last executing test programs: 1m26.013533354s ago: executing program 2 (id=518): r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x20, 0x40, 0x3, 0x6, {{0x5, 0x4, 0x2, 0x9, 0x14, 0x68, 0xfffc, 0x1, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x16}}}}}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000040)={'veth1_to_batadv\x00', {0x2, 0x4e20, @empty=0xffffff00}}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x24, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r6}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000a0}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, r7, 0x1, 0x0, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x101, 0xd}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x15}, 0x2004c088) r9 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r10 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r10, &(0x7f0000000f00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r10, &(0x7f0000002f40)={0x130, 0x0, r11, {0xffffffffffffffff, 0x80000333, 0x0, '\x00', {0x10, 0x800, 0x5, 0x7fff, 0x0, r12, 0x4000, '\x00', 0x3, 0x9, 0x9, 0x101, {0xffffffffffff8009, 0x5}, {0x8, 0x4}, {0x1, 0x9}, {0xa, 0x6}, 0x9, 0xdc44, 0xbcf, 0x1}}}, 0x130) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r9) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x3c, r13, 0x1, 0x70bd2d, 0x0, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) r14 = socket$xdp(0x2c, 0x3, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x40080) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) r16 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r16, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r15, 0x84, 0x18, &(0x7f0000000040)={r17, 0x1}, 0x8) setsockopt$XDP_UMEM_REG(r14, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) syz_open_dev$sndctrl(&(0x7f0000000180), 0x0, 0x0) 1m25.928822695s ago: executing program 2 (id=519): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000ff840600ac141430e0000003808a8972bd0b72e4108296a3d206163944f8afc1bf505602da9168d6f9ce320068ff1f7e345a170d1423c2e18c8ed410c8aab9a20b514d2b583b90a86da4483488c0fdc6c2"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000}, 0x1) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) recvmmsg(r0, &(0x7f0000006e40)=[{{0x0, 0x0, &(0x7f0000005300)=[{&(0x7f0000000700)=""/86, 0x56}], 0x1}, 0x7}], 0x1, 0x2, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x8, 0x90bd41) write$char_usb(r4, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) (async) socket(0x11, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) (async) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) (async) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000ff840600ac141430e0000003808a8972bd0b72e4108296a3d206163944f8afc1bf505602da9168d6f9ce320068ff1f7e345a170d1423c2e18c8ed410c8aab9a20b514d2b583b90a86da4483488c0fdc6c2"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000}, 0x1) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) recvmmsg(r0, &(0x7f0000006e40)=[{{0x0, 0x0, &(0x7f0000005300)=[{&(0x7f0000000700)=""/86, 0x56}], 0x1}, 0x7}], 0x1, 0x2, 0x0) (async) syz_open_dev$evdev(&(0x7f00000000c0), 0x8, 0x90bd41) (async) write$char_usb(r4, 0x0, 0x0) (async) 1m25.725998219s ago: executing program 2 (id=521): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240), 0x6, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0) 1m25.703812175s ago: executing program 2 (id=522): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) clock_gettime(0x0, &(0x7f0000000dc0)={0x0, 0x0}) ppoll(&(0x7f0000000d80)=[{r0, 0x9020}, {r0, 0xb040}], 0x2, &(0x7f0000000e00)={r1, r2+10000000}, &(0x7f0000000e40)={[0x6f06b6e]}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) r4 = socket$unix(0x1, 0x1, 0x0) sendto$unix(r4, 0x0, 0x0, 0x2000080, &(0x7f0000000d40)=@abs={0x0, 0x0, 0x4e23}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x11a, 0x2, &(0x7f0000000380)=0x304, 0x4) r5 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e31"], 0x0) syz_usb_connect$uac1(0x0, 0xb9, &(0x7f0000000fc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa7, 0x3, 0x1, 0x7, 0x50, 0x3f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xa, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x7, 0x7, 0x9}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x4, 0x1, 0x7, 0x8, "f219e0", "d429"}, @as_header={0x7, 0x24, 0x1, 0x5, 0xfc, 0x2}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x6, 0x4, 0x7, 0x9, "a3ec71b89247c1037a"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x3, 0x4, 0x4, 0xf, 'o', "8a0f98"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xfc, 0xe, 0x2, {0x7, 0x25, 0x1, 0x81, 0x6, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0x4, 0x3}, @as_header={0x7, 0x24, 0x1, 0x2, 0xf7, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x5f, 0x8, 0x0, {0x7, 0x25, 0x1, 0x81, 0xf7, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x4, 0x1, 0x81, 0xff, 0x8}, 0x10, &(0x7f0000000200)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x6, 0x9, 0x9}]}, 0x9, [{0xe, &(0x7f0000000240)=@string={0xe, 0x3, "af6f4d5741d308234e876e76"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x3b, &(0x7f0000000b00)=@string={0x3b, 0x3, "3e3cb3c58a1e61b414d57dbdc6036420eb108841027a8fa91667c214fd9cb094992eec8ad095184dc44d34d33c61823ab9dca7ecdf6210b500"}}, {0x6d, &(0x7f0000000b40)=@string={0x6d, 0x3, "0f9b837749ceb1010665da84f9f1f48e63c616103400df13a0df8708c68ae6f6a4dcdcd6621cbb4179174f5eb2c00a6bde31df1fcb1ee25d231239a9ea425056a323c37ffebffe3f30ce7cefca0664c7a78613841297db169b953969bfb7f1c59aa078076843de567b3abe"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x82c}}, {0x6, &(0x7f0000000c80)=@string={0x6, 0x3, "47a492cb"}}]}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000080)={{{@in=@remote, @in=@rand_addr=0x64010101, 0x4e24, 0x1, 0x4e20, 0xfffa, 0x2, 0x20, 0x0, 0x16}, {0x9, 0x7, 0x9, 0xffffffff, 0x1, 0x3, 0x1, 0x200}, {0x1, 0x4, 0x3, 0x81}, 0x1c4a, 0x0, 0x2, 0x1, 0x3, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x4d2, 0x6c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3503, 0x7, 0x1, 0x4, 0x5e, 0x4, 0x6}}, 0xe8) syz_usb_connect(0x2, 0x2d, &(0x7f0000000840)={{0x12, 0x1, 0x201, 0x52, 0xe7, 0xfb, 0x20, 0x1044, 0x7001, 0x84ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x20, 0x7, [{{0x9, 0x4, 0x82, 0x3, 0x1, 0xbb, 0x1f, 0x86, 0x2, [], [{{0x9, 0x5, 0x1, 0x3, 0x200, 0xfc, 0xfd, 0x1}}]}}]}}]}}, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, &(0x7f0000000180)={0x2c, &(0x7f0000000000)={0x0, 0x6, 0x43, {0x43, 0xb, "4524dab8c2b09cd54cc422e7fe5948a72352d97ae90a2ee35ced142473734952fd8e90c32bcb1635c60b7c69a06b283d31dff7c63f18c04ec21ff1dcc51f5c105a"}}, &(0x7f0000000e80)=ANY=[@ANYBLOB="0003c9000000c9fb1c17f79603944929e1d5bea0f7eda19986a00d94213f343b24fad1570bf5dbd646d205c07e777317a43bb712d37a4db9d168aa684659577a028761f9bccaa32b80f916250120a32ebf8122488c168f5bfb8436c10e5c26370694376fc52da1a531fc10da0777711ec36f5cc37f05e6312c90576fbc32138396b356729652de2f341ae15fe79ba0e4bbb8a58e10bde568e1d8f32fbdaae14fe6ce18eb543907bdffeee7a9694c3870f4440ee35c3903b8a6045b491f8045ebf3546eee71eb33a1be1ad83fa6af15f3ceb94564143e9aee19c59fa2fce5fa5a0f4d6ef6e1609ff3aa61b6a6"], &(0x7f0000000900)=ANY=[@ANYBLOB="000f2e000000050f1401070abe051c100a030471040000f0c800687d81ad72b54cff00003ff4ffb500003103100b7956a77bc44c22c507bc63f4668376572b6837c8eb5ffba08ec2e76c14b0eef6e2dde97a6b44006cbb2b3a460c7b6cdf53ea9994d7a486421de14b42855ded425b69dcb5b7c4197be4c1f50084ffdb936fc3c3e9f5767ddedf64e33ddc808902005d94573cee94b386883a6c2b679f8b3236e390b9c8ba55db27a2c2e424f24a8284e73ec3961577786c95db83fb50cf"], &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe9, 0x4, 0xf3, 0x0, "8c8011a6", "c900464e"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x4, 0x9, 0x7, 0x7, 0xa, 0x48}}}, &(0x7f0000000840)={0x84, &(0x7f0000000380)={0x20, 0xb, 0xd0, "aa790e86df762dad06beb269f546d9affd75dd4f271d70d0092f70346c3e48b7e604f37e1dade2c6d149da26f7be02b298846213f053c47cc7148cd3ba1f32d623231fe1fced1f456480067e3487b07ea2554fdd8df50f01b268500e68df4677cd137852daa3e709d2fb40aa0e1878d77318fa7f67b871689c53caf6b218596d1f8d06b1e3c4b91a4adb7b6c8c4adfd1b910f190b694df62d3919609e658517dce670089e21a10674da9c0a7669ea5df55f662cc41c124ffd7e758af5f2f2beab0630509db5a822df964ce6280865aca"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x1}}, &(0x7f00000001c0)=ANY=[@ANYBLOB="2000040a000055a12800fe8b38eb3889cc5d54e6c6d0feb061c1608445"], &(0x7f0000000580)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x56}, &(0x7f0000000600)={0x40, 0xb, 0x2, 'n\b'}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x8000}, &(0x7f0000000680)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, &(0x7f00000006c0)={0x40, 0x17, 0x6}, &(0x7f0000000700)={0x40, 0x19, 0x2, "8f8f"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x6b}, &(0x7f00000007c0)={0x40, 0x1e, 0x1}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x7}}) 1m22.608537548s ago: executing program 2 (id=533): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(blake2b-512-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0370fc2aef63abefb4e90f9151ef796b7cf5ddb24f84312b958807dcafcdb8d9a08c008d99b0f9bb219be1c8db8f6f374c0633e50bac5577dfe51e10a92a1d267571475fe959", 0x46) 1m22.233732455s ago: executing program 2 (id=534): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1/../file0', [{0x20, '\x00'}, {0x20, '$'}], 0xa, "b524be350e7611b133a163b4ab1b"}, 0x26) (async) write$UHID_INPUT(r2, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r2) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r3, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x401}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8192}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20068000) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000480)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x10000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) (async) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000140)=ANY=[]) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r6, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0) (async) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000180), 0x478002, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r8, 0x82307201, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) close_range(r0, r7, 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) 1m21.831774615s ago: executing program 32 (id=534): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1/../file0', [{0x20, '\x00'}, {0x20, '$'}], 0xa, "b524be350e7611b133a163b4ab1b"}, 0x26) (async) write$UHID_INPUT(r2, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183f9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf0e3a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b1794146382c1d628fd2ebe5859b6c243824903d056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423b38b9196fafaaf87b2796eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f826c11a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746063d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c5169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0e2f3bc9974e3388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a420b9f72e79de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a60000564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc47f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9de9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4675a8b090be2365c0b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927841af08f5427878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc549000000000000000015a34abef947b5b9a950e780662de18873e55899c92db3ad00437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb00800000000000000ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c040000002b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e400", 0x1000}}, 0x1006) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r2) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r3, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x401}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8192}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20068000) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000480)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x10000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) (async) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000140)=ANY=[]) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r6, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0) (async) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000180), 0x478002, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r8, 0x82307201, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) close_range(r0, r7, 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) 8.217566955s ago: executing program 3 (id=754): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040030000001000000000000203000000092100000001220500000000000812"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x5, 0x78, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x2, 0x1, 0x6, 0x30, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "c4663039753e"}, {0x5, 0x24, 0x0, 0x51}, {0xd, 0x24, 0xf, 0x1, 0xffffb75c, 0xe}, {0x6, 0x24, 0x1a, 0x7}, [@acm={0x4, 0x24, 0x2, 0xd}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x3, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xb, 0xbc, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x9, 0x9, 0x1}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x2, 0x80, 0x9, 0xff, 0x9}, 0x23, &(0x7f0000000200)={0x5, 0xf, 0x23, 0x4, [@wireless={0xb, 0x10, 0x1, 0x4, 0x5c, 0x5, 0x4, 0x0, 0xe9}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x8, 0x5}, @generic={0x5, 0x10, 0x2, "5714"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x3, 0x9}]}, 0x7, [{0xbf, &(0x7f0000000a00)=ANY=[@ANYBLOB="bf031930cd4b88d002eba762fe1a622c1f38b9678c784b52a1dffc7bd2bb8a0555aa57bd9891df5603073e4417ffe644b4bced89e158edbac0b19e66cde8c1e3c7f219c4fe2160d1c635e1741503d72fd040cc6c52f499837d5447333e43f8bcd4fb8f49b32da8b4aec71dc5033e632b5be5823ea2984cd73063b48656ded07652e0e0e25d2a21c0fc7b16d3965c103d1901fb6bea761094232298151272edfb19f6dfc170a2c400d8aab319773ce9f67c6a60abbac180ce85f8d9dca8c3b9a880921e1d72b90f7cd2b3f40ffa34ac8bb938e3c92d938b6007d00f6b75928f5fc74c9fba1ae7f977220e75852b4039e5"]}, {0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="4e0329e237ef0cce75ca5bc55ca8811bc0e692f349c0e2a48998a08f0e6355d1fce0d3c026be60bd53a324f14c0327750641026babcc3c73a79467cb8a3bb39b01e5a6dc0e55dc570af4031262c7"]}, {0x4, &(0x7f0000000380)=@lang_id={0x4}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x814}}]}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000600)={0x14, &(0x7f0000000540)={0x20, 0x9, 0x44, {0x44, 0x31, "21c3da1dd3d0a13021e1eca4d08a7cf24f0eadd9649d9e54dd2a2e5bd50f78ba00601bee35d8d593dc4e83873d2fd86b87ad0423cfb2becd83162a305d66733c7160"}}, &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x44, &(0x7f0000000640)={0x20, 0x17, 0x40, "e04eef1712ee6085674685f4fa546aeb7a56abc2eb3e7c57ef4cb2bc4d77093a836786957455507b4f29ca74c537c0fcd88320618750fbbb78deaf03c1fe9264"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000740)={0x20, 0x80, 0x1c, {0x4, 0x83a, 0x0, 0xfff8, 0x2, 0x200, 0x4, 0x7, 0xba15, 0xfffe, 0x2, 0x2}}, &(0x7f0000000780)={0x20, 0x85, 0x4, 0x7}, &(0x7f00000007c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000800)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000000840)={0x20, 0x89, 0x2}}) (async) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000600)={0x14, &(0x7f0000000540)={0x20, 0x9, 0x44, {0x44, 0x31, "21c3da1dd3d0a13021e1eca4d08a7cf24f0eadd9649d9e54dd2a2e5bd50f78ba00601bee35d8d593dc4e83873d2fd86b87ad0423cfb2becd83162a305d66733c7160"}}, &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x44, &(0x7f0000000640)={0x20, 0x17, 0x40, "e04eef1712ee6085674685f4fa546aeb7a56abc2eb3e7c57ef4cb2bc4d77093a836786957455507b4f29ca74c537c0fcd88320618750fbbb78deaf03c1fe9264"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000740)={0x20, 0x80, 0x1c, {0x4, 0x83a, 0x0, 0xfff8, 0x2, 0x200, 0x4, 0x7, 0xba15, 0xfffe, 0x2, 0x2}}, &(0x7f0000000780)={0x20, 0x85, 0x4, 0x7}, &(0x7f00000007c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000800)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000000840)={0x20, 0x89, 0x2}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'vxcan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r5}) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f00000002c0)={0x3, "39dd36f2222eb78ff000fa3ef9765391016a4c441f80c1301d33eeddd463c845", 0x1, 0x7, 0x5, 0x800000, 0x20000, 0x8}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r7, 0x8140aecc, &(0x7f0000000080)={0x2, 0x0, 0x6}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000900)=ANY=[@ANYRESOCT=r3, @ANYBLOB="d746f8ac875d1a251c45ecbeb2b7cf2228b3ff5ec1b6dbb91bc2480e6d913d205499d5281d2b543d42380a7879097c6615f5813464a4b754704638dfef705fb10ff5141340ee353ef2c88f64974753b6c665b11525f88703645c9617c6c167a75f85fdd300091f7cbf4fac20ad4b972b36e238164eb339598fdf7b84aff604d95948b0b483150da6da8bef3190e4a45bbc85", @ANYRESHEX=r3, @ANYRESHEX=r7, @ANYRESDEC=r3, @ANYRESDEC], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00'], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000000c0)=ANY=[]) ioctl$KVM_SET_MSRS(r7, 0x4140aecd, 0x0) r10 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r10, 0xc0d05640, &(0x7f0000000740)={0x2, @pix={0x100, 0x4, 0x3436324d, 0x6, 0x4, 0x0, 0xa, 0x0, 0x0, 0x7, 0x2}}) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r13, 0x8916, &(0x7f0000000100)={@local, 0x0, r12}) (async) ioctl$sock_inet6_SIOCSIFADDR(r13, 0x8916, &(0x7f0000000100)={@local, 0x0, r12}) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r14 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r14, 0x890b, &(0x7f0000000140)={@local, @remote, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x100, 0x0, 0xa0022}) (async) ioctl$sock_inet6_SIOCADDRT(r14, 0x890b, &(0x7f0000000140)={@local, @remote, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x100, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r14, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r12}) r15 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000000)={'team0\x00'}) 6.214590895s ago: executing program 1 (id=762): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r1) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b20, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) (async, rerun: 32) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f00000000c0)=0x1) (async, rerun: 32) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCSUSAGES(r2, 0x501c4814, &(0x7f00000019c0)={{0x2, 0x201, 0x7, 0x283a, 0x0, 0x1fe}, 0x2ae, [0x8, 0x9, 0x3, 0x4, 0x9c9, 0xe0452740, 0x60c9, 0x3, 0x10, 0x8, 0x0, 0x0, 0x2, 0x3, 0x8, 0xd5d, 0x8, 0xe5, 0x8, 0x1ff, 0xf3, 0x10000, 0x7fffffff, 0x3, 0x8, 0x955, 0x101, 0x8, 0x80, 0x6, 0x8000, 0x6, 0x7, 0x3, 0x5, 0x0, 0x4, 0x9, 0xfffffffe, 0x1, 0x6, 0xafc5, 0x8d6d, 0x8, 0x1, 0x800, 0x8, 0x8, 0x0, 0x6838, 0x8, 0x0, 0xa904, 0x0, 0x3, 0x9, 0x8, 0x4, 0x100, 0x0, 0x10001, 0x8, 0x10001, 0xfffffe01, 0x800, 0x8, 0x400, 0x8, 0xfff, 0xffff, 0xa, 0x4, 0x1231, 0x6, 0xfff, 0xffffff7c, 0x4, 0x7, 0x6d5, 0x1, 0xbc6, 0x400, 0x6, 0xd8b, 0x3e, 0x29335ca1, 0x1, 0x5, 0x240, 0x783, 0x7, 0x828, 0x2, 0x5, 0x5, 0xd7, 0x6, 0x81, 0x8, 0x2, 0xffffffff, 0xb9b, 0x6, 0x0, 0x0, 0x3, 0x1, 0x519, 0x967, 0x9, 0xfffffffb, 0x9, 0xa0, 0x2, 0xff, 0x8, 0xa, 0x4, 0x4, 0x2, 0x3, 0x5, 0x8, 0x80040400, 0x10000, 0x0, 0xd, 0x7, 0x1ff, 0x4, 0x1, 0x9, 0x5, 0x4, 0x1, 0x9, 0xffff6fb5, 0xe, 0x1, 0xe, 0x1ef, 0x0, 0x8, 0x9, 0x8, 0xfffffffb, 0x2, 0x6, 0x7fffffff, 0x8, 0x6, 0x10001, 0x7, 0x0, 0x80000000, 0xfffff81b, 0x96e9, 0x1ce1, 0x5, 0xab, 0x8, 0x0, 0x5, 0x4, 0x9, 0xc8dd, 0x10, 0x1, 0x91, 0x8001, 0x10, 0x3, 0x3ac, 0xfffffffd, 0x100, 0x8001, 0x1, 0x1, 0x80000000, 0x46, 0x80, 0x3, 0x2, 0x4, 0x4, 0x6, 0x10000, 0x2, 0x7, 0xb, 0x7, 0x9, 0x4, 0x1, 0x3, 0x2, 0x3, 0x9, 0x10000, 0x8, 0xb, 0x9, 0x6, 0x7, 0x3, 0x1, 0x8, 0x8, 0x1, 0x0, 0x6, 0x7, 0x1, 0x6, 0xf, 0xffffffff, 0x0, 0x3, 0x0, 0x7, 0x7, 0x3, 0x20080, 0x7, 0x3, 0xffffffff, 0xff, 0x8, 0x6, 0xff, 0x8, 0xffff84b1, 0xfffffffa, 0x9, 0x4, 0xb8a4, 0x8, 0x5, 0x9, 0x7, 0x5, 0x8, 0x40, 0x0, 0xe66, 0x5, 0x6, 0x9, 0x3, 0x0, 0x3, 0x2, 0xfffffffd, 0x6, 0x4, 0x0, 0x2, 0x3, 0x1, 0x7, 0xff, 0x4bc, 0x7e, 0x5, 0x3, 0x1, 0x4, 0xfffffff8, 0x6, 0x750, 0x5, 0x0, 0x1, 0x3, 0x8, 0x2, 0x5, 0x0, 0xfff, 0x1000, 0x30, 0x9b7, 0x80, 0xa08c, 0xad, 0x4, 0x101, 0x2, 0x3ff, 0x7, 0x2, 0x5, 0x10, 0x80000, 0x101, 0x7, 0x67e, 0x8, 0xbc6, 0x4, 0x10, 0x3, 0x9, 0x0, 0x0, 0x3, 0x951bb142, 0x4, 0x3, 0x1, 0xca28, 0x3, 0x3, 0x6, 0x395744f5, 0x2, 0x6, 0x2, 0xe38, 0x4, 0x3, 0x9, 0x5, 0x3, 0x2, 0x5, 0x10, 0x0, 0x2, 0x1, 0x3, 0xa22, 0x4, 0x6, 0x0, 0x100, 0x80000001, 0x2, 0x5, 0xd9a, 0x9, 0xf, 0x3, 0x4f, 0x0, 0x9, 0x5, 0x4, 0x1, 0x32, 0x9, 0x5, 0x6ea, 0x5, 0x0, 0x1000, 0x4, 0x7fff, 0x7f, 0x5, 0x2, 0x3, 0x87, 0x48, 0xfffffffa, 0x137e, 0x7751, 0x7, 0x9, 0xe, 0x4, 0xff, 0x7ff, 0x6, 0x6, 0x7fff, 0x1000, 0x4, 0xffff, 0x4, 0xf0b, 0xb4, 0x4, 0xa, 0x1, 0x80b9, 0x1, 0xc, 0xfff, 0x401, 0x278, 0x2, 0xffffffa4, 0x80, 0x0, 0x3, 0x10001, 0x7fffffff, 0x4, 0x10, 0x3, 0x9, 0x800, 0x9, 0x80000000, 0xde1, 0x5, 0x3, 0x1ff, 0x7, 0x8, 0x92, 0xe6d, 0x0, 0x49, 0x4, 0x7, 0x7fffffff, 0x3, 0x8, 0x7f, 0xb, 0xa, 0x0, 0x3, 0x64, 0xf8, 0x100, 0x9, 0x2d, 0x5e, 0x94, 0x200, 0x0, 0xc000000, 0x6, 0x80000001, 0x3, 0xa4ba, 0x1, 0x80, 0xfffffff8, 0x7, 0x81, 0xffffffff, 0x5, 0x0, 0xe2, 0x9, 0x0, 0x3, 0x5, 0x0, 0x401, 0x1, 0x4, 0x7, 0x8, 0x2d21, 0x3, 0x6, 0xffffffff, 0x3b1, 0x2, 0x8, 0xfffffffa, 0x1, 0x4, 0xc, 0x5, 0x0, 0x4, 0x5, 0x6, 0x3, 0x8, 0x8, 0x1, 0x2, 0x7, 0x9, 0x8, 0x9, 0x0, 0x48, 0x0, 0x3, 0x0, 0x7, 0x4, 0xe686, 0x1, 0xffff, 0x7, 0xb, 0x8, 0x4ca, 0x1, 0x9, 0xff, 0x6, 0x4, 0xdf5, 0xaa9, 0x3, 0x6, 0x80, 0x80000, 0x0, 0x9, 0x2, 0x0, 0x3, 0x401, 0xfffff19f, 0x4, 0x3, 0x6, 0x8001, 0x9, 0x5, 0xc, 0x400, 0x1ff, 0xfffffffe, 0x70000000, 0x2ac, 0x2, 0xfffffb2d, 0x8000, 0x2, 0x0, 0x6, 0x8, 0xc, 0x7fff, 0xffffffff, 0x5, 0x2, 0x1, 0x1, 0x4, 0xfffffffe, 0x5, 0x1, 0x1, 0x1, 0xc89, 0x7, 0x400, 0x5, 0x200, 0x1, 0x0, 0x2, 0xd, 0x0, 0x5, 0x0, 0x1, 0x230c0, 0x2, 0xd, 0x1, 0x6, 0xfffffffd, 0x9, 0xfffffffb, 0x3a, 0x6, 0x2, 0x80, 0xffff, 0xfffffffa, 0x7, 0x88ce, 0x9, 0xda8, 0x7, 0x4, 0x8001, 0x8, 0x0, 0xf37, 0x6, 0x80000000, 0x6, 0x5, 0xffffffbd, 0x2, 0x2, 0x8, 0x9e3, 0x4, 0x400, 0x8000, 0x0, 0x7fff, 0x4, 0x7, 0x4, 0x7, 0x6, 0x0, 0x9, 0x0, 0x6, 0x9, 0x7, 0x8001, 0x7, 0x8, 0x7, 0x8001, 0xa8, 0x400, 0xfffffffc, 0xb89, 0xffff, 0x8, 0x6, 0xea, 0x6, 0x7, 0x1, 0xe, 0x9, 0x8, 0x80, 0xa, 0x6, 0x1, 0x5, 0x1a1, 0x2, 0x85c0, 0x4, 0xfffffffd, 0x80000001, 0x7, 0x7f, 0x6, 0x20000000, 0x9, 0x5, 0x2, 0x3, 0x6, 0x1ada000, 0x7, 0x4, 0x9, 0x4, 0x7, 0x8, 0x8, 0x0, 0xe, 0x5, 0x8000, 0x48, 0x6, 0x0, 0x3, 0x3, 0x9, 0x1, 0x0, 0x6, 0x10, 0x2, 0x5, 0xeb8, 0x8, 0x4, 0x1, 0xffffffff, 0x4, 0xfff, 0xff, 0x9b, 0x5, 0x4, 0x80, 0x7, 0x7, 0x1136, 0x6, 0x96d7, 0x9, 0xfffffff9, 0x52c, 0x4, 0x2, 0xb, 0x7f, 0x4, 0x2, 0x9, 0x3, 0x200, 0x7fff, 0x3, 0xc, 0x800, 0x4, 0x1a4e, 0x4, 0x5, 0x7be1, 0x8, 0x3ff00, 0xfd8, 0x3, 0xd, 0xd, 0x1, 0x3, 0x5, 0x7fffffff, 0x35, 0x1ec, 0x0, 0x9f9, 0x80000001, 0x3, 0x0, 0x8, 0x5, 0x80000001, 0x9, 0x2, 0x7ee, 0x1, 0x200, 0x8, 0x0, 0x3, 0x8af5, 0x5, 0x9, 0x6, 0x4, 0x935, 0x3f, 0x2, 0x2, 0xf42f, 0x7, 0x3, 0xdb, 0x3, 0x4, 0x4000000, 0x5, 0x2, 0xfffffffc, 0x4, 0x1ff, 0x7fff, 0x4, 0x1, 0x370c, 0x5, 0x8, 0x1ff, 0xcf, 0x4, 0x3434000, 0x3, 0x1, 0x0, 0x9, 0x1ff, 0x2, 0x9, 0x1, 0xa0, 0x3, 0x0, 0xe30, 0x18, 0x9, 0x0, 0x3, 0x81, 0x3, 0x2, 0xe, 0x3, 0x0, 0x0, 0x2, 0x2, 0xfffffffe, 0xd, 0x4, 0x7, 0x2, 0x5d7, 0x3, 0x4, 0x0, 0x2, 0xb8, 0x5, 0x7, 0xe, 0xd, 0x0, 0x9, 0xed, 0xb, 0x4, 0x1, 0x9, 0x4, 0x7, 0x800, 0x7, 0xfd94, 0x6, 0x3, 0x1000, 0xc4, 0x0, 0x730, 0x6, 0x400, 0x5, 0x9, 0x3, 0x10001, 0x4, 0x9, 0x8, 0x9, 0x1800000, 0x40, 0x1, 0x7, 0x9, 0x80000000, 0x6, 0x2, 0x10000, 0x3, 0x4, 0x7, 0x4, 0xf, 0x81, 0x9, 0x4, 0x7, 0x5, 0x5, 0x0, 0x5, 0x5d, 0x1, 0x9, 0x9, 0x1, 0x7fd, 0xfffffde5, 0x40, 0x9, 0x9, 0x9, 0x2, 0x3, 0x7, 0xfffffffe, 0x3, 0x7, 0x0, 0x2, 0x1, 0x5, 0x1, 0x10, 0xf, 0x10000, 0x2, 0x8, 0x8, 0x9, 0x9, 0xc, 0x9, 0x7e0d, 0x4, 0x1, 0x9, 0x5, 0x6, 0x6, 0x1, 0xa2c3, 0x5, 0x9, 0x6, 0x8, 0x10, 0xefd, 0x901, 0x1, 0x8, 0x5, 0x0, 0x3a24, 0x1ff, 0x7, 0x5, 0x401, 0x10000, 0xddfa, 0x40, 0x6, 0x8c6, 0x10000, 0x7, 0x0, 0x8, 0x246, 0x7, 0x7, 0x72, 0x10, 0xd, 0x1, 0x9cd, 0x2, 0x3, 0x8f3c, 0x8, 0x2, 0x81, 0x81, 0xc, 0x8, 0x3, 0x101, 0xffff2193, 0x0, 0x5480, 0xc09, 0x2, 0x459, 0x6, 0x8000, 0x7, 0x4, 0x82, 0x6, 0x7, 0xe00, 0xffffffff, 0x0, 0xffffffff, 0x8, 0x5, 0x3, 0xfa01, 0x9, 0x100, 0xc, 0x0, 0x1, 0x1, 0x10000, 0x4, 0x2, 0x9, 0x9, 0x7fff, 0x0, 0x81, 0x99, 0xffffff64, 0x5, 