last executing test programs: 22m20.476863463s ago: executing program 2 (id=881): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) (rerun: 32) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="1858b036410f017d0048b8dc4b13b61e0b813a0f23d80f21f835c00000a00f23f8660f2263c4c17c773666420f3a428ce80c00000000fa3e3e6767450f01cf6536460f01f8c422d1b7900000c0fe", 0x4e}], 0xaaaaaaaaaaaab65, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x118) (async, rerun: 32) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (rerun: 32) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x8c}}, 0x0) (rerun: 32) 22m20.130772264s ago: executing program 2 (id=886): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000000e02700000000000000000000000000002d00000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c00000000000000ac14142c000000000000000000000000000000000000560000000000fdffffff01000000ac141410000000000000000000000000000000003200000000000000fe800000000000000000000000000500023500000000000000000000feffffff00000000ff010000000000000000000000000001000000003c00000002000000ff0200000000000000000000000000010000000001030000000000000000000000000000ff020000000000000000000000000001000004d33c00000002000000ffffffff00000000000000000000000000000000000000000000000003000000000000000a010102000000000000000000000000000000003200000002"], 0x23c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}]}, @NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_FLAGS={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x40, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x14}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x1}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x80}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x400}]}]}, 0x40}}, 0x0) 22m20.028908454s ago: executing program 2 (id=887): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r2, 0x200) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x14) 22m19.934962765s ago: executing program 2 (id=888): mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60000, 0x0) unshare(0x22020600) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000140)=""/14) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r3, 0x0, 0x29, 0x0, &(0x7f0000695ffc)) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x14) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000180)=0x7, 0x4) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f0000000000)='f2fs\x00', 0x800401, &(0x7f0000000040)='usrquota') setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@mcast2, @in=@rand_addr=0x64010102, 0x4e22, 0x5, 0x4e24, 0x2, 0xd, 0x20, 0xa0, 0x89}, {0x9, 0x5, 0x8000000000000000, 0x3a, 0x8000000000000000, 0x2, 0x6, 0x1ff}, {0x6, 0x9, 0xfffffffeffffffff, 0x4}, 0x401, 0x6e6bb4, 0x1, 0x1, 0x1, 0x3}, {{@in=@private=0xa010101, 0x4d4, 0x32}, 0x2, @in=@local, 0x0, 0x5, 0x3, 0x7f, 0x9, 0x9, 0x8}}, 0xe8) 22m19.818256908s ago: executing program 2 (id=889): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f00000027c0)=""/4096, &(0x7f0000000100)=0x1000) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x840) write$nci(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="410306a0b9cdb6f89f09e5"], 0xb) mount(&(0x7f0000000900)=@sg0, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='ntfs3\x00', 0x60406, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0xc, 0x50, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x1, 0xff, 0x0, {0x7, 0x25, 0x1, 0x2, 0x1, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6, 0x3, 0x2, {0x7, 0x25, 0x1, 0x80, 0xd6, 0x7}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x8, &(0x7f0000000100)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$UI_END_FF_ERASE(r6, 0x400c55cb, &(0x7f0000000840)={0x10, 0x10001, 0x101}) fsetxattr$trusted_overlay_redirect(r6, &(0x7f00000009c0), &(0x7f0000000a00)='./file1\x00', 0x8, 0x1) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000013b80)=ANY=[@ANYBLOB="280000001b1401"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2145c99, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r8 = syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xc, 0x2, 0x8, 0x8, 0x6}, {0x9, 0x5, 0x7, 0x2, 0x400, 0x8, 0x6, 0x3}, {0x9, 0x5, 0x4, 0x3, 0x8, 0x6, 0x7f, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r8, &(0x7f00000002c0)={0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="4008c6000000c622913526230c97ef2aa51236550117ea7edd0b2e099b6f30458a1814e0b103f0572f333f2a2328ec67b03d7eabfd9af71bd617368464e74ddc62ba157255d51e4fc47a5dee74915e509c6576071c8b4b701e8f06380d75149485a72e64e3831ecd5d7136f570122d1d82e07c110cf147a4ef56e12ad4883acfa65a854f66947af70398db2b1a7011f174af45dca5dcf3c08bb5c83453dd9333bafe3a6f25a4385ae8c8659a2b313ccedc05cbc46f6b24eb293122b201c52a4dd0688aa5f02652fb2b636669"], &(0x7f0000000280)={0x0, 0x3, 0x33, @string={0x33, 0x3, "7b1611cc975259688e5249042ce1980e7e4c65749f019d2d526febe7114d5303bf1c2db7769a1fb30ee8330b01bb676a3e"}}}, &(0x7f0000000440)={0x1c, &(0x7f0000000300)={0x0, 0xf, 0x53, "ab582d5ce36fb5aeb7598f9bee1529e2e9c6c6456bb7ffb49f510fe884b3c44f4c8204f6bbffd1904bfa6d380da386e6fef0dcc4c1c37e8bf7efd50e7dd7a2429d4ccebfd12eb3eb9732881af23bef30d481f2"}, &(0x7f00000004c0)={0xa1, 0x1, 0x400, "f3470ad7b799ec3253f7084f8010ca79b8630d30a8113ecda195c35f81f7f730546219403398451d817c28fe96bc2659a48947b3739ee891540c36028fa28cadfd2a116979e8b43b281ff8cff38af85f5bf9ae390b9c9004ef06da60ef3ad057e06239c84c2d717013a0f660af58f91236845471737e3075be617d57a3341d7d76c18f0c62f5b9fcb239dd2a9b028545418918f347426092a659b1c3eb177bcb512c29ed4e905632fa62277cdcd77b5b8c5154085ee476d355f6a1a2749ff24e5239a3ef0d3f835ac3708c5f5f3d7d73ae7e247a84a7d8972a0c9cf4aefe0df19cbf252ba590c3b6648ab6f128cf8a7377f9b2f9f35eb64121d0fad6b89cbf69fe7ccc58ac26892b19d5e7b7480faecf45d15339e052091c78dd101c303214bbd0e8974c5acc3a2a3552d3420a7e91ef4b2b7a4fc5977f93fae4373e70eb9245a96904a4a1e82f47e1f172ac09ac2dd71e1cba17a2875dc8d0aec72734d70d162db96be52e7cafbe2271e65772fc2c17fbd0b91bf220b5ab3fbafb7bb015ec7409391d2f9c8dee41663310c3334810113e01775740b5d34d306c381899c1a7bd9f29517e8e73103d97711d212f0f03a4fd73de2bb378de269a850817a32fd3a7bff2ba7c1cc86865fbca71b7b3403644a8bbc8f538126c64f3d2eed8c5d3dd7e10dcd194656cb825eb2dccb9216574a8114fcd0e5fb0927f1ecfc9e11a28c1fc4635bb587f166cc7ed79fd57ba27526e20570c6847c24f6c14e09c2d22ff0e626f97e03cbe94175968fae106d83004a407ca55cf59fe522029252e9703cdfd1ce73b0088cd9c39c23047b3f60f9f9f7edddbf21e96ddd75f1c63e47f43ee74211f28f371b18eb9b1c0d8fd4838ff50c67a3be913f66c4a5054e5d0684e692c817a1511ecb3373e372868b89138d76f91fd51ed90cd851f434e9d35a065bff60d3b4f6af140f4f0fb6d283c2ba2922102b74e625d1a1f77004472d10d5cff67e307363b2a5824e9f2c791e6b76f9d420a2b13642dfa4d3d27c7782115ebd1bdac0638c72aebf20e1e9ed0fc89da4a191e0829cf19d7c6fe5e7f9df1b7d09c30c6d43a3d1b9fb5e28de1454ca6b996834d4d9b3e193df5e9c2be8e1b71f6ac76a5a7c4471aa7ca1c13dca040fb6b9f73bde1931164e3962c416505ef9004e621a0632cf6fa601db4b6abdf1656668e4074169a34f4e784dd5b922b1e6c93ce089dfba9339f452009f134031a2c8ff1bdbaf27262d4c4baaa318ed0f52e7a4cba20ae118743e0309780a22728dbe7e05978acf464d68333ca391b60a6297dca1d18fb01f58f78fdcd0134c0493f4c93971529f5660c799ebdc0a935507003b0a94fbb223391dac9dd99712aca4409881762b4c1512e4b0ed028acc30c97cc5c114b44484301bbe88ea45ad73b555efbe2fcad7e8f08dfbf403e8bd6e9964b8207b8"}, &(0x7f00000003c0)={0x21, 0x0, 0x4, "8ce80496"}}) 22m18.213947714s ago: executing program 2 (id=892): mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000280)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000120fec0000000000000080005007a010401a8001600200003400400ff00035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) mount(&(0x7f0000000000)=@sr0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='f2fs\x00', 0x0, &(0x7f00000001c0)='discard') mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000280)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000120fec0000000000000080005007a010401a8001600200003400400ff00035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) (async) mount(&(0x7f0000000000)=@sr0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='f2fs\x00', 0x0, &(0x7f00000001c0)='discard') (async) 22m1.926825875s ago: executing program 32 (id=892): mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000280)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000120fec0000000000000080005007a010401a8001600200003400400ff00035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) mount(&(0x7f0000000000)=@sr0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='f2fs\x00', 0x0, &(0x7f00000001c0)='discard') mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000280)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000120fec0000000000000080005007a010401a8001600200003400400ff00035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) (async) mount(&(0x7f0000000000)=@sr0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='f2fs\x00', 0x0, &(0x7f00000001c0)='discard') (async) 19m25.00876225s ago: executing program 0 (id=1672): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7ffffffff000, 0x3, &(0x7f0000fee000/0x2000)=nil) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x97, 0x8000000}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000002980)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast}}}, 0x22) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005, 0x6031, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r2, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r2, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r2}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r8, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r8, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r8, &(0x7f0000003740), 0x0, 0x12121, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000cb19481ed44b915db0e1115355b704a2cd9276fdf92a1c6ccca3559d4953dc996e8628a4cee46d7727f636c90be4c0ea99e7a43e2098d991288a8f842289ec751ab752beb196ae629b9991c0c26a57146241654ed78fd2c19bf5982942a00d1d5a8192f4", @ANYRES16=r7, @ANYBLOB="070600000000000000002d0000000c00050000000002000000000a0001007770616e3000000008002f0005000000"], 0x34}}, 0x4040000) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) syz_usb_connect(0x5, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000c4ca9a08e10634a3c72301020301090212000196fd00000939ff00004d96e705d19bec0c0a17b9c2dbc77e1f95485387f3dcada9b92013f7312271446427e2fa1e"], 0x0) 19m23.346335527s ago: executing program 0 (id=1678): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) getsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000080)=""/4096, &(0x7f0000001080)=0x1000) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000010c0)=@req={0x21, 0x61156555, 0x4, 0xfffffffb}, 0x10) (async) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) (async) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x30, r2, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x17, {0x3, 0x3, @l2={'ib', 0x3a, 'gre0\x00'}}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x400c040}, 0x20000000) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000012c0)={&(0x7f0000001240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0xc0c0c0c0}) (async) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000001480)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001440)={&(0x7f0000001340)={0x100, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfffd}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}]}, 0x100}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001500), r1) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x24, r4, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004001}, 0x1) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001640), r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x1c, r5, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x94}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x50) (async) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r6, 0xc0109428, &(0x7f0000001740)={0x2, 0xa1}) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000001780)=[@in6={0xa, 0x4e20, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, @in6={0xa, 0x4e20, 0x7, @private0, 0x4370}, @in6={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x29}}, @in6={0xa, 0x4e24, 0x1f2, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}], 0x70) (async) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000001800), 0x1, 0x0) (async) close_range(r1, r6, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x34, 0x0, 0x930, 0x70bd26, 0x64, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0xf7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x9840) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000001980)={0x2, 0x0, &(0x7f0000001940)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000001ac0)={&(0x7f00000019c0)=[0x0, 0x0, 0x0], &(0x7f0000001a00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001a40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001a80)=[0x0, 0x0], 0x3, 0x4, 0x4, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000001b40)={0x2, 0x0, &(0x7f0000001b00)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000001c80)={&(0x7f0000001b80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001bc0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001c00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x5, 0x4, 0xa}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000001dc0)={&(0x7f0000001cc0)=[0x0], &(0x7f0000001d00)=[0x0], &(0x7f0000001d40)=[0x0, 0x0], &(0x7f0000001d80)=[0x0, 0x0, 0x0], 0x1, 0x1, 0x2, 0x3}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000001e80)={0x2, 0x0, &(0x7f0000001e40)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000001f00)={&(0x7f0000001ec0)=[0x0, 0x0], 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000001f80)={&(0x7f0000001e00)=[r8, 0x0, r9, r10, r11, 0x0, r3, r12], 0x8, r13, r14, 0x9, 0xd84, 0x4, 0x101, {0x6, 0x160, 0x91c1, 0x6, 0x7a, 0x8, 0x7, 0x2, 0xfffc, 0x7, 0x64, 0x5, 0x3e7, 0x7, "d5c167641470b591d494a07669b3e00f837907eeafee48d5334bd4c9ab6860c5"}}) (async) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000020c0)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x38, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1b2e0000, 0x3e}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044050) 19m23.345532972s ago: executing program 0 (id=1679): syz_usb_connect(0x2, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000e24b420df2001006d970102030109025100010000100009047b000076a98700052406000105330002000d240f0101000000217c10000106241a40000005240100090524ab0f"], 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x17c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0x7c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x102}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xfffffdc1, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_MASK={0xbc, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x17c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 19m22.027570182s ago: executing program 0 (id=1683): socket$unix(0x1, 0x1, 0x0) (async) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x54, &(0x7f0000000040)=0x80, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) chdir(&(0x7f0000000100)='./file0/file0\x00') move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x3) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7cc6120000000008fc005090423000003000000"], 0x0) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7cc6120000000008fc005090423000003000000"], 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r3) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x1, 0x3, 0xfffffffe, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x6, 0x2}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000140), &(0x7f00000001c0), 0x2, 0x3) (async) fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000140), &(0x7f00000001c0), 0x2, 0x3) ioctl$TCSETS(r5, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x14, "3eb6d8200000000000000010000000040100"}) (async) ioctl$TCSETS(r5, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x14, "3eb6d8200000000000000010000000040100"}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000c40)={'wpan0\x00', 0x0}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x6bfa, 0x100, 0x5, 0x12}, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000ffdbdf251e00000008000300", @ANYRES32=r6, @ANYBLOB="1c002f800c00038008000100010000000b0002"], 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000002c0)={0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="201403000000ea81b18f5d6234ca42edc52ff92a9ff782eeda"], 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000002c0)={0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="201403000000ea81b18f5d6234ca42edc52ff92a9ff782eeda"], 0x0, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) 19m18.71689288s ago: executing program 0 (id=1692): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x14, r0, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000003100000e60b"], 0x20}], 0x1}, 0x0) 19m18.682453861s ago: executing program 0 (id=1693): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async, rerun: 64) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x600100, 0x0) (rerun: 64) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000040)=0x2) (async) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) (async, rerun: 64) listen(r0, 0x5) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00d_', @ANYRESHEX=r3, @ANYRESHEX=r3, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0]) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x14) syz_fuse_handle_req(r3, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000140)={0x50, 0xffffffffffffffda, 0x1000000000, {0x7, 0x2b, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async, rerun: 32) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a0002007000000000000000"], 0xf0}}, 0x0) (async) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r6, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x101c}) (async) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000200)=0x1, &(0x7f00000007c0)=0x4) (async, rerun: 32) listxattr(&(0x7f0000000300)='./file7\x00', &(0x7f0000000480)=""/180, 0xb4) (async, rerun: 32) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000280)=0xe, 0x80000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="01002cbd7000fbdbdf2501000000ff010000", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x8010) 19m18.327713051s ago: executing program 33 (id=1693): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async, rerun: 64) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x600100, 0x0) (rerun: 64) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000040)=0x2) (async) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) (async, rerun: 64) listen(r0, 0x5) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00d_', @ANYRESHEX=r3, @ANYRESHEX=r3, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0]) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x14) syz_fuse_handle_req(r3, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000140)={0x50, 0xffffffffffffffda, 0x1000000000, {0x7, 0x2b, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async, rerun: 32) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a0002007000000000000000"], 0xf0}}, 0x0) (async) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r6, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x101c}) (async) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000200)=0x1, &(0x7f00000007c0)=0x4) (async, rerun: 32) listxattr(&(0x7f0000000300)='./file7\x00', &(0x7f0000000480)=""/180, 0xb4) (async, rerun: 32) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000280)=0xe, 0x80000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="01002cbd7000fbdbdf2501000000ff010000", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x8010) 14m28.340214787s ago: executing program 1 (id=3049): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x14, r0, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1, 0x0, 0x0, 0x1800}, 0x0) 14m25.040754736s ago: executing program 1 (id=3066): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x142080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fstatfs(r2, &(0x7f0000000100)=""/106) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010d21f0760000f00000001090224000100000000090400000103000724123ee26a18ad251c181d9d5e0000092100000001220200090581030000000000"], 0x0) getpid() fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) syz_open_procfs(r3, &(0x7f00000002c0)='wchan\x00') r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000100b060a5000000000000109022400010000500009040002010300000009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff0309"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getsockopt$netrom_NETROM_T2(r7, 0x103, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) 14m24.035829966s ago: executing program 1 (id=3069): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000180)='cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pread64(r3, &(0x7f0000000400)=""/15, 0xf, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="8dffffff8d00"}) io_setup(0x202, &(0x7f0000000200)=0x0) pipe(&(0x7f00000000c0)) socket$packet(0x11, 