last executing test programs: 9m1.395692895s ago: executing program 32 (id=125): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x34, "712bab"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000e40)={0x0, 0x0, 0x3, "0b3b81"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 8m45.736704944s ago: executing program 33 (id=172): ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x454}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000007000000140001800500020001000000080006001a"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 8m39.403386289s ago: executing program 34 (id=193): mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x40004) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r1, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r2, 0x0, 0x97, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(r1, 0x24, &(0x7f0000000340)={0x1, 0x4, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) socket$packet(0x11, 0x3, 0x300) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2d) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r4, 0x4068aea3, &(0x7f0000000240)={0xa8, 0x0, 0x2}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) munlockall() ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x2, &(0x7f00001a8000/0x7000)=nil, &(0x7f00001c8000/0x4000)=nil, 0x3, &(0x7f00000001c0)=[{0xffffffffefffff00, 0x1, 0x6}, {0xfffffffffffffffe, 0x8, 0x81}, {0xfffffffffffffffc, 0x6, 0x80000000}], 0x3, 0x4, 0x20, 0x8, 0x49, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x162) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) connect$inet(r5, &(0x7f0000000800)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) read(r5, &(0x7f0000000040)=""/148, 0xffffff96) preadv(r5, &(0x7f0000000780)=[{&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/222, 0xde}, {&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f00000005c0)=""/83, 0x53}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/247, 0xf7}, {&(0x7f0000000740)=""/5, 0x5}], 0x7, 0x200, 0x7fffffff) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) 8m3.374003756s ago: executing program 35 (id=203): write$sequencer(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@t={0x81, 0x5, 0x3, 0x4, @generic=0xffffe861}) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) r3 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r2, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 7m58.706806115s ago: executing program 36 (id=231): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x4a) 7m53.969674602s ago: executing program 37 (id=255): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x2, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x48f, 0x0, 0x7fffff00036dfb}]}) (async, rerun: 64) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async, rerun: 32) syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) (async, rerun: 32) mount$fuse(0x0, 0x0, 0x0, 0x281063, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000040000', @ANYRESDEC]) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189002, 0x40) write$cgroup_devices(r4, &(0x7f0000000200)=ANY=[@ANYBLOB='c *:'], 0x11) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000140)={0x0, 0x0, 0x9}, 0x8) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x18, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) 7m50.205002769s ago: executing program 38 (id=264): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rmdir(&(0x7f0000000280)='./file1\x00') chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x42, 0x0) 7m41.831421924s ago: executing program 39 (id=273): syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f010008000000000000000324"], 0x0) 7m33.529252146s ago: executing program 40 (id=299): write$sequencer(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@t={0x81, 0x5, 0x3, 0x4, @generic=0xffffe861}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 7m27.192814415s ago: executing program 41 (id=324): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xb2, @name2}]}, 0x44}}, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r3 = fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) r4 = fsmount(r3, 0x0, 0x0) mknodat$null(r4, &(0x7f0000000080)='./file0\x00', 0x1000, 0x103) (async) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 7m3.696712161s ago: executing program 2 (id=426): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="b1db00100000000000000700000004000180"], 0x18}}, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000300)={0x0, 0x1, 0x1, [0x8, 0x2, 0x1, 0x8, 0x7], [0x0, 0xc13, 0xf, 0x1, 0x2, 0xffffffffffffff81, 0xffffffffffff8000, 0x5, 0x5484, 0x1, 0x0, 0x1, 0x0, 0x6, 0x2, 0x7, 0x4, 0x77efe1c5, 0x2, 0x8, 0x50d, 0x1, 0x2, 0x1, 0x2, 0x20af6b36, 0x101, 0x4, 0x53e, 0x3, 0x4, 0x2, 0x6, 0x7fffffff, 0x1, 0x2, 0x2, 0x6d, 0x5, 0x1, 0x401, 0x7fff0000, 0x6, 0x2, 0x0, 0x7f, 0x0, 0xfffffffffffffff8, 0x100000001, 0x5, 0xffffffff00000001, 0x3, 0x1, 0xffffffffffffffff, 0x1, 0xc, 0xfffffffffffff4a4, 0x2, 0x9, 0x67, 0x1, 0x8, 0x1, 0x0, 0x1000, 0x5, 0x7, 0x4, 0xfffffffffffffc01, 0xae, 0x59, 0x57f6dd00, 0x3, 0x7, 0x7, 0x9, 0x7, 0x7ff, 0x0, 0x7, 0x0, 0x0, 0x81, 0xb0, 0xf25f, 0x10001, 0x665d, 0x3, 0x6, 0x0, 0x2, 0x2, 0x4, 0x2, 0x7, 0x100, 0x9, 0x8, 0x7, 0x3, 0x5f8, 0x4, 0x10f2, 0x65bb, 0xfffffffffffff104, 0x1ff, 0x7fff, 0x9, 0x2, 0x3, 0x6, 0x2, 0x8, 0x5, 0x3, 0x3, 0x2000000, 0x7, 0x6, 0x8, 0xffff]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000740)={{r1}, 0x0, 0x1c, @inherit={0x70, &(0x7f00000000c0)=ANY=[@ANYBLOB="0101000000006954aa91000000000000fdffffffffffffff0c0000000000000010005600000000000600000000000000050000000000000006000000000000000000000000000000000000070000000000000000000080000000000800000000000000ce4024ec4d5f341428120c4ef4413cdb16c2b296954c4592dfb0545ebe74001b164a6dbe53ccb73d26f4bf7b587c8b40f7e4c40846e96e78a7b6856df341d0ea6b06200b0dcbf234e599ab6c1d594201b1e2feca63dbe73e840343f1db0937e187f8727deddb1cda8dd427dbfa9d00"/222]}, @devid=r4}) 7m2.776479875s ago: executing