last executing test programs: 9m32.100619811s ago: executing program 32 (id=675): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept4(r0, &(0x7f00000000c0)=@tipc=@name, 0x0, 0x1800) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x1}, 0x6) write(r0, &(0x7f0000000000)="05000000", 0x4) 7m40.846283917s ago: executing program 33 (id=1811): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)={0x84, &(0x7f0000000900)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)={0x20, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 7m26.253094686s ago: executing program 34 (id=1915): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="67460f21a0660f3838f5440f78b10010000048b8f1ffffffffffffff4992b0d0d1d0d1f80f23f866460f3834a1ed000000c744240202560000c7442406000000000f011c24b9270b00000f32c4e1c575ad0f00000043e12a66f3400f0966baf80cb87c07f98bef66bafc0c640f1f00ef", 0x70}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m26.030766594s ago: executing program 35 (id=1917): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336be", 0x95}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x3}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x128, 0x29, 0x4, {0x4, 0x21, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x1b0, 0x29, 0x36, {0x5e, 0x32, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xc6, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x388}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7m17.222317213s ago: executing program 5 (id=1931): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 7m14.082539186s ago: executing program 5 (id=1946): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES16, @ANYRES16=r1], 0x1000f) 7m13.946938479s ago: executing program 5 (id=1948): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x2]}}) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000000)='./bus\x00', &(0x7f0000000140)='btrfs\x00', 0x1800082, 0x0) 7m13.696615971s ago: executing program 5 (id=1949): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a0000008d0000006c07010033d43afffe800000000000000000000000000010ff0200"], 0x340a) 7m13.502683992s ago: executing program 5 (id=1951): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2145c99, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 7m13.425787698s ago: executing program 5 (id=1952): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @loopback, 0x3}, r1}}, 0x30) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000240)=0x81, r1, 0x0, 0x2, 0x4}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000500)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @loopback, 0x5}, r3}}, 0x30) 7m13.044237735s ago: executing program 36 (id=1905): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf253800000008000300", @ANYRES32=r3, @ANYBLOB='\f\x00X\x00@'], 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 6m58.148310312s ago: executing program 37 (id=1952): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @loopback, 0x3}, r1}}, 0x30) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000240)=0x81, r1, 0x0, 0x2, 0x4}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000500)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @loopback, 0x5}, r3}}, 0x30) 6m42.28701551s ago: executing program 7 (id=2071): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m42.080316511s ago: executing program 7 (id=2072): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x1b0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6004, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x81, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x28, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0xa}}}}}]}}]}}, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x10000, 0xd1) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) 6m38.862397082s ago: executing program 7 (id=2094): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000000104010200000000000000000000fff8"], 0x2c}, 0x1, 0x0, 0x0, 0x8090}, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 6m37.81095483s ago: executing program 7 (id=2093): r0 = syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x7, 0x24, 0x5, 0xff, 0x0, '\x00\x00'}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x206, 0x6, 0x4, 0xe80, 0x5, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6f, 0x2, 0x1, 0x1, "8b7e", "8e"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x83}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0xfffffffffffffee1, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x2, @lang_id={0x0, 0x3, 0x41a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44c}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)={0x0, 0x10, 0x5, "a04e085eaa"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, &(0x7f0000000380)}) 6m35.084315699s ago: executing program 7 (id=2105): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x280030, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 6m35.003805024s ago: executing program 7 (id=2106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c000180080003"], 0x70}}, 0x8000) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 6m21.101134735s ago: executing program 6 (id=2178): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="b1a9009200000b062d0000d396de492e6af1000000000000", 0x18) r1 = accept$alg(r0, 0x0, 0x0) r2 = eventfd(0x5) r3 = fcntl$dupfd(r1, 0x0, r2) sendmmsg$alg(r3, &(0x7f0000001d80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x44080}], 0x1, 0x8014) write$cgroup_devices(r3, &(0x7f0000000040)=ANY=[], 0xffa8) recvmmsg$unix(r3, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000003b80)=""/188, 0xbc}], 0x1}}], 0x1, 0x1e5dd6c35af971ca, 0x0) 6m21.055919839s ago: executing program 6 (id=2179): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 6m20.901107944s ago: executing program 6 (id=2180): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmmsg$inet(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4020) 6m20.801587951s ago: executing program 6 (id=2181): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x3ab1019, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) 6m20.651822831s ago: executing program 6 (id=2184): r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_usb_disconnect(0xffffffffffffffff) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='syscall\x00') read$FUSE(r2, &(0x7f0000001580)={0x2020}, 0x2020) 6m20.443588315s ago: executing program 8 (id=2186): socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000040)="b4", 0x1) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='dn+\x88\xfe\xf7\x01') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) syz_emit_vhci(&(0x7f0000000f80)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0xff, 0xc8}}}, 0x6) 6m20.344404805s ago: executing program 6 (id=2187): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_open_procfs$pagemap(0x0, &(0x7f00000001c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f000075c000/0x3000)=nil, 0x9, 0x0, 0x0, 0x8000e5, 0x0, 0x0, 0x0, 0xe4}) 6m20.116543364s ago: executing program 38 (id=2187): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_open_procfs$pagemap(0x0, &(0x7f00000001c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f000075c000/0x3000)=nil, 0x9, 0x0, 0x0, 0x8000e5, 0x0, 0x0, 0x0, 0xe4}) 6m19.78098612s ago: executing program 39 (id=2106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c000180080003"], 0x70}}, 0x8000) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 6m19.771124937s ago: executing program 8 (id=2190): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r1, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x18, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xb, 0x10000}}}}}}}}, 0x52) 6m19.324240509s ago: executing program 8 (id=2193): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x8, 0x20000004, 0x7f, 0x4233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0x7, 0x4db6, 0x0, 0x401], 0x2000, 0xa0f00}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)=@arm64={0x4, 0x7, 0xd6, '\x00', 0xf4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m19.054653498s ago: executing program 8 (id=2194): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0xab3011, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r0, &(0x7f00000029c0)=""/4096, 0x1000, 0xd36) 6m18.907268066s ago: executing program 8 (id=2195): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) renameat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00') 6m18.535285726s ago: executing program 8 (id=2196): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000440)={0xa, 0x4e24, 0x6, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x40047) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x1}}, 0x20) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) sendto$inet(r1, &(0x7f0000000400)='X', 0x1, 0x8884, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0xfffffff2, @empty, 0xef6}}, 0x1000000, 0x31, 0xffff1896, 0x4, 0xad, 0x0, 0x1c}, 0x9c) 6m18.267291454s ago: executing program 40 (id=2196): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000440)={0xa, 0x4e24, 0x6, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x40047) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x1}}, 0x20) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) sendto$inet(r1, &(0x7f0000000400)='X', 0x1, 0x8884, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0xfffffff2, @empty, 0xef6}}, 0x1000000, 0x31, 0xffff1896, 0x4, 0xad, 0x0, 0x1c}, 0x9c) 4m34.974776268s ago: executing program 9 (id=2775): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000bc0)=[{0x22, 0x0, [0x5, 0xb, 0x9, 0x2, 0xfffffffd, 0x1, 0x3ff, 0x0, 0x0, 0x400, 0x9, 0x5, 0x0, 0x5, 0xfffffff8]}, {0x3, 0x0, [0x1bb, 0x3, 0xf1d, 0x10001, 0x7, 0x7fff, 0xf833, 0x7, 0xfffffffc, 0x1f53, 0x0, 0x7, 0x7, 0x1, 0x200, 0x5]}, {0x0, 0x0, [0x6, 0x6, 0x10000, 0x3, 0x9a, 0x6, 0x681, 0x0, 0x49, 0x6, 0x9, 0xa, 0x4, 0x4, 0x27, 0x6]}, {0x2, 0x0, [0x3, 0x4a8d2598, 0x9, 0x10, 0x7, 0x8, 0x1, 0xffff, 0x6, 0x9, 0x6, 0x2393, 0x2, 0xd8, 0x101]}, {0x25, 0x0, [0x5458, 0x5, 0x80000000, 0x10001, 0x1000, 0x4, 0x1, 0x44, 0x800, 0xb467, 0x10000, 0xe4, 0x80000000, 0xfffffffa, 0x1, 0xffffff00]}, {0x1a, 0x0, [0x2, 0x0, 0x5, 0x6, 0x3, 0x10000, 0x9, 0x7, 0x0, 0x2, 0xe7ca, 0x8, 0xfffffffa, 0x3, 0x3, 0x2]}], 0xffffffffffffffff, 0x1, 0x1, 0x1b0}}, 0x20) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd78492480", @ANYBLOB=',rootmode=0000000000', @ANYBLOB=',group_id', @ANYBLOB=',']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4m34.804428131s ago: executing program 9 (id=2776): syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030601010405050724040501009c"], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 4m33.351272427s ago: executing program 9 (id=2795): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662", @ANYBLOB=',rootmode=0000000000', @ANYRESDEC=0x0, @ANYBLOB=',']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d", 0x7) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4m33.064913407s ago: executing program 9 (id=2796): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0xb5, 0xc1, 0x32, 0x40, 0x2c42, 0x16f8, 0x999, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x10, [{{0x9, 0x4, 0x4a, 0x0, 0x0, 0xdd, 0xa3, 0x6d}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 4m31.447932269s ago: executing program 9 (id=2807): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'vlan0\x00', &(0x7f0000000000)=@ethtool_cmd={0x34, 0x1000, 0xd, 0x200, 0x5e, 0xcd, 0x73, 0x1, 0xfb, 0x6, 0x8, 0x4, 0x3ff, 0x9, 0x4, 0x6e, [0x7, 0x1]}}) 4m31.366899667s ago: executing program 9 (id=2809): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) 4m15.070084843s ago: executing program 41 (id=2809): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) 2m54.912443686s ago: executing program 3 (id=3650): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x5c, r1, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="82f383246038cef88b9a31b488bdddc8"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="119b5d2984747e56928193217bdf5bc3"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f76805be6a51e983"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xc}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 2m54.808254039s ago: executing program 3 (id=3651): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000300)={0x2c, r2, 0x401, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14a0}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x80) 2m54.765037808s ago: executing program 3 (id=3652): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) write$6lowpan_control(r0, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 0', 0x1b) write$6lowpan_control(r0, &(0x7f0000000080)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 2m54.648459329s ago: executing program 3 (id=3653): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x1, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 2m54.18513633s ago: executing program 3 (id=3661): gettid() timer_settime(0x0, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {0x77359400}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10020, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000240)={0x5, 0x1, 0xeeef0000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001440)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)}], 0x1}, 0x4048081) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r3, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x185) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r6, 0x60) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r7, 0x84, 0x10, 0x0, &(0x7f0000000100)=0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="34043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 2m54.097702297s ago: executing program 3 (id=3663): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) 2m37.819020601s ago: executing program 42 (id=3663): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) 5.646668595s ago: executing program 2 (id=5057): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000024000103"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) rt_sigaction(0x6, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)="c4a1d555ae00000000c403895e9f170000009744e906000000f2450f0184640d00000064f3410fa6d02e660fe393e6810000f24521dc2a4cf2c8c482a59acc439d"}, 0x0, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x20, 0x300, 0x70bd25, 0x25dfdbfb, {0x1d}, [@nested={0x8, 0x8e, 0x0, 0x1, [@typed={0x4, 0xaa}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000085}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port1\x00', 0x0, 0x60004, 0x0, 0xffffffff, 0x8000, 0x0, 0x0, 0x0, 0x1, 0x6}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) getresgid(&(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000240)=0x0) ioctl$TUNSETGROUP(r4, 0x400454ce, r6) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='.\x00\x00\x00>\x00', 0x6}], 0x1, 0x0, 0x0, 0x39c}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000069"], 0xfe33) write$tun(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) close(r0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={r0}) 5.419523837s ago: executing program 2 (id=5060): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x4000, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r3], 0x2c}}, 0x0) 5.409840032s ago: executing program 2 (id=5061): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="5c00000014006b03000000d86e6c1d00028440fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4) 5.373347415s ago: executing program 2 (id=5062): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080)={0x7}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r2, 0x200, 0x70bd2b, 0x2, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}]}, 0x24}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000300)=0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}, 0x1, 0x0, 0x0, 0x404c831}, 0x44) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x10000}}, './file0\x00'}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000004c0)={r7, 0x70, {0x0, 0x0, 0x0, 0xe843, 0xfffffffffffffffb, 0x0, 0xa, 0x10, 0x15, "6cc572c89c37f96747e5a94b771933c4fc09252a3be419feec7369d61ba57f72d0fe8c26ef13c108d92471f61b40be1ec211aff98c27ab2f7dbfb67fce3b7ef6", "122bd5acbd3bdc523a0b640c4ffa15ab48281f8caffdcdc5f0b4b2a2c7d1b9a7845c54595a2e67de60014285fdae28e88d50d669040d8a24983658cd64bdb6b4", "691e95cb6ba415e14874075cee56aad9f26f8af45257989309a21d4217f6ac12", [0x100, 0x1]}}) ioctl$BTRFS_IOC_SET_FEATURES(r7, 0x40309439, &(0x7f0000000180)={0x3, 0x2, 0x8}) r8 = syz_io_uring_complete(0x0) fsetxattr$security_capability(r8, &(0x7f0000000380), &(0x7f0000000400)=@v2={0x2000000, [{0x8, 0x81}, {0x2, 0x5}]}, 0x14, 0x0) 3.648117712s ago: executing program 4 (id=5086): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x37, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xba, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x9, 0xfffffffd, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0x3, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x7f, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x32d, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x13ffd, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40046f41, &(0x7f0000000440)=0x20000) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x4, 0x0, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x80000000, 0x3}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x3, 0x4e24, 0x0, 0xa, 0x80, 0x80, 0x2c, 0x0, r5}, {0x0, 0x1bdcc20b, 0x5, 0xbe, 0x7, 0xf04c, 0x9, 0x8}, {0x1ff, 0x200, 0x101, 0x9}, 0x7ff, 0x6e6bbc, 0x1, 0x1, 0x3, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3c}, 0x4d6, 0x3c}, 0x2, @in6=@local, 0x3500, 0x2, 0x3, 0x3, 0x1, 0x2, 0x5}}, 0xe8) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0x9362, 0x0) utimensat(r9, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r8, 0x4068aea3, &(0x7f0000000380)) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 3.601307931s ago: executing program 4 (id=5088): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000bc0)=[{0x22, 0x0, [0x5, 0xb, 0x9, 0x2, 0xfffffffd, 0x1, 0x3ff, 0x0, 0x0, 0x400, 0x9, 0x5, 0x0, 0x5, 0xfffffff8]}, {0x3, 0x0, [0x1bb, 0x3, 0xf1d, 0x10001, 0x7, 0x7fff, 0xf833, 0x7, 0xfffffffc, 0x1f53, 0x0, 0x7, 0x7, 0x1, 0x200, 0x5]}, {0x0, 0x0, [0x6, 0x6, 0x10000, 0x3, 0x9a, 0x6, 0x681, 0x0, 0x49, 0x6, 0x9, 0xa, 0x4, 0x4, 0x27, 0x6]}, {0x2, 0x0, [0x3, 0x4a8d2598, 0x9, 0x10, 0x7, 0x8, 0x1, 0xffff, 0x6, 0x9, 0x6, 0x2393, 0x2, 0xd8, 0x101]}, {0x25, 0x0, [0x5458, 0x5, 0x80000000, 0x10001, 0x1000, 0x4, 0x1, 0x44, 0x800, 0xb467, 0x10000, 0xe4, 0x80000000, 0xfffffffa, 0x1, 0xffffff00]}, {0x1a, 0x0, [0x2, 0x0, 0x5, 0x6, 0x3, 0x10000, 0x9, 0x7, 0x0, 0x2, 0xe7ca, 0x8, 0xfffffffa, 0x3, 0x3, 