last executing test programs: 2m33.623707186s ago: executing program 0 (id=295): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="490301000000fedbdf251600000018000180130001006574683a53797a6b616c706572312000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) getsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r3, &(0x7f0000000440)=@hat={'changehat '}, 0x1d) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000240)=0x72c, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a010400000000000000000100000008000b40000000000900010073797a300000000024000480200001800700010072740000140002800800014000000015080002400000000414000000110001"], 0xd4}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000240000012abd7000fbdbef25ffffffff0600040000000000060013000000000006000300000000000600030000000000"], 0x34}}, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r6, 0x8946, &(0x7f0000000080)="4749c2368bb8dd2c7f17323cf53a") r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x0, 0x3}}]}}]}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = dup(r2) setsockopt(r8, 0x84, 0x7d30880b, &(0x7f0000000080)="010000002080ffff", 0x8) syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f00000002c0)={0x10, &(0x7f0000000140)={0x20, 0x14, 0x3, "eaeeda"}, 0x0, 0x0}) ioctl$TUNDETACHFILTER(r8, 0x401054d6, 0x0) 2m32.135033295s ago: executing program 0 (id=301): bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r1, 0xffff) (async) socket$pppl2tp(0x18, 0x1, 0x1) fcntl$addseals(r1, 0x409, 0x7) (async) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x1000, 0x8000}) lseek(r2, 0x5, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r4 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) (async) close(0x3) syz_usb_disconnect(r4) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) 2m32.039986453s ago: executing program 0 (id=302): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(r0, 0x1) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000003, 0x12, r1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x200}], 0x1, &(0x7f0000000140), 0x0, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) accept4(r3, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) unshare(0x2040400) r4 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r4, 0x4000000000000000, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b0400000000c7fed40000000002000000200098310420594d53394edcda6404801c0001800900010068617368000000000c0000010073797a30000000000900020073797a820000000014000000110001000000000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 2m31.880902515s ago: executing program 0 (id=303): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0x0, 0x8}, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030001000000050003000000000005000300000000000500030080ff000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0x0, 0x8}, 0xc) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r1) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030001000000050003000000000005000300000000000500030080ff000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) 2m31.85976649s ago: executing program 0 (id=304): r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000100)={0x2, 'syz1\x00'}) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0xe1041, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xe) (async, rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @ioapic={0x3000, 0x4, 0xd, 0xff, 0x0, [{0x7, 0x1, 0x0, '\x00', 0x2}, {0x6, 0x2, 0x10, '\x00', 0x1}, {0x4, 0x2, 0xc8, '\x00', 0x9}, {0xe, 0x77, 0x3, '\x00', 0xcd}, {0x7f, 0xfc, 0x81, '\x00', 0xa}, {0x7, 0x5, 0xac, '\x00', 0xf}, {0x6, 0x5, 0x5, '\x00', 0xe}, {0x4, 0xff, 0x1, '\x00', 0xd}, {0x40, 0xc, 0x3, '\x00', 0x81}, {0x9, 0x6, 0x9, '\x00', 0x27}, {0x0, 0x9, 0xf7, '\x00', 0x4}, {0xee, 0x2c, 0x4, '\x00', 0xff}, {0x8, 0xe2, 0x10, '\x00', 0x9}, {0xff, 0xf8, 0x8d, '\x00', 0x5}, {0xff, 0x9, 0x7, '\x00', 0xf}, {0x7, 0x5d, 0x3, '\x00', 0x1}, {0x0, 0x1, 0x1, '\x00', 0xbb}, {0x8, 0xff, 0x9, '\x00', 0x6}, {0x4, 0xc4, 0x44, '\x00', 0x3}, {0x0, 0xd8, 0x6, '\x00', 0xfd}, {0x30, 0x7, 0x22}, {0x5, 0x71, 0x5, '\x00', 0x9}, {0x5, 0x6, 0xfc, '\x00', 0xa}, {0x7, 0x9, 0x40, '\x00', 0x5}]}}) (async) ioctl$TCFLSH(r1, 0x540b, 0x2) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') statx(r4, &(0x7f00000000c0)='./cgroup\x00', 0x1000, 0x100, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000080)={0x7, r4, 0x2}) setsockopt$inet6_tcp_TLS_RX(r6, 0x6, 0x2, &(0x7f0000000200)=@ccm_128={{0x304}, "a2a5736bc9ff53cc", "a340d206ab09aca30905720e15cd199e", "0000a76e", "54b93782d9858f9b"}, 0x28) (async) setfsuid(r5) setuid(r5) 2m31.744458144s ago: executing program 0 (id=305): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/31) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r2 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKROTATIONAL(r2, 0x127e, 0xfffffffffffffffe) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000440)=""/199) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018, r3}, './file1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffc000/0x4000)=nil, 0x1002, 0xb, 0x8012, r6, 0x83000000) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x18, r7, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c69700014000780"], 0x60}}, 0x801) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000280)={'das16m1\x00', [0x4f27, 0x5, 0x2, 0x400, 0x1, 0xcc7, 0x5, 0x5c95239b, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x9, 0x5, 0xe1cb, 0x6, 0x3, 0x3, 0x395, 0x89, 0xfffffffd, 0xfffffffd, 0xfffffff5, 0xffffeadb, 0x200003, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 2m20.621067875s ago: executing program 2 (id=349): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'ip6gretap0\x00', @random="0131ff7f00"}) 2m20.553772893s ago: executing program 2 (id=350): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000000)=[@wrmsr={0x1e, 0x20, {0x915, 0x8}}, @code={0xa, 0x63, {"2e2645015ff1470fc7acf7f0ffffffb9900a00000f32b9800000c00f3235000400000f3066b81a018ec00f01d1c442512d9a0f380000f2460f58cdb9800000c00f3235004000000f30f2450f0099bf740000"}}, @code={0xa, 0x67, {"66baf80cb8b3dd7386ef66bafc0cecc442a9a8e2450f01c966baf80cb81083468def66bafc0c66b8000066efdcf4400f0f7d00bb2e3e0fb7f6d9ab06000000c744240017000000c744240241fc0000ff1c24450f2202"}}, @wrmsr={0x1e, 0x20, {0xb1b, 0x2}}, @wr_crn={0x46, 0x20, {0x3, 0x1}}, @cpuid={0x14, 0x18, {0x40, 0x6}}, @wrmsr={0x1e, 0x20, {0x8ee, 0x3000000000000000}}, @uexit={0x0, 0x18, 0x7}, @uexit={0x0, 0x18, 0x3}, @wrmsr={0x1e, 0x20, {0x809, 0x800}}], 0x1b2}) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000200)={[0x2, 0x10000, 0xdddd0000, 0x1000], 0xc, 0x2, 0x9}) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x10740) ioctl$NBD_DISCONNECT(r1, 0xab08) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x375f, 0x20}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) mount(&(0x7f0000000440)=@rnullb, &(0x7f0000000480)='\x00', &(0x7f00000004c0)='iso9660\x00', 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x10000) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0xfffffffb}}, './file0\x00'}) r7 = accept4$netrom(r6, &(0x7f0000000580)={{0x3, @default}, [@rose, @remote, @bcast, @remote, @bcast, @null, @bcast, @default]}, &(0x7f0000000600)=0x48, 0x800) r8 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000640)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, &(0x7f0000000680)=0x1c, 0x80000) setsockopt$inet6_tcp_TLS_RX(r8, 0x6, 0x2, &(0x7f00000006c0)=@gcm_256={{0x303}, "eb9033a849655513", "c21bce530105866363951cb23a7df1821fd27bec079af49e9629224a0f53fcc7", "9f5dd53f", "d0826112577c8bc5"}, 0x38) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r2) getpeername$packet(r6, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000007c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000880)={'ip_vti0\x00', &(0x7f0000000840)={'gre0\x00', 0x0, 0x8, 0x1, 0x6, 0x0, {{0x6, 0x4, 0x2, 0x3, 0x18, 0x68, 0x0, 0xa, 0x29, 0x0, @empty, @broadcast, {[@end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000008c0)={'vxcan0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000900)=0x0, &(0x7f0000000940)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000980)={'batadv0\x00', 0x0}) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f00000009c0)={0x0, @initdev}, &(0x7f0000000a00)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000a40)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000a80)={'erspan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000b40)={'syztnl2\x00', &(0x7f0000000ac0)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0xf3, 0xd, 0x1, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x1, 0x7, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000b80)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r9, &(0x7f0000000cc0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0xb8, r10, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r21}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c010) 2m20.444983869s ago: executing program 2 (id=351): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000300)={0x0, 0xc, 0x3, 0x101, 0x8000, 0x1ff, 0x2, 0x3, {0x0, @in6={{0xa, 0x4e23, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x48}}, 0x3, 0x5, 0x3, 0x1, 0x4b5d}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000280003802400008004000180040002800c00044000000000000000090c0005"], 0xe8}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async, rerun: 64) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 64) r3 = dup(r2) (async) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000280)={0x10007, 0x2, 0x0, "8eb8a828e53b07f1dd00d87a41bfeae7800400b159fb933948000026098d68d9"}) (async, rerun: 64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f3d964c33d0557d741be89d382d4e7f896811f8bccf5e6cda198b66254e32e0d3409db2b5175f671688b42df6851e16dee7206e30cffb76cfbceab217d3786001fa46ec02f4ad68c151bd1fa888f248248357e812ca88cd1fdf8e775fb16352194200"/113, @ANYRESHEX=r3, @ANYBLOB="2c616e616d653d5e253a5b2e7e0709eca39eb32df3e55947c838ed771403852d11fed036149235fa90892d38054ace99f05c123fd6bfd0f9a2e7c5214f7685e7e0de256410a36a1b79d968b3a403a10d6ef1bdaa21b1cc4cfed4ea162536499bd4101451f5be7497565d0c66ddda751ee093455dc188f89c44942c6b"]) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'caif0\x00'}) 2m20.423033096s ago: executing program 2 (id=352): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x5c, 0x2, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}]}]}, 0x5c}}, 0x4004800) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) r0 = syz_usb_connect(0x0, 0x68, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fbff026c5d650009050402100000fa000905820240"], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x50, r2, 0x607, 0x70bd27, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x2000000}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}]}, 0x50}}, 0x4008000) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="020100030a0000000000000000000000020010000000000200000000000000000300050000000000020000009d141400000000000000000003000600000000000200"], 0x50}}, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x40086602, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x24, r8, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x40084) syz_usb_control_io$printer(r0, 0x0, 0x0) r10 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x71) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='qnx6\x00', 0x208003, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x0) openat$cgroup_procs(r11, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r11, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000027c0)={0x43c, r12, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa6a}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3ff}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfc8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xedae}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x10c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x88}, @TIPC_NLA_NODE_ID={0x68, 0x3, "1bd65bd1b221137c4553f67517a3555f6ee6732740b9ebcd45f4b5ec563875c1f2a75af69e85869357a9e0db8328b843a244a3e138800363285cd74a298aea7cdb984c306cbd1bd6f28005e88862abd97b8012483583dbf7fa70e1f4249c5ef5e210c530"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "82e296ac15c4538d00c737f56d30e5adcddff1295e60"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_ID={0x10, 0x3, "967a2732ed74bea78c83825e"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "fc9130e17d3cbc6426bfaefbc11d65ba4c64c1f46e"}}]}, @TIPC_NLA_NODE={0x214, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "e5721ab7dcd5fce87dbebe708b8fbedaf4c587fe58431c8c6fc9"}}, @TIPC_NLA_NODE_ID={0x52, 0x3, "b371ea3ab6bb38287c74dc239cd7e254a61b25c1ad24d7f780c12a3d57a953aceba0de8721f7ea563e83d4c42f7de41cb64e137130fcb61600858062452c922c4f3e4d203078fb4540d25da8efd4"}, @TIPC_NLA_NODE_ID={0xaf, 0x3, "bff0da72263cdab0bf42a14b62ec906a45ddcfa7ee4b88307b8d6e3245c3492bb11096edd04070e5eaf9a70fc168e948e90d92beb4649914d42c260bf88dec7de13ce0dc58294d3cf7b17f38f7db1db72d4fc1cf55e3386a37aa369fd77b48edd419b0f3a805378dffbccface84b4ec8f42c0971e1cfcda1782d61e5920d07311a36744612b393da8f3e344418074d51603fbab9ce45cee43062087afb6f8a396883026428ff5543ea62c9"}, @TIPC_NLA_NODE_ID={0xab, 0x3, "e3c1a7a5309503bf2adbdd5997126c237d9ed36f0fd1ce4a56f334b7695f10772df12e860f6440ff7a7c61b1b0f1aaa309f54bf2a338a981fedb7b76ac8fa381d0730a49ecee27898dc9e1f929692cb779521355f9368c551935da63e8c57fbcfd201696c1fc0f2185d2b29085c8bacfedd6bd456a0521ac8ce2fab4f989ca98dd0b8d26accb4dffca64a04791c163b00049461725dfa692b562bdedffc3b4d53de602bf1fbd69"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x94}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x393dbee1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x43c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 2m17.308760987s ago: executing program 2 (id=368): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r1, 0x2) shutdown(r1, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x84, 0xa, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5e4f}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x44, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xd2d}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'vlan1\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace', 0x121262, 0x1b2) write$cgroup_pid(r3, &(0x7f0000000000), 0x12) 2m17.149402279s ago: executing program 2 (id=370): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0x7) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x680c01, 0x0) fcntl$getflags(r6, 0x1) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000040)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}, {&(0x7f00000000c0)="d74578c8ad48fd79fbece858ea3e75811dd3bde8796187e131dd42e8c23e19441e1763afc2fee3f6bee273850eee53b6347e1d81db5207139679861ca446f17274dbded827f9fe2b8ac6a9fa6ffc3684b40e324b18dc1e5c502d59739ae1d18e9bbe22b07b59fecb9c00e3705eb1c759df3cefa3113223e9fc00ba8499e42a08c0fd5448", 0x84}], 0x2) 2m16.663953881s ago: executing program 32 (id=305): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/31) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r2 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKROTATIONAL(r2, 0x127e, 0xfffffffffffffffe) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000440)=""/199) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018, r3}, './file1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffc000/0x4000)=nil, 0x1002, 0xb, 0x8012, r6, 0x83000000) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x18, r7, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c69700014000780"], 0x60}}, 0x801) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000280)={'das16m1\x00', [0x4f27, 0x5, 0x2, 0x400, 0x1, 0xcc7, 0x5, 0x5c95239b, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x9, 0x5, 0xe1cb, 0x6, 0x3, 0x3, 0x395, 0x89, 0xfffffffd, 0xfffffffd, 0xfffffff5, 0xffffeadb, 0x200003, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 2m1.133606385s ago: executing program 33 (id=370): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0x7) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x680c01, 0x0) fcntl$getflags(r6, 0x1) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000040)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}, {&(0x7f00000000c0)="d74578c8ad48fd79fbece858ea3e75811dd3bde8796187e131dd42e8c23e19441e1763afc2fee3f6bee273850eee53b6347e1d81db5207139679861ca446f17274dbded827f9fe2b8ac6a9fa6ffc3684b40e324b18dc1e5c502d59739ae1d18e9bbe22b07b59fecb9c00e3705eb1c759df3cefa3113223e9fc00ba8499e42a08c0fd5448", 0x84}], 0x2) 1m32.063328367s ago: executing program 1 (id=533): openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000013c0)={0x28, 0x25, 0x1, 0x70bd26, 0x0, "", [@typed={0x8, 0x73, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) (async) r2 = syz_usb_connect(0x2, 0x851, &(0x7f0000000400)={{0x12, 0x1, 0x250, 0xeb, 0x4f, 0xa4, 0x20, 0x148f, 0x760d, 0xde4b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83f, 0x2, 0xf, 0xa, 0x0, 0xa9, [{{0x9, 0x4, 0xc4, 0x3, 0x3, 0x44, 0x86, 0xa4, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0x7}, [@processing_unit={0x8, 0x24, 0x7, 0x6, 0x1, 0xc, "84"}, @mixer_unit={0x5, 0x24, 0x4, 0x6, 0xb}, @mixer_unit={0x9, 0x24, 0x4, 0x1, 0x1, "a6385acd"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x206, 0x4, 0x7, 0x7, 0xd, 0x2a}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x6}]}, @uac_control={{0xa, 0x24, 0x1, 0x1, 0x5}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x6, 0x3, 0x4, 0x1}, @processing_unit={0xa, 0x24, 0x7, 0x2, 0x1, 0x8, "e810ee"}, @feature_unit={0xb, 0x24, 0x6, 0x5, 0x1, 0x2, [0x5, 0x6], 0x8}]}], [{{0x9, 0x5, 0x5, 0x4, 0x3c76a27d87131178, 0xc, 0xa, 0x2d, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xa, 0x4}]}}, {{0x9, 0x5, 0xc, 0x8, 0x40, 0x80, 0x2, 0xd, [@generic={0x8a, 0x8, "0cc82c8d0550505eca9872f974c0e0cf9865e2609177944f32d743c0a521d9534b900d58851670331d3a33a310746cc3c594147e65b5263e221764db317c4e6ab1176a27424dac891ce4aa7f5706d2c2ea6e62efa6c303ca32ac53d81b0a7f4f8ebbab6c2a4f6d72bbe7e976e9d3285a538166e8e24be659b956492364ac8242c3701b8004c422b0"}, @generic={0x9b, 0x21, "9f0a2e209e07358efe1867e64b5578f35df6347b44bf1437d3d84b6e3b34e4f4eba919727b00aa77dbfc924a55c28c19f0858638b0cc22e399a445dae35323e9785bff44ea69d16019f1f5afd3646f5ba416d100c642b9b413dff5dcad64c7eddcadc07eff0e06e4fbf98832c459819f70af9af532d9c47d3e8ddf15a57294e2ffda9f67a80dad76472db02594a457de7efb74b44b1de233e7"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x3ff, 0x3, 0x6, 0x3, [@generic={0x3b, 0x9, "83cb8817ea552e034bc601f639bc2f0411144a62fd7cd958a79707716a072113d70d158b692f566c57e1c62bea82f1403281f7a36aa6f8c419"}]}}]}}, {{0x9, 0x4, 0xf6, 0xa1, 0xc, 0xff, 0x5c, 0xc5, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0x1}, [@mixer_unit={0xb, 0x24, 0x4, 0x4, 0xfe, "3c7520eab365"}]}], [{{0x9, 0x5, 0x6, 0x0, 0x400, 0x7, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x1}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x0, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x40, 0x40}, @generic={0x49, 0x5, "37ff0b64dd577e85ec164879f7a7c5165ff4171bc6789ffa9167c2806caa8b5047a7acf10158f7f986e2131fa95e238b24863c0b69027c5a14f09007b739e10adf4a17aa420c2b"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x8, 0x8, 0xbf, 0x59, [@generic={0x43, 0x3, "2a3493a6d2fd16930829a9a8a316ad60fa4b92f181035906d67ffbb6ec5d97943c923204e8e14a3a21d87cc4d4a52bc9f0a0637f5d5b694c3126e81982a184a1ae"}, @generic={0x58, 0x0, "815dcd0e66780205ad484d8a5ebb14214ecff0f3933be84d39ed869f2ec81be7cc4d605f10ce4b97d780a88b8cc5b288b0c2926c62340f31cc449afb1dcf4351e42c56d1a4503ec0aba16f647247bde110977678e50d"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x6, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x67, 0x2}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x6, 0x3, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0xffff}]}}, {{0x9, 0x5, 0xd, 0x3, 0x400, 0x9, 0x7, 0x1, [@generic={0x7c, 0xe, "46c6e55d4ae744ce26551f8395e586cd84707e4e823d3ca378f87ea40e21c5a5bcd22a8e54cb6c9e11fee7d718d889780fc5a690de37c2144eb3cf4d8e2b4a8e51c413dde87ea0fe13c6fd55de85cbea82293bc3d678319d1c8c7f6ebd047456aa17f31e96f6fc59f68f574305114a7ae7f1412c1e47ead620a0"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x3ff, 0x7, 0x6, 0x5, [@generic={0xe4, 0x6, "977136c720e10e84c32ec266ae85df15ce84fa72dacccfbdf583abab1a29c224a72dfecb1579a99f73b279889a7c68fbe15253c162ad46378542bf400e0490f5577f540ceaa28a1696c2009f21f4f3ed7bab49f768bba6916a515d9afbf8b55de9ac2a2d19e963f4d92b91539173fcb731030adc00b04a8f20daa88216e40fa18e8b86ceb7ca68bc693225dae6bceda26a05bd57148e75d6a759e322103cabf699edf1250bef1f337c8e037d4cfdfd5a7d122e7cc79f4e8c07caea98a31ce4c0200edc3bcc6bec58b0c43c6b2055b86e17de2733f8a48563342b2fb2bd75b2f2086d"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x2, 0x0, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xfb, 0xf5b7}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x0, 0x4, 0x3, [@generic={0x8a, 0xc, "e7ccd0b0730d3aa765e6f4f8dbe03aa4051f0502cc61c1f43c16c0ab1efea8ec18de6b09c4ffca18ed97a6de69d5235831438f88723c7641c0d08f3b67cb505a99124dd57db4d51c6d00141ba077f62861223f115cce93e010a2f0e490ef9b2f3bd828a76989762a48fe6ba39b487a4c834716fb3540ac70ea443b08da297236e519dad9ebc11a23"}, @generic={0xe0, 0x21, "be0a554d28d54694dd3fc51cfe017127bf833e1907d8be66b755eff6ffbc71b44a09c5096675d2c365c155fb330665dd1d96570568ace7431d517b13fd2256746f2f5172b179ffd09e51ffe5382771f4fab5948fd6d8293f2db0cfac1af7bbede01b4bbe8403724cb91ba33346890643b408d00fe424b14781159212e87fcef00edc7a3646b59c7bea6c433d9e6e62f0f3438d71d922fb6b8cae4c88cbff0c2db047a0d2b749dee0e7729119b936a5e04eb5ef3aa29cff9be8eece5b50e175efce4c8bd670f91cd1fdc053d57d4ebd2eaea3e17f1f605f89378ff6fdcf32"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x40, 0x9, 0x4a, 0x4, [@generic={0x8e, 0x5, "11ab2e6b5fbdd2555684dda8c34d244499b3d8630ce4e72368c594d4c86a2e91f2a81900c4c560d1bc13460b8e32475ca4ede81aa220c95d53b37b072326995aab9ad45265a942c02f80f7da9d70e37c3a19e916cd5ec0f1ac2e3bb1a314caa4bff200b02b9197570bd702a5bf7d1e220c4afd7cfab6645527235f0ad2e18abdd1f2dcf8137b066db58de97d"}, @generic={0x2e, 0xa, "fac66f0c129ff658e8522466ed23694223c053f734b7fac8d1eee64c5084ba6ee3623f28a23c91e71aa5444d"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x5, 0xa, 0x2, [@generic={0xf4, 0xe, "e1559c9ff83a14fc771f918f30069dc794766afb4cd1b13930af204f455d17ee6e70b6dae9d1d734721e26795de728e2417b2bd2697125559eecaf4683aa0fa7f7edf489144d55836ff7a506b99912a276ee0e5f3d60ae8f85dab58f73a02328c7130a0d995b8ea4795a0bb3348585966d89fcbcc2d793fa6fc12fedd18742bf5c623bffb6c82d3c23cad34de3d9f9d86e9248ed4702d6be1673c828e715b1734fbe1c26aa23576570b0fe2115d75b89e0579858e9c98b0bd34f35f0cf1ec63b97ca65c10cf7d71ec9dc4ddafa7df9426c63ee03c6e1d1f183becf02970e09bee1301c5acbd6821bee5e594c1d0fdca5fa94"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xbd, 0x401}]}}, {{0x9, 0x5, 0x3, 0xc, 0x0, 0x8, 0xe1, 0x60, [@generic={0x3c, 0x9, "8000b3ed0a59a5a94422b9a962ec7204345721ff1278eb263fef7313cc9a522803ca700681248480111c88fc20bca2df8163701fdb9401a6a06c"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x9}]}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0x20, 0xc, 0x7, 0x40}, 0x42, &(0x7f0000000140)={0x5, 0xf, 0x42, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x3, 0x0, 0x9, [0x0]}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x4, 0xf000, 0x9, [0x3f00, 0xf0]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x10, 0x1, 0x5, 0xf00, 0x3, [0xff3f30]}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x420}}]}) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3401}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}, 0x0, 0x0, 0x0}, 0x0) 1m31.940755139s ago: executing program 1 (id=534): r0 = socket$inet_icmp(0x2, 0x2, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) madvise(&(0x7f0000d9c000/0x1000)=nil, 0x1000, 0x17) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00', 0x1000}) write$cgroup_devices(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000004100), r3) sendmsg$NFC_CMD_ENABLE_SE(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={&(0x7f0000004140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="1245a6db8bfdc82cdf2511000000"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x800) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001980)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc010000000000000000000000000000000000001300000005000500000000000a00000000000000000000000000000000000000000000000000000000000000080012000200020000000000000000001200330002"], 0xa0}}, 0x0) r7 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2d8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000300)={0x0, 0x8, 0x0, "70e0e7044a13eb8b94ee344913ac289ce6b38181be66679c5877bf8e59d69d60"}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000100)="98cabca5", 0x4) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r9, 0x7a5, 0x0) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="006f0809000000000000140000004500002800000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5a0003e890780018"], 0x36) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 1m31.797411504s ago: executing program 1 (id=535): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d80000c9f57cd6104e90f7d28344b9040259086b6c5911528449b79d9b407d717c3c41f303badba91fd286f069bcfc1ac79e6b5b121a7519844ba054a6be4777f449e4e4aa584b758b31cbd2e07636d1c4d0aa91b84647ffde6e0b2520625d095032f288b309c867464e03a12101f158", 0x70}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) (async) setuid(0xee01) (async) removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00') (async) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) (async) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = fsmount(r2, 0x0, 0x5) fchdir(r3) (async) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) (async) syz_clone(0x81040400, 0x0, 0x3a, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x8, &(0x7f0000000040)=0x400000000001, &(0x7f0000000100)=0x2) (async) r4 = socket$unix(0x1, 0x1, 0x0) recvfrom$unix(r4, &(0x7f0000000200)=""/18, 0x12, 0x3, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x40) fcntl$notify(r5, 0x402, 0x8000002f) openat$cgroup_ro(r5, &(0x7f00000000c0)='blkio.bfq.io_queued\x00', 0x0, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4) (async) r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x100, 0x30) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000340)) (async) move_mount(r6, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x4) socket$netlink(0x10, 0x3, 0x8000000004) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x4, 0x200, &(0x7f0000000880)="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"}) writev(r0, &(0x7f0000000180), 0x0) 1m31.687014934s ago: executing program 1 (id=536): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000540)={0xfffffff8, 0x401, 0xfffffffd, 0xc6cf, 0x15, "0441920500e87fcb367810000000080100", 0x8000, 0x1fd}) (async, rerun: 64) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (rerun: 64) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000080)=0xffffffffffffffff, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x80) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000040)={0x52bf, 0x4ca0d54a, 0x3, 0x7fffffff, 0x9, "0b74475c3cc19935f19def1e633c9dbd74a35a", 0x40, 0xffff}) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x8) 1m31.43281529s ago: executing program 1 (id=537): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) creat(&(0x7f0000000080)='./file1\x00', 0x0) (async) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030000, 0xe4, 0x1, 0x0, r1, 0x0}]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)=',', 0x1) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=@deltclass={0xc8, 0x29, 0x300, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xffff}, {0x6, 0xf}, {0xe, 0xd}}, [@c_atm={{0x8}, {0x9c, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xa, 0x4}}, @TCA_ATM_HDR={0x36, 0x3, "58b2c8a8ab57eaf66fdf5d5357a2d9f99f43679aba3343b8593c376b599d95ce376b0d114ae347e9a3ec592b8a46d4642d13"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfffb, 