0x7f, 0x2, 0x9, 0x7, 0x4, 0x7ff, 0xffffffff, 0x7e540854, 0x6, 0x2, 0x7fff, 0x10000, 0x3, 0x26835f08, 0x0, 0xef47, 0x3, 0x5, 0x2, 0x400, 0x48073792, 0x0, 0x2, 0x7, 0x835d, 0x4, 0x9, 0x97, 0xa, 0x5, 0xffff, 0x400, 0xf1d, 0xbf, 0x0, 0x6f, 0x733916f0, 0xfff, 0xffff, 0x8, 0x7]}) (async, rerun: 64) r3 = socket$nl_audit(0x10, 0x3, 0x9) (rerun: 64) sendmsg$netlink(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x10, 0x32, 0x200, 0x70bd27, 0x25dfdbfb}, 0x10}], 0x1, 0x0, 0x0, 0x40004}, 0x20000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000100100000200000001000000000000001400000000000000100100000e"], 0x30}, 0x200008c4) 5.158237966s ago: executing program 1 (id=766): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r1 = memfd_create(&(0x7f0000000040)='5\x00', 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0xfffff000}) r3 = memfd_create(&(0x7f00000000c0)='-\x00', 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000140)) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000180)=0x85a9) r5 = mq_open(&(0x7f00000001c0)='-\x00', 0x800, 0x3, &(0x7f0000000200)={0xf3, 0x5, 0x4, 0x9}) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000280)={0x5, 0xfffffffffffffff9, 0x2, 0x0, 0x0, [{{r5}, 0x3530000000000}, {{r6}, 0xffff}]}) sendmsg$NL80211_CMD_NEW_MPATH(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100001}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x39}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000440)={@in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}}, 0x0, 0x0, 0x4c, 0x0, "b8189748165523209fdbcbb9b7cddfd00aee1a901980a9263d35d8fec7e24aca6f8cabae88bee7234f5d1531cb916c99e4803156af1014de6ef006e165af85ad32aee96f50fb2fedd08b6fc6067a1855"}, 0xd8) r8 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0x378, &(0x7f00000005c0)={[{0xd9, 0x4e00, "54cd21d80eed4d1384b08a4e21d76f6a47fae0cea23f6e2e42dbd47acd59f3baaaac883785931ac478a41051f1af5cd411ca8c29c5ad546dfc40a5ed9e3de62f429826cce14dfc180a8f5ef513fd2e21557c73583a1226bf0e4978a496acc8e06177dd99335cd1608d1798c3d537a086fe18c41b390cec85218db82744fd354b03b236e815ba3ffbdbbda6318bbf9044df440367e578143bdaed4b3debc5101d3d89775147edcf2c5689dd551ab991c44b216569e1089caf933a9b0d84f13fffd693e5819a20841dd1adfb1600ac50b74858869bcd1ab4e96d"}, {0xa0, 0x4e00, "66d50b86aa731b5e037f0c85918906d5c32bdb7ecca4b9d4b0ebddcbf05319419e0cb83ea0bfa25b9b6cd4b660ee18b1c1294343dffc95a1360ffbf7411052e0dfc2b4318fefdcd1b2f3b5d33ca1fe6e5719bab6c23385d686ce37e20ee9738f51ff861df3bf71a2b4d301d78ae103319d5367541959ea4a8aac2833390d343d6e0eb08daaade3d71a61250d1bfe74230e5919b1d3837bcd5fef0cd5a76aa93b"}, {0xd5, 0x4e00, "d943597c786b4a445724cb33e80bc864cc3806f1d5176cae999211d78c39b0fad04db5f7340bac0b4e00ebff2cb00d921b9c33790f906a8030992ac2b35530a6ccca709c7c81b1ba6f59ea1ae50fc6c6b587b9d8ecf2b008597276066204455989d3332680a1bc54e5b1fcffc37dc005b0d7406241fa2f0e6d2616aa09b0fc0060b47c9386039f2077897978120065ee69ce706c510ff57fed060d0ffe2d8f2f19492545ac1a4e69bde566920c82cdaf4e24f89569f427904ae29a1f15a63cd887328f96548b98445f9f96072f34e74fcc35d372a2"}, {0x4d, 0x4e00, "ad2a9379f202a7a47d4e41a8e77bc25878f93bb7e998825e467e1ad4a48db27a5acf534ff7d3eff1674dd45c800bb352f30ad04d4b7afa2da331ad542309a130f799c4210cd9d5a9064afb7a9e"}, {0xa1, 0x4e00, "f8baabb19da036824cad28f1a3326b8d45be310e0f3578d047b95afcfdaa56a8c4c7519027415a772b674652c9886198bbbea7f47a78d20c53c3fb018a6c0fd4086a48544e33ac949005eaceb2782ae8873568218cea4b00698615cd15cad992411cdd9a7d9f885fcbb59125ff9ef9f0e5a7bc271cb3131f85572e69a40451d2aa15030ad7ba0b152e3b80d1927ecb47e8681da752c0327257d936f99813f46d74"}, {0x16, 0x4e00, "db6ca1f4d8d2175654d7496b0476761050f2b049ce41"}]}) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r3, 0x80184132, &(0x7f0000000940)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), r6) getsockopt$inet_mreqn(r6, 0x0, 0x24, &(0x7f0000000a00)={@local, @local, 0x0}, &(0x7f0000000a40)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000b00)={'syztnl0\x00', &(0x7f0000000a80)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x67, 0x8, 0x19, @mcast1, @local, 0x1, 0x40}}) getsockname$packet(r6, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b80)=0x14) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000bc0)=0x0, &(0x7f0000000c00)=0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000c40)={0x0, @private, @private}, &(0x7f0000000c80)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000d40)={'syztnl0\x00', &(0x7f0000000cc0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x1, 0x3, 0x10, @empty, @private1, 0x20, 0x8000, 0x7fffffff}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000d80)={'wg2\x00', 0x0}) getsockname$packet(r6, &(0x7f0000000dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000e00)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000ec0)={'syztnl2\x00', &(0x7f0000000e40)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0x2, 0x80000000, 0x24, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x7, 0x1, 0x5}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r7, &(0x7f00000010c0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f00)={0x154, r9, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x10}, 0x20048050) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001240)={0x24, &(0x7f0000001100)={0x0, 0x6, 0x3e, {0x3e, 0x3, "c1f660d808c2c7dbb4266c1947918cf987b389571e00b70b70e4d256a2fa2bf533623be13becf705a77e28b2d585c7cd0f5a54dea1d4f243ea22d4e9"}}, &(0x7f0000001180)={0x0, 0x3, 0x1d, @string={0x1d, 0x3, "2c1251f4bc11bdfa862ccd13441c86d36571fa21cd1774e2d0aa0d"}}, &(0x7f00000011c0)={0x0, 0x22, 0x17, {[@main=@item_012={0x2, 0x0, 0xc, "6187"}, @main=@item_4={0x3, 0x0, 0xa, "5f4d023c"}, @local=@item_012={0x2, 0x2, 0x5, '\f\r'}, @global=@item_012={0x1, 0x1, 0x7, "ec"}, @local=@item_012={0x1, 0x2, 0xa, '0'}, @main=@item_012={0x1, 0x0, 0x8, "a0"}, @local=@item_012={0x0, 0x2, 0x4}, @local=@item_4={0x3, 0x2, 0x8, "cd55031c"}]}}, &(0x7f0000001200)={0x0, 0x21, 0x9, {0x9, 0x21, 0xb, 0x4, 0x1, {0x22, 0x416}}}}, &(0x7f00000014c0)={0x2c, &(0x7f0000001280)={0x20, 0x14, 0x59, "6ac450447417d1503c52118538cb540516f50376e70fd3241601a1cd7d1e778d136338e3aae6825e97abbdccb8b7ba85e5c3d4aa8fb0e3e8279e6ff63d5c6cf54cd12fa96b2d1655ecac4d26a707fb98188b39e99e0b3c4d5f"}, &(0x7f0000001300)={0x0, 0xa, 0x1}, &(0x7f0000001340)={0x0, 0x8, 0x1, 0x32}, &(0x7f0000001380)={0x20, 0x1, 0xcb, "e8141e18e1fab57a04df60c9d9b72751519daf6277ce68e981aed746031d5ef6e2ad373fc203cea1606e6a5e8b5cd643bfff57acddecd9c25af54dce1fa154bb59565575835e229a454117a3270865f38bb140fbfa59dcc19b0843fcd84509c12655a07e04d4d22066976c92936a217d234042c6ff605017a67a793959655418ef16f1889716a6eca6e964dab9251ab1b6eecfa9758c7cc0eb3dc3b441d1ad14f7913b2ac6fce606417a02ed78104c5dc4ee10e41bf32a28086f4feefd8969a1f11fab3582abef875402c6"}, &(0x7f0000001480)={0x20, 0x3, 0x1, 0x80}}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r6, 0xc02064a5, &(0x7f00000015c0)={0x0, 0x7, &(0x7f0000001500)=[0x6, 0x6a07, 0x6, 0x3, 0x100, 0x4, 0x400], &(0x7f0000001540)=[0x7, 0x7, 0x87db], &(0x7f0000001580)=[0x8, 0x3, 0x1, 0x3ff, 0x239e, 0x7]}) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f0000001600)={0x800, "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"}) 5.093690883s ago: executing program 3 (id=767): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000042c0), 0x101041, 0x0) (async) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000042c0), 0x101041, 0x0) write$vga_arbiter(r1, &(0x7f0000004300)=@other={'lock', ' ', 'none'}, 0xa) r2 = syz_open_dev$hiddev(&(0x7f0000000000), 0x5, 0x20000) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f0000000400)={{0x2, 0x100, 0x0, 0x7f, 0x8000, 0x9}, 0x21f, [0xfffffffe, 0x5, 0x9, 0x8000, 0x8001, 0x3, 0x0, 0x1, 0x40, 0x9, 0x7, 0x8001, 0x9, 0x8, 0x5, 0x6, 0x2, 0x80000000, 0x5, 0x5, 0x5, 0x8, 0x6, 0x9, 0xa, 0x4, 0x7, 0x800, 0x1, 0x3ff, 0x76, 0x1, 0x3, 0x77a, 0xffff, 0xc2, 0x4, 0x8e3, 0x7, 0x8, 0x2, 0x6, 0x100, 0x8, 0x1, 0x1, 0x1, 0x3, 0x9, 0x100, 0x80000000, 0x6, 0x5, 0xff, 0x2, 0x6, 0x3, 0x2b79, 0x9, 0x9, 0x7, 0xec, 0x5, 0x6296, 0xa, 0x0, 0x80000000, 0x2, 0x5, 0xfff, 0x8, 0x3, 0xfffffff8, 0x3, 0x7f, 0x0, 0x1fa1, 0x5f, 0x0, 0x1, 0x2, 0x6, 0xfffffffa, 0xf, 0x37e0, 0xb1a, 0xfffffff7, 0x8, 0x3, 0x4, 0x15d, 0x3, 0x80, 0xfffffff9, 0x8, 0x9, 0x5, 0x0, 0x5, 0x20000, 0x10000000, 0x728b, 0x4, 0x8, 0x7, 0x1, 0x8, 0x9, 0xfffffff7, 0x7ff, 0x3, 0x1ff, 0x100000, 0x2, 0x8, 0x6, 0x9, 0xa, 0x1, 0xd50, 0x5, 0x2, 0x6, 0x8, 0x8, 0x4d4, 0x0, 0x9, 0x8, 0x10000, 0x9, 0x7, 0x687d7aa3, 0x7, 0x7, 0x4, 0x326, 0x0, 0x780, 0xffff, 0x100, 0x6, 0x6, 0x4, 0xd0, 0xff, 0x7, 0x101, 0x4, 0x80000001, 0x997, 0x37, 0x9, 0x3ff, 0x3, 0x0, 0x0, 0x6, 0x7fffffff, 0x700, 0x80000001, 0xb, 0x80000001, 0x200, 0x7, 0x9, 0x7, 0x5, 0xfff, 0x9, 0x6, 0xf275, 0xfffffff7, 0x211, 0xfffffffe, 0x95b, 0x5, 0x0, 0x0, 0x7, 0x0, 0x39, 0x1, 0x7, 0x7fff, 0x7, 0x5, 0x1, 0x2, 0xb0, 0x5, 0x2, 0x8001, 0x0, 0x86de, 0xffffffff, 0x3, 0x8000, 0x80000001, 0xffff2511, 0xfffffffd, 0x9, 0x100, 0x6, 0x3, 0x7, 0xf, 0x727, 0x6, 0x7, 0x4, 0x8, 0x9, 0x2, 0x2, 0x2, 0x8, 0x2, 0x3, 0xa, 0x9, 0xffff, 0x4, 0x6, 0xaa3, 0x10001, 0x9039, 0x0, 0x10001, 0x1, 0x0, 0xc, 0x5, 0x0, 0x7, 0x8, 0x3, 0x8, 0x13f4, 0x800, 0x8, 0x7, 0xe0d, 0x9, 0x9, 0x3, 0xe, 0xfffffff7, 0x4, 0x3, 0xfffffffb, 0x1, 0x5, 0x1, 0xfd, 0x65d1, 0x7, 0xfffffffe, 0x6, 0x5, 0x8, 0x3, 0x7e7, 0xd, 0x1, 0x1, 0x1, 0xfffffff7, 0x7, 0x6c2, 0x40, 0x50, 0x1, 0x9, 0x7, 0x9, 0x8, 0x4, 0x2, 0x0, 0x1, 0x9, 0x0, 0x4, 0xc, 0x8, 0x80, 0x3, 0x5, 0x7, 0x6aaff650, 0x80, 0xfffffffc, 0x5, 0x1, 0xff, 0x10001, 0xffffffff, 0x1000, 0x8000000, 0xffffffc0, 0x2f, 0x0, 0x7, 0x1, 0x1, 0xc, 0x3, 0x8, 0x36, 0x401, 0x8, 0x0, 0x8, 0x8, 0x40, 0x5, 0xfffffffa, 0xb, 0x5, 0x9, 0x9113, 0x5390, 0xf3, 0x2, 0x7, 0x2, 0xe, 0x0, 0xfffffff7, 0x100, 0x93f, 0x24, 0x3, 0x40, 0x8, 0x9, 0x6, 0x4, 0x9, 0x2, 0x8, 0x100, 0xbfa0, 0x3, 0x0, 0x3, 0x2, 0x6, 0x4, 0xb, 0x9, 0x3, 0x8, 0x4, 0x2, 0x5, 0x2, 0x4, 0x1c, 0x5, 0x48000000, 0x80000000, 0x743, 0x8, 0x1, 0xfffffbff, 0xff, 0x9, 0xedb, 0xff, 0x62, 0x5, 0x33f, 0x4, 0x2, 0x3ff, 0x4, 0x938, 0x200, 0x1000, 0x1, 0x7, 0x4, 0x0, 0x3, 0x4, 0x1, 0x1ff, 0xffffff01, 0x7f, 0xb2, 0xfffffe01, 0x100, 0x1, 0x0, 0x5, 0x3a, 0x6, 0x8, 0xb2, 0x3ff, 0x1, 0xfffffffa, 0x9ba, 0x6, 0x2, 0x2, 0x5, 0x4, 0x6, 0xff, 0x8000, 0x401, 0xfaf, 0x4, 0xfffffffe, 0x1, 0x8001, 0x1, 0x2, 0x5, 0x1, 0x0, 0x1, 0x0, 0x7ff, 0x3, 0x4, 0x6475, 0x8, 0xc, 0x3, 0x451, 0x504, 0x7, 0x8, 0xcc, 0x8, 0x9, 0x7, 0x8, 0x1, 0x3, 0x3, 0x3, 0x0, 0x4, 0x3ff, 0x3, 0x401, 0x9, 0x0, 0xe9c9, 0x40, 0x9, 0x7, 0x39, 0x1, 0x7, 0x8, 0x6, 0x1, 0x80000001, 0x6dd4, 0x2, 0x1000, 0x5, 0x0, 0xb04, 0x3, 0xd6, 0x7, 0xfffffffd, 0x8, 0x7, 0xf65, 0xffffff00, 0x6, 0x8, 0x3, 0x4, 0x9, 0x5, 0x81, 0x2, 0xe, 0x8, 0x83c, 0x8, 0x4, 0x5, 0x7fffffff, 0x9, 0x6, 0x10001, 0x3, 0x40, 0x9, 0x7, 0x8, 0x80000000, 0x0, 0x6, 0x5, 0x5, 0x0, 0x4, 0x10001, 0x2, 0x5, 0x1, 0x5, 0x8, 0x3, 0x2d04, 0x0, 0x91, 0x5, 0xb000, 0x401, 0xfffffffd, 0x5db81de1, 0x7, 0xffffffff, 0xffff, 0xd, 0x28, 0x800, 0x3, 0x6, 0x2, 0x3, 0x2a, 0x6, 0x10000, 0x3, 0x1, 0x4f, 0x0, 0x9, 0x8605, 0x28, 0x6e, 0x1, 0x6d8a, 0x9, 0xe85, 0x7ff, 0x5, 0x5, 0x3, 0x3, 0x6, 0x1, 0xfffffff8, 0x817, 0x1, 0x0, 0x1, 0x3, 0xf2, 0x7, 0x328c, 0x2, 0x6, 0x4, 0xf2fb, 0x7f, 0x9, 0x6, 0xc, 0x4, 0x10, 0x7, 0x0, 0x8, 0x6, 0xffff, 0x400, 0x4, 0x80, 0x5, 0xc9, 0xffff, 0x4, 0xd910, 0x6, 0x7fffffff, 0x0, 0x0, 0x80, 0x7ff, 0x8, 0x10001, 0x3, 0x8000, 0x8, 0x8, 0x0, 0xb33, 0x6, 0x3, 0x8, 0x9, 0x4, 0x1, 0x10001, 0x400, 0x8, 0x7ff, 0x7, 0x3, 0x8, 0x4, 0x7, 0x2, 0xffffffff, 0x3, 0xff, 0x7, 0x80000000, 0x0, 0x3ff, 0x3, 0x1, 0x4609527e, 0x1, 0x2, 0x2, 0x6, 0x101, 0x7, 0xaa, 0xba, 0x6, 0x100, 0x1, 0x6, 0x0, 0x1b, 0x2, 0x2, 0x81, 0xf6da, 0x4, 0x9, 0x1, 0x8e, 0x6, 0x7f, 0x2, 0x6, 0x6, 0x0, 0x7, 0x5, 0x7f, 0x0, 0x7, 0x4, 0x0, 0x3ff, 0x5, 0x5, 0x6, 0x3, 0x6, 0x1, 0xf, 0x8, 0xb2, 0x8001, 0x0, 0xf, 0x10, 0x9c, 0x81, 0x10001, 0xac8, 0x100, 0x3266372e, 0xfffffff8, 0x9, 0xfffffff9, 0x3, 0x1, 0xa, 0x8, 0x1ff, 0x80000000, 0x0, 0x200, 0x3, 0x5, 0x5, 0x4, 0x40, 0x5, 0x0, 0x763, 0x8, 0x1, 0x87, 0x8, 0x1, 0xb, 0x69, 0xfffff801, 0x3a384644, 0xf, 0xa, 0x2, 0x8, 0x9, 0x4, 0x2, 0x3, 0x3, 0x101, 0x4, 0x2, 0x7, 0x0, 0x9, 0x3, 0x4, 0x8, 0xfffffffe, 0x80000000, 0xb, 0x1, 0xbb, 0x31053198, 0x800, 0x7, 0xa, 0x6, 0x97, 0xb56, 0x2, 0x4, 0x2ede, 0x2, 0x1, 0x1, 0x8, 0x2369, 0x0, 0x7, 0x0, 0x3, 0x7fff, 0x0, 0xb, 0xc4b8, 0x40, 0x3b, 0x4d3c, 0x9, 0x9, 0x3, 0xeb, 0x5, 0x8000, 0x9, 0x6, 0xfffffff7, 0x3, 0x905, 0x6, 0x8001, 0x7e, 0x7f, 0x1, 0x90000, 0xff, 0x4, 0x80000000, 0x0, 0x9, 0x20, 0xffffff01, 0xffffff00, 0x8, 0x5, 0xde, 0x1ed3, 0x1, 0x7, 0x6, 0x10001, 0x0, 0x5, 0x1, 0x4, 0x3, 0xca, 0x400, 0x0, 0x40, 0x0, 0x1, 0x1, 0xfffffff9, 0xffffffff, 0x9, 0x2, 0x5, 0xffffffff, 0x400, 0x101, 0x15fe9733, 0x81, 0x1e54b2aa, 0xcc91, 0x0, 0xfffffff0, 0x7f, 0x6, 0xe, 0x1, 0x1ff, 0x40, 0x1, 0x1, 0x20019843, 0x2, 0x8a, 0x9, 0xffff, 0x4, 0x6, 0x5, 0x100, 0x8, 0x6, 0x0, 0x6, 0xfffffff9, 0x3, 0x80, 0x6, 0x6, 0x1, 0x0, 0x2, 0x2, 0x9, 0xf6d, 0xfffffffb, 0xfffffff8, 0x7ff, 0x2, 0x2, 0x5, 0x7, 0x4, 0x6, 0x5, 0x7f, 0x2, 0x3, 0xb999, 0x20002, 0x9, 0x3, 0xfff, 0x800, 0x10001, 0xa2, 0xa, 0x73c, 0x8, 0x9, 0x435, 0xa17a, 0x4, 0x1ae8, 0x6, 0x6, 0x1ff, 0x10, 0x81, 0x9, 0x4, 0x7fffffff, 0x101, 0x1, 0x8, 0x5, 0x2017, 0x0, 0x1, 0x6, 0x3, 0x5, 0x1, 0xf11, 0xfffffff7, 0x3, 0x1, 0x40, 0x3, 0x5, 0x6, 0x0, 0x8, 0xff, 0x0, 0xd, 0x1, 0x0, 0x0, 0x6, 0x3, 0x7, 0x9, 0x81, 0x9, 0x4, 0x80000000, 0x2, 0x0, 0x9, 0x80000000, 0x6774, 0x7, 0x4, 0x7, 0x9, 0x7, 0x7ff, 0x8, 0x63, 0x7f, 0x4, 0x6, 0xf910, 0x6, 0xfffffff9, 0x1, 0x3, 0x7, 0x3, 0xd, 0x1ff, 0xfffffff9, 0x5, 0x0, 0xff, 0x80, 0x9, 0xfffffffa, 0x0, 0x80000000, 0x4, 0x2, 0x1, 0x10001, 0x4, 0x7, 0x287, 0x2, 0x8, 0x5, 0x1, 0x2, 0x8000, 0xd6fa, 0x1, 0x5, 0x3, 0x80, 0x101, 0xfffffff7, 0x80, 0x5, 0x4, 0x80, 0xf, 0x897c351, 0x7fffffff, 0x5, 0x4, 0x5, 0x4, 0x8000, 0x40, 0xffff, 0x0, 0x6, 0x3, 0x7, 0x81, 0x10000, 0xb0, 0x6, 0x4, 0xdb4f, 0xc, 0x7, 0x3ff, 0x4, 0x7fffffff, 0x1, 0x7, 0x0, 0x8, 0x6, 0xffffffff, 0xdcfb, 0x0, 0x8, 0x6, 0x7, 0x6, 0x140, 0x7, 0x4, 0x9, 0xe, 0x0, 0x4]}) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x960, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffffffc}}, 0x0, 0x0, 0x42, 0x0, "0aaa0ff5a212a1bd3bbda613efd9c8b4ca66db4286e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0952e83d41b67cb9ff147c669351b3ed30000000000000700"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x960, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffffffc}}, 0x0, 0x0, 0x42, 0x0, "0aaa0ff5a212a1bd3bbda613efd9c8b4ca66db4286e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0952e83d41b67cb9ff147c669351b3ed30000000000000700"}, 0xd8) 5.00610453s ago: executing program 3 (id=768): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000600)={0x0, 0x18, 0x4, "a7c3ad4c"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000580)={0x40, 0xb, 0x5, "7765e9a826"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x40, 0x19, 0x2, "6895"}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$rtl8150(0x3, 0x3a, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r1, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r1, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000004280)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)={0x40, 0x5, 0x2, "2bd8"}}) 4.669085336s ago: executing program 0 (id=772): mkdir(&(0x7f0000000400)='./file1\x00', 0xc) (async) mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir}]}) (async) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000003000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000021c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004"], 0xd4}}, 0x0) setreuid(0xee01, 0x0) (async) ptrace$setregs(0xd, 0x0, 0x0, 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44e, 0x121e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x7}}}}}]}}]}}, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2084) (async) writev(r2, &(0x7f0000002280)=[{&(0x7f0000002080)='T01\n', 0x4}, {&(0x7f0000002180)='K', 0x2f}], 0x1000000000000293) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x8000, 0x200000, 0x207}) (async) syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) 4.5697784s ago: executing program 0 (id=773): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000040)) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xa430ba, &(0x7f00000000c0)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@sq={'sq', 0x3d, 0x2}}, {@common=@debug={'debug', 0x3d, 0x3}}]}}) mount$9p_tcp(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x800, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@noxattr}]}}) 4.530564479s ago: executing program 0 (id=774): r0 = socket$kcm(0x10, 0x2, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x2, 0x1, 0x1}, 0x18, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201410130f56902030109021b00010000100009045507010349020054f8090582034c40d7b8cd06e1b42663c308f50e32b41da5e8208bcecda85122227a560ac6b202fda0f4579c9881e8e512e1fdb18555535759a0066e6666de13d70f0b8f69f9575bf1b8bae48e8552c55ebbc48b659c7cb228482e"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x10f0, &(0x7f0000000600)={[{0x4a, 0x4e00, "d3d4be66ae171838083eba682ab1536b26f743c5862cf0e5f74142c0a1e30a1803481767e0d866d2d5b1b396c43bd4a761f1c8df43dc35e0b3dc8b2482f432215ede5735558de0223957"}, {0x96, 0x4e00, "7b1adf42030b38b846ae22afa591ca3b1173c4bb19b06d03905c0f7809f4150bc48211cb47c1ae69c83cb28c05f467febafc2d660cfd20ed7f4caec31b7d16cf6ee4f0d2b71dea01867dd8ed0de78320d37ab75ef41e515ba10c84b04af4c13ea63c6e47ad856ca4a7b5c67869a64a294bb70838c460966cd0c4da426a3f925ccdd031b0e1ae3b5a04dc949408e402f7783ef2249743"}, {0x1000, 0x4e00, "e4a228f95b4ab72c22366c0b5060d47a4b30546b2168dc9cd16dc5650598319529664413a0544262fa60fa3b8ca81ca155f38a816e7eda6fe47ce1e6208aedd2c560d4d3a9d772ace6017a6adddb38fb933addf692ab2b8cf0be05fb7211f402aacd4d910a0e52c70c9375fe568e48b6d9284b19436bb9b9f40a9a827de210fc5449fb4c67236e2ce9ee14728550e11fbc0f7f3b40f6e9ce3a906b6ad78ffe946a94ef8777253800920d667119275508edb9d3546e98715c9d355591b166bb5983fb4fbee04abd9f0c53b4c5e498dc137d9f42bb88f69bb8647dff0840a44a84863592b3ed7b5171309a0b273a21b58e127471458eaa174b2ad4b1e6d744714450120f49b1aecc2283460c9a76b965728bee68dafb59eaab84bfcfeef33673b577fdb6aabe78c17ca33fd42c44187041a0b8d03d6afc45fa1ddeee7f8e5106d865e05927fe21a7229d4f983253775c481a4661b5beda7631d6f9b0b04244de8fcdbe36160ba4027190ef5490e30f77ddbddab1aa5d54d687a6c9dd49d314f5f7cdf1605358fed3e46a4875c07ac1a89728442ff28da9e4100ff30718ba9cb8c2f723e255ecf48dad0a0f38cc5b9f6e42719f74a363024abaf5c42ec54f705dab96cedc0cab582eed767d78589ce91f0107a5abf450ab86ce12d00fcd76519b6d708d174cb09e025f3b754847caef0d12c039c198a854790c6d5e0118255a0e35dac0378cc3a47a862f1ba76803c146f8c229ff1d3035ce9f9c3ba501b9c814077e0f9fb3cfbd9791e7f2067c7460db1a6b3e761f5009a20d34ac77998cda8541057bfb3a7dfd5913cb4f8ed02ec9ac0ab5f974610b0018206190742f754aac40ea4240bcff760799684304011116be2abf212a577ee841d3de5655592915a4a04401ed51fe9fb7d0e7a10469f1efb64aea5773cfd2326db8604c2e954a68936ef7fd17d8c90056cb11895ee5f3f3984cfcd519740018817d6c0f0aaade4fa2180fbf307eb1b6c9564d6bc28553972736d3e1e71f78651123f710fff53bace5734b02f21218bed76fbd2743941e5871577cefc85742996c3cf0a6e020d6c88377a6b0c138bde1550b19d4cf1a3f7b63fcefae15a624350118bc84ac58cfbe1ac9f411e7e067edd4daf35100899995db92a6c1cb27aa6a76fb0fe7fb4621bee56250fdf2639aa27bd3a83fd4b1ba426997b576c089e5954883e87c356615a00efc1dc442260fd8239b666d2beae9dbbc372e531d3c15ea218b593732f83885cc362775cce8d04064e513b3829a7199564559143f584d449ad5afd62192bbf7c81b2b437f71f079550b07f97e810da6b0aeb559b2d6b340312dc4c23aa029d282650a33eb24190289116dc0a0eeb9552d5ff2c0698dd3883d701f2bb4959a488ff42834343f1d4c4a7c6c6cd17ab6e4430db87af580bcfccee763c53ffd30d61a687a5f44b44cd047774c28733cc0440af4171a53253b089b4acf48991f8b9d26f9cacbbac1fe5222779534dd4841eec0226fa006378bedbbe7ab021e76db34034b1fbd0d7bc5accab171582ec5362fd0a69c11959bb714aee931a957f90bc9774458ec02842e5f1b789e8fe538275b99d0251ce1725bdd77c0d60c6ee4b3fee23b47cd06ecf9ac7b097e5fb4a658139f37759d941cf2724d99918a4c0f74f7db5bc1544fbc55a65865243ea64f5c67027d159fa58b720899b69c7c29f4ccb9e69bf1f515b24cbada9a70c9c34bb7e8fc4187348a6a0d5bd56867c219c9035ef67161df12672d8b5825112494a5855093794c9c0307728b04aac99a021ce24a533b0bd053be8012c8e070c1aa33f0c822163e94d445cdcd4db38756d2518c625d1ab3479905dc055fe9b692ceecb6b2d4fadab2ea322710761a88952a19f526610c2561b21ef6635d790eee963cce4c8c7f3be715501532e9ba585278058eb9a776565d4a537c0c20c8bd01c397756fc566f26d9226b92f77d7fd4ae7b5f742258ee10dfc495f30b86a12d795087a8e9088fc12f4b0576fa88bf079a6d5643e76ef3567002fbf6e45f5d9663c0751dd8f90d282de34529e2a40e259a4bbef6a641f4258c6b46396a40024c76712cf89f015ee0e312b9d6e4633d1a3c1fcd0841e23b7531d5aab7140e81bea5c8b6359a44f86a1385facc76008fb32b7509d4e6cbebdcb0ef480c7970ca4481c0fc292f90894bea606feb13f8da2ab62d305732d2d492ab9ed4856dfba7427458ca7b9c250da1dd56d8d1a767f156a28683545a6fd2e0ff2087f718ce2875a0fe1fe38341a871ae16e1bc44ac13e4eebc613e8b507de809c62205daa35e2cb8e394a99aebe91aa83865c1857f01156204e359b689032ac2f9079dca70c0bdb9229a3b765942ee74588371b17636c314d703c7ddaaf460a8eba5d21211ae31f3fdc0434e41201cb02b8436d57779f316048d1c921e77cd5060d946d16c8cfc792cb17893b8a3c24ca2292db577b0c93ac1a10b1c437e2f4fb2bd81878c49286491a1070bc93c14b6f10cdf80bd27368f9d1823eb565a4d55e8d06042c8446a18214b79fcc815e625681fc1a7d3388ce3ce8c8a92deafdaa70f3c1d84bb05666f61abc02b4b462d494c6491ebe477d8df048ea9d2b242fec8503f8e63f88a3aa10aeb8c9bff29932166494831c567d8976f12b51743feadad96281e3a5bb83e982dc8e35fff39bb2c5692f6e10318bb51d1b9ca7b362062aaf5f8bbb010d82df43d700099642431ddf56a0eff730a235f5884f05c48bf5e0063beb95952652036d1cbdc9fd15965c5ba3ed46db7a6c5c24cd95abab3a704c1e7ec56336147962c8d5b7973013550ffbc03d0b451312b77c890e3c171d98396d2a524b466952a29b27a9a03ac14ad6a5529a80a4683e385cad588660f1fbc27a2f7e12eee438b0704aaf11ce88e8830ab02b30440edeea5d727f1cbf0ed92417ba18a11ba2fbf0e00c71b9be1cf92fd50e62070b1d531862c79edb256c07802f3f388a07da31da1853a28eedb2c5684c31ca59ee3abb5bfaadfc24877dbea826972b2b90c09e99993984255909fd90e0d814c0714766e5bd884fbc63491d54a00dbf0f288559d042c4d55ef78d7fdb983d79023a1678ab47781da707c45235255ec72dd27e8ab116f3c0841f4ba6d74f21003556d4753dc9810572d0dc9532be7c00977bbe46fb956e67436a3ce4f3d27a961d53476b9ab1fe70202762c0849f759ce41851efa5e0204174d04504ddc1a5466aaeb29aa013d8a5834f81ccd8910373bc9b87887d1460e23d9861bcfd7abd9dd68a8d1599f94114d1f84b5dee909e1e42f913d671b674fbbaa6fb32a447a9956f1c2736a70af1be36f0a111f45aad26dacc9ea49d3372375b6fe6b77790fd38435d7a432bab9a9158f4918823f55335f7dd34dc3d6fb24dc8a5e6df152923b1a95e188edb8161e3b20f57b36e84a1b06071c8ad5c00798a0470c51eb21aea2b7e56a51249192c620083277904df9023b98adec18859ff42dd9aa1f7699abae2e3834f0800a2424435c309258039d005a5f1d9bdf81a58b705666c8e5b9ceeea11c90774631731151aa6706794525e35982ad626af71b20807626a7fa0da40649315ba86e42d30250500c6260b19ad3adc9001b508bcd0a1a299e6dd277b7e494f3708e3ac4baa0c8d7708addb7c4021d3eb03f0de6eb0d844e54d5a58afcdaa63560bcb53fac4b013d73f34a0cf99f4dbd96ec9d1ceb391f8f73b78b746f52ecb430ad6004b8cf8974c6aa832a60f0f2727952bb3755aac60e0dc1492d421847a06bc1f3ab0eece0cd77f0bf6cf42c5cc4c5a086fe7f31ba1ce0986897ce6a9bc7dc5e00f249f54af7078464ef252743258887f2a9dbbbb4fb3488fc635aae912f44539bb365524c95a58491e00c6e572a421e8a13926689e3ec19a06584e9176ed57bf7a806a141a4e83c02f685bfd139622d8b628ec900da8254cffd1cc6070afa3816e288f590fcbb5a0a5ffa16d36129f6b9dd7eeb44551a79e752c1ae390b1063f7f89c243727e2e199ba47c15c50d7d04791ab3ee77ca5cfb8055135d741a569da1dcdfd000a6a5d1f9cd4bb2c2b445b0ab733c398158dc1cf6451603a38e740fdcaa7337e179c41309babab2ca52cb88eb612dc991f9096823f043e59ab53c2f24f58a2ca4ab3dcba530f2637d8edd2dd5aeaba875070a2352a064b1e1f482011360a52a0b43dffde037a3c1765a226214825bfac39628f0d64b2a96d1ad9cb32bc52f14b0e13b6c85196ba1c747d083a96d831ecab0396d7342b270448b33fd6a031cd877f5f1301fa808ae033e9ab4c0f40a6e85e06d36db1a94d954b9a86cf2e38aed133522292b90f486ea4f702bda6e6a6cf4b0c31e3a5fe185f1861aa00ee01c23784f7627d84532c0d46a6efe59d741c7a9de0d89b5898e8ddfcd82e01baa30ce94e731f04ede8bac884a41050f54e4e6336b2646ac3932dfc77d3b2adedb994239477ee736a380f294a4447cccad4c16d0c857eb8e870309e9d23577d4966ebb419aa7e5e4631117d09ea51a9dd5cdce11f205967a72da55b9885930289a5fbe80b43baaf3eb943f8b50be54d0c7f29e2247bb9644d5656e04813122ada07af3472e3f5a96e65a52bd67d8502986718ff48cf6cd40a69de5a884660b33973b8ff549bb303cb5077fbc9e94a3e45e1ebea7807b7aac0651c52cc81faad85f48badffe26bb282e8ec632dc39d309ae9fd9a05cc4e85fd57a077a2f892c61309233c64cfae21e0045542a136ebbda3548ba6239e97d7f26d7a9ad2b2ae97ec3ec5b162d9f3df21186a22401a63808073b3e76ba3331c11b3efc5c2bccb02d9faef3b2e90bcc454ea769f167e8d901cc8fdf93e0e5f314508610a39be3c3068ef0be95ffe2f28f0a9dc91766d6ae928785e5859d96273bf8c18632273c47f77ca6cd75b7c4ff64c6259d0aff3904a464d3e0175cd131f009ef37ceff5f9bfe44fed418e65ac450ff8730c1cf091d83db6a0ced5196634bdacbf507fa96fd45b3b2163b31589bfe320a1a7385b13bb9df40b197ff6d0ed0a167e8743fa0a80489882a01867e5cb250c7c81f4e2b332c34590c5108eefd0653c46074cf90649939c24fbbdbc84902ca77424e4bb23299e54f5de400ba6e25d17089df5e10d9bef60ec0b05469092588d4dae748dfeadd8932723c83637a5786ebdb5bcc6d981c93f44e7399e35fc2b6a1284ccc57a61e970ba2a47607462c26d498f00c07f7ba1ef0072e0a08be3947115b7b12993c9b47569a9ca289977c1e987c969946f159c3551accb78ee405c7a449d1732c4b9bdb63da399cfd713997a6ed1a462917e03da60d28954407d570fb84dc127b2b484a5acf9c6fd2e94c54087102f647deb3f196aba694367bc65df19c93ac1534d21282c30940c8d20ed988c4a3ccb6d9d5189dc066d3aa60fa64e1f2393293706ff627ab71bd1dc33218bfcc495170d9d4a727a13a906285e361a582c74d1fbaeb0ac9b6dcb1a908f09faf20c6b456e6cad57445a7a030f7242c502d287402f437dcb5b5412cce160f774d00a207f2b84926441170633f8ca8e64d1eb895a07746bb6c94aa378243353dbd1b58d5f8b8d7b1cbd2ee9f582646727bfeab5ec7e22c02d95241178787e410f0be86a5fc180087a36cc73be07ba903c1bc7e3dd24ff89501ccd400e9500043c300759d245aeb49cf15c3446842bfe0009854031f2be4701c3aee0e8959585c819f1fbfd582b93908efce7f6261f4e91e20d7d9a5da6539d61c493cbc717388e323c3cff40cb179e0f77acd3f"}]}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x66}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xd3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x680001, 