0x2]}], 0xffffffffffffffff, 0x1, 0x1, 0x1b0}}, 0x20) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd78492480", @ANYBLOB=',rootmode=0000000000', @ANYBLOB=',group_id', @ANYBLOB=',']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.442373393s ago: executing program 4 (id=5091): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @multicast1}, 0x10, 0x0}, 0x4000010) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 3.297467387s ago: executing program 4 (id=5094): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000018c0)={0x1c, 0x19, 0x1, 0x10, 0x300, {0x1d, 0xd601, 0x9}, [@nested={0x8, 0xd, 0x0, 0x1, [@nested={0xfffffffffffffe01, 0xd9}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x10) 3.116270219s ago: executing program 4 (id=5097): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1c) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r2], 0x1c}}, 0x0) (async, rerun: 32) write$nci(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="4fa50baf2c951c4198613c9ce29c67a9f520"], 0x12) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r5}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r5}) socket(0x10, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r8}) (async, rerun: 64) truncate(&(0x7f0000000000)='./file0\x00', 0x1c59) (rerun: 64) openat$nvram(0xffffff9c, &(0x7f0000000340), 0x125081, 0x0) (async) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) (async) syz_usb_control_io(r9, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r10 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000000080)={0x14, &(0x7f00000001c0)={0x0, 0x5, 0xfb, {0xfb, 0x24, "9cdff6022ec8254960c0028011cfc20fa06a14a35efd41b2d8eb6276cffdc44453e59664a84cb5965c8b0d8bb42f4888edeeea237874f57d07fcb66c502d9411843bbebb5342d0a98ffa12f7b72784c3fc7c111be9a54e16eb6a90f19c56e7a0e882490d65551c34ed4f8d30e1671c1a46dd1941edf14eb4306df2afcd69cdc911cd1d313ba889dfab6f0d79994f3782c5cfad5b7454323a9261ac0fd07bd94ea12eda74f88e02189e92365bee5105b7a7e7b5de4956c3c28cff1bbe3a9a7fdfb656eb509cb6c7873972f6affab1ca944c52c4b288e54fde6d5acbc42a7672e1245fc40c70ac4845ec4d4dc799f6c3c96ee6ca9efb512c01d2"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x459}}}, &(0x7f0000000300)={0x1c, &(0x7f0000000400)={0x0, 0x12, 0x80, "22f9c8b690e80ccf3fc3112a02e10033938110ac03859b63156bd4570da36975e9f1c6b1946f259d1ef4f3341f62991943915fbce3acb27eb7bae8c2159b6b5b5503dacd4de9deed702e201e63929fc3837c9084176b25767e7a2038b69aec9fb76c668676146dda1b664acf1be490e2d15162ad1e1d03112df1f8a34a35b36a"}, &(0x7f0000000740)={0xa1, 0x1, 0x400, "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"}, &(0x7f00000000c0)={0x21, 0x0, 0x3, "7da726"}}) (rerun: 64) read$hidraw(r10, &(0x7f0000002340)=""/147, 0x93) (async, rerun: 64) syz_usb_ep_write(r9, 0x81, 0x1, &(0x7f0000000140)='g') (async, rerun: 64) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 2.914482566s ago: executing program 4 (id=5098): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002) writev(r2, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xc) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c776664325cda978bf0dbea3b1d216a2951b96e6f3d", @ANYRESHEX=r4, @ANYBLOB=',\x00']) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x22) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r10, 0x4188aec6, &(0x7f0000003980)={0x1, [{0x2, 0x10, 0x7, &(0x7f0000000080)="b45f"}, {0x3, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x10000, 0x0}, {0x3, 0x0, 0x91, 0x0}, {0x3, 0x0, 0xf, 0x0}, {0x1, 0x0, 0xe7b6, 0x0}, {0x0, 0x0, 0xffff32e3, 0x0}, {0x2, 0x0, 0xfffffff7, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x0, 0x0, 0xfffff03a, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x80, 0x0}, {0x1, 0x0, 0x3, 0x0}]}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000001200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000fbdbdf252b00000008000300", @ANYRES32=r11, @ANYBLOB="04009515fb1ed559d1d34f14b46ba2c39f3cd181efbb5c71035cafc16483200ed9be2487b60567a8f1bc70ed96f1e04fae7cef1394421c085f5ab2c921c108acacd55997d848074debb0646c0491c0e7d0251e6b3eb4e1e45789c7aca85fd1e28364531031e35682482d9becfc207c9b824e4eff3b0625d3ffac8289a359483f5d8fae5de51357d8c8410d69806478b5a200000000"], 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x20040000) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f00000012c0)=0x4) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000040)={{r0}, "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"}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2.532166487s ago: executing program 2 (id=5100): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000bc0)=[{0x22, 0x0, [0x5, 0xb, 0x9, 0x2, 0xfffffffd, 0x1, 0x3ff, 0x0, 0x0, 0x400, 0x9, 0x5, 0x0, 0x5, 0xfffffff8]}, {0x3, 0x0, [0x1bb, 0x3, 0xf1d, 0x10001, 0x7, 0x7fff, 0xf833, 0x7, 0xfffffffc, 0x1f53, 0x0, 0x7, 0x7, 0x1, 0x200, 0x5]}, {0x0, 0x0, [0x6, 0x6, 0x10000, 0x3, 0x9a, 0x6, 0x681, 0x0, 0x49, 0x6, 0x9, 0xa, 0x4, 0x4, 0x27, 0x6]}, {0x2, 0x0, [0x3, 0x4a8d2598, 0x9, 0x10, 0x7, 0x8, 0x1, 0xffff, 0x6, 0x9, 0x6, 0x2393, 0x2, 0xd8, 0x101]}, {0x25, 0x0, [0x5458, 0x5, 0x80000000, 0x10001, 0x1000, 0x4, 0x1, 0x44, 0x800, 0xb467, 0x10000, 0xe4, 0x80000000, 0xfffffffa, 0x1, 0xffffff00]}, {0x1a, 0x0, [0x2, 0x0, 0x5, 0x6, 0x3, 0x10000, 0x9, 0x7, 0x0, 0x2, 0xe7ca, 0x8, 0xfffffffa, 0x3, 0x3, 0x2]}], 0xffffffffffffffff, 0x1, 0x1, 0x1b0}}, 0x20) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd78492480", @ANYBLOB=',rootmode=0000000000', @ANYBLOB=',group_id', @ANYBLOB=',']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.315214418s ago: executing program 2 (id=5103): r0 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg(r0, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)='!\bZI', 0x4}], 0x1}}], 0x1, 0xc080) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES32=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000a40)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="4006450000"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') syz_clone(0x4000, &(0x7f0000000180)="329021ed6c1c2b6b430166eae07225d28172938d7d1f69c1adfa9360ee7329f1b132bf3cb93e10f0d5a2221401a6c72041a9044461f33f08daa69ca1a2221c59781fbc84c38e029de57436913d35da661fbc0f3382e73cf3e7b1c43d3b784ca93f032e87a906f07aada586205b6c74c95872bb8f75288a", 0x77, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000200)="a3a9b0282f89289b44701bd3d2ac36c7e72dde6239dd26aef7ca4433fb5b809432e59f761ee64cd4cdfc188127404f9c9fbead41b605eb9b53fdff26d7a97530d850c23f1a878c2bcb12fc288bc6a4b72d4104ec0561fd6a35dfe1dcd16402eac751a7f6c221ec380f5489e083effef652956982ae56cee1718cfe") lseek(r2, 0x8, 0x1) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000000)={0x7, {0x1, 0x9d0d, 0x9, 0xcc}, {0x6, 0x4, 0x4, 0x1}, {0x7fffffff, 0x9}}) 1.987468586s ago: executing program 1 (id=5108): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d00)={0x2c, &(0x7f0000000a40)={0x0, 0x30, 0x6, "b095594ef163"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d40)={0x2c, &(0x7f0000000b00)={0x40, 0x1, 0x2, "8856"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001000)={0x1c, &(0x7f0000000e80)={0x20, 0x0, 0x2, "367f"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000240)={0x20, 0x9, 0x2, "36fc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000011c0)={0x2c, &(0x7f0000000f80)={0x40, 0x8, 0x2, "bc47"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001040)={0x34, &(0x7f0000000c40)={0x40, 0x12, 0x2, "32a5"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.344301944s ago: executing program 1 (id=5109): ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f00000000c0)={0x3, 0xd, 0xd10, 0x9, 0x4, 0x9, 0x6, 0x4, 0x5, 0xc, 0x9, "72a315475c3c0e5ae029abeb147eaf547bbf4d3382eb931e3de47f5d695d7601"}) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x15, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x80, @mcast2, 0x1574}, 0x8) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x800, 0x0, 0xffffffffffffffff}) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000240)={@rand_addr=0x64010100, 0x1}}) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) (async, rerun: 64) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x755, 0x2626, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) (async) syz_usb_control_io(r5, &(0x7f0000000340)={0x2c, &(0x7f00000000c0)={0x40, 0xa, 0x45, {0x45, 0x22, "61639c545d2ce9daa7602630c686377369efa824c337939610aab1b0d2363bdd25b77c5bdfd51207b2908fceb485a8995d91250100ff9ebab19ba6613600e553d7b274"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001500)=ANY=[], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) shutdown(r1, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) (rerun: 32) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000000)=0xffef, 0x4) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 1.198178353s ago: executing program 0 (id=5111): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd784924", @ANYBLOB=',rootmode=', @ANYBLOB=',group_id', @ANYBLOB=',']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.02906834s ago: executing program 0 (id=5112): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800"], 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') 579.366591ms ago: executing program 1 (id=5113): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="5c00000014006b03000000d86e6c1d00028440fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd7000000000000000000", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4) 575.992714ms ago: executing program 1 (id=5114): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83", 0x9e}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x3}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x128, 0x29, 0x4, {0x4, 0x21, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x1b0, 0x29, 0x36, {0x5e, 0x32, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xc6, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0x70, 0x0, [@mcast1]}}}], 0x378}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 421.750667ms ago: executing program 0 (id=5115): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgid(0x0) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0xc0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/61, 0x3d, 0x10000000}}], 0x1, 0x0, 0x0) 420.089664ms ago: executing program 1 (id=5116): setuid(0xee01) r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x1}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x11, r5, 0x80fa0000) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x6, [{0x95, 0x3}, {0x188f40, 0xd}, {0xe6c3, 0x5c2a}, {0x8000, 0xe7b}, {0x0, 0x3}, {0x6, 0x9}]}}) 328.301668ms ago: executing program 0 (id=5117): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662", @ANYRESDEC=0x0, @ANYBLOB=',']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d", 0x7) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 327.82792ms ago: executing program 1 (id=5118): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x3a) socket$igmp(0x2, 0x3, 0x2) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x5, 0x0) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000280)=ANY=[@ANYRES8=r4, @ANYRES64=r1], 0x0) 180.398683ms ago: executing program 0 (id=5119): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662", @ANYBLOB=',rootmode=0000000000', @ANYRESDEC=0x0, @ANYBLOB=',']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d", 0x7) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf53}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 0 (id=5120): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000005740)=[{{&(0x7f0000000100)=@ll={0x11, 0x2f, 0x0, 0x1, 0x8, 0x6, @random="c7272be696be"}, 0x80, 0x0}}], 0x1, 0x4040040) kernel console output (not intermixed with test programs): [ 613.083109][ T5828] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 613.112898][T15074] usb 3-1: Using ep0 maxpacket: 8 [ 613.120365][T15074] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 613.130306][T15074] usb 3-1: config 0 has no interface number 0 [ 613.137203][T15074] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 613.149871][T15074] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 613.162096][T15074] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 613.175383][T15074] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 613.189214][T15074] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 613.201838][T15074] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.219166][T15074] usb 3-1: config 0 descriptor?? [ 613.238418][T15074] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 613.258506][ T5828] usb 1-1: Using ep0 maxpacket: 16 [ 613.277755][ T5828] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 613.288204][ T5828] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 613.300964][ T5828] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 613.313353][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.321454][ T5828] usb 1-1: Product: syz [ 613.325631][ T5828] usb 1-1: Manufacturer: syz [ 613.330405][ T5828] usb 1-1: SerialNumber: syz [ 613.513697][T15074] usb 3-1: USB disconnect, device number 45 [ 613.546693][T15074] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 613.569663][ T5828] usb 1-1: 0:2 : does not exist [ 613.593222][ T5828] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 613.689229][T19115] sctp: [Deprecated]: syz.2.4066 (pid 19115) Use of struct sctp_assoc_value in delayed_ack socket option. [ 613.689229][T19115] Use struct sctp_sack_info instead [ 613.705737][ T5828] usb 1-1: USB disconnect, device number 110 [ 613.735692][T19115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4066'. [ 613.767014][T17157] udevd[17157]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 614.139453][T15074] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 614.310559][T15074] usb 3-1: Using ep0 maxpacket: 32 [ 614.318280][T15074] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 614.328564][T15074] usb 3-1: config 0 has no interface number 0 [ 614.337270][T15074] usb 3-1: config 0 interface 184 has no altsetting 0 [ 614.348584][T15074] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 614.358377][T15074] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.366806][T15074] usb 3-1: Product: syz [ 614.371511][T15074] usb 3-1: Manufacturer: syz [ 614.376579][T15074] usb 3-1: SerialNumber: syz [ 614.384959][T15074] usb 3-1: config 0 descriptor?? [ 614.400147][T15074] smsc75xx v1.0.0 [ 614.518639][ T24] usb 2-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 614.534942][ T24] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 614.550709][ T24] usb 2-1: media controller created [ 614.559345][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 614.594844][ T24] dvb_usb_rtl28xxu 2-1:0.0: unknown tuner MAX3543 [ 614.755469][T19149] netlink: 'syz.4.4075': attribute type 29 has an invalid length. [ 614.779705][T19152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.797446][T19152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.057355][T15074] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 615.069507][T15074] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 615.522433][T19156] netlink: 'syz.4.4075': attribute type 29 has an invalid length. [ 615.536810][T19146] netlink: 500 bytes leftover after parsing attributes in process `syz.4.4075'. [ 615.922219][ T24] usb 2-1: USB disconnect, device number 65 [ 615.943157][T15074] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 615.954571][T15074] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 615.972180][T15074] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 615.987145][T15074] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 616.806911][T19183] netlink: 'syz.4.4086': attribute type 29 has an invalid length. [ 617.121957][ T5828] usb 3-1: USB disconnect, device number 46 [ 617.372797][T19183] netlink: 'syz.4.4086': attribute type 29 has an invalid length. [ 617.381601][T19183] netlink: 500 bytes leftover after parsing attributes in process `syz.4.4086'. [ 617.593542][ T5828] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 617.778006][ T5828] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 48 [ 617.799340][ T5828] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 617.810385][ T5828] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 617.829414][ T5828] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 617.838692][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.847899][ T5828] usb 3-1: Product: syz [ 617.852924][ T5828] usb 3-1: Manufacturer: syz [ 617.857585][ T5828] usb 3-1: SerialNumber: syz [ 617.876359][ T5828] usb 3-1: config 0 descriptor?? [ 617.890833][ T5828] usb-storage 3-1:0.0: USB Mass Storage device detected [ 617.892044][T19206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4093'. [ 617.906717][ T5828] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 618.053629][ T1227] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 618.100925][T19191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.109724][T19191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.119999][ T24] usb 3-1: USB disconnect, device number 47 [ 618.226046][ T1227] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 618.235420][ T1227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.246063][ T1227] usb 2-1: config 0 descriptor?? [ 618.263056][ T1227] cp210x 2-1:0.0: cp210x converter detected [ 618.673621][ T24] usb 1-1: new low-speed USB device number 111 using dummy_hcd [ 618.689129][ T1227] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 618.820911][T19230] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4102'. [ 618.830363][T19230] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4102'. [ 618.848772][ T24] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 618.857265][ T24] usb 1-1: config 0 has no interface number 0 [ 618.863390][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 618.874351][ T24] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 618.885319][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 618.898882][ T24] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 618.910350][ T24] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 618.921320][ T24] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 618.932150][ T1227] usb 2-1: cp210x converter now attached to ttyUSB0 [ 618.936577][ T24] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 618.950285][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.967727][ T24] usb 1-1: config 0 descriptor?? [ 618.979965][T19217] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 618.987712][T19217] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 618.998795][ T24] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 619.090644][T15074] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 