last executing test programs: 11m36.558058253s ago: executing program 32 (id=500): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x0) listns(&(0x7f00000000c0)={0x20, 0x0, 0x8000002000000002, 0x8000000, 0x0, 0x3}, 0x0, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {r3, r4}}, './file0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r6, @ANYRESHEX=r7], 0x15) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x3f2, 0x800, 0x70bd2a, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x4044050) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r9 = syz_open_dev$radio(&(0x7f0000001840), 0x2, 0x2) ioctl$VIDIOC_S_TUNER(r9, 0x4054561e, &(0x7f0000001940)={0x5, "010000000000000048521868bb49c8892048d93aedcb1aace15cce96f1b65aaa", 0x0, 0x0, 0x4, 0xb4e, 0x1, 0x2, 0x7, 0xfffffff9}) ioctl$SIOCX25SDTEFACILITIES(r8, 0x89eb, &(0x7f00000001c0)={0x8, 0x1, 0xfff, 0xa, 0x5, 0x1d, 0x29, "ff030000000000000400", "39e80000460062ff010000ec00"}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x3, 0x0, 0x2}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x29}}, './file0\x00'}) 10m57.198740363s ago: executing program 33 (id=580): unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x48, r2, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}]}]}, 0x48}}, 0x804) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 10m12.479096762s ago: executing program 1 (id=654): sendmmsg$alg(0xffffffffffffffff, &(0x7f00000056c0)=[{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000600)="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", 0xd73}], 0x1}], 0x1, 0x20000800) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x9, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001e40)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xae, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000001380)=[{&(0x7f00000001c0)="7032b8c901f3dda7b348326e0deb364cb331b4529fccfea6e96c74abb171ed465ec70093f72bda506436d9db5819d06dddff4ca27d3b2aa573592d4af521bfd496f540e498dea4529d010ff535874004630d1172360bb8208e09f37bd35c2d35b7066268e9ed858382ef65472042f5cccf91225852ee80e19cdd8bfc22b7808a6d1217452692ba9ed7a493dba44123a0989341d509645144c8d4ee27c99fbb0b1a9f24635113fa70a816e9b16d0215fc2c06fa059c4c2f3ce1c68f4e77210391704587c68b6bd7b495e557c87e0e7264cdf77ea51eebf84070240c9953594a169c878da8d22b8df84d28", 0xea}, {&(0x7f00000002c0)="e0b50399e1d9bd595121f9271dd9fc9d1472eecbd7fc008983ce51fc3ea113ca7b97e22d48f5cba42507c2efa8fc272d8cd43f523bc6c9d78959a4471947e459ee05df75ca9b99b10bde2445026fb29b7d4f88d5b076c46b37d35c459481b853fae54907b4de961d4284b0e674c7a15983a1bf30381db8c0b2d76f874578cc9854855be32d10b8b93fba72a61de758a9e3282e4f468ed10f792f27417299bfb5164413d6a38c864c760cfc0488540e79a39c91682cc628d9a07046", 0xbb}, {&(0x7f0000000380)="e7039c3975f116e5161c4e957c40fc11ff6f055bb719cb643745333ab5ecd9004fa598f5f5cea35470c5fe1b292ec37fa90fc439b540e6e2977ffc7ba44be84dd5661aeefe65d5b71f52e4a86e61b1d76bb822af3caa", 0x56}, {&(0x7f0000000400)="2d2ac5fe3bb4db7bd03a37aef280c1e16d86f8477246f812bba61d80affbd957ac6c5c05e1842f25e93d1e108f1ea774524f6ae3e81cb327de03716f30b7cad9df488e96af2f6d362e000e9cb4f85793b856497be440620abfbee5557bbf7edf8afaea38f918e3d58d90cf55f1e58abd85be59c1dcfcf12a3d859ae423e3c107e3938f1fa880f83f727a50052d9ce90b0d3a1ea2806ebd8fe174ebdb0817882564f0c9aafd", 0xa5}, {&(0x7f00000004c0)}, {&(0x7f0000000500)="009e7a9efc3491c1fe4f194f2a4331d2f17b547ece04a2d2176ba644324264d22b493b24b725c515d69378d5220625226307e6e87b027f9cf3cec19e23ea3364d14882bbebfbd04143783a0f17752125089d893809324c5550854b63446dcd1edb42a4b318f25d66a7c5cb02529dd3cca8f47a474d4c443a8d2dc90f76212d0bea772ea0f742a5adcc2aed1e827e3453bb981cc77aa0df48b80b02886f0794060b500975242b00", 0xa7}], 0x6, &(0x7f0000001740)=[@dstopts_2292={{0x20, 0x29, 0x4, {0x1, 0x0, '\x00', [@ra={0x5, 0x2, 0x3}]}}}, @hopopts={{0x168, 0x29, 0x36, {0x536fd246e6b40512, 0x29, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @hao={0xc9, 0x10, @local}, @ra={0x5, 0x2, 0xff0c}, @generic={0x9, 0xb8, "ae6247de63a0db23e04a18436410aebf7d7212c2b8d521183294bdc20226b6a3605543e09663370227108ac6bef290e6aea567e8a0b01ec5b5d70d3779d838bc325fae0c014944c8e6e87fc88db51f8b0d370ebe14783453feed156a932171d70d343054ed56482c378b394b38f907946c34f20f7ba17c23d018c687c4cdfe0fab948c6b176618ce2113b3af97171f82a05558c7c9954d964ad24ac98538a7a7dbf94c2c125381c51ba7ea92c99b4b49ea0c4b686d6850ac"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x6}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @generic={0x8, 0x4e, "a96ae26d4091b7d0b0b9cbaea24ef1ff7e6a8f04fd45814fe15a359265670ece1a8db1990fd3a2d7500e77c8389061969f5e0f1a2a4e81725f41382c01b2b2c24bbd8f4bbf4d8ab294c779985cbb"}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7f}}, @hopopts={{0x18, 0x29, 0x36, {0x3c}}}], 0x1b8}}, {{&(0x7f0000000080)={0xa, 0x4e24, 0x368, @mcast1, 0x2ae}, 0x1c, &(0x7f0000001580)=[{&(0x7f0000001400)="3bbf9d79d55f630ca312883a7fdef6ca3e66a581008e55acb74bd203e2226d0507fd65ed69b6fd0888d95ff90797e5166c2b3b7a21d12d079b1a9054d742e73dd99551e21eb1363049e66a3f9f71a493e83ab9316630cd12091a8a6414cd349aac758c45aece47170beca856bb6215202b5ea944ce63c92736e33850002e069059cc5ab82211152fa4d5b0bb858f0a23044ece4ddfecb45d7bc29bf42dde1a5265ff08f87d575b6e6f61c79a08993415c191317376c22d61fd8911a933607e179740564f6dd77359cd65384ce5cc961967f2", 0xd2}, {&(0x7f0000001500)="0e470bec778d238d561c9220ab349b375db3578057c77cd2e5b7faf9c9c5eef6d574da5f35d9daae3a962bb5038599321ac1ba04dce3228bbe92da83d5a0306aa1fd41ca9c401babe744668bfdc1899c6edd4c1a7b518f1be2469446178d1fbe8e72b6813ed30c60d9056d79b4c8465b471f97", 0x73}], 0x2, &(0x7f0000001ac0)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x32, 0x0, 0x2}}}, @hopopts={{0x80, 0x29, 0x36, {0x11, 0xd, '\x00', [@padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @mcast2}, @calipso={0x7, 0x48, {0x0, 0x10, 0x62, 0x393b, [0x7fffffffffffffff, 0x9, 0x68f50, 0x7, 0x6, 0x100, 0x1, 0x6]}}, @jumbo={0xc2, 0x4, 0xffffff7f}, @padn={0x1, 0x1, [0x0]}]}}}, @flowinfo={{0x14}}, @dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @dstopts_2292={{0x60, 0x29, 0x4, {0x88, 0x8, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x0, 0x2, 0x40, 0x5, [0x5]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hopopts_2292={{0x98, 0x29, 0x36, {0x67, 0xf, '\x00', [@ra={0x5, 0x2, 0x5}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x1}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x0, 0x4, 0xec, 0xfff6, [0xc21d, 0xfff]}}, @pad1, @calipso={0x7, 0x38, {0x0, 0xc, 0x9, 0xb, [0x1, 0x0, 0x795, 0x5, 0x4, 0x7]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @tclass={{0x14, 0x29, 0x43, 0x21}}, @dstopts={{0xc8, 0x29, 0x37, {0x67, 0x15, '\x00', [@enc_lim={0x4, 0x1, 0xa}, @generic={0x6, 0x99, "246f6e88750cc033c633e67abe7e0970e3ca12b17eb4655db910966ed842493b2727d7f08a22e2bbf2ab67ac29434bc9999dba2206505a1f3f05e413aaba526b65a4200e840e04477c363f5ada06d14a225b877ccc6c1b327d76b4d6d630c6ab5c247be9530e5e812e8761b3d1d505d7e23fc16d7f407c444621e9331c5728432517cce6187eb9e722302aec98734c556b0ad69f28de82cd22"}, @pad1, @enc_lim={0x4, 0x1, 0x8}, @jumbo, @padn={0x1, 0x1, [0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @rthdr={{0x98, 0x29, 0x39, {0x5e, 0x10, 0x2, 0x81, 0x0, [@dev={0xfe, 0x80, '\x00', 0x34}, @dev={0xfe, 0x80, '\x00', 0x20}, @mcast1, @mcast1, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, @loopback, @local]}}}], 0x350}}], 0x2, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 10m9.217889952s ago: executing program 1 (id=659): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0xffffffffffffffff) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x0, 0x3, 'none\x00', 0x0, 0x7ff}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000300), 0x12) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x40, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 10m7.844072154s ago: executing program 1 (id=661): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) fgetxattr(r1, &(0x7f0000000400)=@known='system.sockprotoname\x00', &(0x7f0000000440)=""/4096, 0x1000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0xe845, 0x0, 0x0, 0x3, 0x1, 0xc}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newsa={0x148, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0x4e2a, 0x0, 0x4e23, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x5, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0xa, 0x1, 0x0, 0x28}, [@algo_aead={0x56, 0x12, {{'gcm(aes)\x00'}, 0x50, 0x80, "316f74eeac053deb73fc"}}]}, 0x148}, 0x1, 0x0, 0x0, 0xc0}, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="2cedea46f660fffa239513", @ANYRESHEX=r3, @ANYBLOB=',version=9p2000,\x00']) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRESHEX=r6], 0x15) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000015c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="180f2d7d813d9f4db7d83ced95651eec78114ccce7fb5de22313053449cd3091fd177f3f1e418e22f7370ae70b783d35464866e4726b91055e24c72828190596c26840b39f368a148b95b3a199e66fd70d5674b331381f94e532c4dcd7e7bc87e5d05195a70f193c8e1196907f84268dcd777b7f1410d82169a84c3fe287e232550eb0e81efda9dd20d8f227c786c516558a835e1d3d8f1d4b5d179b68fd54a59e2cba6507b1718cebfb099a58ddf3d2dcdb963b91b7ed0cb98d7d5a6ae1dd5a", @ANYBLOB="01000000000000030000f600efff180001801400020073797a5f74756e0000000000000000000c0002800400038004000400"], 0x38}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) getpeername$packet(r9, &(0x7f00000014c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001580)=0x14) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r10 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r12 = accept4(r11, 0x0, 0x0, 0x80000) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/82, 0x52}, {&(0x7f0000000280)=""/96, 0x60}], 0x2}, 0x500) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r10, 0x111, 0x4, 0x0, 0x4) 10m6.798827344s ago: executing program 1 (id=663): mkdir(&(0x7f0000000000)='./file0\x00', 0x180) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000001c0)) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000040)={{0x10, 0x81}, 0x100, './file0\x00'}) mount$bpf(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000200), 0x1004000, &(0x7f0000000240)=ANY=[@ANYBLOB="30f6cf642967bfd8b4a2e49e5ca50b54ceb9cc1211ceb12df48a41fb2966a54ca4fad1a699a2c389c47f0fc178c831313aa8575af7b1de14b83eb79cee734f11962180ce51ad9f68442e2d6f497157", @ANYRESHEX=0x0, @ANYRESOCT=r0, @ANYBLOB="f6bfde49760d1d8fbcbb7a131ff8feac7a4cda8a792fb88e9c0b911f6ec06769f9431bb0eb8d8fa8e313eeb948bcc346b0ccf684b02a55348956b915cc89cf3edb16964b7a42b3e3b3d3b1a59bf7ffd7994aae5221fee1ae150b0217f2e01e096cf76a", @ANYRES16=r0, @ANYRESOCT=r0]) 10m5.850676545s ago: executing program 1 (id=665): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x22, &(0x7f00002cef88)="d8", 0x1) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x404200) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000300000064010102000000000000000000000000fc000000000000000000000000000000fffd0000000000000a0000040000", @ANYRES32=0x0, @ANYRES32, @ANYRES16=r0], 0xfc}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140100e406b8d8e5c8bb1e0000000000000000e08297b7000700000a140000001100010000000000000000000a00000a"], 0x28}, 0x1, 0x0, 0x0, 0x20048891}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000004100070328bd7000fbdbdf2503"], 0x34}, 0x1, 0x0, 0x0, 0x48010}, 0x2000c080) syz_io_uring_setup(0xefe, &(0x7f0000000240)={0x0, 0x5443, 0x8, 0x0, 0x317}, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r4, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffd}) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000580)="f9fe4e52d572e4a6c635672b099a8350a9c56ebf05c858d4b818d538a9baee6d33426486ebc595d88c2a1c2dea1a7917c98ac03da4dfac5b120c251aa559f39fc3ae201601f9e063904c6c34d84bd640d007c8ad569afa8105327125706f7a409d36e15245aedfe403d234a2ff286e473cf064ebd0cfe3e01c28d052a7a47792baf051d97753b136409e03c1c9e1b1371654ddd1e6f3c8b80b17c298b21eb1b819378bd8d458157a6828220268a1f3a8c5d627333dd8f9a37a0020e2f8cb6cddf10942f221c9fff2cf90159e163a62ea469a69e84d28b320c3d9a0fd25af782ce266583e74439c7af9daa49d5df73f8c0fa7cfede752173726f3418385d3152a4cab6983f1038ea5b75d61cb94889b41e96db0774c4680c79e7c7c76b8367d35ddc17291e445f1e5c495ca9b241d88882887bb96a81a684d95eaa71965f909536bff93462cf3386e77fe3891c4ef7d1caee44b", 0x153) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[0x0], &(0x7f00000001c0), 0x0, 0x1, 0x0, 0x0, r7}) r8 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x7bfd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0x6, 0x70}}}}}]}}]}}, 0x0) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f00000002c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xff, 0x0, 0x9, {0x8, 0xb, 0x2, 0x1, 0x1, 0x6, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0xa, 0x9, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3cf, 0xf9, 0x7, 0x6, {0x8, 0x25, 0x1, 0x0, 0x33, 0x7, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xad, 0x3, 0x5, {0x8, 0x25, 0x1, 0x82, 0x33, 0x7, 0x2}}}}}}}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b0003010000000904000000010100000a2401000000020102092408000000004c58062404000052072405000053f10b24050000133b9bda531c092405000596efc359090401000001020000090401010101020000090501090000000000072501000000000904020000010200000904020101010200000b240281000200018b7e8e07240100000000090582"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) 10m2.990454787s ago: executing program 1 (id=670): syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d000100000000090400"], 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00001109c0)={0x10000, [], 0xff, "2ca6d1e93ea26f"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00001149c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000119bc0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000119dc0)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000119fc0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000011afc0)={0x1000, [], 0xe, "fe6425f2efd65d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000011dfc0)={0x2, [], 0x2, "74a3cd2f88c938"}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="0800080600000600ffff14000000450a003c006600000329907864010120ffffffff3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66246a43"], 0x4a) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3be3, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0) syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c4b868085a230901dabd000000010902f10001000000000904000005"], 0x0) syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f00000000c0)="cc") syz_usb_disconnect(r3) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 9m47.210312825s ago: executing program 34 (id=670): syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d000100000000090400"], 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00001109c0)={0x10000, [], 0xff, "2ca6d1e93ea26f"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00001149c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000119bc0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000119dc0)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000119fc0)={0x0, 0x0, "8e85174f1d99406b8c7bd7be0c65cea0dbf4fabb05d7621ab08a950166b8d2daa0e6efb45b58af86ac7a15fba87a7c7a92f1ebb65d530c98bdaf8dc663019c254cc88213c919561ec187672ae10da012a758a2146c6a1f99688b5931d4fcf5e445e6b33f419cf9aebd570cce048f6f8331b6bb8f8c4d44f0390b6d54b9d3fa092cfb24ad13c8ffd0ba1614cca1235eac51578b6108fa80b80fc73e9f28b51e3d905299037b5cf6ea185d6d6d77fda25faa383242c7edf0cfebc277b7e8be15ee1e556767ae0036a0d8c84478d6d6de848f852494d6c11aaa5c17a9886cd23fa56a502c20c1679c80a677742b1b9be840c679331b40cd138194e6b5097ce59a88", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000011afc0)={0x1000, [], 0xe, "fe6425f2efd65d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000011dfc0)={0x2, [], 0x2, "74a3cd2f88c938"}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="0800080600000600ffff14000000450a003c006600000329907864010120ffffffff3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66246a43"], 0x4a) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3be3, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0) syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c4b868085a230901dabd000000010902f10001000000000904000005"], 0x0) syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f00000000c0)="cc") syz_usb_disconnect(r3) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 5m21.697154039s ago: executing program 2 (id=1441): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28420000000000000109022400010000000009040100020300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) (async) ioprio_set$pid(0x2, 0x0, 0x0) (async) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) (async) r1 = memfd_create(&(0x7f00000001c0)='\x00', 0x5) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002"], 0x0) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0) (async) fchown(r1, 0x0, 0xee00) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async, rerun: 32) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) (async, rerun: 32) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "0cbeb67c876b6de6", "dec5441e1fbf4ca771bbdfa10bf4708a", "2ce23716", "afe9312ecf5bb974"}, 0x28) setreuid(0xee00, 0xee00) (async) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x2, 0x7, 0x0, 0x0, 0xa1, 0x8}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) (async) socket(0x10, 0x803, 0x0) syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (async, rerun: 32) socket$kcm(0x2, 0xa, 0x2) (async) socket(0x29, 0xa, 0x6) (async, rerun: 64) socket(0x10, 0x3, 0x0) (async, rerun: 64) socket$tipc(0x1e, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000000)='.\x00', 0x0, 0x244) (async, rerun: 32) socket$tipc(0x1e, 0x5, 0x0) (rerun: 32) socket$tipc(0x1e, 0x5, 0x0) 5m21.009449695s ago: executing program 2 (id=1443): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) syz_usb_connect$midi(0x0, 0x2b, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x19, 0x1, 0x1, 0x6, 0x40, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, [@midi_out_jack={0x7, 0x24, 0x3, 0x1, 0x8}]}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0xc0603d0f, 0x0) 5m19.516511843s ago: executing program 2 (id=1448): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}}, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rf', @ANYRESHEX=r1]) 5m19.353369637s ago: executing program 2 (id=1450): socket$inet6(0xa, 0x3, 0x3a) (async) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES8], 0x0) socket(0x2, 0x3, 0xff) (async) r1 = socket(0x2, 0x3, 0xff) connect$inet(r1, &(0x7f00000000c0)={0x2, 0xfffd, @local}, 0x10) (async) connect$inet(r1, &(0x7f00000000c0)={0x2, 0xfffd, @local}, 0x10) write$binfmt_elf32(r1, 0x0, 0xfdef) socket$kcm(0x10, 0x2, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000005c0)=0x14) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x2, 0x3}}, 0x10) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) 5m17.489364631s ago: executing program 2 (id=1452): close$binfmt(0xffffffffffffffff) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x307000, 0x0) write$P9_RSTATFS(r0, &(0x7f0000000040)={0x43, 0x9, 0x2, {0x6, 0x2, 0xe, 0x0, 0x8000000000000001, 0x0, 0x5, 0xd2, 0xdddc}}, 0x43) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x48c480, 0x0) preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/250, 0xfa}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000000280)=""/2, 0x2}], 0x3, 0x6, 0x3) r2 = syz_socket_connect_nvme_tcp() r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x400000, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000340)={'\x00', 0x200, 0x9, 0x7fff, 0x10, 0x8000000000000001}) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000003c0)='highspeed', 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, &(0x7f0000000a80)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a40)={&(0x7f00000004c0)={0x568, r5, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0xca, 0x33, @data_frame={@a_msdu=@type11={{0x0, 0x2, 0x3, 0x1, 0x1, 0x1}, {0x8}, @device_b, @device_b, @from_mac, {0x7, 0x2}, @broadcast}, @a_msdu=[{@device_a, @device_b, 0x58, "2ce02af029a84f5e714987fa562dce5fe3c72adc83c4be2503b56e800076bd6e68b57b65f288d7511bb0e766c4c87a0d4c79d5de7336c9cc44fbd4dde7cb69d1e96b186d981104365b8e7a51f9b8a57c5575e23dc031f4b0"}, {@device_a, @broadcast, 0x31, "a20a1a512a3d3bc2bd1ad05ecd12f083c0f1789c968db38c768824d18071ddb968a2a56d03b3c4bd6b292e47a8c151bfb5"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x1f, 0x33, @mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xf}, @device_b, @broadcast, @random="e97200e282b8", {0x3, 0x9}}, @void, @void, @val={0x3, 0x1, 0x64}, @void, @void}}, @NL80211_ATTR_FRAME={0x3c8, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x7, 0x1, 0x0, 0x0, 0x1, 0x1}, {0xe}, @initial, @device_b, @device_a, {0x6, 0x1}}, @a_msdu=[{@broadcast, @device_b, 0x43, "0c7b69ec456409725025700a02117feb50df5a8b61b825f5518df623274fb2cc98ff9e089dda508bf4e65ffcb93ac8c1e2b220c9c27ff690fc51f8e7a614c1689d45bf"}, {@broadcast, @broadcast, 0x6a, "30014eab1e2792e2c0106a647aa394726433f8634b36d1531a869963ee637c208fd823078819b2c06586d93c8682870c22b8739285b8a9718bc5bb674fd1e0532b958056df1314e35d2b7b4914294ff438189186f8d65d1af286b7b09bfc7d88b64aaf55d0e909de8644"}, {@broadcast, @broadcast, 0x95, "31f521f153570fd36ffa51671f4ec0b2d7006225492a92349d832ac8f1c900f0f2f2317bb668bab2737015292e7aae0345dd0dd94757a75bc2ebef9f7765d478d06fc8c9cec39e8c0381c145d542379dfa215581195b601afa799d1525af275f665749dc9ac38d418a4db2b842e3161ef9dc549571d6ad22c5cdfeeb65052d0eb8a584ff6fa949c1596f8e3277fb5b8385294a0257"}, {@device_b, @device_b, 0x66, "c0cdf7a423af2ea1f9ce92a6f30479ae29e153d093102d83696a54f2c587ca0bbf02eed8d0a13c518388252c42e1e3636fa02b66c4be49c93c89d25f97a82d327c3e58fddc846cc9b4b951d651f1ce4bffd1e94cc7ee0d5f6146d92eb9271dd0a5a042af2fb1"}, {@device_a, @device_a, 0x56, "efe3c241824bf35003a086a885e24c0aac468ae00245c027343ab0955457885a7dd7e9566008b19e9e27199bf3745aecf6531b15f84b75fbfe9c2f5d30bb991dadb3bcca5839f3fc92b2914313699d8092743ee3293c"}, {@broadcast, @device_a, 0x76, "4880b52d00ea9b7bebab9d01ec6b4e7643640729929ecfd046269ba5bcee804993c808d1235fca0001bcd89bb6a92b4bab487cbc19295a1c304a2ff57db17da705ba3006e513cd9b07a397520531001773d49facfcdf119243e4d3398a9a78c5e49d23a790b906bf5e8669145ddc3f63c4879b4d3dc3"}, {@broadcast, @device_a, 0x4, '-2 !'}, {@device_b, @device_a, 0x42, "b0e39d93c835eeecdda88b29b847b56e185fd8786834b1deb6644c8ce13a524158c4920fff0d41a369088fa52c4f4133062bde089683a6092530d7852792cb3d55de"}, {@broadcast, @device_b, 0x6b, "c7002776051a03c0e9d7de3a91ebcdb38c84fab2c8770ed30b06e0e4ccb136087e032697fa1ab7137b6aefee97bd9b509df8b882fe182674098a8ed4e9841252238d73f4f1c0291f81185249142eb0892ec8c9de354f66365739a548068a83b997b0ceeb692e4cd8a516ab"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x3a, 0x33, @ctrl_frame=@bar={{}, {0x2d}, @device_b, @device_b, @multi={{0x0, 0x1, 0x1, 0x0, 0x3}, [{0x0, 0x8, {0xb, 0xf}, "9fd3cd3186f2cc7d"}, {0x0, 0x7, {0x0, 0x5}, "727d2d204dac6c36"}, {0x0, 0x0, {0x0, 0x5}, "9baeb9d44daed8e7"}]}}}, @NL80211_ATTR_FRAME={0x1f, 0x33, @mgmt_frame=@action={{{}, {0x6}, @device_a, @broadcast, @initial, {0x3, 0x867}}, @vht_op_mode_ntf={0x15, 0x2, {0x2, 0x0, 0x1, 0x5}}}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x568}, 0x1, 0x0, 0x0, 0x4004}, 0x4040001) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r5, 0x300, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x8000) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000bc0), 0x3) fadvise64(r3, 0xd57, 0xa, 0x0) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000c00), 0x2c0100, 0x0) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000c40)={@dev={0xfe, 0x80, '\x00', 0x39}, @private1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x4}, 0x13c, 0xff, 0x3, 0x0, 0x7, 0x40000000}) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r3, 0x8010aebc, &(0x7f0000000cc0)={0xeeef0000, 0x10000}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r8 = accept4$inet6(r1, 0x0, &(0x7f0000000d00), 0x800) sendto$inet6(r8, &(0x7f0000000d40)="2ae3081bcde6d705075ae4b6a9068de3eba35c2041dadea162e9fd035c098e795d561982fa381f2bd40a6e33c02f36a072d24ccfaed3399197211331d41d0faf8ba279c356decbfedbfbd96f1d40bf5b6b", 0x51, 0x840, 0x0, 0x0) preadv(r1, &(0x7f0000002280)=[{&(0x7f0000000dc0)=""/5, 0x5}, {&(0x7f0000000e00)=""/252, 0xfc}, {&(0x7f0000000f00)=""/174, 0xae}, {&(0x7f0000000fc0)=""/246, 0xf6}, {&(0x7f00000010c0)=""/17, 0x11}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)=""/163, 0xa3}, {&(0x7f00000021c0)=""/191, 0xbf}], 0x8, 0x6, 0x2) r9 = accept(r1, &(0x7f0000002300)=@sco, &(0x7f0000002380)=0x80) ioctl$sock_SIOCOUTQ(r9, 0x5411, &(0x7f00000023c0)) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000002400)={0x60000, 0xa000, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000002440)={0x0, r1, 0x1}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r10 = syz_open_dev$rtc(&(0x7f0000002480), 0x836c, 0x400) ioctl$RTC_ALM_READ(r10, 0x80247008, &(0x7f00000024c0)) 5m17.420633149s ago: executing program 2 (id=1453): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, r0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1000, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x110b, 0x3}, @flat=@weak_binder={0x77622a85, 0xb, 0x1}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f0000000600)="87"}) r6 = syz_open_dev$video4linux(&(0x7f0000000540), 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000) r7 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0xc0, 0x5, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x66, 0x1c, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0x8}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0xae, 0xd, 0x7, 0x8, 0x3}, 0x62, &(0x7f00000000c0)={0x5, 0xf, 0x62, 0x5, [@ssp_cap={0x20, 0x10, 0xa, 0x7f, 0x5, 0x10, 0xf00, 0x3, [0x3f00, 0xff3f30, 0x3f0f, 0xff000f, 0xc06f]}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "d5d42da77762a50aae0dbd4d85cb60a1"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x8, 0xf9, 0x2}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0xf9, 0x4, 0x9, 0xff0f, 0x3831, [0x0, 0xc000, 0xffc000, 0xc0]}]}, 0x3, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x40a}}, {0xb6, &(0x7f0000000180)=@string={0xb6, 0x3, "b11e912fdb78c9a4974c54a7f5d25fbb3928adff5101d083fe25907a8ec035f12851acc1b55f78ec185e8b19cf27bd7423021e0f68cf1e53aba01d5c0c4d34474f08e10e4c139bb1f4fbedeb4e0391f988370076436e1d238a330a1f9876c6405cb6d7a660f52ab2efa0eb27f95e8bebdab935cd5cd8917f21cb96188a243ea473f5ee1787d3e117575330a6d4ebcb040fc9a2f8d78bd15c4da45b9be6646c69eebc33039663908fee18aacc747d000015bc73e3"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x427}}]}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0xe0}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @empty}, {0x0, 0x1, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) syz_usb_control_io$printer(r7, &(0x7f0000000400)={0x14, &(0x7f00000002c0)={0x40, 0x4, 0x8, {0x8, 0xe, "3b7722a3ab62"}}, &(0x7f0000000300)={0x0, 0x3, 0xee, @string={0xee, 0x3, "2596c855fb6a1018fd77bf6f2d15110bd43aba6d8b722b1089f101926b197338953636cdc3aabfdbe7799a02fada6f2812cd244155cbbcbf5a58f8fab63c6edce2880a190b53afa65b26386ef29a8903cde2aed7238b342343fcb81ac90ba55889c72de5a219a335f8051e12e7d9d5c56686355157c0ed7898e0e434fa4ca2f25ff697068492d76c99af2bc669a3b53d77abbc566fc90ac2c62f00bd9c4dc7881ed169d493cce165dc28139cd9f17eaf783c14968eea3813ff0396fc9e025ae384e3a31ab017c699e17038234e7bfc7fdd5d30490acec376ce4b6cab0c5810fd14fe26e1614caf3e96da0405"}}}, &(0x7f0000000700)={0x34, &(0x7f0000000440)={0x0, 0x2, 