program 2 (id=429): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) setxattr$trusted_overlay_redirect(&(0x7f0000000440)='./file1/../file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100), &(0x7f0000000140)='./file1/file0\x00', 0xe, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f00000021c0)='./file1/file0\x00', &(0x7f0000002200)='./file1/file0\x00', 0x0, 0x1085408, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 7m2.709226819s ago: executing program 42 (id=363): write$sequencer(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r1 = dup(r0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 7m2.565257916s ago: executing program 2 (id=432): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="048e0601120c000100"], 0x9) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x14) 7m2.216261891s ago: executing program 2 (id=434): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fcntl$addseals(0xffffffffffffffff, 0x409, 0x20) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x8}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x8, 0xfa, 0x0, 0x7}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) accept4(r0, &(0x7f00000000c0)=@qipcrtr, &(0x7f0000000140)=0x80, 0x180000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000200)=""/87, 0x57}, {&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/140, 0x8c}, {&(0x7f00000003c0)=""/2, 0x2}, {&(0x7f0000000400)=""/97, 0x61}, {&(0x7f0000000480)=""/107, 0x6b}, {&(0x7f0000000500)=""/195, 0xc3}, {&(0x7f0000000600)=""/82, 0x52}, {&(0x7f0000000680)=""/237, 0xed}], 0x9, &(0x7f0000000840)=""/71, 0x47}, 0x2021) 7m1.822947262s ago: executing program 43 (id=434): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fcntl$addseals(0xffffffffffffffff, 0x409, 0x20) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x8}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x8, 0xfa, 0x0, 0x7}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) accept4(r0, &(0x7f00000000c0)=@qipcrtr, &(0x7f0000000140)=0x80, 0x180000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000200)=""/87, 0x57}, {&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/140, 0x8c}, {&(0x7f00000003c0)=""/2, 0x2}, {&(0x7f0000000400)=""/97, 0x61}, {&(0x7f0000000480)=""/107, 0x6b}, {&(0x7f0000000500)=""/195, 0xc3}, {&(0x7f0000000600)=""/82, 0x52}, {&(0x7f0000000680)=""/237, 0xed}], 0x9, &(0x7f0000000840)=""/71, 0x47}, 0x2021) 7m0.170145934s ago: executing program 44 (id=375): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000006380)={0x2020}, 0x2020) 6m32.725551627s ago: executing program 45 (id=472): fsopen(&(0x7f0000000080)='tracefs\x00', 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_conf_req={{0x4, 0xfe, 0x4}, {0xa, 0xab5b}}]}}, 0x11) 6m31.562013941s ago: executing program 46 (id=480): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x10005, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000680)=""/4087, 0xff7}, {&(0x7f0000004200)=""/4084, 0xff4}], 0x2) write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[], 0x10034) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_buf(r6, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) syz_usb_control_io$hid(r5, 0x0, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, &(0x7f00000002c0)={0xc, r8}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r7, 0x3b72, &(0x7f0000000040)={0x18, 0x2, 0x0, 0xe598}) r9 = syz_usb_connect$cdc_ncm(0x1, 0xe7, &(0x7f0000001680)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd5, 0x2, 0x1, 0x1, 0x80, 0xa7, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "c4626af4"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x8000, 0xe32, 0x7}, {0x6, 0x24, 0x1a, 0x6, 0x10}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x9, 0x7ff}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x7f, 0x3, 0x3}, @mdlm={0x15, 0x24, 0x12, 0x200}, @mdlm={0x15, 0x24, 0x12, 0x4}, @mdlm={0x15, 0x24, 0x12, 0x9}, @mdlm_detail={0x27, 0x24, 0x13, 0x4, "b22f38f62f6c6ff46634a7f106a173be520b4e31541900e159a0a714044108399253dc"}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x2a, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x8, 0x81, 0x19}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x9, 0x8, 0x5}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0xd, 0x4, 0x1, 0x8, 0x3}, 0x1b, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x810}}, {0x8b, &(0x7f0000000540)=ANY=[@ANYRESHEX=r6]}]}) syz_usb_disconnect(r9) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000640)={0x7, 0xa}) read$char_usb(r10, &(0x7f00000001c0)=""/238, 0xee) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r11, 0x0, 0x4, &(0x7f00000018c0)="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", 0x157) syz_usb_ep_write(r0, 0xa, 0x2, &(0x7f00000002c0)="28d3") 6m19.152556133s ago: executing program 47 (id=525): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d08", 0x13}], 0x1}, 0x24004880) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0xc8, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xe01, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000300)={0x1, 0x0, [{0x40000102, 0x0, 0x8}]}) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r5, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r5, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000014c0)='\x00', 0x1}], 0x1}}], 0x1, 0x400c405) exit(0x0) sendmmsg$inet6(r5, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000020"], 0x33fe0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x10002, 0x0, 0xd7c4, 0x1000}, 0x10) write(r6, &(0x7f0000000140)="240000001e00fffffff881ff00081d000000000000000800090a00cf9aa5fba4dafbd70d", 0x24) r7 = socket$unix(0x1, 0x5, 0x0) sendmmsg$unix(r7, &(0x7f0000000080), 0x0, 0x50040) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, '\a\x00', "3d076c556b87d49b18a81ee807c74e05fabae021775c083a02bace5e2c2000", "f5c2a9b1", "b22abb37eea31600"}, 0x38) 6m18.907941968s ago: executing program 1 (id=576): openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x20001, 