): Invalid header checksum [ 546.763991][ T60] Bluetooth: (null): Invalid header checksum [ 546.892795][ T50] Bluetooth: (null): Invalid header checksum [ 547.021591][ T60] Bluetooth: (null): Invalid header checksum [ 547.138940][ T60] Bluetooth: (null): Invalid header checksum [ 547.256570][ T50] Bluetooth: (null): Invalid header checksum [ 547.374372][ T36] Bluetooth: (null): Invalid header checksum [ 547.492044][ T36] Bluetooth: (null): Invalid header checksum [ 547.609751][ T50] Bluetooth: (null): Invalid header checksum [ 547.727463][ T50] Bluetooth: (null): Invalid header checksum [ 547.845126][ T36] Bluetooth: (null): Invalid header checksum [ 547.962538][ T36] Bluetooth: (null): Invalid header checksum [ 548.079902][ T60] Bluetooth: (null): Invalid header checksum [ 548.197521][ T60] Bluetooth: (null): Invalid header checksum [ 548.314879][ T60] Bluetooth: (null): Invalid header checksum [ 548.432696][ T60] Bluetooth: (null): Invalid header checksum [ 548.550432][ T50] Bluetooth: (null): Invalid header checksum [ 548.667376][ T50] Bluetooth: (null): Invalid header checksum [ 548.785536][ T60] Bluetooth: (null): Invalid header checksum [ 548.903232][ T50] Bluetooth: (null): Invalid header checksum [ 549.020796][ T50] Bluetooth: (null): Invalid header checksum [ 549.138389][ T50] Bluetooth: (null): Invalid header checksum [ 549.256079][ T60] Bluetooth: (null): Invalid header checksum [ 549.383842][ T60] Bluetooth: (null): Invalid header checksum [ 549.503981][ T36] Bluetooth: (null): Invalid header checksum [ 549.630476][ T50] Bluetooth: (null): Invalid header checksum [ 549.747520][ T60] Bluetooth: (null): Invalid header checksum [ 549.865183][ T50] Bluetooth: (null): Invalid header checksum [ 549.982733][ T60] Bluetooth: (null): Invalid header checksum [ 550.100513][ T36] Bluetooth: (null): Invalid header checksum [ 550.217919][ T36] Bluetooth: (null): Invalid header checksum [ 550.335598][ T36] Bluetooth: (null): Invalid header checksum [ 550.453243][ T50] Bluetooth: (null): Invalid header checksum [ 550.570827][ T36] Bluetooth: (null): Invalid header checksum [ 550.688553][ T50] Bluetooth: (null): Invalid header checksum [ 550.806166][ T50] Bluetooth: (null): Invalid header checksum [ 550.923769][ T60] Bluetooth: (null): Invalid header checksum [ 551.047010][ T50] Bluetooth: (null): Invalid header checksum [ 551.159226][ T7329] Bluetooth: (null): Invalid header checksum [ 551.276875][ T36] Bluetooth: (null): Invalid header checksum [ 551.394485][ T36] Bluetooth: (null): Invalid header checksum [ 551.481311][ T10] usb 2-1: USB disconnect, device number 36 [ 551.513654][ T7329] Bluetooth: (null): Invalid header checksum [ 551.633349][ T7329] Bluetooth: (null): Invalid header checksum [ 551.694264][ T5926] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 551.748384][ T36] Bluetooth: (null): Invalid header checksum [ 551.809456][ T5869] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 551.828484][ T5869] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 551.840558][ T5869] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 551.849359][ T5869] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 551.860223][ T5869] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 551.867815][ T60] Bluetooth: (null): Invalid header checksum [ 551.879510][ T5926] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 551.899259][ T5926] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.929269][ T5926] usb 7-1: config 0 descriptor?? [ 551.950233][ T30] audit: type=1326 audit(1758812128.151:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13669 comm="syz.5.2223" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c5338eec9 code=0x0 [ 551.985510][ T7329] Bluetooth: (null): Invalid header checksum [ 551.995272][T13665] vxcan1 speed is unknown, defaulting to 1000 [ 552.078728][ T43] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 