0x3, 0x300) r6 = eventfd2(0x5, 0x0) io_submit(r5, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0xffff, r0, &(0x7f0000000100)="cbed91d85685", 0x6, 0x8, 0x0, 0x1, r6}]) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async) fchdir(r2) (async) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) (async) syz_open_procfs(r1, &(0x7f0000000180)='cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) pread64(r3, &(0x7f0000000400)=""/15, 0xf, 0x2) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0) (async) close(r4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) (async) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="8dffffff8d00"}) (async) io_setup(0x202, &(0x7f0000000200)) (async) pipe(&(0x7f00000000c0)) (async) socket$packet(0x11, 0x3, 0x300) (async) eventfd2(0x5, 0x0) (async) io_submit(r5, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0xffff, r0, &(0x7f0000000100)="cbed91d85685", 0x6, 0x8, 0x0, 0x1, r6}]) (async) 14m23.620604728s ago: executing program 1 (id=3072): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)='\\', 0x1) (async) write$dsp(r0, &(0x7f00000001c0)='\\', 0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7b5, 0x312, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7b5, 0x312, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x9, "ee1d68f6"}]}}, 0x0}, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xffffdff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x3, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x7, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0xfffffffd, 0x1, 0xa, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x24, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x4, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xffffdff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x3, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x7, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0xfffffffd, 0x1, 0xa, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x24, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x4, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 14m22.300663195s ago: executing program 1 (id=3076): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f0000000500)={0x28, 0x0, 0x0, 0x0, 0x7, 0xffffffff, 0x5}) (async) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000580)='\x00'/16, 0x10) r5 = accept4(r4, 0x0, 0x0, 0x80000) sendmmsg$inet6(r5, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)="a7", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}], 0x1, 0x41) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 64) ioctl$sock_bt_hci(r6, 0x400448e0, &(0x7f0000001380)="bfd1501cd7eeb4ca11efa590c0268376318524f635c3c651824edd0b6123666f15291f98cf5592b171a08098e5244f298119a058f7b4bc29eee287a06303f8c0af9f3777715ba4c91a84c9a7783ba68c1e7b649247e37d075ef12f31127b5abd29f2f1b71f6fb8d6f8ec4cd3ceee315409817cb86f24ad49b345caa14821923b265e56180cb44fe9468d767b4e617120d5df3822ec6e991c3731a7d7efe261e03d7947f119439e534d") (async, rerun: 64) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f0000001340)=0x4, 0x4) readv(r6, &(0x7f0000000000)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) write$binfmt_misc(r6, &(0x7f0000000300), 0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x3, 0x0, 0x21, 0x0, 'syz0\x00', 0x0, 0x2}) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000540)={0x14, &(0x7f0000000480)={0x0, 0xa, 0x4e, {0x4e, 0xa, "5afe6b1f45674e3660f3822bcd3ac195b3cc7374d3c8e13bc24778ec508c294e7b1e7554b7883a1ef73049f1a08050eb303d286eba6268f3e45f6630a486245681d8dd43c17af708fa0b3f60"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc1a}}}, &(0x7f0000000680)={0x1c, &(0x7f0000000580)={0x40, 0xd, 0x89, "62804aa34319315037b63ed4ec7b32a084bc66c3784afce295904eeef22d0a929ff55bc29060e10cc49f206af92c0b44ed77b8d3e6cba916d3fdf99fa02117d7242bbe0d4c8016f9536caf544159ef191d276b4f9ca6f25adead766769d969a9cf52b4f74ce7512baf5544a545ad31b31717a70abd026b812252a7b73ee5cf76726b54bea77ee91546"}, &(0x7f0000000700)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000640)={0x21, 0x0, 0x2, 'l*'}}) (async) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000006c0)={0xfffffffffffffc6c, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRESHEX=r1, @ANYRES8, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000440)={0x40, 0x14, 0x7, "f5e1ef5e09d2b0"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000200)={0x14, &(0x7f0000000100)={0x0, 0x10, 0xc2, {0xc2, 0x7, "600279b0ebe84fd5a7bfdb450efd7fae2e804f4da444e341bb99852416fc1b315eea1afd990ab1459d102f47cb351182b5453a3c1e2f8b0cd6f9a80bd19f05270e11f919bbfc569a0260e19a282f174726525fe044d520091f51edc082072b7eacb8b92390e9c7c6d4afddca6657ce6b362a9b075e52ac3aee4b26c960fc114300dad51a3068e2ba78694b3794f73a4ef570953c5c68e378b02a03aacdfbdae30d2a94a793cab8e71a12408f4cd35019a5f98ac237a1e3335b2996a562b3187c"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x1c, &(0x7f0000000340)={0x40, 0x1d, 0xdb, "2871abcea862a763771fc8b4c7fd3660692fd85c21de580f0b7ecae84352f2dfdff70c300cd4578b70390f6cdac16c9833ebfadc78a354210d1054ff74067b2b7e1468596ee9c512f7c7a5e72b32aa949e6b5397f89a86b2ffe9bd25c61bb390a0f48c6b1e63f305c1e4a3826603d7de9b1342cbd9c88eefb35aa7b7a6851ad1849cfdc620713c79ddbe9fa99376184c468500d6e1c841b6071a3d197a786f3b51ce2d1d5a2d9efb1eb3fbee9c5e78a3fde6883ea84f5857e04feed3fb1af4eb06b603803efc7ef34e506e42f69dea6c15aaff1b26280b862cabe5"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x40}}) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) 14m22.256274818s ago: executing program 1 (id=3077): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x3c, r2, 0x5, 0x4, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac0c, 0xfac0a, 0xfac0d, 0xfac0a]}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x8060040) setuid(0xee01) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) 14m22.002270187s ago: executing program 34 (id=3077): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x3c, r2, 0x5, 0x4, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac0c, 0xfac0a, 0xfac0d, 0xfac0a]}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x8060040) setuid(0xee01) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) 6m30.618849056s ago: executing program 5 (id=4853): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x128) mmap$IORING_OFF_SQ_RING(&(0x7f0000645000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00008fb000/0x3000)=nil, &(0x7f0000ae2000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000eb4000/0x3000)=nil, &(0x7f0000eb4000/0x1000)=nil, 0x0, 0xfffffffffffffe60}, 0x68) syz_io_uring_setup(0x7688, &(0x7f0000000040)={0x0, 0x800389b, 0x4000, 0x1, 0x19e}, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x80) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = open(&(0x7f0000000180)='./file1\x00', 0x800, 0x70) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x400, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', 0x0) unlinkat(r1, &(0x7f0000000000)='./file1\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002440)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x404089d}, 0x20048000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) close(0x3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x17, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_int(r5, 0x0, 0x17, &(0x7f0000000000)=0x3f7, 0x4) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}, 0x4000010) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfdc4, 0x3e8, 0x0, 0xfffffffffffffd25) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 6m30.450728521s ago: executing program 5 (id=4855): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="dc0100001600010026bd7000fddbdf2500000000000000000000000000000000000000000000000000000000000000004e2000004e210000020000a03a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="20010000000000000000010000000000000004d233000000ff020000000000000000000000000001bfc5ffffffffffff020000000000000004000000000000080300000000000000ff0f0000000000009e0c00000000000003000000000000000000000200000000030000000000000003000000000000000900000000000000070000000000780b0000070000000500000028bd7000ff3400000800010d72000000000000001000000006000000e4000600e0"], 0x1dc}}, 0x4000010) 6m30.327096387s ago: executing program 5 (id=4856): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4008af60, &(0x7f0000000940)) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) socket(0x23, 0x6, 0x10000000000002) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0x6, 0x2, 0x0, 0x4, "0000000000f4ff00", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000001080)={0x5, 0xd, 0x2, 0x5, 0x5, 0x8, "96f865ac131bf78cd2fb00", 0x8, 0x3, 0x8, 0xfd, 0x9, 0x0, 0x6}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) r5 = dup(r4) read$FUSE(r5, 0x0, 0x4e) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x4e, 0x1, 0x0, 0x0, {0xc, 0x0, 0x6e80}}, 0x14}, 0x1, 0x0, 0x0, 0x4094}, 0x24000000) syz_usb_control_io$lan78xx(r0, &(0x7f0000000280)={0x14, &(0x7f00000001c0)={0x940e806c12fed998, 0x419b15f10389b9d3, 0x2, {0x2, 0x24}}, 0x0}, 0x0) 5m28.448016868s ago: executing program 5 (id=4864): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = mq_open(&(0x7f0000000440)='..\x00', 0x1, 0x50, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000000200)={0xfc, {"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", 0x1000}}, 0x1012) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'hsr0\x00'}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r5, 0xc008ae09, &(0x7f0000000500)={0x66666666666666d, 0x0, [{0x80000001, 0x3, 0x1, 0x7fffffff, 0x9, 0x3, 0x4}, {0x7, 0xb, 0x6, 0x7f, 0xd11, 0x4, 0xfffffffe}, {0xd, 0x9, 0x1, 0x4, 0x80, 0x81, 0x2}, {0x2, 0x40, 0x5, 0x5, 0x2, 0x4, 0x1}]}) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_buf(r6, 0x0, 0x30, 0x0, 0x0) r7 = getpgid(0x0) r8 = syz_open_procfs$pagemap(r7, &(0x7f0000001380)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f00000000c0)={0x60, 0x3, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x5000)=nil, 0x20000d728, 0x0, 0x3b, 0x7, 0x0, 0x58, 0x4c}) writev(r8, &(0x7f0000001340)=[{&(0x7f0000000100)="ea954eb877c1996293a04936526992a449221bb1b01f07e67d022fa30897c85a13dc970a652908c87c2b74823e6d809c00348726", 0x34}, {&(0x7f0000001240)="1a5bdf97c8908aae03409f42f7d842cb8ffc6fe87a40264b6fa28d198b462de45df7214cb9e12c1ab52c30aa2932b8f807723926874dc03f5fbc3b856724061c039f5db3f1fce0dbf3607a379cf59c34028de55467d1d76e140c7dbcad2b0201193a268210fb377f2426504cf617a94b3486b1fa83d5596fce2aebdc25638013ae190d3ad092131a2188de94e9f0581393a619668e335aab6fca3365c08a829630e53c2b0703fa52829131f69ad423401498512345208054af0a6dea555bbbfc49eb641c0b28ac4da8c81e13640d32ddb2a9b9c178b6f8a5", 0xd8}, {&(0x7f0000000140)="faf33ef91de3d4506d3b7b53eb93bba5e1750552276b80b6129aa0e6c3ad084feb1736011add460b227753521a48117308d1a6138eae", 0x36}, {&(0x7f00000001c0)="f9dad89ed240", 0x6}], 0x4) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r11, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x40000023, 0x0, 0x1800000000000000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f000011e380)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r9, 0xd000943d, &(0x7f000011f380)={0x7fffffffffffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}], 0x0, "054fcb1ff103e5"}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'batadv_slave_1\x00', 0x2}) ioctl$TUNSETNOCSUM(r12, 0x400454c8, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') 5m28.044986148s ago: executing program 5 (id=4869): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r1, 0x0, 0x0) (async) read(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 5m27.414851686s ago: executing program 5 (id=4871): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="40005d0000008675dadac5c50073cc734bceb04de18d3f057b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) msgget$private(0x0, 0x20) syz_usb_connect(0x3, 0xf5, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c24"], 0x0) 5m27.096869264s ago: executing program 35 (id=4871): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="40005d0000008675dadac5c50073cc734bceb04de18d3f057b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) msgget$private(0x0, 0x20) syz_usb_connect(0x3, 0xf5, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c24"], 0x0) 7.130646227s ago: executing program 4 (id=5696): write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x24, 0x80, 0x95, 0x8002, 0x3, 0x3e, 0x101, 0x294, 0x40, 0x24d, 0xfffffff6, 0x0, 0x38, 0x1, 0x1, 0x7f, 0x7}, [{0x3, 0x4, 0xffffffff00000001, 0xa, 0x101, 0x6, 0x7, 0xffffffffffffff7f}]}, 0x78) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf25031100800c0002"], 0x114}], 0x1}, 0x4814) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000092ecc620ac05c2773aeb010203010902240001000020000904c40102fffd01800905020210020200000905826b"], 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0xffffffffffffffff) 6.624671113s ago: executing program 7 (id=5697): newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x111000, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = signalfd(r2, &(0x7f0000000340)={[0x380000]}, 0x8) rt_sigaction(0x8, &(0x7f0000000400)={&(0x7f0000000380)="c4e2b19054b1f5c4c170c6277b662e6767f240abf344980fad848700000000f34a0f2a720f660f38075d39c4c1f877f0f6106743ddca", 0x2, &(0x7f00000003c0)="0f689e9921213446d9e96467f242a4640f5eef406690c441b710f94c0faea046000000c4c245ae7506c4e371414fca69640fdb4dac", {[0x4]}}, &(0x7f0000000540)={&(0x7f0000000440)="64d16a06c4a1f5f96a76c4c2a1f78508dee3c52ef20f5ab202000000c461d5dae73ef33667f0f69e0400000044da860a000000660f73fffe3e660f73f5a9c48116591a", 0x0, &(0x7f00000004c0)="8fa960988f001000006666450f3833a0380000008fa96897867b0a000044a800c4c2a53e1f8f29809786c500000067660f1c0742c602e1f243aff33e46fe87feefffff"}, 0x8, &(0x7f0000000580)) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f00000005c0), 0x800, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000640)={{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000740)=0xe8) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000780)=0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000600)='system.posix_acl_default\x00', &(0x7f00000007c0)={{}, {0x1, 0x6}, [{0x2, 0x5, r0}, {0x2, 0x4, r0}, {0x2, 0x0, r0}, {0x2, 0x1, r0}, {0x2, 0x4, r6}, {0x2, 0x6, r7}, {0x2, 0x0, r0}], {0x4, 0x4}, [{0x8, 0x2, r1}, {0x8, 0x2, r1}, {0x8, 0x1, r1}], {0x10, 0x2}, {0x20, 0x3}}, 0x74, 0x1) read$FUSE(r3, &(0x7f0000000840)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r10 = gettid() write$FUSE_LK(r3, &(0x7f0000002880)={0x28, 0x0, r8, {{0x77b, 0x10000, 0x2, r10}}}, 0x28) mount$overlay(0x0, &(0x7f00000028c0)='./file0\x00', &(0x7f0000002900), 0x200080, &(0x7f0000002940)={[{@redirect_dir_on}], [{@dont_appraise}, {@smackfshat={'smackfshat', 0x3d, '/dev/ppp\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '-$,{^'}}, {@obj_role={'obj_role', 0x3d, '%\\('}}, {@appraise}, {@euid_gt={'euid>', r7}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\'){]&!\xc2{'}}, {@flag='sync'}]}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000002a00)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) setpriority(0x1, r10, 0xbbb) process_vm_readv(r9, &(0x7f0000002e80)=[{&(0x7f0000002a40)=""/86, 0x56}, {&(0x7f0000002ac0)=""/66, 0x42}, {&(0x7f0000002b40)=""/185, 0xb9}, {&(0x7f0000002c00)=""/7, 0x7}, {&(0x7f0000002c40)=""/224, 0xe0}, {&(0x7f0000002d40)=""/139, 0x8b}, {&(0x7f0000002e00)=""/87, 0x57}], 0x7, &(0x7f0000002f00), 0x0, 0x0) recvfrom$packet(r11, &(0x7f0000002f40)=""/46, 0x2e, 0x40002000, &(0x7f0000002f80)={0x11, 0xd, r5, 0x1, 0xd6, 0x6, @broadcast}, 0x14) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r3, 0x80184132, &(0x7f0000002fc0)) ioctl$SNDRV_PCM_IOCTL_START(r3, 0x4142, 0x0) ioctl$PPPIOCATTCHAN(r11, 0x40047438, &(0x7f0000003000)=0x3) r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003040), 0x800, 0x0) r14 = openat$cgroup_type(r3, &(0x7f0000003080), 0x2, 0x0) ppoll(&(0x7f00000030c0)=[{r2, 0x1}, {r13, 0x40}, {r2, 0x488}, {r2, 0x8020}, {r3, 0x1000}, {r11, 0x8000}, {r11, 0x4000}, {r4, 0x5000}, {r14, 0x8008}], 0x9, &(0x7f0000003140)={0x0, 0x989680}, &(0x7f0000003180)={[0x2]}, 0x8) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f00000031c0)={0x80000000, 0x6, 0x1000, 0x10000, '\x00', '\x00', '\x00', 0x80000000, 0x9, 0x4, 0xfffffffe, "b667f44ac737c148dfb88c5bd63a055e"}) sched_getscheduler(r9) fcntl$setown(r4, 0x8, r9) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r12, &(0x7f00000033c0)={&(0x7f0000003300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003380)={&(0x7f0000003340)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10001, 0x42}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}]]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000004980)={0x10c, 0x0, &(0x7f0000004800)=[@request_death={0x400c630e, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000004440)={@ptr={0x70742a85, 0x1, &(0x7f0000003400)=""/4096, 0x1000, 0x1, 0x30}, @ptr={0x70742a85, 0x1, &(0x7f0000004400)=""/31, 0x1f, 0x2, 0x7}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}}, &(0x7f00000044c0)={0x0, 0x28, 0x50}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000004500)={@fda={0x66646185, 0x4, 0x1, 0x36}, @fda={0x66646185, 0x3, 0x2, 0x14}, @flat=@handle={0x73682a85, 0x0, 0x1}}, &(0x7f0000004580)={0x0, 0x20, 0x40}}, 0x40}, @request_death, @release={0x40046306, 0x3}, @decrefs={0x40046307, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000004740)={@ptr={0x70742a85, 0x1, &(0x7f00000045c0)=""/89, 0x59, 0x1, 0x29}, @ptr={0x70742a85, 0x1, &(0x7f0000004640)=""/194, 0xc2, 0x1, 0x2c}, @flat=@handle={0x73682a85, 0x1000, 0x3}}, &(0x7f00000047c0)={0x0, 0x28, 0x50}}, 0x400}], 0xf, 0x0, &(0x7f0000004940)="8b47082c0de294015063e4024564a2"}) r15 = syz_genetlink_get_family_id$team(&(0x7f0000004a00), r12) sendmsg$TEAM_CMD_OPTIONS_SET(r12, &(0x7f0000004e80)={&(0x7f00000049c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004e40)={&(0x7f0000004b80)={0x29c, r15, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x348, 0x4, 0x6, 0xffff}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf46}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}]}, 0x29c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 5.675328317s ago: executing program 7 (id=5703): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) sendmmsg$inet(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000006c0)="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", 0x241}], 0x1}}], 0x1, 0x80) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) 5.632548232s ago: executing program 7 (id=5704): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) writev(r0, &(0x7f0000001580)=[{0x0}], 0x1) 5.533038636s ago: executing program 7 (id=5705): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101542, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat2(0xffffffffffffffff, 0x0, 0x0, 0x1800) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000000)={0x39, r1, 0x80000}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010700000c0000000000160000000c0006000100000001"], 0x20}, 0x1, 0x0, 0x0, 0x851}, 0x40004) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000840)={@val={0x8, 0x88f7}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast}, "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"}}, 0xfce) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40040) 5.473506282s ago: executing program 7 (id=5706): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xf3) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18d1, 0x5028, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3f, [{{0x9, 0x4, 0x0, 0xfc, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5}]}}, 0x0}, 0x0) r3 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000940)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000180)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000280)={0x34, &(0x7f0000000a40)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'lo\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000680)=0x7e) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, &(0x7f0000000400)={0x40, 0x23, 0x8e, {0x8e, 0x11, "c424d047aa2a8534ed04d6d47d37e3e4c0f592dfe7e0e98dd6f2bf24189887bb9ad8af2d28f442e50e5459898247553efc80e3a9ea1e6ea34abfe9c4fe43defa12b7021cfff702bd5cf37390e5f148f011bc992e248e2570ed5528d936356f45d15c45c387cbc4dccfd75f57147f0289c72b78664751024420cbd957eb364821f993f4fe93388ff2fdd5826d"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x448}}, &(0x7f0000000200)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x22, 0x0, 0x33, 0x1, "50e64f28", "8e000ee4"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5d, 0x3, 0x4, 0x6, 0x9, 0xff, 0x7}}}, &(0x7f0000000b40)={0x84, &(0x7f00000004c0)={0x40, 0x16, 0x41, "f0e41463ad4c13afa2f06263747ee1139daf5312aae29752c1786a153269088c42217efc06a768849120e22ae3ac7e7596f120001e07844c02148b4aca50aeaa1a"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000005c0)={0x0, 0x8, 0x1}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000640)={0x20, 0x0, 0x8, {0x20, 0x8, [0xf00]}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000740)={0x40, 0x9, 0x1}, &(0x7f0000000780)={0x40, 0xb, 0x2, "82a5"}, &(0x7f00000007c0)={0x40, 0xf, 0x2}, &(0x7f0000000800)={0x40, 0x13, 0x6, @local}, &(0x7f0000000840)={0x40, 