0x0) (async) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x20001, 0x0) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) (async) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) syz_usb_connect(0x0, 0x6b, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)={0x0, 0x0, 0xd3, 0x0}) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x1ff) (async) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x1ff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x300, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x300, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="18000000760001"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000029008188e6b62aa73772cc9f1ba1f848430000005e140602000006020e00280010000700028000001294", 0x2e}], 0x1}, 0x8050) (async) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000029008188e6b62aa73772cc9f1ba1f848430000005e140602000006020e00280010000700028000001294", 0x2e}], 0x1}, 0x8050) ioctl$OCFS2_IOC_MOVE_EXT(r4, 0x40406f06, &(0x7f0000000180)={0x1, 0x1, 0x80000001, 0x1000}) bind$llc(r3, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0xfffffffc, 0x5, 0x22, 0x401, 0x1, 0x0, 0x10001, 0x1000008, 0x7, 0x3ff, 0x802, 0x3ff, 0x9, 0x2, 0x9, 0xe1cb, 0x3ff, 0x4, 0x3, 0x392, 0x80000088, 0xfffffefe, 0xa, 0xfffffff5, 0x2, 0x3, 0x0, 0x0, 0x4, 0x101, 0xdffffffa]}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r7}) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f00000003c0)={0x1}) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "94ca1499b703c06a", "034716ba0dc6cf2628bf0549152018b7", "db241107", "cd2ba0ae73bb3c20"}, 0x28) 6m18.526631417s ago: executing program 1 (id=577): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d00)={0x188, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x140, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x36}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x14, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x188}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000037c0), 0x400000000000309, 0x2002, &(0x7f0000003700)={r1, r2+60000000}) 6m18.076309431s ago: executing program 1 (id=578): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000003640)={0x0, 'hsr0\x00', {0x1}, 0x7}) r1 = socket$kcm(0x2, 0xa, 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x3) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006100), 0x0, 0x931766f6319ae5c4) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='westwood', 0x8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x40815) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000040)=""/183, 0xb7}, {&(0x7f0000000100)=""/6, 0x6}, {&(0x7f0000000200)=""/174, 0xae}, {&(0x7f00000002c0)=""/214, 0xd6}], 0x4, 0x6, 0x263) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) 6m17.682278852s ago: executing program 1 (id=579): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}]}) (async, rerun: 64) chdir(&(0x7f0000000140)='./file0\x00') (async, rerun: 64) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) (async) ioctl$EVIOCRMFF(r1, 0x550c, 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$printer(r2, 0x0, 0x0) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x10) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$uac1(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x132f9330}]}, 0x24}}, 0x0) 6m17.456244235s ago: executing program 1 (id=581): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000440)={0x0, 0xfb, 0xff, 0x2, 0xe, "7d05fcacaa3bedac95860490eaa683bf", "389e6310887b5e56d4c3344439d41d478f09c150c3e6873aaaccb5b9074ae36a987307779f896eefed62a49b61225089f8190ec6763ef8638b52864286294dbd910ff3bfb54d0b46e3001eadef5729285565fdc09cb4d5bf1b9d38ea229863924a635a351858ea118563ce6e45478c31757c2a49f36f451af5ba30f4155851e06e1b58aca70d92cbcf0877cabad473c246c3aa4dfb50213d09390828126b94babfe4458f1bf9f5c927a0399761e678c5fc401a1a048d5deea601f95af848eaa7d33f274c348da50349f99f70b70c25bf88d97e50a43ddfb7c224dbf5654d467ff69bcce0cc240b6ae25e"}, 0xff, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f00000021c0)='./file1/file0\x00', &(0x7f0000002200)='./file1/file0\x00', 0x0, 0x1085408, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x140) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r1, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) rmdir(&(0x7f0000000140)='./file1\x00') getdents(r1, &(0x7f0000000280)=""/31, 0x1f) open(&(0x7f0000000480)='./bus\x00', 0x0, 0x718bb647156ec3b7) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 6m17.311928776s ago: executing program 1 (id=582): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) (async) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x7, 0xa, 0x4, 0x0, 0xa, {}, {0x5, 0x8, 0xc1, 0x6b, 0x9, 0x2, "84653375"}, 0xffb, 0x2, {0x0}}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000003c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) (async) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000140)="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") (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0xc0010015}]}) (async) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$rtl8150(r5, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x40, 0x17, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac2(r5, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="e01506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) 6m5.739767678s ago: executing program 48 (id=563): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000001040)=ANY=[@ANYRES16], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 6m2.267415936s ago: executing program 49 (id=582): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) (async) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x7, 0xa, 0x4, 0x0, 0xa, {}, {0x5, 0x8, 0xc1, 0x6b, 0x9, 0x2, "84653375"}, 0xffb, 