552.101165][ T60] Bluetooth: (null): Invalid header checksum [ 552.228738][ T7329] Bluetooth: (null): Invalid header checksum [ 552.252596][ T43] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 552.275364][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 552.303198][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 552.325304][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 552.338830][ T7329] Bluetooth: (null): Invalid header checksum [ 552.356643][ T43] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 552.380796][ T5926] ath6kl: Failed to submit usb control message: -71 [ 552.387492][ T5926] ath6kl: unable to send the bmi data to the device: -71 [ 552.397111][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.406425][ T5926] ath6kl: Unable to send get target info: -71 [ 552.426639][ T5926] ath6kl: Failed to init ath6kl core: -71 [ 552.434018][ T43] usb 5-1: config 0 descriptor?? [ 552.451242][ T5926] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 552.464406][ T60] Bluetooth: (null): Invalid header checksum [ 552.498848][ T5926] usb 7-1: USB disconnect, device number 16 [ 552.572836][ T60] Bluetooth: (null): Invalid header checksum [ 552.688684][ T60] Bluetooth: (null): Invalid header checksum [ 552.806685][ T60] Bluetooth: (null): Invalid header checksum [ 552.886454][ T43] plantronics 0003:047F:FFFF.0051: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 552.925492][ T7329] Bluetooth: (null): Invalid header checksum [ 553.041564][ T7329] Bluetooth: (null): Invalid header checksum [ 553.159375][ T36] Bluetooth: (null): Invalid header checksum [ 553.235004][ T5971] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 553.265061][T13665] chnl_net:caif_netlink_parms(): no params data found [ 553.276882][ T7329] Bluetooth: (null): Invalid header checksum [ 553.392160][T13665] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.394627][ T60] Bluetooth: (null): Invalid header checksum [ 553.400038][T13665] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.412751][ T5971] usb 6-1: Using ep0 maxpacket: 16 [ 553.419855][T13665] bridge_slave_0: entered allmulticast mode [ 553.427699][ T5971] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 553.436524][ T5971] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.449132][T13665] bridge_slave_0: entered promiscuous mode [ 553.457017][ T5971] usb 6-1: config 0 has no interface number 0 [ 553.466002][T13665] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.474421][T13665] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.485220][T13714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.494773][ T5971] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 553.505513][ T5971] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.513895][ T60] Bluetooth: (null): Invalid header checksum [ 553.514089][T13665] bridge_slave_1: entered allmulticast mode [ 553.526481][ T5971] usb 6-1: Product: syz [ 553.531071][ T5971] usb 6-1: Manufacturer: syz [ 553.537713][T13665] bridge_slave_1: entered promiscuous mode [ 553.543883][ T5971] usb 6-1: SerialNumber: syz [ 553.551707][T13712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.557844][T13714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.560964][T13712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.588704][ T5971] usb 6-1: config 0 descriptor?? [ 553.626343][T13665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.630448][ T7329] Bluetooth: (null): Invalid header checksum [ 553.646464][T13665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.700181][T13665] team0: Port device team_slave_0 added [ 553.709354][T13665] team0: Port device team_slave_1 added [ 553.736363][ T5926] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 553.747822][ T7329] Bluetooth: (null): Invalid header checksum [ 553.757539][ T5905] usb 5-1: USB disconnect, device number 