0x0) 3.485323319s ago: executing program 4 (id=777): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x1e4, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x1e4}}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xbbb}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4626}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r2 = geteuid() quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, r2, &(0x7f0000000440)='./file0\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffe00}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f00000005c0)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000600)="4ecf4ac9727071c4", 0x8}, {&(0x7f0000000640)="029de1f8f461462c9bfdcc01451f86bb03770236d9ed538ec37d7fd8f6cb1a9ec8c928e1020a412e5b2c8af47262aeac8d18d0842d2fb7a57bb4141773293febbd41afb3df926524d4822f23378ea570a8c051e0c252c1b6ed3b720910dc7321f1bc", 0x62}], 0x2, &(0x7f0000000700)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9a9}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffeff}}], 0x30}, 0x8840) lsetxattr$security_capability(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), &(0x7f0000000800)=@v1={0x1000000, [{0xae8}]}, 0xc, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000840)=""/180, &(0x7f0000000900)=0xb4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x98, 0x1, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x994}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0xfffffff9}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x783}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xc656}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0xfffffff8}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x8b}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000b00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r4, &(0x7f0000002b40)={0xa0, 0x0, r5, {{0x3, 0x3, 0x3, 0xb4f4, 0x3d91000, 0x9, {0x6, 0xff, 0x3, 0x7ff, 0x5, 0xffffffffffffffff, 0x1, 0x49e, 0x3, 0x6000, 0x3, r2, 0x0, 0x9, 0x4}}, {0x0, 0xd}}}, 0xa0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000002cc0)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x3c, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffff}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8815}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002d40), r0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000002e00)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d80)={0x20, r6, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x2}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x800) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000002e40)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x6, @random="98abba7b2119"}, 0x171e874f9dbd71b0, {0x2, 0x4e22, @empty}, 'nicvf0\x00'}) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000002f00), 0xffffffffffffffff) r8 = pidfd_getfd(0xffffffffffffffff, r4, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000002f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002f80)=0x14) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000003080)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003040)={&(0x7f0000002fc0)={0x48, r7, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_NET_NS_FD={0x8}, @GTPA_LINK={0x8, 0x1, r9}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20080000}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r8, &(0x7f0000003280)={&(0x7f00000030c0), 0xc, &(0x7f0000003240)={&(0x7f0000003100)={0x11c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0xff}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x44090}, 0x4000000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) clock_gettime(0x0, &(0x7f0000003380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000032c0)={0x9, 0x9, 0x3ff, 0x9, 0x3, 0x2a, 0x2, 0xad}, &(0x7f0000003300)={0x7, 0x12e9, 0x2, 0x7fff, 0xa5a, 0x9, 0xfff, 0x5}, &(0x7f0000003340)={0xd, 0x2, 0x8, 0x60bc687, 0xfffffffffffffe9f, 0x100, 0x2, 0x80000000800000}, &(0x7f00000033c0)={r10, r11+60000000}, &(0x7f0000003440)={&(0x7f0000003400)={[0x80]}, 0x8}) select(0x40, &(0x7f0000003480)={0x1, 0x9, 0x2, 0x2, 0x6, 0x5, 0x6, 0x5}, &(0x7f00000034c0)={0x1, 0x76, 0x6, 0x6, 0xd17, 0x3, 0xc682, 0x1}, &(0x7f0000003500)={0x1, 0x0, 0x9, 0x8000000000000000, 0x100000000, 0x101, 0x9c, 0x5}, &(0x7f0000003540)) 3.427469044s ago: executing program 1 (id=778): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) read(r0, &(0x7f0000000180)=""/19, 0x13) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000100)={0x0, 0x2, 0x2, {0xb, @win={{0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 3.373855618s ago: executing program 4 (id=779): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x3, 0x4200000, 0xf800, 0xfff9, 0xe, 0x800, 0x0, 0x0, 0x8, 0x9}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000340), 0x1044a0, &(0x7f00000008c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_fscache}, {@access_client}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}], [{@fsmagic={'fsmagic', 0x3d, 0xfffffffffffffff8}}, {@fowner_eq}, {@flag='async'}, {@subj_type={'subj_type', 0x3d, 'cache=fscache'}}, {@appraise_type}, {@permit_directio}, {@fowner_eq}, {@fsuuid={'fsuuid', 0x3d, {[0x55, 0x34, 0x37, 0x62, 0x34, 0x0, 0x5c, 0x63], 0x2d, [0x33, 0x36, 0x37], 0x2d, [0x38, 0x37, 0x64, 0x65], 0x2d, [0x31, 0x34, 0x30, 0x61], 0x2d, [0x34, 0x39, 0x0, 0x34, 0x36, 0x66, 0x38, 0x65]}}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}}) 3.336143782s ago: executing program 1 (id=780): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x10) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x5a}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050027bd7000000000000300000008000300", @ANYRES32=r3, @ANYBLOB="0a003400020202020202000008004b0002000000"], 0x30}, 0x1, 0x0, 0x0, 0x20008889}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120110014a696d40030410604101010203010902240001000000020904098402a1d760010905060000005003050905", @ANYRESDEC], 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001100), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f00000033c0)={0x0, 0x0, &(0x7f0000003380)={&(0x7f0000003280)={0x44, r5, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0c1}, 0x24000804) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x9, 0xf0, 0xa, [{{0x9, 0x4, 0x0, 0xc, 0x0, 0x2, 0x6, 0x0, 0x1, {{0x9, 0x24, 0x6, 0x0, 0x0, "0051c141"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xff, 0x1ff, 0x9, 0xfa}, [@obex={0x5, 0x24, 0x15, 0x3}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x8, 0x76}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x81, 0x4, 0x4}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x3, 0x81, 0x5, 0x8, 0x3}, 0x5a, &(0x7f00000002c0)={0x5, 0xf, 0x5a, 0x6, [@ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x40, 0xf00f, 0x2, [0xc0f0, 0xff3f30, 0x18000, 0xf, 0xff3fff, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x6, 0x2, 0x3ff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xf, 0x4}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x7, 0x0, 0x1, 0x9d}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4d, 0x5, 0x0, 0x1, 0x40}, @generic={0x7, 0x10, 0x2, "b7ed6e90"}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x340a}}]}) 3.290139458s ago: executing program 4 (id=781): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) ioctl$KVM_GET_TSC_KHZ_cpu(r1, 0xaea3) read$FUSE(r1, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000000)=r2) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRES32=0x0], 0x0) 2.753211954s ago: executing program 3 (id=782): r0 = socket$kcm(0xa, 0x922000000003, 0x11) (async) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000002240)=""/4128, 0x0, 0x0, 0x0, 0x0}) (async) r2 = socket$kcm(0x10, 0x2, 0x4) connect(r0, &(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x65, @dev={0xfe, 0x80, '\x00', 0xd}, 0x1, 0x1}, 0x80) (async) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) (async) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[@ip_retopts={{0x0, 0x0, 0x7, {[@rr={0x7, 0x0, 0xcd}, @timestamp_addr={0x44, 0x0, 0x82, 0x1, 0x3, [{@multicast1, 0x4}, {@private=0xa010101, 0x3}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x7}, {@empty, 0x646}, {@multicast2, 0x5}, {@broadcast, 0x9}, {@rand_addr=0x64010102, 0x8}, {@local, 0x80000000}, {@rand_addr=0x64010100, 0xffffffff}]}]}}}], 0x7}, 0x0) r4 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e31"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) 1.909663126s ago: executing program 1 (id=783): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6a3, 0xccd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x110, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x5, 0x6, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x0, 0x5}}}}}]}}]}}, 0x0) (async) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6a3, 0xccd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x110, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x5, 0x6, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x0, 0x5}}}}}]}}]}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f00000006c0)=@ethtool_drvinfo={0x3, "94498ec413ddf8a59a80d388ee79f2562c6f0ba2aa2fa37786da1a6b6afbe58b", "3f3bbd3a1228ee97f109b69e7fea1ad11e7a4cbe55f9b328f881de8583223f31", "a475106e356f416d3a55e683b821fb6ff1ef6d545527c744206a84c9a4ba2ff1", "bc2cc4174144a41f47bf074f01a42a1602045ef815a9fe035bac76ed49a40453", "5480c25e8d1f5c82131d7b6a1645da0eadc6016b9c96ba64156e7afbf64ad5d1", "64545a390a3e939ce90d9124", 0x1, 0x9, 0x3, 0x7f, 0xffffff4f}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)={0x0, 0x5, 0x3, {0x3, 0xa, "dd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.438684132s ago: executing program 0 (id=784): ioperm(0x0, 0x3, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x4201) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x2240, 0x0, 0x5}, 0x18) mkdirat(r4, &(0x7f0000000080)='./file0/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1c0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) setxattr$system_posix_acl(&(0x7f0000000140)='./file0/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x7800) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.293747737s ago: executing program 3 (id=785): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000700)={{0x2}, 0x0, [0x2000000, 0x0, 0x200000, 0x0, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xba, 0xfffffffffffffdfc, 0x4, 0x40000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x8001, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x10, 0xe5, 0x89, 0x10, 0x5ac, 0x264, 0x286b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe3, 0x2, 0x0, 0x3, 0x9b, 0x2}}]}}]}}, 0x0) 1.292322825s ago: executing program 0 (id=786): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) getpeername(r2, 0x0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000d0f33af5f1f64ed4e47cf8fd71f4408f6acef8a9cfa53fc161832c0b000000000000009d1c241a8100a3595b66c7f54e383ed03a90", @ANYRES16=r5, @ANYBLOB="010126bd7000000000002b00000008000300", @ANYRES32=r6, @ANYBLOB="0a003400010101010101000008000c0000000100"], 0x30}}, 0x0) (async) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000002340)=ANY=[@ANYBLOB="12010003020000082505a1a440000102030109023b"], &(0x7f0000000940)={0x0, 0x0, 0xf, &(0x7f0000002580)=ANY=[@ANYBLOB="050f0f10"]}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x2083, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r7, 0x3b82, &(0x7f00000001c0)={0x18, r8, 0x3, 0x0, &(0x7f0000000280)=[{0x1, 0x8}, {0x800, 0xfffffffffffffc00}, {0x101, 0x2}]}) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000001840)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010017bd7000fbdbdf250700000008000300", @ANYRES32=r10, @ANYBLOB="140004006361696630000000000000000000000008000500060000000800178004000500"], 0x40}, 0x1, 0x0, 0x0, 0xc804}, 0x0) 714.633134ms ago: executing program 1 (id=787): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNSETVNETBE(r1, 0x400454de, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0x9, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'bridge0\x00', &(0x7f00000003c0)=@ethtool_gstrings={0x1b, 0x6, 0xd2, "9d484b0eb72e83449919846c6b33e6474b1a1781db2d38d65363209fc3c399d09202c2e8b252d9ceeecbd2eeefdb11be125eab82b73e6702e6695d8491c828fdef6c80c0ed7091a8dd200d3d713937e920f3df9c828df05fa676f90012a37562d9d1150896a0f2df779dd7d28359c37106dac88a1fb9bb7b75c46c42413c8ed9aaa5e5af8f4c99c2dd4ba36ae663ba882ff1e202a41d5f966d0c28a17cb341087ac18e096493f3d184162fc8d9aa7bd53f48f82c30226a50826d82dd55e22944ea87d056673cf39c9ac1a161ad30bd66f10e"}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'vlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080088484803", 0x1a, 0x40000, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) r5 = syz_usb_connect(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100000ba649672009222689b701020b0109024500010000000009040bd313e832853dbbc3acfcc87880f5a73681b37a549dd73d9816ec708597ab5bc7dc94fa897bfa12169404f54bfc8e2d50e2e8f028444dbc24d48ef01874d086dedadab045fe"], 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000240)) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000180)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="4fa500000000003e"], &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000100), 0x0}, 0x0) 215.233687ms ago: executing program 4 (id=788): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) read(r0, &(0x7f0000000180)=""/19, 0x13) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000100)={0x0, 0x2, 0x2, {0xb, @win={{0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 130.12309ms ago: executing program 4 (id=789): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x3, 0x4200000, 0xf800, 0xfff9, 0xe, 0x800, 0x0, 0x0, 0x8, 0x9}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000340), 0x1044a0, &(0x7f00000008c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_fscache}, {@access_client}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}], [{@fsmagic={'fsmagic', 0x3d, 0xfffffffffffffff8}}, {@fowner_eq}, {@flag='async'}, {@subj_type={'subj_type', 0x3d, 'cache=fscache'}}, {@appraise_type}, {@permit_directio}, {@fowner_eq}, {@fsuuid={'fsuuid', 0x3d, {[0x55, 0x34, 0x37, 0x62, 0x34, 0x0, 0x5c, 0x63], 0x2d, [0x33, 0x36, 0x37], 0x2d, [0x38, 0x37, 0x64, 0x65], 0x2d, [0x31, 0x34, 0x30, 0x61], 0x2d, [0x34, 0x39, 0x0, 0x34, 0x36, 0x66, 0x38, 0x65]}}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}}) 129.305171ms ago: executing program 4 (id=790): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x32b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x3, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x31, 0x1, {0x22, 0xaf6}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000880)={0x2c, &(0x7f0000000680)={0x40, 0x7, 0x6d, {0x6d, 0x22, "beb87283e17c6fd94ca0814ae836e86039afe891523822610ca445057725738e7c8634ed85618431fdaa2fc03012d1b56719565314fbc068eebe1a72f68c6c2791d158700812a0ca0507dcd89bf828bea62c64fb02c402bf8913c52ea4b7028b613256d19c408e28271029"}}, &(0x7f0000000700)={0x0, 0x3, 0x4d, @string={0x4d, 0x3, "8a833f3d4f2a3c8ddd7b4da043bf964109b26eca6ab965eb11eb2e5f539983ff93f82987fa4d8e5ef0f8b50d852ef296a31a476d9c8c9a9a49d28b634ee2e36b84b46dd762f31343a5783b"}}, &(0x7f0000000780)={0x0, 0xf, 0x44, {0x5, 0xf, 0x44, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa8030cac059b42a2, 0x0, 0x8, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x5, 0x1, 0xb15c}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "e9abf53029d306e1fc7439d89b7f4983"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x3, 0x7, 0x8001}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x7, 0x5, 0xff}]}}, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x52, 0x10, 0x2, 0x9e, "0d350306", "0880d46a"}}, &(0x7f0000000840)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x0, 0x6, 0x1, 0x4, 0x8}}}, &(0x7f0000000d00)={0x84, &(0x7f00000008c0)={0x20, 0xb, 0x17, "659270c03188e4ee7c0ac57473cd590b278067a056e81f"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000009c0)={0x20, 0x0, 0x8, {0x160, 0x2, [0x0]}}, &(0x7f0000000a00)={0x40, 0x7, 0x2, 0xff}, &(0x7f0000000a40)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000000a80)={0x40, 0xb, 0x2, "a55f"}, &(0x7f0000000ac0)={0x40, 0xf, 0x2, 0xb6d}, &(0x7f0000000b00)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b80)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000bc0)={0x40, 0x19, 0x2, "a6f9"}, &(0x7f0000000c00)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000c40)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000c80)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000cc0)={0x40, 0x21, 0x1}}) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)='b:::\x00\xef\xdfB\xfa=\xe3\xd1\x9d\xe1\xbfUlJ4]y-,\x8a\x03\x91xu\x9cP\xdc\xe5\x95\xa2@\x9c\x98\xa4\xd2\xd4}\xc8]7N\xf3\x0e\'\xa0x\xfbdt\xb4\x1fW\xe7\xbe\xaf\x01.zT\xab\x92I\x104\x8c\x18\x16\x1c\x8a\x8e\xfd\x8b{ZVHZ2\xd3\xd6-~\x96\x80#\xee)+L\xf1\x00\xd5p\xe7 \x8c\xd2\a\x1e\xae\xb4\xe8\xd1\xe1\xed\xb8\x94\xb2*\x1c\xaeG\x1e\xdb\xc0Q\xb9`K\xffG\xc0\xa2\xb41\xac\x98\x01\xde}:\b\xa0Oq\xec\xa8\xf0\x8f\xe3\xa17\xe3\xd7\x9c^\x90\xfal\xbe\x81\x9a\xa4\x00K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) syz_usb_connect$uac1(0x3, 0xe9, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd7, 0x3, 0x1, 0x9, 0x50, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x80}, [@extension_unit={0xb, 0x24, 0x8, 0x1, 0xff, 0x9, "a8e41f45"}, @selector_unit={0x7, 0x24, 0x5, 0x4, 0xf8, '>R'}, @selector_unit={0xa, 0x24, 0x5, 0x3, 0xff, "fe5116e440"}, @selector_unit={0x8, 0x24, 0x5, 0x3, 0x79, "add331"}, @selector_unit={0x6, 0x24, 0x5, 0x2, 0x10, "f1"}, @processing_unit={0x9, 0x24, 0x7, 0x1, 0x5, 0xb, "62da"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xb8, 0x2, 0xe, 0x5, "ef970c1525cc6b32"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xf1, 0x6, 0xff, {0x7, 0x25, 0x1, 0x3, 0xa, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x9, 0x2, 0x3, 0xae, "ce1263", "746bb2"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x2, 0xb9, 0x0, "d78a40"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x5, 0x0, 0x1, "354ecebed79578"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x4, 0x4, 0x7, 0x9c, "847acd26"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x9d, 0x1c, 0x5, {0x7, 0x25, 0x1, 0x0, 0xd, 0x8}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x5, 0x40, 0x0, 0x40, 0x5}, 0xbd, &(0x7f00000000c0)={0x5, 0xf, 0xbd, 0x6, [@ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x5, 0xff00, 0x4, [0xff0000, 0x1e, 0xc030]}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x6d0, 0x0, 0x1, [0xc00f, 0xff000f, 0xc000]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x15, 0x8, 0x23, 0x3590, 0x6}, @generic={0x62, 0x10, 0x0, "edf1fa0195c55fe52aa828a5fd0272f18d88c40d74ef89f41f5037f7f60c943350d53c6797edb6f5f4864287a92c718857e55356b3b9e7812c513408777745033c884175f9e2a686eca66643782c7482c754b86d07541af3d87a7e48e702a3"}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "544410085cbcfc47305ef7d065cc73d4"}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0xb, 0xb, 0x8}]}, 0x4, [{0xe4, &(0x7f0000000300)=@string={0xe4, 0x3, "0fc54c2891cd307d408280433be862e64410609908c96e9629a6005e8f7281bd160761dad8db2dfdeea18176fb702cbd877e0de642a7fc52705069729785d3293d4573cb68b97a5c6d5d58e3a1393256eaea68d2ca42930704c3becc52931c47bd01f5f4487c7834b0d0615dace6ee86d1e20b070cd16ba637b4c2bdbff0cf30b8fb38800b32cd97d47c811a7835e98b1279fb1343aa7d1f64bbedd2997fbbee3650ea28ca81b504c654d9e4a28d533c4757f5bfe827b121c28da287e4c5ec80cab5fefa03c3b429130f643f104b563f0931d063155c138ce353b8b980f25757354b"}}, {0x5c, &(0x7f0000000400)=@string={0x5c, 0x3, "28e2463940bd8e6ebedd702b17bb7c5e608f1c32f73c058588de17776367421db5e4af5afe814c50e6cdd4857ab97af76eb2adb0728dd1cbd215ec2af978a206a7da770adffea2d5b7cad169f8abac14caca0ba599ce92ec3272"}}, {0x59, &(0x7f0000000480)=@string={0x59, 0x3, "2d8e8bcc5578e9d9543668203d34609d9de4f79dfbf17a22a0b99e945a252b3a9fcdd50ed5e60ad416322c14e0a4f1e3fbe90e8e78849d445196d6e0d0af646b48211a6fe5ea0522623bd61cce2fe5dc428a396f96e92e"}}, {0xcb, &(0x7f0000000500)=@string={0xcb, 0x3, "5b31fb7582702fb90ff014b5ec2ecb3cca553d326986f1b74fda7a67ec3867ef809abcea99a3ae4a52affbd44ee0a01aecf5f00f57e77ae84cccd6fd014b339073580d42cd9be4c9a60e6d39dad9838680c43185bcea646b87ae3aa034f5ab83d76e90e7f0e128e3d49ffe912079615896c04a69e51922ba3d4308b1ee843c211896831636f4b5e30ca743f29d3fa795d46b855cd2269d213585d4e69bca92b7917d3d42398f74fa041d03776ea50243dd69ca5dce1add311d12434e8363fcb449cf01901bde6777e1"}}]}) ioctl$VT_DISALLOCATE(r3, 0x5608) ioctl$KDSETLED(r3, 0x4b32, 0x3) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x37, {0x37, 0x5, "894c0f82c281c6a2b5c71885493f21beff39150ab530d92a1f4dee564bf77d0c0db993ff459cf5bb00037a0a3f85b646c018a21456"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x32b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x3, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x31, 0x1, {0x22, 0xaf6}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x10}}}}}]}}]}}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000880)={0x2c, &(0x7f0000000680)={0x40, 0x7, 0x6d, {0x6d, 0x22, "beb87283e17c6fd94ca0814ae836e86039afe891523822610ca445057725738e7c8634ed85618431fdaa2fc03012d1b56719565314fbc068eebe1a72f68c6c2791d158700812a0ca0507dcd89bf828bea62c64fb02c402bf8913c52ea4b7028b613256d19c408e28271029"}}, &(0x7f0000000700)={0x0, 0x3, 0x4d, @string={0x4d, 0x3, "8a833f3d4f2a3c8ddd7b4da043bf964109b26eca6ab965eb11eb2e5f539983ff93f82987fa4d8e5ef0f8b50d852ef296a31a476d9c8c9a9a49d28b634ee2e36b84b46dd762f31343a5783b"}}, &(0x7f0000000780)={0x0, 0xf, 0x44, {0x5, 0xf, 0x44, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa8030cac059b42a2, 0x0, 0x8, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x5, 0x1, 0xb15c}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "e9abf53029d306e1fc7439d89b7f4983"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x3, 0x7, 0x8001}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x7, 0x5, 0xff}]}}, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x52, 0x10, 0x2, 0x9e, "0d350306", "0880d46a"}}, &(0x7f0000000840)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x0, 0x6, 0x1, 0x4, 0x8}}}, &(0x7f0000000d00)={0x84, &(0x7f00000008c0)={0x20, 0xb, 0x17, "659270c03188e4ee7c0ac57473cd590b278067a056e81f"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000009c0)={0x20, 0x0, 0x8, {0x160, 0x2, [0x0]}}, &(0x7f0000000a00)={0x40, 0x7, 0x2, 0xff}, &(0x7f0000000a40)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000000a80)={0x40, 0xb, 0x2, "a55f"}, &(0x7f0000000ac0)={0x40, 0xf, 0x2, 0xb6d}, &(0x7f0000000b00)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b80)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000bc0)={0x40, 0x19, 0x2, "a6f9"}, &(0x7f0000000c00)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000c40)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000c80)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000cc0)={0x40, 0x21, 0x1}}) (async) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)='b:::\x00\xef\xdfB\xfa=\xe3\xd1\x9d\xe1\xbfUlJ4]y-,\x8a\x03\x91xu\x9cP\xdc\xe5\x95\xa2@\x9c\x98\xa4\xd2\xd4}\xc8]7N\xf3\x0e\'\xa0x\xfbdt\xb4\x1fW\xe7\xbe\xaf\x01.zT\xab\x92I\x104\x8c\x18\x16\x1c\x8a\x8e\xfd\x8b{ZVHZ2\xd3\xd6-~\x96\x80#\xee)+L\xf1\x00\xd5p\xe7 \x8c\xd2\a\x1e\xae\xb4\xe8\xd1\xe1\xed\xb8\x94\xb2*\x1c\xaeG\x1e\xdb\xc0Q\xb9`K\xffG\xc0\xa2\xb41\xac\x98\x01\xde}:\b\xa0Oq\xec\xa8\xf0\x8f\xe3\xa17\xe3\xd7\x9c^\x90\xfal\xbe\x81\x9a\xa4\x00K', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) syz_usb_connect$uac1(0x3, 0xe9, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd7, 0x3, 0x1, 0x9, 0x50, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x80}, [@extension_unit={0xb, 0x24, 0x8, 0x1, 0xff, 0x9, "a8e41f45"}, @selector_unit={0x7, 0x24, 0x5, 0x4, 0xf8, '>R'}, @selector_unit={0xa, 0x24, 0x5, 0x3, 0xff, "fe5116e440"}, @selector_unit={0x8, 0x24, 0x5, 0x3, 0x79, "add331"}, @selector_unit={0x6, 0x24, 0x5, 0x2, 0x10, "f1"}, @processing_unit={0x9, 0x24, 0x7, 0x1, 0x5, 0xb, "62da"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xb8, 0x2, 0xe, 0x5, "ef970c1525cc6b32"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xf1, 0x6, 0xff, {0x7, 0x25, 0x1, 0x3, 0xa, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x9, 0x2, 0x3, 0xae, "ce1263", "746bb2"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x2, 0xb9, 0x0, "d78a40"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x5, 0x0, 0x1, "354ecebed79578"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x4, 0x4, 0x7, 0x9c, "847acd26"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x9d, 0x1c, 0x5, {0x7, 0x25, 0x1, 0x0, 0xd, 0x8}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x5, 0x40, 0x0, 0x40, 0x5}, 0xbd, &(0x7f00000000c0)={0x5, 0xf, 0xbd, 0x6, [@ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x5, 0xff00, 0x4, [0xff0000, 0x1e, 0xc030]}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x6d0, 0x0, 0x1, [0xc00f, 0xff000f, 0xc000]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x15, 0x8, 0x23, 0x3590, 0x6}, @generic={0x62, 0x10, 0x0, "edf1fa0195c55fe52aa828a5fd0272f18d88c40d74ef89f41f5037f7f60c943350d53c6797edb6f5f4864287a92c718857e55356b3b9e7812c513408777745033c884175f9e2a686eca66643782c7482c754b86d07541af3d87a7e48e702a3"}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "544410085cbcfc47305ef7d065cc73d4"}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0xb, 0xb, 0x8}]}, 0x4, [{0xe4, &(0x7f0000000300)=@string={0xe4, 0x3, "0fc54c2891cd307d408280433be862e64410609908c96e9629a6005e8f7281bd160761dad8db2dfdeea18176fb702cbd877e0de642a7fc52705069729785d3293d4573cb68b97a5c6d5d58e3a1393256eaea68d2ca42930704c3becc52931c47bd01f5f4487c7834b0d0615dace6ee86d1e20b070cd16ba637b4c2bdbff0cf30b8fb38800b32cd97d47c811a7835e98b1279fb1343aa7d1f64bbedd2997fbbee3650ea28ca81b504c654d9e4a28d533c4757f5bfe827b121c28da287e4c5ec80cab5fefa03c3b429130f643f104b563f0931d063155c138ce353b8b980f25757354b"}}, {0x5c, &(0x7f0000000400)=@string={0x5c, 0x3, "28e2463940bd8e6ebedd702b17bb7c5e608f1c32f73c058588de17776367421db5e4af5afe814c50e6cdd4857ab97af76eb2adb0728dd1cbd215ec2af978a206a7da770adffea2d5b7cad169f8abac14caca0ba599ce92ec3272"}}, {0x59, &(0x7f0000000480)=@string={0x59, 0x3, "2d8e8bcc5578e9d9543668203d34609d9de4f79dfbf17a22a0b99e945a252b3a9fcdd50ed5e60ad416322c14e0a4f1e3fbe90e8e78849d445196d6e0d0af646b48211a6fe5ea0522623bd61cce2fe5dc428a396f96e92e"}}, {0xcb, &(0x7f0000000500)=@string={0xcb, 0x3, "5b31fb7582702fb90ff014b5ec2ecb3cca553d326986f1b74fda7a67ec3867ef809abcea99a3ae4a52affbd44ee0a01aecf5f00f57e77ae84cccd6fd014b339073580d42cd9be4c9a60e6d39dad9838680c43185bcea646b87ae3aa034f5ab83d76e90e7f0e128e3d49ffe912079615896c04a69e51922ba3d4308b1ee843c211896831636f4b5e30ca743f29d3fa795d46b855cd2269d213585d4e69bca92b7917d3d42398f74fa041d03776ea50243dd69ca5dce1add311d12434e8363fcb449cf01901bde6777e1"}}]}) (async) ioctl$VT_DISALLOCATE(r3, 0x5608) (async) ioctl$KDSETLED(r3, 0x4b32, 0x3) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x37, {0x37, 0x5, "894c0f82c281c6a2b5c71885493f21beff39150ab530d92a1f4dee564bf77d0c0db993ff459cf5bb00037a0a3f85b646c018a21456"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) 35.287946ms ago: executing program 3 (id=791): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000140)='adfs\x00', 0x20080c4, 0x0) (async) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000200)={0x4, 0xc1eb}) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904"], 0x0) (async) close(0x3) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xef, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x20, 0x3, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x3, 0x1, {0x9, 0x21, 0x8000, 0x0, 0x1, {0x22, 0xe83}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4b, 0x7, 0x6}}}}}]}}]}}, 0x0) 0s ago: executing program 0 (id=792): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@main=@item_012={0x0, 0x0, 0x8}, @local=@item_012={0x2, 0x2, 0x0, "00eb"}, @main=@item_4={0x3, 0x0, 0x9, "5aa8257f"}, @main=@item_012={0x0, 0x0, 0xb}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) r1 = syz_usb_connect$uac1(0x6, 0xbe, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xac, 0x3, 0x1, 0x6, 0xc0, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x6}, [@feature_unit={0xb, 0x24, 0x6, 0x5, 0x6, 0x2, [0x3, 0x9], 0xea}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x204, 0x3, 0x7, 0x61, 0x0, 0x6}, @selector_unit={0xa, 0x24, 0x5, 0x3, 0x94, "57e818d64c"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xd, 0x9, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x3, 0x3, {0x7, 0x25, 0x1, 0x2, 0x3, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x7, 0x4, 0xfc, 0xbe, "7690e21ec4"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x4, 0x3ff, 0x5, "cacfb0"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x3, 0x7f, 0x5, "dea66c"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7, 0x7f, 0x9, {0x7, 0x25, 0x1, 0x1, 0x81, 0xfff7}}}}}}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0xd, 0x9, 0x4, 0xff, 0x2}, 0x27, &(0x7f0000000080)={0x5, 0xf, 0x27, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x41, 0x3, 0x14, 0xff00, 0xe0}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x2, 0xb, 0xa}, @ssp_cap={0x10, 0x10, 0xa, 0xa, 0x1, 0x6, 0xf, 0x4, [0xff3f00]}]}, 0x1, [{0xfc, &(0x7f0000000280)=@string={0xfc, 0x3, "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"}}]}) syz_usb_control_io$uac1(r1, &(0x7f00000004c0)={0x14, &(0x7f0000000380)={0x40, 0x8, 0x102, {0x102, 0x2, "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"}}, &(0x7f0000000140)={0x0, 0x3, 0x5, @string={0x5, 0x3, "6562be"}}}, &(0x7f00000007c0)={0x44, &(0x7f0000000500)={0x20, 0x13, 0xfa, "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"}, &(0x7f0000000600)={0x0, 0xa, 0x1}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xd7}, &(0x7f0000000680)={0x20, 0x81, 0x3, "fd0dd6"}, &(0x7f00000006c0)={0x20, 0x82, 0x1, 'z'}, &(0x7f0000000700)={0x20, 0x83, 0x1, "da"}, &(0x7f0000000740)={0x20, 0x84, 0x2, "8eed"}, &(0x7f0000000780)={0x20, 0x85, 0x3, "f10535"}}) kernel console output (not intermixed with test programs): 02] usb 1-1: config 0 has no interface number 0 [ 198.040478][ T5902] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 198.066188][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.068440][ T7659] fuse: Bad value for 'group_id' [ 198.081999][ T5902] usb 1-1: Product: syz [ 198.086936][ T5928] usb 3-1: USB disconnect, device number 64 [ 198.088022][ T7659] fuse: Bad value for 'group_id' [ 198.094321][ T5902] usb 1-1: Manufacturer: syz [ 198.107054][ T7659] autofs: Bad value for 'fd' [ 198.108354][ T5902] usb 1-1: SerialNumber: syz [ 198.144861][ T5902] usb 1-1: config 0 descriptor?? [ 198.166709][ T5902] smsc95xx v2.0.0 [ 198.254991][ T919] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 198.427537][ T919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 198.437329][ T919] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 198.455748][ T919] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 198.473913][ T919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.481987][ T919] usb 4-1: Product: syz [ 198.493800][ T919] usb 4-1: Manufacturer: syz [ 198.498481][ T919] usb 4-1: SerialNumber: syz [ 198.520884][ T919] usb 4-1: config 0 descriptor?? [ 198.615656][ T7651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.624643][ T7651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.741411][ T5952] usb 4-1: USB disconnect, device number 66 [ 199.262168][ T5863] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 199.276397][ T5863] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 199.285430][ T5863] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 199.299832][ T5863] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 199.310597][ T5863] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 199.420101][ T7666] wlan1 speed is unknown, defaulting to 1000 [ 199.802028][ T7666] chnl_net:caif_netlink_parms(): no params data found [ 199.884451][ T7680] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 199.893450][ T5862] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 199.966646][ T7666] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.974759][ T7666] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.982251][ T7666] bridge_slave_0: entered allmulticast mode [ 199.996770][ T7666] bridge_slave_0: entered promiscuous mode [ 200.009544][ T7666] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.017503][ T7666] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.025285][ T7666] bridge_slave_1: entered allmulticast mode [ 200.033661][ T7666] bridge_slave_1: entered promiscuous mode [ 200.062623][ T5862] usb 4-1: Using ep0 maxpacket: 32 [ 200.086568][ T5862] usb 4-1: unable to get BOS descriptor or descriptor too short [ 200.101355][ T5862] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 200.108553][ T7666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.111965][ T5862] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 200.130327][ T7666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.131712][ T5862] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 200.149022][ T5862] usb 4-1: config 128 has no interface number 0 [ 200.155605][ T5862] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 200.175132][ T5862] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 200.216180][ T5862] usb 4-1: config 128 interface 127 has no altsetting 0 [ 200.232233][ T5862] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 200.235773][ T7666] team0: Port device team_slave_0 added [ 200.255670][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.267596][ T5862] usb 4-1: Product: syz [ 200.271863][ T5862] usb 4-1: Manufacturer: syz [ 200.281730][ T7666] team0: Port device team_slave_1 added [ 200.289398][ T5862] usb 4-1: SerialNumber: syz [ 200.361468][ T7666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.368628][ T7666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.397648][ T7666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.411471][ T7666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.418878][ T7666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.445412][ T7666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.461792][ T7694] binder: 7693:7694 ioctl c018620c 200000000340 returned -1 [ 200.560777][ T7666] hsr_slave_0: entered promiscuous mode [ 200.591320][ T7666] hsr_slave_1: entered promiscuous mode [ 200.611361][ T7666] debugfs: 'hsr0' already exists in 'hsr' [ 200.625038][ T5902] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 200.637563][ T7666] Cannot create hsr debugfs directory [ 200.667869][ T5902] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 200.682570][ T5862] usb 4-1: USB disconnect, device number 67 [ 200.700762][ T5902] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 200.741388][ T5902] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 200.759186][ T6892] udevd[6892]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.788987][ T5902] usb 1-1: USB disconnect, device number 44 [ 200.852231][ T5950] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 201.001812][ T5950] usb 2-1: device descriptor read/64, error -71 [ 201.023245][ T5863] Bluetooth: hci3: command 0x0405 tx timeout [ 201.214986][ T7666] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 201.245934][ T7666] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 201.256542][ T5950] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 201.313553][ T7666] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 201.350635][ T7666] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 201.358216][ T5870] Bluetooth: hci2: command tx timeout [ 201.427120][ T5950] usb 2-1: device descriptor read/64, error -71 [ 201.503773][ T7666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.528193][ T7666] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.562437][ T5950] usb usb2-port1: attempt power cycle [ 201.580984][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.588116][ T7720] netlink: 48 bytes leftover after parsing attributes in process `syz.0.549'. [ 201.588237][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.636650][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.644215][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.682423][ T7721] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 201.964057][ T5950] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 201.972302][ T919] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 201.991761][ T5950] usb 2-1: device descriptor read/8, error -71 [ 202.025544][ T7666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.125247][ T7731] FAULT_INJECTION: forcing a failure. [ 202.125247][ T7731] name failslab, interval 1, probability 0, space 0, times 0 [ 202.140000][ T7731] CPU: 1 UID: 0 PID: 7731 Comm: syz.3.551 Not tainted syzkaller #0 PREEMPT(full) [ 202.140028][ T7731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 202.140043][ T7731] Call Trace: [ 202.140051][ T7731] [ 202.140061][ T7731] dump_stack_lvl+0x189/0x250 [ 202.140112][ T7731] ? __pfx____ratelimit+0x10/0x10 [ 202.140140][ T7731] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.140171][ T7731] ? __pfx__printk+0x10/0x10 [ 202.140207][ T7731] ? __pfx___might_resched+0x10/0x10 [ 202.140237][ T7731] should_fail_ex+0x414/0x560 [ 202.140265][ T7731] should_failslab+0xa8/0x100 [ 202.140290][ T7731] __kmalloc_noprof+0xcb/0x7f0 [ 202.140310][ T7731] ? __local_bh_enable_ip+0x12d/0x1c0 [ 202.140332][ T7731] ? sock_kmalloc+0xd6/0x160 [ 202.140351][ T7731] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.140384][ T7731] sock_kmalloc+0xd6/0x160 [ 202.140406][ T7731] alg_setkey+0x55/0x190 [ 202.140428][ T7731] ? alg_setsockopt+0x3c5/0x4a0 [ 202.140454][ T7731] alg_setsockopt+0x3da/0x4a0 [ 202.140479][ T7731] ? __pfx_alg_setsockopt+0x10/0x10 [ 202.140505][ T7731] do_sock_setsockopt+0x17c/0x1b0 [ 202.140540][ T7731] __x64_sys_setsockopt+0x13f/0x1b0 [ 202.140577][ T7731] do_syscall_64+0xfa/0xfa0 [ 202.140604][ T7731] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.140630][ T7731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.140651][ T7731] ? clear_bhb_loop+0x60/0xb0 [ 202.140676][ T7731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.140696][ T7731] RIP: 0033:0x7f796398ebe9 [ 202.140727][ T7731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.140744][ T7731] RSP: 002b:00007f7964859038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 202.140771][ T7731] RAX: ffffffffffffffda RBX: 00007f7963bc5fa0 RCX: 00007f796398ebe9 [ 202.140793][ T7731] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 202.140804][ T7731] RBP: 00007f7964859090 R08: 0000000000000046 R09: 0000000000000000 [ 202.140818][ T7731] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 202.140831][ T7731] R13: 00007f7963bc6038 R14: 00007f7963bc5fa0 R15: 00007ffc33f7ba08 [ 202.140866][ T7731] [ 202.356100][ C1] vkms_vblank_simulate: vblank timer overrun [ 202.366821][ T919] usb 1-1: Using ep0 maxpacket: 32 [ 202.375094][ T919] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 202.383524][ T919] usb 1-1: config 0 has no interface number 0 [ 202.389668][ T919] usb 1-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 202.399893][ T919] usb 1-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 202.412672][ T919] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 202.421895][ T919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.429938][ T919] usb 1-1: Product: syz [ 202.434206][ T919] usb 1-1: Manufacturer: syz [ 202.438833][ T919] usb 1-1: SerialNumber: syz [ 202.445272][ T5950] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 202.454038][ T919] usb 1-1: config 0 descriptor?? [ 202.459714][ T7721] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 202.471808][ T5950] usb 2-1: device descriptor read/8, error -71 [ 202.484187][ T7721] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 202.491597][ T7666] veth0_vlan: entered promiscuous mode [ 202.509611][ T7666] veth1_vlan: entered promiscuous mode [ 202.529255][ T919] plusb 1-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, f6:a3:1e:83:e6:bb [ 202.575827][ T7666] veth0_macvtap: entered promiscuous mode [ 202.582141][ T5950] usb usb2-port1: unable to enumerate USB device [ 202.594812][ T7666] veth1_macvtap: entered promiscuous mode [ 202.620279][ T7666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.648871][ T7666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.678108][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.687921][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.698991][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.719395][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.955593][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.975861][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.066176][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.107244][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.432954][ T5870] Bluetooth: hci2: command tx timeout [ 203.571979][ T5952] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 203.791086][ T5952] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 203.803637][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.815259][ T5952] usb 5-1: Product: syz [ 203.823173][ T5952] usb 5-1: Manufacturer: syz [ 203.827952][ T5952] usb 5-1: SerialNumber: syz [ 203.933289][ T5862] usb 1-1: USB disconnect, device number 45 [ 203.941477][ T5862] plusb 1-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 203.962510][ T7871] netlink: 'syz.1.553': attribute type 1 has an invalid length. [ 204.057873][ T7821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.080149][ T7821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.206788][ T7821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.233345][ T7821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.345738][ T7821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.405061][ T7821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.508813][ T7821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.554810][ T7821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.658447][ T7821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.674125][ T7821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.176007][ T5952] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 205.234807][ T5952] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 205.251401][ T5952] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 205.288792][ T5950] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 205.316346][ T5952] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 205.398959][ T5952] usb 5-1: USB disconnect, device number 2 [ 205.475891][ T7941] comedi comedi3: rti802: I/O port conflict (0x8,4) [ 205.488661][ T5950] usb 1-1: Using ep0 maxpacket: 32 [ 205.508665][ T5870] Bluetooth: hci2: command tx timeout [ 205.517205][ T5950] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 205.543429][ T5950] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 205.559623][ T5950] usb 1-1: config 0 interface 0 has no altsetting 0 [ 205.585509][ T5950] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 205.627463][ T5950] usb 1-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 205.641137][ T5950] usb 1-1: Product: syz [ 205.646094][ T5950] usb 1-1: Manufacturer: syz [ 205.651333][ T5950] usb 1-1: SerialNumber: syz [ 205.674854][ T5950] usb 1-1: config 0 descriptor?? [ 205.724985][ T7946] netlink: 'syz.4.557': attribute type 4 has an invalid length. [ 205.736181][ T7945] netlink: 256 bytes leftover after parsing attributes in process `syz.4.557'. [ 205.743416][ T7946] netlink: 17 bytes leftover after parsing attributes in process `syz.4.557'. [ 205.834925][ T7950] FAULT_INJECTION: forcing a failure. [ 205.834925][ T7950] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 205.848643][ T7950] CPU: 1 UID: 0 PID: 7950 Comm: syz.3.559 Not tainted syzkaller #0 PREEMPT(full) [ 205.848675][ T7950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 205.848689][ T7950] Call Trace: [ 205.848698][ T7950] [ 205.848706][ T7950] dump_stack_lvl+0x189/0x250 [ 205.848744][ T7950] ? __pfx____ratelimit+0x10/0x10 [ 205.848771][ T7950] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.848802][ T7950] ? __pfx__printk+0x10/0x10 [ 205.848847][ T7950] should_fail_ex+0x414/0x560 [ 205.848876][ T7950] _copy_from_user+0x2d/0xb0 [ 205.848907][ T7950] alg_setkey+0xb8/0x190 [ 205.848934][ T7950] alg_setsockopt+0x3da/0x4a0 [ 205.848958][ T7950] ? __pfx_alg_setsockopt+0x10/0x10 [ 205.848983][ T7950] do_sock_setsockopt+0x17c/0x1b0 [ 205.849019][ T7950] __x64_sys_setsockopt+0x13f/0x1b0 [ 205.849055][ T7950] do_syscall_64+0xfa/0xfa0 [ 205.849082][ T7950] ? lockdep_hardirqs_on+0x9c/0x150 [ 205.849110][ T7950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.849130][ T7950] ? clear_bhb_loop+0x60/0xb0 [ 205.849155][ T7950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.849175][ T7950] RIP: 0033:0x7f796398ebe9 [ 205.849193][ T7950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.849211][ T7950] RSP: 002b:00007f7964859038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 205.849233][ T7950] RAX: ffffffffffffffda RBX: 00007f7963bc5fa0 RCX: 00007f796398ebe9 [ 205.849248][ T7950] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 205.849260][ T7950] RBP: 00007f7964859090 R08: 0000000000000046 R09: 0000000000000000 [ 205.849272][ T7950] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 205.849284][ T7950] R13: 00007f7963bc6038 R14: 00007f7963bc5fa0 R15: 00007ffc33f7ba08 [ 205.849319][ T7950] [ 206.038030][ C1] vkms_vblank_simulate: vblank timer overrun [ 206.323431][ T5950] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 206.579953][ T7973] netlink: 36 bytes leftover after parsing attributes in process `syz.1.565'. [ 206.674528][ T7976] comedi comedi3: rti802: I/O port conflict (0x8,4) [ 206.803282][ T5950] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 206.879691][ T5950] usb 1-1: USB disconnect, device number 46 [ 206.949674][ T7986] FAULT_INJECTION: forcing a failure. [ 206.949674][ T7986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.985836][ T7986] CPU: 0 UID: 0 PID: 7986 Comm: syz.4.569 Not tainted syzkaller #0 PREEMPT(full) [ 206.985865][ T7986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 206.985878][ T7986] Call Trace: [ 206.985886][ T7986] [ 206.985896][ T7986] dump_stack_lvl+0x189/0x250 [ 206.985931][ T7986] ? __pfx____ratelimit+0x10/0x10 [ 206.985958][ T7986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.985989][ T7986] ? __pfx__printk+0x10/0x10 [ 206.986033][ T7986] should_fail_ex+0x414/0x560 [ 206.986061][ T7986] _copy_to_user+0x31/0xb0 [ 206.986094][ T7986] simple_read_from_buffer+0xe1/0x170 [ 206.986125][ T7986] proc_fail_nth_read+0x1b3/0x220 [ 206.986159][ T7986] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 206.986194][ T7986] ? rw_verify_area+0x2a6/0x4d0 [ 206.986216][ T7986] ? __lock_acquire+0xab9/0xd20 [ 206.986235][ T7986] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 206.986268][ T7986] vfs_read+0x200/0xa30 [ 206.986288][ T7986] ? fdget_pos+0x247/0x320 [ 206.986327][ T7986] ? __pfx___mutex_lock+0x10/0x10 [ 206.986357][ T7986] ? __pfx_vfs_read+0x10/0x10 [ 206.986381][ T7986] ? __fget_files+0x2a/0x420 [ 206.986412][ T7986] ? __fget_files+0x3a0/0x420 [ 206.986436][ T7986] ? __fget_files+0x2a/0x420 [ 206.986472][ T7986] ksys_read+0x145/0x250 [ 206.986498][ T7986] ? __pfx_ksys_read+0x10/0x10 [ 206.986525][ T7986] ? do_syscall_64+0xbe/0xfa0 [ 206.986556][ T7986] do_syscall_64+0xfa/0xfa0 [ 206.986583][ T7986] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.986611][ T7986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.986630][ T7986] ? clear_bhb_loop+0x60/0xb0 [ 206.986655][ T7986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.986675][ T7986] RIP: 0033:0x7fd954d8d5fc [ 206.986692][ T7986] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 206.986709][ T7986] RSP: 002b:00007fd955b4a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 206.986730][ T7986] RAX: ffffffffffffffda RBX: 00007fd954fc5fa0 RCX: 00007fd954d8d5fc [ 206.986745][ T7986] RDX: 000000000000000f RSI: 00007fd955b4a0a0 RDI: 0000000000000004 [ 206.986757][ T7986] RBP: 00007fd955b4a090 R08: 0000000000000000 R09: 0000000000000000 [ 206.986769][ T7986] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 206.986781][ T7986] R13: 00007fd954fc6038 R14: 00007fd954fc5fa0 R15: 00007fffa4002eb8 [ 206.986814][ T7986] [ 207.219668][ C0] vkms_vblank_simulate: vblank timer overrun [ 207.389056][ T5902] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 207.575549][ T5902] usb 2-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 207.585544][ T5870] Bluetooth: hci2: command tx timeout [ 207.591147][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.601161][ T5902] usb 2-1: Product: syz [ 207.605373][ T5902] usb 2-1: Manufacturer: syz [ 207.606864][ T5952] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 207.610892][ T5902] usb 2-1: SerialNumber: syz [ 207.618579][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 207.625614][ T5902] usb 2-1: config 0 descriptor?? [ 207.736701][ T5949] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 207.788076][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 207.794474][ T5952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 207.806809][ T5952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.817956][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.828197][ T5952] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 207.837729][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 207.847148][ T5952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.849216][ T30] audit: type=1326 audit(2831126577.983:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7983 comm="syz.1.568" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff93e78ebe9 code=0x0 [ 207.856762][ T24] usb 5-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 207.876662][ C0] vkms_vblank_simulate: vblank timer overrun [ 207.896958][ T24] usb 5-1: config 0 interface 0 has no altsetting 1 [ 207.904698][ T5952] usb 4-1: config 0 descriptor?? [ 207.916937][ T5949] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.932680][ T5949] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 207.935407][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice=8e.57 [ 207.945078][ T5949] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 207.951476][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.951503][ T24] usb 5-1: Product: syz [ 207.951519][ T24] usb 5-1: Manufacturer: syz [ 207.951535][ T24] usb 5-1: SerialNumber: syz [ 207.967095][ T24] usb 5-1: config 0 descriptor?? [ 207.983175][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 207.994228][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 207.997799][ T5949] usb 1-1: SerialNumber: syz [ 208.040106][ T24] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 208.077887][ T6890] udevd[6890]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.190522][ T7994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.200002][ T7994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.220004][ T5928] usb 5-1: USB disconnect, device number 3 [ 208.249535][ T5949] usb 1-1: 0:2 : does not exist [ 208.287303][ T5949] usb 1-1: USB disconnect, device number 47 [ 208.340293][ T6890] udevd[6890]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.361214][ T5952] konepure 0003:1E7D:2DBE.