0xffff}}, @TCA_ATM_FD={0x8, 0x1, r4}, @TCA_ATM_FD={0x8, 0x1, r4}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff3}}, @TCA_ATM_HDR={0x9, 0x3, "ab4984b51e"}, @TCA_ATM_HDR={0x2c, 0x3, "05e05235d68ae919f25431ee4b350aa58b454811d6c50673d617cce9d8fc512c66e94aaa0d267067"}]}}]}, 0xc8}}, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000), &(0x7f0000000200), 0x2, 0x2) recvmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000002880)=""/4103, 0x1007}], 0x2}, 0x7}], 0x1, 0x2, 0x0) 1m31.149856178s ago: executing program 1 (id=538): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x1}, 0x8) bind$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev}}, 0x1e) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000f, 0x11011, r3, 0x0) mprotect(&(0x7f0000271000/0x3000)=nil, 0x3000, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 1m16.030710808s ago: executing program 34 (id=538): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x1}, 0x8) bind$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev}}, 0x1e) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000f, 0x11011, r3, 0x0) mprotect(&(0x7f0000271000/0x3000)=nil, 0x3000, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 53.131596105s ago: executing program 3 (id=673): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x3, 0x80) pread64(r0, &(0x7f0000000040)=""/4096, 0x1000, 0x5) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000010c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001100)={0x1ac, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x7c}}}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x2, 0x1}, {0x0, 0xa}, {0x6, 0x9}, {0x3, 0xa}, {0x7, 0x4}, {0x2, 0x4}, {0x4, 0x4}, {}, {0x4, 0x1}, {0x3, 0x5}, {0x2}, {0x2, 0x1}, {0x4, 0x8}, {0x7}, {0x1, 0x1}]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x5c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2a, 0x2, [{0x3, 0x8}, {0x4, 0xa}, {0x2, 0x4}, {0x3, 0x2}, {0x6, 0x9}, {0x6, 0x2}, {0x0, 0x1}, {0x4, 0x5}, {0x0, 0x6}, {0x1, 0x4}, {0x7, 0x9}, {0x5}, {0x4, 0x3}, {0x6, 0xa}, {0x3, 0x2}, {0x0, 0xa}, {0x7, 0x3}, {0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x5}, {0x7, 0xa}, {0x2, 0x3}, {0x7, 0x7}, {0x2, 0x7}, {0x1, 0x6}, {0x7, 0x1}, {0x0, 0x6}, {0x2, 0x4}, {0x5, 0x2}, {0x7, 0x5}, {0x6, 0x3}, {0x3, 0x8}, {0x7, 0x5}, {0x6, 0x7}, {0x6, 0x1}, {0x1, 0x1}, {0x1, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x77a, 0x2397, 0x5, 0x800, 0x3, 0x9, 0x101]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1, 0x7f, 0x3495, 0xd1, 0x9, 0x7, 0xe]}}]}]}, @NL80211_ATTR_TX_RATES={0x60, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x4e, 0x1, 0x60]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0x8, 0x72, 0x7, 0x7e6, 0x7e2, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x84, 0x3, 0x3, 0xfff9, 0x46, 0x2, 0x1ff, 0x3]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0xa4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xfff8, 0x6, 0x1, 0x0, 0x3ff, 0x0, 0xfff8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x4, 0x4, 0xc, 0x1b, 0x6, 0x5, 0x36, 0x3, 0x48, 0x16, 0x2, 0x1b, 0x60, 0x1, 0x36, 0x0, 0xb, 0x6c]}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x22, 0x5142, 0x7, 0x6, 0x5, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa2f, 0xb, 0xc, 0x0, 0x2, 0x9, 0x9, 0x6]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000001340)) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001380), 0x105641, 0x0) accept4$unix(r3, 0x0, &(0x7f00000013c0), 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000001400)={0x0, 0x6, 0x467}, 0x8) r5 = open(&(0x7f0000001440)='./file0\x00', 0x100, 0xf7147c3d275a39c0) read$char_usb(r5, &(0x7f0000001480)=""/154, 0x9a) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000001540)=0x97) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001580)={0x2, {0x2, 0x1eb, 0x0, 0x0, 0x3, 0x4}}) ioctl$KVM_SET_TSC_KHZ_cpu(r5, 0xaea2, 0xa) setsockopt$inet_tcp_int(r5, 0x6, 0x3, &(0x7f00000015c0)=0x76fa17a, 0x4) r6 = syz_open_dev$vim2m(&(0x7f0000001600), 0x6, 0x2) connect$inet(r3, &(0x7f0000001640)={0x2, 0x4e20, @empty}, 0x10) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000001680)={{0x1, 0x1, 0x18, r6, {0xfffffffe}}, './file0\x00'}) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f00000016c0)=@usbdevfs_disconnect={0x8}) gettid() ioctl$SIOCX25SSUBSCRIP(r8, 0x89e1, &(0x7f0000001700)={'geneve1\x00', 0x82d9, 0x4}) ioctl$DRM_IOCTL_AGP_ALLOC(r8, 0xc0206434, &(0x7f0000001800)={0xad7, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_BIND(r8, 0x40106436, &(0x7f0000001840)={r9, 0x6}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), r8) ioctl$DRM_IOCTL_MAP_BUFS(r8, 0xc0186419, &(0x7f0000001a40)={0x1, &(0x7f00000018c0)=""/4, &(0x7f0000001a00)=[{0x80000000, 0xd8, 0x7, &(0x7f0000001900)=""/216}]}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r7, 0x800442d2, &(0x7f0000001ac0)={0x1, &(0x7f0000001a80)=[{0x0, 0x0, 0x0, @dev}]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000001b00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001f00)={r10, 0x0, "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", "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"}) 52.948051207s ago: executing program 3 (id=676): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="864cd12f8600d1b2") openat$audio(0xffffffffffffff9c, 0x0, 0x400000004a2501, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000140), 0x4) ioctl$RTC_WKALM_SET(r4, 0x40187013, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x15, 0x0, 0x6, 0x0, 0x1000004}}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000faff000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000002aa0000000004000400"/180], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000280)='net/icmp6\x00') read$FUSE(r9, &(0x7f0000003580)={0x2020}, 0x2020) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 51.089290103s ago: executing program 3 (id=683): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x5, 0x2, 0x1}) epoll_create1(0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x5, 0x7}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140064b8f56ae52e2988fff5000000000a00000a20000000000a01080000000000000000010000090900010073797a310000000054000000030a030000000000000000000100000a0900010073797a31000000000900030073797a300000000028000480080002401501ad7d14000300090000000000000072745f77696669000800014000000005"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000001380)={0x6}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000100fefffff5000000000a00000a20000000000a01080000000000000000010000090900010073797a310008000070000000030a010400000000000000000100000a0900010073797a31000000000900030073797a300000000028000480080002401501ad7d140004"], 0xb8}, 0x1, 0x0, 0x0, 0x200009c4}, 0x340040c1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=@newsa={0xfc, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x16}, {@in6=@loopback, 0x4d2, 0x3c}, @in6=@loopback, {0x0, 0x3, 0x0, 0x1000000000000001, 0x0, 0x0, 0x10000}, {}, {0x20000000}, 0x0, 0x10000, 0xa, 0x1, 0x0, 0x20}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x7}}]}, 0xfc}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) 51.000725611s ago: executing program 3 (id=684): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000001c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000080)) 50.368868082s ago: executing program 3 (id=685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f0000000140)=[{r0, 0x4522}, {r0, 0x561d}, {r0, 0x240}, {r0, 0xc100}, {r1, 0x50}, {r0, 0x40}, {r0, 0xa000}], 0x7, &(0x7f00000001c0)={r2, r3+60000000}, &(0x7f0000000280)={[0x8]}, 0x8) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f, 0x0, 0x3837, 0x0, 0xfffffffffffffffc, 0x0, 0x8}, 0x0, 0x0, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000300)={0x30, 0x5, 0x0, {0x0, 0x3, 0x8, 0x8001}}, 0x30) clock_gettime(0x73d120d1a3af8f7f, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000000)='./file1\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r6 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r6, 0x0) setpgid(0x0, r6) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x8) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r7], 0x20}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 50.180994455s ago: executing program 3 (id=688): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCFLSH(r0, 0x8924, 0x20001116) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x1f, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2={0xfc, 0x2, '\x00', 0xfc}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x84}}, [@migrate={0x50, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in=@private=0xa010102, @in6=@mcast1, @in6=@loopback, 0xff, 0x0, 0x0, 0x2, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40051}, 0x0) 35.042351835s ago: executing program 35 (id=688): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCFLSH(r0, 0x8924, 0x20001116) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x1f, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2={0xfc, 0x2, '\x00', 0xfc}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x84}}, [@migrate={0x50, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in=@private=0xa010102, @in6=@mcast1, @in6=@loopback, 0xff, 0x0, 0x0, 0x2, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40051}, 0x0) 7.48154058s ago: executing program 7 (id=841): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x1, 0x0, 0x0, 0x1, 0x7fff}, 0x7ff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000300)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x80045b09, 0x0) socket$packet(0x11, 0x3, 0x300) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000380)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2a381) write$sndseq(r3, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x9, 0x4}, {}, {}, @result}], 0x1c) 6.980824584s ago: executing program 5 (id=842): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) sendmmsg$inet6(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001700)='y', 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '+f'}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) 6.83629786s ago: executing program 5 (id=844): openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a00)={0x1a0, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x5f}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xffffffff}, @NL80211_ATTR_FRAME={0x51, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x2}, @device_a, @broadcast, @from_mac, {0x9}, @value=@ver_80211n={0x0, 0x6, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x1232, 0x7, @device_a, {0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x12}]}, @val={0x2d, 0x1a, {0x300, 0x0, 0x0, 0x0, {0x10001, 0x3, 0x0, 0x259, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x400, 0x800, 0x3}}}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xef}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xbb0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1000}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7e2}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x16b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e0}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0xa5, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @device_a, @broadcast, @random="fd430a7a4a67", {0xd, 0x3}}, @tdls_teardown={0xc, 0x3, {0x14, {0x37, 0x6f, {0xd, 0x2, "cf8557629cf39ecab88ddf2d2d0e29ff", "d79fc712250225aff1e0359904ffc474c93c72649c20c2a3a234d9ee5393d8fc", "ce43d9bbcfac8a034f21cd12194d29037c6918e192bd39a44c0b7eccb5050d52", [{0x2}, {0x1, 0x19, "a17ca1e3f5bfb0bbd43cf02997bab800cf07e67ec181df59c1"}]}}, {0x65, 0x12, {@initial, @device_a, @device_b}}}}}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x24011}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000004000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0adff010000000000000dd6e4edef3d93452a09004b43370e9703890723f97e46bb", 0xd3}], 0x1}, 0x20004804) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000004000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0adff010000000000000dd6e4edef3d93452a09004b43370e9703890723f97e46bb", 0xd3}], 0x1}, 0x20004804) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$dsp(r2, &(0x7f00000000c0)=""/105, 0x69) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000000)=0xa481) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mmap$snddsp_status(&(0x7f0000000000/0x4000)=nil, 0x1000, 0x4, 0x140873, 0xffffffffffffffff, 0x82000000) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904"], &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000005c0)=""/4163, 0x1043}], 0x1}, 0x40000000) sendmsg$NFT_BATCH(r1, &(0x7f0000002380)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002340)={&(0x7f0000002000)={{0x14}, [@NFT_MSG_NEWRULE={0x194, 0x6, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x110, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x3}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, {0x40, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x3c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xf}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x7, 0x7, 0x1, 0x0, "2d088b"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8847}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x29}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}}, @NFT_MSG_DELRULE={0xa0, 0x8, 0xa, 0x207, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x4c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x5}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x45}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xed}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x5}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x4}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELFLOWTABLE={0x4c, 0x18, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x201, 0x0, 0x0, {0xf, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}], {0x14}}, 0x328}, 0x1, 0x0, 0x0, 0x4000040}, 0x890) write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[], 0xfe33) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x30, 0x99, 0x4, 0xfffff020}, {0x6, 0x0, 0x1, 0x5}]}, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)={0x50, r5, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfb}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7fff}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x901}, 0x51) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x1}, 0x8) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x8) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x8) syz_usb_connect$uac1(0x5, 0x9c, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109028a000301ffa0060904000000010100000a240100000202010207240504062e7d0904010000000000000000010101010200000c2402ec79030420be11d1d109050109758b0620010725010006efff0904020000010200000904020101010200001124020306040803000c0000000000000007240116050210090506090002"], 0x0) 5.451868148s ago: executing program 4 (id=850): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40087447, 0x0) syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) 5.280960957s ago: executing program 4 (id=851): r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc070002596105052406000105240006000d240f01900800000000070008060600000011090401"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}}, 0x0) (async) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x14) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000001c0)={0x2003, 0xf4, 0x8, 0x1, 0x21}) (async) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000080)={0x0, 0x0}) syz_kvm_add_vcpu$x86(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000200)=[@wr_crn={0x46, 0x20, {0x3, 0xfff}}, @wrmsr={0x1e, 0x20, {0xbcc, 0x2}}, @wr_crn={0x46, 0x20, {0x3, 0x1}}, @wr_crn={0x46, 0x20}, @uexit={0x0, 0x18, 0x2}, @code={0xa, 0x64, {"0f217ff3408f03c463d16daa0000010057b805000000b9003000000f01c1c462fd33b2de900000652e36430f796f0065662e2e0f221e66b8d3000f00d066baf80cb80d06308aef66bafc0cb0d0eec481c51400"}}, @wrmsr={0x1e, 0x20, {0xced53fea30d2dbe6}}, @rdmsr={0x32, 0x18, {0xbd7}}, @rdmsr={0x32, 0x18, {0x97c}}], 0x14c}) (async) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x6) syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000dda000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000440)="f30f09baf80c66b880e6528a66efbafc0cb80000efbad004b08aee66b8000001000f23c00f21f86635000004000f23f80f01c3660f38dce667660f71e10066b9fe0900000f32bad104ec0f30"}], 0xaaaaaaaaaaaad29, 0x40, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 4.214329547s ago: executing program 7 (id=853): sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x800c0c1}, 0x4008024) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000740)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7018fbdbdf2505008b61f1e5c503a612a5e03f0300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x80) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012002179c3108fd0b0e0104bd0102030109021b00010755e0010904fdfe01f892a65c090507074000024f05c19fd989e3a1fc005ad9a44ecfcc0ff4a120cb0c06e06f197ffd5351178c3501e676e45b8eacc30c0ace153bce030556bcc61ebc9eef6eae3f6ec4dc3ceebd623f4aac0143bb2a92668ea8db3c843ec3af99c203ff98b3b976847daed4db09c48cd27afee25fbd8e87ef4ddc848ab8411db47d44577a0fbd0f6f8a59f8a440727cb64cd84581aef62fdaff350f8ab7bca6792b64b51912f1478d70a804fded"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x71, &(0x7f0000000440)=@string={0x71, 0x3, "308124a3611673bb20a41f9a718c968a04d9746d8957928609351b772ec8380e61384d6d582efcd6fa1ee0ee15df38fde146644ed0d65aa7f8a73501c33b004eac1adedefc7ef44d2450e485b819160faf4aa74593ef0d2c514d0b8fe2c45059f76a24257b78927b85bb981a349c7b"}}]}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r3 = socket(0x2, 0x80805, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r4, 0xee01, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="01002dbd7000ffdbdf250c0000001800058008000100756470000c00028008000400d19f0000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r11, 0x4068aea3, &(0x7f0000000000)={0xa3, 0x0, 0x0}) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r11, 0xc008aec1, &(0x7f0000001280)) socket$xdp(0x2c, 0x3, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r12, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000013c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x28}], 0x1}, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4.016729821s ago: executing program 6 (id=854): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c) listen(r0, 0x100) r1 = socket$inet6(0xa, 0x80002, 0x88) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000080)=""/13, 0xd}, {&(0x7f0000000680)=""/212, 0xd4}], 0x2) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000e00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000180)="c1", 0x1}, {&(0x7f0000000480)="8c3206c17e367ae04671233facb3e7ac8f79975047cc48f37cbb2a2685c6274a6e46e5222b10a12fa346f2466d9e004fcd2638cae1cf", 0x36}, {&(0x7f0000000540)="3a970f1a34a3051622d217542018", 0xe}], 0x3}}], 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRES8=r2, @ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="bd215228c325675a6a98d313579cef6e72a168113d59a9af9f901ff5423ef2aa4aa7f04d18c3b617588d68257fce33651d4b90863ecab2215fe0832c434946f21690b85b406d7cd408f4066689edd36a8f9f141f5fe0198a6ab72b8775133d2d4fc28384e93c0a4d3cd506dc"], 0x18, 0x48d5}, 0x8050) 3.83943058s ago: executing program 6 (id=855): pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), &(0x7f0000000400)={&(0x7f00000003c0), 0x8}) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000140)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fdfffe05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) mount$overlay(0x0, &(0x7f0000000580)='.\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}, 0x5c}]}) 3.676243681s ago: executing program 6 (id=856): r0 = syz_open_dev$video(&(0x7f0000000000), 0x2fed, 0x0) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000580)={0xc4, "c6efcee100000600000000000000fbe071aae79af601000000000c00"}) (async) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000100100000200000001000000000000001400000000000000100100000e"], 0x30}, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, &(0x7f0000001200)={'#! ', './file0', [{0x20, '\x98\xe1Cvg\x9cO\x16\xc0TC\xe8\xb8\x91W\xb8\x84\xdf\xbe\xbd\x8f\x81!\xf2V[\x03V\xba/\xb9+\xd2\x95\xe0t\x0f<}T\v\x0f\xe8\xae\x89\xfa^\xce\xae[t/\x12\x1f\x02\x85\xbd\xbc\r(\xfd\xf2\xeeB\x12\xdc\x06\x1d\xd8\x86g\xcf\xb6\xde\xeb\xfc\xfc~A\x95\x8a6'}, {0x20, '5\xed\xe9\xe8\f\xcb\x82;\xc5\x98\"\x1c\x8d\xbb,X}\xec\x9f\xe5\xf0\x1f\x02\a\x0e\xe09\x17\xa9\xdbXP\x94}L\x17WT\xc0Rc\xe5\xd3\x9a\xcfGr3\xbaf\x8aS\xc6Q\x16\xf4\x9f\x02u.\xaf\xf3\xb8\x0e\x85a8\x03\x02\xf4\xf1\\b\x1ew\xd4F\xf1\xf9I\xe4\xca\xb1\xa51Sk\xdf\xc7\xd2\x87.b\xb9|+\x9f3@\xdfs\xa0\x01\x8fV/0\x8bo\xccQ\x9c\x9e\xae!b\xa0 \xea\xa4(C\n\x96\xdf\xd2\xd6\x91\x90\x83 \xb2\xb4\xac{\x02\xde,Ff\x98\x84\x16\x1b\x96\xac\x9e\x17\xf0\x13\xfa\xd1+\xcc\x19\x81ZZ\xa0\xde\xeb\xf3`\x0e\x87:` \x1b\xec\xc81\xb7\x91\xfdcL\xdcH/0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b34, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x74c, r1, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x190, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcb}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xa8}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9c}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x72a04c93}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3ce1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xec}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x98}]}, {0xe8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xc8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x8, 0x1, 0xbf, 0x974a, 0xc9, 0x2]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x1, 0xa}, {0x5, 0x7}, {0x6, 0x9}, {0x0, 0x2}, {0x2, 0x3}, {0x1, 0x7}, {0x6, 0x1}, {0x5, 0x9}, {0x3, 0x8}, {0x0, 0xa}, {0x4, 0x6}, {0x1}, {0x7, 0x8}, {0x0, 0x1}, {0x7, 0x5}, {0x1, 0x2}, {0x0, 0x2}, {0x5, 0x6}, {0x2, 0x4}, {0x7, 0x5}, {0x0, 0x5}, {0x4, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x1, 0x5}, {0x1, 0x9}, {0x1, 0x6}, {0x1, 0x6}, {0x0, 0xa}, {0x0, 0x6}, {0x1, 0x4}, {0x4, 0x5}, {0x0, 0x5}, {0x5, 0x1}, {0x3, 0x5}, {0x3, 0x1}, {}, {0x0, 0x7}, {0x6}, {0x4, 0x1}, {0x2, 0x3}, {0x1, 0x2}, {0x3}, {0x7, 0x5}, {0x1, 0x2}, {0x4, 0x6}, {0x1, 0xa}, {0x3, 0x2}, {0x1, 0x5}, {0x5, 0x1}, {0x6, 0x9}, {0x4, 0x7}, {0x6, 0x1}, {0x6, 0x3}, {0x4, 0x4}, {0x6, 0x9}, {0x5, 0x8}, {0x2, 0x4}, {0x6, 0x6}, {0x2, 0x5}, {0x2, 0x6}, {0x7}, {0x1, 0x1}, {0x3, 0x7}, {0x7, 0x1}, {0x7, 0xa}, {0x6, 0xa}, {0x0, 0x8}, {0x4, 0x5}, {0x7, 0x8}, {0x0, 0xa}, {0x4}, {0x3, 0x9}, {0x1, 0x9}, {0x2}, {0x3, 0x5}, {0x2, 0xa}, {0x0, 0x1}, {0x4, 0x2}, {0x6, 0x7}, {0x5, 0x9}, {}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x54, 0x6, 0x7ff, 0x7, 0x1ff, 0xa732, 0xb, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x220, 0x11d, 0x0, 0x1, [{0x184, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x61}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf6}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x154, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6c, 0x60, 0x24, 0xc, 0x60, 0x12, 0x18, 0x1b, 0x9, 0x12, 0x15, 0x1, 0x9, 0xc, 0x1, 0xb, 0xc, 0x60, 0x18, 0x0, 0x18, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0x1ff, 0x6, 0x49, 0x7, 0xfffc, 0xb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x3, 0x7, 0xfffb, 0xfffa, 0x0, 0xf1, 0x9]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xb, 0xc, 0x36, 0x3, 0x6, 0x24, 0x12, 0x1, 0x5, 0x60, 0x48, 0xc, 0x4, 0x24, 0x48, 0x12, 0x6, 0x16, 0x5, 0x1, 0x27, 0x16, 0x30, 0x61, 0x3, 0x16, 0xb, 0x6c, 0xc, 0x18, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7f, 0x6, 0x2, 0xc, 0xfffd, 0x8, 0xffff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x5, 0x6, 0x9, 0x3720, 0x690, 0x8001, 0x5]}}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xf54, 0x497, 0x4, 0x6, 0xadee, 0x5, 0x9, 0xb4a9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8000, 0x8972, 0xbf, 0x5, 0x8, 0x1, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x2, 0x3, 0x7b, 0x8, 0x2, 0xd, 0x2]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x1}, {0x5, 0x9}, {0x3}, {0x2, 0xa}, {0x0, 0xa}, {0x6, 0x1}, {0x1, 0xa}, {0x0, 0x7}, {0x6, 0x2}, {0x1, 0xa}, {0x4, 0xa}, {0x4, 0x2}, {0x1, 0x7}, {0x0, 0x5}, {0x1, 0x3}, {0x1, 0x3}, {0x4, 0x7}, {0x2, 0x8}, {0x4, 0x1}, {0x0, 0x7}, {0x5, 0xa}, {0x0, 0x3}, {0x2, 0x2}, {0x4, 0x1}, {0x2, 0x6}, {0x0, 0xa}, {0x1, 0x3}, {0x1, 0x9}, {0x7, 0x7}, {0x0, 0x1}, {0x7, 0x2}, {0x5, 0x9}, {0x1, 0x7}, {0x1, 0xa}, {0x7, 0x7}, {0x2, 0xa}, {0x2, 0x3}, {0x6, 0x5}, {0x5, 0x2}, {}, {0x1, 0x7}, {0x3, 0x5}, {0x3, 0x1}, {0x3, 0x4}, {0x1, 0x1}, {0x7, 0x9}, {0x7, 0x4}, {0x5, 0x1}, {0x2, 0x9}, {0x6, 0x6}, {0x3, 0x5}, {0x1, 0x2}, {0x1, 0x8}, {0x0, 0x1}, {0x1, 0x7}, {0x5, 0x14}, {0x1, 0x2}, {0x5}, {}, {0x2, 0x4}, {0x6, 0x1}, {0x3, 0x6}, {0x7, 0x9}, {0x0, 0x8}, {0x4}]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfbe}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa2}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x81}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x10}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffffd}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0xe0ccbf639995630c}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x68}]}]}, @NL80211_ATTR_TID_CONFIG={0x1dc, 0x11d, 0x0, 0x1, [{0xec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x45, 0x2, [{0x0, 0x6}, {0x3, 0x8}, {0x0, 0x9}, {0x4, 0x5}, {0x7, 0x8}, {0x5, 0x7}, {0x3, 0x9}, {0x2, 0x6}, {0x1, 0x6}, {0x6, 0x7}, {0x1, 0x6}, {0x5, 0x4}, {0x4, 0x2}, {0x3, 0x1}, {0x4, 0x9}, {0x1, 0x2}, {0x6, 0x2}, {0x0, 0x6}, {0x4, 0x8}, {0x6, 0x1}, {0x4}, {0x0, 0x5}, {0x3}, {0x4, 0x5}, {0x6, 0x2}, {0x1, 0x6}, {0x5, 0xa}, {0x4, 0x4}, {0x0, 0x7}, {0x6, 0x4}, {0x4, 0xa}, {0x2, 0x8}, {0x3, 0x8}, {0x2, 0x3}, {0x3, 0x7}, {0x4}, {0x7, 0x7}, {0x1, 0x9}, {0x6, 0x7}, {0x7, 0x5}, {0x1, 0x4}, {0x1}, {0x6, 0x3}, {0x0, 0x9}, {0x4, 0x1}, {0x5}, {0x4, 0x8}, {0x2, 0x8}, {0x6, 0x8}, {0x0, 0xa}, {0x0, 0x6}, {0x5, 0x8}, {0x7, 0x1}, {0x0, 0x4}, {0x0, 0x1}, {0x3, 0x6}, {0x2, 0x5}, {0x1, 0x4}, {0x2, 0x3}, {0x5, 0x9}, {0x1, 0x4}, {0x7, 0x4}, {0x0, 0x5}, {}, {0x7, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x393, 0xffff, 0x400, 0x3, 0x9, 0x101, 0x500, 0x100]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x36, 0x4, 0x24, 0x6, 0x0, 0x30, 0x3, 0x1, 0x2, 0x5, 0x3, 0x60, 0x4, 0x16, 0x0, 0x18, 0x16, 0x4, 0x0, 0x5, 0x1b]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0xf74, 0x116d, 0x0, 0x1, 0x4, 0x6, 0xb37]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x33}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcf}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xeb}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe1}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x11}]}, {0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x800}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}]}, @NL80211_ATTR_TID_CONFIG={0x17c, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbe}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xbf}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x87}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xfb}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3b}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6f}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1000}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x10}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9c}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1622d02a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc0}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x94}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x937}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x80}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x74c}, 0x1, 0x0, 0x0, 0x90}, 0x8080) 3.12303382s ago: executing program 4 (id=859): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406d0494c200000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x7d, 