619.137174][ T24] usb 2-1: USB disconnect, device number 66 [ 619.147436][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 619.160014][ T24] cp210x 2-1:0.0: device disconnected [ 619.214785][T19217] ldusb 1-1:0.55: Write buffer overflow, 1 bytes dropped [ 619.251360][T15074] usb 3-1: Using ep0 maxpacket: 32 [ 619.258535][T15074] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 619.266956][T15074] usb 3-1: config 0 has no interface number 0 [ 619.273222][T15074] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 619.284030][T15074] usb 3-1: config 0 interface 1 has no altsetting 0 [ 619.292928][T15074] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 619.302361][T15074] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.310882][T15074] usb 3-1: Product: syz [ 619.315432][T15074] usb 3-1: Manufacturer: syz [ 619.320052][T15074] usb 3-1: SerialNumber: syz [ 619.328176][T15074] usb 3-1: config 0 descriptor?? [ 619.555668][T15074] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 619.565564][T15074] cx231xx 3-1:0.1: Failed to read PCB config [ 619.571859][T15074] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 619.587448][T15074] usb 3-1: USB disconnect, device number 48 [ 619.910659][T19245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4109'. [ 620.127942][T15074] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 620.128019][ T1227] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 620.302276][ T1227] usb 2-1: Using ep0 maxpacket: 32 [ 620.309705][T15074] usb 3-1: Using ep0 maxpacket: 32 [ 620.311540][ T1227] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 620.326828][ T1227] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 620.338075][T15074] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 620.338868][ T1227] usb 2-1: config 0 interface 0 has no altsetting 0 [ 620.359385][ T1227] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 620.363274][T15074] usb 3-1: config 0 has no interface number 0 [ 620.369671][ T1227] usb 2-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 620.374853][T15074] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 620.383925][ T1227] usb 2-1: Product: syz [ 620.402818][ T1227] usb 2-1: Manufacturer: syz [ 620.408333][ T1227] usb 2-1: SerialNumber: syz [ 620.414255][T15074] usb 3-1: config 0 interface 1 has no altsetting 0 [ 620.423866][ T1227] usb 2-1: config 0 descriptor?? [ 620.434745][T15074] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 620.459415][T15074] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.467730][T15074] usb 3-1: Product: syz [ 620.472076][T15074] usb 3-1: Manufacturer: syz [ 620.476690][T15074] usb 3-1: SerialNumber: syz [ 620.492212][T15074] usb 3-1: config 0 descriptor?? [ 620.741580][T15074] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 620.758942][T15074] cx231xx 3-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 620.876774][T15074] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 620.880441][ T1227] gs_usb 2-1:0.0: Configuring for 256 interfaces [ 620.892874][ T1227] gs_usb 2-1:0.0: Driver cannot handle more that 255 CAN interfaces [ 620.897973][T15074] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 620.905372][ T1227] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 620.915096][T15074] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 620.935437][T15074] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 620.951456][T15074] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 620.959432][T15074] cx231xx 3-1:0.1: Failed to set devmode to analog: error: -32 [ 621.019405][T15074] i2c i2c-2: Added multiplexed i2c bus 4 [ 621.043546][T15074] i2c i2c-2: Added multiplexed i2c bus 5 [ 621.054799][T15074] cx231xx 3-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 621.070301][T15074] cx231xx 3-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 621.117505][T15074] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 621.137377][ T1227] usb 2-1: USB disconnect, device number 67 [ 621.142858][T15074] usb 3-1: USB disconnect, device number 49 [ 621.680593][ T1227] usb 1-1: USB disconnect, device number 111 [ 621.702926][ T1227] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 621.828007][T19261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4116'. [ 622.181296][ T1227] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 622.245321][T15074] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 622.343950][ T1227] usb 1-1: Using ep0 maxpacket: 16 [ 622.351756][ T1227] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 622.362097][ T1227] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 622.372986][ T1227] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 622.382138][ T1227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.390354][ T1227] usb 1-1: Product: syz [ 622.395177][ T1227] usb 1-1: Manufacturer: syz [ 622.399869][ T1227] usb 1-1: SerialNumber: syz [ 622.421412][T15074] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 622.430845][T15074] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.439160][T15074] usb 2-1: Product: syz [ 622.443467][T15074] usb 2-1: Manufacturer: syz [ 622.448108][T15074] usb 2-1: SerialNumber: syz [ 622.631966][ T1227] usb 1-1: 0:2 : does not exist [ 622.661967][ T1227] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 622.702957][ T1227] usb 1-1: USB disconnect, device number 112 [ 622.733687][T17346] udevd[17346]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 622.899436][T15074] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 622.911984][T15074] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 622.919185][ T5828] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 623.092062][ T5828] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 623.101200][ T5828] usb 3-1: config 1 has no interface number 0 [ 623.107391][ T5828] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 623.118445][ T5828] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 623.129413][ T5828] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 623.138852][ T5828] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 623.149719][ T5828] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 153, setting to 64 [ 623.164106][ T5828] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 623.174531][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.182949][ T5828] usb 3-1: Product: syz [ 623.187375][ T5828] usb 3-1: Manufacturer: syz [ 623.192041][ T5828] usb 3-1: SerialNumber: syz [ 623.200101][T19276] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 623.423518][T19276] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 623.430871][T19276] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 623.653700][T19276] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 624.090997][T19276] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 624.098611][T19276] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 624.110948][ T5828] cdc_ncm 3-1:1.1: bind() failure [ 624.249715][T19286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4127'. [ 624.374576][ T24] usb 3-1: USB disconnect, device number 50 [ 624.519072][T19299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4131'. [ 625.515326][T15074] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e4. ret = -EPROTO [ 625.533768][T15074] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 625.563628][T15074] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 625.596880][T15074] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 625.615884][T15074] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 625.639515][T15074] usb 2-1: USB disconnect, device number 68 [ 626.309181][ T5828] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 626.412803][T19336] can: request_module (can-proto-0) failed. [ 626.454247][T19339] tmpfs: Unknown parameter 'mpo[' [ 626.480253][ T5828] usb 1-1: Using ep0 maxpacket: 8 [ 626.487551][ T5828] usb 1-1: config 0 has no interfaces? [ 626.493402][ T5828] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 626.503855][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.516411][ T5828] usb 1-1: config 0 descriptor?? [ 626.587169][T15074] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 626.758224][T15074] usb 2-1: Using ep0 maxpacket: 8 [ 626.781421][T15074] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 626.788636][ T5828] usb 1-1: USB disconnect, device number 113 [ 626.797887][T15074] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.812705][T15074] usb 2-1: Product: syz [ 626.818138][T19349] netlink: 'syz.4.4149': attribute type 29 has an invalid length. [ 626.822055][T15074] usb 2-1: Manufacturer: syz [ 626.832205][T15074] usb 2-1: SerialNumber: syz [ 626.847286][T15074] usb 2-1: config 0 descriptor?? [ 626.867859][T15074] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 626.972071][ T24] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 627.134976][ T24] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 627.144982][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.164506][ T24] usb 3-1: config 0 descriptor?? [ 627.405501][T19345] batadv_slave_1: entered promiscuous mode [ 627.484542][T19345] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4148'. [ 627.519444][T19344] batadv_slave_1: left promiscuous mode [ 627.561819][ T24] kaweth 3-1:0.0: Firmware present in device. [ 627.570894][ T24] kaweth 3-1:0.0: Error reading configuration (-71), no net device created [ 627.592497][ T24] kaweth 3-1:0.0: probe with driver kaweth failed with error -5 [ 627.615673][ T24] usb 3-1: USB disconnect, device number 51 [ 627.642335][T19347] netlink: 'syz.4.4149': attribute type 29 has an invalid length. [ 628.212649][ T24] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 628.302077][T19375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4159'. [ 628.395562][ T24] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 628.404396][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 628.415584][ T24] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 628.426842][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 628.436037][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.444129][ T24] usb 1-1: Product: syz [ 628.448481][ T24] usb 1-1: Manufacturer: syz [ 628.453202][ T24] usb 1-1: SerialNumber: syz [ 628.459762][T19380] kvm: user requested TSC rate below hardware speed [ 628.684405][ T5828] usb 1-1: USB disconnect, device number 114 [ 628.832748][ T24] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 628.993182][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 629.000085][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 629.011002][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 629.022333][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 629.031478][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.039591][ T24] usb 3-1: Product: syz [ 629.043789][ T24] usb 3-1: Manufacturer: syz [ 629.048737][ T24] usb 3-1: SerialNumber: syz [ 629.273505][ T24] usb 3-1: 0:2 : does not exist [ 629.298377][ T24] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 629.346349][ T24] usb 3-1: USB disconnect, device number 52 [ 629.395822][T17157] udevd[17157]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 629.529867][T19396] netlink: 'syz.4.4169': attribute type 13 has an invalid length. [ 629.670741][T15074] input: sonixj as /devices/platform/dummy_hcd.1/usb2/2-1/input/input85 [ 629.898566][T15074] usb 2-1: USB disconnect, device number 69 [ 629.970624][T19400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4170'. [ 630.789699][T15074] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 630.954418][T15074] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 630.968219][T15074] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.977365][T15074] usb 2-1: Product: syz [ 630.981644][T15074] usb 2-1: Manufacturer: syz [ 630.989695][T15074] usb 2-1: SerialNumber: syz [ 630.998112][T15074] usb 2-1: config 0 descriptor?? [ 631.006699][T15074] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 070 [ 631.473087][T19434] sctp: [Deprecated]: syz.2.4183 (pid 19434) Use of struct sctp_assoc_value in delayed_ack socket option. [ 631.473087][T19434] Use struct sctp_sack_info instead [ 631.618503][T19437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4184'. [ 631.650030][T19414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.658864][T19414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.668624][T15074] i2c i2c-1: failure reading functionality [ 631.677545][T15074] i2c i2c-1: connected i2c-tiny-usb device [ 631.689063][T15074] usb 2-1: USB disconnect, device number 70 [ 631.891203][ T5828] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 632.051844][ T5828] usb 3-1: Using ep0 maxpacket: 8 [ 632.059961][ T5828] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 632.069590][ T5828] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 632.079909][ T5828] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 632.090045][ T5828] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 632.100095][ T5828] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 632.113129][ T5828] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 632.122361][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.221070][T19414] Process accounting resumed [ 632.811133][T15074] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 632.947830][T19482] netlink: 'syz.4.4203': attribute type 10 has an invalid length. [ 632.947922][T19483] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4184'. [ 632.964898][T19482] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4203'. [ 633.007123][T15074] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 633.018665][T19484] 9p: Bad value for 'rfdno' [ 633.025422][T15074] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.055692][T15074] usb 2-1: config 0 descriptor?? [ 633.347528][ T5828] usb 1-1: new full-speed USB device number 115 using dummy_hcd [ 633.490768][T19494] sctp: [Deprecated]: syz.4.4208 (pid 19494) Use of struct sctp_assoc_value in delayed_ack socket option. [ 633.490768][T19494] Use struct sctp_sack_info instead [ 633.496503][T19463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.522127][T19463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.540034][ T5828] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 633.551592][ T5828] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 633.567199][ T5828] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 633.576396][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.777700][T15074] usb 2-1: Cannot read MAC address [ 633.783138][T15074] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 633.797814][T15074] usb 2-1: USB disconnect, device number 71 [ 633.821611][ T5828] usb 1-1: usb_control_msg returned -32 [ 633.828449][ T5828] usbtmc 1-1:16.0: can't read capabilities [ 634.320870][T19508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4212'. [ 634.682224][T15074] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 634.745651][ T24] usb 3-1: USB disconnect, device number 53 [ 634.784066][T19520] sctp: [Deprecated]: syz.2.4217 (pid 19520) Use of struct sctp_assoc_value in delayed_ack socket option. [ 634.784066][T19520] Use struct sctp_sack_info instead [ 634.842913][T15074] usb 2-1: Using ep0 maxpacket: 16 [ 634.854132][T15074] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.867143][T15074] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 634.880745][T15074] usb 2-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 634.892776][T15074] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.903929][T15074] usb 2-1: config 0 descriptor?? [ 635.143949][T15074] semitek 0003:1EA7:0907.0023: unknown main item tag 0x0 [ 635.157954][T15074] semitek 0003:1EA7:0907.0023: unknown main item tag 0x0 [ 635.166624][T15074] semitek 0003:1EA7:0907.0023: unknown main item tag 0x0 [ 635.175834][T15074] semitek 0003:1EA7:0907.0023: unknown main item tag 0x0 [ 635.183169][T15074] semitek 0003:1EA7:0907.0023: unknown main item tag 0x0 [ 635.206492][T15074] semitek 0003:1EA7:0907.0023: hidraw0: USB HID v0.00 Device [HID 1ea7:0907] on usb-dummy_hcd.1-1/input0 [ 635.342174][T19516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.350942][T19528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.359871][T19528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.367076][T19516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.397675][ T5828] usb 2-1: USB disconnect, device number 72 [ 635.471441][T19545] sctp: [Deprecated]: syz.1.4226 (pid 19545) Use of struct sctp_assoc_value in delayed_ack socket option. [ 635.471441][T19545] Use struct sctp_sack_info instead [ 635.691413][T19554] ipvlan1: entered promiscuous mode [ 635.696703][T19554] ipvlan1: entered allmulticast mode [ 635.702160][T19554] veth0_vlan: entered allmulticast mode [ 635.861886][ T5828] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 636.045253][ T5828] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 636.054448][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.062720][ T5828] usb 2-1: Product: syz [ 636.066913][ T5828] usb 2-1: Manufacturer: syz [ 636.071527][ T5828] usb 2-1: SerialNumber: syz [ 636.298025][ T5828] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 636.310172][ T5828] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 636.320927][ T5828] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 636.322026][T15074] usb 1-1: USB disconnect, device number 115 [ 636.344421][ T5828] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 636.507297][T19570] sctp: [Deprecated]: syz.0.4235 (pid 19570) Use of struct sctp_assoc_value in delayed_ack socket option. [ 636.507297][T19570] Use struct sctp_sack_info instead [ 636.712785][T19582] netlink: 'syz.2.4240': attribute type 13 has an invalid length. [ 636.880578][T19593] sctp: [Deprecated]: syz.0.4245 (pid 19593) Use of struct sctp_assoc_value in delayed_ack socket option. [ 636.880578][T19593] Use struct sctp_sack_info instead [ 637.045777][ T5828] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 637.205924][ T5828] usb 3-1: Using ep0 maxpacket: 32 [ 637.212396][ T5828] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 637.222498][ T5828] usb 3-1: config 0 has no interface number 0 [ 637.228842][ T5828] usb 3-1: config 0 interface 184 has no altsetting 0 [ 637.238990][ T5828] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 637.248380][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.257129][ T5828] usb 3-1: Product: syz [ 637.261755][ T5828] usb 3-1: Manufacturer: syz [ 637.266447][ T5828] usb 3-1: SerialNumber: syz [ 637.276666][ T5828] usb 3-1: config 0 