0x17, 0x6, @random="5f88538b6581"}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "e83c"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x2}}) 3.873392174s ago: executing program 4 (id=5709): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="dc0100001600010026bd7000fddbdf2500000000000000000000000000000000000000000000000000000000000000004e2000004e210000020000a03a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="20010000000000000000010000000000000004d233000000ff020000000000000000000000000001bfc5ffffffffffff020000000000000004000000000000000300000000000000ff0f0000000000009e0c00000000000003000000001000000000000200000000030000000000000003000000000000000900000000000000070000000000780b0000070000000500000028bd7000ff3400000800010d72000000000000001000000006000000e4000600e0"], 0x1dc}}, 0x4000010) 3.787228315s ago: executing program 4 (id=5710): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1a, 0x0, &(0x7f0000000000)) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x10180, 0x0) write$UHID_CREATE(r3, &(0x7f0000000380)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000001c0)=""/159, 0x9f, 0x7ff, 0xdc9, 0x101, 0x8, 0x1}}, 0x120) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)={0x4c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x11, @private=0xa010102, 0x15, 0x0, 'wrr\x00', 0x0, 0x0, 0x2c}, 0x2c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) 3.66876954s ago: executing program 4 (id=5711): syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x54, 0x9d, 0x7f, 0x8, 0xdeee, 0x300, 0xca97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0xfb, [{{0x9, 0x4, 0x9b, 0x0, 0x0, 0xc1, 0x10, 0x28}}]}}]}}, 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0xffffffff, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xda, 0x180, 0x0, [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x3, 0x1, 0x2, 0x9, {0x9, 0x21, 0x200, 0x40, 0x1, {0x22, 0xe87}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xd, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x1, 0xd0, 0x7}}]}}}]}}]}}, 0x0) 2.862881248s ago: executing program 6 (id=5713): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) writev(r0, &(0x7f0000001580)=[{&(0x7f0000000100)}], 0x1) 2.785222913s ago: executing program 6 (id=5714): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x9, 0x12) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r0, 0x0) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0x6, 0xc, 0x3, 0x1ff, 0x8001, 0x6d}) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000063e000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x29, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.720816088s ago: executing program 6 (id=5715): mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ocfs2\x00', 0x2200000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000006c0)={'bridge_slave_0\x00', 0x600}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc293, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x408}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x20, 0x30, 0xa0, {0xa0, 0x0, "d8b3a31e585eaf67d632b544c268448a1297af424acf5e58bf9df64a69d39f4adba2d4c1139b3d973919348069ba2e95856394bc1681e2c13cbd93d042479495a5e0b9b735e3fa5d67d2143c6c7077a913b9ca5478b813bc093ead712216735284e43e0f64d5a0decb45f4ec9312f12ae803db7cd3ac44a904c963262e9891c354f0ce57f7e100d7f49b238229171ea1eb2da5b67b655370b9593d786648"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f0700000000000905830300e4"], 0x0) 2.178472211s ago: executing program 7 (id=5718): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x57e, 0x2019, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xfc, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000440)=@ethtool_ringparam={0xe, 0x0, 0x0, 0x0, 0x0, 0x1002, 0x80000000}}) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000140)={0x2, r3}) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)={0x20, 0x9, 0x35, {0x35, 0x22, "b26caa81ec4c00000000000000041778de129425da9543187eb5a9da2637e06ac539d0e7f2d9bd9c980eb7c004b829ab94cfad"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.154375798s ago: executing program 3 (id=5719): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="dc0100001600010026bd7000fddbdf2500000000000000000000000000000000000000000000000000000000000000004e2000004e210000020000a03a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="20010000000000000000010000000000000004d233000000ff020000000000000000000000000001bfc5ffffffffffff020000000000000004000000000000000300000000000000ff0f0000000000009e0c00000000000003000000001900000000000200000000030000000000000003000000000000000900000000000000070000000000780b0000070000000500000028bd7000ff3400000800010d72000000000000001000000006000000e4000600e0"], 0x1dc}}, 0x4000010) 2.020946728s ago: executing program 3 (id=5720): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000140)) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x8080) r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000040)='statm\x00') r1 = syz_open_procfs(r0, &(0x7f0000000000)='numa_maps\x00') writev(r1, &(0x7f0000000800)=[{&(0x7f0000000280)='2', 0x1}], 0x1) 1.976578679s ago: executing program 3 (id=5721): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000180)=0xa, 0x4) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000ae0009040000024f69960009050f029d8229720009058202"], 0x0) 594.534422ms ago: executing program 3 (id=5722): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) writev(r0, &(0x7f0000001580)=[{&(0x7f0000000100)}], 0x1) 517.095742ms ago: executing program 3 (id=5723): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0x40046f41, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0) 516.732728ms ago: executing program 3 (id=5724): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000280)={0x34, &(0x7f0000000a40)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000400)={0x40, 0x23, 0x8e, {0x8e, 0x11, "c424d047aa2a8534ed04d6d47d37e3e4c0f592dfe7e0e98dd6f2bf24189887bb9ad8af2d28f442e50e5459898247553efc80e3a9ea1e6ea34abfe9c4fe43defa12b7021cfff702bd5cf37390e5f148f011bc992e248e2570ed5528d936356f45d15c45c387cbc4dccfd75f57147f0289c72b78664751024420cbd957eb364821f993f4fe93388ff2fdd5826d"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x448}}, &(0x7f0000000200)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x22, 0x0, 0x33, 0x1, "50e64f28", "8e000ee4"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5d, 0x3, 0x4, 0x6, 0x9, 0xff, 0x7}}}, &(0x7f0000000b40)={0x84, &(0x7f00000004c0)={0x40, 0x16, 0x41, "f0e41463ad4c13afa2f06263747ee1139daf5312aae29752c1786a153269088c42217efc06a768849120e22ae3ac7e7596f120001e07844c02148b4aca50aeaa1a"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000005c0)={0x0, 0x8, 0x1}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000640)={0x20, 0x0, 0x8, {0x20, 0x8, [0xf00]}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000740)={0x40, 0x9, 0x1}, &(0x7f0000000780)={0x40, 0xb, 0x2, "82a5"}, &(0x7f00000007c0)={0x40, 0xf, 0x2}, &(0x7f0000000800)={0x40, 0x13, 0x6, @local}, &(0x7f0000000840)={0x40, 0x17, 0x6, @random="5f88538b6581"}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "e83c"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x2}}) 455.092715ms ago: executing program 4 (id=5725): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000880), 0x40) (async) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) r2 = eventfd2(0x0, 0x80001) (async) writev(0xffffffffffffffff, &(0x7f00000010c0)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) (async) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) io_setup(0x8, &(0x7f0000000280)=0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, r2, 0x0, 0x0, 0xffffffffbff7adc0, 0x0, 0x2}]) (async) write$binfmt_register(r1, &(0x7f0000000080)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x8, 0x3a, '.^', 0x3a, '&]!/', 0x3a, './cgroup', 0x3a, [0x46]}, 0x2f) 332.125766ms ago: executing program 4 (id=5726): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xf3) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18d1, 0x5028, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3f, [{{0x9, 0x4, 0x0, 0xfc, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5}]}}, 0x0}, 0x0) r3 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000180)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000280)={0x34, &(0x7f0000000a40)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'lo\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000680)=0x7e) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, &(0x7f0000000400)={0x40, 0x23, 0x8e, {0x8e, 0x11, "c424d047aa2a8534ed04d6d47d37e3e4c0f592dfe7e0e98dd6f2bf24189887bb9ad8af2d28f442e50e5459898247553efc80e3a9ea1e6ea34abfe9c4fe43defa12b7021cfff702bd5cf37390e5f148f011bc992e248e2570ed5528d936356f45d15c45c387cbc4dccfd75f57147f0289c72b78664751024420cbd957eb364821f993f4fe93388ff2fdd5826d"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x448}}, &(0x7f0000000200)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x22, 0x0, 0x33, 0x1, "50e64f28", "8e000ee4"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5d, 0x3, 0x4, 0x6, 0x9, 0xff, 0x7}}}, &(0x7f0000000b40)={0x84, &(0x7f00000004c0)={0x40, 0x16, 0x41, "f0e41463ad4c13afa2f06263747ee1139daf5312aae29752c1786a153269088c42217efc06a768849120e22ae3ac7e7596f120001e07844c02148b4aca50aeaa1a"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000005c0)={0x0, 0x8, 0x1}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000640)={0x20, 0x0, 0x8, {0x20, 0x8, [0xf00]}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000740)={0x40, 0x9, 0x1}, &(0x7f0000000780)={0x40, 0xb, 0x2, "82a5"}, &(0x7f00000007c0)={0x40, 0xf, 0x2}, &(0x7f0000000800)={0x40, 0x13, 0x6, @local}, &(0x7f0000000840)={0x40, 0x17, 0x6, @random="5f88538b6581"}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "e83c"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x2}}) 84.944792ms ago: executing program 6 (id=5727): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r1, 0x0) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xccd1a) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x9, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x8, 0x9, 0x0, 0x1, [@nested={0x4, 0x75}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x804) 64.486241ms ago: executing program 6 (id=5728): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="dc0100001600010026bd7000fddbdf2500000000000000000000000000000000000000000000000000000000000000004e2000004e210000020000a03a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="20010000000000000000010000000000000004d233000000ff020000000000000000000000000001bfc5ffffffffffff020000000000000004000000000000000300000000000000ff0f0000000000009e0c00000000000003000000000000000008000200000000030000000000000003000000000000000900000000000000070000000000780b0000070000000500000028bd7000ff3400000800010d72000000000000001000000006000000e4000600e0"], 0x1dc}}, 0x4000010) 0s ago: executing program 6 (id=5729): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000000c0)) (async) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r2, 0x400455c8, 0x2) (async, rerun: 64) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000340)=0x1d) (async, rerun: 64) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000080)={r5, 0x9}, 0x8) (async, rerun: 64) dup3(r0, r2, 0x80000) (rerun: 64) kernel console output (not intermixed with test programs): : interface not active [ 1466.799264][T23935] hsr_slave_0: entered promiscuous mode [ 1466.806130][T23935] hsr_slave_1: entered promiscuous mode [ 1466.813031][T23935] debugfs: 'hsr0' already exists in 'hsr' [ 1466.819916][T23935] Cannot create hsr debugfs directory [ 1466.944858][T23935] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.016718][T23953] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5291'. [ 1467.033520][T23935] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.103618][T23935] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.145611][T23935] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.301844][T23935] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1467.312614][T23935] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1467.324993][T23935] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1467.332714][ T5878] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 1467.345492][T23935] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1467.432792][T23935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1467.456711][T23935] 8021q: adding VLAN 0 to HW filter on device team0 [ 1467.471578][T19255] bridge0: port 1(bridge_slave_0) entered blocking state [ 1467.478933][T19255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1467.497416][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 1467.504849][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1467.518490][ T5878] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1467.529326][ T5878] usb 4-1: not running at top speed; connect to a high speed hub [ 1467.539713][ T5878] usb 4-1: config 1 has an invalid descriptor of length 181, skipping remainder of the config [ 1467.552774][ T5878] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1467.570036][ T5878] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1467.579821][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.589986][ T5878] usb 4-1: Product: syz [ 1467.594489][ T5878] usb 4-1: Manufacturer: syz [ 1467.599320][ T5878] usb 4-1: SerialNumber: syz [ 1467.778094][T23935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1467.851569][ T5878] usb 4-1: USB disconnect, device number 109 [ 1467.930628][T13162] Bluetooth: hci3: command tx timeout [ 1468.056356][T23935] veth0_vlan: entered promiscuous mode [ 1468.073261][T23935] veth1_vlan: entered promiscuous mode [ 1468.106792][T23935] veth0_macvtap: entered promiscuous mode [ 1468.118916][T23935] veth1_macvtap: entered promiscuous mode [ 1468.141543][T23935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1468.159968][T23935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1468.177829][ T75] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1468.190717][ T75] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1468.204658][ T75] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1468.215459][ T75] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1468.320867][T12249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1468.330059][T12249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1468.365383][T12249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1468.375007][T12249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1468.712403][T23972] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1468.818034][T16576] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 1468.882623][T23972] usb 4-1: Using ep0 maxpacket: 16 [ 1468.889814][T23972] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1468.898531][T23972] usb 4-1: config 0 has no interface number 0 [ 1468.908284][T23972] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1468.918140][T23972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.926967][T23972] usb 4-1: Product: syz [ 1468.931416][T23972] usb 4-1: Manufacturer: syz [ 1468.936666][T23972] usb 4-1: SerialNumber: syz [ 1468.943828][T23972] usb 4-1: config 0 descriptor?? [ 1468.952790][T23972] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1468.957078][T16576] usb 7-1: device descriptor read/64, error -71 [ 1469.221245][T16576] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 1469.363810][T16576] usb 7-1: device descriptor read/64, error -71 [ 1469.383144][T23974] sd 0:0:1:0: PR command failed: 1026 [ 1469.399268][T23974] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1469.422350][T23974] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1469.456790][T23972] gspca_spca1528: reg_w err -71 [ 1469.481594][T16576] usb usb7-port1: attempt power cycle [ 1469.491733][T23972] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 1469.512262][T23972] usb 4-1: USB disconnect, device number 110 [ 1469.844584][T16576] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 1469.867284][T16576] usb 7-1: device descriptor read/8, error -71 [ 1470.122823][T16576] usb 7-1: new full-speed USB device number 38 using dummy_hcd [ 1470.144879][T16576] usb 7-1: device descriptor read/8, error -71 [ 1470.155409][T13162] Bluetooth: hci3: command tx timeout [ 1470.261989][T16576] usb usb7-port1: unable to enumerate USB device [ 1470.336683][ T980] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1470.503267][ T980] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1470.514794][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.524065][ T980] usb 4-1: Product: syz [ 1470.528545][ T980] usb 4-1: Manufacturer: syz [ 1470.533823][ T980] usb 4-1: SerialNumber: syz [ 1470.977386][ T980] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1470.991331][ T980] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1472.346084][T23999] netlink: 220 bytes leftover after parsing attributes in process `syz.6.5300'. [ 1472.390454][T13162] Bluetooth: hci3: command tx timeout [ 1472.646833][ T5823] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1472.821037][ T5823] usb 7-1: Using ep0 maxpacket: 32 [ 1472.831861][T24010] dlm: non-version read from control device 2 [ 1472.835486][ T5823] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1472.852988][ T5823] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1472.862859][ T5823] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1472.872416][ T5823] usb 7-1: Product: syz [ 1472.876885][ T5823] usb 7-1: Manufacturer: syz [ 1472.881618][ T5823] usb 7-1: SerialNumber: syz [ 1472.889629][ T5823] usb 7-1: config 0 descriptor?? [ 1472.900474][T24001] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 1472.953800][ T980] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 1473.176463][ T980] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1473.205003][ T980] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1473.217617][ T980] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1473.241145][ T980] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1473.253291][ T980] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1473.268914][ T980] usb 4-1: USB disconnect, device number 111 [ 1473.293729][ T5823] usb 7-1: USB disconnect, device number 39 [ 1473.694870][ T5823] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1473.869609][ T5823] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1473.879733][ T5823] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.888629][ T5823] usb 7-1: Product: syz [ 1473.894104][ T5823] usb 7-1: Manufacturer: syz [ 1473.900209][ T5823] usb 7-1: SerialNumber: syz [ 1474.047926][ T5925] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1474.208437][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 1474.218470][ T5925] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1474.227957][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.237146][ T5925] usb 4-1: Product: syz [ 1474.241541][ T5925] usb 4-1: Manufacturer: syz [ 1474.246265][ T5925] usb 4-1: SerialNumber: syz [ 1474.254599][ T5925] usb 4-1: config 0 descriptor?? [ 1474.263273][ T5925] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1474.345466][ T5823] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1474.358681][ T5823] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1474.371729][ T5823] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1474.384617][ T5823] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1474.395058][ T5823] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1474.406698][ T5823] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -32 [ 1474.614714][T13162] Bluetooth: hci3: command tx timeout [ 1476.164472][T24027] netlink: 220 bytes leftover after parsing attributes in process `syz.7.5309'. [ 1476.603650][ T9] usb 7-1: USB disconnect, device number 40 [ 1476.865943][T24034] Set syz1 is full, maxelem 6117 reached [ 1477.021051][ T9] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1477.059395][T24017] netlink: 400 bytes leftover after parsing attributes in process `syz.3.5306'. [ 1477.185680][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1477.197883][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1477.208440][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1477.219852][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1477.235414][ T9] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1477.245450][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.254317][ T9] usb 7-1: Product: syz [ 1477.258775][ T9] usb 7-1: Manufacturer: syz [ 1477.263878][ T9] usb 7-1: SerialNumber: syz [ 1477.274110][ T9] usb 7-1: config 0 descriptor?? [ 1477.287599][ T5925] gspca_stk1135: reg_w 0x351 err -71 [ 1477.296264][ T5925] gspca_stk1135: serial bus timeout: status=0x00 [ 1477.307247][ T5925] gspca_stk1135: Sensor write failed [ 1477.313906][ T5925] gspca_stk1135: serial bus timeout: status=0x00 [ 1477.321167][ T5925] gspca_stk1135: Sensor write failed [ 1477.326517][ T5925] gspca_stk1135: serial bus timeout: status=0x00 [ 1477.335886][ T5925] gspca_stk1135: Sensor read failed [ 1477.341617][ T5925] gspca_stk1135: serial bus timeout: status=0x00 [ 1477.349675][ T5925] gspca_stk1135: Sensor read failed [ 1477.355136][ T5925] gspca_stk1135: Detected sensor type unknown (0x0) [ 1477.362200][ T5925] gspca_stk1135: serial bus timeout: status=0x00 [ 1477.369044][ T5925] gspca_stk1135: Sensor read failed [ 1477.374847][ T5925] gspca_stk1135: serial bus timeout: status=0x00 [ 1477.381753][ T5925] gspca_stk1135: Sensor read failed [ 1477.387386][ T5925] gspca_stk1135: serial bus timeout: status=0x00 [ 1477.393772][ T5925] gspca_stk1135: Sensor write failed [ 1477.399331][ T5925] gspca_stk1135: serial bus timeout: status=0x00 [ 1477.405781][ T5925] gspca_stk1135: Sensor write failed [ 1477.411241][ T5925] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 1477.422837][ T5925] usb 4-1: USB disconnect, device number 112 [ 1477.499643][ T9] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1477.719625][ T9] usb 7-1: USB disconnect, device number 41 [ 1477.902589][T24041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5315'. [ 1477.914090][T24042] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1478.011044][T24044] kvm: user requested TSC rate below hardware speed [ 1478.464885][ T980] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1478.657479][ T980] usb 4-1: Using ep0 maxpacket: 32 [ 1478.667247][ T980] usb 4-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=20.b0 [ 1478.676612][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.684870][ T980] usb 4-1: Product: syz [ 1478.689391][ T980] usb 4-1: Manufacturer: syz [ 1478.694623][ T980] usb 4-1: SerialNumber: syz [ 1478.702134][ T980] usb 4-1: config 0 descriptor?? [ 1478.709279][ T980] usb 4-1: ucan: probing device on interface #0 [ 1478.716254][ T980] usb 4-1: ucan: invalid EP count (0) [ 1478.722325][ T980] usb 4-1: ucan: probe failed; try to update the device firmware [ 1478.818035][ T5925] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1478.989289][ T24] usb 4-1: USB disconnect, device number 113 [ 1479.004667][ T5925] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1479.015645][ T5925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.026247][ T5925] usb 7-1: Product: syz [ 1479.030803][ T5925] usb 7-1: Manufacturer: syz [ 1479.036044][ T5925] usb 7-1: SerialNumber: syz [ 1479.490681][ T5925] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1479.507620][ T5925] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1479.520743][ T5925] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1479.536308][ T5925] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1479.546812][ T5925] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1479.580402][ T5925] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -32 [ 1479.732234][T24070] netlink: 'syz.7.5323': attribute type 4 has an invalid length. [ 1480.245746][T24078] netlink: 'syz.3.5326': attribute type 11 has an invalid length. [ 1480.257200][T24078] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5326'. [ 1481.479528][T24100] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5332'. [ 1481.489158][T24100] netlink: 255 bytes leftover after parsing attributes in process `syz.3.5332'. [ 1481.499569][T24100] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5332'. [ 1481.508793][T24100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5332'. [ 1481.518040][T24100] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.5332'. [ 1481.527481][T24100] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5332'. [ 1481.785908][ T5878] usb 7-1: USB disconnect, device number 42 [ 1481.830276][ T980] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1481.997715][ T980] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1482.016194][ T980] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1482.028862][ T980] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1482.044437][ T980] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1482.051373][ T980] usb 4-1: New USB device found, idVendor=18d1, idProduct=5028, bcdDevice= 0.00 [ 1482.060939][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.073955][ T980] usb 4-1: config 0 descriptor?? [ 1482.511647][T24102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1482.522095][T24102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1482.536833][ T980] usbhid 4-1:0.0: can't add hid device: -71 [ 1482.545149][ T980] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1482.557156][ T980] usb 4-1: USB disconnect, device number 114 [ 1482.636066][ T5925] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1482.799479][ T5925] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1482.809268][ T5925] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.820636][ T5925] usb 7-1: config 0 descriptor?? [ 1483.051573][ T5925] usb 7-1: Cannot read MAC address [ 1483.054022][T24119] fuse: Unknown parameter 'd' [ 1483.060344][ T5925] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1483.086382][ T5925] usb 7-1: USB disconnect, device number 43 [ 1483.909035][ T5925] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1484.082203][ T5925] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 1484.090507][ T5925] usb 7-1: config 0 has no interface number 0 [ 1484.097238][ T5925] usb 7-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1484.107757][ T5925] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1484.121722][ T5925] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1484.131976][ T5925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.140891][ T5925] usb 7-1: Product: syz [ 1484.145697][ T5925] usb 7-1: Manufacturer: syz [ 1484.150517][ T5925] usb 7-1: SerialNumber: syz [ 1484.159792][ T5925] usb 7-1: config 0 descriptor?? [ 1484.166900][T24127] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1484.191886][ T5925] cyberjack 7-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1484.215823][ T5925] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1484.406603][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 1484.530524][ T980] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1484.621908][ T5878] usb 7-1: USB disconnect, device number 44 [ 1484.634462][ T5878] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1484.646883][ T5878] cyberjack 7-1:0.69: device disconnected [ 1484.689413][ T980] usb 4-1: Using ep0 maxpacket: 32 [ 1484.697104][ T980] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1484.707676][ T980] usb 4-1: config 10 has an invalid interface number: 110 but max is 0 [ 1484.716623][ T980] usb 4-1: config 10 has no interface number 0 [ 1484.726654][ T980] usb 4-1: string descriptor 0 read error: -22 [ 1484.733358][ T980] usb 4-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice=4b.e5 [ 1484.743240][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.972211][T24137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1484.981522][T24137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1484.993484][ T5925] usb 4-1: USB disconnect, device number 115 [ 1485.491683][ T980] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1485.654181][ T980] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1485.668665][ T980] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1485.679671][ T980] usb 7-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1485.698163][ T980] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1485.705331][ T980] usb 7-1: New USB device found, idVendor=18d1, idProduct=5028, bcdDevice= 0.00 [ 1485.714823][ T980] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.726225][ T980] usb 7-1: config 0 descriptor?? [ 1485.962213][ T5925] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1486.126105][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1486.137582][ T5925] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1486.150708][ T5925] usb 4-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 1486.160308][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.164799][T24144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1486.179931][ T5925] usb 4-1: config 0 descriptor?? [ 1486.188861][T24144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1486.216161][ T980] usbhid 7-1:0.0: can't add hid device: -71 [ 1486.223225][ T980] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1486.242061][ T980] usb 7-1: USB disconnect, device number 45 [ 1486.628682][ T5925] input: HID 28bd:0935 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0935.0093/input/input151 [ 1486.658045][ T5925] uclogic 0003:28BD:0935.0093: input,hidraw0: USB HID vff.fd Mouse [HID 28bd:0935] on usb-dummy_hcd.3-1/input0 [ 1486.834402][ T5925] usb 4-1: USB disconnect, device number 116 [ 1487.106655][ T980] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1487.288426][ T980] usb 7-1: Using ep0 maxpacket: 16 [ 1487.297081][ T980] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1487.308005][ T980] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.316550][ T980] usb 7-1: Product: syz [ 1487.321533][ T980] usb 7-1: Manufacturer: syz [ 1487.326164][ T980] usb 7-1: SerialNumber: syz [ 1487.333840][ T980] usb 7-1: config 0 descriptor?? [ 1487.342752][ T980] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 1487.353209][ T980] usb 7-1: Detected FT-X [ 1487.557097][ T980] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1487.684194][ T5878] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1487.844605][ T5878] usb 4-1: Using ep0 maxpacket: 8 [ 1487.855870][ T5878] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1487.865650][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.874057][ T5878] usb 4-1: Product: syz [ 1487.878756][ T5878] usb 4-1: Manufacturer: syz [ 1487.883582][ T5878] usb 4-1: SerialNumber: syz [ 1487.892018][ T5878] usb 4-1: config 0 descriptor?? [ 1487.996406][T24153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1488.005666][T24153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1488.029059][T24153] syzkaller1: entered promiscuous mode [ 1488.034670][T24153] syzkaller1: entered allmulticast mode [ 1488.110244][ T980] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1488.120019][ T5878] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1489.214235][T24159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1489.223672][T24159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1489.670246][ T5878] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1489.681311][ T5878] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 1489.689855][ T5878] usb 4-1: media controller created [ 1489.703543][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1489.754874][ T5878] i2c i2c-2: Added multiplexed i2c bus 3 [ 1489.760713][ T5878] rtl2832 2-0010: Realtek RTL2832 successfully attached [ 1489.768297][ T5878] usb 4-1: DVB: registering adapter 2 frontend 0 (Realtek RTL2832 (DVB-T))... [ 1489.777927][ T5878] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 1489.924498][ T5878] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1489.942454][ T5878] usb 4-1: USB disconnect, device number 117 [ 1490.126136][ T5925] usb 7-1: USB disconnect, device number 46 [ 1490.149525][ T5925] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1490.161419][ T5925] ftdi_sio 7-1:0.0: device disconnected [ 1490.539920][ T5925] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1490.721618][ T5925] usb 7-1: Using ep0 maxpacket: 8 [ 1490.731538][ T5925] usb 7-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1490.741781][ T5925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.750442][ T5925] usb 7-1: Product: syz [ 1490.753599][ T5878] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1490.754788][ T5925] usb 7-1: Manufacturer: syz [ 1490.767677][ T5925] usb 7-1: SerialNumber: syz [ 1490.774694][ T5925] usb 7-1: config 0 descriptor?? [ 1490.783888][ T5925] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1490.923319][ T5878] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1490.932721][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.941321][ T5878] usb 4-1: Product: syz [ 1490.945609][ T5878] usb 4-1: Manufacturer: syz [ 1490.951342][ T5878] usb 4-1: SerialNumber: syz [ 1491.408665][T24184] input: syz0 as /devices/virtual/input/input152 [ 1491.415423][ T5878] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1491.430464][ T5878] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1491.478940][ T5878] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1491.494661][ T5878] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1491.510337][ T5878] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1491.524381][ T5878] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1491.544491][ T5878] usb 4-1: USB disconnect, device number 118 [ 1491.876630][ T5878] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1492.040123][ T5878] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1492.051729][ T5878] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1492.061917][ T5878] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1492.075534][ T5878] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1492.082821][ T5878] usb 4-1: New USB device found, idVendor=18d1, idProduct=5028, bcdDevice= 0.00 [ 1492.092345][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.103224][ T5878] usb 4-1: config 0 descriptor?? [ 1492.134040][ T5925] gspca_sonixj: reg_r err -32 [ 1492.139159][ T5925] sonixj 7-1:0.0: probe with driver sonixj failed with error -32 [ 1492.541598][T24187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1492.552305][T24187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1492.568293][ T5878] usbhid 4-1:0.0: can't add hid device: -71 [ 1492.575669][ T5878] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1492.587673][ T5878] usb 4-1: USB disconnect, device number 119 [ 1492.627003][ T5925] usb 7-1: USB disconnect, device number 47 [ 1493.734514][ T5925] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1493.919507][ T5925] usb 7-1: Using ep0 maxpacket: 32 [ 1493.928351][ T5925] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1493.938167][ T5925] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.949537][ T5925] usb 7-1: config 0 descriptor?? [ 1493.961569][ T5925] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1494.615302][ T5823] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1494.798871][ T5823] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1494.810926][ T5823] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1494.822189][ T5823] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1494.837765][ T5823] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1494.845293][ T5823] usb 4-1: New USB device found, idVendor=18d1, idProduct=5028, bcdDevice= 0.00 [ 1494.856301][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.867596][ T5823] usb 4-1: config 0 descriptor?? [ 1495.306815][T24219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1495.316838][T24219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1495.333772][ T5823] usbhid 4-1:0.0: can't add hid device: -71 [ 1495.341198][ T5823] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1495.353175][ T5823] usb 4-1: USB disconnect, device number 120 [ 1495.467115][ T5925] gspca_vc032x: reg_r err -32 [ 1495.472118][ T5925] gspca_vc032x: I2c Bus Busy Wait 00 [ 1495.477721][ T5925] gspca_vc032x: I2c Bus Busy Wait 00 [ 1495.484572][ T5925] gspca_vc032x: I2c Bus Busy Wait 00 [ 1495.489964][ T5925] gspca_vc032x: I2c Bus Busy Wait 00 [ 1495.495723][ T5925] gspca_vc032x: I2c Bus Busy Wait 00 [ 1495.501361][ T5925] gspca_vc032x: I2c Bus Busy Wait 00 [ 1495.507200][ T5925] gspca_vc032x: I2c Bus Busy Wait 00 [ 1495.513215][ T5925] gspca_vc032x: I2c Bus Busy Wait 00 [ 1495.518697][ T5925] gspca_vc032x: I2c Bus Busy Wait 00 [ 1495.525280][ T5925] gspca_vc032x: I2c Bus Busy Wait 00 [ 1495.531007][ T5925] gspca_vc032x: I2c Bus Busy Wait 00 [ 1495.536907][ T5925] gspca_vc032x: I2c Bus Busy Wait 00 [ 1495.543042][ T5925] gspca_vc032x: I2c Bus Busy Wait 00 [ 1495.549048][ T5925] gspca_vc032x: I2c Bus Busy Wait 00 [ 1495.554914][ T5925] gspca_vc032x: I2c Bus Busy Wait 00 [ 1495.562033][ T5925] gspca_vc032x: I2c Bus Busy Wait 00 [ 1495.569093][ T5925] gspca_vc032x: I2c Bus Busy Wait 00 [ 1495.575198][ T5925] gspca_vc032x: I2c Bus Busy Wait 00 [ 1495.581911][ T5925] gspca_vc032x: Unknown sensor... [ 1495.587672][ T5925] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 1496.080779][ T42] Bluetooth: (null): Invalid header checksum [ 1496.197753][T12249] Bluetooth: (null): Invalid header checksum [ 1496.233479][ T9] usb 7-1: USB disconnect, device number 48 [ 1496.315318][ T5925] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 1496.324558][ T42] Bluetooth: (null): Invalid header checksum [ 1496.433262][T12249] Bluetooth: (null): Invalid header checksum [ 1496.495441][ T5925] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1496.507039][ T5925] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1496.518084][ T5925] usb 4-1: can't read configurations, error -71 [ 1496.689524][ T9] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1496.850028][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 1496.857010][ T9] usb 7-1: config 0 has an invalid interface number: 104 but max is 1 [ 1496.865481][ T9] usb 7-1: config 0 has an invalid interface number: 104 but max is 1 [ 1496.873932][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1496.883055][ T9] usb 7-1: config 0 has no interface number 0 [ 1496.889445][ T9] usb 7-1: config 0 interface 104 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 255 [ 1496.899883][ T9] usb 7-1: config 0 interface 104 has no altsetting 1 [ 1496.932089][ T9] usb 7-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1496.953242][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.962529][ T9] usb 7-1: Product: syz [ 1496.966756][ T9] usb 7-1: Manufacturer: syz [ 1496.972875][ T9] usb 7-1: SerialNumber: syz [ 1496.990694][ T9] usb 7-1: config 0 descriptor?? [ 1497.192144][T24242] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1497.220353][T24237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1497.234392][T24237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1497.245658][ T9] asix 7-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1497.261935][ T9] asix 7-1:0.104: probe with driver asix failed with error -71 [ 1497.273970][T24242] netlink: 'syz.3.5380': attribute type 3 has an invalid length. [ 1497.282295][ T9] usb 7-1: USB disconnect, device number 49 [ 1497.359632][ T75] Bluetooth: hci0: Frame reassembly failed (-84) [ 1497.369106][ T75] Bluetooth: hci0: Frame reassembly failed (-84) [ 1497.662858][ T5925] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1497.823458][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 1497.847804][ T5925] usb 4-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 1497.858653][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.867198][ T5925] usb 4-1: Product: syz [ 1497.871525][ T5925] usb 4-1: Manufacturer: syz [ 1497.876357][ T5925] usb 4-1: SerialNumber: syz [ 1497.884987][ T5925] usb 4-1: config 0 descriptor?? [ 1497.892993][ T5925] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 1498.097770][T24260] netlink: 9 bytes leftover after parsing attributes in process `syz.6.5386'. [ 1498.109404][ T5925] gspca_sn9c2028: read1 error -71 [ 1498.110392][T24260] 0: renamed from hsr_slave_1 (while UP) [ 1498.116882][ T5925] gspca_sn9c2028: read1 error -71 [ 1498.128682][ T5925] gspca_sn9c2028: read1 error -71 [ 1498.134927][ T5925] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -71 [ 1498.137785][T24260] 0: entered allmulticast mode [ 1498.151970][T24260] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 1498.153748][ T5925] usb 4-1: USB disconnect, device number 122 [ 1498.529090][ T5925] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1498.668022][ T5925] usb 7-1: device descriptor read/64, error -71 [ 1498.925081][ T5925] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1499.085521][ T5925] usb 7-1: device descriptor read/64, error -71 [ 1499.203166][ T5925] usb usb7-port1: attempt power cycle [ 1499.502304][T13162] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1499.577999][ T5925] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1499.611020][ T5925] usb 7-1: device descriptor read/8, error -71 [ 1499.865942][ T5925] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1499.888113][ T5925] usb 7-1: device descriptor read/8, error -71 [ 1500.005900][ T5925] usb usb7-port1: unable to enumerate USB device [ 1500.486313][ T5878] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 1500.661062][ T5878] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1500.672848][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 1500.684456][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1500.694918][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 65535, setting to 64 [ 1500.710406][ T5878] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1500.719733][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.729263][ T5878] usb 4-1: Product: syz [ 1500.734008][ T5878] usb 4-1: Manufacturer: syz [ 