0x2a82) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r1, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x800000000000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000080)={0x2, 0x2, 0x0, "6809584e06ec00001caedd873c0e91e4b5074592e7059ffe532d5652ad0f1540"}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000380)={0x2c, &(0x7f00000000c0)={0x0, 0x10, 0xe6, {0xe6, 0x22, "50e17c24fdb2b387b1b016696dedb52e6eca33d2d0fd7a7dc43774362bb05a26ee7e7b841272248e68736c69d180fc1053419f7bd7d4a22f0eceb142537131d3d92c1e6504d1020e684b2b250d73878d57ec5863e2e5b746675a6ac7b77fd71b932befa69b7ebbd0c275aaf41cb28cab322ab0734d690cb39df2ad1a13372519b241ec8d44b07e44359c7a2205dc9a77a5e8da93143529b0f16e5de91823ae1ca5b1949226496c208f1e1e3201ff161fdb0fee315862d801e5b792105784ef4cf8cc15a49bfb0cfb79c738088fe4fa79ecf51159f8d772c818dfcd87a10be8332c3e8283"}}, &(0x7f0000000280)={0x0, 0x3, 0x8d, @string={0x8d, 0x3, "bd86208b630dddf2f83e11fecc6dad86cfb4ac52f709196cad0090ab107e917f6cf153049d66bb82b5aad70297de9b761793913081f0e945f786d03e5fe3fd6311d7591a261df90503abddccc8d3589a4f396a9e82edbacbccc9c1e7d7a0f0c4b01e196bdac13e041ce095abcaed32c11a0d256d58f08fb82c5b279d41104bb8793a419fa1455522448a47"}}, &(0x7f00000001c0)={0x0, 0xf, 0x4b, {0x5, 0xf, 0x4b, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "ce4132458d3d6f765dfb78d490582ec8"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x6e, 0x23, 0x1, 0x2, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x1c, "d21ef03b9e377ec80cf2f6b0d474462d"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x401, 0xf00f, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x0, 0x5}]}}, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x0, 0x9, 0x4, "09b9c6b6", "98b36beb"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x8, 0x6, 0xe, 0x8, 0x2}}}, &(0x7f0000000840)={0x84, &(0x7f00000003c0)={0x40, 0x30, 0x9f, "dd485f519ee2d7837a1222875f59ecff2c2418bed4822db065f1fac834d49dc89dba5e83d369f3bbb79d30f379126ebc09192f6c7e440e3dcc45c12c08f50fee9bae167681fc3e6ef241fa4377cf12904862a364399da7e00a48cf1eb31e775c1758a84ef74d7d1ef43447dcd68920309982ea97521b80390373c450300af8803a6052b87cc949fd6e5ca0dc72a9fd1a91242953571fe33ce24272dc347a0c"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x8d}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000540)={0x20, 0x0, 0x8, {0x0, 0xa8, [0x110f0]}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x8000}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000600)={0x40, 0xb, 0x2, "35a5"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000680)={0x40, 0x13, 0x6, @link_local}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @random="29c7c9574375"}, &(0x7f0000000700)={0x40, 0x19, 0x2, 'vh'}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0xdd5f}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0xcf}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x2}}) 2.664898187s ago: executing program 6 (id=860): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000b80)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002cbd7000fedbdf253b0000000c009900060000005f00000008005700ffffffff04006c000800a100ef400000050019010c0000000800a000010000000800a100b00b00000800a0000600000008009f00030000000800a100040000000800a000020000000800a0000200000004006c0008005700e2070000"], 0x80}, 0x1, 0x0, 0x0, 0x2c011}, 0x404c000) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=@canfd={{0x1, 0x1}, 0x39, 0x0, 0x0, 0x0, "3992ca995e968b0b065f7922b761528f0199602d1e09faf0c0f1c2db040f957a34b2aa413157e3ec06fdcf6128269e6763e9c19b00d4eb026a6375a22b930a64"}, 0x48}, 0x1, 0x0, 0x0, 0x8490}, 0x1) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x8000) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040bd28090900000000000109022400cc0000000009040000020300000009210000000122070009058103"], 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000001c0)=0x2000) ioctl$SNDCTL_DSP_SETFMT(r2, 0x5001, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 2.565126062s ago: executing program 5 (id=861): r0 = socket$inet6(0xa, 0x1, 0x2) recvmsg(r0, &(0x7f0000000300)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)=""/147, 0x93}, {&(0x7f0000000140)=""/6, 0x6}, {&(0x7f0000000180)=""/72, 0x48}, {&(0x7f0000000200)=""/4, 0x4}, {&(0x7f0000000240)=""/22, 0x16}], 0x5}, 0x2000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vxcan1\x00'}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000003c0)={0x0, @l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}, 0x4}, @in={0x2, 0x4e20, @broadcast}, @l2tp={0x2, 0x0, @remote, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000380)='geneve1\x00', 0x7f5, 0xb46, 0x8}) (async) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000003c0)={0x0, @l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}, 0x4}, @in={0x2, 0x4e20, @broadcast}, @l2tp={0x2, 0x0, @remote, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000380)='geneve1\x00', 0x7f5, 0xb46, 0x8}) execve(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)={[&(0x7f0000000480)='::\x00', &(0x7f00000004c0)='geneve1\x00', &(0x7f0000000500)='\\%-%\x00']}, &(0x7f0000000740)={[&(0x7f0000000580)='\\-]\x00', &(0x7f00000005c0)='vxcan1\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='vxcan1\x00', &(0x7f0000000680)='\\\x00', &(0x7f00000006c0)='(.\x00', &(0x7f0000000700)='geneve1\x00']}) (async) execve(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)={[&(0x7f0000000480)='::\x00', &(0x7f00000004c0)='geneve1\x00', &(0x7f0000000500)='\\%-%\x00']}, &(0x7f0000000740)={[&(0x7f0000000580)='\\-]\x00', &(0x7f00000005c0)='vxcan1\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='vxcan1\x00', &(0x7f0000000680)='\\\x00', &(0x7f00000006c0)='(.\x00', &(0x7f0000000700)='geneve1\x00']}) memfd_create(&(0x7f0000000780)='\x00', 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x6c, r2, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x74eba3c5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5b5b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc0a6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa0}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) execve(&(0x7f0000000940)='./file0\x00', &(0x7f00000009c0)={[&(0x7f0000000980)='{\'\x00']}, &(0x7f0000000a80)={[&(0x7f0000000a00)='./\x00', &(0x7f0000000a40)='(\x00']}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000ac0), 0x80000) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000b00)={0x0, 'macvlan1\x00', {0x2}, 0x100}) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000b40)=@ccm_128={{0x304}, "36a173a4ea323acc", "04b0774ab955dc77acfcb815a8a72ab3", "2d9ff6de", "1c93f30cca2008d7"}, 0x28) (async) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000b40)=@ccm_128={{0x304}, "36a173a4ea323acc", "04b0774ab955dc77acfcb815a8a72ab3", "2d9ff6de", "1c93f30cca2008d7"}, 0x28) close(r1) (async) close(r1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000b80)={'macsec0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x29}}}) getsockname$inet6(r0, &(0x7f0000000bc0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000c00)=0x1c) close(r1) syz_genetlink_get_family_id$fou(&(0x7f0000000c40), r1) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000c80)=@loop={'/dev/loop', 0x0}, 0xee00, &(0x7f0000000cc0)) (async) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000c80)=@loop={'/dev/loop', 0x0}, 0xee00, &(0x7f0000000cc0)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000d00)={0x8, 'veth1_to_hsr\x00', {'nr0\x00'}}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000d40)={0x6, 'syz_tun\x00', {0x88c}, 0x7}) socket$inet(0x2, 0x6, 0x2) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000d80)='./file0\x00', 0x220100, 0x48) mknodat$loop(r4, &(0x7f0000000dc0)='./file0/file0\x00', 0x8, 0x1) pipe2$9p(&(0x7f0000000e00), 0x0) (async) pipe2$9p(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fstat(r3, &(0x7f0000000e40)) (async) fstat(r3, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00), 0x800) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) write$P9_RSTATu(r6, &(0x7f0000000f80)={0x61, 0x7d, 0x1, {{0x0, 0x3d, 0x8, 0x3, {0x80, 0x4, 0x2}, 0x2010000, 0x5, 0x7b0, 0x5, 0x3, '::\x00', 0x3, '::\x00', 0x1, '*', 0x3, '&\\}'}, 0xf, '/dev/snd/timer\x00', r7, r8}}, 0x61) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000001000)) close(r5) (async) close(r5) 2.267338738s ago: executing program 7 (id=862): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x10484) (async) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x10484) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000070e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2.263277935s ago: executing program 5 (id=863): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/106, 0x6a}], 0x1, 0xe, 0x1) r2 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x13, r3, 0xffffc000) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x1, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x4, &(0x7f0000000140)=0xffffffff, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) 1.900812903s ago: executing program 7 (id=864): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000980)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="005e9bde56e01a56c25555760000000000000072b6aedd59dd22e1486cb527a72d3f835e1842"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0104811, 0x0) socket$igmp6(0xa, 0x3, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r3], 0xc4}}, 0x0) 1.578995345s ago: executing program 5 (id=865): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) (async) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000340)=0x13e) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000040)=0x10) 1.444566178s ago: executing program 5 (id=866): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x101000, 0x2) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000040)={{0x0, 0x0, 0x80, {0xdddd0000, 0x0, 0x6}}, "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", "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"}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f00000020c0)=0xa) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r0, 0xc008aec1, &(0x7f0000002100)={0x1, 0x0, [{0xa, 0xa00000, 0x2, 0x1, 0x865, 0x2, 0xe48b}]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000002140)=@arm64) r1 = socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x13, r1, 0xa33ff000) r2 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000002180)={0x0, 0x1, {0x1a, 0xe, 0xb, 0xa, 0x8, 0x1, 0x3, 0x9f, 0xffffffffffffffff}}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f00000021c0)={{0x1, 0x0, 0x80, {0x0, 0x1000, 0x2}}, "c272719bfd8df88fe203a8795645ebc1fb6b6144021431ac348f5e3a37fec0f9c498a2d4b1554922b78add8dd04b6d5906e2d52161247980fa55fd023955c39e2a1bacad1d854a3a714cc3ae24ddac0cc8949e76803fcd24cb5f54f8a37908603ba8738ee2f6ee8c886ed377a47333de94d16840b4fdf70ad84f3bec98079dcce283ee733e2929957f52efe1048ccc3191cb442408f703213ac1b4605370e22cb1f9af712a66968894be006155658daea13f306712dd585082a085ccb1401d91e65e990e37e455e0aee36b8997c1d8f7e34d438fe5194057bdff907ee2c4dedb2ca43debb6acade250b2c212453e17bb922e224b5d12398afc1cd119b36d3337776df31290db99b509e2adc30c83a4b29394e308d9e90ddc8b738af441ad4ea07cc10fdbba26b1e9fadac2f51f7cc1ab7b0ae98c7b4fbc428c26a20d4510f81cb497c954b1b89819fa2ef0578bb99663de12851e1df9f7cc618c77cdd4df22006fd92f2f318c31f307c030c77e7721af7de7b88752a91a7b89ffca42ff7a0d0acabd8ac790a9a6a82353dd2d6478d250191fd1f1070a14dfc173318ce1fdad34fa97e7a3a60700a9eb4130967a1ba48e48b2b2aab598d6ad12f92f5ea30d389af0e1e558ccc4e280bf0033e7c3bfad5eb9b9b8b756fe1c5b01ba8751fc61b0935d8094b256db87f6152e0c4c640fdf8b2e08b850e4b770aec78f8da8b95a4e01c6282afe0bf1ce471a51242ab152b0722c07e84bf0bf01a1776918692b662b0050d1a342cde3aefbffed380a6b3643bca7f0082fecd48dc060ad31ac406ccaad95128e16429b576c6e89ee65bd6285f62ec46ff18fd360ab2d8015ac8d924f58d54fae82ab1689d9d00a05cd12bfa01d6cd01e31446338658366fb68c53e71e5481fbb6add9bccd206668c9b8e6dd313ed9fdeebeb0a29a0fd205617822716fd6cc6cdef775244852b842256698d0976c9990d67e2742bcc08403ad310827bdf36bc4094a0a3255f1be570d3d2d7ebcc6c59229a55c4cebbd0fbedccee608c8fe2a72cf7e07f939baef09c8cdec993415fa2a49caa59fcc1b7c98e5fbc473b9084dd7ae3b67a40056dc7f0e30e4709ef41f7903ddb634251e89f1dd56bcfe496d1c6161f2f459faf84e2f3b02a045d0f4e9460885b0e3a6cfa906c1bce4a126f61e4dcbedc9ab6dd7223bf77ea58275ddbb75dec297b2553883fa3a1d3f199fc6322d700cc2989698eda44222f3145e3edb858876bb8f2154d5afe477b61601dde7bacd958f64c3240455b1be487eaecf031ab36b99ade58f9a873d2ab868988abb6f38fa4842424cfee78e2d1198bf510f1e4ebe86e1fa512a252f6358c8e7950f8c83ff41467338d3907b84a3131f9c6ee43923dbb1fae5ee527704ee0e2b689f720b343fc6df20eae285244c1b1a6afb3983401f55f550fe07d7d898cfe8dd946454ba4aa02e802e860097a60d5844337882f7c8d2752fe9c2694f046e2f9d1264f5c02bee401521b86e095182d9d4f8a7d6c1d4ca1a06a0b34f012da98ba8fe246b663e2044f9a07dcd02baed540781934c1764d497d6d00cc79d13859ed8506b569ddf7c240a5ad6a55f48364c6044b6dc7c0ceca00d3a64370895b3195b490fa266b1ab3f20386646a7dbe1d070ee7ab99ade6b6addf72f19c87af347fff7f48edd210064ce2e70e3134317cb84d1ba88363043051a5e59a057520716045be738f017248efb0177065b5d6aafa496e2a0da32c7aea9988a1cdf7bb177a188158212e0a8d2515eb80b5de22f3cf5568e20cbd6d9c6a1365c5ab7a5abe1e6c7ca20f87457a8ad93136e70b9202c827e6ae28bfcf760b283dbb708cf6400b4183cb28d3a1ed43376e70f96bdc134e52f3c1a521d079b4fc3fe7754121a80f457c815eecb1e85091079712b9a61cf75d347ff01060a4bc1929669918673f5a1ef2fdeb3cb652b7455ee3dbc0db289ae5164391cd1f49aadfc383d524d91a358c1a6b9d0d5f7e4ee3c6576e74e66a7f2a15185634a687ae836fa233b48f2e7eeceba6873364c429d19fe9dcf4ae0c0f365d6c7169f7648f8c8688e223ce2de0da251b74aced6ebe2be908ca36ba045f199d46df48f4879549af5eebc616f48976f6478303f05fba30f4a48554e1a807abc4b812bb0c6286ce88bd2c3c68aa9e8648f78790e1926c598b4796c4054fcf0f51678b7ea6eb8c2d2c276c73990b52c1f026a23c270303442ff506a2bdf006fa851608e4f2504b285fdfbfd94e929d4673a604a18ec3886225922b36f3c757c3deb182534b06f7300e84209eb733f53ea27f239b1348a7a47933e1faedec8291a6227978640850546cf3d321a2d4f9c13473454fb1219bc566a318ee51776abf0a8788e9af00e95a18b66a490da1fa6270cc7c3938f622b56040cde28ad0a69820ac1dd47de231299e18bb144e9c9216ebc649692b37093cf6db7d658795322c47ecdb4277ee42656f5a91256850b9f014c3b2fafce78a1bae19dbaae31d0270218ff569ba9d3f2c22902b358860a887f3b18a23c259456ddcbaf25db920f8b92ecc5b8bc1323752f491bcb73666948e83e169fec6959ba49e91dd421d9355c1ebfdcaceb7129c8ce5fdedc2b937088852a6441371186537a914bde1cd1de705297f64723ef9d6ed27d00c85f51134d365ee39c8ced6e02866f58fb3a07f5bdcecca3ff3111e70e460eabfd83af82d065ccff51b65a740bfc4665faf35f127ed82da9416c9651edbacdbe53a9661bce64068743ad1ff92f0f22a6f106504fe2ee161dcddddf50f4b1bf9583422e4ee99950ce8d4273427900c79d8963de981a9597d9369b2d617cdbfccff5680bd224d97e5fa3bc0c6d108bcddcf7890e87ace086af75881aa6bfabee2ce6bd86209ed17a9c3592de36fde16fe85da42989705f3651b828752e5ccf6bfddc18b9afb1dd5a37949fa7f5e215abec877bb957f31d4622a5e865bdf4b038957f336a6094c096e01ba2e714291316b52ce6bc1e3cc4165625175f7e6eef5d651268c6ca430fdb0104505ab526135bd9411d4c421863af16cdfb45b030c4fd36928bff3404b038f0766f61563a0da668c7dc841f2b21c65b3e86bb1d09f9f8340ad42d2379a94877c22d951c7436dd812d902ed249b98c3bbbf41c92fa17412c927445a42a1ae05fcf026859a887efdf44521a57695bb0f854cdd77889483e09b7a6b36abb61c9fcc448b4e9b7e70d8ba51cdea7d2cd420cea93caa20e9bf2726dc198a4beb9a85a3304ea35fcb3a8bc4583b7ffa2a99357e403b5f0d0df6d213d376d5af83cb3dce46b9918edca774246556bdc6430ab0e6f0373ce4cd7cece430c7748593f5875d264511778e64df333a1139172bdbfed8bb586d9e64225ca1da2f1348d77ecb8824aabb65c3a8e7340b468425d3fc593bd1783cfd47f3f275cb786952a467a3ef337550ffa19d2c1587bc15b42c48cd5ebe7993a2489dc72845b5d1ca455861782500d1e97ab45c650dca29d8601af8fabb1bb03fef13795d07eb36c08a89d18b899621f1969704c66aa79f372f6bedf80e0e966afa723ed62e3d4eabd365b12aebf41d374dfbe290d06b92232d91b0b695aaa929485a561250b28ad1be94495aa0a9ce9a12142f378ce018b92d4d776281265def7bc492c0e63d2a189037820aa57463ef1986cf6950bdf77e08005fa7811cd15e4ea9a7caa522790a5d2804eca7b60944a1ab4b64751941438efdeddfded0b00b3570334a0c9d1b262fd49e57059fc74bb563a736e373c7183c3c9a4d0f7690875c8386a9bfa542a1fb7676a23651d65e5806bb693060f79a27079101768f559b022bf4204c2dc661bd9b4a878c30bc24d3b4f0969306989e0baabbb2ee1de7bfde500583f1796f59d5102a3dff676e1275ada88b32cb0cbcfa7bf6b13fe4992d416a002d855de8ea3abe7354ef2472374461ffbb9f703000c8381999959cc4bcd6d13b8fd2a3a32db7b50dd38fe772ed96216c2f143ed625698150089c6ad9700f25de567be723b9673249678806c1e66e79b8d7e18bb4c0d49fbccee71dfdf773fa214ad48668ad9aa8cda432cfb84fcf2764f8988f9fa5df7ef7ae2851d7f304c8d2277d00642cdd14a11d2e822f7c45c1358b868b9745c06452df9264acd44287767badb8224ae4790be007a1056d2fd0a8ebff7d6b85acab5c66d97235a4da44eaeb30a5e68b90ae64b7478706e3ffe25f2f318545f13cbc7305dff9ce20473055cac6a74f701dd632df5caa82ab67c68410ca759f42562e4cfcb63c65b505672273039b1db1249e6b29278fe43bcb6e7f87ea9a121433071c31ce82c6bad50c8a4470713a755929b13e9a66863e703336485afc7b0348afafc9ef402661010f7f731a4bff60af3b0dd99ebd5b700713eb48fe1a1e5224552b58761f71bc59ac4fe7152f37872585caa7c205544af2558af2b667aa953f4b5e634edbf801a92639b4aa22605d3a28d99857f7ebe90733005e0896b99179557722448c71aa40d7811cc9b0a3287c436ef854f654c65b11f0c639a4372b4a43208cfdd9ff5416d69b4d0d7888c9adb098041de2b7d75026a9600572e975897d8e4388f8923c54322c6bcc4dac74c6db1478a5a7458384ef67383e8dbf8bacb7244256ed32df2eee6f44b50c179bb9ccd1824d8c9bbebcc0d153d4fb3644b9b69fe2b87c2ae767c08eccb5b0fcd0b07d8fa8618aa79a6fc5a31d4b080f452014dca05b8126648f76b627c2ca55511473edaf305d529b0faa9bb13e2708f9dca5ed4cbe38eb9dda074171a6e605581097aa1a7de857b61d5967ef574530ffc03e1e604487c12a1b2ee55c955995624b4c1eee4ac1c98e2315554ef38048cadf8a3175023167fa0ee5897b462b4f21c4c3bc00290573e023f9ae63a77d7178c83912561551edc7c07d5bc44da152d1d318e7525bb628ce7b7acf33dcad1e6847a55fc055f4d6bba0224d26606a9fc6892a9bbcc6b774d7fd89beb3f764926dd919bba7dd517b870bfa6a14f161d7a405b7982ce35c5a61b0d6d96fc12191c3461633aaf583317602a7ac02f9ba86c7f31e6de669bf602ac9c6efc052faa2388c23836fa230abeecac49069c59a782c1c53f4384ade2d8e2b1386809d620cac80606fa3eb96135803311d9f4d5cd82c9848cf14dca274b60b5a8f2b0cb9fb38602dc9789d43a32cc2a79dd76092bb8a29717db8c7cac6325e52764058115cdd12fa160d2e7123ca9ea2897099f2e1f706ec64d0335ea16e0efa2e8896647d7476ef1c321f9bc1cd8c73e1c492df0496fd92e0d55b699be01d4a6f122cf837911c327b362e53b8d2f4b52f79563d0b5891213db7b840deddeea08155bd19fc191b004ddf493761b4af7fa587639b8c0fb048110f9d3118d799fbc1a4b9288d22e725439605e3b170384b23e6e74aeb3e74df1a508dad5a819cab07b175e22f0f448161f5defbfcb45df532bc0dfe6f6814a19c2816e8b42fde31fdcff6842625e441964b267dbd5c7c9a573c8cb5fdc67851e3bd308654d018d585f29a84a192e2372a87910789db779a2644dc0889acb6f0d52b0245de12f266c5e8e06fd8dc9e0512d83aed2f55a81479390aae63705000a9476b810d32743954c898a1ecbe9cf33923091efb7b76506bd56f9cbd8e0c200a991b7651df26f462390ac3dfc4d51bf2255c1d94b70e02a7056bc15a82de3b20c5f7f8e1dbe74a0322fa9e07eae3c3963fe81f3bedc3781cc7800c3bc0dcd80077e5bc1885ae5ee24d05d5135549c39f27608bf9d854f5c00f450cfa61", "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"}) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000004240)) r3 = syz_usb_connect$sierra_net(0x3, 0x3f, &(0x7f0000004280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x5, 0x2, 0x10, 0x5, 0x6}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x6, 0x10, 0xb}, {0x9, 0x5, 0xa, 0x3, 0x400, 0x2, 0x9, 0x5}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r3, &(0x7f00000044c0)={0x14, &(0x7f00000042c0)={0x40, 0xe, 0xf1, {0xf1, 0x7, "4cb44639d08e54c8bace945eaf014f754d4641cbc99ffaf8ccff1eb5ef4855df26c069671095dfba9f555bfe7ea12b6108ccdd4f053c398faa151e4f373e00da67d8234e079549d815bc9e737b23db3e81f998c3d017e496ae6c81b2c8444262d63d4562262d486d872146e2d787a9b80d6593a5fda787560014e89225996caf744d012ef11d54bd9b903d488f98d9ca4451aee42e43dc85d77fed9f140437119565aae925c296205de50403b37abfed0d55ac41288e376e39581628ba2d06dc1a64de0614f8749a914a50b74660eae4f9cfd09c8e30e6617d6d82519527981ed989cb01cde55c6fb0e485fd4b40a8"}}, &(0x7f00000043c0)={0x0, 0x3, 0xeb, @string={0xeb, 0x3, "3b1fbfae0adcce204b26081602998447743b18a2ee8b16faabe340cf6a7780875dbb04f492824cb7d00c92721271520390b326742954cf817e2acef7b4a3c3186c3118dc7c5b73278328bb0aece9cf675137c490f32a943d12f3b75b783c31c1a9a62e133929015a804d29ab57ec485ca8830a66657367ac0f6e3597e59d9e8540cc34b1051f0b8dcf2484f3ea199786476a394ccc82b24b00eb1f0e0f4aeb4ce280427a47790d528da46961ab215e5243c84d8e17705238a45642811d45b9814985be4381ebf55ed990ec4bff38ee6e22da4a312d055769ba7e9e11442d9ba4b1fc7714e6ab1cebe0"}}}, &(0x7f0000004a40)={0x1c, &(0x7f0000004500)={0x40, 0xa, 0x8b, "c98be9c50be5fe8db6a0d544ce784fa189e7f817c8dd5679c765b325fd7b1a47d2caa2d159e91db336b6a51e32e83db431f1acdc17d15e966ed13b73df1e183ac7c92dc107f93755447195bf3aac4dee3a5c2a33fbd0ce401be1c53bcbffcde428acb5112e778d425710af0441fa44efe1dd99b631030fbf76014ffd6fe8e1cd88b05bd0c376f199b811fb"}, &(0x7f00000045c0)={0xa1, 0x1, 0x400, "832957f5644e5c574f04af1b2086d407611d8a2ffa868cbfc7699dc381f9e462ead1ea8a01c587e73298f2e12c585737e6ed897669e3eb5a44e52f6a285efbfa99231b7ce7b918be63a8dfaf91f34564c7cdcce58248f9b093ddec15a9314a4515977c02262d125e465b8cc206b912a524f4ab84b91cd6b3f740cb20e6b95dc8f47dde8f21d7a04aa977db626b642c5e54a53c61b705d53203bbf0f4eb9336d330708df8a8ae744dfbb94baf19b8c4338d6b785196c110a12f32fc0121d45d8b9b8b5df1c5dfe18302561156f22eea90d2eb859dd33a31b3569a570085ead6db9b0574d2bd2830111189cc4bc7a730855aea8dc0d9859b7b9046d3bd53f1016a2e8559bced43d6e8449c49c52117a42a3505a782c35c03ff1b6771e033fc032f7b88a1b2ea0572768e2fbad58811ed0ef727e3dd415c3ec418f442990f40928138406ed7a0143ad7a3a08eb2748fc36f62453289b27e9fb55de8e9abe443f86570559cf069763313481a25574ff6fdccf861986722353d5d4a923d0c0581018bb2768250ed1bc8f8114a83936d74d0cd1b2d2235d1a2f4e6032bc06121aee51753b27ecc4d03050e2171ddca3e1dc13b2b992a0b97baf2a2e8a06b47262e9f6f4f794bcae3f80a6c3d0b3c30866adb3b55267523fdabdd6e39a22c55256b7e8c19b9e49d65b190aa7abb4e7cfd00051dae66a7462ca745e447c72fea7db0e4e4b64b966ad7abe431ea6181479c720a3c32f8b21ac4e77a2b2cb63208ffce649365922fdb7d942b431bfc2dadab32c9e858273db2e16292b5ce9fdebf168256dcf0d4c19a0f456cfd3a1a443f08f8216009e99c3f9a1706d390b59c302e4bf54799ba3a97d80ed6eeb90c030932b84b5983fa849777f636fa7ce6dda7513359e89ee2eb992daa1c70f63c736a655cb9e7793cedec33d8750cdd41b4acf2696f69f036a90aeee961588fe3da52546713ade51f98011547b399ec0e8686fb8863d7d3a79c5139aa1938fd7562710138d3c364fbfe04e6baab02ac082b22e9e333d0b934b596fa9ef587e5140598ba51c9d331561a9ba33be493656aaf390f34d4358e3b5e50f4a0f4409e937649a341e3724f2e9d2d2ce84c1363e762a31bf9fea5c88fe978faa56a7d823e0c2437ea5e367fea2f0315ae4781de72fdb297810e65edcdf9fbda1273a43e9aeaa6674707b0c67e959a1faac1fd440dd79730096350e563a58a8271ff4b70d97abd47d3762a4c403cfef3db0df1552bec360535e8c6e124ad6f9dea6dc42937bb65b93e42501082c02df56b6e356538d583aaf7ddf228e7138d016eb018ad6bf3293cb6d9d2af23c05b898e9fbe40788ebe964dcc830281100277495afbb31165d57df9555b386b0fbf87760763cb3b8167f303c4863ae74beb20aeb2bd4c309c9997bab14efddc698739ee84f9b2a6752646a0681c"}, &(0x7f0000004a00)={0x21, 0x0, 0x1, "9e"}}) r4 = openat$incfs(r2, &(0x7f0000004cc0)='.pending_reads\x00', 0x101, 0x2) r5 = getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000004d00)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={""/10, ""/2, @loopback}}}, &(0x7f0000004e00)=0xe8) r7 = getegid() r8 = syz_open_dev$radio(&(0x7f0000004e40), 0x3, 0x2) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004e80)={0x0}, &(0x7f0000004ec0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000004f00)={{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@private}}, &(0x7f0000005000)=0xe8) r13 = getgid() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000005780)={0x3, 0x7, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x9, 0x9}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000057c0)={{{@in6=@private0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast1}}, 0x0, @in=@multicast1}}, &(0x7f00000058c0)=0xe8) getgroups(0x5, &(0x7f0000005900)=[0xee00, 0xee01, 0xee01, 0xee00, 0x0]) sendmmsg$unix(r0, &(0x7f0000012c40)=[{{&(0x7f0000004a80)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000004c80)=[{&(0x7f0000004b00)="ec9bf880253754891e9f17e90ef73553cb3db2e723d814a320ae94328fb57678f0638894b4a559c23d2deefab39c9fbccc94", 0x32}, {&(0x7f0000004b40)="20f7bb6b6e8468564b2cbefc5ce96c4504dcab5ec654730a3b469548987d6a71fd9c2c01a2e27a8bab66dbbc7c1cba921e1f29ed83d89868cf1d41ed1fd68ed12f9f3b6408f6d1e80f1a3225d11ccf736268a84fa977dd7bcc57e7dbc526aea4074141cd499c217431fd728ceaba986a607c59cb4382c077e1a64f7d871987f8ad43d6e191b9b609d6e1f43e24043c69a4e7fd9f3ea5e7c4acea3dc228d37fc495bb", 0xa2}, {&(0x7f0000004c00)="dc", 0x1}, {&(0x7f0000004c40)="24a284a7e658", 0x6}], 0x4, &(0x7f0000005040)=[@rights={{0x30, 0x1, 0x1, [r2, r0, r0, r0, r0, r0, r4, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @rights={{0x34, 0x1, 0x1, [r8, r0, r1, r0, r9, r0, r0, r2, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r10, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}], 0xd0, 0x8000}}, {{&(0x7f0000005140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005700)=[{&(0x7f00000051c0)="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", 0xfc}, {&(0x7f00000052c0)="f5ac523d1c368a79d94b845adc2fb67cb198149f49434f64bf80de6dd0626a24cb0f2bc371beaa5bd8", 0x29}, {&(0x7f0000005300)="d7c5e1308600306b1d0bc15305b3f29436dea4262922ba70", 0x18}, {&(0x7f0000005340)="9369d1f99b55487d8d870dbde560e021146cb14979a7e21eee9e99f6dbe83b3ab12c0a2a24f0164eb2c9ca93537877e22e0ef2c0bf131049c6861b05547a72729a95b7c5558186abae80a2ab77b92f91e32c20849f4caf1e36c1154cc5b0588232de487a4fcd0f81cbcb92881470dfe82c2b842bd354332f4e220482603f68c19b55c8b07c445896727fdc7c0853c33c9998e540fb9c21db3a641b16277e72418c034600ec576d913c2a8bcc6b5a8b1fb07dc3fc5b0cbaef7625246288cf40f12f062fcf48f9bdbc375037553a1c3874d5fb28f5a3ff", 0xd6}, {&(0x7f0000005440)="c5b97d098aa58d032da82e52e52135eedc4597222319461d87cea0467e4a33efcd7d7225b644fc385257ae996c0f2bd99beb729913b9ddfb691fa5e61004b07a80b12602c238b4e75a70212f890069ab5aea290e35c68c0afd4c34ac2e3f0b962c2b11bd208e5891e43984b7669afbc599328ae4ed4cb36f146c775242100bdbdd63fb67f649f55bd5342d20a95ec1be630ea33bb12566db2552e64f696c4d822da75057b3f881cf6b4b741bdcc876cf77a233edbbab13d8817078fd27608f761c2954e4abaf6f8871b218901f1bbdaa39", 0xd1}, {&(0x7f0000005540)="02e2458adb837bd7aef44bbcc60f74d9258d8cbfd28a80cef40cfb3bd1db290ccd7dfd2fc92ee1109ed97b2f43ec823868919e499de6ea9c5fcf8535ce884c0d6451bd54d3b025fbe586618a4b2d28ee36c4aeef68409686572021a9f43c5cf3353490bfcb201c0ca9ed392186ee298ed09d33b747ed7a8215c780621394517045119d736838ddf292f32534bb86ae9accdf2264f4d1650c72106f92965c962ec9e1e15d45d6cdba960ac125e754a3a5aec4df1d400e07cc9bc09e93e99a495b48185d620c1eadd502c74d60585ae98b76ecd693e64f76d766b71f174dc1fac8cf96268fc1", 0xe5}, {&(0x7f0000005640)="2b268efdea7cf6ae5f2d46a88f46c5f983d20e0f18c8a10e133c939ca9f65165403d527ebf856b223e851523d256d349e730bf174e4e24e4b80db9b844fd5ed502235b1d3f533c68748f1952f77aab2568344cfa0bbff5d6fca52b362fdee187bd3b0aea50e4b0ca7fa5dec09bd49d7c6977c38b161898837a56742cb2649ca341469646ce56c42b", 0x88}], 0x7, &(0x7f0000008080)=[@cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r1, r0, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @rights={{0x2c, 0x1, 0x1, [r2, r0, r2, 0xffffffffffffffff, r1, r1, r0]}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}, @rights={{0x1c, 0x1, 0x1, [r1, r1, r2]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}], 0x160, 0x10}}, {{&(0x7f0000008200)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000008400)=[{&(0x7f0000008280)="1860927c30cc83d8c06eaacccabf59", 0xf}, {&(0x7f00000082c0)="35b40c5ac1bb5e60", 0x8}, {&(0x7f0000008300)="844fa871f5133c3c3fa0286bb11136039bbdeef751962d53227d4c7e321da80b94c3bc19befce80d006847c726bb350a8eb4c9866d5cb69abf1d4a3e9732dfe69b7480bde8c97f4d8d3b467481af03c6c12343c8311a027897cade517195b532fd8dff7b7334a80efc1c81d6cace48fb1c9a7fbd287f15b4c313ee2926000f156c3b6152d0ca3a61405e2e6b89799c68236dc55f34a58104c866a623c70476b16d3dd3d6b5838636b8add579943e3b00f217638791a67d43208f5f2fd2bd9e960e", 0xc1}], 0x3, &(0x7f00000086c0)=[@rights={{0x2c, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r2, r0, r2, r2]}}, @rights={{0x24, 0x1, 0x1, [r0, r1, r2, 0xffffffffffffffff, r1]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98, 