0x2, {0x0}}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000003c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) (async) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000140)="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") (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0xc0010015}]}) (async) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$rtl8150(r5, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x40, 0x17, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac2(r5, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="e01506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) 5m54.551096027s ago: executing program 9 (id=679): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000003540)={0x0, 0x0, 0x0}, 0x340000c1) syz_usb_connect$uac1(0x2, 0xfffffffffffffecd, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x582, 0x10f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x9, 0x5}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x200, 0xfff, 0x0, "f441a4440fb2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x78, 0x8, 0xba, {0x7, 0x25, 0x1, 0x8, 0x4, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xfc, 0x3, 0x8, 0x1, "371fc8"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x5, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x2, 0x1, {0x7, 0x25, 0x1, 0x0, 0xe, 0x3}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x55, &(0x7f00000000c0)=@string={0x38, 0x3, "ad1c71e63c0fdb6e11fa1ca3a34ccc17b8377ec41024a609344ef3cfbbb5d48135529d22d34f2d4b10eb8c0305a913386326695761eddaffe39d6b3127ecb6af865d092b016438a04983fdcd6357a953e63e13"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x405}}, {0xc7, &(0x7f0000000380)=@lang_id={0x0, 0x3, 0x2401}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2c09}}]}) 5m54.519539367s ago: executing program 2 (id=651): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000440)={0x0, 0xfb, 0xff, 0x2, 0xe, "7d05fcacaa3bedac95860490eaa683bf", "389e6310887b5e56d4c3344439d41d478f09c150c3e6873aaaccb5b9074ae36a987307779f896eefed62a49b61225089f8190ec6763ef8638b52864286294dbd910ff3bfb54d0b46e3001eadef5729285565fdc09cb4d5bf1b9d38ea229863924a635a351858ea118563ce6e45478c31757c2a49f36f451af5ba30f4155851e06e1b58aca70d92cbcf0877cabad473c246c3aa4dfb50213d09390828126b94babfe4458f1bf9f5c927a0399761e678c5fc401a1a048d5deea601f95af848eaa7d33f274c348da50349f99f70b70c25bf88d97e50a43ddfb7c224dbf5654d467ff69bcce0cc240b6ae25e"}, 0xff, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f00000021c0)='./file1/file0\x00', &(0x7f0000002200)='./file1/file0\x00', 0x0, 0x1085408, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x140) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r1, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) rmdir(&(0x7f0000000140)='./file1\x00') getdents(r1, &(0x7f0000000280)=""/31, 0x1f) open(&(0x7f0000000480)='./bus\x00', 0x0, 0x718bb647156ec3b7) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 5m54.307714566s ago: executing program 2 (id=680): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001100)={0x0}, &(0x7f0000001140)=0xc) capset(&(0x7f0000001180)={0x20080522, r0}, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xfff}) (async) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8916, 0x0) (async) syz_usb_connect$uac3(0x1, 0x9f, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRESHEX], 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001114013325bd7080fbdbdf25080001000000000008001d"], 0x28}, 0x1, 0x0, 0x0, 0x4040084}, 0x40) (async) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001900150000000000ffffffff0a0000000202000000000000240009801c00000000000000080005"], 0x40}], 0x1}, 0x0) (async) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000080)={&(0x7f0000000100)=""/4096, 0x1000, 0x8, 0x7}) (async) socket$pppl2tp(0x18, 0x1, 0x1) 5m52.534950702s ago: executing program 0 (id=682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000020a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xc4}}, 0x0) (async) syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x16f640) 5m52.431792897s ago: executing program 0 (id=683): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r0, 0x102, 0x1) getdents64(r0, 0xfffffffffffffffe, 0x4a) 5m52.277721099s ago: executing program 0 (id=685): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 5m52.028350406s ago: executing program 0 (id=687): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4b}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) 5m51.976369577s ago: executing program 0 (id=688): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000440)={0x0, 0xfb, 0xff, 0x2, 0xe, "7d05fcacaa3bedac95860490eaa683bf", "389e6310887b5e56d4c3344439d41d478f09c150c3e6873aaaccb5b9074ae36a987307779f896eefed62a49b61225089f8190ec6763ef8638b52864286294dbd910ff3bfb54d0b46e3001eadef5729285565fdc09cb4d5bf1b9d38ea229863924a635a351858ea118563ce6e45478c31757c2a49f36f451af5ba30f4155851e06e1b58aca70d92cbcf0877cabad473c246c3aa4dfb50213d09390828126b94babfe4458f1bf9f5c927a0399761e678c5fc401a1a048d5deea601f95af848eaa7d33f274c348da50349f99f70b70c25bf88d97e50a43ddfb7c224dbf5654d467ff69bcce0cc240b6ae25e"}, 0xff, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f00000021c0)='./file1/file0\x00', &(0x7f0000002200)='./file1/file0\x00', 0x0, 0x1085408, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x140) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r1, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) rmdir(&(0x7f0000000140)='./file1\x00') getdents(r1, &(0x7f0000000280)=""/31, 0x1f) open(&(0x7f0000000480)='./bus\x00', 0x0, 0x718bb647156ec3b7) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 5m51.872814448s ago: executing program 0 (id=689): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000040)={0x23, 0x14}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r2, &(0x7f0000000240)=[{&(0x7f0000000140)=""/16, 0x10}], 0x1) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) syz_io_uring_setup(0x2a45, &(0x7f0000000180)={0x0, 0x7108, 0xb2, 0x0, 0x40004, 0x0, 0x0}, 0x0, 0x0) 5m51.384491029s ago: executing program 9 (id=690): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f00000003c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) timer_create(0x9, 0x0, &(0x7f00000000c0)) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000001c0)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e) mount(0x0, &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080)='binfmt_misc\x00', 0x10880, &(0x7f0000000380)='nocase') r3 = memfd_create(&(0x7f0000000000)='\xa3\xcb\x04=\x827\xe7\x81S\bDVK| \x8b\xdb\xb1\x03\xd0\x9d2\x9es\x19_=#n_\xeb\xbdR\xea\xb9o\xdbM\x11ca\v\xeb#\xaf\xcf\xb5\xfd`U\xa7k\xd0\xd8\xd2\xc0\x91\xc1\x98#\r\xa7\x16\xfd@\xd7V*^\xcf\x9f\b1\xce3\vN\xa6\x01\xb5\xb5\xba\xdc\xc8\xda\xd2\apY\vu\x80\xa9\x14X\xcf!