1500.738806][ T5878] usb 4-1: SerialNumber: syz [ 1500.746131][ T5878] usb 4-1: config 0 descriptor?? [ 1500.973834][ T5878] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1500.980596][ T5878] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1500.987142][ T5878] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1500.995911][ T5878] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1501.002781][ T5878] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1501.009513][ T5878] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1501.016369][ T5878] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1501.023816][ T5878] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1501.030324][ T5878] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1501.038093][ T5878] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1501.048558][ T5878] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1501.055708][ T5878] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1501.062327][ T5878] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1501.071559][ T5878] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1501.079576][ T5878] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1501.086705][ T5878] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1501.093454][ T5878] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1501.102306][ T5878] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1501.109936][ T5878] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1501.116649][ T5878] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 1501.124049][ T5878] input input153: Timeout waiting for response from device. [ 1501.136969][ T5878] usb 4-1: USB disconnect, device number 123 [ 1501.688523][ T30] audit: type=1326 audit(2000000255.108:5849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24299 comm="syz.6.5399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8630d8efc9 code=0x7ffc0000 [ 1501.721275][ T30] audit: type=1326 audit(2000000255.108:5850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24299 comm="syz.6.5399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8630d8efc9 code=0x7ffc0000 [ 1501.750443][T24300] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1501.754386][ T30] audit: type=1326 audit(2000000255.136:5851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24299 comm="syz.6.5399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f8630d8efc9 code=0x7ffc0000 [ 1501.758313][T24300] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1501.758411][T24300] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1501.785518][ T30] audit: type=1326 audit(2000000255.136:5852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24299 comm="syz.6.5399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8630d8efc9 code=0x7ffc0000 [ 1501.789167][T24300] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 1501.828349][ T30] audit: type=1326 audit(2000000255.136:5853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24299 comm="syz.6.5399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8630d8efc9 code=0x7ffc0000 [ 1501.829140][T24300] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1501.854077][ T30] audit: type=1326 audit(2000000255.136:5854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24299 comm="syz.6.5399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f8630d8efc9 code=0x7ffc0000 [ 1501.866233][T24300] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1501.886409][ T30] audit: type=1326 audit(2000000255.155:5855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24299 comm="syz.6.5399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8630d8efc9 code=0x7ffc0000 [ 1501.891933][T24300] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1501.917169][ T30] audit: type=1326 audit(2000000255.155:5856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24299 comm="syz.6.5399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8630d8efc9 code=0x7ffc0000 [ 1501.926678][T24300] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1501.946629][ T30] audit: type=1326 audit(2000000255.155:5857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24299 comm="syz.6.5399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8630d8efc9 code=0x7ffc0000 [ 1501.980440][T24300] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1501.992174][ T30] audit: type=1326 audit(2000000255.155:5858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24299 comm="syz.6.5399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8630d8efc9 code=0x7ffc0000 [ 1501.993991][T24300] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1502.027212][T24300] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1502.033889][T24300] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1502.041310][ T5823] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 1502.042060][T24300] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 1502.059737][T24300] comedi comedi3: 8255: I/O port conflict (0xffffffff8000008b,4) [ 1502.069551][T24300] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 1502.079233][T24300] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 1502.090260][T24300] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 1502.100588][T24300] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 1502.112228][T24300] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1502.120177][T24300] comedi comedi3: 8255: I/O port conflict (0x1000,4) [ 1502.128261][T24300] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1502.137157][T24300] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1502.144798][T24300] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4) [ 1502.231665][ T5823] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1502.253401][ T5823] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1502.263271][ T5823] usb 4-1: can't read configurations, error -71 [ 1503.160351][ T5823] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1503.356496][ T5823] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1503.368455][ T5823] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1503.379423][ T5823] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1503.393048][ T5823] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1503.400790][ T5823] usb 4-1: New USB device found, idVendor=18d1, idProduct=5028, bcdDevice= 0.00 [ 1503.411095][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1503.422747][ T5823] usb 4-1: config 0 descriptor?? [ 1504.080433][T24317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1504.089666][T24317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1504.109105][ T5823] usbhid 4-1:0.0: can't add hid device: -71 [ 1504.116685][ T5823] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1504.135984][ T5823] usb 4-1: USB disconnect, device number 125 [ 1504.443634][ T24] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1504.550491][ T5835] Bluetooth: hci3: command 0x0405 tx timeout [ 1504.604653][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1504.614616][ T24] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1504.624165][ T24] usb 7-1: config 1 has no interface number 1 [ 1504.632445][ T24] usb 7-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1504.644291][ T24] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1504.659051][ T24] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1504.681424][ T24] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1504.692758][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.701389][ T24] usb 7-1: Product: syz [ 1504.706606][ T24] usb 7-1: Manufacturer: syz [ 1504.716046][ T24] usb 7-1: SerialNumber: syz [ 1504.719845][T24332] overlayfs: failed to resolve './bus': -2 [ 1505.177457][ C1] raw-gadget.1 gadget.6: ignoring, device is not running [ 1505.185659][ C1] raw-gadget.1 gadget.6: ignoring, device is not running [ 1505.193996][ T24] usb 7-1: 2:1 : format type 0 is detected, processed as PCM [ 1505.204790][ T24] usb 7-1: failed to enable PITCH for EP 0x82 [ 1505.211604][ T24] usb 7-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 1505.238805][ T24] usb 7-1: USB disconnect, device number 54 [ 1505.363353][ T5878] usb 4-1: new low-speed USB device number 126 using dummy_hcd [ 1505.537648][ T5878] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1505.551248][ T5878] usb 4-1: string descriptor 0 read error: -22 [ 1505.558405][ T5878] usb 4-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1505.568065][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.580977][ T5878] usb 4-1: config 0 descriptor?? [ 1505.804931][ T5878] dvb-usb: found a 'Sony PlayTV' in warm state. [ 1505.815368][ T5878] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1505.826178][ T5878] dvbdev: DVB: registering new adapter (Sony PlayTV) [ 1505.833299][ T5878] usb 4-1: media controller created [ 1505.858928][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1505.910797][ T5878] DVB: Unable to find symbol dib7000p_attach() [ 1505.918473][ T5878] dvb-usb: no frontend was attached by 'Sony PlayTV' [ 1505.925981][ T5878] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1505.935938][ T5878] dvbdev: DVB: registering new adapter (Sony PlayTV) [ 1505.945957][ T5878] usb 4-1: media controller created [ 1505.959621][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1506.010104][ T5878] DVB: Unable to find symbol dib7000p_attach() [ 1506.016983][ T5878] dvb-usb: no frontend was attached by 'Sony PlayTV' [ 1506.082591][ T5878] rc_core: IR keymap rc-dib0700-rc5 not found [ 1506.089077][ T5878] Registered IR keymap rc-empty [ 1506.094953][ T5878] dvb-usb: could not initialize remote control. [ 1506.101472][ T5878] dvb-usb: Sony PlayTV successfully initialized and connected. [ 1506.115586][ T5878] usb 4-1: USB disconnect, device number 126 [ 1506.133588][ T9] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1506.172861][ T5878] dvb-usb: Sony PlayTV successfully deinitialized and disconnected. [ 1506.316404][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 1506.323808][ T9] usb 7-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1506.333935][ T9] usb 7-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 1506.345792][ T9] usb 7-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1506.361275][ T9] usb 7-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1506.370518][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.379003][ T9] usb 7-1: Product: syz [ 1506.383278][ T9] usb 7-1: Manufacturer: syz [ 1506.388272][ T9] usb 7-1: SerialNumber: syz [ 1506.398892][ T9] hso 7-1:6.0: Can't find BULK IN endpoint [ 1506.598459][T24354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5415'. [ 1506.608336][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 1506.613781][ T5823] usb 7-1: USB disconnect, device number 55 [ 1506.777137][ T5835] Bluetooth: hci3: command 0x0405 tx timeout [ 1507.053086][ T5823] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1507.202976][ T5823] usb 4-1: device descriptor read/64, error -71 [ 1507.448853][ T5878] usb 7-1: new low-speed USB device number 56 using dummy_hcd [ 1507.470346][ T5823] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1507.609253][ T5823] usb 4-1: device descriptor read/64, error -71 [ 1507.622409][ T5878] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1507.631901][ T5878] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.646060][ T5878] usb 7-1: config 0 descriptor?? [ 1507.727392][ T5823] usb usb4-port1: attempt power cycle [ 1507.872413][ T5878] asix 7-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1508.101241][ T5823] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1508.124785][ T5823] usb 4-1: device descriptor read/8, error -71 [ 1508.379708][ T5823] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1508.401970][ T5823] usb 4-1: device descriptor read/8, error -71 [ 1508.518632][ T5823] usb usb4-port1: unable to enumerate USB device [ 1508.528792][ T5878] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1508.541916][ T5878] asix 7-1:0.0: probe with driver asix failed with error -71 [ 1508.557613][ T5878] usb 7-1: USB disconnect, device number 56 [ 1508.882063][ T5878] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1509.056010][ T5878] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1509.068120][ T5878] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1509.079904][ T5878] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1509.094930][ T5878] usb 7-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 1509.104781][ T5878] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.116241][ T5878] usb 7-1: config 0 descriptor?? [ 1509.559262][T24364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1509.568534][T24364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1509.586734][ T5878] aquacomputer_d5next 0003:0C70:F00D.0094: hidraw0: USB HID v0.08 Device [HID 0c70:f00d] on usb-dummy_hcd.6-1/input0 [ 1510.386458][ T9] usb 7-1: USB disconnect, device number 57 [ 1510.444079][ T5823] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1510.552723][T24383] binder: 24382:24383 ioctl c0306201 200000000080 returned -14 [ 1510.591641][T24385] binder: 24384:24385 ioctl 40044591 0 returned -22 [ 1510.599604][T24385] binder: 24384:24385 ioctl c0306201 200000000640 returned -22 [ 1510.626622][ T5823] usb 4-1: Using ep0 maxpacket: 16 [ 1510.634905][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1510.650674][ T5823] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 1510.660229][ T5823] usb 4-1: config 0 has no interface number 0 [ 1510.666844][ T5823] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1510.677568][ T5823] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1510.691341][ T5823] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1510.699266][T24387] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5427'. [ 1510.701016][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1510.701054][ T5823] usb 4-1: Product: syz [ 1510.701070][ T5823] usb 4-1: Manufacturer: syz [ 1510.729287][ T5823] usb 4-1: SerialNumber: syz [ 1510.739416][ T5823] usb 4-1: config 0 descriptor?? [ 1510.745601][T24376] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1510.753308][T24376] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1510.978399][ T9] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1510.989031][T24376] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1510.997152][T24376] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1511.160034][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1511.176532][ T9] usb 7-1: config 249 has an invalid interface number: 207 but max is 1 [ 1511.188964][ T9] usb 7-1: config 249 has an invalid interface number: 164 but max is 1 [ 1511.199102][ T9] usb 7-1: config 249 has no interface number 0 [ 1511.206610][ T9] usb 7-1: config 249 has no interface number 1 [ 1511.216917][ T9] usb 7-1: config 249 interface 207 has no altsetting 0 [ 1511.224539][ T9] usb 7-1: config 249 interface 164 has no altsetting 0 [ 1511.238531][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=1204, bcdDevice= 4.93 [ 1511.248161][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.256755][ T9] usb 7-1: Product: І [ 1511.261218][ T9] usb 7-1: Manufacturer: ᩪ쬀諾誨믭뾃䀷ਣ펷嶈ꪗ쪼ྡ眓볧᫆ⲣ댁絍ꄟ䋻䭛澺碷暇➳覌쉫ओᳫ [ 1511.276035][ T9] usb 7-1: SerialNumber: ヌᘨ耀밡씣া䣾機】韷ₜ驘᝼ﱞ㬑珞뼁Ꙋ{谆샞챾䧚ޞ曵욃퉭ࠢ瞙簡洵溠튢逄繓綤希㺞昒鉜꩚෪囬쬳덆랾ꖵ꒩矺嗖䕵掍쵇瀬仰쇑㿍절ɔ둩淘ꉚﰿﭙ럏䳝䓪€$筯䥢倪㦅诜霧䒾악墍홫몈賴㝼ꔜ鮉桏󨧻﹫ࠉᚙ抣 [ 1511.450894][T24376] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5423'. [ 1511.544897][ T9] usb-storage 7-1:249.207: USB Mass Storage device detected [ 1511.559059][ T9] usb-storage 7-1:249.207: Quirks match for vid 05ac pid 1204: 90 [ 1511.622792][ T9] usb-storage 7-1:249.164: USB Mass Storage device detected [ 1511.633813][ T9] usb-storage 7-1:249.164: Quirks match for vid 05ac pid 1204: 90 [ 1511.682129][ T5823] asix 4-1:0.251 (unnamed net_device) (uninitialized): Invalid PHY address 0x72 [ 1511.705859][ T9] apple-mfi-fastcharge 7-1: USB disconnect, device number 58 [ 1511.912013][ T5823] usb 4-1: USB disconnect, device number 5 [ 1512.125130][ T5823] hid_parser_main: 2 callbacks suppressed [ 1512.125155][ T5823] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 1512.141419][ T5823] hid-generic 0000:0000:0000.0095: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1512.214256][T24408] fido_id[24408]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1512.500348][T24413] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5435'. [ 1512.860647][ T9] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 1513.033324][ T9] usb 4-1: config 0 has no interfaces? [ 1513.040415][ T9] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1513.049907][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.060701][ T9] usb 4-1: config 0 descriptor?? [ 1513.282060][T24415] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5436'. [ 1513.292165][T24415] gretap0: entered promiscuous mode [ 1513.297838][T24415] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5436'. [ 1513.297851][T24416] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5436'. [ 1513.297928][T24416] 0{X: renamed from gretap0 [ 1513.324593][T24416] 0{X: left promiscuous mode [ 1513.329743][T24416] 0{X: entered allmulticast mode [ 1513.336594][T24416] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 1513.354125][T24415] 1{X: renamed from 30{X (while UP) [ 1513.362184][T24415] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 1513.383919][ T24] usb 4-1: USB disconnect, device number 6 [ 1513.502366][ T5823] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1513.664415][ T5823] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1513.676671][ T5823] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1513.687774][ T5823] usb 7-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1513.701899][ T5823] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1513.709358][ T5823] usb 7-1: New USB device found, idVendor=18d1, idProduct=5028, bcdDevice= 0.00 [ 1513.718823][ T5823] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.729671][ T5823] usb 7-1: config 0 descriptor?? [ 1514.092869][T24432] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1514.407756][T24428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1514.421371][T24428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1514.438560][ T5823] usbhid 7-1:0.0: can't add hid device: -71 [ 1514.448498][ T5823] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1514.470053][ T5823] usb 7-1: USB disconnect, device number 59 [ 1514.490996][T24443] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5444'. [ 1514.536880][T24445] overlayfs: missing 'workdir' [ 1514.839220][ T980] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1514.999630][ T980] usb 4-1: Using ep0 maxpacket: 8 [ 1515.013002][ T980] usb 4-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=a8.17 [ 1515.031734][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.040083][ T980] usb 4-1: Product: syz [ 1515.044580][ T980] usb 4-1: Manufacturer: syz [ 1515.049739][ T980] usb 4-1: SerialNumber: syz [ 1515.058143][ T980] usb 4-1: config 0 descriptor?? [ 1515.066710][ T980] hub 4-1:0.0: bad descriptor, ignoring hub [ 1515.073086][ T980] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1515.082607][ T980] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 1515.263710][T24470] netlink: 220 bytes leftover after parsing attributes in process `syz.6.5453'. [ 1515.292837][ T5925] usb 4-1: USB disconnect, device number 7 [ 1515.458373][T24476] netlink: 14568 bytes leftover after parsing attributes in process `syz.6.5456'. [ 1515.877937][ T5925] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1516.064023][ T5925] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1516.074830][ T5925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.083598][ T5925] usb 7-1: Product: syz [ 1516.088108][ T5925] usb 7-1: Manufacturer: syz [ 1516.095606][ T5925] usb 7-1: SerialNumber: syz [ 1516.427763][T24495] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5462'. [ 1516.555772][ T5925] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1516.568919][ T5925] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1516.785869][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1516.946261][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 1516.954772][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1516.977373][ T24] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1516.993721][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1517.007190][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.016930][ T24] usb 4-1: Product: syz [ 1517.024412][ T24] usb 4-1: Manufacturer: syz [ 1517.029144][ T24] usb 4-1: SerialNumber: syz [ 1517.271773][ T24] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 1517.296100][ T24] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1517.313474][ T24] usb 4-1: USB disconnect, device number 8 [ 1517.342973][T23342] udevd[23342]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1518.122751][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1518.293784][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 