0x881}}, {{&(0x7f0000008780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000008b80)=[{&(0x7f0000008800)="2d2cf764a83d7fece1a80494fac10d616bf8cd1dcc8c99162bdd0be06e5b252d6a13f631527cfc2605e536e7195dedf3b7e17e2865e6a6f0ae92b2a2eb985c8bf6462d8128c868ed78cef52404f029e4aeff48b822d1796cc143f5e5a12160d3b0591dabea073747db0e7a2b1a09585bc3f982128fbbfaf5c2224de6e1864a4cc14aeb142fce4389f5074eaf4841d253a2b1d124842ed1559e7b", 0x9a}, {&(0x7f00000088c0)="3ed0291ae81013abd7286e83e951863c32bfb20c37e909b860ad272069a2cbdbd5f13afae1607e9f705c61e4510180a49659ef32cc2af4fabe3f7585f302e985bcd2393e00144db3de6fc86c3d5cb04fc5cd3fb1e6cd74ab2ce3669afcaafc9fd7928d8ed4ccaa6483f2e57dea6bbeff2a8cd3f7e3c6b681f37b161ec08fa0097b7e", 0x82}, {&(0x7f0000008980)="455b5912011bc52ea4cc03b12356486c8c8efb31cd6ebbba17337519d9612860ef7b44e7bc71bff68ece3d6b55840a0bfbf09517f28fee87e4625f6542faafe9618817503d03e55eab195367809478325de612912afe4c52bfe768eedf0ede49303bc064348e34fd223ffd450ddcf33e8d0ca38ffd1546939d5d422d7655b80e0025cad6e06c71533f88d382b9609da33b918e833a8534445fd360eadcf624bd72958fc0eac655ce039e2a978a4651c2107e09c1eff5adc9faf243b7f4a995e173090f2fbb96ebe47d5e3044dc16b54ae7b9b0b4aa7c00eaa2fc355522c534c2f96427ec4414467dd56f", 0xea}, {&(0x7f0000008a80)="f7bc40f1634657bd771d3f35bc02e728a4f1911cc99896a14c5782f7a3014da643ce39fefb5f6f6e0775d9c07ba3f1cdddd09b9a6cf32fae220d239732ad44", 0x3f}, {&(0x7f0000008ac0)="d15b2ca704aa71d2ef40efd5a20583b0016fa42d1403d438f21bdf236dc7ae", 0x1f}, {&(0x7f0000008b00)="2d15b06668e1", 0x6}, {&(0x7f0000008b40)="747894eaa86f63b0620fb730e48239d94555e296ef5d71962266", 0x1a}], 0x7, &(0x7f0000008d80)=[@rights={{0x1c, 0x1, 0x1, [r2, r0, r1]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r0, r2, r0, r1, 0xffffffffffffffff, r2, r2, r1]}}], 0x70, 0x44095}}, {{&(0x7f0000008e00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000008ec0)=[{&(0x7f0000008e80)="d91cbe91d4a3b9a1c81ec0d9535cd75a701c851688d80c263f596b7c60d487e443e286b2dacf38da45d289104070317fc49e104699d695481e", 0x39}], 0x1, &(0x7f000000b080)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}], 0x40, 0x40000}}, {{&(0x7f000000b0c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000b180)=[{&(0x7f000000b140)="ff5c808c4829c9ce9d18a262b7c3c417685296d768bdc625e81fe290668518eaaa0be2b2293250d78a", 0x29}], 0x1, &(0x7f000000b3c0)=[@cred={{0x1c}}], 0x20, 0xa}}, {{&(0x7f000000b400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000b580)=[{&(0x7f000000b480)="259445446ef70abdb89cc13cea3c2f2b9c3766854b38c5e7cebf6563366542be023733ddebdbc5f426f4b148388d7a8b4fc3176d10076791fab0274206678e8341508638f582a48c6a947200e5312c973438cfae1e4105580061349976a079f1a2f18e8f528a96832e63f29de3d6dc520b80ba2750aa03199e8a807fb090dc7ec23f6acf9bd55d18a8c285cf3e593e14e49e8fd99d281b3e76f504dd14713d01c805716ef4a899a22bdc2d4a54b6835ab504f7bb6839d14a19b90dfa3673f84ad41e874cc047ce313ca72882cfc0c36d7d841412bafd5de632ed7ad7c11cc7ea60efb1e0", 0xe4}], 0x1, &(0x7f000000b900)=[@rights={{0x18, 0x1, 0x1, [r2, r0]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, 0xffffffffffffffff]}}], 0xa8, 0x4000000}}, {{&(0x7f000000b9c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000bd00)=[{&(0x7f000000ba40)="3d0265e8c2d791167425b55c0534aed980438ed4ba6aa73b60aa35eee1dfa450511efae4544b955c1133e2cfcf41e8872893e7ecd44691099fa1e623b7bc106d4943378f43dd774c4cf0b85b3cba5ade727a1743a65e34694c17b275f74a449cb9a8c0513593fab44ed789fd14058eef9a8fdf3804a4bd8c4ef933782f2330bca076ef875f85bb6012ab76c2c14cd1f8c340ac003bcd255879d3f96ee02677af0890099f997fa2366ae376a8b075ea4a81ed39c86c7ffb46016fe70036799d372bfc95126bd95aa8a8e00e978a69f294adca0753361554b0eab093543f4e4ce24ecea408cb5bf941c16b19b3ff9e6568", 0xf0}, {&(0x7f000000bb40)="dc515009111b29282aacb63fe16280faf25d0b9a49e5f692dd1796bc0785b0024b19ee6fc54f44d4d49e0a8cae3bb5dd0474335c492def3988797863d3b344bbdeba319ea0ddcb5b337ad35a8612a813977cb1c55349097182f815d4b830ce1275e881f15beadcca558457f8d0d477582bb5e45ffd6ebd86a71e91ec7078e7f214", 0x81}, {&(0x7f000000bc00)="b0b94592f137e54fa8a9a78915abfcef92abd546f3bffd546c64c9f9bf4822f339e526be31c01f3204e63e176d1c02b886482bb4da60e608b6b292a0b37a6c3c133a500cd22bbd5d4ff669195467af52252e160d91959a5da37c469874733e1b37061eabac183ee6b0e94bf93a3e38a212ddfa3a4705ca8512e1023b373b4e6a6a08ceb25c1cc2ad0bd366d204edfc89263483f93604d2deaa2f6f7e9769e12035130f89f113f3a7c5d2eeaae8742da1b9d3574b5d38b29af5f00d1af63fb3bd9485f51312fabb2e1d0c5708925b7c89b05bf770aae06184b43ffe9f90af844634ad319f63b2950512ba95b7d5", 0xed}], 0x3, &(0x7f00000127c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, r1, r2, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r0, r2, r0]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x140}}, {{0x0, 0x0, &(0x7f00000129c0)=[{&(0x7f0000012900)="38f5298cfb91e7c0cebe5241b571a089147f199fdcbb86a4aeb055329676ebffcb5134bba3fd4cb1fac6d55d6bf8405d9221566d8cc228d3ba26ef3fca7256", 0x3f}, {&(0x7f0000012940)="debc7fe13bb43222aaa0346f796ca555fe6576123ef6b3ad89730cd17a48e7a67304872b42c4f327e10e07a3ed8adcad0302ae99e93ce9b0f1b941e57dbfe0d79555563f813707c6871897423124975eba56f59cfa55c37e38835d", 0x5b}], 0x2, &(0x7f0000012c00)=[@cred={{0x1c}}], 0x20, 0x20000010}}], 0x9, 0x4000) 1.183175199s ago: executing program 4 (id=867): r0 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'lo\x00', &(0x7f0000000080)=@ethtool_eee={0x45, 0x81, 0x6, 0x100, 0xe, 0x5, 0x47, 0x1, [0x3, 0x2d5]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') 1.065946686s ago: executing program 4 (id=868): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000001040)={0x5}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x4, 0x40000) poll(&(0x7f00000000c0)=[{r2, 0x7c}, {r2, 0x3000}], 0x2, 0x1) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x17) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, r5, 0x600, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4044000}, 0x20048844) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r4) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000600)=0xdfa, 0x4) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) 668.199263ms ago: executing program 6 (id=869): getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001540)={0x2c, &(0x7f0000001380)={0x0, 0x2, 0x3d, {0x3d, 0xf, "3489b4d2dae14b65663e3326f7c9d5d4ff9aa600321896e81b96a1af5a1e708d0d60c7c2e060f76fec66562e5b4d89ad65ee2e7e10fe7edf0890de"}}, &(0x7f0000001400)={0x0, 0x3, 0x2b, @string={0x2b, 0x3, "80e4ffe35dba3a909460086672a63f18c0c120521a495589c33d7900d3c33dfbcf1e6b64f4f11d8a01"}}, &(0x7f0000001440)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}, &(0x7f0000001480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9f, 0x0, 0x2, 0x8, "b454d7c3", "8394d526"}}, &(0x7f00000014c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xb, 0x3, 0xfb, 0x6, 0x6, 0x5, 0x5}}}, &(0x7f0000001ac0)={0x84, &(0x7f00000015c0)={0x5f6d6d7a17426baa, 0x0, 0xb9, "8ec16a81dc744cb8b91ec33b4042a42db9c9b7e98fe70f77eb9be22f6bb8293db26749bab0ac52cfe4c8d9dfac90216373c8fc52fce57aca6d1a7d036204815a455d722f90708f9eae150c6e2d3449e6c47156f29217c6774d3d02f7f2ce1312baa47cca2fe7a8c013c9f54dc5bb7c5eca2fac784a04e26706d68ca5cc7629bcd02817eb1c10d768e16a8f98df9f42b365d3910a69acd69e188f599b5d9bb1d10a31882ba785d065da90bff34725b9eb92122278c3959da895"}, &(0x7f0000001680)={0x0, 0xa, 0x1, 0xa}, &(0x7f00000016c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001780)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000017c0)={0x20, 0x0, 0x8, {0x1e0, 0x10, [0xf0]}}, &(0x7f0000001800)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000001840)={0x40, 0x9, 0x1, 0xed}, &(0x7f0000001880)={0x40, 0xb, 0x2, "1240"}, &(0x7f00000018c0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000001900)={0x40, 0x13, 0x6, @link_local}, &(0x7f0000001940)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000001980)={0x40, 0x19, 0x2, "065a"}, &(0x7f00000019c0)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000001a00)={0x40, 0x1c, 0x1, 0x64}, &(0x7f0000001a40)={0x40, 0x1e, 0x1, 0xf5}, &(0x7f0000001a80)={0x40, 0x21, 0x1, 0x3}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) madvise(&(0x7f00004d5000/0x4000)=nil, 0x4000, 0xc) syz_clone3(&(0x7f0000001300)={0xa30100, &(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f00000001c0), {0x29}, &(0x7f0000000200)=""/185, 0xb9, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) prlimit64(r1, 0x8, &(0x7f0000000000)={0x1, 0xfffffffffffffffc}, 0x0) mlockall(0x7) r2 = socket$kcm(0x10, 0x2, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001e00)={0x24, &(0x7f0000001d00)={0x20, 0x23, 0x1d, {0x1d, 0x8, "f38370328203ffc43af3c4bb15f6240724f966d15f51623e476f51"}}, &(0x7f0000001d40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x860}}, &(0x7f0000001d80)={0x0, 0x22, 0xc, {[@local=@item_012={0x2, 0x2, 0x0, 'i;'}, @main=@item_012={0x2, 0x0, 0xb, 'fx'}, @global=@item_4={0x3, 0x1, 0x0, "d3c3e4e4"}, @global=@item_012={0x0, 0x1, 0xa}]}}, &(0x7f0000001dc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0xa59}}}}, &(0x7f00000020c0)={0x2c, &(0x7f0000001e40)={0x20, 0x15, 0xdc, "9f6cd2ee9b1f4e67259f8cf31fa4135ac78bfd0e93a64ee345b289ef6a338a6dd002eb6ce0607acc56585124995bda21ebebba8dd756313fde1e2db8ec85094148b6ad5aaac575d2852e3c8c2b6ff4749d19ba2c3016fbcb1708723ccdadf7b6f432b9d63499d34cf61ee8ccf9e6ca6791b01aa451b25a5a4a0c4e4d700128509896983dbe2a40891c456052d43579f1844556f0f3d592886a50b330fcd7af9ae034fd4960cd3d88529989da8b690769ee78e51f3bf240093e3a40bcf1d6270e93a4056758a2a91ac5eeec02d4b6b8d0b3ee736ce5617025649abae0"}, &(0x7f0000001f40)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000001f80)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001c40)={0x20, 0x1, 0x97, "c4f0888501540ead4239cbeded8ee962f9afe25bcc0b64c12d072f1a85332b5325a479f304300715ac2ecaec908a844ade311981000d487138f7f26a30a084f6f35f9df28d9d36d9bfb3da56ea76137354237fb77c141d0ffdd33ef49cb3b4448d9033729a8731269b52f368195ec3f0c8a97e6f5dd9c9231d0900000000000000b1179f4615d962618ad35d910304156b42ee795c3e35"}, &(0x7f0000002080)={0x20, 0x3, 0x1, 0x8}}) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100ef05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4000000) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r3, r3, 0x0) brk(0x5d555ede6000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000001fc0)=0x15, 0x4) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mount$afs(&(0x7f0000001b80)=@cell={0x23, 'syz1:', 'syz0', '.backup'}, &(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c00), 0x20040, &(0x7f0000002100)=ANY=[@ANYBLOB='flock=strict,flock=local,flock=write,context=staff_u,uid<', @ANYRESDEC=r3, @ANYBLOB=',hash,rootcontex4=staff_u,pcr=00000000000000000053,audit,defcontext=staff_u,\x00']) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r5, &(0x7f00000003c0)={0x24, &(0x7f0000000240)={0x20, 0xa, 0xc, {0xc, 0x22, "c5cb3807f639e7f79a2f"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x419}}, 0x0, 0x0}, 0x0) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r6) r7 = socket$tipc(0x1e, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@msize={'msize', 0x3d, 0x7fffffff}}]}}) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x8101, 0x0) ioctl$PTP_ENABLE_PPS(r8, 0x40043d04, 0x0) sendmsg$nl_generic(r4, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14dbdf2508000000000000000000000030d13b9f"], 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) 168.667993ms ago: executing program 7 (id=870): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f00000003c0)=ANY=[], 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newsa={0x138, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@rand_addr=0x64010100, @in6=@rand_addr=' \x01\x00', 0x0, 0x3}, {@in=@multicast1, 0x0, 0x3c}, @in6=@mcast2, {0x0, 0x8000000000000001, 0xfffffffffffeffff, 0x0, 0x4, 0x0, 0x0, 0x2}, {0x80000000, 0x5d1}, {0x9, 0x0, 0x3}, 0x70bd2d, 0x3506, 0xa, 0x3, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='\f\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000003000000"], 0x14}}, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000040)) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0x0, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x40, 0xa, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x3, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x64, 0x4, 0x7fff, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x2, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x8, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x4, 0x5, 0x1, 0x10001, 0x12, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x7, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x1, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x7, 0xfffffeff, 0x4, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x6, 0x1, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0x1, 0x4, 0x5, 0x7, 0x4b5f, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x1, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x7f, 0x4, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb6, 0x101, 0x401, 0x2, 0xb, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x1ff, 0x1, 0x9, 0x1, 0xd, 0x9, 0x7619, 0xfffffe01, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x9, 0xffffc487, 0x200, 0x7fff, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x0, 0x2, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x9, 0x7f, 0x6, 0x8, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x8001, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x4000, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x8000002, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0xfb4, 0xbf8, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x7fffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9b, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6330, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0xffffffff, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62c8, 0xfffffff7, 0x7, 0x40, 0xa, 0x8, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x30a6, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x7, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x30, r5, 0x64bc7c9305072889, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'syz0\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) 0s ago: executing program 7 (id=871): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x5c, r2, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0x40, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x5c}}, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x800) (async) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="ebe3a0", 0x3}, {&(0x7f0000000080)="f78d9ca38fff48f3be52163448", 0xd}, {&(0x7f0000000300)="bf144ddaddd5470d60778446285e9c230c", 0x11}], 0x3}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000a00)={{0x12, 0x1, 0x110, 0x82, 0xd3, 0x0, 0x10, 0x10c4, 0x818a, 0xbc04, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x2, 0x20, 0x1, [{{0x9, 0x4, 0x4f, 0x9, 0x2, 0x3, 0x0, 0x0, 0x4, [], [{{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x9, 0x74, 0x6}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x61, 0x80, 0x9}}]}}]}}]}}, 0x0) kernel console output (not intermixed with test programs): 26.211929][ T5862] ftdi_sio 6-1:0.24: FTDI USB Serial Device converter detected [ 226.221747][ T5862] ftdi_sio ttyUSB0: unknown device type: 0xbd2d [ 226.410889][ T909] usb 6-1: USB disconnect, device number 17 [ 226.427672][ T909] ftdi_sio 6-1:0.24: device disconnected [ 227.032771][ T5942] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 227.199967][ T5942] usb 4-1: Using ep0 maxpacket: 16 [ 227.206793][ T5942] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 227.217267][ T5942] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 227.249104][ T5898] usb 5-1: USB disconnect, device number 29 [ 227.290284][ T5862] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 227.471662][ T5862] usb 6-1: Using ep0 maxpacket: 16 [ 227.480414][ T5862] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 227.488452][ T5862] usb 6-1: config 0 has no interface number 0 [ 227.520255][ T5862] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 227.535486][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.544828][ T5862] usb 6-1: Product: syz [ 227.549026][ T5862] usb 6-1: Manufacturer: syz [ 227.554850][ T5862] usb 6-1: SerialNumber: syz [ 227.571834][ T5862] usb 6-1: config 0 descriptor?? [ 227.583989][ T5862] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 227.769920][ T5898] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 227.919988][ T5898] usb 5-1: Using ep0 maxpacket: 32 [ 227.927203][ T5898] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.940764][ T5898] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 227.950126][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.960614][ T5898] usb 5-1: Product: syz [ 227.964856][ T5898] usb 5-1: Manufacturer: syz [ 227.969488][ T5898] usb 5-1: SerialNumber: syz [ 227.979062][ T5898] usb 5-1: config 0 descriptor?? [ 227.991431][ T5898] usb 5-1: no audio or video endpoints found [ 228.187019][ T8189] netlink: 40 bytes leftover after parsing attributes in process `syz.5.580'. [ 228.210489][ T5957] usb 5-1: USB disconnect, device number 30 [ 228.231984][ T5862] gspca_spca1528: reg_w err -71 [ 228.250265][ T5862] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 228.265709][ T5862] usb 6-1: USB disconnect, device number 18 [ 228.921663][ T8203] /dev/sg0: Can't lookup blockdev [ 229.328207][ T7900] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 229.344003][ T7900] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 229.353006][ T7900] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 229.364802][ T7900] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 229.375015][ T7900] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 229.462602][ T8218] vxcan1 speed is unknown, defaulting to 1000 [ 229.649899][ T909] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 229.660807][ T5862] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 229.727532][ T5942] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 229.759233][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.778126][ T5942] usb 4-1: Product: 貮快鞪î§æ´ƒî„噾î›å°£æ£ï Šä¡°ä˜æŒ à©Šíž¾á€‰à¤›ã”¸à¤™î¶í–™ï›«á°±ã•ŒíŽí—»ê–칢↾∸먇씼鈱积 [ 229.819974][ T909] usb 6-1: Using ep0 maxpacket: 32 [ 229.833162][ T5862] usb 5-1: unable to get BOS descriptor or descriptor too short [ 229.836343][ T909] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 229.851264][ T5862] usb 5-1: not running at top speed; connect to a high speed hub [ 229.862774][ T5862] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.864042][ T909] usb 6-1: config 0 has no interface number 0 [ 229.880718][ T5942] usb 4-1: can't set config #1, error -71 [ 229.892584][ T5862] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 229.901872][ T5942] usb 4-1: USB disconnect, device number 76 [ 229.921289][ T5862] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 229.931309][ T909] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 229.932679][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.940591][ T909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.957426][ T909] usb 6-1: Product: syz [ 229.961927][ T909] usb 6-1: Manufacturer: syz [ 229.966876][ T909] usb 6-1: SerialNumber: syz [ 229.975940][ T5862] usb 5-1: Product: syz [ 229.977257][ T909] usb 6-1: config 0 descriptor?? [ 229.987626][ T5862] usb 5-1: Manufacturer: syz [ 229.994079][ T5862] usb 5-1: SerialNumber: syz [ 230.009282][ T909] smsc95xx v2.0.0 [ 230.082078][ T8218] chnl_net:caif_netlink_parms(): no params data found [ 230.209899][ T5942] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 230.239162][ T8218] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.247132][ T8218] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.255069][ T8218] bridge_slave_0: entered allmulticast mode [ 230.263576][ T8218] bridge_slave_0: entered promiscuous mode [ 230.275177][ T8218] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.289092][ T8218] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.298039][ T8218] bridge_slave_1: entered allmulticast mode [ 230.309183][ T8218] bridge_slave_1: entered promiscuous mode [ 230.368405][ T8218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.380112][ T5942] usb 4-1: Using ep0 maxpacket: 16 [ 230.388465][ T8218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.398677][ T5942] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 230.407045][ T5942] usb 4-1: can't read configurations, error -61 [ 230.420267][ T909] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 230.431358][ T909] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 230.469493][ T8218] team0: Port device team_slave_0 added [ 230.482360][ T8218] team0: Port device team_slave_1 added [ 230.539428][ T8218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.546577][ T8218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.550062][ T5942] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 230.572725][ C0] vkms_vblank_simulate: vblank timer overrun [ 230.573130][ T8218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.602083][ T8218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.609165][ T8218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.635409][ C0] vkms_vblank_simulate: vblank timer overrun [ 230.643744][ T8218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.662786][ T8221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.672494][ T8221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.734876][ T8218] hsr_slave_0: entered promiscuous mode [ 230.742956][ T8218] hsr_slave_1: entered promiscuous mode [ 230.749593][ T8218] debugfs: 'hsr0' already exists in 'hsr' [ 230.759591][ T8218] Cannot create hsr debugfs directory [ 230.769849][ T5942] usb 4-1: Using ep0 maxpacket: 16 [ 230.783658][ T5942] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 230.791712][ T5942] usb 4-1: can't read configurations, error -61 [ 230.798738][ T5942] usb usb4-port1: attempt power cycle [ 230.897772][ T8221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.914385][ T8221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.934814][ T909] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 230.946931][ T909] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 230.967335][ T909] usb 6-1: USB disconnect, device number 19 [ 231.135368][ T8218] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 231.146530][ T8218] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 231.159948][ T5942] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 231.168745][ T8218] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 231.184267][ T8218] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 231.192930][ T5942] usb 4-1: Using ep0 maxpacket: 16 [ 231.203824][ T5942] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 231.211737][ T5942] usb 4-1: can't read configurations, error -61 [ 231.305383][ T8218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.328929][ T8218] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.340896][ T5942] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 231.353805][ T545] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.361071][ T545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.371630][ T5942] usb 4-1: Using ep0 maxpacket: 16 [ 231.380423][ T5942] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 231.388064][ T5942] usb 4-1: can't read configurations, error -61 [ 231.393425][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.396768][ T5942] usb usb4-port1: unable to enumerate USB device [ 231.401546][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.480110][ T52] Bluetooth: hci2: command tx timeout [ 231.833423][ T8218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.009899][ T909] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 232.160796][ T909] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 232.171006][ T909] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 232.181763][ T8218] veth0_vlan: entered promiscuous mode [ 232.187601][ T909] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 232.199232][ T8218] veth1_vlan: entered promiscuous mode [ 232.206984][ T909] usb 6-1: config 0 interface 0 has no altsetting 0 [ 232.217154][ T909] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 232.227274][ T909] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 232.238431][ T909] usb 6-1: config 0 interface 0 has no altsetting 0 [ 232.247947][ T909] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 232.261394][ T909] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 232.273009][ T909] usb 6-1: config 0 interface 0 has no altsetting 0 [ 232.288538][ T8218] veth0_macvtap: entered promiscuous mode [ 232.294898][ T909] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 232.304318][ T909] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 232.329390][ T8218] veth1_macvtap: entered promiscuous mode [ 232.336717][ T909] usb 6-1: config 0 interface 0 has no altsetting 0 [ 232.348752][ T5862] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 232.365554][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 232.390446][ T909] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 232.399517][ T909] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 232.407582][ T5862] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 232.421629][ T8218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.438141][ T5862] usb 5-1: USB disconnect, device number 31 [ 232.492993][ T7241] udevd[7241]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 232.498814][ T909] usb 6-1: config 0 interface 0 has no altsetting 0 [ 232.523698][ T8218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.533887][ T909] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 232.545100][ T1098] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.565305][ T909] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 232.566805][ T1098] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.577991][ T909] usb 6-1: config 0 interface 0 has no altsetting 0 [ 232.595077][ T1098] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.605610][ T909] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 232.606051][ T3524] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.625435][ T909] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 232.636736][ T909] usb 6-1: config 0 interface 0 has no altsetting 0 [ 232.648008][ T909] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 232.683485][ T909] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 232.696323][ T909] usb 6-1: config 0 interface 0 has no altsetting 0 [ 232.723112][ T909] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 232.745366][ T909] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 232.755026][ T909] usb 6-1: Product: syz [ 232.786286][ T909] usb 6-1: Manufacturer: syz [ 232.801064][ T909] usb 6-1: SerialNumber: syz [ 232.823056][ T909] usb 6-1: config 0 descriptor?? [ 232.900786][ T909] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 232.916310][ T3524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.953117][ T3524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.019643][ T6825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.069801][ T6825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.114975][ T5942] usb 6-1: USB disconnect, device number 20 [ 233.152481][ T5942] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 233.329415][ T8270] netlink: 'syz.6.599': attribute type 3 has an invalid length. [ 233.338274][ T8270] netlink: 766 bytes leftover after parsing attributes in process `syz.6.599'. [ 233.354027][ T909] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 233.541462][ T909] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 233.552228][ T52] Bluetooth: hci2: command tx timeout [ 233.587648][ T909] usb 4-1: config 0 has no interface number 0 [ 233.613279][ T909] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 233.654654][ T909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.669137][ T909] usb 4-1: Product: syz [ 233.675682][ T909] usb 4-1: Manufacturer: syz [ 233.679339][ T8279] loop1: detected capacity change from 0 to 2560 [ 233.680959][ T909] usb 4-1: SerialNumber: syz [ 233.699036][ T8279] Buffer I/O error on dev loop1, logical block 0, async