0x3f, "7fd06b947558ad8ce9bb8deff01411a011e8d0d425701ee24d949dd58c74b0dfe8c82ad8f8f6702b724d29aab1dae57305ae2045c9ed8cc26251d91949f3b3"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000580)={0x20, 0x0, 0xf3, {0xf1, "c2e61fa30e3842d2b08ac1e934e89cd1252f00bf6c22c3f855e3e6436bda4147ab916fcb02a81e4b86533e264060b3c9992c4fd7117c59504aff7563d6c46c97f643ecae79643627d2d8d8c5bba486c076d14cd1fd8940b4ef81ac7f51ad40743730f4ed62f39fd9002a31ab42c19d0323dd31f29b376c5b4f0b780beb15f69579de9105ff1b57936aa7399991e919a367903a68a24589b62a0143516c4d3baf049e12085baa3a2a719439d2a67d2c7a3184f2a2b39f10b23fbdadf7ce3743074048b0763f7f405cbc558cb4647bc2715e456c84b63992d90c9e809734381d039ff793959f55f8f786e7e630cf7e78e4f6"}}, &(0x7f0000000680)={0x20, 0x1, 0x1, 0x8}, &(0x7f00000006c0)={0x20, 0x0, 0x1, 0xe8}}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x3, &(0x7f00000102c0)={0x77359400}) r10 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac2(r10, 0x0, 0x0) syz_usb_control_io$uac1(r10, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, &(0x7f0000000000)={0x0, 0x9, 0x1001}) 5m2.732782827s ago: executing program 35 (id=1453): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, r0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1000, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x110b, 0x3}, @flat=@weak_binder={0x77622a85, 0xb, 0x1}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f0000000600)="87"}) r6 = syz_open_dev$video4linux(&(0x7f0000000540), 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000) r7 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0xc0, 0x5, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x66, 0x1c, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0x8}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0xae, 0xd, 0x7, 0x8, 0x3}, 0x62, &(0x7f00000000c0)={0x5, 0xf, 0x62, 0x5, [@ssp_cap={0x20, 0x10, 0xa, 0x7f, 0x5, 0x10, 0xf00, 0x3, [0x3f00, 0xff3f30, 0x3f0f, 0xff000f, 0xc06f]}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "d5d42da77762a50aae0dbd4d85cb60a1"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x8, 0xf9, 0x2}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0xf9, 0x4, 0x9, 0xff0f, 0x3831, [0x0, 0xc000, 0xffc000, 0xc0]}]}, 0x3, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x40a}}, {0xb6, &(0x7f0000000180)=@string={0xb6, 0x3, "b11e912fdb78c9a4974c54a7f5d25fbb3928adff5101d083fe25907a8ec035f12851acc1b55f78ec185e8b19cf27bd7423021e0f68cf1e53aba01d5c0c4d34474f08e10e4c139bb1f4fbedeb4e0391f988370076436e1d238a330a1f9876c6405cb6d7a660f52ab2efa0eb27f95e8bebdab935cd5cd8917f21cb96188a243ea473f5ee1787d3e117575330a6d4ebcb040fc9a2f8d78bd15c4da45b9be6646c69eebc33039663908fee18aacc747d000015bc73e3"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x427}}]}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0xe0}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @empty}, {0x0, 0x1, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) syz_usb_control_io$printer(r7, &(0x7f0000000400)={0x14, &(0x7f00000002c0)={0x40, 0x4, 0x8, {0x8, 0xe, "3b7722a3ab62"}}, &(0x7f0000000300)={0x0, 0x3, 0xee, @string={0xee, 0x3, "2596c855fb6a1018fd77bf6f2d15110bd43aba6d8b722b1089f101926b197338953636cdc3aabfdbe7799a02fada6f2812cd244155cbbcbf5a58f8fab63c6edce2880a190b53afa65b26386ef29a8903cde2aed7238b342343fcb81ac90ba55889c72de5a219a335f8051e12e7d9d5c56686355157c0ed7898e0e434fa4ca2f25ff697068492d76c99af2bc669a3b53d77abbc566fc90ac2c62f00bd9c4dc7881ed169d493cce165dc28139cd9f17eaf783c14968eea3813ff0396fc9e025ae384e3a31ab017c699e17038234e7bfc7fdd5d30490acec376ce4b6cab0c5810fd14fe26e1614caf3e96da0405"}}}, &(0x7f0000000700)={0x34, &(0x7f0000000440)={0x0, 0x2, 0x3f, "7fd06b947558ad8ce9bb8deff01411a011e8d0d425701ee24d949dd58c74b0dfe8c82ad8f8f6702b724d29aab1dae57305ae2045c9ed8cc26251d91949f3b3"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000580)={0x20, 0x0, 0xf3, {0xf1, "c2e61fa30e3842d2b08ac1e934e89cd1252f00bf6c22c3f855e3e6436bda4147ab916fcb02a81e4b86533e264060b3c9992c4fd7117c59504aff7563d6c46c97f643ecae79643627d2d8d8c5bba486c076d14cd1fd8940b4ef81ac7f51ad40743730f4ed62f39fd9002a31ab42c19d0323dd31f29b376c5b4f0b780beb15f69579de9105ff1b57936aa7399991e919a367903a68a24589b62a0143516c4d3baf049e12085baa3a2a719439d2a67d2c7a3184f2a2b39f10b23fbdadf7ce3743074048b0763f7f405cbc558cb4647bc2715e456c84b63992d90c9e809734381d039ff793959f55f8f786e7e630cf7e78e4f6"}}, &(0x7f0000000680)={0x20, 0x1, 0x1, 0x8}, &(0x7f00000006c0)={0x20, 0x0, 0x1, 0xe8}}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x3, &(0x7f00000102c0)={0x77359400}) r10 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac2(r10, 0x0, 0x0) syz_usb_control_io$uac1(r10, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, &(0x7f0000000000)={0x0, 0x9, 0x1001}) 4m42.496585061s ago: executing program 4 (id=1575): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000000c0)=""/3, &(0x7f0000000180)=0xfffffffffffffff5) (async) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000000c0)=""/3, &(0x7f0000000180)=0xfffffffffffffff5) fcntl$lock(r0, 0x5, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x80) (async) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x80) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40086203, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0xa0040, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000000180)) (async) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000000180)) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x62080) getgroups(0x3, &(0x7f00000000c0)=[0x0, 0x0, 0xffffffffffffffff]) setfsgid(r5) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8040) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r6, 0x0, 0x31, &(0x7f00000001c0)=0x1, 0x4) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000080)={'\x00', 0x1, 0x3b05, 0x4000000, 0x200, 0x5}) (async) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000080)={'\x00', 0x1, 0x3b05, 0x4000000, 0x200, 0x5}) prctl$PR_SET_SECCOMP(0x4e, 0x0, 0x0) 4m42.421641343s ago: executing program 4 (id=1576): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="050000000004"], 0x48}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) 4m41.411879485s ago: executing program 7 (id=1580): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000440)={0x0, 0xc, 0x3, "182102"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCCONS(r2, 0x541d) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x0, @local}, 0x2, 0x0, 0x1}}, 0x26) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x0, 0x3}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r4, 0x1, 0x60bd27, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x270}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) socket$pppl2tp(0x18, 0x1, 0x1) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000440)={0x0, 0xc, 0x3, "182102"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$TIOCCONS(r2, 0x541d) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x0, @local}, 0x2, 0x0, 0x1}}, 0x26) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x0, 0x3}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r4, 0x1, 0x60bd27, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x270}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) (async) 4m41.070120181s ago: executing program 4 (id=1582): r0 = syz_open_dev$video4linux(&(0x7f0000000280), 0x7fffeffb, 0x88842) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000101500002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff14000280080006000200000008000900080000000800040002000000600001"], 0xc4}}, 0x4008800) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffff7, 0x40, 0x3, 0x4, 0x7ff, 0x7ff, 0x1}, 0x1c) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000003c0)={0xc0f0f000, 0x0, "69bbed9682b06e3f361ed4e57a83c956b1b194884ea943826213b3c865a4371e"}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000040)={@empty, @remote, r5}, 0xc) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x60008000}, 0x20008040) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ppoll(&(0x7f00000001c0)=[{r6, 0x4c0}], 0x1, 0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x5, 0x7}, @window={0x3, 0x7ff, 0x7}, @sack_perm, @sack_perm, @sack_perm, @timestamp, @window={0x3, 0xfffe, 0x4000}, @mss={0x2, 0xff}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r7, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r8, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0xff51) syz_usb_connect(0x0, 0x57, &(0x7f00000000c0)=ANY=[@ANYBLOB="12030109024500013f06400409044207000e0100010a240107000105ff010302070724050107638c0924030500030406810c240200"/67], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) 4m40.324574113s ago: executing program 4 (id=1584): r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x3, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0xc0884123, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffe1c, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a69702c6d61726b"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x400c001) 4m40.17630561s ago: executing program 4 (id=1585): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r1, 0x0, &(0x7f00000002c0)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000840)={0x44, &(0x7f00000004c0)={0x20, 0x1, 0x5, "2fc724b562"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000040)={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001440)={0x84, &(0x7f0000000f80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, 0x2d, 0xb, 0x0, 0x0, {0xe}}, 0x14}}, 0x4000041) 4m39.998031826s ago: executing program 7 (id=1586): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async, rerun: 32) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 32) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="81b641f1f3843704b6", 0xffffff2a}], 0x1}, 0x4048081) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x40000) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000)=0x3, 0x4) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x8000) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe76}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x40) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01864c1, 0x0) 4m39.855030386s ago: executing program 7 (id=1587): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000040)={0x101ff, 0x4, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x70bd25, 0x0, {{@in6=@private2, @in6=@mcast1, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x53, 0x1d}, {0x0, 0xd42, 0x0, 0x2da}, 0x2, 0x6e6bc0}, [@tmpl={0x184, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff, 0x3}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6=@empty}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x3c}, 0x2, @in6=@mcast2, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x40000000, 0x3c}, 0x2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x3c}, 0x2, @in=@empty, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, {{@in6=@private0, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}]}, 0x23c}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0a035a"], 0xd) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0x4c}, @l2cap_cid_signaling={{0x48}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x3, 0x2}, {0x68c}}, @l2cap_conf_rsp={{0x5, 0x52, 0x38}, {0x4, 0x9143, 0x9, [@l2cap_conf_rfc={0x4, 0x9, {0x4, 0x5, 0x9, 0x40, 0x40, 0x4}}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x94, 0x0, 0xd38, 0x3, 0x53aa}}, @l2cap_conf_flushto={0x2, 0x2, 0x5c6}, @l2cap_conf_efs={0x6, 0x10, {0x80, 0x1, 0x8, 0x3739, 0x5, 0x5873}}]}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x1}}]}}, 0x51) 4m37.752742015s ago: executing program 4 (id=1594): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffad46ab5102f456}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff0000000001000000050007000000000008000900000000101400200000000000000000000000ffff0000000008000a000000000014001f000000003d2039ae000000000000000000060002"], 0x64}, 0x1, 0x620b}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000600)="f3", 0x1, 0x0, &(0x7f0000001600)={0xa, 0x4e24, 0xffffffff, @rand_addr=' \x01\x00', 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000017c0)={0x0, 0xb1, 0x1}, 0x8) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x14, 0x3a, 0x229, 0x0, 0x0, {0x2}}, 0x14}}, 0x1000000) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) write$nci(r5, &(0x7f0000000540)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x1, {0x6}}, 0x5) syz_usb_control_io(r3, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000040)=ANY=[@ANYRES64=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) readv(r9, &(0x7f0000000280)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1) r10 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) read(r10, &(0x7f0000001e80)=""/96, 0x60) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x50200, 0x0) r11 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x6, 0x20, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfd89, 0x28}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x100, 0x4, 0x8, 0x5, 0x3, 0xf8}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x404, 0x3, 0x2, 0x9}, @processing_unit={0x9, 0x24, 0x7, 0x3, 0x6, 0x80, 'I6'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x8, 0x1, 0xf, 0x1, "9cc8"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x4, 0x2, 0x9, {0x7, 0x25, 0x1, 0xc, 0x7, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x3, 0x4, 0xf8, 0x43, "4bcab9", "0e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x91, 0x8, {0x7, 0x25, 0x1, 0xc, 0x7, 0x6}}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x110, 0xa6, 0x7, 0xc, 0x8, 0xfa}, 0x3b, &(0x7f0000000380)={0x5, 0xf, 0x3b, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x4, 0x73, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x6, 0x8, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "618f39d1c4c789430889e7cca87b3ea9"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x9, 0xf, 0xbe}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x9, 0xdbd8}]}, 0x4, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x809}}, {0xb1, &(0x7f0000000400)=@string={0xb1, 0x3, "53845c5365911665afb550919e390da04e3147bcc13cf938af0fae9c70ef87eb0355d17c20bd90c5a2b7acc3a58b000eaa916875e58cca3aa76ce3c38cd95857dbfa25443e9f723851dd5fe8a99d05b198a4a58b50fe58ce7c1b1b3f32989c62fd06221225a96d6eb7a82708a862db23acfe148cc8d6a160b357480f6c62c4cf2fc8a17a324edbf1ded8cd3a2962886e917efb77f186eb628171605ca5b7e024ab0e5c21bf6fecc7efc85ab477a3ad"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x416}}]}) syz_usb_control_io$uac1(r11, &(0x7f0000000680)={0x14, &(0x7f0000000600)={0x20, 0x1d, 0x34, {0x34, 0x11, "1e2ca980d4d095f827b41cba18666e6f56886ff8b2e3f094646693bde4fb778da242636c45afc458a0a2eebaaadb5f2fdadd"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44d}}}, &(0x7f0000000a80)={0x44, &(0x7f00000006c0)={0x40, 0xd, 0x100, "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"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000880)={0x20, 0x81, 0x2, "83b0"}, &(0x7f0000000980)={0x20, 0x82, 0x3, "a249a5"}, &(0x7f00000009c0)={0x20, 0x83, 0x1, 'J'}, &(0x7f0000000a00)={0x20, 0x84, 0x4, "bf0ccf67"}, &(0x7f0000000a40)={0x20, 0x85, 0x3, "7a125c"}}) 4m37.15771557s ago: executing program 7 (id=1597): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3", @ANYRES32=r0], 0x0}, 0x0) (async) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x4, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000002c0)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0xb, 0x2, "2699"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_TDX_INIT_VCPU(r2, 0xc008aeba, &(0x7f0000000080)={0x2, 0x0, 0x5}) (async) r3 = syz_open_dev$sg(&(0x7f00000005c0), 0x0, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f0000000140)={0x5b, ""/91}) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r5, 0x40106e8c, &(0x7f0000000100)=[0x3, 0xfffffffffffffff5]) close_range(r4, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x200, 0x10b000) prctl$PR_MCE_KILL(0x29, 0x0, 0x2) (async) syz_kvm_setup_cpu$x86(r6, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000200)="c4c1f92b51000f79e6c4c3fd7d99bb000000a1c4e1a975cfb9c30a0000b893d58c59ba89fb94340f30b9bc0a00000f320fc7aa55a700008fc9989b0366b881008ee8f20f58f1", 0x46}], 0x1, 0x48, &(0x7f00000001c0), 0x0) 4m36.073802147s ago: executing program 7 (id=1598): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x1dc7, &(0x7f0000000140)={0x0, 0xd5a8, 0x2, 0x1, 0x382}, 0x0, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYRES16, @ANYBLOB="0500000003000000000001000000060006004e240000901008809005008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000100000000000000000000000000000000000000000000000000000000000000000024000200fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841240002001171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691cb40409807c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030000000000f4000080060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000a00000014000200fc0200000000000000000000000000010500030000000000060001000200000008000200e00000020500030003000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030002000000060001000a00000014000200fc0200000000000000000000000000000500030003000000340000800600010002000000080002000a0101010500030004000000060001000200000008000200ac1414aa050003000300000064000080060001000a00000014000200200100000000000000000000000000000500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff010000000000000000000000000001050003000200000094000080060001000200000008000200ac1e00010500030002000000060001000200000008000200e00000010500030002000000060001000a00000014000200fc0000000000000000000000000000000500030002000000060001000200000008000200000000000500030003000000060001000a00000014000200fe80000000000000000000000000000e050003000000000040000080060001000a00000014000200fc0200000000000000000000000000000500030002000000060001000200000008000200ac1414aa050003000000000064000080060001000a00000014000200200100000000000000000000000000020500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002000a010100050003000200000070000080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200000000000000000000000000000000000500030002000000060001000a0000001400020000000000000000000000000000000001050003000000000000010080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000200000008000200000000000500030003000000060001000200000008000200640101000500030002000000060001000200000008000200640101010500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8000000000000000000000000000bb05000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000200000008000200640101010500030001000000240002005da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e1803008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39220600050005000000e802098058000080060001000200000008000200ac1e00010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff05000300010000007c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414bb0500030002000000060001000a000000140002000000000000000000000000000000000105000300020000000600010002000000080002000a0101010500030003000000f4000080060001000a0000001400020000000000000000000000ffffac1414aa0500030003000000060001000200000008000200ac1414aa05000300000000000600010002000000080002000a01010205000300020000000600010002000000080002007f00000105000300000000000600010002000000080002000a0101010500030003000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc01000000000000000000000000000005000300010000000600010002000000080002000a0101000500030000000000060001000200000008000200ac1e0101050003000200000094000080060001000a00000014000200fc0200000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030002000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ffffffff050003000200000088000080060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8800000000000000000000000001010500030002000000060001000a00000014000200ff02000000000000000000000000000105000300020000007c000080200004000a004e2100000006fc0100000000000000000000000000010400000008000a000100000024000100f44da367a88ee6564f020211456727082f5debee8b1bf5eb7337341b459b3922080003000300000024000200379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a549780000800800030001000000080003000400000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000e4060080dc020980f4000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000200000008000200ffffffff0500030001000000060001000200000008000200ac1e00010500030001000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a0000001400"], 0x10e0}}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYRES16], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_io_uring(0x10b9, &(0x7f0000000940)={0x0, 0x2, 0x40, 0x2, 0x158, 0x0, r4}, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r5) socket$inet6(0xa, 0x2, 0x3a) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f00000002c0)) syz_ublk_setup_queues(r6, r11, &(0x7f0000000640)={0x0, 0x1463, 0x4, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x200, 0x401, 0x10031b, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7681, 0x8000, 0x2, 0x1f6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x3, 0x902c4, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4bc6, 0x400, 0x2, 0x40021a, 0x0, r6}}], 0x4, &(0x7f0000001540)={0x2e, 0x35, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r10, '\x00', {0x5, 0x64, 0x0, 0x0}}, 0x0) 4m30.220357291s ago: executing program 7 (id=1602): write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_connect$uac2(0x2, 0x98, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000020392ad43f400001020301090286000301010008080b0001010c200609040000000101200009240107000426000411240905060300020003000200000002000c2403020104090305"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) (async) r0 = socket$unix(0x1, 0x1, 0x0) r1 = accept4$unix(r0, &(0x7f0000000000), &(0x7f0000000100)=0x6e, 0x80000) (async) r2 = syz_open_dev$video4linux(&(0x7f0000000540), 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc02c5625, &(0x7f0000000580)={0xf0f000, 0x15, "401989f9a986196d37d0561855573640154ca4642f00", 0x0, 0x8000000, 0x7}) (async) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000000c0)) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) (async) statx(r0, &(0x7f00000001c0)='./file0\x00', 0x800, 0x400, &(0x7f0000000340)) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x8d) getdents64(r6, &(0x7f0000000080)=""/234, 0xea) (async) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000080)={0x4, 0x4}, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) r7 = pidfd_getfd(r4, r4, 0x0) (async) r8 = socket(0x2, 0x80805, 0x0) (async) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) (async) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) (async) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r9, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, 0x0, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010029bd7000fddbdf250200000008000300", @ANYRES32=r11, @ANYBLOB="0c00990041000000600000000800a0007c030700080026009a030000"], 0x40}}, 0x48000) (async) ioctl$UBLK_U_CMD_GET_FEATURES(r7, 0xff05, 0x0) 4m18.608728546s ago: executing program 36 (id=1594): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffad46ab5102f456}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff0000000001000000050007000000000008000900000000101400200000000000000000000000ffff0000000008000a000000000014001f000000003d2039ae000000000000000000060002"], 0x64}, 0x1, 0x620b}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000600)="f3", 0x1, 0x0, &(0x7f0000001600)={0xa, 0x4e24, 0xffffffff, @rand_addr=' \x01\x00', 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000017c0)={0x0, 0xb1, 0x1}, 0x8) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x14, 0x3a, 0x229, 0x0, 0x0, {0x2}}, 0x14}}, 0x1000000) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) write$nci(r5, &(0x7f0000000540)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x1, {0x6}}, 0x5) syz_usb_control_io(r3, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000040)=ANY=[@ANYRES64=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) readv(r9, &(0x7f0000000280)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1) r10 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) read(r10, &(0x7f0000001e80)=""/96, 0x60) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x50200, 0x0) r11 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x6, 0x20, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfd89, 0x28}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x100, 0x4, 0x8, 0x5, 0x3, 0xf8}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x404, 0x3, 0x2, 0x9}, @processing_unit={0x9, 0x24, 0x7, 0x3, 0x6, 0x80, 'I6'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x8, 0x1, 0xf, 0x1, "9cc8"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x4, 0x2, 0x9, {0x7, 0x25, 0x1, 0xc, 0x7, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x3, 0x4, 0xf8, 0x43, "4bcab9", "0e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x91, 0x8, {0x7, 0x25, 0x1, 0xc, 0x7, 0x6}}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x110, 0xa6, 0x7, 0xc, 0x8, 0xfa}, 0x3b, &(0x7f0000000380)={0x5, 0xf, 0x3b, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x4, 0x73, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x6, 0x8, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "618f39d1c4c789430889e7cca87b3ea9"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x9, 0xf, 0xbe}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x9, 0xdbd8}]}, 0x4, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x809}}, {0xb1, &(0x7f0000000400)=@string={0xb1, 0x3, "53845c5365911665afb550919e390da04e3147bcc13cf938af0fae9c70ef87eb0355d17c20bd90c5a2b7acc3a58b000eaa916875e58cca3aa76ce3c38cd95857dbfa25443e9f723851dd5fe8a99d05b198a4a58b50fe58ce7c1b1b3f32989c62fd06221225a96d6eb7a82708a862db23acfe148cc8d6a160b357480f6c62c4cf2fc8a17a324edbf1ded8cd3a2962886e917efb77f186eb628171605ca5b7e024ab0e5c21bf6fecc7efc85ab477a3ad"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x416}}]}) syz_usb_control_io$uac1(r11, &(0x7f0000000680)={0x14, &(0x7f0000000600)={0x20, 0x1d, 0x34, {0x34, 0x11, "1e2ca980d4d095f827b41cba18666e6f56886ff8b2e3f094646693bde4fb778da242636c45afc458a0a2eebaaadb5f2fdadd"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44d}}}, &(0x7f0000000a80)={0x44, &(0x7f00000006c0)={0x40, 0xd, 0x100, "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"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000880)={0x20, 0x81, 0x2, "83b0"}, &(0x7f0000000980)={0x20, 0x82, 0x3, "a249a5"}, &(0x7f00000009c0)={0x20, 0x83, 0x1, 'J'}, &(0x7f0000000a00)={0x20, 0x84, 0x4, "bf0ccf67"}, &(0x7f0000000a40)={0x20, 0x85, 0x3, "7a125c"}}) 4m14.150034504s ago: executing program 37 (id=1602): write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_connect$uac2(0x2, 0x98, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000020392ad43f400001020301090286000301010008080b0001010c200609040000000101200009240107000426000411240905060300020003000200000002000c2403020104090305"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) (async) r0 = socket$unix(0x1, 0x1, 0x0) r1 = accept4$unix(r0, &(0x7f0000000000), &(0x7f0000000100)=0x6e, 0x80000) (async) r2 = syz_open_dev$video4linux(&(0x7f0000000540), 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc02c5625, &(0x7f0000000580)={0xf0f000, 0x15, "401989f9a986196d37d0561855573640154ca4642f00", 0x0, 0x8000000, 0x7}) (async) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000000c0)) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) (async) statx(r0, &(0x7f00000001c0)='./file0\x00', 