104 [ 553.775376][T13665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.789175][T13665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.826833][T13665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.840782][ T5971] uvcvideo 6-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 553.845990][T13665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.857167][T13665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.860618][ T5971] uvcvideo 6-1:0.105: No valid video chain found. [ 553.884838][T13665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.892430][ T50] Bluetooth: (null): Invalid header checksum [ 553.912384][ T5971] usb 6-1: USB disconnect, device number 37 [ 553.918201][ T5926] usb 7-1: Using ep0 maxpacket: 16 [ 553.929289][ T5926] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.947104][ T5926] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.959636][ T5926] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 553.974834][ T5926] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 553.987023][ T5926] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.995644][ T36] Bluetooth: (null): Invalid header checksum [ 554.010381][T13665] hsr_slave_0: entered promiscuous mode [ 554.017225][ T5926] usb 7-1: config 0 descriptor?? [ 554.018986][T13665] hsr_slave_1: entered promiscuous mode [ 554.030329][T13665] debugfs: 'hsr0' already exists in 'hsr' [ 554.036299][ T5869] Bluetooth: hci1: command tx timeout [ 554.036711][T13665] Cannot create hsr debugfs directory [ 554.111019][ T7329] Bluetooth: (null): Invalid header checksum [ 554.228749][ T36] Bluetooth: (null): Invalid header checksum [ 554.242547][T13665] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.249878][ T5926] usbhid 7-1:0.0: can't add hid device: -71 [ 554.260531][ T5926] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 554.277942][ T5926] usb 7-1: USB disconnect, device number 17 [ 554.325951][T13665] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.347410][ T36] Bluetooth: (null): Invalid header checksum [ 554.434122][T13665] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.470365][ T7329] Bluetooth: (null): Invalid header checksum [ 554.510493][T13665] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.582557][ T7329] Bluetooth: (null): Invalid header checksum [ 554.677470][T13665] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 554.688455][T13665] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 554.698986][T13665] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 554.700508][ T7329] Bluetooth: (null): Invalid header checksum [ 554.717129][T13665] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 554.784562][ T10] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 554.804305][T13665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.818569][ T36] Bluetooth: (null): Invalid header checksum [ 554.845172][T13665] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.866179][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.873471][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.887497][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.894756][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.903403][T13733] netlink: 1010 bytes leftover after parsing attributes in process `syz.6.2240'. [ 554.912600][T13733] bridge: RTM_NEWNEIGH with invalid state 0x1d25 [ 554.936564][ T7329] Bluetooth: (null): Invalid header checksum [ 554.966819][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 554.983947][ T10] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 555.014807][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.030447][ T10] usb 5-1: Product: syz [ 555.034684][ T10] usb 5-1: Manufacturer: syz [ 555.039548][ T10] usb 5-1: SerialNumber: syz [ 555.057541][ T7329] Bluetooth: (null): Invalid header checksum [ 555.173552][ T50] Bluetooth: (null): Invalid header checksum [ 555.273052][T13725] netlink: 'syz.4.2239': attribute type 63 has an invalid length. [ 555.287631][T13725] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2239'. [ 555.302358][ T36] Bluetooth: (null): Invalid header checksum [ 555.311645][ T10] mxuport 5-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 555.331947][T13665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 555.339297][ T10] mxuport 5-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 555.358228][ T10] mxuport 5-1:254.0: probe with driver mxuport failed with error -71 [ 555.388165][ T10] usb 5-1: USB disconnect, device number 105 [ 555.419859][ T60] Bluetooth: (null): Invalid header checksum [ 555.439997][T13665] veth0_vlan: entered promiscuous mode [ 555.455140][T13749] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 555.460707][T13665] veth1_vlan: entered promiscuous mode [ 555.512166][ T5926] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 555.516503][T13665] veth0_macvtap: entered promiscuous mode [ 555.536569][ T1005] Bluetooth: (null): Invalid header checksum [ 555.544831][T13665] veth1_macvtap: entered promiscuous mode [ 555.573548][T13665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.595518][T13665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.616993][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.628348][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.642547][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.653073][T13110] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.653919][ T60] Bluetooth: (null): Invalid header checksum [ 555.704788][ T5926] usb 7-1: Using ep0 maxpacket: 32 [ 555.714567][ T5926] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 555.727328][ T5926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.738168][ T5926] usb 7-1: Product: syz [ 555.742403][ T5926] usb 7-1: Manufacturer: syz [ 555.762410][ T5926] usb 7-1: SerialNumber: syz [ 555.773614][ T5926] usb 7-1: config 0 descriptor?? [ 555.784367][T13110] Bluetooth: (null): Invalid header checksum [ 555.812292][T13110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.820196][T13110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.863827][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.873372][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.901017][ T36] Bluetooth: (null): Invalid header checksum [ 555.996973][T13759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 556.019479][ T60] Bluetooth: (null): Invalid header checksum [ 556.021380][T13759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 556.066935][T13761] [ 556.069351][T13761] ====================================================== [ 556.076379][T13761] WARNING: possible circular locking dependency detected [ 556.083414][T13761] syzkaller #0 Not tainted [ 556.087844][T13761] ------------------------------------------------------ [ 556.094866][T13761] syz.4.2249/13761 is trying to acquire lock: [ 556.100933][T13761] ffffffff8e645220 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x153/0x610 [ 556.110098][T13761] [ 556.110098][T13761] but task is already holding lock: [ 556.117503][T13761] ffff88802dbd8f18 (sk_lock-AF_INET){+.+.}-{0:0}, at: do_ip_getsockopt+0x10b6/0x1b60 [ 556.127048][T13761] [ 556.127048][T13761] which lock already depends on the new lock. [ 556.127048][T13761] [ 556.137466][T13761] [ 556.137466][T13761] the existing dependency chain (in reverse order) is: [ 556.146504][T13761] [ 556.146504][T13761] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 556.154182][T13761] lock_acquire+0x120/0x360 [ 556.159230][T13761] lock_sock_nested+0x48/0x100 [ 556.164533][T13761] inet_shutdown+0x6a/0x390 [ 556.169746][T13761] nbd_mark_nsock_dead+0x2e9/0x560 [ 556.175400][T13761] sock_shutdown+0x15e/0x260 [ 556.180537][T13761] nbd_config_put+0x342/0x790 [ 556.185767][T13761] nbd_release+0xfe/0x140 [ 