\xd3W\'\xb44#\xf6\x7fHS\xa6l\x17\x97\x80\xea\xc5+T\xe3\"\xda\x14\xfe,\xf3\\\xeb\x1cp\xd6\xc1\b\xec\xe1\x94\xdf\xdb\xa1\xf7=B\xb2\x94o\xd5{\xd2_\x93\xa1)\xdem\'H\\e\x8bu\xbcVw\xaeb\xa1b\xb1\xc1\f\x9f0\x93\x0f\x16,\xeb!Z\xa9\\\xf7B\xf8L\x05\xc7\xf7q\x9d_\xb4\xbb3i[t\xb6\xbc\x824\x7f\xd7\xb7 \xd4\x7fUE\xcb7\xe3\xb4\xb6\xa0\xd8\x1b\a8\xfe$\xa1\x12&\xb2\xfc\xfb\x12U\xb9u\xb4=\xc4\xc5q\x8bk\xf1\x9c\xc3\xa4w\xf9!^#\x8c', 0x4) preadv(r3, &(0x7f0000000500)=[{&(0x7f0000000200)=""/90, 0x5a}], 0x5a, 0x1fffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x401}}, './file0\x00'}) ioctl$TCXONC(r4, 0x4b45, 0x1) 5m51.355235647s ago: executing program 9 (id=691): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x820e, 0x200001) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2200, 0x0) r3 = socket(0x1d, 0x80000, 0x3) r4 = fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000100)={0x6, 0x5, 0x5, 0x0, 0x0, [{{r0}, 0x2}, {{r2}, 0x3}, {{r3}}, {{r0}, 0x3}, {{r4}, 0x5}]}) fcntl$getown(r2, 0x9) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r2) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r5, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x885}, 0x4) ioctl$PTP_SYS_OFFSET_PRECISE(r2, 0xc0403d08, &(0x7f0000000300)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340), 0x13f, 0x3}}, 0x20) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000003c0), 0x8a840, 0x0) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3000, 0x2}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r6) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r6, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r7, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000600), r3) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) getpeername$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0}, &(0x7f00000006c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000740)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000800)={'syztnl1\x00', &(0x7f00000007c0)={'gretap0\x00', 0x0, 0x7, 0x80, 0x5, 0x16e5, {{0x6, 0x4, 0x1, 0x2, 0x18, 0x64, 0x0, 0x7f, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, @broadcast, {[@noop]}}}}}) getpeername$packet(r6, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000880)=0x14) getpeername$packet(r3, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000900)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000cc0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000940)={0x338, r9, 0x100, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r10}, {0x1ac, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x55d}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r15}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r16}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x685}}, {0x8}}}]}}]}, 0x338}, 0x1, 0x0, 0x0, 0x20048804}, 0x4042) getsockopt$sock_buf(r3, 0x1, 0x1a, &(0x7f0000000d00)=""/233, &(0x7f0000000e00)=0xe9) r18 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000e40)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1784, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x20, 0x7, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x0, 0x1, {0x9, 0x21, 0x0, 0x80, 0x1, {0x22, 0xa6b}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0xd9, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x6, 0x3, 0x1}}]}}}]}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000000e80)={0xa, 0x6, 0x310, 0x4, 0x7f, 0xf9, 0x40, 0x1}, 0x132, &(0x7f0000000ec0)={0x5, 0xf, 0x132, 0x4, [@generic={0xf2, 0x10, 0x3, "2ae585ad94e4c2d1fd97f5571b06081034be7865fc171211454ec2db38c2b4621e2f63f1d92a4fa69108fb220bfe29339e76ea953b15b4ada74d1415f63078b9af17b8c86ed816cf44a1a5ef0e588c995449a2083fd08f11dcefd12b91e8ce57071e29cc93e455e5a315410bd9bfa143de2fc99e1b5f902c4ed8c08431ea87837a9fb32410749ad893e504912572bc866954bd64a67c121b886bc5108fecae006dfb9b42287dcfb2726e95ee9f0ef41d21b6de584df2370ea240bffe957aa2bd65be429dafaccdc6369ebf12b92499d29cb32fefa3aff9c854fd0fbb43dd0e43c8a824a80ca6ff50086ded1ffd40bd"}, @ssp_cap={0x10, 0x10, 0xa, 0xfc, 0x1, 0x10001, 0xf00f, 0x3, [0x3f00]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0x6, 0xd, 0x3, 0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0xc004, 0x1ef00, 0x7e28, [0x30, 0x0, 0xff0000, 0x3fc0, 0xf]}]}, 0x3, [{0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x405}}]}) syz_usb_control_io$hid(r18, &(0x7f0000001280)={0x24, &(0x7f0000001100)={0x40, 0x24, 0xb3, {0xb3, 0x5, "df31761b2f11d8cb070aa83c3b7ee8bdcbcde1fa3fe70219efc293cbc6a654db6b48a32473caab7f20cfb52b4dc427d239e7e474c05526cf06a27a6229680408d05f65f4747ab479327ed86740e0850b02af4312a68d242af257f0c36cd109cc9e2b6c197f1a6fb8e1dadba5cf588d2d86fb9a198bf5eb53f5bd5ce4f2b149dbb227477eb523e7700eaf5a42ce9d689ed14b628f2a18b8a75bc0efa096325569a6a734b1a1506b4d52018f6b88ebbf5249"}}, &(0x7f00000011c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x380a}}, &(0x7f0000001200)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "8ab6ba0d"}]}}, &(0x7f0000001240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0xb2, 0x1, {0x22, 0xd3}}}}, &(0x7f0000001480)={0x2c, &(0x7f00000012c0)={0x20, 0x31, 0x72, "c53a8ca27676f61875b3c5fab03e86cc36a38f3886dcdeec0eabb6eee9fa65a9303071d671c47c4cb1b061e0e77046ab40edc89c329c900b928507e69860c64f248a175bfa9c526d0a8484a4096402b59f188340a5019fb3d03ec6855ef8580e98e80cd397c8ec1fb0d259c53505e1068f03"}, 