page read [ 233.708449][ T8279] Buffer I/O error on dev loop1, logical block 0, async page read [ 233.709026][ T909] usb 4-1: config 0 descriptor?? [ 233.725440][ T8279] Buffer I/O error on dev loop1, logical block 0, async page read [ 233.735457][ T8280] Buffer I/O error on dev loop1, logical block 0, async page read [ 233.747116][ T8279] Buffer I/O error on dev loop1, logical block 0, async page read [ 233.755393][ T8279] Buffer I/O error on dev loop1, logical block 0, async page read [ 233.763671][ T8279] Buffer I/O error on dev loop1, logical block 0, async page read [ 233.772273][ T8279] Buffer I/O error on dev loop1, logical block 0, async page read [ 233.781127][ T8279] Buffer I/O error on dev loop1, logical block 0, async page read [ 233.798325][ T8279] ldm_validate_partition_table(): Disk read failed. [ 233.806239][ T8279] Buffer I/O error on dev loop1, logical block 0, async page read [ 233.815332][ T8279] Dev loop1: unable to read RDB block 0 [ 233.822857][ T8279] loop1: unable to read partition table [ 233.828914][ T8279] loop_reread_partitions: partition scan of loop1 (3Ÿ ¾‚³˜) failed (rc=-5) [ 233.840029][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 233.940250][ T5994] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 233.990114][ T9] usb 7-1: device descriptor read/64, error -71 [ 234.099944][ T5994] usb 5-1: Using ep0 maxpacket: 16 [ 234.106865][ T5994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.118263][ T5994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.128860][ T5994] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 234.139195][ T5994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.148278][ T909] usb 4-1: Firmware version (0.0) predates our first public release. [ 234.158819][ T8263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.159351][ T909] usb 4-1: Please update to version 0.2 or newer [ 234.176848][ T5994] usb 5-1: config 0 descriptor?? [ 234.182258][ T8263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.190325][ T8264] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 234.224502][ T909] usb 4-1: Firmware: build [ 234.239991][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 234.330070][ T8264] usb 6-1: device descriptor read/64, error -71 [ 234.379933][ T9] usb 7-1: device descriptor read/64, error -71 [ 234.446345][ T909] usb 4-1: USB disconnect, device number 81 [ 234.492028][ T9] usb usb7-port1: attempt power cycle [ 234.570391][ T8264] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 234.617669][ T8275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.627919][ T8275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.641041][ T5994] hid (null): unknown global tag 0xe [ 234.646728][ T5994] hid (null): global environment stack underflow [ 234.654431][ T5994] hid (null): global environment stack underflow [ 234.664506][ T5994] hid (null): unknown global tag 0xc [ 234.713193][ T8264] usb 6-1: device descriptor read/64, error -71 [ 234.821711][ T8264] usb usb6-port1: attempt power cycle [ 234.832463][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 234.842790][ T5994] usb 5-1: string descriptor 0 read error: -71 [ 234.871026][ T9] usb 7-1: device descriptor read/8, error -71 [ 234.878587][ T5994] usb 5-1: Max retries (5) exceeded reading string descriptor 200 [ 234.887678][ T5994] letsketch 0003:6161:4D15.0016: probe with driver letsketch failed with error -32 [ 234.902687][ T5994] usb 5-1: USB disconnect, device number 32 [ 235.057267][ T8289] netlink: 'syz.3.605': attribute type 12 has an invalid length. [ 235.066185][ T8289] netlink: 132 bytes leftover after parsing attributes in process `syz.3.605'. [ 235.130157][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 235.160081][ T8264] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 235.161081][ T9] usb 7-1: device descriptor read/8, error -71 [ 235.190657][ T8264] usb 6-1: device descriptor read/8, error -71 [ 235.290606][ T9] usb usb7-port1: unable to enumerate USB device [ 235.430859][ T8264] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 235.451394][ T8264] usb 6-1: device descriptor read/8, error -71 [ 235.581676][ T8264] usb usb6-port1: unable to enumerate USB device [ 235.630135][ T52] Bluetooth: hci2: command tx timeout [ 235.740223][ T9] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 235.870141][ T9] usb 5-1: device descriptor read/64, error -71 [ 235.896524][ T8296] fuse: Unknown parameter '½0x0000000000000005' [ 235.896524][ T8297] fuse: Unknown parameter '½0x0000000000000005' [ 236.139890][ T9] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 236.151113][ T5912] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 236.290251][ T9] usb 5-1: device descriptor read/64, error -71 [ 236.310083][ T5912] usb 4-1: Using ep0 maxpacket: 8 [ 236.320330][ T5912] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 236.329414][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.337563][ T5912] usb 4-1: Product: syz [ 236.341906][ T5912] usb 4-1: Manufacturer: syz [ 236.346496][ T5912] usb 4-1: SerialNumber: syz [ 236.356670][ T5912] usb 4-1: config 0 descriptor?? [ 236.366688][ T5912] gspca_main: se401-2.14.0 probing 047d:5003 [ 236.410615][ T9] usb usb5-port1: attempt power cycle [ 236.760995][ T9] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 236.772840][ T5912] gspca_se401: Bayer format not supported! [ 236.790759][ T9] usb 5-1: device descriptor read/8, error -71 [ 237.060095][ T9] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 237.102135][ T9] usb 5-1: device descriptor read/8, error -71 [ 237.192615][ T5957] usb 4-1: USB disconnect, device number 82 [ 237.215844][ T9] usb usb5-port1: unable to enumerate USB device [ 237.310842][ T5912] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 237.473179][ T5912] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.503075][ T5912] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 237.528763][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.541675][ T5912] usb 6-1: config 0 descriptor?? [ 237.562569][ T5912] pwc: Askey VC010 type 2 USB webcam detected. [ 237.709974][ T52] Bluetooth: hci2: command tx timeout [ 237.763155][ T5942] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 237.920114][ T5942] usb 7-1: Using ep0 maxpacket: 8 [ 237.928210][ T5942] usb 7-1: unable to get BOS descriptor or descriptor too short [ 237.939107][ T5942] usb 7-1: config 16 interface 0 has no altsetting 0 [ 237.949659][ T5942] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=1a.35 [ 237.954148][ T5912] pwc: recv_control_msg error -32 req 02 val 2b00 [ 237.959166][ T5942] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.973609][ T5912] pwc: recv_control_msg error -32 req 02 val 2700 [ 237.973744][ T5942] usb 7-1: Product: syz [ 237.988263][ T5912] pwc: recv_control_msg error -32 req 02 val 2c00 [ 237.993039][ T5942] usb 7-1: Manufacturer: syz [ 237.996661][ T5912] pwc: recv_control_msg error -32 req 04 val 1000 [ 237.999332][ T5942] usb 7-1: SerialNumber: syz [ 238.015946][ T5912] pwc: recv_control_msg error -32 req 04 val 1300 [ 238.025370][ T5912] pwc: recv_control_msg error -32 req 04 val 1400 [ 238.034467][ T5912] pwc: recv_control_msg error -32 req 02 val 2000 [ 238.044562][ T5912] pwc: recv_control_msg error -32 req 02 val 2100 [ 238.052653][ T5912] pwc: recv_control_msg error -32 req 04 val 1500 [ 238.061259][ T5912] pwc: recv_control_msg error -32 req 02 val 2500 [ 238.103769][ T8308] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 238.230206][ T5942] usb 7-1: ucan: probing device on interface #0 [ 238.236519][ T5942] usb 7-1: ucan: invalid endpoint configuration [ 238.266596][ T5942] usb 7-1: ucan: probe failed; try to update the device firmware [ 238.282529][ T8304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.305404][ T8304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.318910][ T5942] usb 7-1: USB disconnect, device number 6 [ 238.338304][ T8304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.367041][ T8304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.398463][ T52] Bluetooth: hci1: Malformed LE Event: 0x1b [ 238.423647][ T8323] netlink: 'syz.3.617': attribute type 3 has an invalid length. [ 238.431771][ T8323] netlink: 132 bytes leftover after parsing attributes in process `syz.3.617'. [ 238.690263][ T5957] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 238.830184][ T5957] usb 4-1: device descriptor read/64, error -71 [ 239.070372][ T5957] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 239.109875][ T5898] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 239.219972][ T5957] usb 4-1: device descriptor read/64, error -71 [ 239.269931][ T5898] usb 7-1: Using ep0 maxpacket: 32 [ 239.278312][ T5898] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.294822][ T5898] usb 7-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 239.304989][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.316846][ T5898] usb 7-1: Product: syz [ 239.324473][ T5898] usb 7-1: Manufacturer: syz [ 239.329233][ T5898] usb 7-1: SerialNumber: syz [ 239.340227][ T5898] usb 7-1: config 0 descriptor?? [ 239.345583][ T5957] usb usb4-port1: attempt power cycle [ 239.348361][ T5898] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out. [ 239.571170][ T5898] usb 7-1: USB disconnect, device number 7 [ 239.678358][ T8338] netlink: 256 bytes leftover after parsing attributes in process `syz.4.621'. [ 239.700064][ T5957] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 239.724241][ T5957] usb 4-1: device descriptor read/8, error -71 [ 239.790082][ T52] Bluetooth: hci2: command 0x0401 tx timeout [ 239.980048][ T5957] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 240.013761][ T5957] usb 4-1: device descriptor read/8, error -71 [ 240.029084][ T5912] pwc: recv_control_msg error -71 req 02 val 2600 [ 240.058571][ T5912] pwc: recv_control_msg error -71 req 02 val 2900 [ 240.069283][ T5912] pwc: recv_control_msg error -71 req 02 val 2800 [ 240.089926][ T5912] pwc: recv_control_msg error -71 req 04 val 1100 [ 240.094224][ T8343] netlink: 36 bytes leftover after parsing attributes in process `syz.5.623'. [ 240.098696][ T5912] pwc: recv_control_msg error -71 req 04 val 1200 [ 240.113090][ T5862] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 240.128669][ T5912] pwc: Registered as video103. [ 240.134135][ T5957] usb usb4-port1: unable to enumerate USB device [ 240.147514][ T5912] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input26 [ 240.168224][ T5912] usb 6-1: USB disconnect, device number 25 [ 240.277375][ T5862] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 240.301975][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.343584][ T5862] usb 5-1: config 0 descriptor?? [ 240.379606][ T8348] loop6: detected capacity change from 0 to 2560 [ 240.398200][ T5864] buffer_io_error: 12 callbacks suppressed [ 240.398222][ T5864] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.422643][ T5864] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.437305][ T5864] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.455167][ T5864] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.466573][ T5864] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.480822][ T5864] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.488979][ T5864] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.498959][ T5864] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.511569][ T5864] ldm_validate_partition_table(): Disk read failed. [ 240.518647][ T5864] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.521169][ T2345] pvrusb2: request_firmware fatal error with code=-110 [ 240.529261][ T5864] Buffer I/O error on dev loop6, logical block 0, async page read [ 240.542257][ T5864] Dev loop6: unable to read RDB block 0 [ 240.543498][ T2345] pvrusb2: Failure uploading firmware1 [ 240.550571][ T5864] loop6: unable to read partition table [ 240.562000][ T2345] pvrusb2: Device initialization was not successful. [ 240.569250][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 240.592447][ T8348] ldm_validate_partition_table(): Disk read failed. [ 240.608663][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 240.621252][ T8348] Dev loop6: unable to read RDB block 0 [ 240.629048][ T8348] loop6: unable to read partition table [ 240.633490][ T24] pvrusb2: Device being rendered inoperable [ 240.686221][ T8348] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 240.786593][ T5862] kaweth 5-1:0.0: Firmware present in device. [ 240.800631][ T5862] kaweth 5-1:0.0: Error reading configuration (-71), no net device created [ 240.844524][ T5862] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 240.884323][ T5862] usb 5-1: USB disconnect, device number 37 [ 241.016117][ T42] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.109674][ T42] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.180765][ T5957] usb 6-1: new low-speed USB device number 26 using dummy_hcd [ 241.184376][ T42] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.295914][ T42] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.299453][ T8357] netlink: 12 bytes leftover after parsing attributes in process `syz.6.628'. [ 241.332423][ T5957] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 241.342497][ T5957] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.363133][ T5957] usb 6-1: config 0 descriptor?? [ 241.620556][ T8359] netlink: 76 bytes leftover after parsing attributes in process `syz.4.629'. [ 241.690502][ T8359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.629'. [ 241.730665][ T42] bridge_slave_1: left allmulticast mode [ 241.777581][ T42] bridge_slave_1: left promiscuous mode [ 241.788412][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.831596][ T42] bridge_slave_0: left promiscuous mode [ 241.861425][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.884348][ T8376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.632'. [ 242.494797][ T8369] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 242.795416][ T8402] netlink: 8 bytes leftover after parsing attributes in process `syz.6.635'. [ 242.966960][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.978797][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.990904][ T42] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 243.014285][ T42] bond0 (unregistering): Released all slaves [ 243.328643][ T8408] PKCS7: Unknown OID: [4] 5.25.373.87(bad) [ 243.366440][ T8408] PKCS7: Only support pkcs7_signedData type [ 243.773211][ T8422] mmap: syz.3.640 (8422): VmData 37478400 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 243.870559][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 243.919894][ T5912] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 243.952344][ T5957] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 243.990591][ T5957] asix 6-1:0.0: probe with driver asix failed with error -71 [ 244.064348][ T5957] usb 6-1: USB disconnect, device number 26 [ 244.090914][ T8431] netlink: 124 bytes leftover after parsing attributes in process `syz.3.641'. [ 244.122322][ T5912] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 244.151936][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.185598][ T30] audit: type=1800 audit(1758009038.481:21): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.641" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 244.202345][ T5912] usb 5-1: Product: syz [ 244.218250][ T8431] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 244.241843][ T5912] usb 5-1: Manufacturer: syz [ 244.260080][ T5912] usb 5-1: SerialNumber: syz [ 244.289910][ T8264] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 244.299970][ T8431] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 244.331964][ T5912] usb 5-1: config 0 descriptor?? [ 244.338056][ T8431] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 244.376747][ T5912] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 038 [ 244.659027][ T42] hsr_slave_0: left promiscuous mode [ 244.696903][ T42] hsr_slave_1: left promiscuous mode [ 244.712324][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.721270][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.737464][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.753614][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.782932][ T8453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.792437][ T42] veth1_macvtap: left promiscuous mode [ 244.798197][ T42] veth0_macvtap: left promiscuous mode [ 244.808733][ T8453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.865529][ T5912] (null): failure reading functionality [ 244.882140][ T5912] i2c i2c-1: failure reading functionality [ 244.919343][ T5912] i2c i2c-1: connected i2c-tiny-usb device [ 244.986047][ T5912] usb 5-1: USB disconnect, device number 38 [ 245.292057][ T5957] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 245.465785][ T8469] netlink: 20 bytes leftover after parsing attributes in process `syz.4.649'. [ 245.495975][ T8450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.512224][ T8450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.525465][ T5957] usb 7-1: unable to get BOS descriptor or descriptor too short [ 245.538075][ T5957] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 245.548173][ T5957] usb 7-1: can't read configurations, error -71 [ 245.589915][ T8264] usb 4-1: device descriptor read/64, error -71 [ 245.745778][ T42] team0 (unregistering): Port device team_slave_1 removed [ 245.797637][ T42] team0 (unregistering): Port device team_slave_0 removed [ 245.830111][ T8264] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 245.985203][ T8264] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 245.994586][ T8264] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.004137][ T8264] usb 4-1: Product: syz [ 246.008346][ T8264] usb 4-1: Manufacturer: syz [ 246.014589][ T8264] usb 4-1: SerialNumber: syz [ 246.025609][ T8264] usb 4-1: config 0 descriptor?? [ 246.082023][ T52] Bluetooth: hci5: urb ffff88802f055900 submission failed (2) [ 246.327915][ T8474] netlink: 16 bytes leftover after parsing attributes in process `syz.3.648'. [ 246.616988][ T8471] : renamed from bond_slave_0 (while UP) [ 246.652684][ T10] usb 4-1: USB disconnect, device number 88 [ 247.067732][ T8489] tipc: Enabling of bearer rejected, failed to enable media [ 247.077676][ T8264] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 247.100971][ T5942] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 247.241614][ T5942] usb 7-1: device descriptor read/64, error -71 [ 247.257187][ T8264] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.277497][ T8264] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.278707][ T8264] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 247.278738][ T8264] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.297800][ T8264] usb 6-1: config 0 descriptor?? [ 247.332300][ T24] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 247.489322][ T5942] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 247.512233][ T24] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 247.530255][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.558044][ T24] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 247.575801][ T24] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 247.593227][ T24] usb 5-1: Manufacturer: syz [ 247.606734][ T24] usb 5-1: config 0 descriptor?? [ 247.669899][ T5942] usb 7-1: device descriptor read/64, error -71 [ 247.725807][ T24] rc_core: IR keymap rc-hauppauge not found [ 247.733917][ T8264] usbhid 6-1:0.0: can't add hid device: -71 [ 247.742901][ T24] Registered IR keymap rc-empty [ 247.748768][ T8264] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 247.758713][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 247.778999][ T8264] usb 6-1: USB disconnect, device number 27 [ 247.793884][ T5942] usb usb7-port1: attempt power cycle [ 247.802062][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input27 [ 247.830545][ T5898] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 248.002586][ T5898] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 248.015761][ T5898] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.028556][ T5898] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 248.038520][ T5898] usb 4-1: config 1 has no interface number 1 [ 248.046224][ T5898] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 248.063219][ C1] igorplugusb 5-1:0.0: receive overflow, at least 33 lost [ 248.080146][ T5898] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 248.089517][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.097841][ T5898] usb 4-1: Product: syz [ 248.106563][ T5898] usb 4-1: Manufacturer: syz [ 248.111340][ T5898] usb 4-1: SerialNumber: syz [ 248.160300][ T5942] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 248.191646][ T5942] usb 7-1: device descriptor read/8, error -71 [ 248.278986][ T8264] usb 5-1: USB disconnect, device number 39 [ 248.394645][ T5898] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 248.419944][ T5898] usb 4-1: MIDIStreaming interface descriptor not found [ 248.430240][ T5942] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 248.481800][ T5942] usb 7-1: device descriptor read/8, error -71 [ 248.540773][ T5898] usb 4-1: USB disconnect, device number 89 [ 248.599956][ T5942] usb usb7-port1: unable to enumerate USB device [ 248.809903][ T8264] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 248.984508][ T8264] usb 6-1: Using ep0 maxpacket: 32 [ 249.002715][ T8264] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 249.023045][ T8264] usb 6-1: config 0 has no interface number 0 [ 249.048380][ T8264] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 249.065891][ T8264] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.090034][ T8264] usb 6-1: Product: syz [ 249.094259][ T8264] usb 6-1: Manufacturer: syz [ 249.098876][ T8264] usb 6-1: SerialNumber: syz [ 249.124985][ T8264] usb 6-1: config 0 descriptor?? [ 249.139663][ T8264] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 249.150961][ T5898] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 249.162296][ T8264] usb 6-1: selecting invalid altsetting 1 [ 249.169155][ T8264] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 249.173352][ C0] vcan0: j1939_tp_rxtimer: 0xffff888050bf2c00: rx timeout, send abort [ 249.185106][ T8264] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 249.202636][ T8264] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 249.211454][ T8264] usb 6-1: media controller created [ 249.243966][ T8264] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 249.310126][ T5898] usb 4-1: Using ep0 maxpacket: 8 [ 249.317477][ T5898] usb 4-1: config 51 has an invalid interface number: 123 but max is 0 [ 249.329575][ T5898] usb 4-1: config 51 has an invalid descriptor of length 59, skipping remainder of the config [ 249.340472][ T5898] usb 4-1: config 51 has no interface number 0 [ 249.346989][ T5898] usb 4-1: config 51 interface 123 has no altsetting 0 [ 249.362236][ T5898] usb 4-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=64.81 [ 249.375272][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.384129][ T5898] usb 4-1: Product: syz [ 249.388437][ T5898] usb 4-1: Manufacturer: syz [ 249.398302][ T5898] usb 4-1: SerialNumber: syz [ 249.629151][ T5898] usb 4-1: unsupported MDLM descriptors [ 249.664872][ T5898] usb 4-1: USB disconnect, device number 90 [ 249.674256][ C0] vcan0: j1939_tp_rxtimer: 0xffff888050bf3800: rx timeout, send abort [ 249.685340][ C0] vcan0: j1939_tp_rxtimer: 0xffff888050bf2c00: abort rx timeout. Force session deactivation [ 250.182569][ C0] vcan0: j1939_tp_rxtimer: 0xffff888050bf3800: abort rx timeout. Force session deactivation [ 250.355658][ T8264] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 250.364606][ T8264] zl10353_read_register: readreg error (reg=127, ret==-110) [ 250.410127][ T5942] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 250.512803][ T24] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 250.539905][ T5942] usb 7-1: device descriptor read/64, error -71 [ 250.600575][ T5957] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 250.669943][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 250.676037][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 250.690344][ T24] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 250.699193][ T24] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 250.709880][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 250.721504][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 250.730760][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.738935][ T24] usb 5-1: Product: syz [ 250.743379][ T24] usb 5-1: Manufacturer: syz [ 250.748189][ T24] usb 5-1: SerialNumber: syz [ 250.762050][ T5957] usb 4-1: Using ep0 maxpacket: 32 [ 250.770795][ T5957] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 250.779271][ T5957] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 250.779964][ T5942] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 250.792650][ T5957] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 250.815074][ T5957] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 250.828480][ T5957] usb 4-1: config 0 interface 0 has no altsetting 0 [ 250.840018][ T5957] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 250.849133][ T5957] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 250.859130][ T5957] usb 4-1: Product: syz [ 250.863374][ T5957] usb 4-1: Manufacturer: syz [ 250.867998][ T5957] usb 4-1: SerialNumber: syz [ 250.876940][ T5957] usb 4-1: config 0 descriptor?? [ 250.885737][ T5957] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 250.900944][ T5957] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 250.939942][ T5942] usb 7-1: device descriptor read/64, error -71 [ 250.968378][ T24] usb 5-1: 0:2 : does not exist [ 250.986876][ T24] usb 5-1: USB disconnect, device number 40 [ 251.026877][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 251.063170][ T5942] usb usb7-port1: attempt power cycle [ 251.107790][ T5898] usb 4-1: USB disconnect, device number 91 [ 251.125417][ T5898] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 251.185069][ T8588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.195071][ T8588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.327811][ T8593] netlink: 36 bytes leftover after parsing attributes in process `syz.3.672'. [ 251.364042][ T8595] netlink: 36 bytes leftover after parsing attributes in process `syz.3.672'. [ 251.410204][ T5942] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 251.440668][ T5942] usb 7-1: device descriptor read/8, error -71 [ 251.468021][ T8264] usb 6-1: USB disconnect, device number 28 [ 251.709872][ T5942] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 251.763840][ T5942] usb 7-1: device descriptor read/8, error -71 [ 251.882013][ T5942] usb usb7-port1: unable to enumerate USB device [ 251.979907][ T8264] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 252.101783][ T5912] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 252.110048][ T8264] usb 6-1: device descriptor read/64, error -71 [ 252.120024][ T5957] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 252.260066][ T5912] usb 4-1: Using ep0 maxpacket: 8 [ 252.267453][ T5912] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.278074][ T5912] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 252.287936][ T5912] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 252.301306][ T5912] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 252.312782][ T5912] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 252.323837][ T5957] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 252.333396][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.341721][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.350511][ T8264] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 252.370965][ T5957] usb 5-1: config 0 descriptor?? [ 252.384127][ T5912] hub 4-1:1.0: bad descriptor, ignoring hub [ 252.391727][ T5912] hub 4-1:1.0: probe with driver hub failed with error -5 [ 252.399419][ T5912] cdc_wdm 4-1:1.0: skipping garbage [ 252.405324][ T5912] cdc_wdm 4-1:1.0: skipping garbage [ 252.414171][ T5912] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 252.420256][ T5912] cdc_wdm 4-1:1.0: Unknown control protocol [ 252.490072][ T8264] usb 6-1: device descriptor read/64, error -71 [ 252.603199][ T8264] usb usb6-port1: attempt power cycle [ 252.796099][ T5942] usb 4-1: USB disconnect, device number 92 [ 252.950043][ T8264] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 252.970675][ T8264] usb 6-1: device descriptor read/8, error -71 [ 253.199356][ T8623] bpf: Bad value for 'gid' [ 253.199378][ T8624] bpf: Bad value for 'gid' [ 253.210004][ T8264] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 253.235001][ T8264] usb 6-1: device descriptor read/8, error -71 [ 253.311296][ T56] block nbd0: Possible stuck request ffff888025510000: control (read@0,1024B). Runtime 150 seconds [ 253.329837][ T56] block nbd0: Possible stuck request ffff8880255101c0: control (read@1024,1024B). Runtime 150 seconds [ 253.341137][ T56] block nbd0: Possible stuck request ffff888025510380: control (read@2048,1024B). Runtime 150 seconds [ 253.351129][ T8264] usb usb6-port1: unable to enumerate USB device [ 253.353140][ T56] block nbd0: Possible stuck request ffff888025510540: control (read@3072,1024B). Runtime 150 seconds [ 253.404554][ T5957] usb 5-1: Cannot set autoneg [ 253.419016][ T5957] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 253.496628][ T8635] netlink: 28 bytes leftover after parsing attributes in process `syz.3.683'. [ 253.618790][ T8264] usb 5-1: USB disconnect, device number 41 [ 254.372902][ T8645] pvfs2: Unknown parameter 'aȨYÕÖf' [ 254.620518][ T8264] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 254.760079][ T8264] usb 5-1: device descriptor read/64, error -71 [ 255.009896][ T8264] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 255.109941][ T5942] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 255.139861][ T8264] usb 5-1: device descriptor read/64, error -71 [ 255.250681][ T8264] usb usb5-port1: attempt power cycle [ 255.270087][ T5942] usb 6-1: Using ep0 maxpacket: 8 [ 255.277157][ T5942] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 255.286265][ T5942] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.297424][ T5942] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 255.308999][ T5942] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 255.318349][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.326854][ T5942] usb 6-1: Product: ꢑ誩꠯蚕曈饓ᗦ錰粠鄔盚᫆⹞é·â°¯ì·ƒë³ºæ¬î‹‰ê¥›ì½²èƒµç¯éŽ‚ë™ì¬é°¿ïƒ‹ê¶ƒé˜Šî¬œà¸´êšˆáššæ¦Œè´‹á­¸é±ã¹°è©³è£›âš¨ä–†â€¥ç°‚겣䫷჋훥픥⇅苣ڋꙪï²â”‰é‹¦á•¶è½³ëŠ¯â°‘潧⟕Ꞷ럪冑憥ç‘é¯Šç¨°Ù‰ì„ [ 255.350728][ T5942] usb 6-1: Manufacturer: Ñ… [ 255.355275][ T5942] usb 6-1: SerialNumber: á« ã¼ëŒãžµæ´”è‚¿çžîž—猡綃螗ힺ科無惴蒓é–甼芦쳟৮퇗߿⺜૮젫㽀ﺴ泣㱿襦볌췜 [ 255.620064][ T8264] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 255.640593][ T8264] usb 5-1: device descriptor read/8, error -71 [ 255.760561][ T5957] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 255.782027][ T5942] usb 6-1: 0:2 : does not exist [ 255.810785][ T5942] usb 6-1: USB disconnect, device number 33 [ 255.874467][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.883464][ T8264] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 255.886560][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.910676][ T8264] usb 5-1: device descriptor read/8, error -71 [ 255.933116][ T5957] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.944819][ T5957] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.955912][ T5957] usb 7-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 255.967489][ T5957] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.977652][ T5957] usb 7-1: config 0 descriptor?? [ 256.022177][ T8264] usb usb5-port1: unable to enumerate USB device [ 256.396495][ T5957] hid_parser_main: 51 callbacks suppressed [ 256.396523][ T5957] viewsonic 0003:0543:E621.0017: unknown main item tag 0x0 [ 256.410074][ T5957] viewsonic 0003:0543:E621.0017: unknown main item tag 0x0 [ 256.417326][ T5957] viewsonic 0003:0543:E621.0017: unknown main item tag 0x0 [ 256.429067][ T5957] viewsonic 0003:0543:E621.0017: unknown main item tag 0x0 [ 256.437678][ T5957] viewsonic 0003:0543:E621.0017: unknown main item tag 0x0 [ 256.445633][ T5957] viewsonic 0003:0543:E621.0017: unknown main item tag 0x0 [ 256.452967][ T5957] viewsonic 0003:0543:E621.0017: unknown main item tag 0x0 [ 256.464855][ T5957] viewsonic 0003:0543:E621.0017: hidraw0: USB HID v0.00 Device [HID 0543:e621] on usb-dummy_hcd.6-1/input0 [ 256.545781][ T8661] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 256.593727][ T5957] usb 7-1: USB disconnect, device number 18 [ 256.624148][ T5912] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 257.480279][ T5912] usb 6-1: device descriptor read/64, error -71 [ 257.519961][ T5957] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 257.680084][ T5957] usb 7-1: Using ep0 maxpacket: 8 [ 257.687157][ T5957] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.697842][ T5957] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 257.707222][ T5957] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.718485][ T5957] usb 7-1: config 0 descriptor?? [ 257.729892][ T5912] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 257.738553][ T5957] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 257.900010][ T5912] usb 6-1: Using ep0 maxpacket: 16 [ 257.907104][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.918071][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.927913][ T5912] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 257.941051][ T5912] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 257.950479][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.965028][ T5912] usb 6-1: config 0 descriptor?? [ 258.384733][ T5912] HID 045e:07da: Invalid code 65791 type 1 [ 258.396176][ T5912] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0018/input/input28 [ 258.421389][ T5912] microsoft 0003:045E:07DA.0018: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 258.616052][ T5912] usb 6-1: USB disconnect, device number 35 [ 258.843031][ T24] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 258.862431][ T5957] gspca_vc032x: reg_w err -110 [ 258.867358][ T5957] vc032x 7-1:0.0: probe with driver vc032x failed with error -110 [ 259.003827][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.013771][ T24] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 259.023024][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.033588][ T24] usb 5-1: config 0 descriptor?? [ 259.444209][ T5942] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 259.472266][ T24] lenovo 0003:17EF:6047.0019: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 259.604714][ T5942] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.646861][ T5942] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 259.665327][ T24] lenovo 0003:17EF:6047.0019: Failed to switch F7/9/11 mode: -71 [ 259.686525][ T5942] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 259.700401][ T24] lenovo 0003:17EF:6047.0019: Failed to switch middle button: -71 [ 259.710941][ T5942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 259.723063][ T5942] usb 6-1: SerialNumber: syz [ 259.728210][ T24] lenovo 0003:17EF:6047.0019: Fn-lock setting failed: -71 [ 259.739428][ T24] lenovo 0003:17EF:6047.0019: Sensitivity setting failed: -71 [ 259.777713][ T24] usb 5-1: USB disconnect, device number 46 [ 259.973849][ T5942] usb 6-1: 0:2 : does not exist [ 260.025582][ T5942] usb 6-1: USB disconnect, device number 36 [ 260.062249][ T7241] udevd[7241]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 260.331619][ T10] usb 7-1: USB disconnect, device number 19 [ 260.367728][ T8718] syzkaller1: entered promiscuous mode [ 260.409701][ T8718] syzkaller1: entered allmulticast mode [ 260.416323][ T8720] loop6: detected capacity change from 0 to 2560 [ 260.434799][ T7241] buffer_io_error: 27 callbacks suppressed [ 260.434818][ T7241] Buffer I/O error on dev loop6, logical block 0, async page read [ 260.450733][ T7241] Buffer I/O error on dev loop6, logical block 0, async page read [ 260.458728][ T7241] Buffer I/O error on dev loop6, logical block 0, async page read [ 260.466972][ T7241] Buffer I/O error on dev loop6, logical block 0, async page read [ 260.475147][ T7241] Buffer I/O error on dev loop6, logical block 0, async page read [ 260.483791][ T7241] Buffer I/O error on dev loop6, logical block 0, async page read [ 260.492485][ T7241] Buffer I/O error on dev loop6, logical block 0, async page read [ 260.509978][ T7241] Buffer I/O error on dev loop6, logical block 0, async page read [ 260.529896][ T7241] ldm_validate_partition_table(): Disk read failed. [ 260.536660][ T7241] Buffer I/O error on dev loop6, logical block 0, async page read [ 260.555213][ T7241] Buffer I/O error on dev loop6, logical block 0, async page read [ 260.564569][ T7241] Dev loop6: unable to read RDB block 0 [ 260.573501][ T7241] loop6: unable to read partition table [ 260.676973][ T5232] ldm_validate_partition_table(): Disk read failed. [ 260.686995][ T5232] Dev loop6: unable to read RDB block 0 [ 260.697777][ T8729] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 260.698959][ T5232] loop6: unable to read partition table [ 260.790843][ T8736] batadv_slave_1: entered promiscuous mode [ 260.799301][ T8736] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.839032][ T8736] netlink: 8 bytes leftover after parsing attributes in process `syz.6.708'. [ 261.140639][ T10] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 261.320193][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 261.337597][ T10] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 261.357782][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.369554][ T8736] infiniband syz0: set active [ 261.376767][ T8736] infiniband syz0: added batadv_slave_0 [ 261.386155][ T10] usb 6-1: config 0 descriptor?? [ 261.394169][ T8748] netlink: 156 bytes leftover after parsing attributes in process `syz.4.710'. [ 261.399292][ T10] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 261.509383][ T8736] RDS/IB: syz0: added [ 261.527025][ T8736] smc: adding ib device syz0 with port count 1 [ 261.568021][ T8736] smc: ib device syz0 port 1 has no pnetid [ 261.611161][ T8735] batadv_slave_1: left promiscuous mode [ 261.618877][ T10] usb 6-1: Detected FT232A [ 261.636391][ T10] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 261.830319][ T5942] usb 6-1: USB disconnect, device number 37 [ 261.843217][ T5942] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 261.874414][ T5942] ftdi_sio 6-1:0.0: device disconnected [ 261.882003][ T8264] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 262.053967][ T8264] usb 5-1: Using ep0 maxpacket: 32 [ 262.062670][ T8264] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 262.079950][ T8264] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 262.103319][ T8264] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 262.127533][ T8264] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 262.149410][ T8264] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.163864][ T8264] usb 5-1: Product: syz [ 262.168095][ T8264] usb 5-1: Manufacturer: 嚜︖䰃ᖜ舓႗둿쟙꽩樫탡蟹쥦훯碇鿺Ⱅç›Ë«å¸“çŒå»¶è™•ã…‰â­·ì¦ˆé©¬å¿»â®¥ä±—綉泋籣ç‘팆℄駇ç®ï ¬ï§çº ê˜›ã¢¹æ¶´í”¼á²¸ì»Œç”è¿âº‰î¸­æ¾Žâ„Žë¾¯é™ì…’⦳锩椄Ἳ桿Ѹㅢå“쨀錰éŽá² ç¹˜ç‡£ìŸºå¨»æ¶Šâ£¦è”Ÿî¬Ÿæ‘¤éŒ²æ¼¯ä“ºå½î»œì’™ë„è‹ç½‘쵔氃衃ã€ã½¢ì¢¶çˆî™©æ‹’盵綽覨äŒî¬“í–­æ©ç¢ã´®á°·ã–€ìŽ‡æ”³î‹®ä… é¿£ç›á–’㥰៑؞祯 [ 262.212372][ T8264] usb 5-1: SerialNumber: syz [ 262.435488][ T8753] netlink: 24 bytes leftover after parsing attributes in process `syz.4.711'. [ 262.486001][ T8264] usb 5-1: 0:2 : does not exist [ 262.516304][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.5.712'. [ 262.564531][ T8264] usb 5-1: USB disconnect, device number 47 [ 262.614337][ T7241] udevd[7241]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 263.023444][ T5862] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 263.188220][ T5862] usb 6-1: Using ep0 maxpacket: 16 [ 263.211998][ T5862] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 263.243930][ T5862] usb 6-1: config 0 has no interface number 0 [ 263.263927][ T5862] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 263.293116][ T5862] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 263.319846][ T5862] usb 6-1: config 0 interface 41 has no altsetting 0 [ 263.333349][ T5862] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 263.350380][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.373479][ T5862] usb 6-1: Product: syz [ 263.380754][ T5862] usb 6-1: Manufacturer: syz [ 263.400227][ T5862] usb 6-1: SerialNumber: syz [ 263.436912][ T5862] usb 6-1: config 0 descriptor?? [ 263.451188][ T8773] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 263.468899][ T8773] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 263.650201][ T5942] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 263.700123][ T8773] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 263.707609][ T8773] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 263.832508][ T5942] usb 5-1: not running at top speed; connect to a high speed hub [ 263.849269][ T5942] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 263.866787][ T5942] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 263.876331][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.884735][ T5942] usb 5-1: Product: ㄻ羮塖䙎ᰬê«î‘©î£ [ 263.899930][ T5942] usb 5-1: Manufacturer: 﫵ꉽꟌಎ䧖켓ĕ༠戻츉↠[ 263.922239][ T8788] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 264.133398][ T5862] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -22 [ 264.145563][ T8788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.156032][ T8788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.174479][ T5942] cdc_ncm 5-1:1.0: bind() failure [ 264.185640][ T5942] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 264.194911][ T5942] cdc_ncm 5-1:1.1: bind() failure [ 264.201372][ T10] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 264.210156][ T5942] usb 5-1: USB disconnect, device number 48 [ 264.371873][ T10] usb 7-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 264.381255][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.397686][ T10] usb 7-1: config 0 descriptor?? [ 264.872506][ T8800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.883804][ T8799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.893277][ T8800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.901852][ T8799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.794412][ T8264] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 265.950041][ T8264] usb 5-1: Using ep0 maxpacket: 32 [ 265.957303][ T8264] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 265.965699][ T8264] usb 5-1: config 0 has no interface number 0 [ 265.974163][ T8264] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 265.983429][ T8264] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.991623][ T8264] usb 5-1: Product: syz [ 265.995816][ T8264] usb 5-1: Manufacturer: syz [ 266.004930][ T8264] usb 5-1: SerialNumber: syz [ 266.013557][ T8264] usb 5-1: config 0 descriptor?? [ 266.022247][ T8264] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 266.229638][ T8264] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 266.244805][ T8264] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 266.321695][ T5942] usb 6-1: USB disconnect, device number 38 [ 266.628220][ T8809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.652522][ T8809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.664532][ T8812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.679215][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 266.680654][ T5957] usb 5-1: USB disconnect, device number 49 [ 266.689242][ T8812] block nbd5: Attempted send on invalid socket [ 266.701738][ T8812] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 266.714276][ T8812] block nbd5: Attempted send on invalid socket [ 266.721321][ T5957] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 266.725656][ T8812] I/O error, dev nbd5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 266.743870][ T5957] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 266.774086][ T5957] quatech2 5-1:0.51: device disconnected [ 267.610011][ T5957] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 267.783815][ T5957] usb 6-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 267.796589][ T5957] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.806633][ T5957] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 267.820413][ T5957] usb 6-1: config 0 interface 0 has no altsetting 0 [ 267.827471][ T5957] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 267.836958][ T5957] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.847510][ T5957] usb 6-1: config 0 descriptor?? [ 267.880006][ T5912] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 268.049873][ T5912] usb 5-1: Using ep0 maxpacket: 8 [ 268.058095][ T5912] usb 5-1: unable to get BOS descriptor or descriptor too short [ 268.067511][ T5912] usb 5-1: config 82 has an invalid interface number: 96 but max is 0 [ 268.076056][ T5912] usb 5-1: config 82 has no interface number 0 [ 268.082484][ T5912] usb 5-1: config 82 interface 96 altsetting 225 has an endpoint descriptor with address 0x11, changing to 0x1 [ 268.095580][ T5912] usb 5-1: config 82 interface 96 altsetting 225 endpoint 0x1 has invalid wMaxPacketSize 0 [ 268.105767][ T5912] usb 5-1: config 82 interface 96 has no altsetting 0 [ 268.115508][ T5912] usb 5-1: New USB device found, idVendor=16ab, idProduct=7802, bcdDevice=ce.24 [ 268.124718][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.133174][ T5912] usb 5-1: Product: syz [ 268.137466][ T5912] usb 5-1: Manufacturer: syz [ 268.143900][ T5912] usb 5-1: SerialNumber: syz [ 268.259704][ T8817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.269688][ T8817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.281833][ T5957] usbhid 6-1:0.0: can't add hid device: -71 [ 268.288160][ T5957] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 268.304729][ T5957] usb 6-1: USB disconnect, device number 39 [ 268.365957][ T8825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.375807][ T8825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.389705][ T5912] usb 5-1: Could not find all expected endpoints [ 268.407098][ T5912] usb 5-1: USB disconnect, device number 50 [ 269.069909][ T5942] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 269.225580][ T5942] usb 6-1: Using ep0 maxpacket: 32 [ 269.232831][ T5942] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 269.241298][ T5942] usb 6-1: config 0 has no interface number 0 [ 269.247529][ T5942] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 269.257941][ T5942] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 269.272335][ T5942] usb 6-1: config 0 interface 126 has no altsetting 0 [ 269.294819][ T5942] usb 6-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 269.304041][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.312491][ T5942] usb 6-1: Product: syz [ 269.316837][ T5942] usb 6-1: Manufacturer: syz [ 269.324395][ T5942] usb 6-1: SerialNumber: syz [ 269.335259][ T5942] usb 6-1: config 0 descriptor?? [ 269.346246][ T8830] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 269.353719][ T8830] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 269.439519][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 269.471868][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 269.520192][ T10] usb 7-1: USB disconnect, device number 20 [ 269.783214][ T5942] ir_usb 6-1:0.126: IR Dongle converter detected [ 269.983207][ T8830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.021058][ T8830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.056565][ T5942] usb 6-1: IR Dongle converter now attached to ttyUSB0 [ 270.152862][ T7900] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 270.181143][ T7900] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 270.195121][ T7900] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 270.215668][ T7900] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 270.235395][ T7900] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 270.245422][ T8830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.278995][ T8830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.404684][ T10] usb 6-1: USB disconnect, device number 40 [ 270.444788][ T10] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 270.490839][ T10] ir_usb 6-1:0.126: device disconnected [ 272.226389][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.6.731'. [ 272.271304][ T8848] netlink: 'syz.6.731': attribute type 21 has an invalid length. [ 272.300606][ T8848] netlink: 388 bytes leftover after parsing attributes in process `syz.6.731'. [ 272.313944][ T8837] vxcan1 speed is unknown, defaulting to 1000 [ 272.349959][ T7900] Bluetooth: hci5: command tx timeout [ 272.519912][ T10] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 272.582415][ T42] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.697379][ T42] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.721629][ T5942] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 272.730771][ T10] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 272.742114][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.759044][ T10] usb 6-1: config 0 descriptor?? [ 272.770722][ T10] cp210x 6-1:0.0: cp210x converter detected [ 272.854317][ T42] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.879262][ T8861] binder: 8860:8861 ioctl 4008af20 200000000780 returned -22 [ 272.919940][ T5942] usb 7-1: Using ep0 maxpacket: 16 [ 272.951600][ T5942] usb 7-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 272.980365][ T5942] usb 7-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 273.009161][ T5942] usb 7-1: Product: syz [ 273.016121][ T10] usb 6-1: cp210x converter now attached to ttyUSB0 [ 273.019560][ T42] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 273.034604][ T42] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.036720][ T5942] usb 7-1: Manufacturer: syz [ 273.054122][ T5942] usb 7-1: SerialNumber: syz [ 273.075257][ T8863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.738'. [ 273.087582][ T5942] usb 7-1: config 0 descriptor?? [ 273.111291][ T5942] ums-onetouch 7-1:0.0: USB Mass Storage device detected [ 273.126936][ T8865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.738'. [ 273.336425][ T5957] usb 7-1: USB disconnect, device number 21 [ 273.386195][ T42] bridge_slave_1: left allmulticast mode [ 273.397479][ T42] bridge_slave_1: left promiscuous mode [ 273.414021][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.452383][ T42] bridge_slave_0: left allmulticast mode [ 273.469657][ T42] bridge_slave_0: left promiscuous mode [ 273.476605][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.956521][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.970624][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.982597][ T42] bond0 (unregistering): Released all slaves [ 274.212201][ T5912] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 274.348928][ T8883] option changes via remount are deprecated (pid=8881 comm=syz.4.741) [ 274.372040][ T8884] netlink: 20 bytes leftover after parsing attributes in process `syz.4.741'. [ 274.391002][ T5912] usb 7-1: Using ep0 maxpacket: 16 [ 274.402307][ T5912] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.427760][ T5912] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.438039][ T7900] Bluetooth: hci5: command tx timeout [ 274.458714][ T5912] usb 7-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 274.481569][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.521094][ T5912] usb 7-1: config 0 descriptor?? [ 274.659096][ T8837] chnl_net:caif_netlink_parms(): no params data found [ 274.661713][ T8891] netlink: 'syz.4.742': attribute type 6 has an invalid length. [ 274.755926][ T8873] netlink: 'syz.6.740': attribute type 11 has an invalid length. [ 275.020775][ T5912] usbhid 7-1:0.0: can't add hid device: -71 [ 275.065307][ T5912] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 275.097974][ T5912] usb 7-1: USB disconnect, device number 22 [ 275.155523][ T8837] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.169034][ T8837] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.178549][ T8837] bridge_slave_0: entered allmulticast mode [ 275.207903][ T8837] bridge_slave_0: entered promiscuous mode [ 275.239658][ T8837] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.268810][ T8837] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.285155][ T8837] bridge_slave_1: entered allmulticast mode [ 275.293958][ T8837] bridge_slave_1: entered promiscuous mode [ 275.295631][ T24] usb 6-1: USB disconnect, device number 41 [ 275.382180][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 275.431531][ T24] cp210x 6-1:0.0: device disconnected [ 275.516482][ T8837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.559297][ T8837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.929936][ T5912] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 275.987673][ T8837] team0: Port device team_slave_0 added [ 276.026820][ T8837] team0: Port device team_slave_1 added [ 276.074878][ T8929] I/O error, dev loop4, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.136850][ T5912] usb 6-1: not running at top speed; connect to a high speed hub [ 276.156971][ T8929] qnx4: unable to read the superblock [ 276.163219][ T5912] usb 6-1: config 1 interface 0 altsetting 4 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 276.183723][ T5912] usb 6-1: config 1 interface 0 has no altsetting 0 [ 276.224637][ T5912] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 276.254969][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.291140][ T5912] usb 6-1: Product: syz [ 276.295370][ T5912] usb 6-1: Manufacturer: П [ 276.326049][ T5912] usb 6-1: SerialNumber: syz [ 276.347599][ T8837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.375028][ T8837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.409664][ T8837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.470675][ T8916] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 276.504968][ T8837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.512774][ T7900] Bluetooth: hci5: command tx timeout [ 276.526377][ T8837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.552572][ C0] vkms_vblank_simulate: vblank timer overrun [ 276.560040][ T8837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.583772][ T42] hsr_slave_0: left promiscuous mode [ 276.593575][ T42] hsr_slave_1: left promiscuous mode [ 276.624825][ T42] veth1_macvtap: left promiscuous mode [ 276.630571][ T42] veth0_macvtap: left promiscuous mode [ 276.637728][ T42] veth1_vlan: left promiscuous mode [ 276.643992][ T42] veth0_vlan: left promiscuous mode [ 276.670268][ T24] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 276.717311][ T8946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.728746][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058fd4c00: rx timeout, send abort [ 276.730228][ T5912] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 276.765068][ T8946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.805665][ T5912] usb 6-1: USB disconnect, device number 42 [ 276.830901][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 276.842939][ T24] usb 7-1: New USB device found, idVendor=0b05, idProduct=1837, bcdDevice= 0.00 [ 276.864666][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.891133][ T24] usb 7-1: config 0 descriptor?? [ 276.940928][ T8264] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 277.121760][ T8264] usb 5-1: Using ep0 maxpacket: 32 [ 277.136355][ T8264] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 277.149515][ T8264] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 277.164696][ T8264] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 