1518.301165][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1518.312428][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1518.323180][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1518.337298][ T24] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1518.346500][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.360565][ T24] usb 4-1: config 0 descriptor?? [ 1518.538954][ T5925] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 1518.756487][ T5925] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1518.769523][ T5925] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1518.781954][ T5925] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1518.792331][ T5925] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1518.804874][ T5925] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 1518.815331][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 1518.828746][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1518.837554][ T5925] usb 7-1: USB disconnect, device number 60 [ 1518.853693][ T24] usb 4-1: USB disconnect, device number 9 [ 1519.437062][T24511] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5469'. [ 1519.450053][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1519.450073][ T30] audit: type=1326 audit(2000000271.723:5868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24510 comm="syz.3.5469" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a1b38efc9 code=0x0 [ 1519.673550][ T980] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1519.833795][ T980] usb 7-1: Using ep0 maxpacket: 16 [ 1519.839833][ T980] usb 7-1: no configurations [ 1519.844917][ T980] usb 7-1: can't read configurations, error -22 [ 1519.983710][ T980] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1520.034493][T24514] netlink: 'syz.7.5470': attribute type 4 has an invalid length. [ 1520.047150][T24514] netlink: 'syz.7.5470': attribute type 27 has an invalid length. [ 1520.055421][T24514] netlink: 3609 bytes leftover after parsing attributes in process `syz.7.5470'. [ 1520.116346][T24519] netlink: 220 bytes leftover after parsing attributes in process `syz.7.5471'. [ 1520.143982][ T980] usb 7-1: Using ep0 maxpacket: 16 [ 1520.156241][ T980] usb 7-1: no configurations [ 1520.165439][ T980] usb 7-1: can't read configurations, error -22 [ 1520.175332][ T980] usb usb7-port1: attempt power cycle [ 1520.550763][ T980] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1520.572265][ T980] usb 7-1: Using ep0 maxpacket: 16 [ 1520.578148][ T980] usb 7-1: no configurations [ 1520.583859][ T980] usb 7-1: can't read configurations, error -22 [ 1520.668034][ T5925] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1520.721737][ T980] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1520.744176][ T980] usb 7-1: Using ep0 maxpacket: 16 [ 1520.750102][ T980] usb 7-1: no configurations [ 1520.754836][ T980] usb 7-1: can't read configurations, error -22 [ 1520.761427][ T980] usb usb7-port1: unable to enumerate USB device [ 1520.828594][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 1520.838287][ T5925] usb 4-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=79.ba [ 1520.848751][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.857013][ T5925] usb 4-1: Product: syz [ 1520.861674][ T5925] usb 4-1: Manufacturer: syz [ 1520.866288][ T5925] usb 4-1: SerialNumber: syz [ 1520.873563][ T5925] usb 4-1: config 0 descriptor?? [ 1521.095910][ T5925] usb 4-1: can't set first interface for hiFace device. [ 1521.103211][ T5925] snd-usb-hiface 4-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 1521.114972][ T5925] usb 4-1: USB disconnect, device number 10 [ 1522.798868][T24548] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5480'. [ 1523.063910][ T980] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1523.106683][ T5925] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 1523.224267][ T980] usb 7-1: Using ep0 maxpacket: 32 [ 1523.231410][ T980] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 1523.239954][ T980] usb 7-1: config 0 has no interface number 0 [ 1523.249062][ T980] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1523.258570][ T980] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.266805][ T980] usb 7-1: Product: syz [ 1523.271646][ T980] usb 7-1: Manufacturer: syz [ 1523.276279][ T980] usb 7-1: SerialNumber: syz [ 1523.280213][ T5925] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 1523.284298][ T980] usb 7-1: config 0 descriptor?? [ 1523.302216][ T5925] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 1523.308440][ T980] smsc95xx v2.0.0 [ 1523.312925][ T5925] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 1523.750175][ T980] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1523.762112][ T980] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1523.988873][ T980] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1524.000891][ T980] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -32 [ 1524.761505][ T980] usb 7-1: USB disconnect, device number 65 [ 1525.181783][ T980] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1525.368705][ T980] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1525.381429][ T980] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1525.392425][ T980] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1525.405740][ T980] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1525.417197][ T980] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1525.436798][ T980] usb 7-1: config 0 descriptor?? [ 1525.886757][ T980] plantronics 0003:047F:FFFF.0096: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1526.073650][ T5925] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1526.086219][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.108140][ T5925] usb 4-1: can't set config #1, error -71 [ 1526.118094][ T5925] usb 4-1: USB disconnect, device number 11 [ 1526.561240][ C1] plantronics 0003:047F:FFFF.0096: hid_field_extract() called with n (132) > 32! (swapper/1) [ 1526.593820][T24561] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1526.636475][ T5925] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1526.828587][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 1526.844336][ T44] usb 7-1: USB disconnect, device number 66 [ 1526.852404][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1526.880083][ T5925] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1526.895785][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.906358][ T5925] usb 4-1: Product: syz [ 1526.910569][ T5925] usb 4-1: Manufacturer: syz [ 1526.917729][ T5925] usb 4-1: SerialNumber: syz [ 1526.933056][ T5925] usb 4-1: config 0 descriptor?? [ 1526.943122][ T5925] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1526.955954][ T5925] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1527.236231][ T5925] em28xx 4-1:0.0: chip ID is em2840 [ 1527.527728][ T5925] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1527.536046][ T5925] em28xx 4-1:0.0: board has no eeprom [ 1527.619943][ T5925] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1527.628505][ T5925] em28xx 4-1:0.0: dvb set to bulk mode. [ 1527.635263][T23972] em28xx 4-1:0.0: Binding DVB extension [ 1527.652848][ T5925] usb 4-1: USB disconnect, device number 12 [ 1527.660777][ T5925] em28xx 4-1:0.0: Disconnecting em28xx [ 1527.697946][T23972] em28xx 4-1:0.0: Registering input extension [ 1527.704625][ T5925] em28xx 4-1:0.0: Closing input extension [ 1527.710567][ T24] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1527.726548][ T5925] em28xx 4-1:0.0: Freeing device [ 1527.891828][ T24] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1527.901959][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.910145][T24583] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5492'. [ 1527.926674][ T24] usb 7-1: Product: syz [ 1527.931716][ T24] usb 7-1: Manufacturer: syz [ 1527.937236][ T24] usb 7-1: SerialNumber: syz [ 1527.969413][T24585] sg_read: process 627 (syz.4.5493) changed security contexts after opening file descriptor, this is not allowed. [ 1528.382954][T24603] binder: 24602:24603 ioctl 4020ae46 200000000280 returned -22 [ 1528.391517][ T24] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1528.392878][T24603] binder: 24602:24603 ioctl c0306201 200000000240 returned -11 [ 1528.404566][ T24] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1528.721646][ T5925] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1528.859977][ T24] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1528.872409][ T24] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1528.883353][ T24] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1528.894591][ T24] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -32 [ 1528.903725][ T5925] usb 4-1: Using ep0 maxpacket: 8 [ 1528.915066][ T5925] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1528.923454][ T5925] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1528.936189][ T5925] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1528.949393][ T5925] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1528.960895][ T5925] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1528.973737][ T5925] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1528.981197][ T5925] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1528.993571][ T5925] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1529.005715][ T5925] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1529.017162][ T5925] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1529.031033][ T5925] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1529.038565][ T5925] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1529.050039][ T5925] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1529.061767][ T5925] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1529.073529][ T5925] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1529.089343][ T5925] usb 4-1: string descriptor 0 read error: -22 [ 1529.096050][ T5925] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1529.105195][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.124262][ T5925] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1529.399584][T24608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1529.408595][T24608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1530.404124][T24615] netlink: 220 bytes leftover after parsing attributes in process `syz.7.5502'. [ 1530.655442][ T980] usb 7-1: USB disconnect, device number 67 [ 1531.170777][ T5925] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1531.331942][ T5925] usb 7-1: Using ep0 maxpacket: 8 [ 1531.347716][ T5925] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1531.357158][ T5925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.365608][ T5925] usb 7-1: Product: syz [ 1531.369825][ T5925] usb 7-1: Manufacturer: syz [ 1531.374867][ T5925] usb 7-1: SerialNumber: syz [ 1531.381653][ T5925] usb 7-1: config 0 descriptor?? [ 1531.590790][ T980] usb 4-1: USB disconnect, device number 13 [ 1531.606517][T24623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1531.621649][T24623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1531.632761][T24623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1531.649656][T24623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1531.665162][T24623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1531.678188][T24623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1531.690841][T24623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1531.701409][T24623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1531.725723][ T5925] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1531.772270][ T5925] usb write operation failed. (-71) [ 1531.785764][ T5925] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1531.798207][ T5925] dvbdev: DVB: registering new adapter (Terratec H7) [ 1531.806136][ T5925] usb 7-1: media controller created [ 1531.812676][ T5925] usb read operation failed. (-71) [ 1531.818709][ T5925] usb write operation failed. (-71) [ 1531.830995][ T5925] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1531.845901][ T5925] usb 7-1: USB disconnect, device number 68 [ 1532.176102][ T5925] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1532.336686][ T5925] usb 7-1: Using ep0 maxpacket: 32 [ 1532.344371][ T5925] usb 7-1: config 0 has an invalid interface number: 38 but max is 0 [ 1532.352783][ T5925] usb 7-1: config 0 has no interface number 0 [ 1532.360585][ T5925] usb 7-1: config 0 interface 38 has no altsetting 0 [ 1532.370522][ T5925] usb 7-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 1532.380369][ T5925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.388502][ T5925] usb 7-1: Product: syz [ 1532.393020][ T5925] usb 7-1: Manufacturer: syz [ 1532.397656][ T5925] usb 7-1: SerialNumber: syz [ 1532.405895][ T5925] usb 7-1: config 0 descriptor?? [ 1532.417821][ T5925] go7007 7-1:0.38: Sensoray 2250 found [ 1532.425040][ T5925] go7007 7-1:0.38: probe with driver go7007 failed with error -12 [ 1532.561129][ T44] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1532.633888][T24635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1532.648979][T24635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1532.735351][ T44] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1532.747145][ T44] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1532.759827][ T44] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1532.772952][ T44] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1532.780109][ T44] usb 4-1: New USB device found, idVendor=18d1, idProduct=5028, bcdDevice= 0.00 [ 1532.789543][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.799026][ T9] usb 7-1: USB disconnect, device number 69 [ 1532.809782][ T44] usb 4-1: config 0 descriptor?? [ 1533.251859][ T44] hid-multitouch 0003:18D1:5028.0097: item fetching failed at offset 0/4 [ 1533.263220][ T44] hid-multitouch 0003:18D1:5028.0097: probe with driver hid-multitouch failed with error -22 [ 1533.376705][T24641] netlink: 220 bytes leftover after parsing attributes in process `syz.6.5511'. [ 1533.467412][T24637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1533.477295][T24637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1533.489461][ T980] usb 4-1: USB disconnect, device number 14 [ 1534.077733][T24649] netlink: 'syz.3.5514': attribute type 1 has an invalid length. [ 1534.311898][ T30] audit: type=1326 audit(2000000285.608:5869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24642 comm="syz.6.5512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8630d8efc9 code=0x7fc00000 [ 1534.335294][ T30] audit: type=1326 audit(2000000285.608:5870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24642 comm="syz.6.5512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8630d8efc9 code=0x7fc00000 [ 1534.636049][ T9] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1534.798437][ T9] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1534.808286][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.819602][ T9] usb 7-1: config 0 descriptor?? [ 1535.363314][ T980] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1535.523980][ T980] usb 4-1: Using ep0 maxpacket: 32 [ 1535.530693][ T980] usb 4-1: too many configurations: 118, using maximum allowed: 8 [ 1535.540773][ T980] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1535.549071][ T980] usb 4-1: can't read configurations, error -61 [ 1535.694958][ T980] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1535.855223][ T980] usb 4-1: Using ep0 maxpacket: 32 [ 1535.861467][ T980] usb 4-1: too many configurations: 118, using maximum allowed: 8 [ 1535.871702][ T980] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1535.880186][ T980] usb 4-1: can't read configurations, error -61 [ 1535.886956][ T980] usb usb4-port1: attempt power cycle [ 1535.918650][ T9] usb 7-1: Cannot set autoneg [ 1535.923944][ T9] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 1536.223762][T24669] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5521'. [ 1536.252137][ T980] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1536.285552][ T980] usb 4-1: Using ep0 maxpacket: 32 [ 1536.291607][ T980] usb 4-1: too many configurations: 118, using maximum allowed: 8 [ 1536.302948][ T980] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1536.310964][ T980] usb 4-1: can't read configurations, error -61 [ 1536.454201][ T980] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1536.476301][ T980] usb 4-1: Using ep0 maxpacket: 32 [ 1536.482119][ T980] usb 4-1: too many configurations: 118, using maximum allowed: 8 [ 1536.493050][ T980] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1536.500879][ T980] usb 4-1: can't read configurations, error -61 [ 1536.508642][ T980] usb usb4-port1: unable to enumerate USB device [ 1537.370502][T24679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5524'. [ 1537.609231][ T24] usb 7-1: USB disconnect, device number 70 [ 1538.006269][ T24] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1538.187913][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1538.201888][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1538.214652][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1538.227348][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1538.237373][ T24] usb 7-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 1538.246780][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1538.259846][ T24] usb 7-1: config 0 descriptor?? [ 1538.272661][T24697] x_tables: duplicate underflow at hook 1 [ 1538.411397][T24706] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5530'. [ 1538.749328][ T24] kye 0003:0458:0138.0098: unknown main item tag 0x0 [ 1538.757013][ T5925] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1538.765923][ T24] kye 0003:0458:0138.0098: unknown main item tag 0x0 [ 1538.774617][ T24] kye 0003:0458:0138.0098: unknown main item tag 0x0 [ 1538.783633][ T24] kye 0003:0458:0138.0098: unknown main item tag 0x0 [ 1538.790897][ T24] kye 0003:0458:0138.0098: unknown main item tag 0x0 [ 1538.799696][ T24] kye 0003:0458:0138.0098: unknown main item tag 0x0 [ 1538.806466][ T24] kye 0003:0458:0138.0098: unknown main item tag 0x0 [ 1538.815569][ T24] kye 0003:0458:0138.0098: unknown main item tag 0x0 [ 1538.825618][ T24] kye 0003:0458:0138.0098: unknown main item tag 0x0 [ 1538.832865][ T24] kye 0003:0458:0138.0098: unknown main item tag 0x0 [ 1538.841844][ T24] kye 0003:0458:0138.0098: unexpected long global item [ 1538.850207][ T24] kye 0003:0458:0138.0098: parse failed [ 1538.856026][ T24] kye 0003:0458:0138.0098: probe with driver kye failed with error -22 [ 1538.931897][ T5925] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1538.941856][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.950859][ T5925] usb 4-1: Product: syz [ 1538.955547][ T5925] usb 4-1: Manufacturer: syz [ 1538.960628][ T5925] usb 4-1: SerialNumber: syz [ 1539.034034][ T9] usb 7-1: USB disconnect, device number 71 [ 1539.415845][ T5925] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1539.430161][ T5925] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1539.655956][T24712] netlink: 'syz.6.5534': attribute type 21 has an invalid length. [ 1539.664295][T24712] netlink: 156 bytes leftover after parsing attributes in process `syz.6.5534'. [ 1539.872183][ T5925] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1539.885208][ T5925] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1539.895793][ T5925] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1539.906459][ T5925] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 1540.689785][ T5835] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 1540.739341][T24731] pim6reg1: entered promiscuous mode [ 1540.748768][T24731] pim6reg1: entered allmulticast mode [ 1541.420864][T24738] netlink: 220 bytes leftover after parsing attributes in process `syz.6.5541'. [ 1541.636733][ T980] usb 4-1: USB disconnect, device number 19 [ 1542.059077][ T980] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1542.228119][T24759] comedi comedi0: das16m1: I/O port conflict (0x501,8) [ 1542.243559][ T980] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1542.266264][ T980] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1542.289370][ T980] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1542.303922][ T980] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1542.311047][ T980] usb 4-1: New USB device found, idVendor=18d1, idProduct=5028, bcdDevice= 0.00 [ 1542.320945][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1542.336855][ T980] usb 4-1: config 0 descriptor?? [ 1542.789996][ T980] hid-multitouch 0003:18D1:5028.0099: item fetching failed at offset 0/4 [ 1542.805509][ T980] hid-multitouch 0003:18D1:5028.0099: probe with driver hid-multitouch failed with error -22 [ 1542.950815][T24765] netlink: 220 bytes leftover after parsing attributes in process `syz.6.5551'. [ 1543.017663][T24747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1543.028878][T24747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1543.040939][ T5925] usb 4-1: USB disconnect, device number 20 [ 1543.256262][ T980] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1543.432256][ T980] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1543.442365][ T980] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.450532][ T980] usb 7-1: Product: syz [ 1543.454988][ T980] usb 7-1: Manufacturer: syz [ 1543.459674][ T980] usb 7-1: SerialNumber: syz [ 1543.699679][T24770] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1543.864594][T24776] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1543.906938][ T980] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1543.940765][ T980] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1544.383832][ T980] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1544.396067][ T980] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1544.406410][ T980] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1544.417037][ T980] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -32 [ 1544.862829][T24787] netlink: 220 bytes leftover after parsing attributes in process `syz.7.5560'. [ 1544.873070][ T5925] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1545.042494][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 1545.049675][ T5925] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1545.061141][ T5925] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1545.070608][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.078969][ T5925] usb 4-1: Product: syz [ 1545.083145][ T5925] usb 4-1: Manufacturer: syz [ 1545.088007][ T5925] usb 4-1: SerialNumber: syz [ 1545.095083][ T5925] usb 4-1: config 0 descriptor?? [ 1545.103011][ T5925] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1545.111930][ T5925] usb 4-1: Detected FT232R [ 1545.320748][ T5925] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1545.552426][ T5925] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1546.224173][ T5925] usb 7-1: USB disconnect, device number 72 [ 1546.606025][ T5925] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1546.774939][ T5925] usb 7-1: Using ep0 maxpacket: 16 [ 1546.781979][ T5925] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 148, changing to 11 [ 1546.793342][ T5925] usb 7-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 1546.802729][ T5925] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.813211][ T5925] usb 7-1: config 0 descriptor?? [ 1547.058307][ T5925] usbhid 7-1:0.0: can't add hid device: -71 [ 1547.071003][ T5925] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1547.091921][ T5925] usb 7-1: USB disconnect, device number 73 [ 1547.513102][ T5925] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1547.689464][ T5925] usb 7-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1547.698811][ T5925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.707255][ T5925] usb 7-1: Product: syz [ 1547.711635][ T5925] usb 7-1: Manufacturer: syz [ 1547.716672][ T5925] usb 7-1: SerialNumber: syz [ 1547.725904][ T5925] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1547.732716][ T5925] r8152-cfgselector 7-1: config 0 descriptor?? [ 1547.836988][ T24] usb 4-1: USB disconnect, device number 21 [ 1547.885270][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1547.897675][ T24] ftdi_sio 4-1:0.0: device disconnected [ 1547.974213][T24804] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5565'. [ 1548.178732][T24812] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5568'. [ 1548.201397][ T5925] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1548.217562][ T5925] r8152-cfgselector 7-1: bad CDC descriptors [ 1548.235612][ T5925] r8152-cfgselector 7-1: USB disconnect, device number 74 [ 1548.283164][ T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1548.333917][T24819] netlink: 220 bytes leftover after parsing attributes in process `syz.7.5570'. [ 1548.424375][ T24] usb 4-1: device descriptor read/64, error -71 [ 1548.689556][ T24] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1548.828536][ T24] usb 4-1: device descriptor read/64, error -71 [ 1548.946440][ T24] usb usb4-port1: attempt power cycle [ 1549.074456][ T9] usb 7-1: new full-speed USB device number 75 using dummy_hcd [ 1549.238402][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1549.247878][ T9] usb 7-1: not running at top speed; connect to a high speed hub [ 1549.258074][ T9] usb 7-1: config 4 has an invalid interface number: 201 but max is 0 [ 1549.266503][ T9] usb 7-1: config 4 has no interface number 0 [ 1549.272918][ T9] usb 7-1: config 4 interface 201 has no altsetting 0 [ 1549.281728][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice=c0.e3 [ 1549.292242][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.300579][ T9] usb 7-1: Product: syz [ 1549.304934][ T9] usb 7-1: Manufacturer: syz [ 1549.309750][ T9] usb 7-1: SerialNumber: syz [ 1549.322126][ T24] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1549.342703][ T24] usb 4-1: device descriptor read/8, error -71 [ 1549.542861][ T9] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:4.201/input/input157 [ 1549.555059][ T5182] bcm5974 7-1:4.201: could not read from device [ 1549.563970][ T5182] bcm5974 7-1:4.201: could not read from device [ 1549.568272][ T9] usb 7-1: USB disconnect, device number 75 [ 1549.579609][ T5182] bcm5974 7-1:4.201: could not read from device [ 1549.587498][ T5182] bcm5974 7-1:4.201: could not read from device [ 1549.600190][ T24] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1549.623448][ T24] usb 4-1: device descriptor read/8, error -71 [ 1549.748736][ T24] usb usb4-port1: unable to enumerate USB device [ 1550.822536][T24837] netlink: 220 bytes leftover after parsing attributes in process `syz.6.5579'. [ 1551.160129][ T44] usb 7-1: new full-speed USB device number 76 using dummy_hcd [ 1551.210102][T24844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5581'. [ 1551.354977][ T44] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1551.364878][ T44] usb 7-1: not running at top speed; connect to a high speed hub [ 1551.374340][ T44] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1551.384580][ T44] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1551.397383][ T44] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1551.406697][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=12 [ 1551.414915][ T44] usb 7-1: Product: syz [ 1551.419486][ T44] usb 7-1: Manufacturer: syz [ 1551.424196][ T44] usb 7-1: SerialNumber: syz [ 1551.598553][T16576] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1551.693175][ T44] usb 7-1: 0:2 : does not exist [ 1551.699530][ T44] usb 7-1: unit 129 not found! [ 1551.738396][ T44] usb 7-1: USB disconnect, device number 76 [ 1551.773109][T23341] udevd[23341]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1551.774390][T16576] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1551.828993][T16576] usb 4-1: config 6 has an invalid interface number: 200 but max is 0 [ 1551.838885][T16576] usb 4-1: config 6 has no interface number 0 [ 1551.847026][T16576] usb 4-1: config 6 interface 200 altsetting 8 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1551.863816][T16576] usb 4-1: config 6 interface 200 has no altsetting 0 [ 1551.879306][T16576] usb 4-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 1551.888994][T16576] usb 4-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 1551.897266][T16576] usb 4-1: Product: ဵ [ 1551.902262][T16576] usb 4-1: Manufacturer: syz [ 1551.907271][T16576] usb 4-1: SerialNumber: ఇ [ 1552.529053][ T44] usb 7-1: new full-speed USB device number 77 using dummy_hcd [ 1552.692566][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 1552.704689][T24864] netlink: 220 bytes leftover after parsing attributes in process `syz.7.5589'. [ 1552.716262][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1552.736793][ T44] usb 7-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 1552.746732][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.754907][ T44] usb 7-1: Product: syz [ 1552.759206][ T44] usb 7-1: Manufacturer: syz [ 1552.767313][ T44] usb 7-1: SerialNumber: syz [ 1552.776767][ T44] usb 7-1: config 0 descriptor?? [ 1552.793028][ T44] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 1553.008515][ T9] usb 7-1: USB disconnect, device number 77 [ 1553.962146][ T5925] usb 7-1: new full-speed USB device number 78 using dummy_hcd [ 1554.135124][ T5925] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1554.143379][ T5925] usb 7-1: config 0 has no interface number 0 [ 1554.150023][ T5925] usb 7-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=8c.1e [ 1554.160648][ T5925] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.173166][ T5925] usb 7-1: config 0 descriptor?? [ 1554.188236][ T5925] usb 7-1: selecting invalid altsetting 1 [ 1554.194437][ T5925] dvb_ttusb_budget: ttusb_init_controller: error [ 1554.201172][ T5925] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1554.274607][ T5925] DVB: Unable to find symbol ves1820_attach() [ 1554.321315][ T5925] DVB: Unable to find symbol stv0297_attach() [ 1554.328103][ T5925] dvb_ttusb_budget: no frontend driver found for device [0b48:1004] [ 1554.399480][ T5925] usb 7-1: USB disconnect, device number 78 [ 1554.488523][T16576] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 1554.497096][T16576] dvb-usb: bulk message failed: -71 (3/0) [ 1554.508753][T16576] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1554.521880][T16576] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 1554.531609][T16576] usb 4-1: media controller created [ 1554.554386][T16576] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1554.584579][T24890] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5598'. [ 1554.588611][T16576] dvb-usb: bulk message failed: -71 (6/0) [ 1554.604304][T16576] dvb-usb: bulk message failed: -71 (6/0) [ 1554.610677][T16576] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 1554.623563][T16576] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input158 [ 1554.640052][T16576] dvb-usb: schedule remote query interval to 150 msecs. [ 1554.647360][T16576] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 1554.668347][T16576] usb 4-1: USB disconnect, device number 26 [ 1554.770112][T16576] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 1555.246390][ T5925] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1555.405968][ T5925] usb 7-1: Using ep0 maxpacket: 16 [ 1555.412831][ T5925] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1555.427343][ T5925] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1555.437750][ T5925] usb 7-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 1555.447100][ T5925] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.460553][ T5925] usb 7-1: config 0 descriptor?? [ 1555.701424][ T5925] input: HID 0458:5012 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5012.009A/input/input159 [ 1555.738431][T16576] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1555.758555][ T5925] input: HID 0458:5012 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5012.009A/input/input160 [ 1555.848346][ T5925] kye 0003:0458:5012.009A: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.6-1/input0 [ 1555.876011][ T5925] usb 7-1: USB disconnect, device number 79 [ 1555.921871][T16576] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1555.943537][T16576] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1555.959717][T16576] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1555.961790][T24903] fido_id[24903]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1555.979999][T16576] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1556.007512][T16576] usb 4-1: New USB device found, idVendor=18d1, idProduct=5028, bcdDevice= 0.00 [ 1556.018319][T16576] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.033344][T16576] usb 4-1: config 0 descriptor?? [ 1556.341230][ T5925] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1556.481748][T16576] hid-multitouch 0003:18D1:5028.009B: item fetching failed at offset 0/4 [ 1556.483280][T24917] netlink: 220 bytes leftover after parsing attributes in process `syz.7.5608'. [ 1556.497184][T16576] hid-multitouch 0003:18D1:5028.009B: probe with driver hid-multitouch failed with error -22 [ 1556.529134][ T5925] usb 7-1: Using ep0 maxpacket: 32 [ 1556.544673][ T5925] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1556.563910][ T5925] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1556.579382][ T5925] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1556.596434][ T5925] usb 7-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 1556.605244][ T5925] usb 7-1: Manufacturer: syz [ 1556.622170][ T5925] usb 7-1: config 0 descriptor?? [ 1556.666647][T24921] netlink: 'syz.7.5610': attribute type 21 has an invalid length. [ 1556.675572][T24921] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5610'. [ 1556.697256][T24897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1556.708520][T24897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1556.732621][T16576] usb 4-1: USB disconnect, device number 27 [ 1557.017782][ T5925] usbhid 7-1:0.0: can't add hid device: -71 [ 1557.029899][ T5925] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1557.042587][ T5925] usb 7-1: USB disconnect, device number 80 [ 1557.080486][T24935] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5614'. [ 1557.327562][T24939] Invalid ELF header magic: != ELF [ 1557.334335][T24939] Invalid ELF header magic: != ELF [ 1557.598543][ T5925] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1557.769809][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 1557.777236][ T5925] usb 4-1: config 252 has an invalid interface number: 15 but max is 0 [ 1557.786025][ T5925] usb 4-1: config 252 has no interface number 0 [ 1557.792812][ T5925] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 1557.807860][ T5925] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1557.817401][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.826008][ T5925] usb 4-1: Product: syz [ 1557.830776][ T5925] usb 4-1: Manufacturer: syz [ 1557.836052][ T5925] usb 4-1: SerialNumber: syz [ 1557.852945][ T5925] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1558.062278][T24940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1558.071629][T24940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1558.082676][T12249] usb 4-1: Failed to submit usb control message: -71 [ 1558.083972][ T5925] usb 4-1: USB disconnect, device number 28 [ 1558.096480][T12249] usb 4-1: unable to send the bmi data to the device: -71 [ 1558.104351][T12249] usb 4-1: unable to get target info from device [ 1558.110921][T12249] usb 4-1: could not get target info (-71) [ 1558.118511][T12249] usb 4-1: could not probe fw (-71) [ 1558.251113][T16576] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 1558.411435][T16576] usb 7-1: Using ep0 maxpacket: 16 [ 1558.418911][T16576] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1558.431745][T16576] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1558.441327][T16576] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.452051][T16576] usb 7-1: config 0 descriptor?? [ 1558.782374][T24953] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5619'. [ 1558.895643][T16576] mcp2221 0003:04D8:00DD.009C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 1558.913430][T24958] misc userio: Begin command sent, but we're already running [ 1558.923345][T24958] misc userio: Begin command sent, but we're already running [ 1558.931851][T24958] misc userio: Begin command sent, but we're already running [ 1558.940447][T24958] misc userio: Begin command sent, but we're already running [ 1558.948325][T24958] misc userio: Begin command sent, but we're already running [ 1558.959768][T24958] misc userio: Begin command sent, but we're already running [ 1559.228300][T24964] kAFS: No cell specified [ 1559.326644][ T9] usb 7-1: USB disconnect, device number 81 [ 1560.240260][ T44] usb 7-1: new full-speed USB device number 82 using dummy_hcd [ 1560.411520][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1560.426594][ T44] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1560.436479][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1560.445968][ T44] usb 7-1: Product: syz [ 1560.450874][ T44] usb 7-1: Manufacturer: syz [ 1560.462001][ T44] usb 7-1: SerialNumber: syz [ 1560.471683][ T44] usb 7-1: config 0 descriptor?? [ 1560.586089][ T9] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1560.597933][ T9] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1560.608744][ T9] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1560.625690][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1560.632949][ T9] usb 4-1: New USB device found, idVendor=18d1, idProduct=5028, bcdDevice= 0.00 [ 1560.643004][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.659999][ T9] usb 4-1: config 0 descriptor?? [ 1560.694332][ T44] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1560.700379][T24978] netlink: 220 bytes leftover after parsing attributes in process `syz.7.5628'. [ 1560.857545][T24983] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5630'. [ 1561.135295][ T9] hid-multitouch 0003:18D1:5028.009D: item fetching failed at offset 0/4 [ 1561.154700][ T9] hid-multitouch 0003:18D1:5028.009D: probe with driver hid-multitouch failed with error -22 [ 1561.352014][T24971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1561.361215][T24971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1561.378112][ T9] usb 4-1: USB disconnect, device number 29 [ 1562.256319][ T44] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1562.269098][ T44] usb 7-1: USB disconnect, device number 82 [ 1562.390111][T16576] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1562.550466][T16576] usb 4-1: Using ep0 maxpacket: 16 [ 1562.557827][T16576] usb 4-1: config 0 interface 0 altsetting 65 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1562.570068][T16576] usb 4-1: config 0 interface 0 altsetting 65 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1562.584117][T16576] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1562.591057][T16576] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1562.600743][T16576] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1562.611992][T16576] usb 4-1: config 0 descriptor?? [ 1562.864907][T16576] usbhid 4-1:0.0: can't add hid device: -71 [ 1562.885240][T16576] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1562.910618][T16576] usb 4-1: USB disconnect, device number 30 [ 1562.953933][T25006] binder: 25004:25006 ioctl c0306201 200000000080 returned -14 [ 1562.956155][T25007] input: syz1 as /devices/virtual/input/input163 [ 1563.256328][ T5925] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 1563.288356][T16576] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1563.369321][T25011] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5639'. [ 1563.423569][ T5925] usb 7-1: config 0 has an invalid interface number: 19 but max is 0 [ 1563.433485][ T5925] usb 7-1: config 0 has no interface number 0 [ 1563.440682][ T5925] usb 7-1: config 0 interface 19 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1563.453037][ T5925] usb 7-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1563.455474][T16576] usb 4-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=7b.41 [ 1563.468228][ T5925] usb 7-1: New USB device found, idVendor=046d, idProduct=c71c, bcdDevice= 0.00 [ 1563.482761][ T5925] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.495888][T16576] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.501219][ T5925] usb 7-1: config 0 descriptor?? [ 1563.505085][T16576] usb 4-1: Product: syz [ 1563.516116][T16576] usb 4-1: Manufacturer: syz [ 1563.520833][T16576] usb 4-1: SerialNumber: syz [ 1563.544586][T16576] usb 4-1: config 0 descriptor?? [ 1563.553811][T16576] gspca_main: kinect-2.14.0 probing 045e:02bf [ 1563.772573][ T980] usb 4-1: USB disconnect, device number 31 [ 1563.954718][ T5925] logitech-djreceiver 0003:046D:C71C.009E: ignoring exceeding usage max [ 1563.967657][ T5925] logitech-djreceiver 0003:046D:C71C.009E: hidraw0: USB HID v0.00 Device [HID 046d:c71c] on usb-dummy_hcd.6-1/input19 [ 1564.169179][ T980] usb 7-1: USB disconnect, device number 83 [ 1564.760073][T25029] netlink: 'syz.6.5645': attribute type 1 has an invalid length. [ 1564.768436][T25029] netlink: 'syz.6.5645': attribute type 3 has an invalid length. [ 1564.777173][T25029] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5645'. [ 1564.829685][T25031] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5646'. [ 1564.912386][T25035] netlink: 220 bytes leftover after parsing attributes in process `syz.6.5648'. [ 1565.005511][T25042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1565.016530][T25042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1565.260202][ T5925] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 1565.429428][ T5925] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1565.440099][ T5925] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1565.450572][ T5925] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1565.460141][ T5925] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1565.468634][ T5925] usb 