descriptor?? [ 637.291110][ T5828] smsc75xx v1.0.0 [ 637.449768][T19617] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4254'. [ 637.529632][T19623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4256'. [ 637.538882][T19623] openvswitch: netlink: Flow key attr not present in new flow. [ 637.805193][T15074] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 637.976294][T15074] usb 1-1: Using ep0 maxpacket: 32 [ 637.984032][T15074] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 637.992341][T15074] usb 1-1: config 0 has no interface number 0 [ 637.998635][T15074] usb 1-1: config 0 interface 12 has no altsetting 0 [ 638.007554][T15074] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 638.021081][T15074] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.029481][T15074] usb 1-1: Product: syz [ 638.034177][T15074] usb 1-1: Manufacturer: syz [ 638.038791][T15074] usb 1-1: SerialNumber: syz [ 638.047315][T15074] usb 1-1: config 0 descriptor?? [ 638.367808][ T5828] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 638.380589][ T5828] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 638.777126][ T1227] usb 2-1: USB disconnect, device number 73 [ 638.819975][ T5828] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 638.831638][ T5828] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 638.841347][ T5828] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 638.853108][ T5828] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 638.863123][ T5828] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 639.768299][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 639.783189][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 639.923944][T19676] netlink: 'syz.4.4274': attribute type 13 has an invalid length. [ 640.008461][ T24] usb 3-1: USB disconnect, device number 54 [ 640.060162][T19679] netlink: 'syz.4.4275': attribute type 16 has an invalid length. [ 640.241135][T15074] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: b8 failed: -71 [ 640.251482][T15074] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 640.261045][T15074] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 640.269156][T15074] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 640.295312][T15074] usb 1-1: USB disconnect, device number 116 [ 640.660289][T15074] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 640.831981][T15074] usb 3-1: Using ep0 maxpacket: 8 [ 640.838359][T15074] usb 3-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 640.847450][T15074] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 48, changing to 9 [ 640.859036][T15074] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 8240, setting to 1024 [ 640.872207][T15074] usb 3-1: New USB device found, idVendor=19b5, idProduct=9ed7, bcdDevice=98.af [ 640.881485][T15074] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=149 [ 640.889803][T15074] usb 3-1: SerialNumber: syz [ 640.916743][ T24] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 641.055750][ T1227] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 641.078763][ T24] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 641.087042][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.097334][ T24] usb 2-1: config 0 has no interface number 0 [ 641.104290][ T24] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 641.114475][ T24] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 641.139122][ T24] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 641.148465][T15074] usb 3-1: USB disconnect, device number 55 [ 641.156468][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.169157][ T24] usb 2-1: Product: syz [ 641.174073][ T24] usb 2-1: Manufacturer: syz [ 641.178893][ T24] usb 2-1: SerialNumber: syz [ 641.187824][ T24] usb 2-1: config 0 descriptor?? [ 641.216307][ T1227] usb 1-1: Using ep0 maxpacket: 32 [ 641.223761][ T1227] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 641.233294][ T1227] usb 1-1: config 0 has no interface number 0 [ 641.239637][ T1227] usb 1-1: config 0 interface 184 has no altsetting 0 [ 641.249577][ T1227] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 641.258903][ T1227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.266914][ T1227] usb 1-1: Product: syz [ 641.271174][ T1227] usb 1-1: Manufacturer: syz [ 641.275779][ T1227] usb 1-1: SerialNumber: syz [ 641.283877][ T1227] usb 1-1: config 0 descriptor?? [ 641.291649][ T1227] smsc75xx v1.0.0 [ 641.661367][T19709] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4289'. [ 641.706823][T19711] netlink: 'syz.4.4290': attribute type 1 has an invalid length. [ 641.715144][T19711] netlink: 'syz.4.4290': attribute type 4 has an invalid length. [ 641.723409][T19711] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.4290'. [ 641.739210][ T1227] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 641.752799][ T1227] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 641.762750][ T1227] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 641.773432][ T1227] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 641.852542][ T24] usb 2-1: USB disconnect, device number 74 [ 642.489190][ T24] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 642.651431][ T24] usb 3-1: config index 0 descriptor too short (expected 65183, got 72) [ 642.661802][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 642.671975][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.679989][ T24] usb 3-1: Product: syz [ 642.684225][ T24] usb 3-1: Manufacturer: syz [ 642.688824][ T24] usb 3-1: SerialNumber: syz [ 642.699075][ T24] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 642.715683][T15074] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 642.935783][T19726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.949399][T19726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.964362][T19726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.976137][T19726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.988529][T19726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.000537][T19726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.010915][ T1227] usb 3-1: USB disconnect, device number 56 [ 643.868463][T15074] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 643.875561][T15074] ath9k_htc: Failed to initialize the device [ 643.882576][ T1227] usb 3-1: ath9k_htc: USB layer deinitialized [ 644.047415][ T5828] usb 1-1: USB disconnect, device number 117 [ 644.102354][T19765] netlink: 'syz.0.4308': attribute type 29 has an invalid length. [ 644.210393][ T1227] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 644.381492][ T1227] usb 3-1: Using ep0 maxpacket: 32 [ 644.389657][ T1227] usb 3-1: config index 0 descriptor too short (expected 241, got 72) [ 644.398594][ T1227] usb 3-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 644.408019][ T1227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.424982][ T1227] usb 3-1: config 0 descriptor?? [ 644.439698][ T1227] mos7840 3-1:0.0: missing endpoints [ 644.593797][T19765] netlink: 548 bytes leftover after parsing attributes in process `syz.0.4308'. [ 644.730553][T19770] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4311'. [ 645.440205][T15074] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 645.600594][T15074] usb 1-1: Using ep0 maxpacket: 32 [ 645.607093][T15074] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 645.615566][T15074] usb 1-1: config 0 has no interface number 0 [ 645.621705][T15074] usb 1-1: config 0 interface 184 has no altsetting 0 [ 645.631388][T15074] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 645.640540][T15074] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.648671][T15074] usb 1-1: Product: syz [ 645.652845][T15074] usb 1-1: Manufacturer: syz [ 645.657514][T15074] usb 1-1: SerialNumber: syz [ 645.664181][T15074] usb 1-1: config 0 descriptor?? [ 645.672342][T15074] smsc75xx v1.0.0 [ 645.758313][ T24] usb 3-1: USB disconnect, device number 57 [ 645.905569][T19800] binder: 19797:19800 ioctl 3b88 2000000001c0 returned -22 [ 645.943544][T19800] binder: 19797:19800 ioctl 3b89 200000000240 returned -22 [ 646.034308][T19809] netlink: 'syz.1.4325': attribute type 29 has an invalid length. [ 646.106878][T15074] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 646.142905][T15074] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 646.157421][T15074] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 646.173789][T15074] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 646.897993][T19809] netlink: 548 bytes leftover after parsing attributes in process `syz.1.4325'. [ 647.205121][T15074] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 647.378572][T15074] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 647.395129][T15074] usb 3-1: New USB device strings: Mfr=0, Product=229, SerialNumber=0 [ 647.403532][T15074] usb 3-1: Product: syz [ 647.419692][T15074] usb 3-1: config 0 descriptor?? [ 647.438052][T15074] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 647.457102][T15074] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 647.902815][T19886] overlayfs: failed to clone upperpath [ 648.024766][T19895] netlink: 'syz.4.4353': attribute type 29 has an invalid length. [ 648.197144][T19900] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4355'. [ 648.439520][ T1227] usb 1-1: USB disconnect, device number 118 [ 648.634965][T19915] syzkaller1: entered promiscuous mode [ 648.648501][T19915] syzkaller1: entered allmulticast mode [ 648.867713][T19891] netlink: 548 bytes leftover after parsing attributes in process `syz.4.4353'. [ 648.947820][ T1227] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 649.129490][ T1227] usb 2-1: Using ep0 maxpacket: 16 [ 649.138144][ T1227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.151248][ T1227] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 649.165539][ T1227] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 649.175152][ T1227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.186752][ T1227] usb 2-1: config 0 descriptor?? [ 649.354318][T15074] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 649.525214][T15074] usb 1-1: Using ep0 maxpacket: 32 [ 649.532247][T15074] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 649.541027][T15074] usb 1-1: config 0 has no interface number 0 [ 649.547307][T15074] usb 1-1: config 0 interface 184 has no altsetting 0 [ 649.556846][T15074] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 649.566064][T15074] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.574399][T15074] usb 1-1: Product: syz [ 649.578635][T15074] usb 1-1: Manufacturer: syz [ 649.583248][T15074] usb 1-1: SerialNumber: syz [ 649.591332][T15074] usb 1-1: config 0 descriptor?? [ 649.598777][T15074] smsc75xx v1.0.0 [ 649.850934][T19917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.861171][T19917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.030893][T15074] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 650.049186][T15074] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 650.095502][ T24] usb 3-1: USB disconnect, device number 58 [ 650.114060][ T24] ftdi_sio 3-1:0.0: device disconnected [ 650.128892][T15074] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 650.149327][T15074] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 650.258592][T19943] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4374'. [ 651.525025][ T24] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 651.640276][T19964] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4381'. [ 651.685517][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 651.692498][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 651.703168][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 651.721867][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 651.732186][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.741784][ T24] usb 3-1: Product: syz [ 651.746050][ T24] usb 3-1: Manufacturer: syz [ 651.751040][ T24] usb 3-1: SerialNumber: syz [ 651.917450][ T1227] usbhid 2-1:0.0: can't add hid device: -71 [ 651.926603][ T1227] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 651.937975][ T1227] usb 2-1: USB disconnect, device number 75 [ 651.978682][ T24] usb 3-1: 0:2 : does not exist [ 652.004678][ T24] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 652.046941][ T24] usb 3-1: USB disconnect, device number 59 [ 652.075079][T17346] udevd[17346]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 652.329086][ T5828] usb 1-1: USB disconnect, device number 119 [ 652.362823][T19981] affs: Unknown parameter 'ota' [ 652.401937][ T1227] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 652.563901][ T1227] usb 2-1: config 6 has an invalid interface number: 137 but max is 0 [ 652.572131][ T1227] usb 2-1: config 6 has an invalid interface descriptor of length 2, skipping [ 652.581380][ T1227] usb 2-1: config 6 has no interface number 0 [ 652.587597][ T1227] usb 2-1: config 6 interface 137 altsetting 6 endpoint 0x5 has invalid maxpacket 544, setting to 64 [ 652.598825][ T1227] usb 2-1: config 6 interface 137 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 652.612028][ T1227] usb 2-1: config 6 interface 137 has no altsetting 0 [ 652.622435][ T1227] usb 2-1: New USB device found, idVendor=2df3, idProduct=9d03, bcdDevice=70.1a [ 652.632136][ T1227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.640652][ T1227] usb 2-1: Product: syz [ 652.644835][ T1227] usb 2-1: Manufacturer: syz [ 652.649525][ T1227] usb 2-1: SerialNumber: syz [ 652.657733][T19979] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 652.701879][ T5828] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 652.872370][ T5828] usb 1-1: Using ep0 maxpacket: 32 [ 652.882410][ T5828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 36096, setting to 64 [ 652.893894][ T5828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 652.907144][ T1227] option 2-1:6.137: GSM modem (1-port) converter detected [ 652.917184][ T5828] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 652.928793][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.937979][ T1227] usb 2-1: USB disconnect, device number 76 [ 652.945752][ T5828] usb 1-1: Product: syz [ 652.951003][ T1227] option 2-1:6.137: device disconnected [ 652.957914][ T5828] usb 1-1: Manufacturer: syz [ 652.962577][ T5828] usb 1-1: SerialNumber: syz [ 652.973746][ T5828] usb 1-1: config 0 descriptor?? [ 652.984588][ T5828] usb 1-1: no audio or video endpoints found [ 653.109568][ T24] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 653.197540][T19998] netlink: 184 bytes leftover after parsing attributes in process `syz.4.4394'. [ 653.201675][T19981] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 653.294988][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 653.304433][ T24] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 653.316037][ T24] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 653.327612][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 653.337059][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 653.350556][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.359203][ T24] usb 3-1: Product: ည [ 653.363519][ T24] usb 3-1: SerialNumber: 奴離細鲅쬘çᓑ郅ﱨ휀옣殃䤥㣢畣ê“äŸî©®æº¡à¥®ê‰¨å¸¾à¬˜æˆ­å² â½­ëœ¶í‹”騕민èˆï¬ è±“䖞䳨ꊓϥ꧋꿌픳孒ç™é¹©ê¹à­æŠ¡èƒˆä²œé†”ã—Š [ 653.387584][T19990] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 653.395691][T19990] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 653.627173][ T24] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 653.644129][ T24] usb 3-1: USB disconnect, device number 60 [ 653.770746][T15074] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 653.784830][ T1227] usb 1-1: USB disconnect, device number 120 [ 653.945142][T15074] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.955340][T15074] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 653.967327][T15074] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 653.976800][T15074] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.985341][T15074] usb 2-1: Product: syz [ 653.989583][T15074] usb 2-1: Manufacturer: syz [ 653.994184][T15074] usb 2-1: SerialNumber: syz [ 654.001623][T15074] usb 2-1: config 0 descriptor?? [ 654.134301][ T24] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 654.297634][ T24] usb 3-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 1024 [ 654.311352][ T24] usb 3-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 654.326898][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 654.340180][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 654.354209][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.362872][ T24] usb 3-1: Product: syz [ 654.367122][ T24] usb 3-1: Manufacturer: syz [ 654.372498][ T24] usb 3-1: SerialNumber: syz [ 654.385616][T19990] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 654.424691][T20027] fuse: Bad value for 'fd' [ 654.636459][ T24] usb 3-1: USB disconnect, device number 61 [ 655.202818][T20045] syzkaller1: entered promiscuous mode [ 655.209542][T20045] syzkaller1: entered allmulticast mode [ 655.299836][ T24] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 655.352926][T20047] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4411'. [ 655.461817][ T24] usb 1-1: config index 0 descriptor too short (expected 65183, got 72) [ 655.473188][ T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 655.482411][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.490434][ T24] usb 1-1: Product: syz [ 655.494703][ T24] usb 1-1: Manufacturer: syz [ 655.499335][ T24] usb 1-1: SerialNumber: syz [ 655.509578][ T24] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 655.528248][T15076] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 655.674233][ T1227] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 655.747649][T20043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.756785][T20043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.766513][T20043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.775524][T20043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.785935][ T5828] usb 1-1: USB disconnect, device number 121 [ 655.845402][ T1227] usb 3-1: Using ep0 maxpacket: 16 [ 655.852046][ T1227] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 655.860240][ T1227] usb 3-1: config 0 has no interface number 0 [ 655.866368][ T1227] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x5D, changing to 0xD [ 655.878076][ T1227] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 655.889457][ T1227] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 655.898722][ T1227] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 655.906885][ T1227] usb 3-1: Product: syz [ 655.911138][ T1227] usb 3-1: SerialNumber: syz [ 655.917663][ T1227] usb 3-1: config 0 descriptor?? [ 655.925581][ T1227] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 656.143032][ T1227] usb 3-1: USB disconnect, device number 62 [ 656.615282][T15076] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 656.622362][T15076] ath9k_htc: Failed to initialize the device [ 656.629174][ T5828] usb 1-1: ath9k_htc: USB layer deinitialized [ 656.745646][ T24] usb 2-1: USB disconnect, device number 77 [ 656.946705][ T5828] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 656.968201][T15074] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 657.107131][ T5828] usb 1-1: Using ep0 maxpacket: 8 [ 657.107148][T15074] usb 3-1: device descriptor read/64, error -71 [ 657.114298][ T5828] usb 1-1: config index 0 descriptor too short (expected 241, got 72) [ 657.126803][ T5828] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 657.138773][ T5828] usb 1-1: New USB device found, idVendor=2357, idProduct=0109, bcdDevice=bd.da [ 657.150465][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.170373][ T5828] usb 1-1: config 0 descriptor?? [ 657.374525][T15074] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 657.460019][T15076] usb 2-1: new low-speed USB device number 78 using dummy_hcd [ 657.513610][T15074] usb 3-1: device descriptor read/64, error -71 [ 657.609861][T15076] usb 2-1: device descriptor read/64, error -71 [ 657.631669][T15074] usb usb3-port1: attempt power cycle [ 657.866521][T15076] usb 2-1: new low-speed USB device number 79 using dummy_hcd [ 658.005447][T15074] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 658.013133][T15076] usb 2-1: device descriptor read/64, error -71 [ 658.037920][T15074] usb 3-1: device descriptor read/8, error -71 [ 658.134356][T15076] usb usb2-port1: attempt power cycle [ 658.294270][T15074] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 658.316323][T15074] usb 3-1: device descriptor read/8, error -71 [ 658.433769][T15074] usb usb3-port1: unable to enumerate USB device [ 658.488104][T15074] usb 1-1: USB disconnect, device number 122 [ 658.498752][T15076] usb 2-1: new low-speed USB device number 80 using dummy_hcd [ 658.530821][T15076] usb 2-1: device descriptor read/8, error -71 [ 658.586154][T20084] binder: BINDER_SET_CONTEXT_MGR already set [ 658.592181][T20084] binder: 20083:20084 ioctl 4018620d 200000000200 returned -16 [ 658.786133][T15076] usb 2-1: new low-speed USB device number 81 using dummy_hcd [ 658.814148][T15076] usb 2-1: device descriptor read/8, error -71 [ 658.936243][T15076] usb usb2-port1: unable to enumerate USB device [ 658.992307][T20107] netlink: 'syz.4.4435': attribute type 29 has an invalid length. [ 659.002575][T20107] netlink: 'syz.4.4435': attribute type 29 has an invalid length. [ 659.012073][T20107] netlink: 500 bytes leftover after parsing attributes in process `syz.4.4435'. [ 659.096294][ T5828] usb 1-1: new full-speed USB device number 123 using dummy_hcd [ 659.258365][ T5828] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 659.268554][ T5828] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 659.279712][ T5828] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 659.288840][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.296833][ T5828] usb 1-1: Product: syz [ 659.301301][ T5828] usb 1-1: Manufacturer: syz [ 659.305912][ T5828] usb 1-1: SerialNumber: syz [ 659.312513][ T5828] usb 1-1: config 0 descriptor?? [ 660.358394][T20136] netlink: 'syz.2.4444': attribute type 29 has an invalid length. [ 660.369262][T20136] netlink: 'syz.2.4444': attribute type 29 has an invalid length. [ 660.377897][T20136] netlink: 500 bytes leftover after parsing attributes in process `syz.2.4444'. [ 660.631465][T20152] netlink: 'syz.4.4451': attribute type 20 has an invalid length. [ 660.641133][T20152] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4451'. [ 660.716227][T20158] netlink: 'syz.2.4453': attribute type 29 has an invalid length. [ 660.731603][T20158] netlink: 'syz.2.4453': attribute type 29 has an invalid length. [ 660.740974][T20158] netlink: 500 bytes leftover after parsing attributes in process `syz.2.4453'. [ 660.782726][T20162] netlink: 'syz.2.4455': attribute type 39 has an invalid length. [ 661.053997][ T5828] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 661.202909][ T5828] usb 3-1: device descriptor read/64, error -71 [ 661.470244][ T5828] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 661.609245][ T5828] usb 3-1: device descriptor read/64, error -71 [ 661.727117][ T5828] usb usb3-port1: attempt power cycle [ 662.048421][ T1227] usb 1-1: USB disconnect, device number 123 [ 662.090616][ T5828] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 662.114234][ T5828] usb 3-1: device descriptor read/8, error -71 [ 662.368481][ T5828] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 662.396266][T20177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4460'. [ 662.406040][ T5828] usb 3-1: device descriptor read/8, error -71 [ 662.406624][T20177] netlink: 'syz.0.4460': attribute type 13 has an invalid length. [ 662.449732][T20179] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4461'. [ 662.526944][ T30] audit: type=1326 audit(1762256702.591:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20182 comm="syz.0.4463" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f12a5b8f6c9 code=0x0 [ 662.529364][ T5828] usb usb3-port1: unable to enumerate USB device [ 663.726596][ T5918] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 663.908350][ T5918] usb 1-1: Using ep0 maxpacket: 16 [ 663.915473][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.926983][ T5918] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 663.940216][ T5918] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 663.949488][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.960971][ T5918] usb 1-1: config 0 descriptor?? [ 664.453912][T15076] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 664.617078][T15076] usb 3-1: config index 0 descriptor too short (expected 65183, got 72) [ 664.627734][T15076] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 664.637283][T15074] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 664.644922][T15076] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.653854][T15076] usb 3-1: Product: syz [ 664.659468][T15076] usb 3-1: Manufacturer: syz [ 664.664520][T15076] usb 3-1: SerialNumber: syz [ 664.683942][T15076] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 664.700698][ T24] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 664.815788][T20203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4471'. [ 664.817451][T15074] usb 2-1: Using ep0 maxpacket: 8 [ 664.850452][T15074] usb 2-1: unable to get BOS descriptor or descriptor too short [ 664.867812][T15074] usb 2-1: config 1 has an invalid interface number: 172 but max is 0 [ 664.876235][T15074] usb 2-1: config 1 has no interface number 0 [ 664.883006][T15074] usb 2-1: config 1 interface 172 has no altsetting 0 [ 664.893314][T15074] usb 2-1: string descriptor 0 read error: -22 [ 664.899707][T15074] usb 2-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=b0.f3 [ 664.911868][T15074] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.929158][T20192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.931096][T15074] peak_usb 2-1:1.172: probe with driver peak_usb failed with error 172 [ 664.952855][T20192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.968873][T20192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.978334][T20192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.987801][T20192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.997289][T20192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.025176][T15074] usb 3-1: USB disconnect, device number 71 [ 665.144423][ T5828] usb 2-1: USB disconnect, device number 82 [ 665.854790][ T24] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 665.861991][ T24] ath9k_htc: Failed to initialize the device [ 665.868930][T15074] usb 3-1: ath9k_htc: USB layer deinitialized [ 666.015079][ T5828] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 666.175468][ T5828] usb 2-1: Using ep0 maxpacket: 32 [ 666.185677][ T5828] usb 2-1: unable to get BOS descriptor or descriptor too short [ 666.196928][T15074] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 666.197586][ T5828] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 666.216056][ T5828] usb 2-1: can't read configurations, error -71 [ 666.357258][T15074] usb 3-1: Using ep0 maxpacket: 8 [ 666.363993][T15074] usb 3-1: config index 0 descriptor too short (expected 241, got 72) [ 666.372388][T15074] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 666.384021][T15074] usb 3-1: New USB device found, idVendor=2357, idProduct=0109, bcdDevice=bd.da [ 666.393195][T15074] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.404817][T15074] usb 3-1: config 0 descriptor?? [ 666.706009][ T5918] usbhid 1-1:0.0: can't add hid device: -71 [ 666.715048][ T5918] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 666.729667][ T5918] usb 1-1: USB disconnect, device number 124 [ 666.786603][T20220] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 667.267802][T20244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4485'. [ 667.579121][T20260] Malformed UNC in devname [ 667.579121][T20260] [ 667.586353][T20260] CIFS: VFS: Malformed UNC in devname [ 667.728370][ T5828] usb 3-1: USB disconnect, device number 72 [ 667.844083][T15074] usb 1-1: new full-speed USB device number 125 using dummy_hcd [ 667.854648][ T24] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 668.006316][T15074] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 668.014530][T15074] usb 1-1: config 0 has no interface number 0 [ 668.021244][T15074] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 668.034017][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 668.050017][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 668.060634][T15074] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 668.070006][ T24] usb 2-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 668.080455][T15074] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.088448][T15074] usb 1-1: Product: syz [ 668.092775][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.101734][T15074] usb 1-1: Manufacturer: syz [ 668.106354][T15074] usb 1-1: SerialNumber: syz [ 668.111997][ T24] usb 2-1: config 0 descriptor?? [ 668.123695][T15074] usb 1-1: config 0 descriptor?? [ 668.130826][T20260] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 668.140340][T15074] usb-storage 1-1:0.20: USB Mass Storage device detected [ 668.150170][T15074] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 668.304575][ T5828] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 668.354209][T20260] kernel profiling enabled (shift: 6) [ 668.463952][ T5828] usb 3-1: Using ep0 maxpacket: 8 [ 668.470657][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 668.482146][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 668.491959][ T5828] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 668.501706][ T5828] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 49 [ 668.511701][ T5828] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 668.520819][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.531466][ T5828] usb 3-1: config 0 descriptor?? [ 668.537662][T20269] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 668.563867][ T24] chicony 0003:04F2:1421.0024: reserved main item tag 0xd [ 668.571438][ T24] chicony 0003:04F2:1421.0024: item fetching failed at offset 4/5 [ 668.581397][ T24] chicony 0003:04F2:1421.0024: Chicony hid parse failed: -22 [ 668.590262][ T24] chicony 0003:04F2:1421.0024: probe with driver chicony failed with error -22 [ 668.745081][T20273] netlink: 'syz.4.4496': attribute type 2 has an invalid length. [ 668.772252][ T5830] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 668.772815][ C0] Bluetooth: hci6: Unexpected continuation: 1 bytes [ 668.786628][ T5830] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 668.793604][ T5830] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 668.802161][ T5830] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 668.809091][ T5830] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 668.815954][ T5830] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 668.822966][ T5830] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 668.829942][ T5830] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 668.836841][ T5830] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 668.843821][ T5830] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 668.850889][ T5830] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 668.857768][ T5830] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 668.864693][ T5830] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 668.871617][ T5830] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 668.878496][ T5830] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 668.885409][ T5830] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 668.892331][ T5830] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 668.899189][ T5830] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 668.906102][ T5830] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 668.912952][ T5830] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 668.920412][ T5830] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 668.927309][ T5830] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 668.934159][ T5830] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 668.941180][ T5830] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 668.948117][ T5830] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 668.954968][ T5830] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 668.961872][ T5830] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 668.968793][ T5830] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 668.975646][ T5830] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 669.591906][ T24] usb 2-1: USB disconnect, device number 85 [ 669.596125][ T5828] usb 3-1: USB disconnect, device number 73 [ 669.604269][ T52] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 669.669988][T20278] nfs: Unknown parameter 'intrRï 1~·ü' [ 670.570662][ T24] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 670.742682][ T24] usb 2-1: config index 0 descriptor too short (expected 65183, got 72) [ 670.761259][ T24] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 670.771590][T15074] scsi host1: usb-storage 1-1:0.20 [ 670.798685][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.810043][T15074] usb 1-1: USB disconnect, device number 125 [ 670.818289][ T24] usb 2-1: Product: syz [ 670.828398][ T24] usb 2-1: Manufacturer: syz [ 670.833995][ T24] usb 2-1: SerialNumber: syz [ 670.862732][ T24] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 670.878256][T20305] syzkaller1: entered promiscuous mode [ 670.878278][T20305] syzkaller1: entered allmulticast mode [ 670.888997][T15070] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 671.128369][T20292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.160613][T20292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.191189][T20292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.210773][T20292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.234136][T20292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.260047][T20292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.279507][ T5828] usb 2-1: USB disconnect, device number 86 [ 671.313769][T15074] IPVS: starting estimator thread 0... [ 671.344256][T20318] 9p: Bad value for 'rfdno' [ 671.415710][T20321] IPVS: using max 39 ests per chain, 93600 per kthread [ 671.485017][T20329] syzkaller1: entered promiscuous mode [ 671.491308][T20329] syzkaller1: entered allmulticast mode [ 671.683062][ T10] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 671.846400][ T10] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 671.855773][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.866355][ T10] usb 3-1: config 0 descriptor?? [ 672.025293][T15070] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 672.032381][T15070] ath9k_htc: Failed to initialize the device [ 672.059756][ T5828] usb 2-1: ath9k_htc: USB layer deinitialized [ 672.078550][ T5918] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 672.241531][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.252581][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.262768][ T5918] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 672.272192][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.289129][ T5918] usb 1-1: config 0 descriptor?? [ 672.326882][ T10] usb 3-1: Cannot set MAC address [ 672.341134][ T10] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 672.357804][ T10] usb 3-1: USB disconnect, device number 74 [ 672.377899][ T5828] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 672.538353][ T5828] usb 2-1: Using ep0 maxpacket: 8 [ 672.545102][ T5828] usb 2-1: config index 0 descriptor too short (expected 241, got 72) [ 672.553414][ T5828] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 672.565093][ T5828] usb 2-1: New USB device found, idVendor=2357, idProduct=0109, bcdDevice=bd.da [ 672.574596][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.584758][ T5828] usb 2-1: config 0 descriptor?? [ 672.746336][ T5918] keytouch 0003:0926:3333.0025: fixing up Keytouch IEC report descriptor [ 672.760823][ T5918] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0025/input/input89 [ 672.869531][ T5918] keytouch 0003:0926:3333.0025: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 673.511512][ T5918] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 673.703963][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 673.721172][ T5918] usb 3-1: config 0 has an invalid interface number: 211 but max is 0 [ 673.735262][ T5918] usb 3-1: config 0 has no interface number 0 [ 673.748943][ T5918] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db11, bcdDevice= e.2d [ 673.760910][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.769105][ T5918] usb 3-1: Product: syz [ 673.773564][ T5918] usb 3-1: Manufacturer: syz [ 673.778212][ T5918] usb 3-1: SerialNumber: syz [ 673.787755][ T5918] usb 3-1: config 0 descriptor?? [ 673.802368][ T5918] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (TH7579)' in warm state. [ 673.811435][ T5918] dvb-usb: bulk message failed: -22 (2/0) [ 673.822177][ T5918] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 673.833056][ T5918] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (TH7579)) [ 673.842056][ T5918] usb 3-1: media controller created [ 673.866165][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 673.892789][ T5918] cxusb: set interface failed [ 673.898740][ T5918] dvb-usb: bulk message failed: -22 (1/0) [ 673.927782][T15070] usb 2-1: USB disconnect, device number 87 [ 673.969107][ T5918] DVB: Unable to find symbol mt352_attach() [ 673.978156][ T5918] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (TH7579)' [ 674.026721][T20370] dlm: no local IP address has been set [ 674.032793][T20370] dlm: cannot start dlm midcomms -107 [ 674.049055][T20407] netlink: 'syz.0.4544': attribute type 3 has an invalid length. [ 674.058176][T20370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.067646][ T5918] rc_core: IR keymap rc-dvico-portable not found [ 674.068778][T20370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.074035][ T5918] Registered IR keymap rc-empty [ 674.100263][ T5828] usb 1-1: reset high-speed USB device number 126 using dummy_hcd [ 674.119060][ T5918] rc rc0: DViCO FusionHDTV DVB-T USB (TH7579) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 674.134552][ T5918] input: DViCO FusionHDTV DVB-T USB (TH7579) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input90 [ 674.156187][ T5918] dvb-usb: schedule remote query interval to 100 msecs. [ 674.174436][ T5918] dvb-usb: DViCO FusionHDTV DVB-T USB (TH7579) successfully initialized and connected. [ 674.202232][ T5918] usb 3-1: USB disconnect, device number 75 [ 674.249403][ T5828] usb 1-1: device descriptor read/64, error -32 [ 674.256176][T20418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.280890][T20418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.287935][ T5918] dvb-usb: DViCO FusionHDTV DVB-T USB (TH7579) successfully deinitialized and disconnected. [ 674.538593][ T5828] usb 1-1: reset high-speed USB device number 126 using dummy_hcd [ 674.576626][T20436] FAULT_INJECTION: forcing a failure. [ 674.576626][T20436] name failslab, interval 1, probability 0, space 0, times 0 [ 674.589633][T20436] CPU: 1 UID: 0 PID: 20436 Comm: syz.1.4557 Not tainted syzkaller #0 PREEMPT(full) [ 674.589658][T20436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 674.589671][T20436] Call Trace: [ 674.589679][T20436] [ 674.589686][T20436] dump_stack_lvl+0x189/0x250 [ 674.589705][T20436] ? __pfx____ratelimit+0x10/0x10 [ 674.589718][T20436] ? __pfx_dump_stack_lvl+0x10/0x10 [ 674.589730][T20436] ? __pfx__printk+0x10/0x10 [ 674.589745][T20436] ? __pfx___might_resched+0x10/0x10 [ 674.589755][T20436] ? fs_reclaim_acquire+0x7d/0x100 [ 674.589770][T20436] should_fail_ex+0x414/0x560 [ 674.589787][T20436] should_failslab+0xa8/0x100 [ 674.589800][T20436] __kmalloc_noprof+0xdf/0x800 [ 674.589811][T20436] ? tomoyo_encode+0x28b/0x550 [ 674.589824][T20436] tomoyo_encode+0x28b/0x550 [ 674.589837][T20436] tomoyo_realpath_from_path+0x58d/0x5d0 [ 674.589848][T20436] ? tomoyo_domain+0xd8/0x130 [ 674.589861][T20436] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 674.589874][T20436] tomoyo_path_number_perm+0x1e8/0x5a0 [ 674.589889][T20436] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 674.589923][T20436] ? __fget_files+0x2a/0x420 [ 674.589935][T20436] ? __fget_files+0x3a0/0x420 [ 674.589943][T20436] ? __fget_files+0x2a/0x420 [ 674.589954][T20436] security_file_ioctl+0xcb/0x2d0 [ 674.589968][T20436] __se_sys_ioctl+0x47/0x170 [ 674.589982][T20436] do_syscall_64+0xfa/0xfa0 [ 674.589994][T20436] ? lockdep_hardirqs_on+0x9c/0x150 [ 674.590008][T20436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.590017][T20436] ? clear_bhb_loop+0x60/0xb0 [ 674.590030][T20436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.590039][T20436] RIP: 0033:0x7f77ab78f6c9 [ 674.590050][T20436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 674.590059][T20436] RSP: 002b:00007f77ac5db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 674.590071][T20436] RAX: ffffffffffffffda RBX: 00007f77ab9e5fa0 RCX: 00007f77ab78f6c9 [ 674.590078][T20436] RDX: 00002000000000c0 RSI: 00000000000089f1 RDI: 0000000000000003 [ 674.590085][T20436] RBP: 00007f77ac5db090 R08: 0000000000000000 R09: 0000000000000000 [ 674.590091][T20436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 674.590097][T20436] R13: 00007f77ab9e6038 R14: 00007f77ab9e5fa0 R15: 00007ffcf30b0f58 [ 674.590114][T20436] [ 674.590127][T20436] ERROR: Out of memory at tomoyo_realpath_from_path. [ 674.698485][ T5828] usb 1-1: device descriptor read/64, error -32 [ 674.896509][T20444] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 674.993163][T20448] fuse: Bad value for 'user_id' [ 674.998249][T20448] fuse: Bad value for 'user_id' [ 675.128350][ T5828] usb 1-1: reset high-speed USB device number 126 using dummy_hcd [ 675.141421][T20459] overlayfs: failed to resolve './file0': -2 [ 675.158924][ T5828] usb 1-1: device descriptor read/8, error -32 [ 675.425967][ T5828] usb 1-1: reset high-speed USB device number 126 using dummy_hcd [ 675.457962][ T5828] usb 1-1: device descriptor read/8, error -32 [ 675.576669][ T5828] raw-gadget.5 gadget.0: failed to queue suspend event [ 675.594433][ T10] usb 1-1: USB disconnect, device number 126 [ 675.655868][ T10] raw-gadget.5 gadget.0: failed to queue reset event [ 675.746659][ T10] raw-gadget.5 gadget.0: failed to queue resume event [ 675.749727][T15070] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 675.813034][ T10] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 675.821007][ C0] raw-gadget.5 gadget.0: ignoring, device is not running [ 675.828339][ T10] raw-gadget.5 gadget.0: failed to queue reset event [ 675.907022][ T10] raw-gadget.5 gadget.0: failed to queue resume event [ 675.920528][T15070] usb 3-1: Using ep0 maxpacket: 16 [ 675.929230][T15070] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.940506][T15070] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 675.954444][T15070] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 675.963585][T15070] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.974711][T15070] usb 3-1: config 0 descriptor?? [ 675.982943][ T10] usb 1-1: device descriptor read/64, error -32 [ 676.099925][ T10] raw-gadget.5 gadget.0: failed to queue suspend event [ 676.107355][ T10] raw-gadget.5 gadget.0: failed to queue reset event [ 676.185230][ T10] raw-gadget.5 gadget.0: failed to queue resume event [ 676.257178][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 676.265185][ C0] raw-gadget.5 gadget.0: ignoring, device is not running [ 676.272453][ T10] raw-gadget.5 gadget.0: failed to queue reset event [ 676.345297][ T5918] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 676.355067][ T10] raw-gadget.5 gadget.0: failed to queue resume event [ 676.430884][ T10] usb 1-1: device descriptor read/64, error -32 [ 676.524210][ T5918] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 676.537839][ T5918] usb 2-1: config 0 has no interface number 0 [ 676.544022][ T5918] usb 2-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 676.547178][T20520] dummy0: entered promiscuous mode [ 676.568671][T20520] dummy0: entered allmulticast mode [ 676.568786][ T10] raw-gadget.5 gadget.0: failed to queue suspend event [ 676.594601][ T5918] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 676.607123][ T10] usb usb1-port1: attempt power cycle [ 676.623336][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.631536][ T10] raw-gadget.5 gadget.0: failed to queue disconnect event [ 676.639885][ T5918] usb 2-1: Product: syz [ 676.644757][ T10] raw-gadget.5 gadget.0: failed to queue reset event [ 676.651927][ T5918] usb 2-1: Manufacturer: syz [ 676.659162][ T5918] usb 2-1: SerialNumber: syz [ 676.671865][ T5918] usb 2-1: config 0 descriptor?? [ 676.675795][T20523] overlayfs: failed to clone lowerpath [ 676.690352][T20505] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 676.712863][ T5918] plusb 2-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 32:da:90:f0:48:a1 [ 676.731045][ T10] raw-gadget.5 gadget.0: failed to queue resume event [ 676.748433][ T10] raw-gadget.5 gadget.0: failed to queue reset event [ 676.922926][T20532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4592'. [ 676.987215][ T10] raw-gadget.5 gadget.0: failed to queue resume event [ 677.010982][T20537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.023622][T20537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.035491][T20537] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4593'. [ 677.067024][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 677.097184][ C0] raw-gadget.5 gadget.0: ignoring, device is not running [ 677.104952][ T10] usb 1-1: device descriptor read/8, error -32 [ 677.188712][T15074] IPVS: starting estimator thread 0... [ 677.223543][ T10] raw-gadget.5 gadget.0: failed to queue suspend event [ 677.230817][ T10] raw-gadget.5 gadget.0: failed to queue reset event [ 677.287726][T20546] IPVS: using max 35 ests per chain, 84000 per kthread [ 677.307794][ T10] raw-gadget.5 gadget.0: failed to queue resume event [ 677.383122][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 677.404275][ C0] raw-gadget.5 gadget.0: ignoring, device is not running [ 677.411471][ T10] usb 1-1: device descriptor read/8, error -32 [ 677.543055][ T10] raw-gadget.5 gadget.0: failed to queue suspend event [ 677.551308][ T10] usb usb1-port1: unable to enumerate USB device [ 677.692927][T20558] input: syz0 as /devices/virtual/input/input92 [ 678.118978][T20575] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4597'. [ 678.178119][T20580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.187455][T20580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.447731][T20592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4604'. [ 678.686250][T20606] 9p: Bad value for 'rfdno' [ 678.768577][T15070] usbhid 3-1:0.0: can't add hid device: -71 [ 678.779672][T15070] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 678.827710][T15070] usb 3-1: USB disconnect, device number 76 [ 678.836996][ T30] audit: type=1400 audit(1762256717.843:21): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=20611 comm="syz.2.4611" [ 678.892971][T20610] block device autoloading is deprecated and will be removed. [ 679.177430][T20633] netlink: 'syz.1.4618': attribute type 29 has an invalid length. [ 679.425156][T15070] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 679.585681][T15070] usb 3-1: Using ep0 maxpacket: 16 [ 679.600860][T15070] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 679.612425][T15070] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 679.626256][T15070] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 679.642367][T15070] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.662873][T15070] usb 3-1: config 0 descriptor?? [ 679.734302][T20639] loop6: detected capacity change from 0 to 524287999 [ 680.050658][T20633] netlink: 'syz.1.4618': attribute type 29 has an invalid length. [ 680.061138][T20633] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4618'. [ 680.472728][T20651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.485905][T20651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.798124][T20657] syzkaller1: entered promiscuous mode [ 680.803666][T20657] syzkaller1: entered allmulticast mode [ 680.979014][T20659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.988097][T20659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.998583][T20659] xt_l2tp: missing protocol rule (udp|l2tpip) [ 682.044461][T20679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.061170][T20679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.389230][T15070] usbhid 3-1:0.0: can't add hid device: -71 [ 682.396530][T15070] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 682.411237][T15070] usb 3-1: USB disconnect, device number 77 [ 682.579530][T20687] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4638'. [ 682.706171][T20693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.724639][T20693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.355490][T20700] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4644'. [ 683.601636][T20712] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4648'. [ 683.789394][T20724] netlink: 212 bytes leftover after parsing attributes in process `syz.0.4652'. [ 683.870577][T20724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.881662][T20724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.132589][T20739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.143522][T20739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.157734][T20739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.169575][T20739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.178655][ T10] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 684.344539][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 684.367271][ T10] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 684.375494][ T10] usb 3-1: config 0 has no interface number 0 [ 684.397702][ T10] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 684.410942][T20749] fuse: blksize only supported for fuseblk [ 684.425077][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 684.440918][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.448953][ T10] usb 3-1: Product: syz [ 684.465030][ T10] usb 3-1: Manufacturer: syz [ 684.469721][ T10] usb 3-1: SerialNumber: syz [ 684.502285][ T10] usb 3-1: config 0 descriptor?? [ 684.518436][T20732] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 684.725679][T20759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.734780][T20759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.766679][T20732] cgroup: Unknown subsys name 'appraise' [ 684.779357][T20732] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 684.799103][T20732] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 685.041082][ T10] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 685.056446][ T10] asix 3-1:0.188: probe with driver asix failed with error -71 [ 685.068035][ T10] usb 3-1: USB disconnect, device number 78 [ 685.553784][T20775] FAULT_INJECTION: forcing a failure. [ 685.553784][T20775] name failslab, interval 1, probability 0, space 0, times 0 [ 685.566886][T20775] CPU: 0 UID: 0 PID: 20775 Comm: syz.0.4668 Not tainted syzkaller #0 PREEMPT(full) [ 685.566911][T20775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 685.566923][T20775] Call Trace: [ 685.566931][T20775] [ 685.566939][T20775] dump_stack_lvl+0x189/0x250 [ 685.566965][T20775] ? __pfx____ratelimit+0x10/0x10 [ 685.566986][T20775] ? __pfx_dump_stack_lvl+0x10/0x10 [ 685.567007][T20775] ? __pfx__printk+0x10/0x10 [ 685.567033][T20775] ? __pfx___might_resched+0x10/0x10 [ 685.567057][T20775] should_fail_ex+0x414/0x560 [ 685.567086][T20775] should_failslab+0xa8/0x100 [ 685.567109][T20775] __kmalloc_noprof+0xdf/0x800 [ 685.567125][T20775] ? kfree+0x4d/0x6d0 [ 685.567139][T20775] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 685.567164][T20775] tomoyo_realpath_from_path+0xe3/0x5d0 [ 685.567184][T20775] ? tomoyo_domain+0xd8/0x130 [ 685.567208][T20775] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 685.567238][T20775] tomoyo_path_number_perm+0x1e8/0x5a0 [ 685.567263][T20775] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 685.567326][T20775] ? __fget_files+0x2a/0x420 [ 685.567347][T20775] ? __fget_files+0x3a0/0x420 [ 685.567362][T20775] ? __fget_files+0x2a/0x420 [ 685.567382][T20775] security_file_ioctl+0xcb/0x2d0 [ 685.567406][T20775] __se_sys_ioctl+0x47/0x170 [ 685.567430][T20775] do_syscall_64+0xfa/0xfa0 [ 685.567453][T20775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.567470][T20775] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 685.567489][T20775] ? clear_bhb_loop+0x60/0xb0 [ 685.567509][T20775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.567527][T20775] RIP: 0033:0x7f12a5b8f6c9 [ 685.567544][T20775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 685.567559][T20775] RSP: 002b:00007f12a695f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 685.567578][T20775] RAX: ffffffffffffffda RBX: 00007f12a5de5fa0 RCX: 00007f12a5b8f6c9 [ 685.567592][T20775] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 685.567603][T20775] RBP: 00007f12a695f090 R08: 0000000000000000 R09: 0000000000000000 [ 685.567614][T20775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.567625][T20775] R13: 00007f12a5de6038 R14: 00007f12a5de5fa0 R15: 00007ffcf4a82af8 [ 685.567657][T20775] [ 685.567666][T20775] ERROR: Out of memory at tomoyo_realpath_from_path. [ 686.199079][T20798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.213646][T20798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.365120][T20806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.374211][T20806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.863172][T20813] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4682'. [ 686.875211][T20813] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4682'. [ 686.884326][T20813] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4682'. [ 686.956936][T20815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.972271][T20815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.003019][T20815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.016467][T20815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.036891][ C1] sd 0:0:1:0: [sda] tag#2893 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 687.047411][ C1] sd 0:0:1:0: [sda] tag#2893 CDB: Read(6) 08 00 00 00 10 00 00 00 c0 02 00 00 [ 687.276182][T20829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.289797][T20829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.533145][ T10] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 687.694946][T20838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.703605][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 687.706792][T20838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.711784][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 687.741869][ T10] usb 3-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42 [ 687.751696][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.760581][ T10] usb 3-1: Product: syz [ 687.764874][ T10] usb 3-1: Manufacturer: syz [ 687.769893][ T10] usb 3-1: SerialNumber: syz [ 687.783471][ T10] usb 3-1: config 0 descriptor?? [ 688.010613][ T10] ums_eneub6250 3-1:0.0: USB Mass Storage device detected [ 688.062966][ T10] usb 3-1: USB disconnect, device number 79 [ 688.508700][T20866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.517959][T20866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.564074][T20872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.592565][T20870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.601537][T20872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.611810][T20870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.626473][T20872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.652791][T20872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.124772][T15070] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 