0x0, &(0x7f0000001340)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001380)={0x20, 0x1, 0x9c, "d8c1e1590093c0e1f6feb889f3bfaaf6785f508ebdaf78df6f56478cbd4c7023aa46e7512c8a130776817dc44efd0aa2caf6777d77e480caf33751116611c37958088e7a2025957bbe305df1cb45044ce59a5c583fcd1b13c0faf7c258e4412776200942a067afc82c7acbc626e2ffb20e4082a783360c13155d6618f53e3eef0178c17bee4a67bbcd13bf455712d89e40a8c91a9712babfd192d0b3"}, &(0x7f0000001440)={0x20, 0x3, 0x1, 0x9}}) 5m48.271497503s ago: executing program 9 (id=703): linkat(0xffffffffffffffff, &(0x7f0000004700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x1400) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) (async) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201ddad24f6154478d940e70000000000401c1b1a0a00000000000109022400010000e8010924000001030003000921fd7f000122ed"], 0x0) (async) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m48.1672819s ago: executing program 9 (id=704): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000380)={0x8, 0x0, 0x2}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x146000, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) r2 = socket(0x10, 0x3, 0x0) io_pgetevents(0x0, 0x4, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x4f, 0xc0, 0x8f, 0x8, 0x16c0, 0x5df, 0xb085, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc2, 0x92, 0x40, 0x7d, "", [{{0x9, 0x4, 0x4, 0xe2, 0x0, 0x3, 0x0, 0x0, 0x6}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x838}}, {0x4, &(0x7f0000000100)=@string={0x4, 0x3, "c163"}}, {0x34, &(0x7f0000000440)=@string={0x34, 0x3, "79241f968358d44957d13d5627a5e27a6683ca888ea87fd71a171be6b7f8078d13ade94e94d7900ac47dc04bb0ad463116ec"}}, {0x0, 0x0}]}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x8000, &(0x7f00000002c0)={[{@redirect_dir_follow}, {@redirect_dir_nofollow}], [{@fowner_eq={'fowner', 0x3d, r1}}, {@smackfsroot={'smackfsroot', 0x3d, '&\xc4!,!'}}, {@measure}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fowner_lt={'fowner<', r3}}, {@measure}]}) getsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000100), &(0x7f00000003c0)=0x4) 5m46.696384442s ago: executing program 9 (id=710): r0 = memfd_create(&(0x7f00000001c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3) pwrite64(r0, &(0x7f0000000180)='q', 0x1, 0x100004) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendfile(r1, r0, 0x0, 0xd39a) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r2, 0x7a9, &(0x7f0000000100)={{@hyper, 0x6}, 0x9, 0x7ff, 0x3, 0xa6, 0xb, 0x9e, 0xf8, 0x7}) 5m39.112020507s ago: executing program 50 (id=680): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001100)={0x0}, &(0x7f0000001140)=0xc) capset(&(0x7f0000001180)={0x20080522, r0}, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xfff}) (async) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8916, 0x0) (async) syz_usb_connect$uac3(0x1, 0x9f, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRESHEX], 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001114013325bd7080fbdbdf25080001000000000008001d"], 0x28}, 0x1, 0x0, 0x0, 0x4040084}, 0x40) (async) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001900150000000000ffffffff0a0000000202000000000000240009801c00000000000000080005"], 0x40}], 0x1}, 0x0) (async) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000080)={&(0x7f0000000100)=""/4096, 0x1000, 0x8, 0x7}) (async) socket$pppl2tp(0x18, 0x1, 0x1) 5m36.764667291s ago: executing program 51 (id=689): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000040)={0x23, 0x14}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r2, &(0x7f0000000240)=[{&(0x7f0000000140)=""/16, 0x10}], 0x1) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) syz_io_uring_setup(0x2a45, &(0x7f0000000180)={0x0, 0x7108, 0xb2, 0x0, 0x40004, 0x0, 0x0}, 0x0, 0x0) 5m31.634906432s ago: executing program 52 (id=710): r0 = memfd_create(&(0x7f00000001c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3) pwrite64(r0, &(0x7f0000000180)='q', 0x1, 0x100004) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendfile(r1, r0, 0x0, 0xd39a) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r2, 0x7a9, &(0x7f0000000100)={{@hyper, 0x6}, 0x9, 0x7ff, 0x3, 0xa6, 0xb, 0x9e, 0xf8, 0x7}) 4m57.688925989s ago: executing program 5 (id=902): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x7d}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="18fdffff1500010a000000000c0000000c00008008ef634d91a66e11b56ee64b5d969ba76808d93bfeb155d23e4a77e6"], 0x20}}, 0x40000) r1 = syz_open_dev$audion(&(0x7f00000000c0), 0x2, 0x8040) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000140)={0x6, 0x0, 0x1}) 4m57.507212537s ago: executing program 5 (id=904): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ad183840102c4f000000010902240001002a00000904000040"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ad183840102c4f000000010902240001002a00000904000040"], 0x0) (async) syz_usb_disconnect(r0) (async) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[], 0x0) (async) 4m54.304243294s ago: executing program 5 (id=920): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r0, 0x102, 0x1) getdents64(r0, 0xfffffffffffffffe, 0x4a) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000100)={@id={0x2, 0x0, @c}, 0xa, 0x0, '\x00', @auto=[0x3a, 0x1c, 0x40, 0x14, 0x2a, 0x23, 0x25, 0x17, 0x40, 0x20]}) 4m54.079682002s ago: executing program 5 (id=922): r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800) syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/config\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x40, 0x13c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x4c) r2 = accept4(r1, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000a00)=[{&(0x7f0000000c80)="2f5fc304d734271e5a1f877f8a7764676f1949bafc2eb69505293f785a1b8d7ac2618066b189d082bf76dc24509b1657146881034f03104ec555f21bbd194a79c264e079c79e29f20d50bd90c769d02af57453a939ebfc7846f26e29384e49172ce0b8e43e3217a9262a6c0dbd592c273b64f01dcd4915e2674b320fe9c70f1585295b119bc940a23d1b4eb8920e36c9bea4f7ba85eddd3d06c667301c5b1af87a8b7a79b639eed682ad54899c3b3382855ccf38f646749c3cb1adc858c97640591153d266573172e80b0bcd5bc98a6b00af9057d213491cc294b6c7524a15b58d191b2353746803a4cdf8c7de382c68579dad266bc3676937761386d7142b64e75f761a829a40c6a04c81fa4a9ccae6e73b12316a503a90145da76b6354f0b2bce44d7864e10c545509ad917db4a5854ec05b5b7b439a76bafd9c4d5c9f4b96b1d630138a8b973ca8adf83272f82d2b55114e35d8b96fa99e798c16770353a61764d607368bbcb9b3df4315280b1e2bc4d178beee61525871c45bcbc84aff8006bb1671a5818dc0a8935d97af3afb914bb200a311b668f87e2bcfda40003ca1da56c522c2da764973f76f91faf4bce0ab463b8cfb83d5cbd750127c78c882ae8f2dd53648de1dc9c423d997353697b2bb1c440f15cd6606276f9901d81ab53ea8579ac765f9a918c13ee59e1588c029a2c94c50929704ad12afdf7096a0db34844e0d8cdc8f5c15d94553f6d2291c69c42dd5433512396bf96ffdaec01c7ee9be240c572aaa9251676dbd2b9856a33410d31aa299498edbbf61ee2d8aaf74f55081790da5175ddf08eb0b18c4948058755b886b6ae41fb98fe1479b7a5f1f5c8b1815256affd7cac826f8168ddc6ac2bf611ed335ed20c2e3f2579e30b685e08c44372a47bfe411ce4ee8ac66dfa113e887bf6575b6d052159aae1ab1fab3bdf62b2bc8413ba975493cbb9743112b32162e00fe0ebe53bc3be221a8df430ce8c1642b7abe122cfcf5445ecfd6a4efbe12804ba37f5dc08415f732c25e454c1ddb162ddfd9556fa42276272c100ee474e29f121fb44336afdf286e01f930813ab51d42028a816d875b67387cabc9226191548604d2502b99c6870eabbf486a767a18003c9a67842277043d59784a877f994f7cde6b74c754e61e350f75ad0c304d2cf66e17024c33a8b729cd65b618cc92fda7e5d00d8095551c72e22deff968b8eb760b05aaabc00610dc9137444606989e497f76a490ec2770915b6a7d8e27a7", 0x381}, {&(0x7f00000008c0)="03", 0x1}], 0x2, 0x8) splice(r3, 0x0, r2, 0x0, 0x8000, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$watch_queue(r0, &(0x7f0000000580)=""/20, 0x14) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x485, 0x0, 0x800005}]}) r8 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x10, 0xb, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x1, 0xf2, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x71, 0x3f, 0x7f}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x8, 0xc, 0x81}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x88, 0xf5, 0x3, 0x40, 0x1}, 0xbd, &(0x7f0000000100)={0x5, 0xf, 0xbd, 0x4, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xb5, "8322a2fbd3110348e4207f02c11e85d1"}, @generic={0x96, 0x10, 0x1, "9e56e1006aac8b3d4f5a679ecff690805ea1e9ab7bc5453211763607e5ff37d889fdaa33fd59cf80b31c33c414fba008574b73f3996f0268acb7c030890294e3a90da140f7b642c55def26243f6531a940cc6b7bfe490a61691800dd8b7acf63a88108359d577eac250ae97b6e3b8465ade255bd846e3419770e070badb342853bb3f1884a043c8924701c5722194ab8a1d1d1"}, @wireless={0xb, 0x10, 0x1, 0x8, 0xa2, 0x4, 0x6, 0x7, 0x9}]}, 0x6, [{0xdf, &(0x7f00000001c0)=@string={0xdf, 0x3, "145c008a39a507c130d8986c86e2e1d47152988e697e8c92d65b465371552d495775491033d98af942449d57ccd8d66ffa559da456d583e71d7d35b72ba35d50b2aa3a744845928344e683733c6577728f78c20568a796b0cab48b9fac679220a7fc8a32611462c6d8054069087bcbf6dd38c23a9b29436eb54ab5f2bba32e65119f05c1c9d75eacb3eef273602a6750e70cabf3efaeb64538abfc6c8683fba55ca921f7b71701fbed7d7f6e57a5f7fe550d1c25d5c9c7e3abd00cca8fe403851c6060135176c91df393644e245211d8d7532f80249172dfbc990722be"}}, {0x5, &(0x7f00000002c0)=@string={0x5, 0x3, "3e2492"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x416}}, {0x2f, &(0x7f0000000380)=@string={0x2f, 0x3, "c8320680114c25cc2923dc5c1c0059279652006db054d93b8960007691486a03413dfa625d21dde9fcad1bed82"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x409}}]}) syz_usb_control_io$printer(r8, &(0x7f00000005c0)={0x14, &(0x7f0000000480)={0x40, 0xc, 0xe4, {0xe4, 0x10, "9cb5cc09fc00624dbbfa741a6179e3c90d027062bb3aad78ab9809cc0e1877fda04003887d3d0a322fb4edf84f988cd3b85d13d77c527c627939661f8418a1d5670a408d5f660a94e44f197f33954c9e72278e344d77104075ee4f14e26c186431fd0294ee5c1fec68b7ab4faa7aea7f2e14e722567732ccb50c1c92b107f7eeef8bf897b17cc82726aa1b89d1302075d21f2f1ec4a539924cb03ddc91e915e55a722b95d35c0567176ec8fd776ee5553bb3ac2815066bc96693cfdd1baf0c2983199096d2286dddde64a559a3376e8be5be2f7b89ae911075940f6132440543f2ec"}}, &(0x7f00000007c0)={0x0, 0x3, 0x95, @string={0x95, 0x3, "4fdde42b3ee104dea5b6248a6bcf8590a5c4eb791a6e9027988a892bb1abe775e386072ac1965ef82f6d5413228030f9c972c103dfc5ec5c08a6c5121b5ab5c8913901b9f8931d03e2ddc46c5a64e48769e5117f4967f85e50429e5ac173920d601d0834866db7ff7a73f1671c9c9b735ea8959c8a676ec23cf1d5d3c60e2571970f042acd64db3471c17f7800366f908e3b45"}}}, &(0x7f0000000780)={0x34, &(0x7f0000000600)={0x40, 0x1, 0x13, "c89b30ab2fbdd5028f5d3c41d4ec27338eca65"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000006c0)={0x20, 0x0, 0xf, {0xd, "f245084bc15fc9f7439b51bc92"}}, &(0x7f0000000700)={0x20, 0x1, 0x1, 0x22}, &(0x7f0000000740)={0x20, 0x0, 0x1, 0x3d}}) mount$9p_rdma(&(0x7f0000002a00), &(0x7f0000002a40)='./file0\x00', &(0x7f0000002a80), 0x2, &(0x7f0000002b80)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x7}}, {@rq={'rq', 0x3d, 0x6}}, {@common=@dfltgid}, {@timeout={'timeout', 0x3d, 0x7a}}, {@timeout}, {@timeout}, {@common=@posixacl}, {@rq={'rq', 0x3d, 0x5}}], [{@fsmagic={'fsmagic', 0x3d, 0xfffffffffffffff9}}, {@subj_type={'subj_type', 0x3d, 'ip6gre0\x00'}}]}}) 4m52.284701215s ago: executing program 5 (id=930): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r0, 0x102, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = getpgrp(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000280)={0x40000002}) r5 = syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r5, 0x7, r3, &(0x7f0000000180)={r4, 0xffffffffffffffff, 0x3}) getdents64(r0, 0xfffffffffffffffe, 0x4a) 4m52.036658284s ago: executing program 5 (id=931): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5457, &(0x7f0000000000)={0x0, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) (async) ioctl$TCSETSF(r0, 0x5457, &(0x7f0000000000)={0x0, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000001c0)={0x2, 