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.3-1/input0 [ 208.535320][ T5952] usb 4-1: USB disconnect, device number 68 [ 208.919383][ T8012] comedi comedi3: rti802: I/O port conflict (0x8,4) [ 209.059362][ T8014] deleting an unspecified loop device is not supported. [ 209.162020][ T8020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.578'. [ 209.375403][ T5949] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 209.485015][ T5952] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 209.535248][ T5949] usb 4-1: device descriptor read/64, error -71 [ 209.644858][ T5952] usb 5-1: Using ep0 maxpacket: 8 [ 209.659435][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.700500][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.730839][ T5952] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 209.763931][ T5952] usb 5-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 209.784864][ T5949] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 209.789486][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.822754][ T5952] usb 5-1: config 0 descriptor?? [ 209.929174][ T5949] usb 4-1: device descriptor read/64, error -71 [ 209.946718][ T5902] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 209.972759][ T5902] asix 2-1:0.0: probe with driver asix failed with error -71 [ 210.005055][ T5902] usb 2-1: USB disconnect, device number 29 [ 210.045921][ T5949] usb usb4-port1: attempt power cycle [ 210.101515][ T5952] elecom 0003:056E:00FE.0016: unknown main item tag 0x4 [ 210.124662][ T5952] elecom 0003:056E:00FE.0016: unknown main item tag 0x6 [ 210.131700][ T5952] elecom 0003:056E:00FE.0016: unknown main item tag 0x0 [ 210.153053][ T5952] elecom 0003:056E:00FE.0016: unknown main item tag 0x0 [ 210.183849][ T8027] netlink: 116 bytes leftover after parsing attributes in process `syz.1.583'. [ 210.199898][ T5952] elecom 0003:056E:00FE.0016: unknown main item tag 0x0 [ 210.207461][ T5952] elecom 0003:056E:00FE.0016: unknown main item tag 0x0 [ 210.221136][ T5952] elecom 0003:056E:00FE.0016: unknown main item tag 0x0 [ 210.244456][ T5952] elecom 0003:056E:00FE.0016: unknown main item tag 0x0 [ 210.256224][ T5952] elecom 0003:056E:00FE.0016: unknown main item tag 0x0 [ 210.274387][ T5952] elecom 0003:056E:00FE.0016: unknown main item tag 0x0 [ 210.309518][ T8025] loop6: detected capacity change from 0 to 524287999 [ 210.309755][ T5952] elecom 0003:056E:00FE.0016: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.4-1/input0 [ 210.338359][ T8025] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.348423][ T8025] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.357947][ T8025] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.366454][ T8025] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.381125][ T8025] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.394548][ T5949] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 210.401447][ T8025] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.416080][ T8025] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.426158][ T8041] netlink: 16 bytes leftover after parsing attributes in process `syz.0.585'. [ 210.435886][ T8025] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.443830][ T8025] ldm_validate_partition_table(): Disk read failed. [ 210.445228][ T5949] usb 4-1: device descriptor read/8, error -71 [ 210.456747][ T8042] IPVS: set_ctl: invalid protocol: 33 172.30.0.1:20004 [ 210.466312][ T8025] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.475067][ T8025] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.530637][ T8025] Dev loop6: unable to read RDB block 0 [ 210.539053][ T8025] loop6: unable to read partition table [ 210.545572][ T8025] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 210.626816][ T5233] ldm_validate_partition_table(): Disk read failed. [ 210.639657][ T5233] Dev loop6: unable to read RDB block 0 [ 210.647851][ T5233] loop6: unable to read partition table [ 210.661077][ T24] usb 5-1: USB disconnect, device number 4 [ 210.704260][ T5902] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 210.735690][ T8047] netlink: 124 bytes leftover after parsing attributes in process `syz.0.587'. [ 210.754293][ T5949] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 210.827189][ T5949] usb 4-1: device descriptor read/8, error -71 [ 210.856430][ T8051] atomic_op ffff88807f5be998 conn xmit_atomic 0000000000000000 [ 210.872936][ T8051] binder: BINDER_SET_CONTEXT_MGR already set [ 210.884759][ T5902] usb 2-1: Using ep0 maxpacket: 16 [ 210.891263][ T8051] binder: 8050:8051 ioctl 4018620d 200000000140 returned -16 [ 210.897490][ T5902] usb 2-1: unable to get BOS descriptor or descriptor too short [ 210.913419][ T5902] usb 2-1: config 3 has an invalid interface number: 36 but max is 0 [ 210.922185][ T5902] usb 2-1: config 3 has an invalid descriptor of length 1, skipping remainder of the config [ 210.935277][ T5902] usb 2-1: config 3 has no interface number 0 [ 210.942061][ T5902] usb 2-1: too many endpoints for config 3 interface 36 altsetting 6: 130, using maximum allowed: 30 [ 210.953829][ T5949] usb usb4-port1: unable to enumerate USB device [ 210.961197][ T5902] usb 2-1: config 3 interface 36 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 130 [ 210.988307][ T5902] usb 2-1: config 3 interface 36 has no altsetting 0 [ 211.003602][ T5902] usb 2-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a [ 211.021082][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.030220][ T5902] usb 2-1: Product: syz [ 211.039136][ T5902] usb 2-1: Manufacturer: syz [ 211.044157][ T5902] usb 2-1: SerialNumber: syz [ 211.081669][ T8056] netlink: 'syz.0.590': attribute type 1 has an invalid length. [ 211.089551][ T8056] netlink: 292 bytes leftover after parsing attributes in process `syz.0.590'. [ 211.115982][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 211.260126][ T5902] kobil_sct 2-1:3.36: required endpoints missing [ 211.271801][ T5902] usb 2-1: USB disconnect, device number 30 [ 211.287215][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 211.309260][ T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 211.320078][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 211.331826][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.344217][ T8049] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 211.357069][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 211.571655][ T8049] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 211.582715][ T8049] EXT4-fs (loop4): unable to read superblock [ 211.593147][ T8049] netlink: 92 bytes leftover after parsing attributes in process `syz.4.588'. [ 211.605112][ T8049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.588'. [ 211.619357][ T24] usb 5-1: USB disconnect, device number 5 [ 211.654279][ T5874] Bluetooth: hci1: command 0x0406 tx timeout [ 211.660493][ T5874] Bluetooth: hci0: command 0x0406 tx timeout [ 211.667831][ T52] Bluetooth: hci3: command 0x0405 tx timeout [ 211.763424][ T5949] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 211.816964][ T8065] binder: 8064:8065 ioctl c0306201 200000000300 returned -22 [ 211.913253][ T5949] usb 1-1: Using ep0 maxpacket: 16 [ 211.920220][ T5949] usb 1-1: config 0 has an invalid interface number: 33 but max is 0 [ 211.929194][ T5949] usb 1-1: config 0 has no interface number 0 [ 211.938440][ T5949] usb 1-1: New USB device found, idVendor=0e45, idProduct=52c4, bcdDevice= 0.0b [ 211.947868][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.956193][ T5949] usb 1-1: Product: syz [ 211.960377][ T5949] usb 1-1: Manufacturer: syz [ 211.965113][ T5949] usb 1-1: SerialNumber: syz [ 211.971821][ T5949] usb 1-1: config 0 descriptor?? [ 212.063000][ T24] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 212.214013][ T24] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 212.231010][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.253506][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.274735][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 212.298348][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.314133][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.329186][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 212.338548][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.354243][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.365552][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 212.373432][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.382352][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.393390][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 212.401372][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.410375][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.421459][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 212.429149][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.438425][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.449379][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 212.462103][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.471191][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.482133][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 212.489765][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.498759][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.509708][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 212.519377][ T24] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 212.528658][ T24] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 212.537112][ T24] usb 2-1: Product: syz [ 212.541552][ T24] usb 2-1: Manufacturer: syz [ 212.546257][ T24] usb 2-1: SerialNumber: syz [ 212.552782][ T5949] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 212.554081][ T24] usb 2-1: config 0 descriptor?? [ 212.573320][ T9] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 212.575918][ T24] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 212.714291][ T5949] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 212.723156][ T5949] usb 5-1: config 0 has no interface number 0 [ 212.729301][ T5949] usb 5-1: config 0 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.742124][ T5949] usb 5-1: config 0 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.753088][ T5949] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 212.762234][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.778441][ T24] usb 2-1: USB disconnect, device number 31 [ 212.778517][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 212.793901][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.802991][ T5949] usb 5-1: config 0 descriptor?? [ 212.812322][ T9] usb 4-1: Product: syz [ 212.821461][ T9] usb 4-1: Manufacturer: syz [ 212.826456][ T9] usb 4-1: SerialNumber: syz [ 212.830691][ T24] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 212.854665][ T9] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 212.888312][ T5902] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 213.221362][ T5949] uclogic 0003:256C:006D.0017: interface is invalid, ignoring [ 213.252159][ T24] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 213.320739][ T5949] usb 4-1: USB disconnect, device number 73 [ 213.402016][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 213.408833][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.421270][ T24] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 213.431533][ T9] usb 5-1: USB disconnect, device number 6 [ 213.441667][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.456580][ T24] usb 2-1: config 0 descriptor?? [ 213.880715][ T24] mcp2221 0003:04D8:00DD.0018: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 213.971658][ T5902] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 213.986455][ T5902] ath9k_htc: Failed to initialize the device [ 213.997676][ T5949] usb 4-1: ath9k_htc: USB layer deinitialized [ 214.277927][ T8082] binder: 8081:8082 ioctl c00c620f 0 returned -14 [ 214.286481][ T8082] netlink: 40 bytes leftover after parsing attributes in process `syz.1.598'. [ 214.295687][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 214.296495][ T8082] netlink: 40 bytes leftover after parsing attributes in process `syz.1.598'. [ 214.311321][ T5949] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 214.335973][ T24] usb 2-1: USB disconnect, device number 32 [ 214.451224][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 214.456742][ T5949] usb 4-1: device descriptor read/64, error -71 [ 214.464715][ T9] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 214.474940][ T9] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 214.484746][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.492856][ T9] usb 5-1: Product: syz [ 214.497057][ T9] usb 5-1: Manufacturer: syz [ 214.501744][ T9] usb 5-1: SerialNumber: syz [ 214.508741][ T9] usb 5-1: config 0 descriptor?? [ 214.518071][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 214.526275][ T9] usb 5-1: setting power ON [ 214.530818][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 214.542183][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 214.552391][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 214.561390][ T9] usb 5-1: media controller created [ 214.580399][ T24] usb 1-1: USB disconnect, device number 48 [ 214.600471][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 214.660439][ T9] usb 5-1: selecting invalid altsetting 6 [ 214.667586][ T9] usb 5-1: digital interface selection failed (-22) [ 214.674983][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 214.684624][ T9] usb 5-1: setting power OFF [ 214.689588][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 214.706450][ T5949] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 214.723046][ T8087] dvb-usb: bulk message failed: -22 (3/0) [ 214.729874][ T8087] dvb-usb: bulk message failed: -22 (5/0) [ 214.729884][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 214.729901][ T9] (NULL device *): no alternate interface [ 214.742398][ T8087] dvb-usb: bulk message failed: -22 (3/0) [ 214.763894][ T8087] netlink: 'syz.4.600': attribute type 1 has an invalid length. [ 214.791754][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 214.804940][ T9] usb 5-1: USB disconnect, device number 7 [ 214.851862][ T5949] usb 4-1: device descriptor read/64, error -71 [ 214.963061][ T5949] usb usb4-port1: attempt power cycle [ 215.000854][ T24] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 215.130576][ T24] usb 1-1: device descriptor read/64, error -71 [ 215.170659][ T5950] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 215.300444][ T5950] usb 2-1: device descriptor read/64, error -71 [ 215.310448][ T5949] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 215.337395][ T5949] usb 4-1: device descriptor read/8, error -71 [ 215.370515][ T24] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 215.506488][ T8102] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 215.511432][ T24] usb 1-1: device descriptor read/64, error -71 [ 215.516067][ T8102] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 215.526015][ T8102] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 215.540376][ T5950] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 215.591043][ T5949] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 215.605273][ T8104] netlink: 100 bytes leftover after parsing attributes in process `syz.4.607'. [ 215.615371][ T5949] usb 4-1: device descriptor read/8, error -71 [ 215.624565][ T24] usb usb1-port1: attempt power cycle [ 215.670283][ T5950] usb 2-1: device descriptor read/64, error -71 [ 215.730401][ T5949] usb usb4-port1: unable to enumerate USB device [ 215.780330][ T5950] usb usb2-port1: attempt power cycle [ 215.970857][ T24] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 216.000432][ T24] usb 1-1: device descriptor read/8, error -71 [ 216.129850][ T5950] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 216.152673][ T5950] usb 2-1: device descriptor read/8, error -71 [ 216.239662][ T24] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 216.260499][ T24] usb 1-1: device descriptor read/8, error -71 [ 216.372043][ T24] usb usb1-port1: unable to enumerate USB device [ 216.399595][ T5950] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 216.439097][ T5950] usb 2-1: device descriptor read/8, error -71 [ 216.559783][ T5950] usb usb2-port1: unable to enumerate USB device [ 217.541242][ T5902] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 217.609818][ T5949] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 217.701016][ T5902] usb 4-1: config 150 has an invalid interface number: 204 but max is 1 [ 217.710009][ T5902] usb 4-1: config 150 has no interface number 0 [ 217.716315][ T5902] usb 4-1: config 150 interface 204 has no altsetting 0 [ 217.724024][ T5902] usb 4-1: config 150 interface 1 has no altsetting 0 [ 217.734992][ T5902] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 217.744440][ T5949] usb 5-1: device descriptor read/64, error -71 [ 217.750867][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.759387][ T5902] usb 4-1: Product: syz [ 217.763588][ T5902] usb 4-1: Manufacturer: syz [ 217.768180][ T5902] usb 4-1: SerialNumber: syz [ 217.987204][ T8138] syzkaller1: entered promiscuous mode [ 217.993909][ T8138] syzkaller1: entered allmulticast mode [ 218.000270][ T5949] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 218.038487][ T5950] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 218.138204][ T5949] usb 5-1: device descriptor read/64, error -71 [ 218.168616][ T5950] usb 1-1: device descriptor read/64, error -71 [ 218.248578][ T5949] usb usb5-port1: attempt power cycle [ 218.338110][ T5952] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 218.408193][ T5950] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 218.489819][ T5952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 218.501093][ T5952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.511083][ T5952] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 218.520233][ T5952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.531211][ T5952] usb 2-1: config 0 descriptor?? [ 218.538467][ T5950] usb 1-1: device descriptor read/64, error -71 [ 218.597898][ T5949] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 218.630124][ T5949] usb 5-1: device descriptor read/8, error -71 [ 218.649521][ T5950] usb usb1-port1: attempt power cycle [ 218.867725][ T5949] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 218.889360][ T5949] usb 5-1: device descriptor read/8, error -71 [ 218.997700][ T5950] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 219.005990][ T5949] usb usb5-port1: unable to enumerate USB device [ 219.019148][ T5950] usb 1-1: device descriptor read/8, error -71 [ 219.143071][ T5952] usbhid 2-1:0.0: can't add hid device: -71 [ 219.151518][ T5952] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 219.165361][ T5952] usb 2-1: USB disconnect, device number 37 [ 219.268473][ T5950] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 219.288052][ T5950] usb 1-1: device descriptor read/8, error -71 [ 219.398113][ T5950] usb usb1-port1: unable to enumerate USB device [ 220.066652][ T5950] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 220.224951][ T5950] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 220.246523][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.268266][ T5950] usb 2-1: config 0 descriptor?? [ 220.272701][ T5902] xr_serial 4-1:150.204: xr_serial converter detected [ 220.316711][ T5902] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 220.328773][ T5902] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 220.355891][ T5902] usb 4-1: USB disconnect, device number 78 [ 220.375153][ T5902] xr_serial 4-1:150.204: device disconnected [ 220.820906][ T5950] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 220.846984][ T5950] [drm:udl_init] *ERROR* Selecting channel failed [ 220.860571][ T5952] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 220.886715][ T5950] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 220.901537][ T5950] [drm] Initialized udl on minor 2 [ 220.914300][ T5950] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 220.928677][ T5950] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 220.951205][ T45] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 220.966057][ T5950] usb 2-1: USB disconnect, device number 38 [ 220.977752][ T45] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 221.036857][ T5952] usb 5-1: Using ep0 maxpacket: 32 [ 221.043986][ T5952] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 221.052830][ T5952] usb 5-1: config 0 has no interface number 0 [ 221.059232][ T5952] usb 5-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.074765][ T5952] usb 5-1: config 0 interface 184 has no altsetting 0 [ 221.092836][ T5952] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 221.102685][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.110778][ T5952] usb 5-1: Product: syz [ 221.114999][ T5952] usb 5-1: Manufacturer: syz [ 221.119755][ T5952] usb 5-1: SerialNumber: syz [ 221.125968][ T5902] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 221.136717][ T5952] usb 5-1: config 0 descriptor?? [ 221.147997][ T5952] smsc75xx v1.0.0 [ 221.154324][ T5952] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 221.164985][ T5952] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 221.298799][ T5902] usb 1-1: unable to get BOS descriptor or descriptor too short [ 221.307344][ T5902] usb 1-1: not running at top speed; connect to a high speed hub [ 221.316565][ T5902] usb 1-1: config 129 has an invalid interface number: 28 but max is 0 [ 221.325068][ T5902] usb 1-1: config 129 has no interface number 0 [ 221.332311][ T5902] usb 1-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 221.344664][ T5902] usb 1-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64 [ 221.356260][ T5902] usb 1-1: config 129 interface 28 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 221.369995][ T5902] usb 1-1: config 129 interface 28 has no altsetting 0 [ 221.389048][ T5902] usb 1-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 221.398807][ T980] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 221.406908][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.414935][ T5902] usb 1-1: Product: syz [ 221.420714][ T5902] usb 1-1: Manufacturer: syz [ 221.425368][ T5902] usb 1-1: SerialNumber: syz [ 221.437317][ T8155] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 221.540463][ T8169] netlink: 'syz.1.628': attribute type 5 has an invalid length. [ 221.548848][ T980] usb 4-1: device descriptor read/64, error -71 [ 221.575218][ T8169] netlink: 'syz.1.628': attribute type 1 has an invalid length. [ 221.652502][ T5902] etas_es58x 1-1:129.28: Starting syz syz (Serial Number syz) [ 221.662129][ T5902] etas_es58x 1-1:129.28: could not retrieve the product info string [ 221.705225][ T5902] usb 1-1: USB disconnect, device number 57 [ 221.727822][ T5902] etas_es58x 1-1:129.28: Disconnecting syz syz [ 221.795570][ T980] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 221.820486][ T8174] vivid-000: disconnect [ 221.947758][ T980] usb 4-1: device descriptor read/64, error -71 [ 222.055470][ T980] usb usb4-port1: attempt power cycle [ 222.424987][ T980] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 222.456648][ T980] usb 4-1: device descriptor read/8, error -71 [ 222.714732][ T980] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 222.756008][ T980] usb 4-1: device descriptor read/8, error -71 [ 222.875220][ T980] usb usb4-port1: unable to enumerate USB device [ 223.524167][ T5952] usb 5-1: USB disconnect, device number 12 [ 240.309199][ T3507] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.392409][ T3507] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.459627][ T3507] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.672961][ T3507] bridge_slave_1: left allmulticast mode [ 240.679341][ T3507] bridge_slave_1: left promiscuous mode [ 240.686474][ T3507] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.699601][ T3507] bridge_slave_0: left allmulticast mode [ 240.706624][ T3507] bridge_slave_0: left promiscuous mode [ 240.712799][ T3507] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.010388][ T3507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.022112][ T3507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.032492][ T3507] bond0 (unregistering): Released all slaves [ 241.437320][ T3507] hsr_slave_0: left promiscuous mode [ 241.449921][ T3507] hsr_slave_1: left promiscuous mode [ 241.458182][ T3507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.470261][ T3507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.479827][ T3507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.492249][ T3507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.533423][ T3507] veth1_macvtap: left promiscuous mode [ 241.539414][ T3507] veth0_macvtap: left promiscuous mode [ 241.548597][ T3507] veth1_vlan: left promiscuous mode [ 241.556030][ T3507] veth0_vlan: left promiscuous mode [ 242.004447][ T3507] team0 (unregistering): Port device team_slave_1 removed [ 242.045181][ T3507] team0 (unregistering): Port device team_slave_0 removed [ 242.286657][ T3507] team0 (unregistering): Port device dummy0 removed [ 242.634580][ T3507] IPVS: stop unused estimator thread 0... [ 245.843964][ T8285] netlink: 'syz.0.633': attribute type 10 has an invalid length. [ 245.851919][ T8285] hsr_slave_0: entered allmulticast mode [ 245.858383][ T8285] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 245.880653][ T8286] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 245.887419][ T8286] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 245.910722][ T8286] vhci_hcd vhci_hcd.0: Device attached [ 246.031205][ T30] audit: type=1400 audit(2831126616.193:6): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=8297 comm="syz.3.638" [ 246.157034][ T5949] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 246.177047][ T5902] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 246.198000][ T980] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 246.346802][ T5928] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 246.364355][ T8310] netlink: 'syz.3.641': attribute type 2 has an invalid length. [ 246.374446][ T8310] netlink: 244 bytes leftover after parsing attributes in process `syz.3.641'. [ 246.389025][ T5902] usb 5-1: Using ep0 maxpacket: 16 [ 246.398497][ T980] usb 1-1: config 4 has an invalid interface number: 88 but max is 1 [ 246.410981][ T980] usb 1-1: config 4 has an invalid interface number: 29 but max is 1 [ 246.419275][ T5902] usb 5-1: config 0 has no interfaces? [ 246.424788][ T5902] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 246.434325][ T980] usb 1-1: config 4 has no interface number 0 [ 246.440664][ T980] usb 1-1: config 4 has no interface number 1 [ 246.446818][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.456508][ T980] usb 1-1: config 4 interface 88 altsetting 119 has a duplicate endpoint with address 0xB, skipping [ 246.473948][ T5902] usb 5-1: config 0 descriptor?? [ 246.479624][ T980] usb 1-1: config 4 interface 88 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 246.495275][ T8310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.641'. [ 246.516150][ T8310] netlink: 24 bytes leftover after parsing attributes in process `syz.3.641'. [ 246.539292][ T980] usb 1-1: config 4 interface 88 altsetting 119 endpoint 0x85 has invalid maxpacket 11067, setting to 64 [ 246.551030][ T980] usb 1-1: config 4 interface 88 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 246.567681][ T980] usb 1-1: config 4 interface 29 altsetting 9 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 246.567831][ T5928] usb 2-1: config 11 has an invalid interface number: 62 but max is 0 [ 246.588274][ T980] usb 1-1: config 4 interface 29 altsetting 9 endpoint 0x86 has invalid maxpacket 1023, setting to 64 [ 246.599609][ T980] usb 1-1: config 4 interface 88 has no altsetting 0 [ 246.606376][ T5928] usb 2-1: config 11 has no interface number 0 [ 246.612974][ T980] usb 1-1: config 4 interface 29 has no altsetting 0 [ 246.623590][ T5928] usb 2-1: New USB device found, idVendor=22b8, idProduct=2d9a, bcdDevice=bf.dc [ 246.634699][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.643046][ T5928] usb 2-1: Product: syz [ 246.648298][ T980] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 246.658134][ T5928] usb 2-1: Manufacturer: syz [ 246.662784][ T5928] usb 2-1: SerialNumber: syz [ 246.667565][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.676245][ T980] usb 1-1: Product: syz [ 246.681571][ T980] usb 1-1: Manufacturer: syz [ 246.687570][ T980] usb 1-1: SerialNumber: syz [ 246.701918][ T8292] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 246.717818][ T8287] usbip_core: unknown command [ 246.722651][ T8287] vhci_hcd: unknown pdu 813183024 [ 246.723888][ T24] usb 5-1: USB disconnect, device number 13 [ 246.727906][ T8287] usbip_core: unknown command [ 246.743531][ T60] vhci_hcd: stop threads [ 246.749186][ T60] vhci_hcd: release socket [ 246.755203][ T60] vhci_hcd: disconnect device [ 246.896432][ T5950] usb 4-1: new low-speed USB device number 83 using dummy_hcd [ 246.922125][ T8292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.931215][ T8292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.951131][ T980] chaoskey 1-1:4.29: Unable to register with hwrng [ 246.971666][ T980] usb 1-1: USB disconnect, device number 58 [ 247.051394][ T5950] usb 4-1: unable to get BOS descriptor or descriptor too short [ 247.060558][ T5950] usb 4-1: config 9 has an invalid interface number: 198 but max is 0 [ 247.068955][ T5950] usb 4-1: config 9 has no interface number 0 [ 247.075092][ T5950] usb 4-1: config 9 interface 198 has no altsetting 0 [ 247.085270][ T5950] usb 4-1: string descriptor 0 read error: -22 [ 247.091699][ T5950] usb 4-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b [ 247.101281][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.118683][ T5950] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 247.129090][ T5950] dvb-usb: bulk message failed: -22 (3/0) [ 247.150099][ T5950] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 247.164524][ T5950] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 247.173229][ T5950] usb 4-1: media controller created [ 247.201933][ T5950] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 247.280199][ T5950] DVB: Unable to find symbol mt352_attach() [ 247.286638][ T5950] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 247.299521][ T5950] dvb-usb: bulk message failed: -22 (3/0) [ 247.336176][ T5950] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 247.352121][ T8316] fuse: blksize only supported for fuseblk [ 247.369964][ T5950] usb 4-1: USB disconnect, device number 83 [ 247.437044][ T5950] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 247.695974][ T980] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 247.860379][ T980] usb 5-1: unable to get BOS descriptor or descriptor too short [ 247.869537][ T980] usb 5-1: config 7 has an invalid interface number: 192 but max is 2 [ 247.885639][ T980] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 247.895993][ T980] usb 5-1: config 7 has 1 interface, different from the descriptor's value: 3 [ 247.904922][ T980] usb 5-1: config 7 has no interface number 0 [ 247.913660][ T980] usb 5-1: config 7 interface 192 has no altsetting 0 [ 247.939133][ T980] usb 5-1: string descriptor 0 read error: -22 [ 247.955745][ T980] usb 5-1: New USB device found, idVendor=0db7, idProduct=0002, bcdDevice=8f.06 [ 247.964900][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.201136][ T8318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.220849][ T8318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.244602][ T980] pegasus 5-1:7.192: probe with driver pegasus failed with error -71 [ 248.272285][ T980] usb 5-1: USB disconnect, device number 14 [ 248.476276][ T5902] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 248.513472][ T8339] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 248.520051][ T8339] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 248.530591][ T8339] vhci_hcd vhci_hcd.0: Device attached [ 248.540047][ T8339] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(9) [ 248.546610][ T8339] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 248.557836][ T8339] vhci_hcd vhci_hcd.0: Device attached [ 248.615270][ T5902] usb 1-1: device descriptor read/64, error -71 [ 248.617400][ T8343] vhci_hcd: connection closed [ 248.623037][ T8340] vhci_hcd: connection closed [ 248.624167][ T12] vhci_hcd: stop threads [ 248.641937][ T12] vhci_hcd: release socket [ 248.646852][ T12] vhci_hcd: disconnect device [ 248.652963][ T12] vhci_hcd: stop threads [ 248.661624][ T12] vhci_hcd: release socket [ 248.666537][ T12] vhci_hcd: disconnect device [ 248.705601][ T980] vhci_hcd: vhci_device speed not set [ 248.866227][ T5928] hub 2-1:11.62: bad descriptor, ignoring hub [ 248.872387][ T5928] hub 2-1:11.62: probe with driver hub failed with error -5 [ 248.882942][ T5902] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 248.947586][ T5928] usb 2-1: USB disconnect, device number 39 [ 249.015035][ T5902] usb 1-1: device descriptor read/64, error -71 [ 249.125890][ T5902] usb usb1-port1: attempt power cycle [ 249.164726][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 249.261891][ T8354] netlink: 'syz.3.655': attribute type 3 has an invalid length. [ 249.269750][ T8354] netlink: 3 bytes leftover after parsing attributes in process `syz.3.655'. [ 249.308529][ T5928] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 249.316499][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 249.324910][ T9] usb 5-1: config 6 has an invalid interface number: 250 but max is 0 [ 249.334107][ T9] usb 5-1: config 6 has no interface number 0 [ 249.340697][ T9] usb 5-1: config 6 interface 250 has no altsetting 0 [ 249.358898][ T9] usb 5-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=a9.d1 [ 249.371555][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.380788][ T9] usb 5-1: Product: syz [ 249.390272][ T9] usb 5-1: Manufacturer: syz [ 249.397086][ T9] usb 5-1: SerialNumber: syz [ 249.464722][ T5928] usb 2-1: Using ep0 maxpacket: 32 [ 249.484626][ T5902] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 249.493223][ T5928] usb 2-1: config 0 has an invalid interface number: 168 but max is 0 [ 249.501874][ T5928] usb 2-1: config 0 has no interface number 0 [ 249.508503][ T5928] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=b0.c6 [ 249.519410][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.527617][ T5902] usb 1-1: device descriptor read/8, error -71 [ 249.572953][ T5928] usb 2-1: config 0 descriptor?? [ 249.790939][ T5902] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 249.896762][ T8349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.941260][ T5862] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 250.049319][ T5928] speedtch 2-1:0.168: speedtch_bind: wrong device class 176 [ 250.057255][ T5902] usb 1-1: device descriptor read/8, error -71 [ 250.073180][ T8349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.090973][ T5928] speedtch 2-1:0.168: usbatm_usb_probe: bind failed: -19! [ 250.127070][ T5928] usb 2-1: USB disconnect, device number 40 [ 250.152269][ T9] snd-usb-audio 5-1:6.250: probe with driver snd-usb-audio failed with error -71 [ 250.175820][ T5902] usb usb1-port1: unable to enumerate USB device [ 250.192558][ T9] usb 5-1: USB disconnect, device number 15 [ 250.204323][ T5862] usb 4-1: device descriptor read/64, error -71 [ 250.463824][ T5862] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 250.595947][ T5862] usb 4-1: device descriptor read/64, error -71 [ 250.712348][ T5862] usb usb4-port1: attempt power cycle [ 250.959566][ T5950] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 251.053355][ T5862] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 251.076224][ T5862] usb 4-1: device descriptor read/8, error -71 [ 251.133337][ T5950] usb 2-1: Using ep0 maxpacket: 16 [ 251.140251][ T5950] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 251.164480][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 251.179183][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 251.190930][ T5950] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 251.200214][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.208295][ T5950] usb 2-1: Product: syz [ 251.212543][ T5950] usb 2-1: Manufacturer: syz [ 251.217192][ T5950] usb 2-1: SerialNumber: syz [ 251.232617][ T5950] usb 2-1: config 0 descriptor?? [ 251.293247][ T5949] vhci_hcd: vhci_device speed not set [ 251.314165][ T5862] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 251.336701][ T5862] usb 4-1: device descriptor read/8, error -71 [ 251.356361][ T8387] wlan1 speed is unknown, defaulting to 1000 [ 251.432146][ T8388] wlan1 speed is unknown, defaulting to 1000 [ 251.466267][ T8391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.488521][ T5862] usb usb4-port1: unable to enumerate USB device [ 251.496200][ T8391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.542994][ T5902] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 251.546263][ T5950] pegasus_notetaker 2-1:0.0: probe with driver pegasus_notetaker failed with error -12 [ 251.572473][ T5950] usb 2-1: USB disconnect, device number 41 [ 251.754805][ T5902] usb 5-1: config 11 has an invalid interface number: 62 but max is 0 [ 251.763522][ T5902] usb 5-1: config 11 has no interface number 0 [ 251.772650][ T5902] usb 5-1: New USB device found, idVendor=22b8, idProduct=2d9a, bcdDevice=bf.dc [ 251.793270][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.801366][ T5902] usb 5-1: Product: syz [ 251.812925][ T5902] usb 5-1: Manufacturer: syz [ 251.817670][ T5902] usb 5-1: SerialNumber: syz [ 252.204406][ T8405] wlan1 speed is unknown, defaulting to 1000 [ 252.375357][ T5862] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 252.426583][ T8409] net veth1_virt_wifi »»»»»»: renamed from virt_wifi0 [ 252.465799][ T8411] xt_policy: too many policy elements [ 252.483890][ T8409] binder: 8408:8409 ioctl c0306201 200000000080 returned -14 [ 252.515486][ T8409] binder: 8408:8409 ioctl c0306201 200000000040 returned -14 [ 252.552405][ T5862] usb 1-1: Using ep0 maxpacket: 32 [ 252.559966][ T5862] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 252.568466][ T5862] usb 1-1: config 0 has no interface number 0 [ 252.577999][ T5862] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 252.587517][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.598411][ T5862] usb 1-1: Product: syz [ 252.602874][ T5862] usb 1-1: Manufacturer: syz [ 252.617729][ T5862] usb 1-1: SerialNumber: syz [ 252.632233][ T5862] usb 1-1: config 0 descriptor?? [ 252.651049][ T5862] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 252.852383][ T5862] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 252.876763][ T5862] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 252.962680][ T8421] FAULT_INJECTION: forcing a failure. [ 252.962680][ T8421] name failslab, interval 1, probability 0, space 0, times 0 [ 252.986234][ T8421] CPU: 0 UID: 0 PID: 8421 Comm: syz.3.673 Not tainted syzkaller #0 PREEMPT(full) [ 252.986263][ T8421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 252.986276][ T8421] Call Trace: [ 252.986288][ T8421] [ 252.986297][ T8421] dump_stack_lvl+0x189/0x250 [ 252.986336][ T8421] ? __pfx____ratelimit+0x10/0x10 [ 252.986364][ T8421] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.986401][ T8421] ? __pfx__printk+0x10/0x10 [ 252.986437][ T8421] ? __pfx___might_resched+0x10/0x10 [ 252.986460][ T8421] ? fs_reclaim_acquire+0x7d/0x100 [ 252.986490][ T8421] should_fail_ex+0x414/0x560 [ 252.986518][ T8421] should_failslab+0xa8/0x100 [ 252.986544][ T8421] __kmalloc_noprof+0xcb/0x7f0 [ 252.986565][ T8421] ? tomoyo_encode+0x28b/0x550 [ 252.986601][ T8421] tomoyo_encode+0x28b/0x550 [ 252.986649][ T8421] tomoyo_realpath_from_path+0x58d/0x5d0 [ 252.986689][ T8421] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 252.986713][ T8421] tomoyo_path_number_perm+0x1e8/0x5a0 [ 252.986741][ T8421] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 252.986806][ T8421] ? __fget_files+0x2a/0x420 [ 252.986838][ T8421] ? __fget_files+0x3a0/0x420 [ 252.986862][ T8421] ? __fget_files+0x2a/0x420 [ 252.986892][ T8421] security_file_ioctl+0xcb/0x2d0 [ 252.986919][ T8421] __se_sys_ioctl+0x47/0x170 [ 252.986968][ T8421] do_syscall_64+0xfa/0xfa0 [ 252.986996][ T8421] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.987024][ T8421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.987043][ T8421] ? clear_bhb_loop+0x60/0xb0 [ 252.987069][ T8421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.987088][ T8421] RIP: 0033:0x7f796398ebe9 [ 252.987108][ T8421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.987126][ T8421] RSP: 002b:00007f7964859038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.987149][ T8421] RAX: ffffffffffffffda RBX: 00007f7963bc5fa0 RCX: 00007f796398ebe9 [ 252.987164][ T8421] RDX: 00002000000002c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 252.987177][ T8421] RBP: 00007f7964859090 R08: 0000000000000000 R09: 0000000000000000 [ 252.987189][ T8421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.987200][ T8421] R13: 00007f7963bc6038 R14: 00007f7963bc5fa0 R15: 00007ffc33f7ba08 [ 252.987235][ T8421] [ 252.987288][ T8421] ERROR: Out of memory at tomoyo_realpath_from_path. [ 253.227078][ T8421] comedi comedi3: rti802: I/O port conflict (0x8,4) [ 253.337012][ T8433] overlayfs: invalid origin (00000000d1d3e81a820eee8a94416592a5356da96db48150eae08457fbc30ece5e7e7e318cb2b4b22122226fe65c239a) [ 253.372899][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 253.374440][ T5952] usb 1-1: USB disconnect, device number 63 [ 253.408737][ T5952] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 253.442746][ T5952] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 253.471338][ T5952] quatech2 1-1:0.51: device disconnected [ 253.529951][ T8436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.557376][ T8436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.600516][ T8444] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 253.607107][ T8444] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 253.623044][ T8444] vhci_hcd vhci_hcd.0: Device attached [ 253.636718][ T8444] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 253.643320][ T8444] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 253.661376][ T8444] vhci_hcd vhci_hcd.0: Device attached [ 253.672565][ T8445] vhci_hcd: connection closed [ 253.676260][ T12] vhci_hcd: stop threads [ 253.696047][ T12] vhci_hcd: release socket [ 253.705138][ T12] vhci_hcd: disconnect device [ 253.718358][ T8447] vhci_hcd: connection closed [ 253.718863][ T12] vhci_hcd: stop threads [ 253.730536][ T12] vhci_hcd: release socket [ 253.740653][ T12] vhci_hcd: disconnect device [ 253.745981][ T24] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 253.901266][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 253.913497][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.941347][ T24] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 253.950460][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.987407][ T24] usb 4-1: config 0 descriptor?? [ 254.022932][ T8450] comedi comedi3: rti802: I/O port conflict (0x8,4) [ 254.118991][ T8452] comedi comedi3: rti802: I/O port conflict (0x8,4) [ 254.178840][ T5902] hub 5-1:11.62: bad descriptor, ignoring hub [ 254.214031][ T5902] hub 5-1:11.62: probe with driver hub failed with error -5 [ 254.282964][ T5902] usb 5-1: USB disconnect, device number 16 [ 254.444628][ T24] mcp2221 0003:04D8:00DD.0019: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 254.571663][ T8463] FAULT_INJECTION: forcing a failure. [ 254.571663][ T8463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.633345][ T8463] CPU: 1 UID: 0 PID: 8463 Comm: syz.1.683 Not tainted syzkaller #0 PREEMPT(full) [ 254.633374][ T8463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 254.633387][ T8463] Call Trace: [ 254.633399][ T8463] [ 254.633408][ T8463] dump_stack_lvl+0x189/0x250 [ 254.633446][ T8463] ? __pfx____ratelimit+0x10/0x10 [ 254.633474][ T8463] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.633518][ T8463] ? __pfx__printk+0x10/0x10 [ 254.633547][ T8463] ? __might_fault+0xb0/0x130 [ 254.633579][ T8463] should_fail_ex+0x414/0x560 [ 254.633606][ T8463] _copy_from_user+0x2d/0xb0 [ 254.633637][ T8463] comedi_unlocked_ioctl+0x356/0x1020 [ 254.633666][ T8463] ? kasan_quarantine_put+0xdd/0x220 [ 254.633694][ T8463] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 254.633781][ T8463] ? __fget_files+0x2a/0x420 [ 254.633812][ T8463] ? __fget_files+0x3a0/0x420 [ 254.633836][ T8463] ? __fget_files+0x2a/0x420 [ 254.633865][ T8463] ? bpf_lsm_file_ioctl+0x9/0x20 [ 254.633895][ T8463] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 254.633924][ T8463] __se_sys_ioctl+0xfc/0x170 [ 254.633947][ T8463] do_syscall_64+0xfa/0xfa0 [ 254.633973][ T8463] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.634000][ T8463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.634020][ T8463] ? clear_bhb_loop+0x60/0xb0 [ 254.634044][ T8463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.634064][ T8463] RIP: 0033:0x7ff93e78ebe9 [ 254.634081][ T8463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.634098][ T8463] RSP: 002b:00007ff93f6cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 254.634119][ T8463] RAX: ffffffffffffffda RBX: 00007ff93e9c5fa0 RCX: 