0x800, 0x400, &(0x7f0000000340)) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x8d) getdents64(r6, &(0x7f0000000080)=""/234, 0xea) (async) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000080)={0x4, 0x4}, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) r7 = pidfd_getfd(r4, r4, 0x0) (async) r8 = socket(0x2, 0x80805, 0x0) (async) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) (async) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) (async) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r9, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, 0x0, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010029bd7000fddbdf250200000008000300", @ANYRES32=r11, @ANYBLOB="0c00990041000000600000000800a0007c030700080026009a030000"], 0x40}}, 0x48000) (async) ioctl$UBLK_U_CMD_GET_FEATURES(r7, 0xff05, 0x0) 2m39.9919771s ago: executing program 5 (id=1773): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') symlink(0x0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)=""/212, 0xd4) 2m39.910575694s ago: executing program 5 (id=1774): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x542180) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa0000, 0x5c) ioctl$SG_BLKSECTGET(r2, 0x1267, &(0x7f0000000080)) ioctl$TIOCGPGRP(r1, 0x540f, 0x0) 2m39.802104561s ago: executing program 5 (id=1775): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r1 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f00000006c0)=0x4, 0x4) r4 = dup(0xffffffffffffffff) mount$tmpfs(0x0, 0x0, 0x0, 0x3000c11, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r5 = eventfd2(0x7, 0x1) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000080)={r5, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) r6 = syz_usb_connect_ath9k(0x3, 0x97, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x16b2f3ab525d7a8, [{{0x9, 0x2, 0xfffffffffffffdf8}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r6, 0x83, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) eventfd2(0x439, 0x80000) r7 = syz_usb_connect(0x3, 0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000005b1710720500cbc9bb000203010902340001fb0000000904ca010338e880060905012a1000060002090500000002f803070905061000041c0d090705c17a"], 0x0) file_setattr(r4, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x2028, 0x9, 0xcd5, 0xfffff3cb, 0xa}, 0x18, 0x100) syz_usb_control_io$printer(r7, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x40, 0x23, 0x54, {0x54, 0xe, "7c72e766329ae32872c253c587505851671e29e44eaf12f5bb5325add168c1fed83712f278a810c5a8df53861e4d9c87e4e1979f4aeadf6d2ecaf157867db34d332ef12c1375f1b13351589e9b368b243bf0"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x458}}}, &(0x7f00000004c0)={0x34, &(0x7f0000000200)={0x40, 0xa, 0xde, "633d7f8cd42358f3222fed22cc670443585e1f12fadf2e050a44aa39c1d8c3c70a3aa89e9d5dfab740a1b74939c6fb543d9fdcadfa61feaea062fab0300a44fb15247c3c7775279b97f086dedf9f0fa7821af6dec99fded369c3b9a051f9d071f4b343776e1703ee7c6ab9373b4835705ae40b47753515bb766f38e2047809e1677ae27eea2f5fe99d09de2e8b389f4e1a19edb91883af51852aaebe154d115ffab5f69e68233d34def99cd021b7e6c8a03d9f3390f3fca991e0b9806fc32bff27bd054fe71a199e70ca2e398c149b252da93b1cd1c6aecadec16db121bc"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x23}, &(0x7f0000000380)={0x20, 0x0, 0x81, {0x7f, "91d3a8e9ac95bacae51b87c9c948a7b6475dd557f572860567bb0c1cf674b86ec417090fcd97981c88ec82df981f07bdf1685fce22d58995497b9ca937cb14f961818fe0a1cbe7c6718babd6d4d72bd35e6d3c48629976300fef4c7b7e401cad16729a660bc614653ffae7bab0e18429e7b7d1af418451d26c87198fdfecd8"}}, &(0x7f0000000440)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000000480)={0x20, 0x0, 0x1, 0x88}}) 2m39.485389496s ago: executing program 5 (id=1777): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="a4000000000201030000000000000000070000106c000a800800014000000000500002800c000280050001003a0000000c000280070001007a000000060003400004000014000180080001007f00000108000200e00000010c00028005000100060000000c00028005000100210000000800014000000000080001400000000124000a80200002800c000280050001002100000006000340ffff00000600034000030000"], 0xa4}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) ioctl$UBLK_U_CMD_GET_FEATURES(r3, 0xff02, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 2m39.405736461s ago: executing program 5 (id=1778): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="400104"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x21, 0x803, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newae={0x158, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4d3, 0xa, 0x33}, @in=@multicast1, 0x4, 0x3505}, [@algo_aead={0x116, 0x12, {{'gcm_base(xchacha20-simd,wp256-generic)\x00'}, 0x650, 0x200, "8f5b4fc800a72045cd9146562edb0f8c4317273367b36b3eae19f869f0dea7873b90f0a494fd9c9eb3dc1565819cd4c5e65a0cba18c9999afd3e4bcfc678cb510067abef6409e48352926104372775885727f55e38fd61cd91ed4247873467d1c3d57c3a258b478f05a04d2b1c879361629b435149dc08b017c0eb3a8f7669710dd180096dd5f6e55dea34141b433c78e9fcbb8cbac5e23856ce220c269fe3e960f5cbf9efa5b941085202a8be571eb886169760344e4aba7fdcdf512ceddc6a1951438a62878922b044"}}]}, 0x158}}, 0x40090) syz_usb_control_io$uac3(r0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000780)={0x1, 0x0, [{0x400000f5, 0x0, 0x200000000005}]}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x30, 0x99, 0x4, 0xfffff020}, {0x6, 0x0, 0x1, 0x5}]}, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r8, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r8, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) r9 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x1000001000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000000)={0x980914, 0x8}) sendmmsg$inet(r8, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 2m35.872569827s ago: executing program 5 (id=1786): mkdir(&(0x7f0000000400)='./file1\x00', 0x188) mount$cgroup(0x0, &(0x7f0000000440)='./file1\x00', &(0x7f0000000640), 0x200000, &(0x7f00000000c0)={[{@clone_children}]}) r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000003c0)='./file1\x00', &(0x7f00000004c0), &(0x7f0000000100)='./file0\x00', 0x8, 0x3) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') r2 = fanotify_init(0x2, 0x800) fanotify_mark(r2, 0x401, 0x1000, r1, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000dc0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r3 = syz_usb_connect$uac1(0x2, 0xba, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x3, 0x1, 0x2, 0x30, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x15}, [@mixer_unit={0xb, 0x24, 0x4, 0x6, 0x0, "b30ef1930b28"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x5, 0x5, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x2, 0x7, 0x8, {0x7, 0x25, 0x1, 0xc, 0x2, 0x401}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x4, 0x3, 0x2, 0x7, "b59a2f36"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x100, 0xfffc, 0x6b, 0x25}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xd, 0x3, 0x6c, 0x4, 0x7f}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x8001, 0x2, 0x28}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x9, 0x3, 0x7, 0x7, 'l', '6'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6, 0x7, 0x8, {0x7, 0x25, 0x1, 0xc, 0x4, 0x14}}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x180, 0x40, 0x3, 0x6, 0x20}, 0x1a, &(0x7f0000000040)={0x5, 0xf, 0x1a, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x4, 0x5d, 0x5, 0x40}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x3, 0x2}, @ptm_cap={0x3}]}, 0x2, [{0x7, &(0x7f0000000180)=@string={0x7, 0x3, "400000a900"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x459}}]}) mount$bind(&(0x7f0000000600)='./file1\x00', &(0x7f0000000880)='./file1\x00', &(0x7f0000000d80), 0x1000c94, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000a80)={0x14, &(0x7f0000000900)={0x0, 0x23, 0xa6, {0xa6, 0x6, "6da85fc48ee266461b7cc55e3f5125a69e48c02cc4b35b936b6fba28acf41c34b3db9fc31694ac78f51ae5397ce7d605df9962fb9af344dbd4f818ba9680aee9f94c26dc4a69e854beee2ce02312f24943bcec177000908212e9175d9971fe25bfdaaa9beb25c0e6c42a0fa75976dea3f672277b9352840df678cbb6cde162be3e755ec96b241c96be8d03e4c005e012c949bd662d4778885d24a05ef8fc75c36bb6b528"}}, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"]}, &(0x7f0000000d00)={0x44, &(0x7f0000000ac0)=ANY=[@ANYBLOB="203079000000f519901cf0047ea0394da65f8304693a81c8c550bdd0e17a5348aae923bcfa64d85618cb21f5d082d8dd5c9fe7a26283855ac492f38edd5120504855ed37f88032a0fefde432be7a4eeb3381022622076064c2c028d1eb7e61e3000af9faa5a77028a3310f3e421e2fba28df7800"/127], &(0x7f0000000b40)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, "ca"}, &(0x7f0000000c00)={0x20, 0x82, 0x3, "0ad7db"}, &(0x7f0000000c40)={0x20, 0x83, 0x2, "2c17"}, &(0x7f0000000c80)={0x20, 0x84, 0x2, "b61b"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, '!N^'}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x28, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x0, 0xff, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x2, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x1, 0x8, 0x1}}}}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = syz_open_procfs(r4, &(0x7f00000003c0)='net/protocols\x00') read$FUSE(r6, 0x0, 0x0) lsetxattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="627472667300000000005f4f383aee8532ea090c857684eee0dbaa39364f0ec61856de82d97248e98171b867fbd56b811d99fc4f8e06577f918c6cc7f9e8f64f8d090ab556be50fb"], &(0x7f00000005c0)=':)*\x00', 0x4, 0x1) 2m21.007957899s ago: executing program 38 (id=1786): mkdir(&(0x7f0000000400)='./file1\x00', 0x188) mount$cgroup(0x0, &(0x7f0000000440)='./file1\x00', &(0x7f0000000640), 0x200000, &(0x7f00000000c0)={[{@clone_children}]}) r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000003c0)='./file1\x00', &(0x7f00000004c0), &(0x7f0000000100)='./file0\x00', 0x8, 0x3) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') r2 = fanotify_init(0x2, 0x800) fanotify_mark(r2, 0x401, 0x1000, r1, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000dc0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r3 = syz_usb_connect$uac1(0x2, 0xba, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x3, 0x1, 0x2, 0x30, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x15}, [@mixer_unit={0xb, 0x24, 0x4, 0x6, 0x0, "b30ef1930b28"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x5, 0x5, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x2, 0x7, 0x8, {0x7, 0x25, 0x1, 0xc, 0x2, 0x401}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x4, 0x3, 0x2, 0x7, "b59a2f36"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x100, 0xfffc, 0x6b, 0x25}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xd, 0x3, 0x6c, 0x4, 0x7f}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x8001, 0x2, 0x28}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x9, 0x3, 0x7, 0x7, 'l', '6'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6, 0x7, 0x8, {0x7, 0x25, 0x1, 0xc, 0x4, 0x14}}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x180, 0x40, 0x3, 0x6, 0x20}, 0x1a, &(0x7f0000000040)={0x5, 0xf, 0x1a, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x4, 0x5d, 0x5, 0x40}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x3, 0x2}, @ptm_cap={0x3}]}, 0x2, [{0x7, &(0x7f0000000180)=@string={0x7, 0x3, "400000a900"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x459}}]}) mount$bind(&(0x7f0000000600)='./file1\x00', &(0x7f0000000880)='./file1\x00', &(0x7f0000000d80), 0x1000c94, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000a80)={0x14, &(0x7f0000000900)={0x0, 0x23, 0xa6, {0xa6, 0x6, "6da85fc48ee266461b7cc55e3f5125a69e48c02cc4b35b936b6fba28acf41c34b3db9fc31694ac78f51ae5397ce7d605df9962fb9af344dbd4f818ba9680aee9f94c26dc4a69e854beee2ce02312f24943bcec177000908212e9175d9971fe25bfdaaa9beb25c0e6c42a0fa75976dea3f672277b9352840df678cbb6cde162be3e755ec96b241c96be8d03e4c005e012c949bd662d4778885d24a05ef8fc75c36bb6b528"}}, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"]}, &(0x7f0000000d00)={0x44, &(0x7f0000000ac0)=ANY=[@ANYBLOB="203079000000f519901cf0047ea0394da65f8304693a81c8c550bdd0e17a5348aae923bcfa64d85618cb21f5d082d8dd5c9fe7a26283855ac492f38edd5120504855ed37f88032a0fefde432be7a4eeb3381022622076064c2c028d1eb7e61e3000af9faa5a77028a3310f3e421e2fba28df7800"/127], &(0x7f0000000b40)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000bc0)={0x20, 0x81, 0x1, "ca"}, &(0x7f0000000c00)={0x20, 0x82, 0x3, "0ad7db"}, &(0x7f0000000c40)={0x20, 0x83, 0x2, "2c17"}, &(0x7f0000000c80)={0x20, 0x84, 0x2, "b61b"}, &(0x7f0000000cc0)={0x20, 0x85, 0x3, '!N^'}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x28, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x0, 0xff, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x2, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x1, 0x8, 0x1}}}}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = syz_open_procfs(r4, &(0x7f00000003c0)='net/protocols\x00') read$FUSE(r6, 0x0, 0x0) lsetxattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="627472667300000000005f4f383aee8532ea090c857684eee0dbaa39364f0ec61856de82d97248e98171b867fbd56b811d99fc4f8e06577f918c6cc7f9e8f64f8d090ab556be50fb"], &(0x7f00000005c0)=':)*\x00', 0x4, 0x1) 1m59.596424622s ago: executing program 9 (id=1899): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="008000"}) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/110, 0x6e}], 0x1, 0x5, 0x1) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000000c14000125bd7000ffb11885a69a347ce1000000"], 0x18}, 0x1, 0x0, 0x0, 0x48080}, 0x800) 1m59.454542833s ago: executing program 9 (id=1900): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="02030003120000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a000000000000000000000000000000000000000000000102000000000000000200010000000000000007000000000005000500000000000a0000000000000000ef00000000000000000000000000010700000000000000010014"], 0x90}, 0x1, 0x7}, 0x0) kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9", 0xdf, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1f0fd92cde6f444bf490f27f37e198aa55b403df846ce1732f7cf4c12d92aece1289b4b10b7d84532a07762548e3f3915b6575e8ef8130395476b9a721a7668c608c4d2f70aee2be4ae96ff0e5925b138fec99f91f19d8618037fe2842d248c8d44f425e54da4a668059f5124222cb4955f073d318b2f0dcecec611448d4ec0fd", 0xe7, 0x5, 0x6}], 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb0993", 0x41}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15", 0x75}], 0x3}, 0x41) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348", 0xf}], 0x2, 0x0, 0x0, 0x10}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r8) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r8, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000ed", @ANYRES16=r9, @ANYBLOB="20002cbd7000fedbdf254c0000000500990006000000240000000c00580002000000000000000c0058002800000000000000020058002f00000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a307d9a00000901030073797a300000000070000000060a010400000000000000000500000008000b400000000048000480240001800b00010074756e6e656c0000140002800800014000000001080002400000000920000180080001006677640014010280080002400000001708000240000000170900010073797a3000000000140000001100010000000000000000000000000a"], 0xe4}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000303010100000083c31f000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) 1m58.368576291s ago: executing program 9 (id=1903): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1c4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffe3e, &(0x7f0000000040)=[@cred], 0x100}, 0x40000160) (async) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) 1m58.216597766s ago: executing program 9 (id=1905): memfd_create(0x0, 0x1) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f00007ad000/0x3000)=nil, 0x3000, 0x5) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x4, 0x100000001, 0x3, 0x24, 0x6, 0x6, 0xfffffffffffffffc, 0x100fff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r2, r4, r5) socket$inet6_udp(0xa, 0x2, 0x0) setxattr$security_capability(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f0000000180)=@v2={0x2000000, [{0x2, 0x80000000}, {0x2, 0x101}]}, 0x14, 0x3) ioprio_set$pid(0x3, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) ioprio_set$pid(0x2, r6, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000007d6a00"/28, @ANYRES32=r8, @ANYRES32=r7], 0x18, 0x8801}}], 0x1, 0x20044034) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280), 0xbf4f7d340f297646, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) openat(r1, &(0x7f00000001c0)='./file1\x00', 0x147040, 0x5) 1m58.092632969s ago: executing program 9 (id=1906): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x8f, "c43bc48074d9f67a7dcf8c7f40af09ef52e6018b3fa0009defc0930c17c528aac049bcaf2440ceaced840bacb8c573f397c01e0ab0c7d54fb2fb3cdaeab1a5d1e94ea10730829eb98cf12845954e7f73ae242ffd9e1f8406adff37594cf0a5b67a88ed20ba1fe0da39c5b23731365e8e9cbf928cf0c76aa692dac1dc27818f8b3d61eb8f9234dcfcdf50f65faa2535"}, &(0x7f0000000100)=0x97) (rerun: 64) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x8c5, 0x2, 0x8000, 0x200, 0x4, 0x34c9, 0x7, 0x2, r2}, &(0x7f00000001c0)=0x20) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={r1, 0x3, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="e363874719a9"}, 0x10) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x18f6e000) (async) madvise(&(0x7f0000d9c000/0x1000)=nil, 0x1000, 0x17) 1m57.368449862s ago: executing program 9 (id=1907): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000116d041bc50400fe010300020009218100030122280009058103400003c100"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r1, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xadb, 0x0, 0x95d}]}) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, &(0x7f00000001c0)={0x20, 0x9, 0xc7, {0xc7, 0xd, "1a53a954579ccf7e2a60feb206d1df9daa2ed57563048b12c7d23755c46e8265e122ac1db23ef347c3ebcbc12f61d422599e89f0e3bd1e3f2b683907220aacef388c222064559c4bf472fb60c9ef5fa7b0cbf3a00285d90d5643b0716377a7b8ed928fc75b0d932f12cec7668dd82e6dbbba058d1801f6492f390b5d0e40793eb391f6c4bbee39374842c4950965dd8607319aaa936f933b05c5a22b2879eec1fcfeb7cef1bad1a343ee5deeddebdf6e252cd306302b4c467daf95095c30ec8c8c4f7b7973"}}, &(0x7f00000002c0)={0x0, 0x3, 0x1f, @string={0x1f, 0x3, "ec386f738230828b4dc170ce0b08792299c73ba642f4c97ff0dd300b39"}}, &(0x7f0000000300)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x9, "ea2e6c16"}]}}, &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x4, 0x1, {0x22, 0xec3}}}}, &(0x7f0000000540)={0x2c, &(0x7f00000003c0)={0x20, 0x14, 0x17, "3bdcc4503acbaa90ec5e579181f4f758a01848c4468a06"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x17}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000480)={0x20, 0x1, 0x4c, "db6900d40f6a9715a1f595cf6f66db7fb067b73d6850f766f5eeaaa342d76ec462d43c328594b4f7e798ad1458ba6e9a19ef9b55395879464f7814a08cb54c97a2c65d73ded3a6a4e9388c97"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x7}}) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="20017d0000007d24c2631385267927dbad7cbb4ca365d2ab11cd9eb142a261915773ce8b1c852c3cbdeace918d0fb74237cc66446c4e88e78881ce2a52973661d67a0c15447091fe5238db1733cc321c86047c122ae85440aa6ad88d89d9a4d7670477ce86725a34c3221ce76fcd9f348c080013a95bad1484ca641f9676c45cf55b59"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m56.866639403s ago: executing program 39 (id=1907): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000116d041bc50400fe010300020009218100030122280009058103400003c100"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r1, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xadb, 0x0, 0x95d}]}) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, &(0x7f00000001c0)={0x20, 0x9, 0xc7, {0xc7, 0xd, "1a53a954579ccf7e2a60feb206d1df9daa2ed57563048b12c7d23755c46e8265e122ac1db23ef347c3ebcbc12f61d422599e89f0e3bd1e3f2b683907220aacef388c222064559c4bf472fb60c9ef5fa7b0cbf3a00285d90d5643b0716377a7b8ed928fc75b0d932f12cec7668dd82e6dbbba058d1801f6492f390b5d0e40793eb391f6c4bbee39374842c4950965dd8607319aaa936f933b05c5a22b2879eec1fcfeb7cef1bad1a343ee5deeddebdf6e252cd306302b4c467daf95095c30ec8c8c4f7b7973"}}, &(0x7f00000002c0)={0x0, 0x3, 0x1f, @string={0x1f, 0x3, "ec386f738230828b4dc170ce0b08792299c73ba642f4c97ff0dd300b39"}}, &(0x7f0000000300)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x9, "ea2e6c16"}]}}, &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x4, 0x1, {0x22, 0xec3}}}}, &(0x7f0000000540)={0x2c, &(0x7f00000003c0)={0x20, 0x14, 0x17, "3bdcc4503acbaa90ec5e579181f4f758a01848c4468a06"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x17}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000480)={0x20, 0x1, 0x4c, "db6900d40f6a9715a1f595cf6f66db7fb067b73d6850f766f5eeaaa342d76ec462d43c328594b4f7e798ad1458ba6e9a19ef9b55395879464f7814a08cb54c97a2c65d73ded3a6a4e9388c97"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x7}}) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="20017d0000007d24c2631385267927dbad7cbb4ca365d2ab11cd9eb142a261915773ce8b1c852c3cbdeace918d0fb74237cc66446c4e88e78881ce2a52973661d67a0c15447091fe5238db1733cc321c86047c122ae85440aa6ad88d89d9a4d7670477ce86725a34c3221ce76fcd9f348c080013a95bad1484ca641f9676c45cf55b59"], 0x0, 0x0, 0x0, 0x0}, 0x0) 10.340917639s ago: executing program 0 (id=2258): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x1013}) socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r1, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0xfffffed8, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) ppoll(&(0x7f00000000c0)=[{}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x41, 0x99, 0x35, 0x8, 0xc45, 0x600d, 0x914d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0xe, 0x40, 0x3, "", [{{0x9, 0x4, 0xf4, 0x2, 0x0, 0x5e, 0x3e, 0xa8, 0x8}}]}}]}}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0}) 7.080722815s ago: executing program 0 (id=2271): socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r7, 0x1, 0x24, 0x0, &(0x7f0000000740)) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r8, r5, &(0x7f0000000480)={0x0, 0x18e2, 0x10000, 0x0, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe90e, 0x200, 0x5, 0x41}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x2, 0x19b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x1, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x800, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r4, '\x00', {0x3, 0xb66, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1463, 0x10f00, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88d6, 0x10002, 0x401, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902cc, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) (async) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x393}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) (async) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) bind$l2tp6(r6, 0x0, 0x0) (async) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) getsockopt$sock_buf(r7, 0x1, 0x24, 0x0, &(0x7f0000000740)) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) (async) syz_ublk_setup_queues(r8, r5, &(0x7f0000000480)={0x0, 0x18e2, 0x10000, 0x0, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe90e, 0x200, 0x5, 0x41}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x2, 0x19b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x1, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x800, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r4, '\x00', {0x3, 0xb66, 0x0, 0x0}}, 0x0) (async) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1463, 0x10f00, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88d6, 0x10002, 0x401, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902cc, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) (async) 6.813180678s ago: executing program 0 (id=2272): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x640000) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x43, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xfe, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x8}}}}}]}}]}}, 0x0) (async) ioctl$EVIOCGBITSW(r0, 0x4004550e, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e40)={0x14, 0x2d, 0xb, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4880}, 0x20008000) 5.856156441s ago: executing program 6 (id=2274): chroot(0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) llistxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) accept(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) mq_unlink(&(0x7f00000000c0)='[\x00') r0 = socket(0x2, 0x80805, 0x0) connect$pppl2tp(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x2, {0xa, 0x4e23, 0x10001, @empty, 0x1}}}, 0x32) umount2(0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$nfc_llcp(r5, 0x0, 0x0, 0x10000040) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0405812a2089fc00"], 0x8) 5.219997567s ago: executing program 0 (id=2275): syz_usb_connect$uac2(0x3, 0x8b, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x2b53, 0x23, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x3, 0x1, 0xfb, 0x40, 0x4, {0x8, 0xb, 0x2, 0x1, 0x1, 0x3, 0x20, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8, 0xc, 0x19, 0xe5}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x4, 0xb, 0x6, 0x3}, @source_unit={0x8, 0x24, 0xa, 0x9, 0x1, 0x3, 0x6, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x7, 0x6, {0x8, 0x25, 0x1, 0x80, 0xf, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x9, 0x3b, 0x9, {0x8, 0x25, 0x1, 0xc0, 0x0, 0x6, 0x4}}}}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) setresuid(0x0, 0xee00, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0xb0, 0x40e, {0xffffffffffffffff}, {0xee00}, 0x1, 0x4}) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f00000000c0)=@nullb, r0, &(0x7f0000000140)={0xbc0c, 0x7fff, 0x0, 0x1}) 5.032781326s ago: executing program 3 (id=2276): r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[], 0x58}}, 0x0) setns(r2, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setreuid(0xffffffffffffffff, 0xee01) setns(r5, 0x24020000) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r0, 0x8) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file1\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup2(0x0, 0x0, 0x0, 0x20, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) flock(r7, 0x5) r8 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r6, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x1, @mcast2, 0x5}, 0x1c, &(0x7f0000000200), 0x13, &(0x7f0000000680)=ANY=[@ANYRESHEX=r3], 0x58, 0x4855}, 0x20000052) getsockopt$inet_sctp_SCTP_INITMSG(r6, 0x84, 0x2, 0x0, &(0x7f0000000180)) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000240)='./bus\x00', &(0x7f0000000140)='hfsplus\x00', 0x200080, 0x0) 4.580263085s ago: executing program 3 (id=2277): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xa00, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb904021d0800fe007c05e8fe55a1bc001200020014260c600e12100015007f370401a8001000200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f0000000980)={&(0x7f0000000000)=0x3, 0x7e5, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000940)}) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xa00, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb904021d0800fe007c05e8fe55a1bc001200020014260c600e12100015007f370401a8001000200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) (async) ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f0000000980)={&(0x7f0000000000)=0x3, 0x7e5, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000940)}) (async) 4.081608975s