689.284863][T15070] usb 3-1: Using ep0 maxpacket: 16 [ 689.296778][T15070] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 689.320920][T15070] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 689.341026][T15070] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 689.360100][T15070] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.370220][T15070] usb 3-1: Product: syz [ 689.375803][T15070] usb 3-1: Manufacturer: syz [ 689.382797][T15070] usb 3-1: SerialNumber: syz [ 689.411481][T20885] syzkaller1: entered promiscuous mode [ 689.417328][T20885] syzkaller1: entered allmulticast mode [ 689.610455][T15070] usb 3-1: 0:2 : does not exist [ 689.649330][T15070] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 689.709406][T15070] usb 3-1: USB disconnect, device number 80 [ 689.725292][T20896] netlink: 'syz.4.4707': attribute type 16 has an invalid length. [ 689.753193][T20896] netlink: 'syz.4.4707': attribute type 25 has an invalid length. [ 689.770096][T20896] netlink: 64094 bytes leftover after parsing attributes in process `syz.4.4707'. [ 689.828645][T17346] udevd[17346]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 690.111247][T20909] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 690.420719][T20929] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4714'. [ 690.977070][T20956] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.241988][T15070] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 691.412922][T15070] usb 3-1: Using ep0 maxpacket: 16 [ 691.425239][T15070] usb 3-1: config 4 has an invalid interface number: 51 but max is 0 [ 691.433365][T15070] usb 3-1: config 4 has no interface number 0 [ 691.441689][T15070] usb 3-1: config 4 interface 51 has no altsetting 0 [ 691.451967][T15070] usb 3-1: New USB device found, idVendor=0409, idProduct=0063, bcdDevice=83.4b [ 691.462514][T15070] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.471683][T15070] usb 3-1: Product: syz [ 691.476029][T15070] usb 3-1: Manufacturer: syz [ 691.480899][T15070] usb 3-1: SerialNumber: syz [ 691.497870][T20971] overlayfs: failed to clone lowerpath [ 691.500380][T15070] upd78f0730 3-1:4.51: upd78f0730 converter detected [ 691.514557][T15070] usb 3-1: upd78f0730 converter now attached to ttyUSB0 [ 691.782723][T20978] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 691.789303][T20978] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 691.797914][T20978] vhci_hcd vhci_hcd.0: Device attached [ 691.818074][T20980] vhci_hcd: connection closed [ 691.818431][ T13] vhci_hcd vhci_hcd.1: stop threads [ 691.842785][ T13] vhci_hcd vhci_hcd.1: release socket [ 691.848319][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 692.261981][T21008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.271223][T21008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.284612][T21008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.294159][T21008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.736150][T21032] trusted_key: encrypted_key: insufficient parameters specified [ 692.917963][T21038] syzkaller1: entered promiscuous mode [ 692.927408][T21038] syzkaller1: entered allmulticast mode [ 693.730344][T21070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.741483][T21070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.892139][T21070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4759'. [ 693.998606][ T5918] usb 3-1: USB disconnect, device number 81 [ 694.007876][ T5918] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 694.037904][ T5918] upd78f0730 3-1:4.51: device disconnected [ 695.043122][T21122] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4777'. [ 695.085014][T21122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.119575][T21122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.358946][T15070] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 695.585783][T15070] usb 3-1: Using ep0 maxpacket: 8 [ 695.595042][T15070] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 695.603435][T15070] usb 3-1: config 0 has no interface number 0 [ 695.611312][T15070] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 695.622266][T15070] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 695.634138][T15070] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 695.645273][T15070] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 695.658761][T15070] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 695.667864][T15070] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.692243][T15070] usb 3-1: config 0 descriptor?? [ 695.720249][T15070] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 695.831823][T21143] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4787'. [ 695.866405][T21146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.878033][T21146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.925640][T15070] usb 3-1: USB disconnect, device number 82 [ 695.943379][T15070] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 696.136379][T21155] efs: cannot read volume header [ 696.137003][T21128] ldusb: No device or device unplugged -19 [ 696.376635][T21167] syzkaller1: entered promiscuous mode [ 696.382214][T21167] syzkaller1: entered allmulticast mode [ 696.556852][T15070] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 696.591247][T21169] netlink: 'syz.1.4796': attribute type 5 has an invalid length. [ 696.599073][T21169] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.4796'. [ 696.727718][T15070] usb 3-1: Using ep0 maxpacket: 32 [ 696.734653][T15070] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 696.743200][ T5830] Bluetooth: hci3: command 0x0405 tx timeout [ 696.743580][T15070] usb 3-1: config 0 has no interface number 0 [ 696.755470][T15070] usb 3-1: config 0 interface 184 has no altsetting 0 [ 696.764402][T15070] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 696.773659][T15070] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.781767][T15070] usb 3-1: Product: syz [ 696.785952][T15070] usb 3-1: Manufacturer: syz [ 696.790547][T15070] usb 3-1: SerialNumber: syz [ 696.798768][T15070] usb 3-1: config 0 descriptor?? [ 696.807537][T15070] smsc75xx v1.0.0 [ 697.031674][T21177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.041097][T21177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.238489][T15070] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 697.249459][T15070] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 697.259371][T15070] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 697.270310][T15070] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 697.618258][T21183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.629013][T21183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.605533][T21200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.616526][T21201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.625969][T21201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.634824][T21200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.355545][T21213] tmpfs: Bad value for 'nr_blocks' [ 699.404338][T21215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.413839][T21215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.533913][ T5918] usb 3-1: USB disconnect, device number 83 [ 699.638037][T21220] 9p: Bad value for 'rfdno' [ 700.083382][T21232] bridge0: entered allmulticast mode [ 700.255517][T21240] raw_sendmsg: syz.2.4819 forgot to set AF_INET. Fix it! [ 700.260559][T21242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.273142][T21242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.477849][T21249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.487300][T21249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.499155][T21249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.508878][T21249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.518881][T21249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.527859][T21249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.537330][T21249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.546238][T21249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.588291][T15070] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 700.753084][T15070] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 700.762374][T15070] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.770634][T15070] usb 3-1: Product: syz [ 700.771002][T21249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.774854][T15070] usb 3-1: Manufacturer: syz [ 700.785090][T21249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.789746][T15070] usb 3-1: SerialNumber: syz [ 700.804780][T15070] usb 3-1: config 0 descriptor?? [ 700.876607][T21251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 701.032578][T15070] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 701.293113][T21267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.303699][T21267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.995318][T21286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.007598][T21286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.023118][T21286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.034121][T21286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.048341][T21286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.056375][T21288] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4841'. [ 702.059811][T21286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.081482][T21286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.092765][T21286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.215271][ T5830] Bluetooth: hci5: command 0x0406 tx timeout [ 702.317689][T21286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.329003][T21286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.339485][T21299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.356868][T21299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.606550][T21311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4851'. [ 702.713578][T21314] netlink: 'syz.4.4852': attribute type 12 has an invalid length. [ 702.785711][T15070] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 702.917565][T21316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.926916][T21316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.881736][ T5918] usb 3-1: USB disconnect, device number 84 [ 705.208017][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 705.209021][T21316] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 705.479123][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 705.485563][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 706.127349][T21316] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 706.133725][T21316] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 706.142351][T21316] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 706.148410][T21316] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 706.291613][T21336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.306831][T21336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.326002][T21340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.337632][T21340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.351839][T21340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.362335][T21340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.372018][T21340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.386517][T21340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.400585][T21340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.411587][T21340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.555395][T15070] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 706.635804][T21340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.645013][T21340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.715765][T15070] usb 3-1: Using ep0 maxpacket: 16 [ 706.722415][T15070] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 706.732845][T15070] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 706.744490][T15070] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 706.755468][T15070] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 706.770538][T15070] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 706.779603][T15070] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.787734][T15070] usb 3-1: Product: syz [ 706.791941][T15070] usb 3-1: Manufacturer: syz [ 706.796564][T15070] usb 3-1: SerialNumber: syz [ 706.804396][T15070] usb 3-1: config 0 descriptor?? [ 706.866652][T15070] rc_core: IR keymap rc-xbox-dvd not found [ 706.872510][T15070] Registered IR keymap rc-empty [ 706.881785][T15070] rc rc0: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 706.892535][T15070] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input94 [ 707.036107][T21338] No source specified [ 707.065318][ T5918] usb 3-1: USB disconnect, device number 85 [ 707.065360][ C1] xbox_remote 3-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 707.350946][T21359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.359992][T21359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.432434][ T52] Bluetooth: hci3: command 0x0405 tx timeout [ 707.523729][T21367] syzkaller1: entered promiscuous mode [ 707.530535][T21367] syzkaller1: entered allmulticast mode [ 707.648465][T21372] sctp: [Deprecated]: syz.2.4874 (pid 21372) Use of int in max_burst socket option. [ 707.648465][T21372] Use struct sctp_assoc_value instead [ 707.920966][T21383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.930218][T21383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.977726][T15070] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 708.174664][T15070] usb 3-1: config index 0 descriptor too short (expected 65183, got 72) [ 708.186703][T15070] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 708.199589][T15070] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.214444][T15070] usb 3-1: Product: syz [ 708.219560][T15070] usb 3-1: Manufacturer: syz [ 708.224527][T15070] usb 3-1: SerialNumber: syz [ 708.238532][T15070] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 708.261941][T15076] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 708.288172][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 708.403519][T21396] ext4: Unknown parameter 'norecy' [ 708.474481][T21397] pim6reg: entered allmulticast mode [ 708.498009][T21376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.511279][T21376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.525543][T21376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.536851][T21376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.551361][T21376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.564893][T21376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.575763][ T5918] usb 3-1: USB disconnect, device number 86 [ 708.713835][T21403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.723143][T21403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.326277][T21413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.343914][T21413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.400250][T15076] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 709.410053][T15076] ath9k_htc: Failed to initialize the device [ 709.417405][ T5918] usb 3-1: ath9k_htc: USB layer deinitialized [ 709.656771][ T52] Bluetooth: hci3: command 0x0405 tx timeout [ 709.742388][ T5918] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 709.817758][T21428] netlink: 'syz.4.4897': attribute type 11 has an invalid length. [ 709.825930][T21428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4897'. [ 709.880429][T21430] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4898'. [ 709.923891][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 709.937538][ T5918] usb 3-1: config index 0 descriptor too short (expected 241, got 72) [ 709.947749][ T5918] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 709.962439][ T5918] usb 3-1: config 0 interface 0 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 709.975824][ T5918] usb 3-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 709.985209][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.991933][T21434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.007712][T21434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.027731][ T5918] usb 3-1: config 0 descriptor?? [ 710.046731][ T5918] mos7840 3-1:0.0: missing endpoints [ 710.329763][T21444] netlink: 'syz.4.4904': attribute type 12 has an invalid length. [ 710.512334][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 710.782106][T21454] netlink: 'syz.0.4907': attribute type 1 has an invalid length. [ 710.790528][T21454] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4907'. [ 710.879795][T21454] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4907'. [ 711.375078][ T5918] usb 3-1: USB disconnect, device number 87 [ 711.391122][T21468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.447833][T21468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.902819][T21490] FAULT_INJECTION: forcing a failure. [ 711.902819][T21490] name failslab, interval 1, probability 0, space 0, times 0 [ 711.915642][T21490] CPU: 0 UID: 0 PID: 21490 Comm: syz.2.4920 Not tainted syzkaller #0 PREEMPT(full) [ 711.915666][T21490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 711.915676][T21490] Call Trace: [ 711.915694][T21490] [ 711.915702][T21490] dump_stack_lvl+0x189/0x250 [ 711.915728][T21490] ? __pfx____ratelimit+0x10/0x10 [ 711.915749][T21490] ? __pfx_dump_stack_lvl+0x10/0x10 [ 711.915776][T21490] ? __pfx__printk+0x10/0x10 [ 711.915801][T21490] ? __pfx___might_resched+0x10/0x10 [ 711.915823][T21490] should_fail_ex+0x414/0x560 [ 711.915851][T21490] should_failslab+0xa8/0x100 [ 711.915871][T21490] __kmalloc_noprof+0xdf/0x800 [ 711.915885][T21490] ? kfree+0x4d/0x6d0 [ 711.915897][T21490] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 711.915921][T21490] tomoyo_realpath_from_path+0xe3/0x5d0 [ 711.915939][T21490] ? tomoyo_domain+0xd8/0x130 [ 711.915962][T21490] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 711.915989][T21490] tomoyo_path_number_perm+0x1e8/0x5a0 [ 711.916014][T21490] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 711.916073][T21490] ? __fget_files+0x2a/0x420 [ 711.916091][T21490] ? __fget_files+0x3a0/0x420 [ 711.916105][T21490] ? __fget_files+0x2a/0x420 [ 711.916125][T21490] security_file_ioctl+0xcb/0x2d0 [ 711.916147][T21490] __se_sys_ioctl+0x47/0x170 [ 