00007ff93e78ebe9 [ 254.634133][ T8463] RDX: 00002000000002c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 254.634146][ T8463] RBP: 00007ff93f6cc090 R08: 0000000000000000 R09: 0000000000000000 [ 254.634158][ T8463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.634169][ T8463] R13: 00007ff93e9c6038 R14: 00007ff93e9c5fa0 R15: 00007ffcb78b2ac8 [ 254.634203][ T8463] [ 254.847287][ C1] vkms_vblank_simulate: vblank timer overrun [ 254.868678][ T24] usb 4-1: USB disconnect, device number 88 [ 255.178832][ T8483] mmap: syz.1.686 (8483) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 255.463912][ T8494] comedi comedi3: rti802: I/O port conflict (0x8,4) [ 255.560097][ T5952] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 255.623887][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.710073][ T5952] usb 2-1: Using ep0 maxpacket: 8 [ 255.717697][ T5952] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 255.726704][ T5952] usb 2-1: config 2 has no interface number 0 [ 255.733005][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 255.741258][ T5952] usb 2-1: config 2 interface 31 has no altsetting 0 [ 255.763121][ T5952] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 255.772991][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.781538][ T5952] usb 2-1: Product: syz [ 255.785991][ T5952] usb 2-1: Manufacturer: syz [ 255.791195][ T5952] usb 2-1: SerialNumber: syz [ 255.879979][ T5950] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 255.923248][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 255.931713][ T24] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 255.948477][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.960874][ T24] usb 5-1: config 0 has no interface number 0 [ 255.971229][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 255.990696][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.998795][ T24] usb 5-1: Product: syz [ 255.999198][ T8511] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 256.015095][ T24] usb 5-1: Manufacturer: syz [ 256.020369][ T24] usb 5-1: SerialNumber: syz [ 256.031084][ T24] usb 5-1: config 0 descriptor?? [ 256.044558][ T24] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 256.060202][ T24] usb 5-1: No valid video chain found. [ 256.071921][ T5950] usb 4-1: config 11 has an invalid interface number: 62 but max is 0 [ 256.081282][ T5950] usb 4-1: config 11 has no interface number 0 [ 256.096824][ T5950] usb 4-1: New USB device found, idVendor=22b8, idProduct=2d9a, bcdDevice=bf.dc [ 256.116156][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.126227][ T5950] usb 4-1: Product: syz [ 256.132209][ T5950] usb 4-1: Manufacturer: syz [ 256.137137][ T5950] usb 4-1: SerialNumber: syz [ 256.225321][ T5952] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 256.244664][ T24] usb 5-1: USB disconnect, device number 17 [ 256.308949][ T5952] usb 2-1: USB disconnect, device number 42 [ 256.630782][ T45] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 256.800056][ T45] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 256.825079][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.848250][ T45] usb 1-1: Product: syz [ 256.862987][ T45] usb 1-1: Manufacturer: syz [ 256.868758][ T45] usb 1-1: SerialNumber: syz [ 256.888440][ T45] usb 1-1: config 0 descriptor?? [ 256.932276][ T45] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 256.951280][ T45] usb 1-1: setting power ON [ 256.963075][ T45] dvb-usb: bulk message failed: -22 (2/0) [ 256.981495][ T45] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 257.007155][ T45] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 257.020238][ T45] dvb_usb_cxusb 1-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 257.021681][ T8539] FAULT_INJECTION: forcing a failure. [ 257.021681][ T8539] name failslab, interval 1, probability 0, space 0, times 0 [ 257.072660][ T8539] CPU: 0 UID: 0 PID: 8539 Comm: syz.1.694 Not tainted syzkaller #0 PREEMPT(full) [ 257.072689][ T8539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 257.072701][ T8539] Call Trace: [ 257.072710][ T8539] [ 257.072719][ T8539] dump_stack_lvl+0x189/0x250 [ 257.072756][ T8539] ? __pfx____ratelimit+0x10/0x10 [ 257.072784][ T8539] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.072816][ T8539] ? __pfx__printk+0x10/0x10 [ 257.072853][ T8539] ? __pfx___might_resched+0x10/0x10 [ 257.072876][ T8539] ? fs_reclaim_acquire+0x7d/0x100 [ 257.072906][ T8539] should_fail_ex+0x414/0x560 [ 257.072934][ T8539] should_failslab+0xa8/0x100 [ 257.072962][ T8539] __kmalloc_cache_noprof+0x6f/0x6f0 [ 257.072984][ T8539] ? __request_region+0x5f/0xe0 [ 257.073022][ T8539] __request_region+0x5f/0xe0 [ 257.073055][ T8539] comedi_request_region+0x6d/0x180 [ 257.073083][ T8539] rti802_attach+0x4b/0xa10 [ 257.073113][ T8539] comedi_device_attach+0x51c/0x720 [ 257.073142][ T8539] comedi_unlocked_ioctl+0x5ff/0x1020 [ 257.073168][ T8539] ? kasan_quarantine_put+0xdd/0x220 [ 257.073197][ T8539] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 257.073298][ T8539] ? __fget_files+0x2a/0x420 [ 257.073331][ T8539] ? __fget_files+0x3a0/0x420 [ 257.073356][ T8539] ? __fget_files+0x2a/0x420 [ 257.073387][ T8539] ? bpf_lsm_file_ioctl+0x9/0x20 [ 257.073418][ T8539] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 257.073446][ T8539] __se_sys_ioctl+0xfc/0x170 [ 257.073470][ T8539] do_syscall_64+0xfa/0xfa0 [ 257.073496][ T8539] ? lockdep_hardirqs_on+0x9c/0x150 [ 257.073525][ T8539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.073545][ T8539] ? clear_bhb_loop+0x60/0xb0 [ 257.073570][ T8539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.073590][ T8539] RIP: 0033:0x7ff93e78ebe9 [ 257.073609][ T8539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.073627][ T8539] RSP: 002b:00007ff93f6cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.073650][ T8539] RAX: ffffffffffffffda RBX: 00007ff93e9c5fa0 RCX: 00007ff93e78ebe9 [ 257.073666][ T8539] RDX: 00002000000002c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 257.073679][ T8539] RBP: 00007ff93f6cc090 R08: 0000000000000000 R09: 0000000000000000 [ 257.073692][ T8539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.073704][ T8539] R13: 00007ff93e9c6038 R14: 00007ff93e9c5fa0 R15: 00007ffcb78b2ac8 [ 257.073740][ T8539] [ 257.073752][ T8539] comedi comedi3: rti802: I/O port conflict (0x8,4) [ 257.328904][ T45] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 257.332954][ T9] usb 1-1: USB disconnect, device number 64 [ 257.490787][ T45] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 257.503596][ T45] usb 5-1: config 0 has no interface number 0 [ 257.510049][ T45] usb 5-1: config 0 interface 4 altsetting 243 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 257.524880][ T45] usb 5-1: config 0 interface 4 has no altsetting 0 [ 257.534825][ T45] usb 5-1: New USB device found, idVendor=19d2, idProduct=1012, bcdDevice=db.89 [ 257.550340][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.561685][ T45] usb 5-1: Product: syz [ 257.566746][ T45] usb 5-1: Manufacturer: syz [ 257.575059][ T45] usb 5-1: SerialNumber: syz [ 257.587146][ T45] usb 5-1: config 0 descriptor?? [ 257.669687][ T5862] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 257.828398][ T5862] usb 2-1: Using ep0 maxpacket: 16 [ 257.835271][ T5862] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 257.844071][ T5862] usb 2-1: config 0 has no interface number 0 [ 257.850430][ T5862] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 257.860474][ T5862] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 257.874809][ T5862] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 257.884202][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.892477][ T5862] usb 2-1: Product: syz [ 257.896672][ T5862] usb 2-1: Manufacturer: syz [ 257.905075][ T5862] usb 2-1: SerialNumber: syz [ 257.928384][ T5862] usb 2-1: config 0 descriptor?? [ 257.938755][ T8546] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 257.946113][ T8546] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 258.072631][ T8559] comedi comedi3: rti802: I/O port conflict (0x8,4) [ 258.174596][ T5862] asix 2-1:0.251: probe with driver asix failed with error -71 [ 258.200622][ T5862] usb 2-1: USB disconnect, device number 43 [ 258.564174][ T5950] hub 4-1:11.62: bad descriptor, ignoring hub [ 258.574275][ T5950] hub 4-1:11.62: probe with driver hub failed with error -5 [ 258.610044][ T5950] usb 4-1: USB disconnect, device number 89 [ 258.641802][ T8570] random: crng reseeded on system resumption [ 258.929349][ T8574] comedi comedi3: rti802: I/O port conflict (0x8,4) [ 258.936179][ T8574] FAULT_INJECTION: forcing a failure. [ 258.936179][ T8574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.949816][ T8574] CPU: 1 UID: 0 PID: 8574 Comm: syz.1.704 Not tainted syzkaller #0 PREEMPT(full) [ 258.949843][ T8574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 258.949864][ T8574] Call Trace: [ 258.949873][ T8574] [ 258.949881][ T8574] dump_stack_lvl+0x189/0x250 [ 258.949918][ T8574] ? __pfx____ratelimit+0x10/0x10 [ 258.949945][ T8574] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.949976][ T8574] ? __pfx__printk+0x10/0x10 [ 258.950019][ T8574] should_fail_ex+0x414/0x560 [ 258.950048][ T8574] _copy_to_user+0x31/0xb0 [ 258.950081][ T8574] simple_read_from_buffer+0xe1/0x170 [ 258.950112][ T8574] proc_fail_nth_read+0x1b3/0x220 [ 258.950146][ T8574] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 258.950181][ T8574] ? rw_verify_area+0x2a6/0x4d0 [ 258.950202][ T8574] ? __lock_acquire+0xab9/0xd20 [ 258.950222][ T8574] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 258.950254][ T8574] vfs_read+0x200/0xa30 [ 258.950275][ T8574] ? fdget_pos+0x247/0x320 [ 258.950307][ T8574] ? __pfx___mutex_lock+0x10/0x10 [ 258.950336][ T8574] ? __pfx_vfs_read+0x10/0x10 [ 258.950360][ T8574] ? __fget_files+0x2a/0x420 [ 258.950391][ T8574] ? __fget_files+0x3a0/0x420 [ 258.950415][ T8574] ? __fget_files+0x2a/0x420 [ 258.950451][ T8574] ksys_read+0x145/0x250 [ 258.950476][ T8574] ? __pfx_ksys_read+0x10/0x10 [ 258.950502][ T8574] ? do_syscall_64+0xbe/0xfa0 [ 258.950533][ T8574] do_syscall_64+0xfa/0xfa0 [ 258.950558][ T8574] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.950585][ T8574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.950606][ T8574] ? clear_bhb_loop+0x60/0xb0 [ 258.950631][ T8574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.950650][ T8574] RIP: 0033:0x7ff93e78d5fc [ 258.950669][ T8574] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 258.950686][ T8574] RSP: 002b:00007ff93f6cc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 258.950708][ T8574] RAX: ffffffffffffffda RBX: 00007ff93e9c5fa0 RCX: 00007ff93e78d5fc [ 258.950723][ T8574] RDX: 000000000000000f RSI: 00007ff93f6cc0a0 RDI: 0000000000000004 [ 258.950735][ T8574] RBP: 00007ff93f6cc090 R08: 0000000000000000 R09: 0000000000000000 [ 258.950747][ T8574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.950759][ T8574] R13: 00007ff93e9c6038 R14: 00007ff93e9c5fa0 R15: 00007ffcb78b2ac8 [ 258.950793][ T8574] [ 259.190608][ C1] vkms_vblank_simulate: vblank timer overrun [ 259.200563][ T5950] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 259.357536][ T5950] usb 4-1: Using ep0 maxpacket: 8 [ 259.366381][ T5950] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 259.377402][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.385424][ T5950] usb 4-1: Product: syz [ 259.389866][ T5950] usb 4-1: Manufacturer: syz [ 259.394493][ T5950] usb 4-1: SerialNumber: syz [ 259.406486][ T5950] usb 4-1: config 0 descriptor?? [ 259.416879][ T5950] gspca_main: sq930x-2.14.0 probing 2770:930c [ 259.619624][ T8572] netlink: 20 bytes leftover after parsing attributes in process `syz.3.703'. [ 259.629110][ T8572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.703'. [ 259.646015][ T8572] syzkaller1: entered promiscuous mode [ 259.653866][ T8572] syzkaller1: entered allmulticast mode [ 259.687209][ T24] usb 2-1: new low-speed USB device number 44 using dummy_hcd [ 259.859417][ T24] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 259.868103][ T24] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 259.876285][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 259.886475][ T24] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 259.899891][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 259.913710][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 259.931363][ T24] usb 2-1: string descriptor 0 read error: -22 [ 259.938262][ T24] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 259.947425][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.955782][ T5950] gspca_sq930x: ucbus_write failed -71 [ 259.964696][ T24] usb 2-1: config 0 descriptor?? [ 259.970892][ T8584] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 259.979639][ T24] hub 2-1:0.0: bad descriptor, ignoring hub [ 259.985769][ T24] hub 2-1:0.0: probe with driver hub failed with error -5 [ 259.996309][ T24] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input26 [ 260.091047][ T24] usb 5-1: USB disconnect, device number 18 [ 260.186827][ T5950] gspca_sq930x: Sensor ov9630 not yet treated [ 260.199327][ T5950] sq930x 4-1:0.0: probe with driver sq930x failed with error -22 [ 260.220404][ T5950] usb 4-1: USB disconnect, device number 90 [ 260.416806][ T5863] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 260.416928][ T52] Bluetooth: hci4: command 0x1003 tx timeout [ 260.533164][ T8591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.710'. [ 260.560643][ T8592] input: syz0 as /devices/virtual/input/input27 [ 260.576490][ T24] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 260.739866][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 260.748430][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 260.761209][ T24] usb 5-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 260.770904][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.779169][ T24] usb 5-1: Product: syz [ 260.783461][ T24] usb 5-1: Manufacturer: syz [ 260.788544][ T24] usb 5-1: SerialNumber: syz [ 262.368667][ T5862] usb 2-1: USB disconnect, device number 44 [ 262.424021][ T8601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.713'. [ 262.562201][ T8606] usb usb8: usbfs: process 8606 (syz.1.715) did not claim interface 0 before use [ 262.735695][ T5863] Bluetooth: hci1: command 0x0406 tx timeout [ 262.736012][ T8595] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 263.149495][ T24] kalmia 5-1:106.0: probe with driver kalmia failed with error -22 [ 263.167080][ T24] usb 5-1: USB disconnect, device number 19 [ 263.623291][ T8595] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 263.634768][ T8595] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 263.643266][ T8595] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 263.649417][ T8595] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 263.659184][ T8595] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 263.665617][ T8595] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 263.672739][ T8595] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 263.679420][ T8595] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 263.689131][ T8595] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 263.819062][ T8618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.834560][ T8618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.847248][ T8618] team_slave_0: entered allmulticast mode [ 263.856302][ T8621] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 263.858497][ T8618] team_slave_0: entered promiscuous mode [ 263.954516][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 263.989435][ T30] audit: type=1800 audit(2831126634.156:7): pid=8624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.721" name="/" dev="9p" ino=2 res=0 errno=0 [ 264.045022][ T5949] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 264.084376][ T9] usb 2-1: device descriptor read/64, error -71 [ 264.207263][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.223263][ T5949] usb 5-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 264.237084][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.248820][ T5949] usb 5-1: config 0 descriptor?? [ 264.357254][ T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 264.373749][ T5862] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 264.433758][ T5952] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 264.493945][ T9] usb 2-1: device descriptor read/64, error -71 [ 264.566839][ T5862] usb 1-1: too many configurations: 243, using maximum allowed: 8 [ 264.578875][ T5952] usb 4-1: device descriptor read/64, error -71 [ 264.579538][ T5862] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 264.602141][ T5862] usb 1-1: can't read configurations, error -22 [ 264.609350][ T9] usb usb2-port1: attempt power cycle [ 264.691657][ T5949] kye 0003:0458:501B.001A: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 264.723767][ T5949] kye 0003:0458:501B.001A: hidraw0: USB HID v0.00 Device [HID 0458:501b] on usb-dummy_hcd.4-1/input0 [ 264.740201][ T5949] kye 0003:0458:501B.001A: tablet-enabling feature report not found [ 264.754005][ T5949] kye 0003:0458:501B.001A: tablet enabling failed [ 264.773749][ T5862] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 264.823610][ T5952] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 264.823713][ T5863] Bluetooth: hci1: command 0x0406 tx timeout [ 264.889247][ T8615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.917983][ T8615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.934133][ T5862] usb 1-1: too many configurations: 243, using maximum allowed: 8 [ 264.951385][ T5862] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 264.960407][ T5862] usb 1-1: can't read configurations, error -22 [ 264.972577][ T5862] usb usb1-port1: attempt power cycle [ 264.983519][ T9] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 264.988317][ T5952] usb 4-1: device descriptor read/64, error -71 [ 265.015354][ T9] usb 2-1: device descriptor read/8, error -71 [ 265.059312][ T5949] usb 5-1: USB disconnect, device number 20 [ 265.105187][ T5952] usb usb4-port1: attempt power cycle [ 265.275487][ T9] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 265.310184][ T5862] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 265.320430][ T9] usb 2-1: device descriptor read/8, error -71 [ 265.357417][ T5862] usb 1-1: too many configurations: 243, using maximum allowed: 8 [ 265.379442][ T5862] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 265.398366][ T5862] usb 1-1: can't read configurations, error -22 [ 265.443558][ T9] usb usb2-port1: unable to enumerate USB device [ 265.453149][ T5952] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 265.485707][ T5952] usb 4-1: device descriptor read/8, error -71 [ 265.553009][ T5862] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 265.565757][ T5949] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 265.575371][ T5862] usb 1-1: too many configurations: 243, using maximum allowed: 8 [ 265.585302][ T5862] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 265.594501][ T5862] usb 1-1: can't read configurations, error -22 [ 265.601666][ T5862] usb usb1-port1: unable to enumerate USB device [ 265.703111][ T5863] Bluetooth: hci2: command 0x0c1a tx timeout [ 265.709245][ T52] Bluetooth: hci3: command 0x0405 tx timeout [ 265.715422][ T5874] Bluetooth: hci0: command 0x0406 tx timeout [ 265.759087][ T5952] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 265.812713][ T5952] usb 4-1: device descriptor read/8, error -71 [ 265.860994][ T8675] netlink: 244 bytes leftover after parsing attributes in process `syz.1.727'. [ 265.924916][ T5952] usb usb4-port1: unable to enumerate USB device [ 266.122519][ T5862] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 266.276062][ T5862] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 266.297159][ T5862] usb 2-1: config 0 has no interface number 0 [ 266.305117][ T5862] usb 2-1: config 0 interface 107 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 266.317834][ T5862] usb 2-1: config 0 interface 107 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 266.331326][ T5862] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 64 [ 266.343691][ T5862] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 266.357242][ T5862] usb 2-1: config 0 interface 107 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 266.381638][ T5862] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0127, bcdDevice=7b.4a [ 266.396778][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.405216][ T5862] usb 2-1: Product: syz [ 266.409461][ T5862] usb 2-1: Manufacturer: syz [ 266.418258][ T5862] usb 2-1: SerialNumber: syz [ 266.429237][ T5862] usb 2-1: config 0 descriptor?? [ 266.442695][ T8675] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 266.453236][ T5862] kvaser_usb 2-1:0.107: error -EMSGSIZE: Cannot get software info [ 266.461210][ T5862] kvaser_usb 2-1:0.107: probe with driver kvaser_usb failed with error -90 [ 266.656865][ T5902] usb 2-1: USB disconnect, device number 49 [ 266.902242][ T5863] Bluetooth: hci1: command 0x0406 tx timeout [ 267.611657][ T5952] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 267.711387][ T5950] usb 4-1: new low-speed USB device number 95 using dummy_hcd [ 267.771691][ T5952] usb 1-1: Using ep0 maxpacket: 32 [ 267.772130][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 267.783810][ T5874] Bluetooth: hci3: command 0x0405 tx timeout [ 267.785074][ T5869] Bluetooth: hci0: command 0x0406 tx timeout [ 267.802589][ T5952] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.827821][ T5952] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 267.862448][ T5950] usb 4-1: device descriptor read/64, error -71 [ 267.869324][ T5952] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 267.902552][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 267.927857][ T5952] usb 1-1: Product: syz [ 267.942918][ T5952] usb 1-1: Manufacturer: syz [ 267.959940][ T5952] usb 1-1: SerialNumber: syz [ 267.998077][ T5952] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input28 [ 268.111217][ T5950] usb 4-1: new low-speed USB device number 96 using dummy_hcd [ 268.208209][ T5952] usb 1-1: USB disconnect, device number 69 [ 268.208293][ C0] appletouch 1-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 268.265092][ T5952] appletouch 1-1:1.0: input: appletouch disconnected [ 268.272198][ T5950] usb 4-1: device descriptor read/64, error -71 [ 268.381429][ T5950] usb usb4-port1: attempt power cycle [ 268.720867][ T5950] usb 4-1: new low-speed USB device number 97 using dummy_hcd [ 268.771401][ T5950] usb 4-1: device descriptor read/8, error -71 [ 268.781797][ T30] audit: type=1326 audit(2831126638.959:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8726 comm="syz.0.736" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f66fe98ebe9 code=0x0 [ 268.903698][ T5949] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 269.032537][ T5950] usb 4-1: new low-speed USB device number 98 using dummy_hcd [ 269.087090][ T5950] usb 4-1: device descriptor read/8, error -71 [ 269.132985][ T5949] usb 5-1: unable to get BOS descriptor or descriptor too short [ 269.204229][ T5949] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 269.221362][ T5950] usb usb4-port1: unable to enumerate USB device [ 269.331200][ T5949] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 269.350407][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.365819][ T5949] usb 5-1: Product: syz [ 269.375839][ T5949] usb 5-1: Manufacturer: syz [ 269.390682][ T5949] usb 5-1: SerialNumber: syz [ 269.798885][ T30] audit: type=1800 audit(2831126639.970:9): pid=8761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.742" name="/" dev="9p" ino=2 res=0 errno=0 [ 269.850453][ T5869] Bluetooth: hci2: command 0x0c1a tx timeout [ 269.915504][ T8763] netlink: 'syz.0.743': attribute type 10 has an invalid length. [ 269.942757][ T8763] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 269.953262][ T5862] wlan1 speed is unknown, defaulting to 1000 [ 269.954208][ T8762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.963631][ T9] wlan1 speed is unknown, defaulting to 1000 [ 269.978075][ T5902] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 270.142719][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 270.152976][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 270.165233][ T5902] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 270.174436][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.182812][ T5902] usb 2-1: Product: syz [ 270.187014][ T5902] usb 2-1: Manufacturer: syz [ 270.191914][ T5902] usb 2-1: SerialNumber: syz [ 270.198746][ T5902] usb 2-1: config 0 descriptor?? [ 270.208068][ T5902] usb 2-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 270.313226][ T5949] usb 5-1: reset high-speed USB device number 22 using dummy_hcd [ 270.431000][ T5902] usb 2-1: USB disconnect, device number 50 [ 270.497977][ T8706] syzkaller1: entered promiscuous mode [ 270.508966][ T8706] syzkaller1: entered allmulticast mode [ 270.533643][ T5949] usb 5-1: unable to get BOS descriptor or descriptor too short [ 270.559402][ T5949] usb 5-1: device firmware changed [ 270.604698][ T5949] usb 5-1: USB disconnect, device number 22 [ 270.839211][ T5952] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 270.950359][ T30] audit: type=1400 audit(2831126641.131:10): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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syzkaller1: entered promiscuous mode [ 271.056579][ T5869] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 271.063808][ T5950] usb 4-1: new low-speed USB device number 99 using dummy_hcd [ 271.073448][ T8774] syzkaller1: entered allmulticast mode [ 271.088979][ T5952] usb 1-1: Using ep0 maxpacket: 8 [ 271.096527][ T5952] usb 1-1: unable to get BOS descriptor or descriptor too short [ 271.112385][ T5952] usb 1-1: string descriptor 0 read error: -22 [ 271.119247][ T5952] usb 1-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe [ 271.128316][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.231444][ T5950] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 271.243307][ T5950] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 271.255044][ T5950] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 271.267330][ T5950] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 271.289091][ T5950] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 271.310378][ T5950] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 271.317877][ T5950] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 271.353054][ T5950] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 271.369629][ T5949] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 271.379983][ T5952] asix 1-1:7.