556.190642][T13761] bdev_release+0x536/0x650 [ 556.195684][T13761] blkdev_release+0x15/0x20 [ 556.200721][T13761] __fput+0x44c/0xa70 [ 556.205236][T13761] task_work_run+0x1d4/0x260 [ 556.210378][T13761] exit_to_user_mode_loop+0xe9/0x130 [ 556.216363][T13761] do_syscall_64+0x2bd/0xfa0 [ 556.221481][T13761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.228178][T13761] [ 556.228178][T13761] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 556.236021][T13761] lock_acquire+0x120/0x360 [ 556.241063][T13761] __mutex_lock+0x187/0x1350 [ 556.246220][T13761] nbd_queue_rq+0x257/0xf10 [ 556.251271][T13761] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 556.257363][T13761] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 556.264230][T13761] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 556.270787][T13761] blk_mq_run_hw_queue+0x348/0x4f0 [ 556.276471][T13761] blk_mq_dispatch_list+0xd0c/0xe00 [ 556.282226][T13761] blk_mq_flush_plug_list+0x469/0x550 [ 556.288135][T13761] __blk_flush_plug+0x3d3/0x4b0 [ 556.293550][T13761] __submit_bio+0x2d3/0x5a0 [ 556.298672][T13761] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 556.304839][T13761] block_read_full_folio+0x599/0x830 [ 556.310684][T13761] filemap_read_folio+0x117/0x380 [ 556.316251][T13761] do_read_cache_folio+0x350/0x590 [ 556.321894][T13761] read_part_sector+0xb6/0x2b0 [ 556.327194][T13761] adfspart_check_ICS+0xa4/0xa50 [ 556.332674][T13761] bdev_disk_changed+0x75f/0x14b0 [ 556.338243][T13761] blkdev_get_whole+0x380/0x510 [ 556.343691][T13761] bdev_open+0x31e/0xd30 [ 556.348474][T13761] blkdev_open+0x457/0x600 [ 556.353428][T13761] do_dentry_open+0x953/0x13f0 [ 556.358721][T13761] vfs_open+0x3b/0x340 [ 556.363345][T13761] path_openat+0x2ee5/0x3830 [ 556.368634][T13761] do_filp_open+0x1fa/0x410 [ 556.373729][T13761] do_sys_openat2+0x121/0x1c0 [ 556.378941][T13761] __x64_sys_openat+0x138/0x170 [ 556.384414][T13761] do_syscall_64+0xfa/0xfa0 [ 556.389447][T13761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.395926][T13761] [ 556.395926][T13761] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 556.403419][T13761] lock_acquire+0x120/0x360 [ 556.408452][T13761] __mutex_lock+0x187/0x1350 [ 556.413585][T13761] nbd_queue_rq+0xc8/0xf10 [ 556.418538][T13761] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 556.424615][T13761] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 556.431485][T13761] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 556.438008][T13761] blk_mq_run_hw_queue+0x348/0x4f0 [ 556.443652][T13761] blk_mq_dispatch_list+0xd0c/0xe00 [ 556.449426][T13761] blk_mq_flush_plug_list+0x469/0x550 [ 556.455330][T13761] __blk_flush_plug+0x3d3/0x4b0 [ 556.460712][T13761] __submit_bio+0x2d3/0x5a0 [ 556.466270][T13761] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 556.472435][T13761] block_read_full_folio+0x599/0x830 [ 556.478260][T13761] filemap_read_folio+0x117/0x380 [ 556.483814][T13761] do_read_cache_folio+0x350/0x590 [ 556.489466][T13761] read_part_sector+0xb6/0x2b0 [ 556.494783][T13761] adfspart_check_ICS+0xa4/0xa50 [ 556.500267][T13761] bdev_disk_changed+0x75f/0x14b0 [ 556.505824][T13761] blkdev_get_whole+0x380/0x510 [ 556.511200][T13761] bdev_open+0x31e/0xd30 [ 556.515971][T13761] blkdev_open+0x457/0x600 [ 556.520924][T13761] do_dentry_open+0x953/0x13f0 [ 556.526232][T13761] vfs_open+0x3b/0x340 [ 556.530841][T13761] path_openat+0x2ee5/0x3830 [ 556.535962][T13761] do_filp_open+0x1fa/0x410 [ 556.541022][T13761] do_sys_openat2+0x121/0x1c0 [ 556.546241][T13761] __x64_sys_openat+0x138/0x170 [ 556.551629][T13761] do_syscall_64+0xfa/0xfa0 [ 556.556665][T13761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.563165][T13761] [ 556.563165][T13761] -> #3 (set->srcu){.+.