ago: executing program 3 (id=2278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000000)=0x5a, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c00028024000300733900000455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000008000240000000000c00010052415445455354000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20044840) 3.972862638s ago: executing program 6 (id=2279): syz_usb_connect(0x0, 0x62, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601e20302000100060006092403050503060581092403060103040505072404050105"], 0x0) (async) syz_usb_connect(0x2, 0x52, &(0x7f00000002c0)={{0x12, 0x1, 0x250, 0x91, 0xe3, 0xb, 0x40, 0x12d1, 0xccef, 0xe556, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x9, 0x6, 0xa0, 0xb, "", [{{0x9, 0x4, 0x41, 0xc6, 0x0, 0x2, 0xe, 0x0, 0x4, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xe, 0x101, 0x4, 0x1}}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xffffff80, 0x403, 0x4, 0x3}}]}}]}}]}}, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0}) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='bic', 0x3) (async) syz_io_uring_setup(0xa00, &(0x7f0000000080)={0x0, 0x1c5, 0x10000, 0x2, 0x25f}, &(0x7f0000000100), 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x14, r1, 0x30d}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f0000000540)={0x29c, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffe}]}, @TIPC_NLA_MEDIA={0xbc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x55}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdb}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x33c}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x27b}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8ab}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe859}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x73}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x18e}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x50}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa03}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd834}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x24000084}, 0x4005) 3.432309718s ago: executing program 3 (id=2280): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0xfffffffe, @empty, 0x3}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x19c, 0x16, 0x633, 0x0, 0x7ffffffc, {{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {@in=@private=0xa010101, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2}, 0x6, 0x2, 0x0, 0x4, 0x18, 0x19}, [@policy={0xac, 0x7, {{@in=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x9, 0x4e23, 0xe, 0xa, 0xc0, 0x20, 0x3a}, {0x1, 0x3, 0x1, 0xfa, 0x9, 0xd2f, 0x3c, 0x8000}, {0xfffffffffffff11c, 0x81, 0x9, 0x7}, 0x4, 0x6e6bb2, 0x1, 0x1, 0x0, 0x3}}]}, 0x19c}}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001280)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x8, @empty, 0xfffffffe}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x10, @loopback, 0x2}, 0x1c, 0x0}}], 0x2, 0x240c089d) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x202000) file_setattr(r4, 0x0, &(0x7f0000000000)={0x2000, 0xfffffffc, 0xed, 0x0, 0x400}, 0x18, 0x1000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0x0, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40000) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), r5) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, r7, 0x211, 0x70bd2b, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x51}, 0x4000004) syz_usb_control_io(r3, 0x0, 0x0) 3.431662996s ago: executing program 0 (id=2281): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0x82) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) rt_sigtimedwait(&(0x7f0000000400)={[0x8be5]}, 0x0, &(0x7f0000000440)={0x77359400}, 0x8) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pwritev2(r2, &(0x7f00000005c0)=[{&(0x7f0000000180)="c8", 0x1}], 0x1, 0x2e, 0x4, 0x11) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1f}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="0815000000051104"], 0x1508}}, 0x10) writev(r4, &(0x7f0000000040), 0x2) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) read$FUSE(r2, &(0x7f0000000600)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r6, &(0x7f00000031c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r6, &(0x7f00000002c0)={0x130, 0x0, r7, {0x4000000000007, 0xc, 0x0, '\x00', {0x6, 0xaf22, 0x6, 0x6, 0x0, r8, 0xa000, '\x00', 0x7, 0x8, 0xd60b, 0x80000000005, {0x4002008, 0xfffffff0}, {0x203d7f, 0x2, 0xc000000}, {0x100000000408, 0x72}, {0xfffffffffffffffd, 0xdb23}, 0xffffffff, 0x5, 0x200, 0x8000}}}, 0x130) r9 = getegid() r10 = getgid() setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000002640)={{}, {0x1, 0x2}, [{0x2, 0x6, 0xee01}, {0x2, 0x5, 0xee00}], {0x4, 0x7}, [{0x8, 0x2, r5}, {0x8, 0x4, r8}, {0x8, 0x1, r9}, {0x8, 0x0, r10}], {0x10, 0x72ed82fb0ab3b519}, {0x20, 0x1}}, 0x54, 0x2) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x111182, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000180)={'hsr0\x00', 0x0}) sendto$packet(r12, &(0x7f0000000200)="0900892f", 0x4, 0x24000801, &(0x7f0000000480)={0x11, 0x8100, r14, 0x1, 0x8, 0x6, @remote}, 0x14) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000004, 0x80010, r11, 0x225a2000) 3.199074225s ago: executing program 8 (id=2283): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.024640162s ago: executing program 6 (id=2284): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r1, 0x2) shutdown(r1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2, 0x5}}, 0x20) 2.85023866s ago: executing program 6 (id=2285): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000003c0)=0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8020, 0x1d2) fcntl$setlease(r1, 0x400, 0x0) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r1, 0x6f2d, 0x7) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000340)=0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) read$FUSE(r2, &(0x7f0000000400)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x3) 2.562640833s ago: executing program 8 (id=2286): r0 = socket(0x2, 0x2, 0x10000000000002) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, 0x0, 0x0) 2.388232178s ago: executing program 0 (id=2287): chroot(0x0) umount2(0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x8050) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x1a, 0x0, 0x3ffffe8e}) r2 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000300)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x3, "fd7b44512b7e1b0420ec2a3ba53b31dd77e7ffffff0300151200"}}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) syz_usb_connect(0x3, 0x34, &(0x7f0000001100)=ANY=[@ANYRES32=r1, @ANYBLOB='k'], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) capset(&(0x7f0000000180)={0x20080522}, &(0x7f0000000500)={0x0, 0x1, 0x87, 0x0, 0xffffff24, 0x7fff}) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000008, 0x13, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) r4 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000040)=@ethtool_ringparam={0xe, 0x0, 0x5}}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x5, 0xffffffffffffffff, 0x80000}) close(r5) socket$inet_sctp(0x2, 0x1, 0x84) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80300, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000200)=0x100000001) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$nfc_llcp(r7, 0x0, 0x0, 0x10000040) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x801, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(r1, 0xc080583d, &(0x7f0000000380)={0x8, 0x8, 0x2, 0x9, 0xe8f, 0x5a, 0x8}) fadvise64(r8, 0xffffffffffffffa, 0x5, 0x4) syz_open_dev$video(&(0x7f0000000040), 0x100, 0x0) 1.932124679s ago: executing program 6 (id=2288): ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x7, 0x800005ffffffffff}) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000280)={0x1f, 0xfffe, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x10}, 0xe) listen(r4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x68, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}, @GTPA_PEER_ADDR6={0x14, 0xb, @loopback}, @GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x39}}, @GTPA_FAMILY={0x5, 0xd, 0x28}, @GTPA_MS_ADDR6={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x8004) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.596228175s ago: executing program 3 (id=2289): socket$nl_netfilter(0x10, 0x3, 0xc) 1.488548736s ago: executing program 3 (id=2290): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x89901) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$cgroup2(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x203, &(0x7f0000000140)={[{@memory_localevents}, {@memory_hugetlb_accounting}], [{@obj_user={'obj_user', 0x3d, './binderfs/binder1\x00'}}]}) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', 0x220) acct(&(0x7f0000000440)='./file0/../file0\x00') sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d0020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x804}, 0x40045) syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="00406b1d0101"], 0x0) syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) 1.403465768s ago: executing program 6 (id=2291): r0 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_READ_STATUS(r0, 0x80046f45, &(0x7f0000000000)) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) 1.10447068s ago: executing program 8 (id=2292): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private=0xa010100, 0x0, 0x0, 0x4e21, 0x0, 0x2}, {0x0, 0x0, 0x4, 0x100, 0xfffffffffffffffd, 0x0, 0x9c0, 0x3}, {0x7f, 0x0, 0x3, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x4d3, 0x3c}, 0xa, @in=@multicast2, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x3fffffc, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=prefer=']) r2 = syz_open_dev$video(&(0x7f0000000140), 0x0, 0x10040) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000040)={0xa, 0x3, 0x0, {0xe803, 0xa35, 0x406, 0xbfe}}) 1.000377123s ago: executing program 8 (id=2293): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4014}, 0x4044851) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="090300000000000000002e"], 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x8, r6}, 0x10) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x8c0}, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x20, r7, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c9f99281d72a1a2}, 0x20000850) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r10 = fcntl$dupfd(r9, 0x0, r9) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) write$tun(r10, &(0x7f0000000600)={@void, @void, @mpls={[], @ipv6=@tcp={0xd, 0x6, "b7dad9", 0x22e, 0x6, 0xff, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@srh={0x32, 0x4, 0x4, 0x2, 0x3, 0x30, 0xfff8, [@dev={0xfe, 0x80, '\x00', 0x16}, @loopback]}, @hopopts={0x89, 0x27, '\x00', [@ra={0x5, 0x2, 0x2}, @calipso={0x7, 0x10, {0x2, 0x2, 0xd, 0xc9, [0x9]}}, @enc_lim={0x4, 0x1, 0xf9}, @generic={0x10, 0x69, "a04f4bedee7477437d4f7d41074a5db1d3c5595f074b09d9ef2da0bbad3aea4433e6c6290f3e0bae17103f65d74e6b297382090c24731cf269da512a5881d29b893aefef85024af7573a4371f9d57d352b77dff85cb9e92598417c4e0d72d08cbf18bbba98732b3be7"}, @generic={0x2, 0x91, "d40bb0bfb26640aac949adc5279a514df887df67d5cb66d36a28ba2d1e0bae5c7eefa62d800c997c6d77df3073c48a009c8ef2120f900502da59cbfe93d672af3d88d4981c5155c4f7817a857d3c01025d36a778ce3f624d4a1372800284128ff649f3c6220de529f06181a8c1cb06ecf4410b687d5e4eddb56b75e8dc9398932bc847cf0b7522765b806f8916a8f1f8b5"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x2, 0x6, 0x9, 0x20b, [0x400, 0x9, 0x801]}}]}], {{0x4e25, 0x4e22, r11, 0x41424344, 0x1, 0x0, 0x8, 0x10, 0x4, 0x0, 0x23b1, {[@mss={0x2, 0x4, 0x1}, @sack_perm={0x4, 0x2}, @sack={0x5, 0x6, [0xecf]}]}}, {"2e76da95edba535a4067557a7a9d9c2b70f7aceaad789219de0912a981b14a182cb778641a8b1e0d97b7e1480b22780994122e2572ad949dbd66db814effcbc1383a73dcf28473964ad006c56caeedc706e7d56203dbcb824c0695b192eada18da76cc965ac81d1d492ca48bc589dd45c947d0237fe501d54ce83a0815a433fecfe620975153e5f9367b8473e98b0187d8101f556fc28353293bbfe755c5"}}}}}}, 0x256) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x0) 906.772618ms ago: executing program 8 (id=2294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0xffffffff, 0x3}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1a}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010200000000000b0000070000000900010073797a300000000014000000020a01010000000000000000000000002c000000180a05000000000000000000070000010900010073797a30000000000c0005"], 0x392c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) ftruncate(r6, 0x2000009) sendfile(r4, r6, 0x0, 0x7ffff004) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x70, r8, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x70}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r8, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000885}, 0x4800) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x44001, 0x0) 0s ago: executing program 8 (id=2295): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, r1, 0x800, 0x0, 0xfffffffe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x8008001) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000180)=ANY=[@ANYBLOB="120100020000001082053b0040000102030109026e00030121a00a080b00020123301e0904000000010130100a2401020a000e000000090401"], 0x0) kernel console output (not intermixed with test programs): 07] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 904.315859][ T5269] 8021q: adding VLAN 0 to HW filter on device eth19 [ 904.396116][T12007] usb 9-1: device descriptor read/64, error -71 [ 904.501134][T12007] usb usb9-port1: attempt power cycle [ 904.824546][T12007] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 907.084994][ T5269] 8021q: adding VLAN 0 to HW filter on device eth20 [ 908.515621][T12007] usb 9-1: device descriptor read/8, error -71 [ 909.333344][T13595] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 909.375203][T13595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 909.385099][T13595] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 909.430341][T13595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 909.431393][T13595] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 909.478033][T13595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 909.493897][T13595] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 909.564681][T13595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 909.888964][T13595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 909.930242][T13595] 8021q: adding VLAN 0 to HW filter on device team0 [ 909.949717][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.949851][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 909.986703][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.986857][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 910.863626][T13595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 911.176128][T13595] veth0_vlan: entered promiscuous mode [ 911.197268][T13595] veth1_vlan: entered promiscuous mode [ 911.330308][T13595] veth0_macvtap: entered promiscuous mode [ 911.366817][T13595] veth1_macvtap: entered promiscuous mode [ 911.502569][T13595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 911.525473][T13865] autofs: Unknown parameter 'ÿÿ0x0000000000000000' [ 911.584077][T13595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 911.654887][ T6645] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.656605][ T6645] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.660071][ T6645] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.704258][ T6645] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.342111][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 913.342150][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 913.636420][T13469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 913.636443][T13469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 914.355183][ T32] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 914.591695][ T32] usb 9-1: Using ep0 maxpacket: 16 [ 914.596896][ T32] usb 9-1: config 0 has no interfaces? [ 914.597011][ T32] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 914.597074][ T32] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.623500][ T32] usb 9-1: config 0 descriptor?? [ 914.747386][ T5710] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 914.963767][T13928] netlink: 'syz.3.1949': attribute type 10 has an invalid length. [ 914.995037][ T5710] usb 1-1: Using ep0 maxpacket: 16 [ 915.000915][ T5710] usb 1-1: config 0 has an invalid interface number: 114 but max is 0 [ 915.000944][ T5710] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 915.000965][ T5710] usb 1-1: config 0 has no interface number 0 [ 915.001028][ T5710] usb 1-1: config 0 interface 114 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 915.001062][ T5710] usb 1-1: config 0 interface 114 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 915.001088][ T5710] usb 1-1: config 0 interface 114 has no altsetting 0 [ 915.014914][ T5710] usb 1-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 915.014987][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.015042][ T5710] usb 1-1: Product: syz [ 915.015088][ T5710] usb 1-1: Manufacturer: syz [ 915.015119][ T5710] usb 1-1: SerialNumber: syz [ 915.073578][ T5710] usb 1-1: config 0 descriptor?? [ 915.097166][T13914] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 915.112949][T13914] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 915.138763][T13928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 915.143108][T13928] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 915.306364][T13913] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 915.306480][T13913] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 915.492031][T13903] fuse: Unknown parameter 'YhøçH Òêâ´7íÙê&mÿ›' [ 915.631072][ T1009] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 915.682681][T12012] usb 9-1: USB disconnect, device number 33 [ 915.754793][ T1009] usb 4-1: device descriptor read/64, error -71 [ 915.984567][ T1009] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 916.100655][ T5710] asix 1-1:0.114 (unnamed net_device) (uninitialized): invalid PHY address: 79 [ 916.108966][ T1009] usb 4-1: device descriptor read/64, error -71 [ 916.214236][ T1009] usb usb4-port1: attempt power cycle [ 916.309944][ T5710] usb 1-1: USB disconnect, device number 84 [ 916.535580][ T1009] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 916.556355][ T1009] usb 4-1: device descriptor read/8, error -71 [ 916.691240][ T5717] usb 9-1: new full-speed USB device number 34 using dummy_hcd [ 916.783558][ T1009] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 916.805171][ T1009] usb 4-1: device descriptor read/8, error -71 [ 916.907661][ T1009] usb usb4-port1: unable to enumerate USB device [ 916.935342][ T5717] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 916.935374][ T5717] usb 9-1: config 0 has no interface number 0 [ 916.935469][ T5717] usb 9-1: config 0 interface 41 has no altsetting 0 [ 916.938264][ T5717] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 916.938302][ T5717] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.938322][ T5717] usb 9-1: Product: syz [ 916.938336][ T5717] usb 9-1: Manufacturer: syz [ 916.938350][ T5717] usb 9-1: SerialNumber: syz [ 916.973687][ T5717] usb 9-1: config 0 descriptor?? [ 917.297697][ T5616] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 917.454484][ T5616] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 917.454533][ T5616] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 917.454932][ T5616] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.516356][ T5616] usb 1-1: config 0 descriptor?? [ 917.527185][ T5717] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 917.527850][ T5717] CoreChips 9-1:0.41: probe with driver CoreChips failed with error -71 [ 917.581688][ T5717] usb 9-1: USB disconnect, device number 34 [ 917.715953][ T5616] usbhid 1-1:0.0: can't add hid device: -71 [ 917.716079][ T5616] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 917.743251][ T5616] usb 1-1: USB disconnect, device number 85 [ 918.183670][ T5616] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 918.306754][T12012] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 918.327170][ T5616] usb 1-1: Using ep0 maxpacket: 8 [ 918.335351][ T5616] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 918.335388][ T5616] usb 1-1: config 0 interface 0 has no altsetting 0 [ 918.339875][ T5616] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 918.339913][ T5616] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.339936][ T5616] usb 1-1: Product: syz [ 918.339951][ T5616] usb 1-1: Manufacturer: syz [ 918.339967][ T5616] usb 1-1: SerialNumber: syz [ 918.381114][ T5616] usb 1-1: config 0 descriptor?? [ 918.425013][ T5616] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 918.480327][T12012] usb 9-1: Using ep0 maxpacket: 16 [ 918.575699][T12012] usb 9-1: config 0 has an invalid interface number: 105 but max is 0 [ 918.575732][T12012] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 918.575755][T12012] usb 9-1: config 0 has no interface number 0 [ 918.587133][T12012] usb 9-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 918.587164][T12012] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.587184][T12012] usb 9-1: Product: syz [ 918.587199][T12012] usb 9-1: Manufacturer: syz [ 918.587213][T12012] usb 9-1: SerialNumber: syz [ 918.608815][ T5616] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 918.609550][ T5616] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 918.638854][ T5616] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 918.675659][T12012] usb 9-1: config 0 descriptor?? [ 918.781988][T14007] overlay: ./file0 is not a directory [ 918.838854][T13974] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1953'. [ 918.860752][T13974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.861682][T14008] fuse: Bad value for 'fd' [ 918.868269][T13974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.920963][T13974] netlink: 'syz.0.1953': attribute type 10 has an invalid length. [ 919.004442][T13974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 919.035923][T13974] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 919.216781][T12012] uvcvideo 9-1:0.105: Found UVC 0.00 device syz (046c:14e8) [ 919.216816][T12012] uvcvideo 9-1:0.105: No valid video chain found. [ 919.454719][T13998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.455331][T13998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 919.492082][T13998] netlink: 'syz.8.1954': attribute type 10 has an invalid length. [ 919.492106][T13998] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1954'. [ 919.494022][T13998] dummy0: entered promiscuous mode [ 919.495167][T13998] dummy0: entered allmulticast mode [ 919.582702][T13998] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 919.649258][ T5710] usb 9-1: USB disconnect, device number 35 [ 919.805674][T14017] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1958'. [ 919.823647][T14017] Unsupported ieee802154 address type: 0 [ 919.872815][T14017] hsr0: entered allmulticast mode [ 919.872837][T14017] hsr_slave_0: entered allmulticast mode [ 919.872864][T14017] hsr_slave_1: entered allmulticast mode [ 920.157990][T12007] usb 1-1: USB disconnect, device number 86 [ 920.715301][ T5718] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 920.819990][T12007] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 920.877303][ T5718] usb 4-1: Using ep0 maxpacket: 8 [ 920.881282][ T5718] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 920.881336][ T5718] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 920.881354][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.885217][ T5718] usb 4-1: config 0 descriptor?? [ 920.934236][ T5718] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 920.962845][T12007] usb 9-1: Using ep0 maxpacket: 8 [ 920.978694][T12007] usb 9-1: unable to get BOS descriptor or descriptor too short [ 920.978764][T12007] usb 9-1: too many configurations: 65, using maximum allowed: 8 [ 920.979997][T12007] usb 9-1: config 0 has no interfaces? [ 920.981158][T12007] usb 9-1: config 0 has no interfaces? [ 920.990631][T12007] usb 9-1: config 0 has no interfaces? [ 921.054837][T12007] usb 9-1: config 0 has no interfaces? [ 921.056155][T12007] usb 9-1: config 0 has no interfaces? [ 921.169415][ T5718] gspca_vc032x: reg_r err -71 [ 921.169499][ T5718] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 921.195383][ T5718] usb 4-1: USB disconnect, device number 77 [ 921.331548][T12007] usb 9-1: config 0 has no interfaces? [ 921.332774][T12007] usb 9-1: config 0 has no interfaces? [ 921.337597][T12007] usb 9-1: config 0 has no interfaces? [ 921.346998][T12007] usb 9-1: New USB device found, idVendor=12d1, idProduct=8b88, bcdDevice=f3.59 [ 921.347046][T12007] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.347068][T12007] usb 9-1: Product: syz [ 921.347127][T12007] usb 9-1: Manufacturer: syz [ 921.347184][T12007] usb 9-1: SerialNumber: syz [ 921.363921][T12007] usb 9-1: config 0 descriptor?? [ 921.652542][ T5616] usb 9-1: USB disconnect, device number 36 [ 921.817729][T14051] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1968'. [ 922.072125][ T1009] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 922.160542][T14056] input: syz1 as /devices/virtual/input/input56 [ 922.200662][ T1009] usb 1-1: device descriptor read/64, error -71 [ 922.450693][ T1009] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 922.575764][ T1009] usb 1-1: device descriptor read/64, error -71 [ 922.679638][ T1009] usb usb1-port1: attempt power cycle [ 923.038454][T12023] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 923.038647][ T1009] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 923.078538][ T1009] usb 1-1: device descriptor read/8, error -71 [ 923.162925][T12023] usb 4-1: device descriptor read/64, error -71 [ 923.192428][T12007] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 923.192683][ C0] raw-gadget.5 gadget.8: ignoring, device is not running [ 923.304929][ T1009] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 923.329573][ T1009] usb 1-1: device descriptor read/8, error -71 [ 923.343515][T12007] usb 9-1: device descriptor read/64, error -32 [ 923.400196][T12023] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 923.452736][ T1009] usb usb1-port1: unable to enumerate USB device [ 923.491082][ T5626] Bluetooth: hci2: unexpected event for opcode 0x202a [ 923.524258][T12023] usb 4-1: device descriptor read/64, error -71 [ 923.569166][T14082] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1973'. [ 923.571646][T12007] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 923.631060][T12023] usb usb4-port1: attempt power cycle [ 923.857107][T12007] usb 9-1: Using ep0 maxpacket: 32 [ 923.989662][T12007] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 923.989690][T12007] usb 9-1: config 0 has no interface number 0 [ 923.999983][T12023] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 924.020770][T12023] usb 4-1: device descriptor read/8, error -71 [ 924.091042][T12007] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 924.091072][T12007] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.091092][T12007] usb 9-1: Product: syz [ 924.091107][T12007] usb 9-1: Manufacturer: syz [ 924.091122][T12007] usb 9-1: SerialNumber: syz [ 924.100600][T12007] usb 9-1: config 0 descriptor?? [ 924.143944][T12007] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 924.257016][T12023] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 924.286194][T12023] usb 4-1: device descriptor read/8, error -71 [ 924.391030][T12023] usb usb4-port1: unable to enumerate USB device [ 924.487280][T12007] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 924.510458][T12007] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 924.911585][T14090] cgroup2: Unknown parameter 'memor‡' [ 925.121987][ C0] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 925.123596][T12023] usb 9-1: USB disconnect, device number 38 [ 925.141266][T12023] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 925.169320][T12023] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 925.170309][T12023] quatech2 9-1:0.51: device disconnected [ 925.475915][T12007] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 925.618689][T12007] usb 1-1: Using ep0 maxpacket: 16 [ 925.620925][T12007] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 925.620952][T12007] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.649915][T12007] usb 1-1: config 0 descriptor?? [ 925.667271][T12007] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 925.960369][ T1009] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 926.123167][ T1009] usb 4-1: Using ep0 maxpacket: 32 [ 926.126771][ T1009] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 926.126854][ T1009] usb 4-1: config 0 has no interface number 0 [ 926.126897][ T1009] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 926.126923][ T1009] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 926.126947][ T1009] usb 4-1: config 0 interface 85 has no altsetting 0 [ 926.131953][ T1009] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 926.131977][ T1009] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.131991][ T1009] usb 4-1: Product: syz [ 926.132000][ T1009] usb 4-1: Manufacturer: syz [ 926.132047][ T1009] usb 4-1: SerialNumber: syz [ 926.252341][ T1009] usb 4-1: config 0 descriptor?? [ 926.403011][T13471] Bluetooth: (null): Invalid header checksum [ 926.447844][ T1009] appletouch 4-1:0.85: Failed to read mode from device. [ 926.448300][ T1009] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 926.487207][ T9889] Bluetooth: (null): Invalid header checksum [ 926.515045][T12007] gspca_sonixj: reg_r err -71 [ 926.515404][T12007] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 926.541321][T12007] usb 1-1: USB disconnect, device number 91 [ 926.675172][T13472] Bluetooth: (null): Invalid header checksum [ 926.683496][ T1009] usb 4-1: USB disconnect, device number 82 [ 926.695206][ T6640] Bluetooth: (null): Invalid header checksum [ 926.840981][ T5626] Bluetooth: hci2: unexpected event for opcode 0x202a [ 926.918460][T14116] binder: BINDER_SET_CONTEXT_MGR already set [ 926.918475][T14116] binder: 14115:14116 ioctl 4018620d 200000000240 returned -16 [ 927.286463][ T1009] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 927.412676][ T1009] usb 9-1: device descriptor read/64, error -71 [ 927.532339][ T5710] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 927.627573][T12007] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 927.637373][ T1009] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 927.694173][ T5710] usb 1-1: Using ep0 maxpacket: 32 [ 927.700148][ T5710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.700182][ T5710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 927.700208][ T5710] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 927.700236][ T5710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.748593][ T5710] usb 1-1: config 0 descriptor?? [ 927.758344][ T5710] hub 1-1:0.0: USB hub found [ 927.784912][ T1009] usb 9-1: device descriptor read/64, error -71 [ 927.784988][T12007] usb 4-1: Using ep0 maxpacket: 32 [ 927.788924][T12007] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 927.788948][T12007] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 927.788967][T12007] usb 4-1: config 0 has no interface number 0 [ 927.789008][T12007] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 927.865751][T12007] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 927.865793][T12007] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.865818][T12007] usb 4-1: Product: syz [ 927.865835][T12007] usb 4-1: Manufacturer: syz [ 927.865853][T12007] usb 4-1: SerialNumber: syz [ 927.885105][ T1009] usb usb9-port1: attempt power cycle [ 927.914601][T12007] usb 4-1: config 0 descriptor?? [ 927.946599][T12007] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 927.946675][T12007] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 927.983193][ T5710] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 928.128673][T12007] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 928.129248][T12007] usbhid 4-1:0.35: couldn't find an input interrupt endpoint [ 928.173163][T12007] usb 4-1: USB disconnect, device number 83 [ 928.218922][ T1009] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 928.292793][ T1009] usb 9-1: device descriptor read/8, error -71 [ 928.377406][T14129] sg_write: data in/out 458975/8 bytes for SCSI command 0x4e-- guessing data in; [ 928.377406][T14129] program syz.0.1987 not setting count and/or reply_len properly [ 928.418408][ T5710] hid_parser_main: 7 callbacks suppressed [ 928.418431][ T5710] hid-generic 0003:046D:C31C.002D: unknown main item tag 0x0 [ 928.437896][ T5710] hid-generic 0003:046D:C31C.002D: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 928.512999][ T1009] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 928.707820][ T5626] Bluetooth: hci4: command 0x0406 tx timeout [ 928.832117][ T1009] usb 9-1: device descriptor read/8, error -71 [ 928.853391][T14145] xt_cluster: you have exceeded the maximum number of cluster nodes (2621472 > 32) [ 928.935021][ T1009] usb usb9-port1: unable to enumerate USB device [ 929.519246][ T5710] usb 1-1: USB disconnect, device number 92 [ 930.081007][T14173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1993'. [ 930.081031][T14173] openvswitch: netlink: Message has 1 unknown bytes. [ 931.036330][ T5718] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 931.064805][T12007] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 931.213301][T12007] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 931.213333][T12007] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.239166][ T5718] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 931.239192][ T5718] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 931.240694][T12007] usb 1-1: config 0 descriptor?? [ 931.242825][ T5718] usb 9-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 931.242855][ T5718] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.242875][ T5718] usb 9-1: Product: syz [ 931.242890][ T5718] usb 9-1: Manufacturer: syz [ 931.242905][ T5718] usb 9-1: SerialNumber: syz [ 931.358838][T12007] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 931.607281][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.834750][T14222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.842204][T14222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.963981][T14229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.976691][T14229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.151531][T12010] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 932.408204][T14235] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2006'. [ 932.841943][T14235] block nbd0: server does not support multiple connections per device. [ 932.935360][T14235] block nbd0: shutting down sockets [ 933.436625][T12010] usb 1-1: USB disconnect, device number 93 [ 933.636700][ T5718] usb 9-1: 0:1 : does not exist [ 933.636786][ T5718] usb 9-1: unit 9 not found! [ 933.766392][ T5718] usb 9-1: USB disconnect, device number 43 [ 933.821950][T11922] udevd[11922]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 933.933693][ T5628] Bluetooth: hci4: unexpected event for opcode 0x202a [ 934.142488][T14262] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20001 [ 934.218378][T14265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.218945][T14265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.425677][ T5718] usb 9-1: new full-speed USB device number 44 using dummy_hcd [ 934.463705][T12010] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 934.579969][ T5718] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 934.580018][ T5718] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 934.581496][ T5718] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 934.581530][ T5718] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 934.581546][ T5718] usb 9-1: SerialNumber: syz [ 934.656682][T12010] usb 1-1: Using ep0 maxpacket: 16 [ 934.659884][ T5718] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 934.660727][ T5718] usb-storage 9-1:1.0: USB Mass Storage device detected [ 934.662745][T12010] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 934.662775][T12010] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 934.662842][T12010] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 36816, setting to 1024 [ 934.662869][T12010] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 934.662892][T12010] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 934.662915][T12010] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 934.771949][T12010] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 934.771978][T12010] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.771999][T12010] usb 1-1: Product: syz [ 934.772014][T12010] usb 1-1: Manufacturer: syz [ 934.772029][T12010] usb 1-1: SerialNumber: syz [ 934.847154][T12010] usb 1-1: config 0 descriptor?? [ 934.848710][T14264] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 934.849733][ T5718] usb-storage 9-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 934.851592][ T5718] scsi host1: usb-storage 9-1:1.0 [ 934.922020][T12010] mcba_usb 1-1:0.0 can0: couldn't setup read URBs [ 934.922047][T12010] mcba_usb 1-1:0.0 can0: couldn't start device: -90 [ 935.021835][T12010] mcba_usb 1-1:0.0: probe with driver mcba_usb failed with error -90 [ 935.047166][ T5718] usb 1-1: USB disconnect, device number 94 [ 936.107053][ T5710] usb 9-1: USB disconnect, device number 44 [ 936.232571][T12010] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 936.474773][T12010] usb 4-1: unable to get BOS descriptor or descriptor too short [ 936.475389][T12010] usb 4-1: not running at top speed; connect to a high speed hub [ 936.476587][T12010] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 936.476611][T12010] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 936.479880][T12010] usb 4-1: string descriptor 0 read error: -22 [ 936.480014][T12010] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=b2.86 [ 936.480040][T12010] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.609198][ T5717] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 936.778149][ T5717] usb 1-1: Using ep0 maxpacket: 32 [ 936.789067][ T5717] usb 1-1: config index 0 descriptor too short (expected 1042, got 18) [ 936.789093][ T5717] usb 1-1: config 2 has too many interfaces: 249, using maximum allowed: 32 [ 936.789114][ T5717] usb 1-1: config 2 has 1 interface, different from the descriptor's value: 249 [ 936.789160][ T5717] usb 1-1: config 2 interface 0 has no altsetting 0 [ 936.789207][ T5717] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 936.789232][ T5717] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.866272][T12010] snd-usb-6fire 4-1:2.0: unknown device firmware state received from device: [ 936.866293][T12010] 23 ad 01 c0 cd a8 9d bf [ 936.866457][T12010] snd-usb-6fire 4-1:2.0: probe with driver snd-usb-6fire failed with error -5 [ 936.900581][ T5717] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 937.004601][T14274] tmpfs: Bad value for 'mpol' [ 937.017476][ T5710] usb 4-1: USB disconnect, device number 85 [ 937.258096][ T5717] videodev: could not get a free minor [ 937.258109][ T5717] gspca_main: video_register_device err -23 [ 937.258217][ T5717] nw80x 1-1:2.0: probe with driver nw80x failed with error -23 [ 937.258860][ T5717] usbhid 1-1:2.0: couldn't find an input interrupt endpoint [ 937.368031][ T5616] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 937.454497][ T5717] usb 1-1: USB disconnect, device number 95 [ 937.555914][ T5616] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 937.555976][ T5616] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 937.556005][ T5616] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.577225][ T5616] usb 9-1: config 0 descriptor?? [ 937.619440][ T5616] pwc: Askey VC010 type 2 USB webcam detected. [ 937.804849][T14293] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 937.839176][T14294] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(39) [ 937.839203][T14294] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 937.865840][T14294] vhci_hcd vhci_hcd.0: Device attached [ 938.020536][ T5616] pwc: recv_control_msg error -32 req 02 val 2b00 [ 938.021239][ T5616] pwc: recv_control_msg error -32 req 02 val 2700 [ 938.021875][ T5616] pwc: recv_control_msg error -32 req 02 val 2c00 [ 938.022696][ T5616] pwc: recv_control_msg error -32 req 04 val 1000 [ 938.023305][ T5616] pwc: recv_control_msg error -32 req 04 val 1300 [ 938.024017][ T5616] pwc: recv_control_msg error -32 req 04 val 1400 [ 938.026042][ T5616] pwc: recv_control_msg error -32 req 02 val 2000 [ 938.030475][ T5616] pwc: recv_control_msg error -32 req 02 val 2100 [ 938.091188][T12012] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 938.490490][T14296] vhci_hcd: connection reset by peer [ 938.507187][ T6645] vhci_hcd vhci_hcd.3: stop threads [ 938.507207][ T6645] vhci_hcd vhci_hcd.3: release socket [ 938.513474][ T6645] vhci_hcd vhci_hcd.3: disconnect device [ 938.581735][T14305] binder: 14304:14305 ioctl c0306201 2000000001c0 returned -14 [ 939.669364][ T5616] pwc: recv_control_msg error -71 req 02 val 2500 [ 939.670013][ T5616] pwc: recv_control_msg error -71 req 02 val 2400 [ 939.670618][ T5616] pwc: recv_control_msg error -71 req 02 val 2600 [ 939.671099][ T5616] pwc: recv_control_msg error -71 req 02 val 2900 [ 939.673074][ T5616] pwc: recv_control_msg error -71 req 02 val 2800 [ 939.674217][ T5616] pwc: recv_control_msg error -71 req 04 val 1100 [ 939.675078][ T5616] pwc: recv_control_msg error -71 req 04 val 1200 [ 939.675652][ T5616] videodev: could not get a free minor [ 939.675681][ T5616] pwc: Failed to register as video device (-23). [ 939.679500][ T5616] Philips webcam 9-1:0.0: probe with driver Philips webcam failed with error -23 [ 939.717579][ T5616] usb 9-1: USB disconnect, device number 45 [ 940.071628][T12010] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 940.216000][T12010] usb 4-1: Using ep0 maxpacket: 32 [ 940.218384][T12010] usb 4-1: config 127 has an invalid interface number: 167 but max is 0 [ 940.218411][T12010] usb 4-1: config 127 has no interface number 0 [ 940.218453][T12010] usb 4-1: config 127 interface 167 altsetting 13 bulk endpoint 0x9 has invalid maxpacket 64 [ 940.218481][T12010] usb 4-1: config 127 interface 167 has no altsetting 0 [ 940.220997][T12010] usb 4-1: New USB device found, idVendor=12d1, idProduct=1464, bcdDevice=b7.17 [ 940.221024][T12010] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.221044][T12010] usb 4-1: Product: syz [ 940.221058][T12010] usb 4-1: Manufacturer: syz [ 940.221076][T12010] usb 4-1: SerialNumber: syz [ 940.312791][T12023] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 940.317262][T14319] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 940.366836][ T5616] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 940.452370][T12023] usb 9-1: Using ep0 maxpacket: 8 [ 940.454147][T12023] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 940.454175][T12023] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 940.454250][T12023] usb 9-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 940.454266][T12023] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.460266][T12023] usb 9-1: config 0 descriptor?? [ 940.532932][T12010] option 4-1:127.167: GSM modem (1-port) converter detected [ 940.559674][T12010] usb 4-1: USB disconnect, device number 86 [ 940.579557][ T5616] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 940.579588][ T5616] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.604982][T12010] option 4-1:127.167: device disconnected [ 940.627046][ T5616] usb 1-1: config 0 descriptor?? [ 940.672883][ T5616] cp210x 1-1:0.0: cp210x converter detected [ 940.822359][ T5616] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 940.822390][ T5616] cp210x 1-1:0.0: querying part number failed [ 940.843618][ T5616] usb 1-1: cp210x converter now attached to ttyUSB0 [ 940.863204][T14330] Unsupported ieee802154 address type: 0 [ 940.933899][T12023] hid-picolcd 0003:04D8:C002.002E: unknown main item tag 0x3 [ 940.933935][T12023] hid-picolcd 0003:04D8:C002.002E: unexpected long global item [ 940.934688][T12023] hid-picolcd 0003:04D8:C002.002E: device report parse failed [ 940.934794][T12023] hid-picolcd 0003:04D8:C002.002E: probe with driver hid-picolcd failed with error -22 [ 941.278938][T12023] usb 9-1: USB disconnect, device number 46 [ 941.433061][T12010] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 941.575975][T12010] usb 4-1: Using ep0 maxpacket: 16 [ 941.581421][T12010] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 941.581459][T12010] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.581477][T12010] usb 4-1: Product: syz [ 941.581494][T12010] usb 4-1: Manufacturer: syz [ 941.581504][T12010] usb 4-1: SerialNumber: syz [ 941.597773][T12010] usb 4-1: config 0 descriptor?? [ 942.121756][ T5628] Bluetooth: hci4: unexpected event for opcode 0x202a [ 942.192996][T14343] 9p: Bad value for 'rfdno' [ 942.526326][T14349] kvm: kvm [14348]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x2000000 [ 942.526848][T14349] netlink: 'syz.6.2041': attribute type 29 has an invalid length. [ 942.526864][T14349] netlink: 'syz.6.2041': attribute type 3 has an invalid length. [ 942.526877][T14349] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2041'. [ 942.574724][ T5717] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 942.823080][ T5717] usb 9-1: Using ep0 maxpacket: 16 [ 942.826636][ T5717] usb 9-1: config 251 has an invalid interface number: 202 but max is 0 [ 942.826664][ T5717] usb 9-1: config 251 has no interface number 0 [ 942.826709][ T5717] usb 9-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 942.826735][ T5717] usb 9-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 942.826759][ T5717] usb 9-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 942.826784][ T5717] usb 9-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 942.826815][ T5717] usb 9-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 942.826850][ T5717] usb 9-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 0 [ 942.826962][ T5717] usb 9-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 942.826990][ T5717] usb 9-1: config 251 interface 202 has no altsetting 0 [ 942.829760][ T5717] usb 9-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 942.829790][ T5717] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 942.829813][ T5717] usb 9-1: Product: syz [ 942.829829][ T5717] usb 9-1: SerialNumber: syz [ 943.057903][T14347] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 943.095696][T12012] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 943.396827][ T1009] usb 1-1: USB disconnect, device number 96 [ 943.397315][ T5717] cxacru 9-1:251.202: submit of read urb for cm 0x90 failed (-90) [ 943.397342][ T5717] cxacru 9-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 943.397593][ T5717] cxacru 9-1:251.202: probe with driver cxacru failed with error -22 [ 943.467548][ T5717] usb 9-1: USB disconnect, device number 47 [ 943.510169][ T1009] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 943.513006][ T1009] cp210x 1-1:0.0: device disconnected [ 943.994453][ T5717] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 944.047452][T12010] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 944.090014][T12010] usb 4-1: USB disconnect, device number 87 [ 944.137641][ T5717] usb 1-1: Using ep0 maxpacket: 16 [ 944.141161][ T5717] usb 1-1: config 0 interface 0 altsetting 44 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 944.141190][ T5717] usb 1-1: config 0 interface 0 altsetting 44 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 944.141216][ T5717] usb 1-1: config 0 interface 0 altsetting 44 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 944.141243][ T5717] usb 1-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 944.141269][ T5717] usb 1-1: config 0 interface 0 has no altsetting 0 [ 944.143556][ T5717] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 944.143582][ T5717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.143602][ T5717] usb 1-1: Product: syz [ 944.143620][ T5717] usb 1-1: Manufacturer: syz [ 944.143634][ T5717] usb 1-1: SerialNumber: syz [ 944.242390][ T5717] usb 1-1: config 0 descriptor?? [ 944.243441][T14353] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 944.251298][ T5717] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input58 [ 944.326931][ C1] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 944.586519][ C1] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 945.123131][T14361] binder_alloc: 14360: binder_alloc_buf, no vma [ 945.125202][T14363] binder_alloc: 14360: binder_alloc_buf, no vma [ 945.125895][T14362] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2045'. [ 945.541700][ T5616] usb 1-1: USB disconnect, device number 97 [ 945.958531][ T5628] Bluetooth: hci4: unexpected event for opcode 0x202a [ 946.121897][T14374] lo: entered allmulticast mode [ 946.527052][ T1009] usb 9-1: new low-speed USB device number 48 using dummy_hcd [ 946.641377][ T5717] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 946.727739][ T1009] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 946.727769][ T1009] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 946.727821][ T1009] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 946.727850][ T1009] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 946.727898][ T1009] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 946.727922][ T1009] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.808802][ T5717] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 946.808836][ T5717] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 946.808923][ T5717] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 946.830570][ T5717] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 946.830613][ T5717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.830647][ T5717] usb 1-1: Product: syz [ 946.830661][ T5717] usb 1-1: Manufacturer: syz [ 946.830676][ T5717] usb 1-1: SerialNumber: syz [ 946.892441][ T5717] usb 1-1: config 0 descriptor?? [ 946.893639][T14382] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 946.893959][T14382] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 946.897919][ T5717] usb 1-1: ucan: probing device on interface #0 [ 946.932410][T14376] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 946.945842][ T5616] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 946.963604][ T1009] hub 9-1:1.0: bad descriptor, ignoring hub [ 946.963642][ T1009] hub 9-1:1.0: probe with driver hub failed with error -5 [ 946.993110][ T1009] cdc_wdm 9-1:1.0: skipping garbage [ 946.993129][ T1009] cdc_wdm 9-1:1.0: skipping garbage [ 947.004039][ T1009] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 947.117149][ T5616] usb 4-1: Using ep0 maxpacket: 16 [ 947.133978][ T5616] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 947.134012][ T5616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.134034][ T5616] usb 4-1: Product: syz [ 947.134050][ T5616] usb 4-1: Manufacturer: syz [ 947.134119][ T5616] usb 4-1: SerialNumber: syz [ 947.176590][ T5616] usb 4-1: config 0 descriptor?? [ 947.226958][ T5718] IPVS: starting estimator thread 0... [ 947.295599][ T5717] usb 1-1: ucan: device reported invalid tx-fifo size [ 947.295626][ T5717] usb 1-1: ucan: probe failed; try to update the device firmware [ 947.346780][T14388] IPVS: using max 8 ests per chain, 19200 per kthread [ 948.312046][T14376] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 948.432944][ T5717] usb 9-1: USB disconnect, device number 48 [ 948.685204][T12012] usb 1-1: USB disconnect, device number 98 [ 949.542106][ T5616] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 949.568118][ T5616] usb 4-1: USB disconnect, device number 88 [ 949.888099][T12010] usb 9-1: new full-speed USB device number 49 using dummy_hcd [ 950.136595][T12010] usb 9-1: not running at top speed; connect to a high speed hub [ 950.174088][T12010] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 950.174114][T12010] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 950.174158][T12010] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 950.176620][T12010] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1b23, bcdDevice= 0.40 [ 950.176650][T12010] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.176674][T12010] usb 9-1: Product: syz [ 950.176691][T12010] usb 9-1: Manufacturer: syz [ 950.176702][T12010] usb 9-1: SerialNumber: syz [ 950.306798][ T1009] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 950.435749][ T1009] usb 1-1: device descriptor read/64, error -71 [ 950.560476][T14415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2063'. [ 950.661908][ T1009] usb 1-1: new full-speed USB device number 100 using dummy_hcd [ 950.737145][T12010] usb 9-1: USB disconnect, device number 49 [ 950.788873][ T1009] usb 1-1: device descriptor read/64, error -71 [ 950.888938][ T1009] usb usb1-port1: attempt power cycle [ 951.249402][ T1009] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 951.249596][ T5710] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 951.284513][ T1009] usb 1-1: device descriptor read/8, error -71 [ 951.392096][ T5710] usb 4-1: Using ep0 maxpacket: 16 [ 951.400511][ T5710] usb 4-1: unable to get BOS descriptor or descriptor too short [ 951.409540][ T5710] usb 4-1: config 8 has an invalid interface number: 88 but max is 0 [ 951.409566][ T5710] usb 4-1: config 8 has no interface number 0 [ 951.409609][ T5710] usb 4-1: config 8 interface 88 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 951.409635][ T5710] usb 4-1: config 8 interface 88 altsetting 7 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 951.409699][ T5710] usb 4-1: config 8 interface 88 altsetting 7 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 951.409725][ T5710] usb 4-1: config 8 interface 88 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 951.409748][ T5710] usb 4-1: config 8 interface 88 has no altsetting 0 [ 951.480795][ T5710] usb 4-1: New USB device found, idVendor=1286, idProduct=2001, bcdDevice=23.f2 [ 951.480827][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.480849][ T5710] usb 4-1: Product: syz [ 951.480864][ T5710] usb 4-1: Manufacturer: syz [ 951.480880][ T5710] usb 4-1: SerialNumber: syz [ 951.556734][ T1009] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 951.574899][ T1009] usb 1-1: device descriptor read/8, error -71 [ 951.678324][ T1009] usb usb1-port1: unable to enumerate USB device [ 951.748410][ T5710] usb 4-1: USB disconnect, device number 89 [ 951.906917][T12007] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 951.943651][T14429] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 952.049175][T12007] usb 9-1: Using ep0 maxpacket: 8 [ 952.050958][T12007] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 952.051013][T12007] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 952.051030][T12007] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 952.051047][T12007] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 952.051064][T12007] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 952.051104][T12007] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 952.051119][T12007] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.344305][T14431] sg_write: data in/out 217088/136 bytes for SCSI command 0x0-- guessing data in; [ 952.344305][T14431] program syz.3.2068 not setting count and/or reply_len properly [ 952.574956][ T5718] usb 9-1: USB disconnect, device number 50 [ 952.715710][ T5710] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 952.868468][ T5710] usb 4-1: Using ep0 maxpacket: 32 [ 952.871253][ T5710] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 952.872429][ T5710] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 952.872459][ T5710] usb 4-1: config 0 has no interface number 0 [ 952.873561][ T5710] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 952.873584][ T5710] usb 4-1: config 0 has no interface number 0 [ 952.874682][ T5710] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 952.874706][ T5710] usb 4-1: config 0 has no interface number 0 [ 952.875870][ T5710] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 952.875896][ T5710] usb 4-1: config 0 has no interface number 0 [ 952.877036][ T5710] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 952.877061][ T5710] usb 4-1: config 0 has no interface number 0 [ 952.893584][ T5710] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 952.893601][ T5710] usb 4-1: config 0 has no interface number 0 [ 952.922900][ T5710] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 952.922925][ T5710] usb 4-1: config 0 has no interface number 0 [ 952.954337][ T5710] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 952.954362][ T5710] usb 4-1: config 0 has no interface number 0 [ 953.010649][ T5710] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 953.010682][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.010706][ T5710] usb 4-1: Product: syz [ 953.010723][ T5710] usb 4-1: Manufacturer: syz [ 953.010740][ T5710] usb 4-1: SerialNumber: syz [ 953.052844][ T5710] usb 4-1: config 0 descriptor?? [ 953.066817][ T5710] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 953.150497][T14436] pim6reg: entered allmulticast mode [ 953.269322][ T5710] etas_es58x 4-1:0.2: could not parse product info: '' [ 953.411636][T14444] pim6reg: left allmulticast mode [ 953.480599][T14434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.481072][T14434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.485911][T14434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.735464][T14434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.782610][ C1] etas_es58x 4-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 954.782866][ C1] etas_es58x 4-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 954.782918][ C1] etas_es58x 4-1:0.2: es58x_split_urb() returned error -EBADMSG [ 954.783502][ T5269] etas_es58x 4-1:0.2 can0: bit-timing not yet defined [ 954.988453][ C1] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 954.988549][ C1] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 954.988627][ C1] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 954.988702][ C1] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 954.988778][ C1] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 954.988861][ C1] etas_es58x 4-1:0.2 can0: es58x_write_bulk_callback: error -EPROTO [ 955.068170][ T5269] etas_es58x 4-1:0.2 can0: es58x_open: Could not open the network device: -EINVAL [ 955.091278][ T5710] usb 4-1: USB disconnect, device number 90 [ 955.106292][ T5710] etas_es58x 4-1:0.2: Disconnecting syz syz [ 955.305511][T12012] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 955.391043][ T5718] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 955.450199][T12012] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 955.450233][T12012] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 955.450268][T12012] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 955.450291][T12012] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.461606][T12012] usb 1-1: config 0 descriptor?? [ 955.692037][ T5718] usb 9-1: config index 0 descriptor too short (expected 65183, got 72) [ 955.707906][ T5718] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 955.707935][ T5718] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.707956][ T5718] usb 9-1: Product: syz [ 955.707970][ T5718] usb 9-1: Manufacturer: syz [ 955.707983][ T5718] usb 9-1: SerialNumber: syz [ 956.139368][T14488] netlink: 'syz.0.2075': attribute type 10 has an invalid length. [ 956.151769][T14488] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.317964][T14488] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.439125][T14488] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.439336][T14488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 956.465022][T14488] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.465377][T14488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 956.622194][ T5718] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 956.625171][T14488] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 956.718733][ T5710] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 957.158717][T12012] usbhid 1-1:0.0: can't add hid device: -71 [ 957.158829][T12012] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 957.194410][T12012] usb 1-1: USB disconnect, device number 103 [ 957.322328][T14472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 957.323440][T14472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 957.351060][T14472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 957.370827][T14472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 957.378608][T14472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 957.390662][T14472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 957.392448][T12023] usb 9-1: USB disconnect, device number 51 [ 957.622987][T14510] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2081'. [ 957.659613][T14510] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 957.783189][ T5710] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 957.847598][ T5710] ath9k_htc: Failed to initialize the device [ 957.850111][T12023] usb 9-1: ath9k_htc: USB layer deinitialized [ 957.891998][T14519] netlink: 'syz.6.2084': attribute type 1 has an invalid length. [ 957.892021][T14519] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2084'. [ 957.931432][T14517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2083'. [ 958.199865][ T5718] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 958.336047][T12023] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 958.360372][ T5718] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 958.360424][ T5718] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 958.360448][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.406824][ T5718] usb 4-1: config 0 descriptor?? [ 958.418196][ T5718] pwc: Askey VC010 type 2 USB webcam detected. [ 958.488407][T12023] usb 9-1: Using ep0 maxpacket: 32 [ 958.744367][T12023] usb 9-1: config index 0 descriptor too short (expected 241, got 72) [ 958.744424][T12023] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 958.744473][T12023] usb 9-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 958.744499][T12023] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.767658][T12023] usb 9-1: config 0 descriptor?? [ 958.807934][ T5718] pwc: recv_control_msg error -32 req 02 val 2b00 [ 958.815572][ T5718] pwc: recv_control_msg error -32 req 02 val 2700 [ 958.816714][ T5718] pwc: recv_control_msg error -32 req 02 val 2c00 [ 958.817675][ T5718] pwc: recv_control_msg error -32 req 04 val 1000 [ 958.831914][ T5718] pwc: recv_control_msg error -32 req 04 val 1300 [ 958.846579][ T5718] pwc: recv_control_msg error -32 req 04 val 1400 [ 958.878573][ T5718] pwc: recv_control_msg error -32 req 02 val 2000 [ 959.149055][T14544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.164747][T14544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.222145][ T5718] pwc: recv_control_msg error -71 req 04 val 1500 [ 959.222649][ T5718] pwc: recv_control_msg error -71 req 02 val 2500 [ 959.223228][ T5718] pwc: recv_control_msg error -71 req 02 val 2400 [ 959.225203][ T5718] pwc: recv_control_msg error -71 req 02 val 2600 [ 959.225721][ T5718] pwc: recv_control_msg error -71 req 02 val 2900 [ 959.260339][ T5718] pwc: recv_control_msg error -71 req 02 val 2800 [ 959.261078][ T5718] pwc: recv_control_msg error -71 req 04 val 1100 [ 959.261591][ T5718] pwc: recv_control_msg error -71 req 04 val 1200 [ 959.261691][ T5718] videodev: could not get a free minor [ 959.261700][ T5718] pwc: Failed to register as video device (-23). [ 959.263752][ T5718] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -23 [ 959.311640][ T5718] usb 4-1: USB disconnect, device number 91 [ 959.354745][T12023] usb 9-1: can't set config #0, error -71 [ 959.429496][T12023] usb 9-1: USB disconnect, device number 52 [ 959.945686][T14570] netlink: 'syz.3.2093': attribute type 5 has an invalid length. [ 959.945711][T14570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2093'. [ 959.945732][T14570] netlink: 'syz.3.2093': attribute type 1 has an invalid length. [ 959.989878][ T5718] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 960.133159][ T5718] usb 1-1: Using ep0 maxpacket: 32 [ 960.134095][ T5718] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 960.135552][ T5718] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 960.135578][ T5718] usb 1-1: config 0 has no interface number 0 [ 960.135628][ T5718] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 960.135653][ T5718] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 960.137004][ T5718] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 960.137028][ T5718] usb 1-1: config 0 has no interface number 0 [ 960.137090][ T5718] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 960.137116][ T5718] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 960.140710][ T5718] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 960.140733][ T5718] usb 1-1: config 0 has no interface number 0 [ 960.140774][ T5718] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 960.140796][ T5718] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 960.263551][ T5718] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 960.263569][ T5718] usb 1-1: config 0 has no interface number 0 [ 960.263599][ T5718] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 960.263614][ T5718] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 960.265349][ T5718] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 960.265377][ T5718] usb 1-1: config 0 has no interface number 0 [ 960.265427][ T5718] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 960.265453][ T5718] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 960.281953][ T5718] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 960.281988][ T5718] usb 1-1: config 0 has no interface number 0 [ 960.282035][ T5718] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 960.282058][ T5718] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 960.320834][ T1009] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 960.349841][ T5718] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 960.349872][ T5718] usb 1-1: config 0 has no interface number 0 [ 960.349923][ T5718] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 960.349948][ T5718] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 960.398300][ T5718] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 960.398328][ T5718] usb 1-1: config 0 has no interface number 0 [ 960.398374][ T5718] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 960.398397][ T5718] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 960.471249][ T1009] usb 4-1: device descriptor read/64, error -71 [ 960.481775][ T5718] usb 1-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 960.481824][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.481847][ T5718] usb 1-1: Product: syz [ 960.481865][ T5718] usb 1-1: Manufacturer: syz [ 960.481882][ T5718] usb 1-1: SerialNumber: syz [ 960.524800][ T5718] usb 1-1: config 0 descriptor?? [ 960.531723][ T5718] etas_es58x 1-1:0.2: Starting syz syz (Serial Number syz) [ 960.726123][ T5718] etas_es58x 1-1:0.2: could not parse product info: '' [ 960.744024][ T1009] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 960.804278][T14587] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2096'. [ 960.866304][ T1009] usb 4-1: device descriptor read/64, error -71 [ 960.919716][T12012] usb 1-1: USB disconnect, device number 104 [ 960.934113][T12012] etas_es58x 1-1:0.2: Disconnecting syz syz [ 960.973149][ T1009] usb usb4-port1: attempt power cycle [ 961.043268][T14591] IPv6: NLM_F_CREATE should be specified when creating new route [ 961.367886][ T1009] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 961.383222][ T1009] usb 4-1: device descriptor read/8, error -71 [ 961.427486][T12010] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 961.571634][T12010] usb 9-1: Using ep0 maxpacket: 8 [ 961.585532][T12010] usb 9-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 961.585566][T12010] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 961.585582][T12010] usb 9-1: Product: syz [ 961.585594][T12010] usb 9-1: Manufacturer: syz [ 961.585605][T12010] usb 9-1: SerialNumber: syz [ 961.616853][ T1009] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 961.630163][T12010] usb 9-1: config 0 descriptor?? [ 961.630415][ T1009] usb 4-1: device descriptor read/8, error -71 [ 961.686021][T12010] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 961.734881][ T1009] usb usb4-port1: unable to enumerate USB device [ 962.235740][T12010] gspca_sn9c2028: read1 error -71 [ 962.237668][T12010] gspca_sn9c2028: read1 error -71 [ 962.237746][T12010] sn9c2028 9-1:0.0: probe with driver sn9c2028 failed with error -71 [ 962.252807][T12010] usb 9-1: USB disconnect, device number 53 [ 962.397537][T14611] binder: 14610:14611 ioctl c0306201 200000000280 returned -14 [ 962.913023][ T5710] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 963.055728][ T5710] usb 1-1: Using ep0 maxpacket: 32 [ 963.060089][ T5710] usb 1-1: unable to get BOS descriptor or descriptor too short [ 963.074124][ T5710] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 963.089801][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.089828][ T5710] usb 1-1: Product: syz [ 963.089843][ T5710] usb 1-1: Manufacturer: syz [ 963.089859][ T5710] usb 1-1: SerialNumber: syz [ 963.327709][T14640] bond0: (slave erspan0): Opening slave failed [ 963.336588][T12012] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 963.359773][ T5710] usb 1-1: 1:1 : format type 0 is detected, processed as PCM [ 963.359799][ T5710] usb 1-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 963.359823][ T5710] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 963.382428][ T5710] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 963.448757][ T5710] usb 1-1: USB disconnect, device number 105 [ 963.524379][T12012] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 963.524432][T12012] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 963.524458][T12012] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 963.527712][T12012] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 963.527755][T12012] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 963.527776][T12012] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.538984][T12012] usb 4-1: config 0 descriptor?? [ 963.629217][T11922] udevd[11922]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 963.943438][T12012] plantronics 0003:047F:FFFF.002F: reserved main item tag 0xd [ 963.978173][T12012] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 964.196661][T14633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 964.206460][T14633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 964.218142][T14633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 964.218818][T14633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 964.285382][ T5628] Bluetooth: hci5: unexpected event 0x01 length: 4 > 1 [ 964.910609][T14659] comedi: No check for data length of config insn id 1601400420 is implemented [ 964.910624][T14659] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 964.910681][T14659] comedi: Assuming n=86 is correct [ 965.169812][ T5628] Bluetooth: hci2: command 0x0c1a tx timeout [ 965.246952][ T5718] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 965.407283][ T5718] usb 1-1: Using ep0 maxpacket: 32 [ 965.430247][ T5718] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 965.430279][ T5718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.456265][ T5718] usb 1-1: config 0 descriptor?? [ 965.489419][ T5718] gspca_main: sunplus-2.14.0 probing 041e:400b [ 965.616619][T12010] usb 4-1: reset high-speed USB device number 96 using dummy_hcd [ 965.720116][ T5718] gspca_sunplus: reg_w_riv err -71 [ 965.720206][ T5718] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 965.737619][ T5718] usb 1-1: USB disconnect, device number 106 [ 966.292611][T14668] ubi31: attaching mtd0 [ 966.292634][T14668] ubi31 error: ubi_attach_mtd_dev: bad VID header (16384) or data offsets (16448) [ 966.823339][T14679] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2124'. [ 966.825575][T14679] netlink: 'syz.3.2124': attribute type 3 has an invalid length. [ 966.868980][ T38] audit: type=1107 audit(2000001265.744:460): pid=14680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ˆÍ, IŠ®H±o8½=‡€ˆjm–duq)' [ 967.349586][ T5718] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 967.416564][T12012] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 967.502086][ T5718] usb 9-1: Using ep0 maxpacket: 32 [ 967.506830][ T5718] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 967.506855][ T5718] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 967.506874][ T5718] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 967.506895][ T5718] usb 9-1: config 1 has no interface number 0 [ 967.506931][ T5718] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 48, changing to 9 [ 967.506953][ T5718] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 8196, setting to 1024 [ 967.506978][ T5718] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 967.507013][ T5718] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 967.507051][ T5718] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.656546][ T5718] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 967.665407][T12012] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 967.665440][T12012] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.665465][T12012] usb 1-1: Product: syz [ 967.665527][T12012] usb 1-1: Manufacturer: syz [ 967.665577][T12012] usb 1-1: SerialNumber: syz [ 967.719073][T12012] usb 1-1: config 0 descriptor?? [ 967.746824][T12012] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 967.831107][ T1009] usb 4-1: USB disconnect, device number 96 [ 967.886158][T14692] input: syz0 as /devices/virtual/input/input60 [ 967.972343][T14697] netlink: 116 bytes leftover after parsing attributes in process `syz.8.2126'. [ 968.041841][ T5628] Bluetooth: hci2: unexpected event for opcode 0x202a [ 968.122697][T14698] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 968.179176][ T5718] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached [ 968.301400][ T1009] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 968.323532][T14698] syz.8.2126: vmalloc error: size 35184372088960, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 968.330829][T14698] CPU: 1 UID: 0 PID: 14698 Comm: syz.8.2126 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 968.330861][T14698] Tainted: [L]=SOFTLOCKUP [ 968.330870][T14698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 968.330884][T14698] Call Trace: [ 968.330893][T14698] [ 968.330903][T14698] dump_stack_lvl+0xe8/0x150 [ 968.330941][T14698] warn_alloc+0x24c/0x270 [ 968.330976][T14698] ? __pfx_warn_alloc+0x10/0x10 [ 968.331024][T14698] __vmalloc_node_range_noprof+0x132/0x1750 [ 968.331061][T14698] ? kasan_quarantine_put+0xbb/0x1f0 [ 968.331105][T14698] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 968.331139][T14698] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 968.331183][T14698] ? lockdep_hardirqs_on+0x7a/0x110 [ 968.331231][T14698] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 968.331348][T14698] vmalloc_noprof+0xb2/0xe0 [ 968.331372][T14698] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 968.331402][T14698] dvb_dvr_do_ioctl+0x12e/0x220 [ 968.331437][T14698] dvb_usercopy+0x199/0x2e0 [ 968.331462][T14698] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 968.331490][T14698] ? __pfx_dvb_usercopy+0x10/0x10 [ 968.331525][T14698] ? __fget_files+0x3a6/0x420 [ 968.331548][T14698] ? __fget_files+0x2a/0x420 [ 968.331575][T14698] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 968.331604][T14698] dvb_dvr_ioctl+0x29/0x40 [ 968.331632][T14698] __se_sys_ioctl+0xff/0x170 [ 968.331662][T14698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.331685][T14698] do_syscall_64+0x174/0x580 [ 968.331718][T14698] ? clear_bhb_loop+0x40/0x90 [ 968.331744][T14698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.331766][T14698] RIP: 0033:0x7f972dbcce59 [ 968.331785][T14698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 968.331804][T14698] RSP: 002b:00007f972bde4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 968.331826][T14698] RAX: ffffffffffffffda RBX: 00007f972de46180 RCX: 00007f972dbcce59 [ 968.331842][T14698] RDX: 0000200000000080 RSI: 0000000000006f2d RDI: 0000000000000011 [ 968.331856][T14698] RBP: 00007f972dc62d6f R08: 0000000000000000 R09: 0000000000000000 [ 968.331871][T14698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 968.331884][T14698] R13: 00007f972de46218 R14: 00007f972de46180 R15: 00007fffffe7c098 [ 968.331916][T14698] [ 968.332137][T14698] Mem-Info: [ 968.332152][T14698] active_anon:12596 inactive_anon:0 isolated_anon:0 [ 968.332152][T14698] active_file:0 inactive_file:55315 isolated_file:0 [ 968.332152][T14698] unevictable:768 dirty:67 writeback:0 [ 968.332152][T14698] slab_reclaimable:12977 slab_unreclaimable:113661 [ 968.332152][T14698] mapped:46149 shmem:4186 pagetables:1992 [ 968.332152][T14698] sec_pagetables:0 bounce:0 [ 968.332152][T14698] kernel_misc_reclaimable:0 [ 968.332152][T14698] free:1256792 free_pcp:2029 free_cma:0 [ 968.332222][T14698] Node 0 active_anon:50384kB inactive_anon:0kB active_file:0kB inactive_file:221064kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:184596kB dirty:268kB writeback:0kB shmem:15208kB kernel_stack:15896kB pagetables:7800kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 968.332329][T14698] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 968.332379][T14698] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 968.332564][T14698] lowmem_reserve[]: 0 2492 2492 2492 2492 [ 968.332654][T14698] Node 0 DMA32 free:1069172kB boost:0kB min:3912kB low:6436kB high:8960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:50384kB inactive_anon:0kB active_file:0kB inactive_file:221064kB unevictable:1536kB writepending:268kB zspages:0kB present:3129332kB managed:2551952kB mlocked:0kB bounce:0kB free_pcp:8108kB local_pcp:3056kB free_cma:0kB [ 968.332719][T14698] lowmem_reserve[]: 0 0 0 0 0 [ 968.332805][T14698] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:856kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 968.332863][T14698] lowmem_reserve[]: 0 0 0 0 0 [ 968.332968][T14698] Node 1 Normal free:3942636kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 968.333036][T14698] lowmem_reserve[]: 0 0 0 0 0 [ 968.333169][T14698] Node 0 DMA: [ 968.462202][ T1009] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 968.462279][ T1009] usb 4-1: config 0 has an invalid interface number: 3 but max is 2 [ 968.462397][ T1009] usb 4-1: config 0 has no interface number 0 [ 968.462455][ T1009] usb 4-1: config 0 has no interface number 1 [ 968.463222][ T1009] usb 4-1: too many endpoints for config 0 interface 3 altsetting 255: 255, using maximum allowed: 30 [ 968.463493][ T1009] usb 4-1: config 0 interface 3 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 968.463527][ T1009] usb 4-1: config 0 interface 3 has no altsetting 0 [ 968.463690][ T1009] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 968.463763][ T1009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.941667][ T1009] usb 4-1: config 0 descriptor?? [ 969.031237][T12012] gspca_ov534_9: reg_w failed -71 [ 969.091507][T14698] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 969.094095][T14698] Node 0 DMA32: 1461*4kB (UME) 597*8kB (UME) 276*16kB (UM) 719*32kB (UME) 824*64kB (UM) 269*128kB (UME) 68*256kB (UM) 34*512kB (UM) 15*1024kB (UM) 6*2048kB (UM) 215*4096kB (UM) = 1068316kB [ 969.094348][T14698] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 969.094513][T14698] Node 1 Normal: 3*4kB (UM) 8*8kB (UM) 6*16kB (UM) 6*32kB (UM) 8*64kB (UM) 5*128kB (UM) 3*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 2*2048kB (UM) 960*4096kB (M) = 3942636kB [ 969.094715][T14698] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 969.094844][T14698] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 969.094867][T14698] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 969.094879][T14698] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 969.094891][T14698] 59496 total pagecache pages [ 969.096753][T14698] 0 pages in swap cache [ 969.096766][T14698] Free swap = 124996kB [ 969.096773][T14698] Total swap = 124996kB [ 969.096780][T14698] 2097051 pages RAM [ 969.096786][T14698] 0 pages HighMem/MovableOnly [ 969.096791][T14698] 427235 pages reserved [ 969.096797][T14698] 0 pages cma reserved [ 969.234611][ T5616] snd_usb_pod 9-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 969.273485][T14704] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2127'. [ 969.275378][T14704] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2127'. [ 969.314726][T14704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 969.316768][T14704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 969.318689][ T5628] Bluetooth: hci5: unexpected event 0x3e length: 264 > 260 [ 969.318761][ T5628] Bluetooth: hci5: unexpected subevent 0x0d length: 263 > 260 [ 969.318789][ T5628] Bluetooth: hci5: adv larger than maximum supported [ 969.372228][T12012] gspca_ov534_9: Unknown sensor 0000 [ 969.372396][T12012] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 969.414303][T12012] usb 1-1: USB disconnect, device number 107 [ 969.653374][ T1009] usb 4-1: Could not set interface, error -71 [ 969.780600][ T1009] usb 4-1: selecting invalid altsetting 0 [ 969.780625][ T1009] usb 4-1: Could not set interface, error -22 [ 969.803486][ T1009] usb 4-1: USB disconnect, device number 97 [ 969.853154][T14706] netlink: 'syz.0.2132': attribute type 11 has an invalid length. [ 970.002457][T12012] usb 9-1: USB disconnect, device number 55 [ 970.009460][T12012] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 970.494810][T14713] netlink: 'syz.0.2134': attribute type 1 has an invalid length. [ 970.688260][T14723] comedi comedi3: comedi_config --init_data is deprecated [ 971.482546][ T5616] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 971.654443][ T5616] usb 9-1: Using ep0 maxpacket: 16 [ 971.688873][ T5616] usb 9-1: config 0 has an invalid interface number: 132 but max is 0 [ 971.688908][ T5616] usb 9-1: config 0 has no interface number 0 [ 971.707078][ T5616] usb 9-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 971.707101][ T5616] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.707116][ T5616] usb 9-1: Product: syz [ 971.707127][ T5616] usb 9-1: Manufacturer: syz [ 971.707138][ T5616] usb 9-1: SerialNumber: syz [ 971.748085][ T5616] usb 9-1: config 0 descriptor?? [ 971.772730][ T5616] hub 9-1:0.132: bad descriptor, ignoring hub [ 971.772788][ T5616] hub 9-1:0.132: probe with driver hub failed with error -5 [ 971.791127][ T5616] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.132/input/input61 [ 972.206802][ T1009] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 972.381536][ T1009] usb 1-1: Using ep0 maxpacket: 32 [ 972.417534][ T1009] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 972.417560][ T1009] usb 1-1: config 0 has no interface number 0 [ 972.417599][ T1009] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 972.417625][ T1009] usb 1-1: config 0 interface 85 has no altsetting 0 [ 972.423529][ T1009] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 972.423560][ T1009] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.423582][ T1009] usb 1-1: Product: syz [ 972.423597][ T1009] usb 1-1: Manufacturer: syz [ 972.423613][ T1009] usb 1-1: SerialNumber: syz [ 972.509003][ T1009] usb 1-1: config 0 descriptor?? [ 972.908739][T14757] blktrace: Concurrent blktraces are not allowed on nbd3 [ 973.259854][ T1009] appletouch 1-1:0.85: Geyser mode initialized. [ 973.261873][ T5616] usb 4-1: new low-speed USB device number 98 using dummy_hcd [ 973.265057][ T1009] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input62 [ 973.424248][ T5616] usb 4-1: device descriptor read/64, error -71 [ 973.442767][ C0] appletouch 1-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 973.639650][ T5718] usb 1-1: USB disconnect, device number 108 [ 973.677097][ T5616] usb 4-1: new low-speed USB device number 99 using dummy_hcd [ 973.731497][ T5718] appletouch 1-1:0.85: input: appletouch disconnected [ 973.815379][ T5616] usb 4-1: device descriptor read/64, error -71 [ 973.919432][ T5616] usb usb4-port1: attempt power cycle [ 974.242750][ T5616] usb 4-1: new low-speed USB device number 100 using dummy_hcd [ 974.276853][ T5616] usb 4-1: device descriptor read/8, error -71 [ 974.502528][ T5616] usb 4-1: new low-speed USB device number 101 using dummy_hcd [ 974.534862][ T5616] usb 4-1: device descriptor read/8, error -71 [ 974.548056][ T5718] usb 9-1: USB disconnect, device number 56 [ 974.557474][ T5710] usb 1-1: new low-speed USB device number 109 using dummy_hcd [ 974.635052][ T5616] usb usb4-port1: unable to enumerate USB device [ 974.709508][ T5710] usb 1-1: device descriptor read/64, error -71 [ 974.937962][ T5710] usb 1-1: new low-speed USB device number 110 using dummy_hcd [ 975.023545][ T5718] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 975.071716][ T5710] usb 1-1: device descriptor read/64, error -71 [ 975.176100][ T5710] usb usb1-port1: attempt power cycle [ 975.185476][ T5718] usb 9-1: Using ep0 maxpacket: 32 [ 975.188624][ T5718] usb 9-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=52.85 [ 975.188651][ T5718] usb 9-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 975.188671][ T5718] usb 9-1: Manufacturer: syz [ 975.194368][ T5718] usb 9-1: config 0 descriptor?? [ 975.249946][ T5718] usb_8dev 9-1:0.0 can0: sending command message failed [ 975.249968][ T5718] usb_8dev 9-1:0.0 can0: can't get firmware version [ 975.330632][ T5718] usb_8dev 9-1:0.0: probe with driver usb_8dev failed with error -22 [ 975.429297][T12010] usb 9-1: USB disconnect, device number 57 [ 975.500207][ T5710] usb 1-1: new low-speed USB device number 111 using dummy_hcd [ 975.520056][ T5710] usb 1-1: device descriptor read/8, error -71 [ 975.747346][ T5710] usb 1-1: new low-speed USB device number 112 using dummy_hcd [ 975.782411][ T5710] usb 1-1: device descriptor read/8, error -71 [ 975.855203][T14775] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2156'. [ 975.870050][T14775] unsupported nlmsg_type 40 [ 975.885948][ T5710] usb usb1-port1: unable to enumerate USB device [ 976.386636][T14786] ubi31: attaching mtd0 [ 976.386660][T14786] ubi31 error: ubi_attach_mtd_dev: bad VID header (16384) or data offsets (16448) [ 976.750853][ T1009] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 976.841996][ T5710] usb 9-1: new low-speed USB device number 58 using dummy_hcd [ 976.894659][ T1009] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 976.894698][ T1009] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.894714][ T1009] usb 4-1: Product: syz [ 976.894725][ T1009] usb 4-1: Manufacturer: syz [ 976.894736][ T1009] usb 4-1: SerialNumber: syz [ 976.975528][ T5710] usb 9-1: device descriptor read/64, error -71 [ 977.203976][ T5710] usb 9-1: new low-speed USB device number 59 using dummy_hcd [ 977.333912][ T1009] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 977.333974][ T1009] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 977.371506][ T5710] usb 9-1: device descriptor read/64, error -71 [ 977.471397][ T5710] usb usb9-port1: attempt power cycle [ 977.679942][ T5718] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 977.803785][ T5710] usb 9-1: new low-speed USB device number 60 using dummy_hcd [ 977.832382][ T5718] usb 1-1: Using ep0 maxpacket: 32 [ 977.835590][ T5710] usb 9-1: device descriptor read/8, error -71 [ 977.838609][ T5718] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 977.838636][ T5718] usb 1-1: config 0 has no interface number 0 [ 977.841206][ T5718] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 977.841234][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.841255][ T5718] usb 1-1: Product: syz [ 977.841271][ T5718] usb 1-1: Manufacturer: syz [ 977.841286][ T5718] usb 1-1: SerialNumber: syz [ 977.870910][ T5718] usb 1-1: config 0 descriptor?? [ 977.893243][ T5718] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 978.070459][ T5710] usb 9-1: new low-speed USB device number 61 using dummy_hcd [ 978.099136][ T5710] usb 9-1: device descriptor read/8, error -71 [ 978.102660][ T5718] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 978.135727][ T5718] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 978.205669][ T5710] usb usb9-port1: unable to enumerate USB device [ 978.280535][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 13 [ 978.474309][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 978.475044][T12007] usb 1-1: USB disconnect, device number 113 [ 978.521520][ T1009] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 978.525204][T12007] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 978.566019][T12007] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 978.568926][T12007] quatech2 1-1:0.51: device disconnected [ 979.299958][ T1009] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 979.310878][ T1009] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 979.310941][ T1009] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 979.311946][ T1009] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 979.353101][ T1009] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 979.369938][ T1009] usb 4-1: USB disconnect, device number 102 [ 980.359318][ T5697] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 980.440696][T14821] ubi31: attaching mtd0 [ 980.440721][T14821] ubi31 error: ubi_attach_mtd_dev: bad VID header (16384) or data offsets (16448) [ 980.487668][ T5697] usb 4-1: device descriptor read/64, error -71 [ 980.737602][ T5697] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 980.874664][ T5697] usb 4-1: device descriptor read/64, error -71 [ 980.985878][ T5697] usb usb4-port1: attempt power cycle [ 981.343177][T14850] sg_write: data in/out 328671/56 bytes for SCSI command 0x0-- guessing data in; [ 981.343177][T14850] program syz.0.2177 not setting count and/or reply_len properly [ 981.357869][ T5697] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 981.375074][ T5697] usb 4-1: device descriptor read/8, error -71 [ 981.564402][ T5710] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 981.612243][ T5697] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 981.632129][ T5697] usb 4-1: device descriptor read/8, error -71 [ 981.669440][ T5616] usb 1-1: new full-speed USB device number 114 using dummy_hcd [ 981.717022][ T5710] usb 9-1: Using ep0 maxpacket: 16 [ 981.723827][ T5710] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 981.723861][ T5710] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.723877][ T5710] usb 9-1: Product: syz [ 981.723888][ T5710] usb 9-1: Manufacturer: syz [ 981.723899][ T5710] usb 9-1: SerialNumber: syz [ 981.765542][ T5697] usb usb4-port1: unable to enumerate USB device [ 981.834099][ T5616] usb 1-1: unable to get BOS descriptor or descriptor too short [ 981.834693][ T5616] usb 1-1: not running at top speed; connect to a high speed hub [ 981.836824][ T5616] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4 [ 981.837393][ T5616] usb 1-1: language id specifier not provided by device, defaulting to English [ 981.839145][ T5616] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 981.839172][ T5616] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.839191][ T5616] usb 1-1: Product: syz [ 981.839201][ T5616] usb 1-1: Manufacturer: [ 981.839210][ T5616] usb 1-1: SerialNumber: syz [ 982.121016][ T5616] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 982.121367][ T5616] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 982.219544][ T5616] usb 1-1: USB disconnect, device number 114 [ 982.328386][T11246] udevd[11246]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 982.401307][ T5710] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 982.411598][ T5710] usb 9-1: USB disconnect, device number 62 [ 982.737866][T14863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 982.738481][T14863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 982.772765][T14863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 982.791166][T14864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 982.797940][T14863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 982.833990][T14864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 982.956161][T12007] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 983.093146][T14867] ubi31: attaching mtd0 [ 983.093160][T14867] ubi31 error: ubi_attach_mtd_dev: bad VID header (16384) or data offsets (16448) [ 983.099568][T12007] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 983.099599][T12007] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 983.099621][T12007] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 983.099660][T12007] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 983.099684][T12007] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.106526][T12007] usb 9-1: config 0 descriptor?? [ 983.376742][T12007] usbhid 9-1:0.0: can't add hid device: -71 [ 983.376849][T12007] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 983.402319][ T5697] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 983.404244][T12007] usb 9-1: USB disconnect, device number 63 [ 983.563962][ T5697] usb 4-1: Using ep0 maxpacket: 8 [ 983.568114][ T5697] usb 4-1: config index 0 descriptor too short (expected 134, got 36) [ 983.568184][ T5697] usb 4-1: config 1 interface 0 has no altsetting 0 [ 983.571473][ T5697] usb 4-1: string descriptor 0 read error: -22 [ 983.571616][ T5697] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice= 0.40 [ 983.571643][ T5697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.583026][ T5710] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 983.731294][T14876] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2185'. [ 983.750369][ T5710] usb 1-1: Using ep0 maxpacket: 32 [ 983.752773][ T5710] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 983.752800][ T5710] usb 1-1: config 0 has no interface number 0 [ 983.752844][ T5710] usb 1-1: config 0 interface 12 has no altsetting 0 [ 983.762448][ T5710] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 983.762476][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.762498][ T5710] usb 1-1: Product: syz [ 983.762513][ T5710] usb 1-1: Manufacturer: syz [ 983.762529][ T5710] usb 1-1: SerialNumber: syz [ 983.827702][ T5710] usb 1-1: config 0 descriptor?? [ 984.109395][ T5697] apple 0003:05AC:0219.0030: unknown main item tag 0x3 [ 984.109429][ T5697] apple 0003:05AC:0219.0030: invalid report_size 2133616522 [ 984.109446][ T5697] apple 0003:05AC:0219.0030: item 0 4 1 7 parsing failed [ 984.110107][ T5697] apple 0003:05AC:0219.0030: parse failed [ 984.110213][ T5697] apple 0003:05AC:0219.0030: probe with driver apple failed with error -22 [ 984.263693][T14870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.264290][T14870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.275799][ T1009] usb 4-1: USB disconnect, device number 107 [ 984.323894][T14870] Invalid argument reading file caps for ./file0 [ 984.474307][T14886] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2187'. [ 984.476131][T14886] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2187'. [ 984.476653][T14886] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2187'. [ 984.477534][T14886] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2187'. [ 984.484727][T14886] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2187'. [ 984.496301][T14886] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2187'. [ 984.498878][T14886] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2187'. [ 984.501221][T14886] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2187'. [ 984.503230][T14886] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2187'. [ 985.232611][T14899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.233138][T14899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.238764][T14900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.279910][T14900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.325509][ T5616] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 985.504952][ T5616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 985.504987][ T5616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 985.505012][ T5616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 985.505035][ T5616] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 985.505125][ T5616] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 985.505155][ T5616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.582849][ T5616] usb 4-1: config 0 descriptor?? [ 985.934653][ T32] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 986.009934][T14916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 986.010520][T14916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 986.075621][ T5710] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 986.075902][ T5710] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 986.075926][ T5710] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 986.076248][ T5710] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 986.082459][ T32] usb 9-1: device descriptor read/64, error -71 [ 986.244176][ T5710] usb 1-1: USB disconnect, device number 115 [ 986.354076][ T32] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 986.405914][ T5616] usbhid 4-1:0.0: can't add hid device: -71 [ 986.406037][ T5616] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 986.427013][ T5616] usb 4-1: USB disconnect, device number 108 [ 986.506199][ T32] usb 9-1: device descriptor read/64, error -71 [ 986.611531][ T32] usb usb9-port1: attempt power cycle [ 986.905853][ T1009] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 986.944157][ T32] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 986.986956][ T32] usb 9-1: device descriptor read/8, error -71 [ 987.067265][ T1009] usb 1-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 987.067293][ T1009] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.067312][ T1009] usb 1-1: Product: syz [ 987.067325][ T1009] usb 1-1: Manufacturer: syz [ 987.067343][ T1009] usb 1-1: SerialNumber: syz [ 987.191496][ T5616] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 987.220016][ T32] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 987.239771][ T32] usb 9-1: device descriptor read/8, error -71 [ 987.308919][ T1009] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 987.308960][ T1009] usb 1-1: MIDIStreaming interface descriptor not found [ 987.347924][ T32] usb usb9-port1: unable to enumerate USB device [ 987.364066][ T5616] usb 4-1: Using ep0 maxpacket: 8 [ 987.366068][ T5616] usb 4-1: config 0 has too many interfaces: 217, using maximum allowed: 32 [ 987.366098][ T5616] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 217 [ 987.370451][ T5616] usb 4-1: New USB device found, idVendor=041e, idProduct=401c, bcdDevice=1d.9c [ 987.370479][ T5616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.370500][ T5616] usb 4-1: Product: syz [ 987.370515][ T5616] usb 4-1: Manufacturer: syz [ 987.370530][ T5616] usb 4-1: SerialNumber: syz [ 987.431430][ T5616] usb 4-1: config 0 descriptor?? [ 987.436763][ T5616] gspca_main: gspca_zc3xx-2.14.0 probing 041e:401c [ 987.506604][ T1009] usb 1-1: USB disconnect, device number 116 [ 987.651615][T11245] udevd[11245]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 987.705019][ T5616] gspca_zc3xx: reg_w_i err -71 [ 988.086579][ T1009] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 988.229298][ T1009] usb 1-1: Using ep0 maxpacket: 16 [ 988.231706][ T1009] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 988.231733][ T1009] usb 1-1: config 0 has no interface number 0 [ 988.234026][ T1009] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 988.234054][ T1009] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.234068][ T1009] usb 1-1: Product: syz [ 988.234078][ T1009] usb 1-1: Manufacturer: syz [ 988.234089][ T1009] usb 1-1: SerialNumber: syz [ 988.242084][ T1009] usb 1-1: config 0 descriptor?? [ 988.305815][ T1009] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 988.420087][ T5616] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 988.420184][ T5616] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 988.428268][ T5616] usb 4-1: USB disconnect, device number 109 [ 988.727254][T14943] __nla_validate_parse: 3 callbacks suppressed [ 988.727366][T14943] netlink: 284 bytes leftover after parsing attributes in process `syz.8.2202'. [ 988.734088][ T5616] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 988.791176][ T1009] gspca_spca1528: reg_w err -110 [ 988.812595][ T1009] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110 [ 988.829311][ T1009] usb 1-1: USB disconnect, device number 117 [ 988.876643][ T5616] usb 4-1: device descriptor read/64, error -71 [ 989.126926][ T5616] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 989.180952][ T5628] Bluetooth: hci6: ACL packet for unknown connection handle 0 [ 989.267141][ T5616] usb 4-1: device descriptor read/64, error -71 [ 989.386747][ T5616] usb usb4-port1: attempt power cycle [ 989.420905][ T5710] usb 1-1: new low-speed USB device number 118 using dummy_hcd [ 989.575488][ T5710] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 64, setting to 0 [ 989.575525][ T5710] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 40, changing to 4 [ 989.575546][ T5710] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 0 [ 989.578859][ T5710] usb 1-1: string descriptor 0 read error: -22 [ 989.578983][ T5710] usb 1-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 989.579006][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.715664][ T5616] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 989.747647][ T5616] usb 4-1: device descriptor read/8, error -71 [ 989.868493][ T5710] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 989.890118][ T5710] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 989.898427][ T5710] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 989.907339][ T5710] usb 1-1: USB disconnect, device number 118 [ 989.981271][ T5616] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 990.002174][ T5616] usb 4-1: device descriptor read/8, error -71 [ 990.087385][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 990.102857][T14968] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2209'. [ 990.108131][ T5616] usb usb4-port1: unable to enumerate USB device [ 990.292052][T14972] comedi comedi1: pcl726: I/O base address or length out of range [ 990.521654][T14979] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 990.684984][T14986] tmpfs: Bad value for 'size' [ 990.830991][T14992] random: crng reseeded on system resumption [ 990.995636][T14997] netlink: 'syz.8.2221': attribute type 12 has an invalid length. [ 991.000884][ T5616] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 991.152838][ T5616] usb 4-1: Using ep0 maxpacket: 32 [ 991.154988][ T5616] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 991.155012][ T5616] usb 4-1: config 0 has no interface number 0 [ 991.155054][ T5616] usb 4-1: config 0 interface 12 has no altsetting 0 [ 991.158410][ T5616] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 991.158438][ T5616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.158459][ T5616] usb 4-1: Product: syz [ 991.158473][ T5616] usb 4-1: Manufacturer: syz [ 991.158488][ T5616] usb 4-1: SerialNumber: syz [ 991.238599][ T5616] usb 4-1: config 0 descriptor?? [ 991.371234][ T5710] usb 9-1: new low-speed USB device number 68 using dummy_hcd [ 991.403122][T15005] binder: 15004:15005 ioctl c0306201 200000000280 returned -14 [ 991.546621][ T5710] usb 9-1: config index 0 descriptor too short (expected 1307, got 27) [ 991.546656][ T5710] usb 9-1: config 0 has an invalid interface number: 0 but max is -1 [ 991.546671][ T5710] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 991.546733][ T5710] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 991.546761][ T5710] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 991.546777][ T5710] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 991.550108][ T5710] usb 9-1: string descriptor 0 read error: -22 [ 991.550261][ T5710] usb 9-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 991.550278][ T5710] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.667598][ T5710] usb 9-1: config 0 descriptor?? [ 991.691819][T15001] raw-gadget.4 gadget.8: fail, usb_ep_enable returned -22 [ 991.693762][ T5710] hub 9-1:0.0: bad descriptor, ignoring hub [ 991.693786][ T5710] hub 9-1:0.0: probe with driver hub failed with error -5 [ 991.700745][T12007] usb 1-1: new low-speed USB device number 119 using dummy_hcd [ 991.734109][ T5710] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input63 [ 991.884549][T12007] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 991.884588][T12007] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 991.884621][T12007] usb 1-1: config 0 has no interface number 0 [ 991.884664][T12007] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 991.884687][T12007] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.962006][T12007] usb 1-1: config 0 descriptor?? [ 991.966726][T12007] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 991.969011][ T5616] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 991.969165][ T5616] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 991.969184][ T5616] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 991.969368][ T5616] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 992.064498][ T5616] usb 4-1: USB disconnect, device number 114 [ 992.143343][ T5710] usb 9-1: USB disconnect, device number 68 [ 992.144303][ C0] usb_acecad 9-1:0.0: can't resubmit intr, dummy_hcd.8-1/input0, status -19 [ 992.167370][T15005] binder: 15004:15005 ioctl 40603d10 200000000380 returned -22 [ 992.175223][ T5718] usb 1-1: USB disconnect, device number 119 [ 992.626978][T15017] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2227'. [ 992.684790][T15013] kernel profiling enabled (shift: 9) [ 992.940742][T15029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 992.941270][T15029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 992.941402][T15033] block nbd8: NBD_DISCONNECT [ 992.971649][ T5710] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 993.146976][ T5710] usb 4-1: unable to get BOS descriptor or descriptor too short [ 993.148313][ T5710] usb 4-1: config 2 has an invalid interface number: 170 but max is 0 [ 993.148335][ T5710] usb 4-1: config 2 has no interface number 0 [ 993.148364][ T5710] usb 4-1: config 2 interface 170 has no altsetting 0 [ 993.187834][ T5710] usb 4-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice=f8.56 [ 993.187860][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.187880][ T5710] usb 4-1: Product: syz [ 993.187895][ T5710] usb 4-1: Manufacturer: syz [ 993.187909][ T5710] usb 4-1: SerialNumber: syz [ 993.446249][T15043] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.2234'. [ 993.461968][ T5710] usb 4-1: USB disconnect, device number 115 [ 993.751590][ T5718] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 993.912194][ T5718] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 993.912224][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.912249][ T5718] usb 1-1: Product: syz [ 993.912259][ T5718] usb 1-1: Manufacturer: syz [ 993.912269][ T5718] usb 1-1: SerialNumber: syz [ 993.949596][ T5718] usb 1-1: config 0 descriptor?? [ 994.287802][T15054] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2238'. [ 994.392110][T15054] Unsupported ieee802154 address type: 0 [ 994.750345][ T5718] usb 1-1: Firmware version (0.0) predates our first public release. [ 994.750385][ T5718] usb 1-1: Please update to version 0.2 or newer [ 994.872777][T15074] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2242'. [ 994.874188][ T38] audit: type=1326 audit(2000001295.153:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15073 comm="syz.8.2242" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f972dbcce59 code=0x0 [ 994.994395][ T5718] usb 1-1: USB disconnect, device number 120 [ 995.170453][ T5616] usb 4-1: new full-speed USB device number 116 using dummy_hcd [ 995.328953][ T5616] usb 4-1: unable to get BOS descriptor or descriptor too short [ 995.329712][ T5616] usb 4-1: not running at top speed; connect to a high speed hub [ 995.331504][ T5616] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 995.331530][ T5616] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 995.365247][ T5616] usb 4-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 995.365279][ T5616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.365320][ T5616] usb 4-1: Product: syz [ 995.365366][ T5616] usb 4-1: Manufacturer: syz [ 995.365383][ T5616] usb 4-1: SerialNumber: syz [ 995.557479][T15087] bridge0: port 3(veth0_to_bridge) entered blocking state [ 995.557875][T15087] bridge0: port 3(veth0_to_bridge) entered disabled state [ 995.558207][T15087] veth0_to_bridge: entered allmulticast mode [ 995.604262][T15087] veth0_to_bridge: entered promiscuous mode [ 995.604436][T15087] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 995.623192][T15087] bridge0: port 3(veth0_to_bridge) entered blocking state [ 995.623538][T15087] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 995.754641][ T5616] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 995.777402][ T5616] usb 4-1: USB disconnect, device number 116 [ 995.864401][T11922] udevd[11922]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 995.969824][ T1009] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 996.112717][ T1009] usb 1-1: Using ep0 maxpacket: 32 [ 996.115636][ T1009] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 996.115663][ T1009] usb 1-1: config 0 has no interfaces? [ 996.115695][ T1009] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 996.115722][ T1009] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.169009][ T1009] usb 1-1: config 0 descriptor?? [ 996.427193][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 996.446230][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 996.455755][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 996.465115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 996.474790][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 996.484308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 996.493825][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 996.503369][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 996.512910][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 996.522394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 997.155104][ T38] audit: type=1800 audit(2000001297.432:462): pid=15109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2248" name="file0" dev="overlay" ino=458 res=0 errno=0 [ 997.288071][ T5616] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 997.410218][ T5710] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 997.445618][ T5616] usb 4-1: Using ep0 maxpacket: 16 [ 997.447946][ T5616] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 997.447993][ T5616] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 997.448017][ T5616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 997.448085][ T5616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 997.450470][ T5616] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 997.450498][ T5616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.450519][ T5616] usb 4-1: Product: syz [ 997.450538][ T5616] usb 4-1: Manufacturer: syz [ 997.450549][ T5616] usb 4-1: SerialNumber: syz [ 997.537452][ T5616] usb 4-1: config 0 descriptor?? [ 997.554541][ T5616] appledisplay 4-1:0.0: Submitting URB failed [ 997.554685][ T5616] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -5 [ 997.609309][ T5710] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 997.609360][ T5710] usb 9-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 997.609431][ T5710] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.660231][ T5710] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 997.750577][ T5616] usb 4-1: USB disconnect, device number 117 [ 998.497152][ T5628] Bluetooth: hci4: unexpected event for opcode 0x202a [ 998.687011][ T5710] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 998.687035][ T5710] stv0680 9-1:4.0: STV(e): camera ping failed!! [ 998.688222][ T5710] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 998.688241][ T5710] stv0680 9-1:4.0: last error: 0, command = 0x0 [ 998.690790][ T5616] usb 1-1: USB disconnect, device number 121 [ 998.739394][ T5710] usb 9-1: USB disconnect, device number 69 [ 999.064805][ T5710] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 999.065014][ T5717] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 999.185768][T15126] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2260'. [ 999.207292][ T1009] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 999.209046][ T5710] usb 9-1: Using ep0 maxpacket: 16 [ 999.229323][ T5717] usb 4-1: Using ep0 maxpacket: 32 [ 999.232136][ T5717] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 999.232169][ T5717] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 999.232252][ T5717] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 999.232277][ T5717] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 999.232302][ T5717] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 999.232323][ T5717] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 999.232345][ T5717] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 26 [ 999.323097][ T5717] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 999.323126][ T5717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 999.323147][ T5717] usb 4-1: SerialNumber: syz [ 999.397773][ T5717] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 999.400872][ T5710] usb 9-1: config index 0 descriptor too short (expected 51443, got 18) [ 999.473622][ T1009] usb 1-1: Using ep0 maxpacket: 8 [ 999.476428][ T1009] usb 1-1: unable to get BOS descriptor or descriptor too short [ 999.477598][ T1009] usb 1-1: config 5 has an invalid interface number: 244 but max is 0 [ 999.477644][ T1009] usb 1-1: config 5 has no interface number 0 [ 999.477679][ T1009] usb 1-1: config 5 interface 244 has no altsetting 0 [ 999.480571][ T1009] usb 1-1: New USB device found, idVendor=0c45, idProduct=600d, bcdDevice=91.4d [ 999.480598][ T1009] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.480617][ T1009] usb 1-1: Product: syz [ 999.480631][ T1009] usb 1-1: Manufacturer: syz [ 999.480647][ T1009] usb 1-1: SerialNumber: syz [ 999.569891][ T5717] usb 4-1: USB disconnect, device number 118 [ 999.819594][ T5710] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 999.819639][ T5710] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.819671][ T5710] usb 9-1: Product: syz [ 999.819702][ T5710] usb 9-1: Manufacturer: syz [ 999.819717][ T5710] usb 9-1: SerialNumber: syz [ 999.901453][ T5710] r8152-cfgselector 9-1: Unknown version 0x0000 [ 999.901477][ T5710] r8152-cfgselector 9-1: config 0 descriptor?? [ 1000.148274][T15116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1000.158314][ T5710] r8152-cfgselector 9-1: Unknown version 0x0000 [ 1000.158812][ T5710] r8152-cfgselector 9-1: No union descriptors [ 1000.177106][T15116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.415572][ T5697] r8152-cfgselector 9-1: USB disconnect, device number 70 [ 1000.588262][ T5628] Bluetooth: hci4: unexpected event for opcode 0x202a [ 1000.625800][ T5710] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1000.778803][ T5710] usb 4-1: Using ep0 maxpacket: 32 [ 1000.782823][ T5710] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1000.782847][ T5710] usb 4-1: config 0 has no interface number 0 [ 1000.782887][ T5710] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 32, changing to 7 [ 1000.782921][ T5710] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid maxpacket 2000, setting to 1024 [ 1000.827714][ T5710] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1000.827741][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.827761][ T5710] usb 4-1: Product: syz [ 1000.827776][ T5710] usb 4-1: Manufacturer: syz [ 1000.827790][ T5710] usb 4-1: SerialNumber: syz [ 1000.834731][ T5710] usb 4-1: config 0 descriptor?? [ 1000.895147][ T5710] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1000.895180][ T5710] em28xx 4-1:0.132: Video interface 132 found: isoc [ 1001.140449][ T5710] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 1001.239850][ T5710] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1001.239890][ T5710] em28xx 4-1:0.132: board has no eeprom [ 1001.320727][ T5710] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1001.320753][ T5710] em28xx 4-1:0.132: analog set to isoc mode. [ 1001.322083][ T5717] em28xx 4-1:0.132: Registering V4L2 extension [ 1001.355012][ T5710] usb 4-1: USB disconnect, device number 119 [ 1001.366804][ T5710] em28xx 4-1:0.132: Disconnecting em28xx [ 1001.501769][ T5718] usb 9-1: new full-speed USB device number 71 using dummy_hcd [ 1001.592227][ T5717] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 1001.592251][ T5717] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 1001.592272][ T5717] em28xx 4-1:0.132: No AC97 audio processor [ 1001.592569][ T5717] videodev: could not get a free minor [ 1001.592581][ T5717] em28xx 4-1:0.132: unable to register video device (error=-23). [ 1001.592799][ T5717] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1001.592863][ T5710] em28xx 4-1:0.132: Closing input extension [ 1001.715510][ T5710] em28xx 4-1:0.132: Freeing device [ 1001.851645][ T1009] gspca_main: sonixb-2.14.0 probing 0c45:600d [ 1001.852136][ T1009] sonixb 1-1:5.244: Error reading register 00: -71 [ 1001.868367][ T1009] usb 1-1: USB disconnect, device number 122 [ 1001.920060][ T5718] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 1001.920086][ T5718] usb 9-1: config 0 has no interface number 0 [ 1001.920131][ T5718] usb 9-1: config 0 interface 41 has no altsetting 0 [ 1002.103815][ T5718] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1002.103847][ T5718] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.103870][ T5718] usb 9-1: Product: syz [ 1002.103885][ T5718] usb 9-1: Manufacturer: syz [ 1002.103901][ T5718] usb 9-1: SerialNumber: syz [ 1002.109683][ T5718] usb 9-1: config 0 descriptor?? [ 1002.472923][ T5717] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1002.647701][ T5717] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 1002.647793][ T5717] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 999, setting to 64 [ 1002.651401][ T5717] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 1002.651429][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.651483][ T5717] usb 4-1: Product: syz [ 1002.651493][ T5717] usb 4-1: Manufacturer: syz [ 1002.651503][ T5717] usb 4-1: SerialNumber: syz [ 1002.801688][ T5710] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1002.952581][ T5710] usb 1-1: Using ep0 maxpacket: 8 [ 1002.955640][ T5710] usb 1-1: config 0 interface 0 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1002.955752][ T5710] usb 1-1: config 0 interface 0 altsetting 67 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1002.955779][ T5710] usb 1-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1002.955809][ T5710] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1002.955914][ T5710] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1002.955942][ T5710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.101444][ T5710] usb 1-1: config 0 descriptor?? [ 1003.144424][ T5717] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1003.144973][ T5717] usb 4-1: MIDIStreaming interface descriptor not found [ 1003.305795][ T5710] usbhid 1-1:0.0: can't add hid device: -71 [ 1003.306254][ T5710] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1003.345899][ T5710] usb 1-1: USB disconnect, device number 123 [ 1003.625336][ T5717] usb 4-1: USB disconnect, device number 120 [ 1003.651518][ T5628] Bluetooth: hci2: unexpected event 0x05 length: 5 > 4 [ 1003.968945][T11245] udevd[11245]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1004.424618][T12007] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1004.578029][T12007] usb 1-1: Using ep0 maxpacket: 32 [ 1004.582120][T12007] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1004.608490][T12007] usb 1-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 1004.608526][T12007] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.608546][T12007] usb 1-1: Product: syz [ 1004.608561][T12007] usb 1-1: Manufacturer: syz [ 1004.608575][T12007] usb 1-1: SerialNumber: syz [ 1005.252410][T12007] usb 1-1: USB disconnect, device number 124 [ 1005.427685][T11245] udevd[11245]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1005.478424][ T5718] CoreChips 9-1:0.41: probe with driver CoreChips failed with error -71 [ 1005.528320][ T5718] usb 9-1: USB disconnect, device number 71 [ 1005.721710][T15198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.724903][T15198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.727436][T15199] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2280'. [ 1005.852080][T15204] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.2281'. [ 1005.876607][T15204] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.2281'. [ 1005.891466][T15204] CUSE: unknown device info "" [ 1005.891481][T15204] CUSE: unknown device info "Ö" [ 1005.891491][T15204] CUSE: unknown device info "" [ 1005.891500][T15204] CUSE: unknown device info "" [ 1005.891508][T15204] CUSE: unknown device info "" [ 1005.891517][T15204] CUSE: unknown device info "" [ 1005.891525][T15204] CUSE: unknown device info "ðÿÿÿ" [ 1005.891534][T15204] CUSE: unknown device info "" [ 1005.891543][T15204] CUSE: unknown device info "" [ 1005.891551][T15204] CUSE: unknown device info "" [ 1005.891560][T15204] CUSE: unknown device info "" [ 1005.891568][T15204] CUSE: unknown device info "r" [ 1005.891577][T15204] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 1005.891586][T15204] CUSE: unknown device info "ÿÿÿÿ" [ 1005.891595][T15204] CUSE: unknown device info "" [ 1005.891603][T15204] CUSE: unknown device info "€" [ 1005.891613][T15204] CUSE: DEVNAME unspecified [ 1006.142227][ T5718] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1006.341254][ T5718] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1006.341285][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.346392][ T5718] usb 4-1: config 0 descriptor?? [ 1006.394109][ T5718] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1006.760210][ T5626] Bluetooth: hci5: command 0x0406 tx timeout [ 1007.130198][ T5718] usb 4-1: USB disconnect, device number 121 [ 1007.357779][ T5697] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1007.483913][ T5697] usb 1-1: device descriptor read/64, error -71 [ 1007.571435][T15229] cgroup2: Unknown parameter 'obj_user' [ 1007.711396][ T5697] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1007.843188][ T5697] usb 1-1: device descriptor read/64, error -71 [ 1007.843284][T12007] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1007.949493][ T5697] usb usb1-port1: attempt power cycle [ 1007.966791][T12007] usb 4-1: device descriptor read/64, error -71 [ 1008.011429][T15233] tmpfs: Bad value for 'mpol' [ 1008.211609][T12007] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1008.307727][ T5697] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1008.340322][ T5697] usb 1-1: device descriptor read/8, error -71 [ 1008.386273][T12007] usb 4-1: device descriptor read/64, error -71 [ 1008.490719][T12007] usb usb4-port1: attempt power cycle [ 1008.566314][ T5697] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1008.595524][ T5697] usb 1-1: device descriptor read/8, error -71 [ 1008.700644][ T5697] usb usb1-port1: unable to enumerate USB device [ 1008.824748][T12007] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1008.844540][T12007] usb 4-1: device descriptor read/8, error -71 [ 1009.080452][T12007] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1009.100204][T12007] usb 4-1: device descriptor read/8, error -71 [ 1009.213932][T12007] usb usb4-port1: unable to enumerate USB device [ 1009.366533][ T5717] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 1009.509055][ T5717] usb 9-1: Using ep0 maxpacket: 16 [ 1009.510887][ T5717] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.510912][ T5717] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1009.513238][ T5717] usb 9-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 1009.513264][ T5717] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.513283][ T5717] usb 9-1: Product: syz [ 1009.513296][ T5717] usb 9-1: Manufacturer: syz [ 1009.513313][ T5717] usb 9-1: SerialNumber: syz [ 1009.599161][ T39] INFO: task syz.5.1786:13135 blocked for more than 143 seconds. [ 1009.599184][ T39] Tainted: G L syzkaller #0 [ 1009.599195][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1009.599203][ T39] task:syz.5.1786 state:D stack:28472 pid:13135 tgid:13134 ppid:8747 [ 1009.599203][ T39] task:syz.5.1786 state:D stack:28472 pid:13135 tgid:13134 ppid:8747 task_flags:0x400140 flags:0x00080002 [ 1009.599304][ T39] Call Trace: [ 1009.599312][ T39] [ 1009.599324][ T39] __schedule+0x16f9/0x5500 [ 1009.599368][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 1009.599398][ T39] ? __pfx___schedule+0x10/0x10 [ 1009.599472][ T39] ? schedule+0x90/0x360 [ 1009.599497][ T39] schedule+0x164/0x360 [ 1009.599520][ T39] cgroup_lock_and_drain_offline+0x516/0x650 [ 1009.599549][ T39] ? __pfx_cgroup_lock_and_drain_offline+0x10/0x10 [ 1009.599567][ T39] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1009.599635][ T39] ? bpf_lsm_capable+0x9/0x20 [ 1009.599653][ T39] ? security_capable+0x7e/0x2c0 [ 1009.599714][ T39] cgroup1_get_tree+0xa2/0x8a0 [ 1009.599791][ T39] ? bpf_lsm_capable+0x9/0x20 [ 1009.599816][ T39] vfs_get_tree+0x92/0x2a0 [ 1009.599849][ T39] do_new_mount+0x341/0xd30 [ 1009.599872][ T39] ? apparmor_capable+0x126/0x170 [ 1009.599987][ T39] ? __pfx_do_new_mount+0x10/0x10 [ 1009.600013][ T39] ? ns_capable+0x89/0xe0 [ 1009.600044][ T39] ? path_mount+0x690/0x10e0 [ 1009.600066][ T39] ? user_path_at+0xd4/0x160 [ 1009.600144][ T39] ? user_path_at+0xd4/0x160 [ 1009.600172][ T39] __se_sys_mount+0x31d/0x420 [ 1009.600202][ T39] ? __pfx___se_sys_mount+0x10/0x10 [ 1009.600231][ T39] ? __x64_sys_mount+0x20/0xc0 [ 1009.600302][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.600326][ T39] do_syscall_64+0x174/0x580 [ 1009.600358][ T39] ? trace_irq_disable+0x3b/0x140 [ 1009.600380][ T39] ? clear_bhb_loop+0x40/0x90 [ 1009.600452][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.600475][ T39] RIP: 0033:0x7fc82863ce59 [ 1009.600494][ T39] RSP: 002b:00007fc826896028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1009.600516][ T39] RAX: ffffffffffffffda RBX: 00007fc8288b5fa0 RCX: 00007fc82863ce59 [ 1009.600532][ T39] RDX: 0000200000000640 RSI: 0000200000000440 RDI: 0000000000000000 [ 1009.600546][ T39] RBP: 00007fc8286d2d6f R08: 00002000000000c0 R09: 0000000000000000 [ 1009.600605][ T39] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000000 [ 1009.600620][ T39] R13: 00007fc8288b6038 R14: 00007fc8288b5fa0 R15: 00007fff8c635908 [ 1009.600652][ T39] [ 1009.602639][ T39] [ 1009.602639][ T39] Showing all locks held in the system: [ 1009.602652][ T39] 2 locks held by kworker/u8:1/13: [ 1009.602666][ T39] #0: ffff8880b863b8a0 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 1009.602871][ T39] #1: ffff8880b8624500 (psi_seq){-...}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1009.602989][ T39] 1 lock held by khungtaskd/39: [ 1009.603001][ T39] #0: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1009.603121][ T39] 10 locks held by kworker/u8:6/193: [ 1009.603134][ T39] #0: ffff888037f08138 ((wq_completion)wg-kex-wg2#11){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1009.603196][ T39] #1: ffffc90003b5fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1009.603302][ T39] #2: ffffffff8e0613c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1009.603359][ T39] #3: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1009.603462][ T39] #4: ffff88806a48a240 (&peer->endpoint_lock){++..}-{3:3}, at: wg_socket_send_skb_to_peer+0x6e/0x200 [ 1009.603514][ T39] #5: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x277/0x4b0 [ 1009.603615][ T39] #6: ffffffff8e0613c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1009.603672][ T39] #7: ffffffff8e1cacc0 (rcu_read_lock_bh){....}-{1:3}, at: send6+0x255/0x910 [ 1009.603770][ T39] #8: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 1009.603824][ T39] #9: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1009.623156][ T39] 1 lock held by syslogd/4956: [ 1009.623171][ T39] #0: ffff888034229bd8 (&si->socket.wq.wait){+.+.}-{3:3}, at: finish_wait+0xbe/0x1e0 [ 1009.623276][ T39] 1 lock held by klogd/4963: [ 1009.623299][ T39] #0: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0xae/0x550 [ 1009.623370][ T39] 2 locks held by getty/5364: [ 1009.623404][ T39] #0: ffff888036b3c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1009.623486][ T39] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 1009.623806][ T39] 3 locks held by kworker/1:3/5616: [ 1009.623824][ T39] #0: ffff88813fe16538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1009.623939][ T39] #1: ffffc900048cfc40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1009.624004][ T39] #2: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x265/0x12e0 [ 1009.624120][ T39] 4 locks held by kworker/1:5/5717: [ 1009.624132][ T39] #0: ffff888022eaed38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1009.624257][ T39] #1: ffffc90004cbfc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1009.624346][ T39] #2: ffff88802a6fe210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 1009.624511][ T39] #3: ffff88802c25e210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1009.624606][ T39] 6 locks held by kworker/u8:21/9891: [ 1009.624630][ T39] #0: ffff88813fe54138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1009.624739][ T39] #1: ffffc9000447fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1009.626711][ T39] #2: ffff88805ef3e310 (&devlink->lock_key#11){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0 [ 1009.626900][ T39] #3: ffff88804cbc1120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0 [ 1009.627015][ T39] #4: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1009.627638][ T39] #5: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa6/0x2550 [ 1009.627871][ T39] 4 locks held by udevd/11922: [ 1009.627898][ T39] #0: ffff88803b058720 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe20 [ 1009.627994][ T39] #1: ffff88805d219078 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 1009.628121][ T39] #2: ffff8880680275a8 (kn->active#31){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1009.628210][ T39] #3: ffff88802c25e210 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1009.628397][ T39] [ 1009.628431][ T39] ============================================= [ 1009.628431][ T39] [ 1009.628494][ T39] NMI backtrace for cpu 0 [ 1009.628512][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1009.628539][ T39] Tainted: [L]=SOFTLOCKUP [ 1009.628559][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1009.628597][ T39] Call Trace: [ 1009.628628][ T39] [ 1009.628652][ T39] dump_stack_lvl+0xe8/0x150 [ 1009.628680][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 1009.628773][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1009.628826][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1009.628855][ T39] sys_info+0x135/0x170 [ 1009.628908][ T39] watchdog+0xfd3/0x1030 [ 1009.628971][ T39] ? watchdog+0x1c9/0x1030 [ 1009.628999][ T39] kthread+0x388/0x470 [ 1009.629034][ T39] ? __pfx_watchdog+0x10/0x10 [ 1009.629084][ T39] ? __pfx_kthread+0x10/0x10 [ 1009.629129][ T39] ret_from_fork+0x514/0xb70 [ 1009.629157][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1009.629220][ T39] ? __switch_to+0xc79/0x1410 [ 1009.629265][ T39] ? __pfx_kthread+0x10/0x10 [ 1009.629297][ T39] ret_from_fork_asm+0x1a/0x30 [ 1009.629368][ T39] [ 1009.629441][ T39] Sending NMI from CPU 0 to CPUs 1: [ 1009.629472][ C1] NMI backtrace for cpu 1 [ 1009.629488][ C1] CPU: 1 UID: 0 PID: 30 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1009.629512][ C1] Tainted: [L]=SOFTLOCKUP [ 1009.629519][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1009.629530][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x32/0x80 [ 1009.629558][ C1] Code: 89 f3 49 89 fe 48 83 c7 18 48 8b 74 24 10 e8 95 42 63 f6 4c 89 f7 e8 cd ce 63 f6 f7 c3 00 02 00 00 74 05 e8 30 de 8f f6 9c 58 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 e8 [ 1009.629574][ C1] RSP: 0018:ffffc90000a4f7f8 EFLAGS: 00000002 [ 1009.629589][ C1] RAX: 0000000000000002 RBX: 0000000000000292 RCX: 0000000080000001 [ 1009.629600][ C1] RDX: 0000000000000002 RSI: ffffffff8d769ba8 RDI: ffffffff8bac2180 [ 1009.629617][ C1] RBP: ffffffff99d64038 R08: ffffffff8faeccf7 R09: 1ffffffff1f5d99e [ 1009.629630][ C1] R10: dffffc0000000000 R11: fffffbfff1f5d99f R12: ffff888029d0aef8 [ 1009.629654][ C1] R13: ffff888029d0aee0 R14: ffffffff99d64040 R15: dffffc0000000000 [ 1009.629667][ C1] FS: 0000000000000000(0000) GS:ffff888125d7e000(0000) knlGS:0000000000000000 [ 1009.629680][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1009.629692][ C1] CR2: 00007f972df70300 CR3: 0000000038c4c000 CR4: 00000000003526f0 [ 1009.629706][ C1] Call Trace: [ 1009.629713][ C1] [ 1009.629720][ C1] debug_object_assert_init+0x1fe/0x300 [ 1009.629811][ C1] hrtimer_start_range_ns+0x3d/0x3f0 [ 1009.629836][ C1] dummy_timer+0x45f7/0x47d0 [ 1009.629865][ C1] ? lapic_next_event+0x11/0x20 [ 1009.629885][ C1] ? clockevents_program_event+0x491/0x630 [ 1009.629913][ C1] ? __lock_acquire+0x6b5/0x2d10 [ 1009.629938][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1009.629952][ C1] ? lock_acquire+0x106/0x350 [ 1009.629977][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1009.629998][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1009.630022][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1009.630041][ C1] __hrtimer_run_queues+0x405/0xb10 [ 1009.630074][ C1] hrtimer_run_softirq+0x18f/0x260 [ 1009.630092][ C1] handle_softirqs+0x1de/0x6d0 [ 1009.630119][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 1009.630134][ C1] run_ktimerd+0x69/0x100 [ 1009.630149][ C1] smpboot_thread_fn+0x541/0xa50 [ 1009.630164][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 1009.630183][ C1] kthread+0x388/0x470 [ 1009.630200][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1009.630214][ C1] ? __pfx_kthread+0x10/0x10 [ 1009.630231][ C1] ret_from_fork+0x514/0xb70 [ 1009.630250][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1009.630269][ C1] ? __switch_to+0xc79/0x1410 [ 1009.630284][ C1] ? __pfx_kthread+0x10/0x10 [ 1009.630302][ C1] ret_from_fork_asm+0x1a/0x30 [ 1009.630329][ C1] [ 1009.633866][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 1009.633887][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1009.633921][ T39] Tainted: [L]=SOFTLOCKUP [ 1009.633944][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1009.633978][ T39] Call Trace: [ 1009.633998][ T39] [ 1009.634011][ T39] vpanic+0x56c/0xa60 [ 1009.634051][ T39] ? __pfx___schedule+0x10/0x10 [ 1009.634097][ T39] ? __pfx_vpanic+0x10/0x10 [ 1009.634183][ T39] panic+0xc5/0xd0 [ 1009.634212][ T39] ? __pfx_panic+0x10/0x10 [ 1009.634259][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 1009.634347][ T39] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 1009.634381][ T39] watchdog+0x102c/0x1030 [ 1009.634451][ T39] ? watchdog+0x1c9/0x1030 [ 1009.634489][ T39] kthread+0x388/0x470 [ 1009.634519][ T39] ? __pfx_watchdog+0x10/0x10 [ 1009.634539][ T39] ? __pfx_kthread+0x10/0x10 [ 1009.634600][ T39] ret_from_fork+0x514/0xb70 [ 1009.634664][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1009.634689][ T39] ? __switch_to+0xc79/0x1410 [ 1009.634739][ T39] ? __pfx_kthread+0x10/0x10 [ 1009.634793][ T39] ret_from_fork_asm+0x1a/0x30 [ 1009.634845][ T39] [ 1009.635449][ T39] Kernel Offset: disabled