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 271.393665][ T5950] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 271.429202][ T5952] asix 1-1:7.0: probe with driver asix failed with error -61 [ 271.441928][ T5950] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 271.483450][ T5950] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 271.491452][ T5950] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 271.518801][ T5950] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 271.538940][ T5950] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 271.568610][ T5950] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 271.580459][ T5949] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 271.583474][ T5952] usb 1-1: USB disconnect, device number 70 [ 271.593475][ T5949] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.612716][ T5950] usb 4-1: string descriptor 0 read error: -22 [ 271.615294][ T5949] usb 2-1: config 0 has no interface number 0 [ 271.628688][ T5950] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 271.637799][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.640998][ T5949] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 271.675822][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.699162][ T5949] usb 2-1: config 0 descriptor?? [ 271.701227][ T5950] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 272.188685][ T5952] usb 4-1: USB disconnect, device number 99 [ 272.393433][ T30] audit: type=1800 audit(2831126642.572:11): pid=8793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.751" name="/" dev="9p" ino=2 res=0 errno=0 [ 272.542144][ T8799] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.753'. [ 272.563219][ T8800] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.753'. [ 272.728804][ T5952] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 272.894081][ T5952] usb 4-1: no configurations [ 272.898953][ T5952] usb 4-1: can't read configurations, error -22 [ 272.947670][ T5949] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 273.030235][ T5952] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 273.037897][ T5902] usb 1-1: new low-speed USB device number 71 using dummy_hcd [ 273.097550][ T5949] usb 5-1: Using ep0 maxpacket: 16 [ 273.104548][ T5949] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 273.121277][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 273.134934][ T5949] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 273.144324][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.152646][ T5949] usb 5-1: Product: syz [ 273.156847][ T5949] usb 5-1: Manufacturer: syz [ 273.161546][ T5949] usb 5-1: SerialNumber: syz [ 273.168651][ T5949] usb 5-1: config 0 descriptor?? [ 273.178826][ T5949] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 273.188102][ T5949] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 273.199910][ T5902] usb 1-1: unable to get BOS descriptor or descriptor too short [ 273.209378][ T5902] usb 1-1: config 1 has an invalid interface number: 154 but max is 0 [ 273.217691][ T5902] usb 1-1: config 1 has no interface number 0 [ 273.218905][ T5952] usb 4-1: no configurations [ 273.224265][ T5902] usb 1-1: config 1 interface 154 has no altsetting 0 [ 273.237798][ T5952] usb 4-1: can't read configurations, error -22 [ 273.244646][ T5952] usb usb4-port1: attempt power cycle [ 273.587339][ T5952] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 273.608557][ T5952] usb 4-1: no configurations [ 273.613203][ T5952] usb 4-1: can't read configurations, error -22 [ 273.747229][ T5952] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 273.769348][ T5952] usb 4-1: no configurations [ 273.774023][ T5952] usb 4-1: can't read configurations, error -22 [ 273.781514][ T5949] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 273.782012][ T5952] usb usb4-port1: unable to enumerate USB device [ 273.789882][ T5949] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 273.962280][ T5952] usb 2-1: USB disconnect, device number 51 [ 274.004874][ T5949] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 274.022647][ T5949] em28xx 5-1:0.0: No AC97 audio processor [ 274.055518][ T5949] usb 5-1: USB disconnect, device number 23 [ 274.069051][ T5949] em28xx 5-1:0.0: Disconnecting em28xx [ 274.082912][ T5949] em28xx 5-1:0.0: Freeing device [ 274.164789][ T8809] netlink: 'syz.1.758': attribute type 63 has an invalid length. [ 274.173034][ T8809] netlink: 5 bytes leftover after parsing attributes in process `syz.1.758'. [ 274.671131][ T30] audit: type=1800 audit(2831126644.853:12): pid=8819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.763" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 274.691177][ C0] vkms_vblank_simulate: vblank timer overrun [ 274.838773][ T5949] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 274.996211][ T5949] usb 2-1: Using ep0 maxpacket: 32 [ 275.003225][ T5949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.016224][ T5949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.026056][ T5949] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 275.035282][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.046556][ T5949] usb 2-1: config 0 descriptor?? [ 275.520918][ T5949] savu 0003:1E7D:2D5A.001B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 275.585570][ T5949] usb 2-1: USB disconnect, device number 52 [ 275.666697][ T8832] fido_id[8832]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 275.728943][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 275.809733][ T5902] usb 1-1: New USB device found, idVendor=08ca, idProduct=0023, bcdDevice=79.cb [ 275.837126][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.841640][ T5869] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 275.857666][ T8840] IPVS: length: 78 != 8 [ 275.864567][ T5902] usb 1-1: can't set config #1, error -71 [ 275.880415][ T5902] usb 1-1: USB disconnect, device number 71 [ 275.905692][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 275.916935][ T9] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 275.935406][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.955222][ T9] usb 5-1: config 0 descriptor?? [ 275.967998][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 275.985757][ T5950] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 276.015876][ T5949] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 276.073779][ T8850] overlay: Bad value for 'workdir' [ 276.135786][ T5950] usb 4-1: Using ep0 maxpacket: 32 [ 276.147597][ T5950] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 276.155892][ T5950] usb 4-1: config 0 has no interface number 0 [ 276.167958][ T5950] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 276.169273][ T8826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.196250][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.200193][ T5949] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 276.204308][ T5950] usb 4-1: Product: syz [ 276.204329][ T5950] usb 4-1: Manufacturer: syz [ 276.220212][ T8826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.233814][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.244569][ T5949] usb 2-1: Product: syz [ 276.244686][ T5950] usb 4-1: SerialNumber: syz [ 276.255729][ T5949] usb 2-1: Manufacturer: syz [ 276.260435][ T5949] usb 2-1: SerialNumber: syz [ 276.282607][ T5950] usb 4-1: config 0 descriptor?? [ 276.287121][ T5949] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 276.302111][ T5950] smsc95xx v2.0.0 [ 276.321383][ T5902] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 276.472810][ T9] gspca_vc032x: reg_w err -71 [ 276.477773][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 276.483259][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 276.489094][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 276.494957][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 276.500444][ T5952] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 276.508313][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 276.508330][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 276.508390][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 276.508402][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 276.508413][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 276.508423][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 276.508434][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 276.508444][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 276.508455][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 276.508466][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 276.508476][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 276.508486][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 276.508497][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 276.508555][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 276.508574][ T9] gspca_vc032x: Unknown sensor... [ 276.508654][ T9] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 276.601672][ T9] usb 5-1: USB disconnect, device number 24 [ 276.645157][ T5952] usb 1-1: device descriptor read/64, error -71 [ 276.759797][ T5949] usb 2-1: USB disconnect, device number 53 [ 276.904950][ T5952] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 277.022152][ T8858] netlink: 68 bytes leftover after parsing attributes in process `syz.4.775'. [ 277.037895][ T5952] usb 1-1: device descriptor read/64, error -71 [ 277.103412][ T8864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.113453][ T8864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.130307][ T5950] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 277.139026][ T8864] netlink: 40 bytes leftover after parsing attributes in process `syz.4.776'. [ 277.145802][ T5952] usb usb1-port1: attempt power cycle [ 277.332494][ T8838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.362098][ T8838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.374751][ T5902] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 277.393927][ T5950] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 277.395037][ T5902] ath9k_htc: Failed to initialize the device [ 277.411942][ T5949] usb 2-1: ath9k_htc: USB layer deinitialized [ 277.440538][ T5950] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 277.462069][ T5950] usb 4-1: USB disconnect, device number 104 [ 277.494668][ T5952] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 277.518471][ T5952] usb 1-1: device descriptor read/8, error -71 [ 277.764502][ T5949] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 277.769139][ T5952] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 277.795582][ T5952] usb 1-1: device descriptor read/8, error -71 [ 277.905498][ T5952] usb usb1-port1: unable to enumerate USB device [ 277.956550][ T5949] usb 2-1: config 0 has an invalid interface number: 9 but max is 0 [ 277.966655][ T5949] usb 2-1: config 0 has no interface number 0 [ 277.973308][ T5949] usb 2-1: config 0 interface 9 altsetting 132 endpoint 0x6 has invalid wMaxPacketSize 0 [ 277.983357][ T5949] usb 2-1: config 0 interface 9 altsetting 132 has an endpoint descriptor with address 0x31, changing to 0x1 [ 277.995062][ T5949] usb 2-1: config 0 interface 9 altsetting 132 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 278.006351][ T5949] usb 2-1: config 0 interface 9 has no altsetting 0 [ 278.016026][ T5949] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 278.025206][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.033736][ T5949] usb 2-1: Product: syz [ 278.038164][ T5949] usb 2-1: Manufacturer: syz [ 278.042828][ T5949] usb 2-1: SerialNumber: syz [ 278.044185][ T24] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 278.058573][ T5949] usb 2-1: config 0 descriptor?? [ 278.174281][ T9] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 278.184088][ T24] usb 5-1: device descriptor read/64, error -71 [ 278.270159][ T5949] ftdi_sio 2-1:0.9: FTDI USB Serial Device converter detected [ 278.279256][ T5949] usb 2-1: Detected SIO [ 278.283465][ T5949] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 6 [ 278.292826][ T5949] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 278.309297][ T5949] usb 2-1: USB disconnect, device number 54 [ 278.327277][ T5949] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 278.338701][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 278.346976][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 278.359669][ T5949] ftdi_sio 2-1:0.9: device disconnected [ 278.365464][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 278.377347][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 278.389424][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 49 [ 278.399379][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 278.408762][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.419214][ T9] usb 4-1: config 0 descriptor?? [ 278.425656][ T8880] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 278.434897][ T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 278.573818][ T24] usb 5-1: device descriptor read/64, error -71 [ 278.684155][ T24] usb usb5-port1: attempt power cycle [ 278.832657][ T8885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.844606][ T5952] usb 4-1: USB disconnect, device number 105 [ 278.847597][ T8885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.866710][ T5869] Bluetooth: hci4: Opcode 0x0c03 failed: -19 [ 279.024645][ T24] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 279.044052][ T24] usb 5-1: device descriptor read/8, error -71 [ 279.063542][ T5950] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 279.214998][ T5950] usb 2-1: Using ep0 maxpacket: 32 [ 279.221896][ T5950] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 279.235423][ T5950] usb 2-1: config 0 interface 0 has no altsetting 0 [ 279.242277][ T5950] usb 2-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 279.251545][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.271162][ T5950] usb 2-1: config 0 descriptor?? [ 279.303376][ T24] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 279.324469][ T24] usb 5-1: device descriptor read/8, error -71 [ 279.433710][ T24] usb usb5-port1: unable to enumerate USB device [ 279.488241][ T5950] usbhid 2-1:0.0: can't add hid device: -71 [ 279.496554][ T5950] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 279.507630][ T5950] usb 2-1: USB disconnect, device number 55 [ 279.653123][ T5949] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 279.693253][ T5902] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 279.815281][ T5949] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 279.827136][ T5949] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 279.838439][ T5949] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 279.849790][ T5949] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 279.859081][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.869848][ T5902] usb 1-1: unable to get BOS descriptor set [ 279.877003][ T5902] usb 1-1: not running at top speed; connect to a high speed hub [ 279.887208][ T8893] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 279.899161][ T5902] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.909407][ T5902] usb 1-1: config 0 has no interfaces? [ 279.918095][ T5902] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 279.927465][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.935713][ T5902] usb 1-1: Product: syz [ 279.939928][ T5902] usb 1-1: Manufacturer: syz [ 279.944624][ T5902] usb 1-1: SerialNumber: syz [ 279.952011][ T5902] usb 1-1: config 0 descriptor?? [ 280.109797][ T5949] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 280.120139][ T5949] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input29 [ 280.156920][ T5949] usb 4-1: USB disconnect, device number 106 [ 280.163047][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 280.179759][ T5902] usb 1-1: USB disconnect, device number 76 [ 280.275051][ T5950] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 280.413889][ T5950] usb 2-1: device descriptor read/64, error -71 [ 280.673919][ T8908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.674198][ T5950] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 280.690880][ T8908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.843191][ T5950] usb 2-1: device descriptor read/64, error -71 [ 280.862239][ T24] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 280.922205][ T6369] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 280.952399][ T5950] usb usb2-port1: attempt power cycle [ 280.972109][ T5952] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 281.033207][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 281.039804][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 281.072104][ T6369] usb 4-1: Using ep0 maxpacket: 8 [ 281.079873][ T6369] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.086213][ T5949] libceph: connect (1)[b::]:6789 error -101 [ 281.097706][ T6369] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 281.102656][ T5949] libceph: mon0 (1)[b::]:6789 connect error [ 281.109549][ T6369] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 281.125571][ T6369] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.134615][ T8918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.135097][ T5952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.157477][ T8918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.158899][ T5952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.175800][ T5952] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 281.176124][ T5952] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 281.176149][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.183447][ T5952] usb 1-1: config 0 descriptor?? [ 281.192454][ T6369] hub 4-1:1.0: bad descriptor, ignoring hub [ 281.192483][ T6369] hub 4-1:1.0: probe with driver hub failed with error -5 [ 281.224398][ T8906] ceph: No mds server is up or the cluster is laggy [ 281.226329][ T8915] ceph: No mds server is up or the cluster is laggy [ 281.236982][ T8918] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000b2: 0000 [#1] SMP KASAN PTI [ 281.237009][ T8918] KASAN: null-ptr-deref in range [0x0000000000000590-0x0000000000000597] [ 281.237027][ T8918] CPU: 1 UID: 0 PID: 8918 Comm: syz.4.790 Not tainted syzkaller #0 PREEMPT(full) [ 281.237047][ T8918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 281.237059][ T8918] RIP: 0010:vc_deallocate+0x303/0x3e0 [ 281.237085][ T8918] Code: e8 72 d7 cf fc 49 c7 07 00 00 00 00 eb 0e e8 94 d4 6b fc eb 05 e8 8d d4 6b fc 31 db 4c 8d b3 90 05 00 00 4d 89 f4 49 c1 ec 03 <43> 80 3c 2c 00 74 08 4c 89 f7 e8 4e d6 cf fc 4d 8b 3e 4d 85 ff 74 [ 281.237101][ T8918] RSP: 0018:ffffc900188279e0 EFLAGS: 00010206 [ 281.237119][ T8918] RAX: ffffffff85542783 RBX: 0000000000000000 RCX: ffff88802cd53c80 [ 281.237133][ T8918] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000003f [ 281.237145][ T8918] RBP: ffffc90018827a90 R08: ffffffff8fe506cf R09: 1ffffffff1fca0d9 [ 281.237158][ T8918] R10: dffffc0000000000 R11: fffffbfff1fca0da R12: 00000000000000b2 [ 281.237172][ T8918] R13: dffffc0000000000 R14: 0000000000000590 R15: ffffffff9a272c80 [ 281.237186][ T8918] FS: 00007fd952ff66c0(0000) GS:ffff8881258b3000(0000) knlGS:0000000000000000 [ 281.237215][ T8918] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.237230][ T8918] CR2: 0000000000000000 CR3: 000000002e634000 CR4: 00000000003526f0 [ 281.237247][ T8918] Call Trace: [ 281.237259][ T8918] [ 281.237268][ T8918] ? vt_disallocate_all+0x3b/0xe0 [ 281.237292][ T8918] ? __pfx_vc_deallocate+0x10/0x10 [ 281.237317][ T8918] ? is_console_locked+0x9/0x20 [ 281.237346][ T8918] vt_disallocate_all+0x60/0xe0 [ 281.237393][ T8918] vt_ioctl+0x1adc/0x1f20 [ 281.237416][ T8918] ? __pfx_vt_ioctl+0x10/0x10 [ 281.237444][ T8918] ? __fget_files+0x2a/0x420 [ 281.237472][ T8918] ? tty_jobctrl_ioctl+0x369/0xb70 [ 281.237495][ T8918] ? __fget_files+0x3a0/0x420 [ 281.237520][ T8918] ? __fget_files+0x2a/0x420 [ 281.237547][ T8918] tty_ioctl+0x926/0xde0 [ 281.237573][ T8918] ? __pfx_tty_ioctl+0x10/0x10 [ 281.237599][ T8918] __se_sys_ioctl+0xfc/0x170 [ 281.237620][ T8918] do_syscall_64+0xfa/0xfa0 [ 281.237649][ T8918] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.237676][ T8918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.237697][ T8918] ? clear_bhb_loop+0x60/0xb0 [ 281.237720][ T8918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.237741][ T8918] RIP: 0033:0x7fd954d8ebe9 [ 281.237758][ T8918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.237776][ T8918] RSP: 002b:00007fd952ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 281.237797][ T8918] RAX: ffffffffffffffda RBX: 00007fd954fc6180 RCX: 00007fd954d8ebe9 [ 281.237813][ T8918] RDX: 0000000000000000 RSI: 0000000000005608 RDI: 0000000000000006 [ 281.237825][ T8918] RBP: 00007fd954e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 281.237838][ T8918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.237850][ T8918] R13: 00007fd954fc6218 R14: 00007fd954fc6180 R15: 00007fffa4002eb8 [ 281.237874][ T8918] [ 281.237883][ T8918] Modules linked in: [ 281.237929][ T8918] ---[ end trace 0000000000000000 ]--- [ 281.237942][ T8918] RIP: 0010:vc_deallocate+0x303/0x3e0 [ 281.237966][ T8918] Code: e8 72 d7 cf fc 49 c7 07 00 00 00 00 eb 0e e8 94 d4 6b fc eb 05 e8 8d d4 6b fc 31 db 4c 8d b3 90 05 00 00 4d 89 f4 49 c1 ec 03 <43> 80 3c 2c 00 74 08 4c 89 f7 e8 4e d6 cf fc 4d 8b 3e 4d 85 ff 74 [ 281.237984][ T8918] RSP: 0018:ffffc900188279e0 EFLAGS: 00010206 [ 281.238003][ T8918] RAX: ffffffff85542783 RBX: 0000000000000000 RCX: ffff88802cd53c80 [ 281.238018][ T8918] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000003f [ 281.238031][ T8918] RBP: ffffc90018827a90 R08: ffffffff8fe506cf R09: 1ffffffff1fca0d9 [ 281.238072][ T8918] R10: dffffc0000000000 R11: fffffbfff1fca0da R12: 00000000000000b2 [ 281.238088][ T8918] R13: dffffc0000000000 R14: 0000000000000590 R15: ffffffff9a272c80 [ 281.238104][ T8918] FS: 00007fd952ff66c0(0000) GS:ffff8881258b3000(0000) knlGS:0000000000000000 [ 281.238123][ T8918] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.238137][ T8918] CR2: 0000000000000000 CR3: 000000002e634000 CR4: 00000000003526f0 [ 281.238156][ T8918] Kernel panic - not syncing: Fatal exception [ 281.238425][ T8918] Kernel Offset: disabled