277.175520][ T8264] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 277.184699][ T8264] usb 5-1: config 1 has no interface number 0 [ 277.191135][ T8264] usb 5-1: too many endpoints for config 1 interface 1 altsetting 48: 120, using maximum allowed: 30 [ 277.202416][ T8264] usb 5-1: config 1 interface 1 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 277.216741][ T8264] usb 5-1: config 1 interface 1 has no altsetting 0 [ 277.223920][ T8264] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 277.233470][ T8264] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.241784][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058fd4c00: abort rx timeout. Force session deactivation [ 277.348891][ T24] asus 0003:0B05:1837.001A: reserved main item tag 0xd [ 277.356180][ T24] asus 0003:0B05:1837.001A: item fetching failed at offset 4/5 [ 277.366415][ T24] asus 0003:0B05:1837.001A: Asus hid parse failed: -22 [ 277.373820][ T24] asus 0003:0B05:1837.001A: probe with driver asus failed with error -22 [ 277.554796][ T5957] usb 7-1: USB disconnect, device number 23 [ 277.595829][ T8952] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 277.638486][ T8951] netlink: 104 bytes leftover after parsing attributes in process `syz.5.752'. [ 277.643853][ T8952] overlayfs: missing 'lowerdir' [ 277.660455][ T8951] netlink: 104 bytes leftover after parsing attributes in process `syz.5.752'. [ 277.693306][ T8951] netlink: 104 bytes leftover after parsing attributes in process `syz.5.752'. [ 277.703588][ T8951] netlink: 104 bytes leftover after parsing attributes in process `syz.5.752'. [ 277.713673][ T8951] netlink: 104 bytes leftover after parsing attributes in process `syz.5.752'. [ 277.725211][ T8951] netlink: 104 bytes leftover after parsing attributes in process `syz.5.752'. [ 277.735379][ T8951] netlink: 104 bytes leftover after parsing attributes in process `syz.5.752'. [ 277.745969][ T8951] netlink: 104 bytes leftover after parsing attributes in process `syz.5.752'. [ 277.756126][ T8951] netlink: 104 bytes leftover after parsing attributes in process `syz.5.752'. [ 277.765738][ T8951] netlink: 104 bytes leftover after parsing attributes in process `syz.5.752'. [ 277.775672][ T42] team0 (unregistering): Port device team_slave_1 removed [ 277.879521][ T42] team0 (unregistering): Port device team_slave_0 removed [ 277.902288][ T8956] 9pnet_fd: Insufficient options for proto=fd [ 277.972295][ T8958] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 277.979242][ T8958] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 278.590722][ T7900] Bluetooth: hci5: command tx timeout [ 278.599893][ T10] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 278.789873][ T10] usb 7-1: config 0 has an invalid interface number: 3 but max is 2 [ 278.798082][ T10] usb 7-1: config 0 has an invalid interface number: 176 but max is 2 [ 278.809810][ T10] usb 7-1: config 0 has no interface number 1 [ 278.816139][ T10] usb 7-1: config 0 has no interface number 2 [ 278.825500][ T10] usb 7-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 278.843291][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.860583][ T10] usb 7-1: config 0 descriptor?? [ 278.988494][ T8264] usb 5-1: string descriptor 0 read error: -71 [ 279.015905][ T8264] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 279.024622][ T8264] usb 5-1: selecting invalid altsetting 0 [ 279.030946][ T8264] snd_usb_pod 5-1:1.1: set_interface failed [ 279.039154][ T8264] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 279.047704][ T8264] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 279.068141][ T8264] usb 5-1: USB disconnect, device number 51 [ 279.179760][ T8977] loop7: detected capacity change from 0 to 524255232 [ 279.242926][ T8837] hsr_slave_0: entered promiscuous mode [ 279.270590][ T8837] hsr_slave_1: entered promiscuous mode [ 279.277688][ T8837] debugfs: 'hsr0' already exists in 'hsr' [ 279.312158][ T8837] Cannot create hsr debugfs directory [ 279.332184][ T10] usb 7-1: Could not set interface, error -71 [ 279.415076][ T10] usb 7-1: USB disconnect, device number 24 [ 280.471609][ T8837] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 280.535439][ T8837] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 280.592892][ T8837] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 280.636313][ T8837] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 280.649903][ T10] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 280.832854][ T10] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 280.866330][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.915988][ T10] usb 6-1: config 0 descriptor?? [ 280.928139][ T8837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.947298][ T10] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 280.998059][ T8837] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.028074][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.035513][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.117314][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.124583][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.551360][ T10] gspca_cpia1: usb_control_msg 01, error -71 [ 281.557413][ T10] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 281.619108][ T10] usb 6-1: USB disconnect, device number 43 [ 281.702165][ T9044] overlayfs: failed lookup in lower (newroot/45, name='bus', err=-40): overlapping layers [ 281.958962][ T8837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.120020][ T24] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 282.302059][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 282.322659][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 282.359805][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 282.379799][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 282.403045][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 282.423375][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.455020][ T24] usb 5-1: config 0 descriptor?? [ 282.510651][ T5862] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 282.704557][ T5862] usb 6-1: config 0 has an invalid interface number: 175 but max is 0 [ 282.706362][ T9056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.730228][ T5862] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.732852][ T9056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.776188][ T5862] usb 6-1: config 0 has no interface number 0 [ 282.778460][ T24] hdpvr 5-1:0.0: unexpected answer of status request, len -71 [ 282.803025][ T24] hdpvr 5-1:0.0: device init failed [ 282.808401][ T24] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 282.810380][ T5862] usb 6-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 282.827412][ T24] usb 5-1: USB disconnect, device number 52 [ 282.865180][ T8837] veth0_vlan: entered promiscuous mode [ 282.891428][ T5862] usb 6-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 282.902699][ T8837] veth1_vlan: entered promiscuous mode [ 282.933079][ T5862] usb 6-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 282.956380][ T5862] usb 6-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 282.975970][ T5862] usb 6-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 282.977516][ T8837] veth0_macvtap: entered promiscuous mode [ 282.985959][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.016370][ T5862] usb 6-1: Product: syz [ 283.034587][ T8837] veth1_macvtap: entered promiscuous mode [ 283.046394][ T5862] usb 6-1: Manufacturer: syz [ 283.059798][ T5862] usb 6-1: SerialNumber: syz [ 283.077574][ T5862] usb 6-1: config 0 descriptor?? [ 283.096060][ T5862] symbolserial 6-1:0.175: symbol converter detected [ 283.115635][ T8837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.123827][ T5862] usb 6-1: symbol converter now attached to ttyUSB0 [ 283.139217][ T8837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.210953][ T3524] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.237167][ T3524] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.293312][ T3524] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.321616][ T3524] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.332507][ T5862] usb 6-1: USB disconnect, device number 44 [ 283.397218][ T5862] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 283.406622][ T56] block nbd0: Possible stuck request ffff888025510000: control (read@0,1024B). Runtime 180 seconds [ 283.418651][ T56] block nbd0: Possible stuck request ffff8880255101c0: control (read@1024,1024B). Runtime 180 seconds [ 283.430405][ T56] block nbd0: Possible stuck request ffff888025510380: control (read@2048,1024B). Runtime 180 seconds [ 283.442092][ T56] block nbd0: Possible stuck request ffff888025510540: control (read@3072,1024B). Runtime 180 seconds [ 283.479498][ T5862] symbolserial 6-1:0.175: device disconnected [ 283.533663][ T9079] tipc: Started in network mode [ 283.538589][ T9079] tipc: Node identity 4, cluster identity 4711 [ 283.546853][ T9079] tipc: Node number set to 4 [ 283.706844][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.750520][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.849405][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.885098][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.135611][ T9103] __nla_validate_parse: 58 callbacks suppressed [ 284.135633][ T9103] netlink: 129704 bytes leftover after parsing attributes in process `syz.7.729'. [ 284.249661][ T9106] netlink: 'syz.7.783': attribute type 10 has an invalid length. [ 284.249979][ T9108] netlink: 'syz.7.783': attribute type 10 has an invalid length. [ 284.258650][ T9106] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.275023][ T9106] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.293337][ T9106] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.300651][ T9106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.309274][ T9106] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.317535][ T9106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.329319][ T9106] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 284.339985][ T24] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 284.349573][ T9108] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.356856][ T9108] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.392786][ T5957] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 284.490732][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 284.498368][ T9113] sctp: [Deprecated]: syz.7.786 (pid 9113) Use of struct sctp_assoc_value in delayed_ack socket option. [ 284.498368][ T9113] Use struct sctp_sack_info instead [ 284.523575][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 284.543610][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 284.570606][ T5957] usb 5-1: Using ep0 maxpacket: 32 [ 284.573033][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 284.581614][ T5957] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 284.608294][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 284.624440][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.624988][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 284.646435][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.655102][ T5957] usb 5-1: config 0 descriptor?? [ 284.709329][ T5957] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 284.897428][ T24] usb 6-1: GET_CAPABILITIES returned 0 [ 284.914709][ T24] usbtmc 6-1:16.0: can't read capabilities [ 284.919105][ T5957] gspca_vc032x: reg_r err -71 [ 284.935104][ T5957] gspca_vc032x: I2c Bus Busy Wait 00 [ 284.943444][ T5957] gspca_vc032x: I2c Bus Busy Wait 00 [ 284.949958][ T909] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 284.957895][ T5957] gspca_vc032x: I2c Bus Busy Wait 00 [ 284.970556][ T5957] gspca_vc032x: I2c Bus Busy Wait 00 [ 284.982035][ T5957] gspca_vc032x: I2c Bus Busy Wait 00 [ 284.989623][ T5957] gspca_vc032x: I2c Bus Busy Wait 00 [ 285.000100][ T5957] gspca_vc032x: I2c Bus Busy Wait 00 [ 285.005621][ T5957] gspca_vc032x: I2c Bus Busy Wait 00 [ 285.015412][ T5957] gspca_vc032x: I2c Bus Busy Wait 00 [ 285.025756][ T5957] gspca_vc032x: I2c Bus Busy Wait 00 [ 285.032017][ T5957] gspca_vc032x: I2c Bus Busy Wait 00 [ 285.038449][ T5957] gspca_vc032x: I2c Bus Busy Wait 00 [ 285.052191][ T5957] gspca_vc032x: I2c Bus Busy Wait 00 [ 285.057544][ T5957] gspca_vc032x: I2c Bus Busy Wait 00 [ 285.063673][ T5957] gspca_vc032x: I2c Bus Busy Wait 00 [ 285.069001][ T5957] gspca_vc032x: I2c Bus Busy Wait 00 [ 285.083166][ T5957] gspca_vc032x: I2c Bus Busy Wait 00 [ 285.089240][ T5957] gspca_vc032x: I2c Bus Busy Wait 00 [ 285.090793][ T909] usb 7-1: device descriptor read/64, error -71 [ 285.100856][ T5957] gspca_vc032x: Unknown sensor... [ 285.100952][ T5957] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 285.136229][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 285.146283][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 285.155524][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 285.164928][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 285.176568][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 285.185727][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 285.191842][ T5957] usb 5-1: USB disconnect, device number 53 [ 285.233843][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 285.242990][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 285.252202][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 285.262172][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 285.271300][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 285.280388][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 285.292801][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 285.301928][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 285.311047][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 285.321747][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 285.362526][ T24] usb 6-1: USB disconnect, device number 45 [ 285.421545][ T909] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 285.580661][ T909] usb 7-1: device descriptor read/64, error -71 [ 285.720378][ T909] usb usb7-port1: attempt power cycle [ 286.039977][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 286.060156][ T909] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 286.093796][ T909] usb 7-1: device descriptor read/8, error -71 [ 286.189942][ T9] usb 8-1: device descriptor read/64, error -71 [ 286.280594][ T8264] usb 6-1: new low-speed USB device number 46 using dummy_hcd [ 286.340048][ T909] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 286.361240][ T909] usb 7-1: device descriptor read/8, error -71 [ 286.389927][ T5913] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 286.431903][ T8264] usb 6-1: config 9 has an invalid interface number: 1 but max is 0 [ 286.434490][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 286.442192][ T8264] usb 6-1: config 9 has no interface number 0 [ 286.454302][ T8264] usb 6-1: config 9 interface 1 has no altsetting 0 [ 286.465760][ T8264] usb 6-1: string descriptor 0 read error: -22 [ 286.472834][ T8264] usb 6-1: New USB device found, idVendor=2040, idProduct=b140, bcdDevice=75.36 [ 286.482523][ T909] usb usb7-port1: unable to enumerate USB device [ 286.489540][ T8264] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.506598][ T8264] cx231xx 6-1:9.1: New device @ 1.5 Mbps (2040:b140) with 1 interfaces [ 286.515211][ T8264] cx231xx 6-1:9.1: Not found matching IAD interface [ 286.555873][ T5913] usb 5-1: config 209 has an invalid descriptor of length 24, skipping remainder of the config [ 286.566511][ T5913] usb 5-1: config 209 has 0 interfaces, different from the descriptor's value: 1 [ 286.578279][ T9] usb 8-1: device descriptor read/64, error -71 [ 286.586864][ T5913] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 286.598402][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.606585][ T5913] usb 5-1: Product: syz [ 286.610895][ T5913] usb 5-1: Manufacturer: syz [ 286.615543][ T5913] usb 5-1: SerialNumber: syz [ 286.702025][ T9] usb usb8-port1: attempt power cycle [ 286.709652][ T9159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.714501][ T30] audit: type=1107 audit(1758009081.005:22): pid=9158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='óÈì®7šÐÅy…Sˆî3îŠÇNH'VŸ– ¥' [ 286.718649][ T9159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.763074][ T9159] kvm: user requested TSC rate below hardware speed [ 286.826818][ T5957] usb 6-1: USB disconnect, device number 46 [ 286.848811][ T5913] usb 5-1: USB disconnect, device number 54 [ 287.050184][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 287.077398][ T9] usb 8-1: device descriptor read/8, error -71 [ 287.319984][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 287.349952][ T9] usb 8-1: device descriptor read/8, error -71 [ 287.447991][ T9170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.458651][ T9170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.472686][ T9] usb usb8-port1: unable to enumerate USB device [ 287.675750][ T909] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 287.684975][ T8264] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 287.840001][ T8264] usb 5-1: Using ep0 maxpacket: 32 [ 287.849138][ T909] usb 6-1: unable to get BOS descriptor or descriptor too short [ 287.860545][ T8264] usb 5-1: config 0 interface 0 has no altsetting 0 [ 287.867677][ T909] usb 6-1: not running at top speed; connect to a high speed hub [ 287.878304][ T909] usb 6-1: config 129 has an invalid interface number: 28 but max is 0 [ 287.887049][ T909] usb 6-1: config 129 has no interface number 0 [ 287.894020][ T8264] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 287.903410][ T909] usb 6-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 287.915491][ T8264] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.923851][ T909] usb 6-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64 [ 287.935426][ T8264] usb 5-1: Product: syz [ 287.939766][ T8264] usb 5-1: Manufacturer: syz [ 287.944477][ T8264] usb 5-1: SerialNumber: syz [ 287.950354][ T909] usb 6-1: config 129 interface 28 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 287.967556][ T8264] usb 5-1: config 0 descriptor?? [ 287.978623][ T909] usb 6-1: config 129 interface 28 has no altsetting 0 [ 287.997495][ T909] usb 6-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 288.006708][ T909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.015370][ T909] usb 6-1: Product: syz [ 288.019657][ T909] usb 6-1: Manufacturer: syz [ 288.024477][ T909] usb 6-1: SerialNumber: syz [ 288.041794][ T9167] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 288.268230][ T909] etas_es58x 6-1:129.28: Starting syz syz (Serial Number syz) [ 288.298665][ T909] etas_es58x 6-1:129.28: could not retrieve the product info string [ 288.391376][ T909] usb 6-1: USB disconnect, device number 47 [ 288.409475][ T8264] gs_usb 5-1:0.0: Configuring for 119 interfaces [ 288.420884][ T909] etas_es58x 6-1:129.28: Disconnecting syz syz [ 288.428013][ T8264] gs_usb 5-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 288.440383][ T8264] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 288.660007][ T9] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 288.820103][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 288.834855][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 288.861445][ T9] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 288.882471][ T9194] block nbd5: Unsupported socket: should be TCP or UNIX. [ 288.886581][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.924075][ T9194] syzkaller1: entered promiscuous mode [ 288.934467][ T9194] syzkaller1: entered allmulticast mode [ 288.941715][ T9] usb 7-1: config 0 descriptor?? [ 289.183990][ T9192] Device name cannot be null; rc = [-22] [ 289.210783][ T9] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 289.509998][ T9] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 289.613906][ T5862] usb 7-1: USB disconnect, device number 29 [ 289.670418][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 289.686819][ T9] usb 6-1: config 5 has an invalid interface number: 157 but max is 0 [ 289.699457][ T9] usb 6-1: config 5 has no interface number 0 [ 289.706561][ T9] usb 6-1: config 5 interface 157 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 289.727360][ T9] usb 6-1: config 5 interface 157 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 289.739503][ T9] usb 6-1: config 5 interface 157 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 1023 [ 289.750806][ T9] usb 6-1: config 5 interface 157 has no altsetting 0 [ 289.761476][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice=84.32 [ 289.770850][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.779040][ T9] usb 6-1: Product: syz [ 289.784273][ T9] usb 6-1: Manufacturer: syz [ 289.789682][ T9] usb 6-1: SerialNumber: syz [ 289.803368][ T9204] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 289.818169][ T9204] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 290.231650][ T9] usb 6-1: USB disconnect, device number 48 [ 290.291595][ T7241] udevd[7241]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:5.157/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 290.717353][ T5957] usb 5-1: USB disconnect, device number 55 [ 290.902009][ T9223] input: syz1 as /devices/virtual/input/input31 [ 290.932537][ T5862] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 290.963182][ T9223] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 291.279965][ T9230] vxcan1: entered allmulticast mode [ 291.297196][ T5942] vxcan1 speed is unknown, defaulting to 1000 [ 291.298806][ T5862] usb 7-1: Using ep0 maxpacket: 8 [ 291.324357][ T9229] netlink: 40 bytes leftover after parsing attributes in process `syz.5.817'. [ 291.328019][ T5862] usb 7-1: config 0 has an invalid interface number: 76 but max is 0 [ 291.335544][ T5942] syz2: Port: 1 Link DOWN [ 291.365294][ T5862] usb 7-1: config 0 has no interface number 0 [ 291.375459][ T5862] usb 7-1: config 0 interface 76 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 291.405342][ T5942] vxcan1 speed is unknown, defaulting to 1000 [ 291.409669][ T5862] usb 7-1: New USB device found, idVendor=1234, idProduct=0002, bcdDevice=b8.5e [ 291.425411][ T5862] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.435240][ T5862] usb 7-1: Product: syz [ 291.445340][ T5862] usb 7-1: Manufacturer: syz [ 291.455846][ T5862] usb 7-1: SerialNumber: syz [ 291.481102][ T5862] usb 7-1: config 0 descriptor?? [ 291.610955][ T8264] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 291.699941][ T5942] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 291.708165][ T5862] usb 7-1: USB disconnect, device number 30 [ 291.750189][ T909] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 291.770620][ T8264] usb 6-1: Using ep0 maxpacket: 8 [ 291.777108][ T8264] usb 6-1: config 0 has an invalid interface number: 78 but max is 0 [ 291.785370][ T8264] usb 6-1: config 0 has no interface number 0 [ 291.793935][ T8264] usb 6-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=f0.21 [ 291.803330][ T8264] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.811623][ T8264] usb 6-1: Product: syz [ 291.815803][ T8264] usb 6-1: Manufacturer: syz [ 291.820682][ T8264] usb 6-1: SerialNumber: syz [ 291.827669][ T8264] usb 6-1: config 0 descriptor?? [ 291.852747][ T5942] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 291.861507][ T5942] usb 5-1: config 0 has no interface number 0 [ 291.869449][ T5942] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 291.878754][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.887354][ T5942] usb 5-1: Product: syz [ 291.893764][ T5942] usb 5-1: Manufacturer: syz [ 291.898378][ T5942] usb 5-1: SerialNumber: syz [ 291.903084][ T909] usb 8-1: Using ep0 maxpacket: 16 [ 291.911645][ T909] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 291.923959][ T5942] usb 5-1: config 0 descriptor?? [ 291.929267][ T909] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 291.944229][ T909] usb 8-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 291.955679][ T909] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.963923][ T909] usb 8-1: Product: syz [ 291.968279][ T909] usb 8-1: Manufacturer: syz [ 291.973006][ T909] usb 8-1: SerialNumber: syz [ 291.983560][ T909] usb 8-1: config 0 descriptor?? [ 291.992793][ T909] kobil_sct 8-1:0.0: KOBIL USB smart card terminal converter detected [ 292.005208][ T909] usb 8-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 292.045149][ T8264] usbhid 6-1:0.78: couldn't find an input interrupt endpoint [ 292.060907][ T8264] usb 6-1: USB disconnect, device number 49 [ 292.197947][ T5862] usb 8-1: USB disconnect, device number 6 [ 292.216122][ T5862] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 292.234462][ T5862] kobil_sct 8-1:0.0: device disconnected [ 292.426115][ T5942] usb 5-1: Firmware version (0.0) predates our first public release. [ 292.434487][ T5942] usb 5-1: Please update to version 0.2 or newer [ 292.660177][ T8264] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 292.788599][ T30] audit: type=1326 audit(1758009087.085:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.7.823" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d65f8eba9 code=0x0 [ 292.860239][ T8264] usb 7-1: Using ep0 maxpacket: 32 [ 292.885056][ T8264] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 85, changing to 10 [ 292.911971][ T9249] program syz.5.824 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.923717][ T8264] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58847, setting to 1024 [ 292.938723][ T8264] usb 7-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 292.953094][ T8264] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.974264][ T8264] usb 7-1: config 0 descriptor?? [ 292.995568][ T9239] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 293.436495][ T8264] aquacomputer_d5next 0003:0C70:F0B6.001B: unknown main item tag 0x2 [ 293.448041][ T8264] aquacomputer_d5next 0003:0C70:F0B6.001B: hidraw0: USB HID vff.fc Device [HID 0c70:f0b6] on usb-dummy_hcd.6-1/input0 [ 293.632680][ T8264] usb 7-1: USB disconnect, device number 31 [ 293.795903][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 294.259983][ T5942] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 294.370053][ T5862] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 294.407349][ T9283] syzkaller1: entered promiscuous mode [ 294.416362][ T9283] syzkaller1: entered allmulticast mode [ 294.430855][ T5942] usb 8-1: Using ep0 maxpacket: 16 [ 294.443625][ T5942] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.474605][ T5942] usb 8-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.488457][ T5942] usb 8-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.499402][ T5942] usb 8-1: config 0 interface 0 has no altsetting 0 [ 294.512227][ T5942] usb 8-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 294.526362][ T5913] usb 5-1: USB disconnect, device number 56 [ 294.528179][ T5942] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.545537][ T5862] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 294.570929][ T5862] usb 6-1: config 5 interface 0 has no altsetting 1 [ 294.584061][ T5942] usb 8-1: config 0 descriptor?? [ 294.611175][ T5862] usb 6-1: New USB device found, idVendor=2013, idProduct=8461, bcdDevice=45.6b [ 294.634669][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.659118][ T5862] usb 6-1: Product: syz [ 294.675863][ T5862] usb 6-1: Manufacturer: syz [ 294.690993][ T5862] usb 6-1: SerialNumber: syz [ 294.779942][ T9] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 294.939877][ T9] usb 7-1: device descriptor read/64, error -71 [ 294.984441][ T5862] usb 6-1: USB disconnect, device number 50 [ 295.087723][ T5942] apple 0003:05AC:0274.001C: unknown main item tag 0x0 [ 295.140322][ T5942] apple 0003:05AC:0274.001C: unknown main item tag 0x0 [ 295.159059][ T5942] apple 0003:05AC:0274.001C: unknown main item tag 0x0 [ 295.175701][ T5942] apple 