7-1: SerialNumber: syz [ 1565.545100][T23972] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1565.700729][ T5925] usb 7-1: 0:2 : does not exist [ 1565.715680][ T5925] usb 7-1: USB disconnect, device number 84 [ 1565.730653][T23972] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1565.742477][T23972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.757369][T23972] usb 4-1: Product: syz [ 1565.765416][T23972] usb 4-1: Manufacturer: syz [ 1565.770236][T23972] usb 4-1: SerialNumber: syz [ 1565.771468][T23341] udevd[23341]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1566.228124][T23972] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1566.240664][T23972] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1566.364444][T25049] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5653'. [ 1566.374454][T25049] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5653'. [ 1566.385221][T25049] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5653'. [ 1566.448881][ T5925] libceph: connect (1)[c::]:6789 error -101 [ 1566.455560][ T5925] libceph: mon0 (1)[c::]:6789 connect error [ 1566.733860][ T5925] libceph: connect (1)[c::]:6789 error -101 [ 1566.749319][ T5925] libceph: mon0 (1)[c::]:6789 connect error [ 1566.777010][T25057] bridge_slave_1: mtu greater than device maximum [ 1566.897133][T23972] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 1566.910489][T23972] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1566.921327][T23972] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1566.932899][T23972] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 1567.299833][T23972] libceph: connect (1)[c::]:6789 error -101 [ 1567.306126][T23972] libceph: mon0 (1)[c::]:6789 connect error [ 1567.329324][T25051] ceph: No mds server is up or the cluster is laggy [ 1567.468839][T25065] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5658'. [ 1568.529405][T23972] usb 4-1: USB disconnect, device number 32 [ 1576.341471][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1600.465084][ T5835] Bluetooth: hci3: command 0x0405 tx timeout [ 1601.199662][T25086] dlm: no locking on control device [ 1601.216654][T25086] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1601.244896][T25086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5663'. [ 1601.472589][T25101] netlink: 220 bytes leftover after parsing attributes in process `syz.7.5670'. [ 1601.482681][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1601.577273][ T44] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 1601.653820][ T9] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1601.665336][ T9] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1601.677605][ T9] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1601.691808][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1601.698984][ T9] usb 4-1: New USB device found, idVendor=18d1, idProduct=5028, bcdDevice= 0.00 [ 1601.708264][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1601.718702][ T9] usb 4-1: config 0 descriptor?? [ 1601.762480][ T44] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1601.772690][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1601.785525][ T44] usb 7-1: config 0 descriptor?? [ 1601.797194][ T44] cp210x 7-1:0.0: cp210x converter detected [ 1602.016243][T25093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1602.025926][T25093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1602.161245][ T9] hid-multitouch 0003:18D1:5028.009F: item fetching failed at offset 0/4 [ 1602.170900][ T9] hid-multitouch 0003:18D1:5028.009F: probe with driver hid-multitouch failed with error -22 [ 1602.253589][ T44] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1602.263740][ T44] cp210x 7-1:0.0: GPIO initialisation failed: -524 [ 1602.275484][ T44] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1602.373096][T25087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1602.382640][T25087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1602.396577][ T44] usb 4-1: USB disconnect, device number 33 [ 1602.479644][ T5925] usb 7-1: USB disconnect, device number 85 [ 1602.490665][ T5925] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1602.499562][ T5925] cp210x 7-1:0.0: device disconnected [ 1603.107877][T25110] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1603.107877][T25110] The task syz.3.5672 (25110) triggered the difference, watch for misbehavior. [ 1603.299054][ T9] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 1603.459861][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 1603.469178][ T9] usb 7-1: config 0 interface 0 altsetting 187 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1603.481305][ T9] usb 7-1: config 0 interface 0 altsetting 187 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1603.494882][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1603.503416][ T9] usb 7-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1603.512962][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.524003][ T9] usb 7-1: config 0 descriptor?? [ 1603.807334][T25111] netlink: 'syz.6.5673': attribute type 4 has an invalid length. [ 1604.051117][ T9] uclogic 0003:5543:0781.00A0: hidraw0: USB HID v0.09 Device [HID 5543:0781] on usb-dummy_hcd.6-1/input0 [ 1604.283169][ T9] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 1604.443726][ T9] usb 4-1: Invalid ep0 maxpacket: 9 [ 1604.583086][ T9] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 1604.744640][ T9] usb 4-1: Invalid ep0 maxpacket: 9 [ 1604.750681][ T9] usb usb4-port1: attempt power cycle [ 1604.881047][T25125] syzkaller1: entered promiscuous mode [ 1604.886999][T25125] syzkaller1: entered allmulticast mode [ 1605.117275][ T9] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 1605.139812][ T9] usb 4-1: Invalid ep0 maxpacket: 9 [ 1605.277647][ T9] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 1605.299629][ T9] usb 4-1: Invalid ep0 maxpacket: 9 [ 1605.305213][ T9] usb usb4-port1: unable to enumerate USB device [ 1606.279531][ T9] usb 7-1: USB disconnect, device number 86 [ 1606.327019][T25129] netlink: 220 bytes leftover after parsing attributes in process `syz.6.5681'. [ 1607.566490][T23972] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 1607.684171][ T5925] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1607.743488][T23972] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1607.753123][T23972] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1607.762087][T23972] usb 7-1: Product: syz [ 1607.766845][T23972] usb 7-1: Manufacturer: syz [ 1607.772077][T23972] usb 7-1: SerialNumber: syz [ 1607.844488][ T5925] usb 4-1: Using ep0 maxpacket: 8 [ 1607.852360][ T5925] usb 4-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 1607.862898][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.877247][ T5925] usb 4-1: config 0 descriptor?? [ 1608.216729][T23972] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1608.228949][T23972] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1608.333763][ T5925] magicmouse 0003:05AC:0324.00A1: hidraw0: USB HID v0.05 Device [HID 05ac:0324] on usb-dummy_hcd.3-1/input0 [ 1608.549633][T25135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1608.563981][T25135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1608.573073][T25135] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5683'. [ 1608.588988][T16576] usb 4-1: USB disconnect, device number 38 [ 1608.886752][T23972] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 1608.898794][T23972] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1608.908797][T23972] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1608.919366][T23972] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -32 [ 1609.167804][T25153] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5690'. [ 1609.246739][T25155] Bluetooth: MGMT ver 1.23 [ 1609.673470][ T24] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1609.865897][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 1609.876192][ T24] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1609.886009][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.894411][ T24] usb 4-1: Product: syz [ 1609.898824][ T24] usb 4-1: Manufacturer: syz [ 1609.903447][ T24] usb 4-1: SerialNumber: syz [ 1610.349447][T25164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5693'. [ 1610.426789][ T24] mxuport 4-1:254.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 1610.436459][ T24] mxuport 4-1:254.0: probe with driver mxuport failed with error -5 [ 1610.545068][T16576] usb 7-1: USB disconnect, device number 87 [ 1610.924763][T16576] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 1611.087244][T16576] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1611.098761][T16576] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1611.108935][T16576] usb 7-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1611.122299][T16576] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1611.129048][T16576] usb 7-1: New USB device found, idVendor=18d1, idProduct=5028, bcdDevice= 0.00 [ 1611.138191][T16576] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1611.149067][T16576] usb 7-1: config 0 descriptor?? [ 1611.592474][T16576] hid-multitouch 0003:18D1:5028.00A2: item fetching failed at offset 0/4 [ 1611.603736][T16576] hid-multitouch 0003:18D1:5028.00A2: probe with driver hid-multitouch failed with error -22 [ 1611.810031][T25170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1611.826524][T25170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1611.842078][ T9] usb 7-1: USB disconnect, device number 88 [ 1612.480679][T25181] netlink: 'syz.6.5699': attribute type 29 has an invalid length. [ 1612.490514][T25181] netlink: 'syz.6.5699': attribute type 29 has an invalid length. [ 1612.534377][T25186] netlink: 220 bytes leftover after parsing attributes in process `syz.6.5700'. [ 1612.654621][ T24] usb 4-1: USB disconnect, device number 39 [ 1612.828719][T16576] usb 7-1: new full-speed USB device number 89 using dummy_hcd [ 1613.005574][T16576] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1613.014754][T16576] usb 7-1: not running at top speed; connect to a high speed hub [ 1613.023972][T16576] usb 7-1: config 6 has an invalid interface number: 150 but max is 0 [ 1613.034215][T16576] usb 7-1: config 6 has an invalid interface association descriptor of length 2, skipping [ 1613.042325][ T24] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1613.044760][T16576] usb 7-1: config 6 has no interface number 0 [ 1613.058475][T16576] usb 7-1: config 6 interface 150 altsetting 3 endpoint 0x6 has an invalid bInterval 0, changing to 4 [ 1613.069822][T16576] usb 7-1: config 6 interface 150 has no altsetting 0 [ 1613.079891][T16576] usb 7-1: New USB device found, idVendor=12d1, idProduct=76d8, bcdDevice=5d.76 [ 1613.089641][T16576] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.098238][T16576] usb 7-1: Product: syz [ 1613.102659][T16576] usb 7-1: Manufacturer: syz [ 1613.108261][T16576] usb 7-1: SerialNumber: syz [ 1613.219052][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1613.228815][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.237432][ T24] usb 4-1: Product: syz [ 1613.241626][ T24] usb 4-1: Manufacturer: syz [ 1613.246654][ T24] usb 4-1: SerialNumber: syz [ 1613.344248][T16576] usb 7-1: USB disconnect, device number 89 [ 1613.689609][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1613.701966][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1614.254278][T25205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1614.270998][T25205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1614.507737][T23972] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 1614.575879][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 1614.578938][T25208] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5709'. [ 1614.589868][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1614.590590][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1614.626369][ T24] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 1614.692899][T23972] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1614.704386][T23972] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1614.715436][T23972] usb 7-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 1614.725207][T23972] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.747666][T23972] usb 7-1: config 0 descriptor?? [ 1614.975052][T23972] usbhid 7-1:0.0: can't add hid device: -71 [ 1614.981370][T23972] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1614.992968][T23972] usb 7-1: USB disconnect, device number 90 [ 1615.901199][ T9] usb 4-1: USB disconnect, device number 40 [ 1615.983528][T23972] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 1616.000975][T25226] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xee [ 1616.143944][T23972] usb 7-1: Using ep0 maxpacket: 32 [ 1616.155351][T23972] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1616.167157][T23972] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1032, setting to 1024 [ 1616.179548][T23972] usb 7-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 1616.198527][T23972] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1616.222354][T23972] usb 7-1: config 0 descriptor?? [ 1616.233751][T25224] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1616.330939][T25235] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5719'. [ 1616.707242][T23972] hid_parser_main: 74 callbacks suppressed [ 1616.707270][T23972] logitech 0003:046D:C293.00A3: unknown main item tag 0x0 [ 1616.721029][T23972] logitech 0003:046D:C293.00A3: reserved main item tag 0xd [ 1616.729042][T23972] logitech 0003:046D:C293.00A3: unknown global tag 0xd [ 1616.736107][T23972] logitech 0003:046D:C293.00A3: item 0 0 1 13 parsing failed [ 1616.744204][T23972] logitech 0003:046D:C293.00A3: parse failed [ 1616.751148][T23972] logitech 0003:046D:C293.00A3: probe with driver logitech failed with error -22 [ 1616.760912][ T44] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1616.924202][ T9] usb 7-1: USB disconnect, device number 91 [ 1616.935473][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 1616.946601][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 1616.958300][ T44] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 1616.971200][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1616.982735][ T44] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1616.995549][ T44] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1617.005101][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1617.013177][ T44] usb 4-1: Product: syz [ 1617.017887][ T44] usb 4-1: Manufacturer: syz [ 1617.022596][ T44] usb 4-1: SerialNumber: syz [ 1617.029602][ T44] usb 4-1: config 0 descriptor?? [ 1617.035416][T25239] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1617.047613][ C1] port100 4-1:0.0: NFC: Urb failure (status -71) [ 1617.055913][ T44] port100 4-1:0.0: NFC: Could not get supported command types [ 1617.256299][ T9] usb 7-1: new low-speed USB device number 92 using dummy_hcd [ 1617.264338][ T44] usb 4-1: USB disconnect, device number 41 [ 1617.419353][ T9] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1617.428391][ T9] usb 7-1: config 179 has no interface number 0 [ 1617.435028][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1617.447265][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1617.457492][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1617.469014][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 1617.480666][ T9] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1617.494557][ T9] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1617.504088][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.515900][T25224] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1617.529148][ T9] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1617.542183][ T9] xpad 7-1:179.65: probe with driver xpad failed with error -90 [ 1617.993093][T25248] binfmt_misc: register: failed to install interpreter file ./cgroup [ 1618.176285][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1618.290199][T16576] usb 7-1: USB disconnect, device number 92 [ 1618.343870][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1618.356367][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.365042][ T9] usb 4-1: Product: syz [ 1618.369827][ T9] usb 4-1: Manufacturer: syz [ 1618.374459][ T9] usb 4-1: SerialNumber: syz [ 1618.397995][T25255] netlink: 220 bytes leftover after parsing attributes in process `syz.6.5728'. [ 1618.450263][T25258] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN PTI [ 1618.462296][T25258] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] [ 1618.470881][T25258] CPU: 0 UID: 0 PID: 25258 Comm: syz.6.5729 Not tainted syzkaller #0 PREEMPT(full) [ 1618.480266][T25258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1618.490510][T25258] RIP: 0010:h5_recv+0x146/0x930 [ 1618.495430][T25258] Code: 20 48 c1 ea 03 48 89 54 24 28 48 89 d8 48 c1 e8 03 48 89 44 24 50 44 89 64 24 14 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 30 <80> 3c 01 00 74 08 4c 89 ef e8 ec e5 e1 f9 4d 8b 65 00 31 ff 4c 89 [ 1618.515317][T25258] RSP: 0018:ffffc9000b41fc20 EFLAGS: 00010202 [ 1618.521399][T25258] RAX: dffffc0000000000 RBX: 00000000000002e8 RCX: 000000000000005f [ 1618.529399][T25258] RDX: 000000000000005e RSI: 0000000000000001 RDI: 0000000000000000 [ 1618.537571][T25258] RBP: ffffc9000b41fd40 R08: ffff88805d9a501f R09: 1ffff1100bb34a03 [ 1618.546160][T25258] R10: dffffc0000000000 R11: ffffffff8844e9c0 R12: 0000000000000001 [ 1618.554383][T25258] R13: 00000000000002f8 R14: ffff88805d9a5010 R15: ffffc9000b41fde0 [ 1618.562560][T25258] FS: 00007f8631b586c0(0000) GS:ffff888125a9f000(0000) knlGS:0000000000000000 [ 1618.571498][T25258] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1618.578079][T25258] CR2: 00007f8631b58d58 CR3: 00000000281c8000 CR4: 00000000003526f0 [ 1618.586058][T25258] Call Trace: [ 1618.589338][T25258] [ 1618.592271][T25258] ? __pfx_h5_recv+0x10/0x10 [ 1618.596959][T25258] ? rcu_read_lock_any_held+0xb3/0x120 [ 1618.602604][T25258] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1618.608693][T25258] ? tty_audit_push+0x7c/0x250 [ 1618.613465][T25258] hci_uart_tty_receive+0x194/0x220 [ 1618.618757][T25258] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 1618.624757][T25258] tiocsti+0x23c/0x2c0 [ 1618.628829][T25258] ? __pfx_tiocsti+0x10/0x10 [ 1618.633475][T25258] ? __fget_files+0x3a0/0x420 [ 1618.638243][T25258] ? __fget_files+0x2a/0x420 [ 1618.642842][T25258] tty_ioctl+0x626/0xde0 [ 1618.647286][T25258] ? __pfx_tty_ioctl+0x10/0x10 [ 1618.652051][T25258] __se_sys_ioctl+0xfc/0x170 [ 1618.656644][T25258] do_syscall_64+0xfa/0xfa0 [ 1618.661160][T25258] ? lockdep_hardirqs_on+0x9c/0x150 [ 1618.666367][T25258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1618.672536][T25258] ? clear_bhb_loop+0x60/0xb0 [ 1618.677241][T25258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1618.683336][T25258] RIP: 0033:0x7f8630d8efc9 [ 1618.687768][T25258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1618.707726][T25258] RSP: 002b:00007f8631b58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1618.716149][T25258] RAX: ffffffffffffffda RBX: 00007f8630fe6090 RCX: 00007f8630d8efc9 [ 1618.724127][T25258] RDX: 0000200000000340 RSI: 0000000000005412 RDI: 0000000000000005 [ 1618.732537][T25258] RBP: 00007f8630e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1618.740534][T25258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1618.748615][T25258] R13: 00007f8630fe6128 R14: 00007f8630fe6090 R15: 00007ffd7bf1dc78 [ 1618.756687][T25258] [ 1618.759709][T25258] Modules linked in: [ 1618.764741][T25258] ---[ end trace 0000000000000000 ]--- [ 1618.770542][T25258] RIP: 0010:h5_recv+0x146/0x930 [ 1618.778083][T25258] Code: 20 48 c1 ea 03 48 89 54 24 28 48 89 d8 48 c1 e8 03 48 89 44 24 50 44 89 64 24 14 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 30 <80> 3c 01 00 74 08 4c 89 ef e8 ec e5 e1 f9 4d 8b 65 00 31 ff 4c 89 [ 1618.799272][T25258] RSP: 0018:ffffc9000b41fc20 EFLAGS: 00010202 [ 1618.805582][T25258] RAX: dffffc0000000000 RBX: 00000000000002e8 RCX: 000000000000005f [ 1618.813775][T25258] RDX: 000000000000005e RSI: 0000000000000001 RDI: 0000000000000000 [ 1618.821829][T25258] RBP: ffffc9000b41fd40 R08: ffff88805d9a501f R09: 1ffff1100bb34a03 [ 1618.831031][T25258] R10: dffffc0000000000 R11: ffffffff8844e9c0 R12: 0000000000000001 [ 1618.839199][T25258] R13: 00000000000002f8 R14: ffff88805d9a5010 R15: ffffc9000b41fde0 [ 1618.847204][T25258] FS: 00007f8631b586c0(0000) GS:ffff888125b9f000(0000) knlGS:0000000000000000 [ 1618.856302][T25258] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1618.862973][T25258] CR2: 00007f862eff5f98 CR3: 00000000281c8000 CR4: 00000000003526f0 [ 1618.871132][T25258] DR0: 0000000000000005 DR1: 00000000000001f8 DR2: 0000000000020083 [ 1618.879315][T25258] DR3: 0000000000000095 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1618.889594][T25258] Kernel panic - not syncing: Fatal exception [ 1618.895962][T25258] Kernel Offset: disabled [ 1618.900290][T25258] Rebooting in 86400 seconds..