711.916176][T21490] do_syscall_64+0xfa/0xfa0 [ 711.916196][T21490] ? lockdep_hardirqs_on+0x9c/0x150 [ 711.916218][T21490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.916235][T21490] ? clear_bhb_loop+0x60/0xb0 [ 711.916254][T21490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.916271][T21490] RIP: 0033:0x7fa0bf58f6c9 [ 711.916287][T21490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 711.916302][T21490] RSP: 002b:00007fa0c0503038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 711.916321][T21490] RAX: ffffffffffffffda RBX: 00007fa0bf7e5fa0 RCX: 00007fa0bf58f6c9 [ 711.916334][T21490] RDX: 0000200000000000 RSI: 0000000000005411 RDI: 0000000000000003 [ 711.916346][T21490] RBP: 00007fa0c0503090 R08: 0000000000000000 R09: 0000000000000000 [ 711.916358][T21490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 711.916369][T21490] R13: 00007fa0bf7e6038 R14: 00007fa0bf7e5fa0 R15: 00007ffe13aa8518 [ 711.916400][T21490] [ 711.916429][T21490] ERROR: Out of memory at tomoyo_realpath_from_path. [ 712.497765][T21501] x_tables: ip_tables: TPROXY.0 target: invalid size 16 (kernel) != (user) 24 [ 712.622780][T21509] netlink: 'syz.0.4928': attribute type 11 has an invalid length. [ 712.635509][T21509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4928'. [ 712.757734][ T5918] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 712.946383][ T5918] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 712.966017][ T5918] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 712.976671][ T5918] usb 3-1: can't read configurations, error -61 [ 713.016339][T21519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.025611][T21519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.038970][T21519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.049248][T21519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.121561][ T5918] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 713.314525][ T5918] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 713.337073][ T5918] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 713.344709][ T5918] usb 3-1: can't read configurations, error -61 [ 713.363792][ T5918] usb usb3-port1: attempt power cycle [ 713.650036][T21537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.661365][T21537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.731164][ T5918] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 713.753479][ T5918] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 713.767066][ T5918] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 713.774762][ T5918] usb 3-1: can't read configurations, error -61 [ 713.865249][T21542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.876922][T21542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.912702][ T5918] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 713.947688][ T5918] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 713.962383][ T5918] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 713.978693][ T5918] usb 3-1: can't read configurations, error -61 [ 713.985432][ T5918] usb usb3-port1: unable to enumerate USB device [ 714.092624][T21552] fuse: Bad value for 'user_id' [ 714.092663][T21553] fuse: Bad value for 'user_id' [ 714.100340][T21552] fuse: Bad value for 'user_id' [ 714.109198][T21553] fuse: Bad value for 'user_id' [ 714.466210][T21562] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 714.476343][T21562] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 714.636097][T21570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.645717][T21570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.102476][T21578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.111565][T21578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.536657][T21590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.545634][T21590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.711384][T21593] netlink: 'syz.0.4961': attribute type 18 has an invalid length. [ 715.844433][T21601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.855927][T21601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.970158][T21605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4966'. [ 716.174167][T21613] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 716.180769][T21613] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 716.188594][T21613] vhci_hcd vhci_hcd.0: Device attached [ 716.198953][T21615] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 716.203788][T21613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.206794][ T2993] vhci_hcd vhci_hcd.1: stop threads [ 716.221794][ T2993] vhci_hcd vhci_hcd.1: release socket [ 716.229074][ T2993] vhci_hcd vhci_hcd.1: disconnect device [ 716.235592][T21613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.475582][T21626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4975'. [ 716.648423][T21629] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4976'. [ 716.658501][T21629] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4976'. [ 716.866227][T21640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.875324][T21640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.884112][T21640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.912998][T21640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.939356][T21640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.951950][T21640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.977863][T21640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.989821][T21640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.010043][T21640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.025031][T21640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.039654][T21640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.051122][T21640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.120504][T21650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4984'. [ 717.149898][T21651] autofs: Bad value for 'fd' [ 717.321634][T21662] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4989'. [ 717.373188][T21665] syzkaller1: entered promiscuous mode [ 717.379367][T21665] syzkaller1: entered allmulticast mode [ 717.803981][T21679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 718.075189][T21693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5001'. [ 718.504376][T21719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.511075][T21718] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5011'. [ 718.513532][T21719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.736918][T21733] netlink: 'syz.2.5019': attribute type 29 has an invalid length. [ 718.858191][T21737] fuse: Bad value for 'fd' [ 719.368240][T21762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.377050][T21762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.659604][T21772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.685081][T21772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.081407][T21733] netlink: 'syz.2.5019': attribute type 29 has an invalid length. [ 720.090168][T21789] netlink: 124 bytes leftover after parsing attributes in process `syz.0.5040'. [ 720.100822][T21733] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5019'. [ 720.503915][T21812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.526266][T21812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.646378][T21819] netlink: 'syz.0.5051': attribute type 1 has an invalid length. [ 720.701715][ T5922] kernel read not supported for file /bus (pid: 5922 comm: kworker/0:7) [ 721.113216][T21831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.123871][T21831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.370299][T21843] netlink: 'syz.2.5062': attribute type 29 has an invalid length. [ 722.044976][T21854] syz.4.5067 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 722.157803][T21865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.168869][T21865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.568632][T21843] netlink: 'syz.2.5062': attribute type 29 has an invalid length. [ 722.580182][T21843] __nla_validate_parse: 2 callbacks suppressed [ 722.580201][T21843] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5062'. [ 722.796379][T21888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5079'. [ 723.521837][T21925] netlink: 'syz.4.5094': attribute type 13 has an invalid length. [ 724.062330][T21937] 9p: Bad value for 'rfdno' [ 724.586772][T21960] syzkaller1: entered promiscuous mode [ 724.592385][T21960] syzkaller1: entered allmulticast mode [ 724.656398][T21962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.667584][T21962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.681385][ T5922] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 724.752578][T21964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.761654][T21964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.833192][ T5922] usb 3-1: device descriptor read/64, error -71 [ 725.087825][ T5922] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 725.237595][ T5922] usb 3-1: device descriptor read/64, error -71 [ 725.360296][ T5922] usb usb3-port1: attempt power cycle [ 725.381942][T21968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.397642][T21968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.417857][T21966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.432975][T21966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.708630][T21975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.717428][T21975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.740214][ T5922] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 725.763707][ T5922] usb 3-1: device descriptor read/8, error -71 [ 726.028843][ T5922] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 726.050875][ T5922] usb 3-1: device descriptor read/8, error -71 [ 726.169347][ T5922] usb usb3-port1: unable to enumerate USB device [ 726.417016][T21988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.426517][T21988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.681648][ T31] INFO: task syz.3.3663:17786 blocked for more than 143 seconds. [ 726.689827][ T31] Not tainted syzkaller #0 [ 726.695707][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 726.704995][ T31] task:syz.3.3663 state:D stack:25240 pid:17786 tgid:17784 ppid:12763 task_flags:0x400140 flags:0x00080002 [ 726.718001][ T31] Call Trace: [ 726.721821][ T31] [ 726.724962][ T31] __schedule+0x17c4/0x4d60 [ 726.729742][ T31] ? __lock_acquire+0xab9/0xd20 [ 726.734821][ T31] ? __pfx___schedule+0x10/0x10 [ 726.739900][ T31] ? schedule+0x91/0x360 [ 726.744250][ T31] schedule+0x165/0x360 [ 726.748651][ T31] schedule_preempt_disabled+0x13/0x30 [ 726.754153][ T31] __mutex_lock+0x7e6/0x1350 [ 726.758865][ T31] ? __mutex_lock+0x5bb/0x1350 [ 726.763763][ T31] ? nfsd_nl_listener_set_doit+0x137/0x1690 [ 726.769801][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 726.774870][ T31] ? __asan_memset+0x22/0x50 [ 726.779749][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 726.784905][ T31] ? do_syscall_64+0xfa/0xfa0 [ 726.789742][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.795942][ T31] nfsd_nl_listener_set_doit+0x137/0x1690 [ 726.801743][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 726.807505][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 726.813846][ T31] ? rcu_is_watching+0x15/0xb0 [ 726.818649][ T31] ? __nla_parse+0x40/0x60 [ 726.823496][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 726.829881][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 726.835579][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 726.841734][ T31] ? bpf_lsm_capable+0x9/0x20 [ 726.846550][ T31] ? security_capable+0x7e/0x2e0 [ 726.851512][ T31] genl_rcv_msg+0x60e/0x790 [ 726.856841][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 726.861905][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 726.868163][ T31] netlink_rcv_skb+0x208/0x470 [ 726.872967][ T31] ? __lock_acquire+0xab9/0xd20 [ 726.878012][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 726.883085][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 726.888533][ T31] ? down_read+0x1ad/0x2e0 [ 726.892985][ T31] genl_rcv+0x28/0x40 [ 726.897093][ T31] netlink_unicast+0x82f/0x9e0 [ 726.901904][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 726.907278][ T31] ? netlink_sendmsg+0x642/0xb30 [ 726.912245][ T31] ? skb_put+0x11b/0x210 [ 726.916869][ T31] netlink_sendmsg+0x805/0xb30 [ 726.921694][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 726.927153][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 726.932175][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 726.937480][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 726.943787][ T31] __sock_sendmsg+0x21c/0x270 [ 726.948559][ T31] ____sys_sendmsg+0x505/0x830 [ 726.953360][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 726.958660][ T31] ? import_iovec+0x74/0xa0 [ 726.963593][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 726.968322][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 726.973648][ T31] ? __fget_files+0x2a/0x420 [ 726.978272][ T31] ? __fget_files+0x3a0/0x420 [ 726.983403][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 726.988469][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 726.994119][ T31] ? do_syscall_64+0xbe/0xfa0 [ 726.998843][ T31] do_syscall_64+0xfa/0xfa0 [ 727.003497][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 727.008746][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.014936][ T31] ? clear_bhb_loop+0x60/0xb0 [ 727.019674][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.025962][ T31] RIP: 0033:0x7fa7bef8f6c9 [ 727.030450][ T31] RSP: 002b:00007fa7bfe90038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 727.038958][ T31] RAX: ffffffffffffffda RBX: 00007fa7bf1e5fa0 RCX: 00007fa7bef8f6c9 [ 727.047161][ T31] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 727.055696][ T31] RBP: 00007fa7bf011f91 R08: 0000000000000000 R09: 0000000000000000 [ 727.063745][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 727.085764][ T31] R13: 00007fa7bf1e6038 R14: 00007fa7bf1e5fa0 R15: 00007ffc98ba9c08 [ 727.093918][ T31] [ 727.097039][ T31] [ 727.097039][ T31] Showing all locks held in the system: [ 727.108963][ T31] 1 lock held by khungtaskd/31: [ 727.113888][ T31] #0: ffffffff8e33b520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 727.139721][ T31] 2 locks held by getty/13861: [ 727.144996][ T31] #0: ffff88814d0220a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 727.154931][ T31] #1: ffffc9000e9552f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 727.165333][ T31] 2 locks held by syz.9.2809/15297: [ 727.170541][ T31] #0: ffffffff8f7547f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 727.179118][ T31] #1: ffffffff8e628608 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 727.189471][ T31] 2 locks held by syz.3.3663/17786: [ 727.194785][ T31] #0: ffffffff8f7547f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 727.203016][ T31] #1: ffffffff8e628608 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 727.213314][ T31] 4 locks held by syz.4.5098/21937: [ 727.218591][ T31] #0: ffff8880504e1ec8 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 727.228870][ T31] #1: ffffffff8f752c70 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 727.240118][ T31] #2: ffff888028d208d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x116/0x640 [ 727.250597][ T31] #3: ffffffff8e340fb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 727.261692][ T31] [ 727.264238][ T31] ============================================= [ 727.264238][ T31] [ 727.276788][ T31] NMI backtrace for cpu 0 [ 727.276809][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 727.276829][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 727.276840][ T31] Call Trace: [ 727.276848][ T31] [ 727.276856][ T31] dump_stack_lvl+0x189/0x250 [ 727.276884][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 727.276904][ T31] ? __pfx__printk+0x10/0x10 [ 727.276934][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 727.276955][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 727.276974][ T31] ? __pfx__printk+0x10/0x10 [ 727.276996][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 727.277022][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 727.277043][ T31] watchdog+0xfa9/0xff0 [ 727.277065][ T31] ? watchdog+0x1f4/0xff0 [ 727.277091][ T31] kthread+0x711/0x8a0 [ 727.277115][ T31] ? __pfx_watchdog+0x10/0x10 [ 727.277132][ T31] ? __pfx_kthread+0x10/0x10 [ 727.277154][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 727.277174][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 727.277192][ T31] ? __pfx_kthread+0x10/0x10 [ 727.277209][ T31] ret_from_fork+0x52d/0xa70 [ 727.277236][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 727.277271][ T31] ? __switch_to_asm+0x39/0x70 [ 727.277290][ T31] ? __switch_to_asm+0x33/0x70 [ 727.277307][ T31] ? __pfx_kthread+0x10/0x10 [ 727.277322][ T31] ret_from_fork_asm+0x1a/0x30 [ 727.277343][ T31] [ 727.277347][ T31] Sending NMI from CPU 0 to CPUs 1: [ 727.423251][ C1] NMI backtrace for cpu 1 [ 727.423279][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 727.423300][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 727.423310][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 727.423335][ C1] Code: 83 eb 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 89 28 00 f3 0f 1e fa fb f4 58 eb 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 727.423349][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 727.423364][ C1] RAX: c613177aa2585600 RBX: ffffffff81977177 RCX: c613177aa2585600 [ 727.423376][ C1] RDX: 0000000000000001 RSI: ffffffff8da80607 RDI: ffffffff8be0fc60 [ 727.423388][ C1] RBP: ffffc90000197f10 R08: ffff8880b873321b R09: 1ffff110170e6643 [ 727.423400][ C1] R10: dffffc0000000000 R11: ffffed10170e6644 R12: ffffffff8fbf0f70 [ 727.423412][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003addb70 [ 727.423423][ C1] FS: 0000000000000000(0000) GS:ffff888125b92000(0000) knlGS:0000000000000000 [ 727.423435][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 727.423452][ C1] CR2: 00007f0a66fb3ad8 CR3: 000000007fb5a000 CR4: 00000000003526f0 [ 727.423466][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 727.423477][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 727.423488][ C1] Call Trace: [ 727.423497][ C1] [ 727.423503][ C1] default_idle+0x13/0x20 [ 727.423518][ C1] default_idle_call+0x73/0xb0 [ 727.423534][ C1] do_idle+0x1e7/0x510 [ 727.423553][ C1] ? __pfx_do_idle+0x10/0x10 [ 727.423576][ C1] cpu_startup_entry+0x44/0x60 [ 727.423591][ C1] start_secondary+0x101/0x110 [ 727.423610][ C1] common_startup_64+0x13e/0x147 [ 727.423636][ C1]