+}-{0:0}: [ 556.570403][T13761] lock_sync+0xba/0x160 [ 556.575119][T13761] __synchronize_srcu+0x96/0x3a0 [ 556.580590][T13761] elevator_switch+0x12b/0x640 [ 556.585886][T13761] elevator_change+0x315/0x4c0 [ 556.591534][T13761] elevator_set_default+0x186/0x260 [ 556.597268][T13761] blk_register_queue+0x34e/0x3f0 [ 556.602827][T13761] __add_disk+0x677/0xd50 [ 556.607690][T13761] add_disk_fwnode+0xfc/0x480 [ 556.612900][T13761] nbd_dev_add+0x717/0xae0 [ 556.617854][T13761] nbd_init+0x168/0x1f0 [ 556.622541][T13761] do_one_initcall+0x236/0x820 [ 556.627834][T13761] do_initcall_level+0x104/0x190 [ 556.633310][T13761] do_initcalls+0x59/0xa0 [ 556.638170][T13761] kernel_init_freeable+0x334/0x4b0 [ 556.643906][T13761] kernel_init+0x1d/0x1d0 [ 556.648795][T13761] ret_from_fork+0x4bc/0x870 [ 556.653918][T13761] ret_from_fork_asm+0x1a/0x30 [ 556.659216][T13761] [ 556.659216][T13761] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 556.667054][T13761] lock_acquire+0x120/0x360 [ 556.672106][T13761] __mutex_lock+0x187/0x1350 [ 556.677226][T13761] elevator_change+0x1e5/0x4c0 [ 556.682525][T13761] elevator_set_none+0x42/0xb0 [ 556.687910][T13761] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 556.694276][T13761] nbd_start_device+0x17f/0xb10 [ 556.699660][T13761] nbd_genl_connect+0x135b/0x18f0 [ 556.705227][T13761] genl_family_rcv_msg_doit+0x215/0x300 [ 556.711307][T13761] genl_rcv_msg+0x60e/0x790 [ 556.716341][T13761] netlink_rcv_skb+0x208/0x470 [ 556.721624][T13761] genl_rcv+0x28/0x40 [ 556.726137][T13761] netlink_unicast+0x82f/0x9e0 [ 556.731431][T13761] netlink_sendmsg+0x805/0xb30 [ 556.736717][T13761] __sock_sendmsg+0x21c/0x270 [ 556.741932][T13761] ____sys_sendmsg+0x505/0x830 [ 556.747225][T13761] ___sys_sendmsg+0x21f/0x2a0 [ 556.752428][T13761] __x64_sys_sendmsg+0x19b/0x260 [ 556.757890][T13761] do_syscall_64+0xfa/0xfa0 [ 556.762933][T13761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.769362][T13761] [ 556.769362][T13761] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 556.777990][T13761] lock_acquire+0x120/0x360 [ 556.783459][T13761] blk_alloc_queue+0x538/0x620 [ 556.788849][T13761] __blk_mq_alloc_disk+0x15c/0x340 [ 556.794496][T13761] nbd_dev_add+0x46c/0xae0 [ 556.799444][T13761] nbd_init+0x168/0x1f0 [ 556.804126][T13761] do_one_initcall+0x236/0x820 [ 556.809414][T13761] do_initcall_level+0x104/0x190 [ 556.814892][T13761] do_initcalls+0x59/0xa0 [ 556.819762][T13761] kernel_init_freeable+0x334/0x4b0 [ 556.825530][T13761] kernel_init+0x1d/0x1d0 [ 556.830391][T13761] ret_from_fork+0x4bc/0x870 [ 556.835548][T13761] ret_from_fork_asm+0x1a/0x30 [ 556.840838][T13761] [ 556.840838][T13761] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 556.848083][T13761] validate_chain+0xb9b/0x2140 [ 556.853379][T13761] __lock_acquire+0xab9/0xd20 [ 556.858585][T13761] lock_acquire+0x120/0x360 [ 556.863619][T13761] fs_reclaim_acquire+0x72/0x100 [ 556.869095][T13761] prepare_alloc_pages+0x153/0x610 [ 556.874753][T13761] __alloc_frozen_pages_noprof+0x123/0x370 [ 556.881262][T13761] alloc_pages_mpol+0x232/0x4a0 [ 556.886638][T13761] alloc_pages_noprof+0xa9/0x190 [ 556.892099][T13761] pte_alloc_one+0x23/0x310 [ 556.897150][T13761] __handle_mm_fault+0x2767/0x5400 [ 556.902796][T13761] handle_mm_fault+0x40a/0x8e0 [ 556.908092][T13761] do_user_addr_fault+0x764/0x1380 [ 556.913729][T13761] exc_page_fault+0x82/0x100 [ 556.918867][T13761] asm_exc_page_fault+0x26/0x30 [ 556.924421][T13761] rep_movs_alternative+0x30/0x90 [ 556.929985][T13761] _copy_from_user+0x7a/0xb0 [ 556.935109][T13761] copy_from_sockptr+0x5e/0xa0 [ 556.940405][T13761] do_ip_getsockopt+0x1340/0x1b60 [ 556.945966][T13761] ip_getsockopt+0xbb/0x220 [ 556.951004][T13761] do_sock_getsockopt+0x372/0x450 [ 556.956551][T13761] __x64_sys_getsockopt+0x1a5/0x250 [ 556.962276][T13761] do_syscall_64+0xfa/0xfa0 [ 556.967304][T13761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.973814][T13761] [ 556.973814][T13761] other info that might help us debug this: [ 556.973814][T13761] [ 556.984058][T13761] Chain exists of: [ 556.984058][T13761] fs_reclaim --> &nsock->tx_lock --> sk_lock-AF_INET [ 556.984058][T13761] [ 556.996676][T13761] Possible unsafe locking scenario: [ 556.996676][T13761] [ 557.004133][T13761] CPU0 CPU1 [ 557.009502][T13761] ---- ---- [ 557.014870][T13761] lock(sk_lock-AF_INET); [ 557.019308][T13761] lock(&nsock->tx_lock); [ 557.026312][T13761] lock(sk_lock-AF_INET); [ 557.033265][T13761] lock(fs_reclaim); [ 557.037264][T13761] [ 557.037264][T13761] *** DEADLOCK *** [ 557.037264][T13761] [ 557.045427][T13761] 3 locks held by syz.4.2249/13761: [ 557.050652][T13761] #0: ffffffff8f9523c8 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_getsockopt+0xcb8/0x1b60 [ 557.060173][T13761] #1: ffff88802dbd8f18 (sk_lock-AF_INET){+.+.}-{0:0}, at: do_ip_getsockopt+0x10b6/0x1b60 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 557.070130][T13761] #2: ffff8880312ecd20 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x32/0x300 [ 557.080171][T13761] [ 557.080171][T13761] stack backtrace: [ 557.086077][T13761] CPU: 1 UID: 0 PID: 13761 Comm: syz.4.2249 Not tainted syzkaller #0 PREEMPT(full) [ 557.086106][T13761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 557.086122][T13761] Call Trace: [ 557.086129][T13761] [ 557.086136][T13761] dump_stack_lvl+0x189/0x250 [ 557.086168][T13761] ? __pfx_dump_stack_lvl+0x10/0x10 [ 557.086195][T13761] ? __pfx__printk+0x10/0x10 [ 557.086219][T13761] ? print_lock_name+0xde/0x100 [ 557.086245][T13761] print_circular_bug+0x2ee/0x310 [ 557.086271][T13761] check_noncircular+0x134/0x160 [ 557.086299][T13761] validate_chain+0xb9b/0x2140 [ 557.086332][T13761] __lock_acquire+0xab9/0xd20 [ 557.086355][T13761] ? prepare_alloc_pages+0x153/0x610 [ 557.086373][T13761] lock_acquire+0x120/0x360 [ 557.086392][T13761] ? prepare_alloc_pages+0x153/0x610 [ 557.086415][T13761] fs_reclaim_acquire+0x72/0x100 [ 557.086431][T13761] ? prepare_alloc_pages+0x153/0x610 [ 557.086448][T13761] prepare_alloc_pages+0x153/0x610 [ 557.086468][T13761] __alloc_frozen_pages_noprof+0x123/0x370 [ 557.086489][T13761] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 557.086509][T13761] ? __pfx___calc_delta+0x10/0x10 [ 557.086527][T13761] ? policy_nodemask+0x27c/0x720 [ 557.086547][T13761] alloc_pages_mpol+0x232/0x4a0 [ 557.086566][T13761] alloc_pages_noprof+0xa9/0x190 [ 557.086584][T13761] pte_alloc_one+0x23/0x310 [ 557.086608][T13761] ? __handle_mm_fault+0x1d74/0x5400 [ 557.086633][T13761] __handle_mm_fault+0x2767/0x5400 [ 557.086670][T13761] ? __pfx___handle_mm_fault+0x10/0x10 [ 557.086702][T13761] ? find_vma+0xe7/0x160 [ 557.086726][T13761] ? __pfx_find_vma+0x10/0x10 [ 557.086751][T13761] handle_mm_fault+0x40a/0x8e0 [ 557.086778][T13761] do_user_addr_fault+0x764/0x1380 [ 557.086806][T13761] exc_page_fault+0x82/0x100 [ 557.086823][T13761] ? __might_fault+0xb0/0x130 [ 557.086848][T13761] asm_exc_page_fault+0x26/0x30 [ 557.086865][T13761] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 557.086889][T13761] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 557.086907][T13761] RSP: 0018:ffffc9000b137970 EFLAGS: 00050212 [ 557.086923][T13761] RAX: 00007ffffffff001 RBX: 0000000000000010 RCX: 0000000000000010 [ 557.086936][T13761] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffc9000b137bc0 [ 557.086949][T13761] RBP: 0000000000000000 R08: ffffc9000b137bcf R09: 1ffff92001626f79 [ 557.086962][T13761] R10: dffffc0000000000 R11: fffff52001626f7a R12: 0000000000000000 [ 557.086975][T13761] R13: 0000200000000000 R14: ffffc9000b137bc0 R15: 0000200000000000 [ 557.086996][T13761] _copy_from_user+0x7a/0xb0 [ 557.087019][T13761] copy_from_sockptr+0x5e/0xa0 [ 557.087046][T13761] do_ip_getsockopt+0x1340/0x1b60 [ 557.087076][T13761] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 557.087102][T13761] ? aa_label_sk_perm+0x4cd/0x630 [ 557.087123][T13761] ? __pfx___futex_wait+0x10/0x10 [ 557.087144][T13761] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 