0003:05AC:0274.001C: unknown main item tag 0x0 [ 295.179912][ T9] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 295.183598][ T5942] apple 0003:05AC:0274.001C: unknown main item tag 0x0 [ 295.198938][ T5942] apple 0003:05AC:0274.001C: unknown main item tag 0x0 [ 295.206038][ T5942] apple 0003:05AC:0274.001C: unknown main item tag 0x0 [ 295.229480][ T5942] apple 0003:05AC:0274.001C: hidraw0: USB HID v0.00 Device [HID 05ac:0274] on usb-dummy_hcd.7-1/input0 [ 295.323086][ T9] usb 7-1: device descriptor read/64, error -71 [ 295.422762][ T5862] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 295.450298][ T9] usb usb7-port1: attempt power cycle [ 295.588107][ T5862] usb 6-1: unable to get BOS descriptor or descriptor too short [ 295.598595][ T5862] usb 6-1: not running at top speed; connect to a high speed hub [ 295.617404][ T5862] usb 6-1: config 11 has an invalid interface number: 229 but max is 0 [ 295.626400][ T5862] usb 6-1: config 11 has no interface number 0 [ 295.640318][ T5862] usb 6-1: config 11 interface 229 has no altsetting 0 [ 295.653024][ T5862] usb 6-1: New USB device found, idVendor=0582, idProduct=be1e, bcdDevice=cf.ce [ 295.665088][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.674969][ T5862] usb 6-1: Product: syz [ 295.679247][ T5862] usb 6-1: Manufacturer: syz [ 295.687939][ T5862] usb 6-1: SerialNumber: syz [ 295.791062][ T9] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 295.841043][ T9] usb 7-1: device descriptor read/8, error -71 [ 295.992643][ T5862] usb 6-1: USB disconnect, device number 51 [ 296.037431][ T7241] udevd[7241]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:11.229/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 296.090139][ T5913] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 296.098105][ T9] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 296.121596][ T9] usb 7-1: device descriptor read/8, error -71 [ 296.233946][ T9] usb usb7-port1: unable to enumerate USB device [ 296.268322][ T5913] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 296.286074][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.294743][ T5913] usb 5-1: Product: syz [ 296.298944][ T5913] usb 5-1: Manufacturer: syz [ 296.308025][ T5913] usb 5-1: SerialNumber: syz [ 296.317530][ T5913] usb 5-1: config 0 descriptor?? [ 296.554266][ T5913] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 297.115451][ T5957] usb 8-1: USB disconnect, device number 7 [ 297.550997][ T5957] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 297.732563][ T5957] usb 8-1: Using ep0 maxpacket: 8 [ 297.783057][ T5957] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 297.810067][ T5957] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 297.834104][ T5957] usb 8-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 297.846572][ T5957] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 297.858127][ T5957] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.018780][ T9384] netlink: 12 bytes leftover after parsing attributes in process `syz.6.846'. [ 298.032114][ T5913] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 298.053842][ T5913] usb 5-1: USB disconnect, device number 57 [ 298.160094][ T909] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 298.243596][ T9384] netlink: 12 bytes leftover after parsing attributes in process `syz.6.846'. [ 298.254244][ T9384] netlink: 68 bytes leftover after parsing attributes in process `syz.6.846'. [ 298.320182][ T909] usb 6-1: Using ep0 maxpacket: 8 [ 298.327583][ T909] usb 6-1: unable to get BOS descriptor or descriptor too short [ 298.338366][ T909] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 298.347497][ T909] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 298.355707][ T909] usb 6-1: Manufacturer: syz [ 298.360545][ T909] usb 6-1: SerialNumber: syz [ 298.499923][ T5942] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 298.583448][ T9376] netlink: 'syz.5.844': attribute type 2 has an invalid length. [ 298.586009][ T9387] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 298.625177][ T9376] netlink: 132 bytes leftover after parsing attributes in process `syz.5.844'. [ 298.637094][ T9380] netlink: 4 bytes leftover after parsing attributes in process `syz.5.844'. [ 298.637106][ T9377] netlink: 4 bytes leftover after parsing attributes in process `syz.5.844'. [ 298.687917][ T5942] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 298.699094][ T5942] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 298.733060][ T5942] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 255, setting to 64 [ 298.755245][ T9377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.764534][ T5942] usb 7-1: config 0 interface 0 has no altsetting 0 [ 298.783886][ T5942] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 298.786979][ T9377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.801194][ T5942] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.838456][ T5942] usb 7-1: Product: syz [ 298.860987][ T5942] usb 7-1: Manufacturer: syz [ 298.865676][ T5942] usb 7-1: SerialNumber: syz [ 298.907007][ T5942] usb 7-1: config 0 descriptor?? [ 298.952137][ T9384] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 299.182190][ T9384] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 299.235606][ T5942] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input32 [ 299.415876][ T5942] usb 7-1: USB disconnect, device number 36 [ 299.502097][ T5913] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 299.672153][ T5913] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 299.680827][ T5913] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 299.690095][ T5913] usb 5-1: config 150 has no interface number 0 [ 299.696491][ T5913] usb 5-1: config 150 interface 204 has no altsetting 0 [ 299.711857][ T5913] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 299.721215][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.729247][ T5913] usb 5-1: Product: syz [ 299.738693][ T5913] usb 5-1: Manufacturer: syz [ 299.746292][ T5913] usb 5-1: SerialNumber: syz [ 299.974317][ T5913] xr_serial 5-1:150.204: skipping garbage [ 299.989455][ T5913] xr_serial 5-1:150.204: xr_serial converter detected [ 300.272189][ T5862] usb 8-1: USB disconnect, device number 8 [ 300.427822][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.7.853'. [ 300.533679][ T5913] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 300.540273][ T5913] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 300.580248][ T5913] usb 5-1: USB disconnect, device number 58 [ 300.605146][ T5913] xr_serial 5-1:150.204: device disconnected [ 300.755289][ T9438] netlink: 'syz.6.855': attribute type 6 has an invalid length. [ 300.765320][ T9376] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 300.774077][ T9438] overlayfs: failed to resolve './file0': -2 [ 300.780515][ T5862] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 300.789046][ T9376] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 300.932194][ T9376] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 300.939011][ T9376] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 300.950182][ T5862] usb 8-1: Using ep0 maxpacket: 8 [ 300.961168][ T5862] usb 8-1: unable to get BOS descriptor or descriptor too short [ 300.998681][ T5862] usb 8-1: config 7 has an invalid interface number: 253 but max is 0 [ 301.053811][ T5862] usb 8-1: config 7 has no interface number 0 [ 301.082294][ T5862] usb 8-1: config 7 interface 253 has no altsetting 0 [ 301.131687][ T5862] usb 8-1: New USB device found, idVendor=0bfd, idProduct=010e, bcdDevice=bd.04 [ 301.198072][ T5862] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.219887][ T9376] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 301.225872][ T9376] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 301.251622][ T5862] usb 8-1: Product: syz [ 301.263951][ T5862] usb 8-1: Manufacturer: syz [ 301.275905][ T5862] usb 8-1: SerialNumber: syz [ 301.291680][ T9453] netlink: 'syz.6.857': attribute type 1 has an invalid length. [ 301.299460][ T9453] netlink: 4 bytes leftover after parsing attributes in process `syz.6.857'. [ 301.520356][ T9376] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 301.527948][ T9376] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 301.539505][ T5913] IPVS: starting estimator thread 0... [ 301.635108][ T5862] kvaser_usb 8-1:7.253: error -ENODEV: Cannot get usb endpoint(s) [ 301.650977][ T9464] IPVS: using max 25 ests per chain, 60000 per kthread [ 301.676833][ T5862] usb 8-1: USB disconnect, device number 9 [ 301.739906][ T984] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 301.773294][ T9376] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 301.779675][ T9376] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 301.904720][ T909] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 301.926246][ T984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.929635][ T909] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 301.959799][ T909] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 301.967039][ T909] usb 6-1: media controller created [ 301.980049][ T984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.010000][ T984] usb 5-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 302.019108][ T984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.028936][ T909] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 302.052464][ T984] usb 5-1: config 0 descriptor?? [ 302.120984][ T5942] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 302.138831][ T909] zl10353_read_register: readreg error (reg=127, ret==0) [ 302.313873][ T909] usb 6-1: USB disconnect, device number 52 [ 302.323913][ T5942] usb 7-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 302.347066][ T5942] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 302.391154][ T5942] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.405413][ T9480] netlink: 'syz.7.862': attribute type 10 has an invalid length. [ 302.446670][ T5942] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.463117][ T5942] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 302.476873][ T5942] usb 7-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 302.482858][ T9484] pimreg: entered allmulticast mode [ 302.486757][ T5942] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.504201][ T984] logitech 0003:046D:C294.001D: unknown main item tag 0x0 [ 302.528432][ T9484] pimreg: left allmulticast mode [ 302.537538][ T5942] usb 7-1: config 0 descriptor?? [ 302.538342][ T984] logitech 0003:046D:C294.001D: unknown main item tag 0x0 [ 302.610726][ T984] logitech 0003:046D:C294.001D: unknown main item tag 0x0 [ 302.635956][ T9486] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 302.658552][ T984] logitech 0003:046D:C294.001D: unknown main item tag 0x0 [ 302.659555][ T9486] overlayfs: failed to set xattr on upper [ 302.685536][ T984] logitech 0003:046D:C294.001D: unknown main item tag 0x0 [ 302.711861][ T984] logitech 0003:046D:C294.001D: unknown main item tag 0x0 [ 302.727820][ T984] logitech 0003:046D:C294.001D: unknown main item tag 0x0 [ 302.737720][ T9486] overlayfs: ...falling back to redirect_dir=nofollow. [ 302.756737][ T984] logitech 0003:046D:C294.001D: hidraw0: USB HID v0.00 Device [HID 046d:c294] on usb-dummy_hcd.4-1/input0 [ 302.788559][ T984] logitech 0003:046D:C294.001D: no inputs found [ 302.808557][ T9486] overlayfs: ...falling back to metacopy=off. [ 302.823679][ T9486] overlayfs: ...falling back to index=off. [ 302.835650][ T9486] overlayfs: ...falling back to uuid=null. [ 302.840622][ T984] usb 5-1: USB disconnect, device number 59 [ 302.960329][ T5862] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 302.964942][ T9492] fido_id[9492]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 303.056568][ T5942] input: HID 28bd:0909 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:28BD:0909.001E/input/input33 [ 303.135343][ T5862] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.165654][ T5862] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.170714][ T5942] uclogic 0003:28BD:0909.001E: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.6-1/input0 [ 303.232351][ T5862] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 303.279837][ T5862] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.283153][ T5942] usb 7-1: USB disconnect, device number 37 [ 303.338060][ T5862] usb 8-1: config 0 descriptor?? [ 303.472276][ T9500] fido_id[9500]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 303.520475][ T5913] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 303.703507][ T5913] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 303.718603][ T5913] usb 6-1: config 1 has no interface number 0 [ 303.726442][ T5913] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 303.744039][ T5913] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 32 [ 303.776438][ T5913] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 303.779890][ T909] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 303.787025][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.811814][ T5913] usb 6-1: Product: syz [ 303.816307][ T5913] usb 6-1: Manufacturer: syz [ 303.826962][ T5913] usb 6-1: SerialNumber: syz [ 303.838603][ T9499] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 303.859525][ T9499] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 303.884046][ T5913] usb 6-1: Error in usbnet_get_endpoints (-22) [ 303.951788][ T909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.969640][ T909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.986329][ T909] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 304.006117][ T909] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 304.015829][ T909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.032983][ T909] usb 5-1: config 0 descriptor?? [ 304.150007][ T5942] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 304.299991][ T5942] usb 7-1: device descriptor read/64, error -71 [ 304.301302][ T5862] usbhid 8-1:0.0: can't add hid device: -71 [ 304.329951][ T5862] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 304.363188][ T5862] usb 8-1: USB disconnect, device number 10 [ 304.473462][ T909] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 304.510891][ T31] INFO: task syz.0.305:7031 blocked for more than 143 seconds. [ 304.550704][ T31] Not tainted syzkaller #0 [ 304.555740][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 304.579917][ T5942] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 304.606142][ T31] task:syz.0.305 state:D stack:28264 pid:7031 tgid:7030 ppid:5861 task_flags:0x400140 flags:0x00004004 [ 304.618800][ T31] Call Trace: [ 304.622895][ T31] [ 304.626766][ T31] __schedule+0x1798/0x4cc0 [ 304.634323][ T31] ? vfs_open+0x3b/0x340 [ 304.639008][ T31] ? __lock_acquire+0xab9/0xd20 [ 304.645080][ T31] ? __lock_acquire+0xab9/0xd20 [ 304.664598][ T31] ? __pfx___schedule+0x10/0x10 [ 304.676413][ T8264] usb 5-1: USB disconnect, device number 60 [ 304.692242][ T31] ? schedule+0x91/0x360 [ 304.697085][ T31] schedule+0x165/0x360 [ 304.702466][ T31] schedule_preempt_disabled+0x13/0x30 [ 304.708743][ T31] __mutex_lock+0x7e6/0x1350 [ 304.719948][ T5942] usb 7-1: device descriptor read/64, error -71 [ 304.743702][ T31] ? __mutex_lock+0x5bb/0x1350 [ 304.748548][ T31] ? bdev_open+0xe0/0xd30 [ 304.774079][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 304.779183][ T31] ? wait_on_inode+0xc0/0x230 [ 304.786516][ T31] ? disk_block_events+0xab/0x120 [ 304.792025][ T31] ? bdev_open+0xaf/0xd30 [ 304.796578][ T31] bdev_open+0xe0/0xd30 [ 304.801729][ T31] blkdev_open+0x457/0x600 [ 304.806208][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 304.811994][ T31] do_dentry_open+0x953/0x13f0 [ 304.816835][ T31] vfs_open+0x3b/0x340 [ 304.830079][ T31] ? path_openat+0x2ecd/0x3830 [ 304.841001][ T31] path_openat+0x2ee5/0x3830 [ 304.849914][ T31] ? __pfx_path_openat+0x10/0x10 [ 304.854979][ T31] do_filp_open+0x1fa/0x410 [ 304.870421][ T5942] usb usb7-port1: attempt power cycle [ 304.876122][ T31] ? __lock_acquire+0xab9/0xd20 [ 304.890869][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 304.896183][ T31] ? _raw_spin_unlock+0x28/0x50 [ 304.909203][ T31] ? alloc_fd+0x64c/0x6c0 [ 304.915304][ T31] do_sys_openat2+0x121/0x1c0 [ 304.921288][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 304.926540][ T31] ? exc_page_fault+0x82/0x100 [ 304.932738][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 304.938105][ T31] __x64_sys_openat+0x138/0x170 [ 304.943713][ T31] do_syscall_64+0xfa/0xfa0 [ 304.948432][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.954573][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.962284][ T31] ? clear_bhb_loop+0x60/0xb0 [ 304.967188][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.973316][ T909] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 304.981858][ T31] RIP: 0033:0x7f34ff38d510 [ 304.986434][ T31] RSP: 002b:00007f35002b5b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 304.999264][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f34ff38d510 [ 305.008874][ T31] RDX: 0000000000000000 RSI: 00007f35002b5c10 RDI: 00000000ffffff9c [ 305.019392][ T31] RBP: 00007f35002b5c10 R08: 0000000000000000 R09: 002364626e2f7665 [ 305.028039][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 305.036488][ T31] R13: 00007f34ff5d6038 R14: 00007f34ff5d5fa0 R15: 00007fff2118b618 [ 305.045069][ T31] [ 305.048381][ T31] [ 305.048381][ T31] Showing all locks held in the system: [ 305.057389][ T31] 1 lock held by khungtaskd/31: [ 305.090006][ T31] #0: ffffffff8e53c820 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 305.104910][ T31] 6 locks held by kworker/1:2/909: [ 305.110414][ T31] #0: ffff888021696d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 305.130305][ T31] #1: ffffc90003ad7ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 305.142844][ T31] #2: ffff888144fca198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 305.153066][ T31] #3: ffff888028295518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 305.174252][ T31] #4: ffff8880b8724008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 305.184597][ T909] usb 8-1: config 8 has an invalid interface number: 79 but max is 0 [ 305.198702][ T909] usb 8-1: config 8 has no interface number 0 [ 305.205055][ T31] #5: ffff8880b87284f8 (&tmc->lock){..-.}-{2:2}, at: tmigr_handle_remote+0x12d1/0x13d0 [ 305.219666][ T909] usb 8-1: config 8 interface 79 altsetting 9 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 305.231175][ T5942] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 305.241570][ T31] 2 locks held by kworker/u8:8/3524: [ 305.249336][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 305.270339][ T5942] usb 7-1: device descriptor read/8, error -71 [ 305.276596][ T909] usb 8-1: config 8 interface 79 has no altsetting 0 [ 305.285239][ T31] #1: ffff8880b8624008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 305.301378][ T909] usb 8-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=bc.04 [ 305.318371][ T31] 2 locks held by getty/5629: [ 305.323475][ T909] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.331617][ T31] #0: ffff88814caca0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 305.346648][ T909] usb 8-1: Product: syz [ 305.351475][ T909] usb 8-1: Manufacturer: syz [ 305.356239][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 305.366770][ T909] usb 8-1: SerialNumber: syz [ 305.374077][ T31] 1 lock held by udevd/5873: [ 305.380765][ T9531] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 305.390907][ T31] #0: ffff888143b82358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 305.401970][ T31] 6 locks held by kworker/1:4/5942: [ 305.407591][ T31] #0: ffff888021696d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 305.419377][ T31] #1: ffffc900046ffba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 305.431545][ T31] #2: ffff888028233198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 305.442284][ T31] #3: ffff888028236518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 305.452797][ T31] #4: ffff888140f13168 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 305.462932][ T31] #5: ffffffff8f1fb3b0 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x163/0x1750 [ 305.474211][ T31] 1 lock held by syz.0.305/7031: [ 305.479389][ T31] #0: ffff888143b82358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 305.489034][ T31] [ 305.494943][ T31] ============================================= [ 305.494943][ T31] [ 305.503568][ T31] NMI backtrace for cpu 0 [ 305.503589][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 305.503611][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 305.503622][ T31] Call Trace: [ 305.503629][ T31] [ 305.503637][ T31] dump_stack_lvl+0x189/0x250 [ 305.503664][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.503684][ T31] ? __pfx__printk+0x10/0x10 [ 305.503727][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 305.503761][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 305.503794][ T31] ? __pfx__printk+0x10/0x10 [ 305.503826][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 305.503850][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 305.503892][ T31] watchdog+0xf60/0xfa0 [ 305.503919][ T31] ? watchdog+0x1e2/0xfa0 [ 305.503945][ T31] kthread+0x711/0x8a0 [ 305.503987][ T31] ? __pfx_watchdog+0x10/0x10 [ 305.504016][ T31] ? __pfx_kthread+0x10/0x10 [ 305.504047][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 305.504066][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.504088][ T31] ? __pfx_kthread+0x10/0x10 [ 305.504117][ T31] ret_from_fork+0x4bc/0x870 [ 305.504144][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 305.504175][ T31] ? __switch_to_asm+0x39/0x70 [ 305.504196][ T31] ? __switch_to_asm+0x33/0x70 [ 305.504214][ T31] ? __pfx_kthread+0x10/0x10 [ 305.504243][ T31] ret_from_fork_asm+0x1a/0x30 [ 305.504282][ T31] [ 305.504293][ T31] Sending NMI from CPU 0 to CPUs 1: [ 305.521129][ T5942] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 305.529938][ C1] NMI backtrace for cpu 1 [ 305.529958][ C1] CPU: 1 UID: 0 PID: 5942 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 305.529977][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 305.529988][ C1] Workqueue: usb_hub_wq hub_event [ 305.530015][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 305.530037][ C1] Code: e8 9e 36 64 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 8f b8 c8 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 5a 95 32 06 cc 44 89 f9 80 e1 07 [ 305.530051][ C1] RSP: 0018:ffffc900046fedd0 EFLAGS: 00000002 [ 305.530065][ C1] RAX: 1ffffffff344c600 RBX: 00000000000003fd RCX: 0000000000000000 [ 305.530076][ C1] RDX: 00000000000003fd RSI: 0000000000040bc4 RDI: 0000000000040bc5 [ 305.530087][ C1] RBP: ffffffff9a263530 R08: ffff888142b38237 R09: 1ffff11028567046 [ 305.530098][ C1] R10: dffffc0000000000 R11: ffffffff855bd480 R12: dffffc0000000000 [ 305.530110][ C1] R13: 0000000000000000 R14: ffffffff9a2632a0 R15: 0000000000000000 [ 305.530121][ C1] FS: 0000000000000000(0000) GS:ffff8881258a7000(0000) knlGS:0000000000000000 [ 305.530135][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 305.530146][ C1] CR2: 00007fff96f0cdd8 CR3: 0000000075782000 CR4: 00000000003526f0 [ 305.530162][ C1] DR0: ffffffffffffffff DR1: 0000000000000047 DR2: 0000000000000005 [ 305.530173][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 305.530183][ C1] Call Trace: [ 305.530190][ C1] [ 305.530198][ C1] wait_for_lsr+0x1a1/0x2f0 [ 305.530224][ C1] serial8250_console_write+0x134c/0x1ba0 [ 305.530248][ C1] ? __lock_acquire+0xab9/0xd20 [ 305.530275][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 305.530295][ C1] ? console_flush_all+0x13a/0xb10 [ 305.530317][ C1] ? console_flush_all+0x13a/0xb10 [ 305.530341][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 305.530364][ C1] ? console_flush_all+0x13a/0xb10 [ 305.530384][ C1] console_flush_all+0x6f3/0xb10 [ 305.530407][ C1] ? console_flush_all+0x13a/0xb10 [ 305.530430][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 305.530456][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 305.530472][ C1] console_unlock+0xbb/0x190 [ 305.530492][ C1] ? vprintk_emit+0x2ee/0x590 [ 305.530511][ C1] ? __pfx_console_unlock+0x10/0x10 [ 305.530530][ C1] ? vprintk_emit+0x280/0x590 [ 305.530549][ C1] ? vprintk_emit+0x495/0x590 [ 305.530568][ C1] ? vprintk_emit+0x2ee/0x590 [ 305.530585][ C1] ? vprintk_emit+0x2ee/0x590 [ 305.530605][ C1] vprintk_emit+0x4c5/0x590 [ 305.530625][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 305.530645][ C1] ? __pfx_snprintf+0x10/0x10 [ 305.530668][ C1] ? try_to_wake_up+0x7f5/0x12b0 [ 305.530695][ C1] dev_vprintk_emit+0x337/0x3f0 [ 305.530713][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 305.530732][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 305.530753][ C1] dev_printk_emit+0xe0/0x130 [ 305.530767][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 305.530790][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 305.530806][ C1] ? __up_read+0x280/0x680 [ 305.530828][ C1] ? __dev_printk+0x131/0x190 [ 305.530844][ C1] _dev_info+0x10a/0x160 [ 305.530861][ C1] ? __pfx__dev_info+0x10/0x10 [ 305.530884][ C1] hub_port_init+0x5cf/0x2800 [ 305.530913][ C1] hub_event+0x2532/0x4a20 [ 305.530953][ C1] ? __pfx_hub_event+0x10/0x10 [ 305.530974][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 305.530995][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 305.531011][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 305.531029][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 305.531047][ C1] process_scheduled_works+0xae1/0x17b0 [ 305.531077][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 305.531102][ C1] worker_thread+0x8a0/0xda0 [ 305.531122][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 305.531143][ C1] ? __kthread_parkme+0x7b/0x200 [ 305.531167][ C1] kthread+0x711/0x8a0 [ 305.531189][ C1] ? __pfx_worker_thread+0x10/0x10 [ 305.531207][ C1] ? __pfx_kthread+0x10/0x10 [ 305.531229][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 305.531245][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.531269][ C1] ? __pfx_kthread+0x10/0x10 [ 305.531290][ C1] ret_from_fork+0x4bc/0x870 [ 305.531310][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 305.531330][ C1] ? __switch_to_asm+0x39/0x70 [ 305.531346][ C1] ? __switch_to_asm+0x33/0x70 [ 305.531362][ C1] ? __pfx_kthread+0x10/0x10 [ 305.531384][ C1] ret_from_fork_asm+0x1a/0x30 [ 305.531407][ C1] [ 305.549801][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 305.549822][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 305.549844][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 305.549855][ T31] Call Trace: [ 305.549863][ T31] [ 305.549872][ T31] dump_stack_lvl+0x99/0x250 [ 305.549897][ T31] ? __asan_memcpy+0x40/0x70 [ 305.549918][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.549937][ T31] ? __pfx__printk+0x10/0x10 [ 305.549975][ T31] vpanic+0x237/0x6d0 [ 305.549997][ T31] ? __pfx_vpanic+0x10/0x10 [ 305.550027][ T31] ? preempt_schedule_common+0x83/0xd0 [ 305.550056][ T31] panic+0xb9/0xc0 [ 305.550078][ T31] ? __pfx_panic+0x10/0x10 [ 305.550100][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 305.550131][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 305.550161][ T31] watchdog+0xf9f/0xfa0 [ 305.550187][ T31] ? watchdog+0x1e2/0xfa0 [ 305.550212][ T31] kthread+0x711/0x8a0 [ 305.550242][ T31] ? __pfx_watchdog+0x10/0x10 [ 305.550261][ T31] ? __pfx_kthread+0x10/0x10 [ 305.550289][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 305.550309][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.550330][ T31] ? __pfx_kthread+0x10/0x10 [ 305.550357][ T31] ret_from_fork+0x4bc/0x870 [ 305.550381][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 305.550410][ T31] ? __switch_to_asm+0x39/0x70 [ 305.550429][ T31] ? __switch_to_asm+0x33/0x70 [ 305.550447][ T31] ? __pfx_kthread+0x10/0x10 [ 305.550474][ T31] ret_from_fork_asm+0x1a/0x30 [ 305.550511][ T31] [ 305.551414][ T31] Kernel Offset: disabled