557.087167][T13761] ? futex_private_hash_put+0x4b/0x280 [ 557.087197][T13761] ? __lock_acquire+0xab9/0xd20 [ 557.087221][T13761] ip_getsockopt+0xbb/0x220 [ 557.087251][T13761] ? __pfx_ip_getsockopt+0x10/0x10 [ 557.087278][T13761] ? sock_common_getsockopt+0x2d/0xb0 [ 557.087304][T13761] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 557.087330][T13761] do_sock_getsockopt+0x372/0x450 [ 557.087350][T13761] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 557.087369][T13761] ? do_syscall_64+0xa0/0xfa0 [ 557.087386][T13761] ? __fget_files+0x2a/0x420 [ 557.087407][T13761] ? __fget_files+0x3a0/0x420 [ 557.087427][T13761] ? __fget_files+0x2a/0x420 [ 557.087450][T13761] __x64_sys_getsockopt+0x1a5/0x250 [ 557.087486][T13761] ? do_syscall_64+0xa0/0xfa0 [ 557.087503][T13761] ? do_syscall_64+0xa0/0xfa0 [ 557.087521][T13761] do_syscall_64+0xfa/0xfa0 [ 557.087537][T13761] ? lockdep_hardirqs_on+0x9c/0x150 [ 557.087553][T13761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.087570][T13761] ? clear_bhb_loop+0x60/0xb0 [ 557.087592][T13761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.087608][T13761] RIP: 0033:0x7fb51f98eec9 [ 557.087624][T13761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.087639][T13761] RSP: 002b:00007fb51dbee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 557.087660][T13761] RAX: ffffffffffffffda RBX: 00007fb51fbe5fa0 RCX: 00007fb51f98eec9 [ 557.087673][T13761] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 000000000000000f [ 557.087683][T13761] RBP: 00007fb51fa11f91 R08: 0000200000695ffc R09: 0000000000000000 [ 557.087695][T13761] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.087707][T13761] R13: 00007fb51fbe6038 R14: 00007fb51fbe5fa0 R15: 00007ffd4bf0a698 [ 557.087726][T13761] [ 557.561959][ T5869] Bluetooth: hci1: command tx timeout [ 557.569070][ T3545] Bluetooth: (null): Invalid header checksum [ 557.577225][ T5926] peak_usb 7-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 557.586239][ T5926] peak_usb 7-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 557.685410][ T5926] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -71 [ 557.697485][ T5926] usb 7-1: USB disconnect, device number 18 [ 557.716560][ T36] Bluetooth: (null): Invalid header checksum [ 560.256753][ T3545] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.767673][ T3545] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.822495][ T3545] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.875235][ T3545] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.954708][ T3545] bridge_slave_1: left allmulticast mode [ 560.960541][ T3545] bridge_slave_1: left promiscuous mode [ 560.966817][ T3545] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.975918][ T3545] bridge_slave_0: left allmulticast mode [ 560.983780][ T3545] bridge_slave_0: left promiscuous mode [ 560.990449][ T3545] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.131277][ T3545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.143767][ T3545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.154386][ T3545] bond0 (unregistering): Released all slaves [ 561.519058][ T3545] hsr_slave_0: left promiscuous mode [ 561.540270][ T3545] hsr_slave_1: left promiscuous mode [ 561.546512][ T3545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.553978][ T3545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.562263][ T3545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.572622][ T3545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.585048][ T3545] veth1_macvtap: left promiscuous mode [ 561.590746][ T3545] veth0_macvtap: left promiscuous mode [ 561.596405][ T3545] veth1_vlan: left promiscuous mode [ 561.602728][ T3545] veth0_vlan: left promiscuous mode [ 561.836501][ T3545] team0 (unregistering): Port device team_slave_1 removed [ 561.870696][ T3545] team0 (unregistering): Port device team_slave_0 removed