0x101, 0x40, 0x400, 0x1, "e729caee91a523dd000001040000000000f700"}) 4m36.705580923s ago: executing program 53 (id=931): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5457, &(0x7f0000000000)={0x0, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) (async) ioctl$TCSETSF(r0, 0x5457, &(0x7f0000000000)={0x0, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000001c0)={0x2, 0x101, 0x40, 0x400, 0x1, "e729caee91a523dd000001040000000000f700"}) 3m12.304534869s ago: executing program 3 (id=1419): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbca313a181002d000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) (fail_nth: 3) 3m12.208049085s ago: executing program 3 (id=1421): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r1, 0x40045109, &(0x7f0000002240)) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000074f000/0x400000)=nil) read(r0, &(0x7f0000001600)=""/233, 0xe9) r2 = fsopen(&(0x7f0000000200)='pstore\x00', 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000a40)=[@mss, @sack_perm, @window={0x3, 0x7}, @timestamp, @window={0x3, 0x3, 0x401}, @window, @window={0x3, 0x2, 0xdcd}, @window={0x3, 0x2, 0x200}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r3, &(0x7f0000000100)=""/24, 0xfffffffffffffd5b, 0xc9100120, 0x0, 0xfffffffffffffd25) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000818000/0x2000)=nil, 0x2000}}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x4b4b, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r5, @ANYRESOCT=r5, @ANYRESDEC=0x0, @ANYRESDEC=r3, @ANYRESDEC=r0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r5, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffc9, 0x0, 0x0, {0x0, 0xfffffffb, 0x0, '\x00', {0x200, 0x5d856276, 0x9, 0x803, r7, r8, 0x1000, '\x00', 0x100000007, 0x8, 0x100000001, 0x3, {0x8, 0x7}, {0x7, 0x3}, {0x0, 0x5}, {0x1000000002, 0x9fc}, 0xd, 0xa, 0xfffffffe, 0x1009}}}}) write$FUSE_INIT(r5, &(0x7f0000001200)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0x22000100}}, 0x50) 3m11.189324401s ago: executing program 3 (id=1424): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f00000000c0)="4a9c", 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pwritev2(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) 3m3.060707009s ago: executing program 3 (id=1458): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x100000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x703, 0x270bd24, 0x25dfdbf8, {0xd}}, 0x14}}, 0x4008800) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3m2.858866481s ago: executing program 3 (id=1459): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x200000000000d48, 0xfffffffffffffffb, 0xffffeffffffffff8, 0x1, 0xfffc, 0x0, 0x1000000000000007, 0xa, 0x0, 0x6, 0x200000000000, 0x39, 0x401, 0x3, 0x9, 0xffffffffffffffff], 0x2000, 0x20000}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x6c, {"2e450fe0dfb805000000b9e2e3ffff0f01c10fc7b80050000066ba210066edc74424000d000000c7442402fdffff7fc7442406000000000f011c240f20c035000000800f22c066420f2900c4a3e144fe5e420f01cbc421ee586f00"}}], 0x6c}) syz_kvm_add_vcpu$x86(r2, &(0x7f0000000000)={0x0, &(0x7f0000000240)=[@out_dx={0x6a, 0x28, {0x3720, 0x1, 0x929d}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @cpuid={0x64, 0x18, {0x8, 0x9}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x4d9, 0x4336, 0x7f, 0x8}}, @nested_amd_stgi={0x17e, 0x10}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_amd_invlpga={0x17d, 0x20, {0xc000, 0x6d5}}], 0xe8}) ptrace(0x10, r1) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xf, r1, 0xa083, &(0x7f0000000180)) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000440)={0x1, 0x0, {[0x3, 0x5, 0x72, 0x100000000, 0x6, 0x6f, 0x6, 0x2]}}) ptrace$cont(0x21, r1, 0x8, 0x4) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000080)) r4 = fsopen(&(0x7f00000000c0)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x8, 0x0, 0x0, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x1) 3m2.552349085s ago: executing program 3 (id=1460): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x82002, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x240401) syz_usb_disconnect(r4) syz_usb_connect(0x6, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r4, 0x80085502, &(0x7f0000000100)=0xb) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0xeeee0000, 0xb, 0xfefffffb, 0xfffffffc, 0x0, [{0x0, 0xfc, 0x8, '\x00', 0xb4}, {0x83, 0x9, 0x8, '\x00', 0x4b}, {0xf9, 0x6, 0x47, '\x00', 0x7f}, {0x0, 0x5, 0x8, '\x00', 0x8}, {0x28, 0xd, 0x5, '\x00', 0x3}, {0x2, 0x5, 0x6, '\x00', 0x3}, {0x6, 0xf, 0x4b, '\x00', 0x6}, {0x5, 0x90, 0x6, '\x00', 0xe5}, {0xd, 0x7, 0xa7, '\x00', 0x1}, {0x9, 0xcc, 0x9, '\x00', 0x5}, {0x1, 0x0, 0xb, '\x00', 0x8}, {0x0, 0x3, 0x2, '\x00', 0x7}, {0x1, 0xca, 0x80, '\x00', 0xa}, {0x7, 0xf1, 0x2}, {0x8, 0x4, 0x0, '\x00', 0xfd}, {0x6, 0x0, 0x4, '\x00', 0x9}, {0x7, 0x2, 0x4, '\x00', 0x10}, {0x9, 0x6, 0x4, '\x00', 0xff}, {0x11, 0x41, 0xf, '\x00', 0xfe}, {0x22, 0x3, 0x54, '\x00', 0x4}, {0x1, 0x3, 0x6, '\x00', 0x4}, {0x9, 0x40, 0x7, '\x00', 0xfc}, {0xa, 0x0, 0x6, '\x00', 0x7}, {0x7, 0x5, 0xfa, '\x00', 0x40}]}}) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000100)=0x9) ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, &(0x7f0000000040)) ioctl$KVM_SET_TSC_KHZ_cpu(r5, 0xaea2, 0x6) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffa000/0x3000)=nil, r6, 0xa, 0x80010, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xb2}}, './file0\x00'}) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000140)=""/200) 3m2.013607348s ago: executing program 54 (id=1460): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x82002, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x240401) syz_usb_disconnect(r4) syz_usb_connect(0x6, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r4, 0x80085502, &(0x7f0000000100)=0xb) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0xeeee0000, 0xb, 0xfefffffb, 0xfffffffc, 0x0, [{0x0, 0xfc, 0x8, '\x00', 0xb4}, {0x83, 0x9, 0x8, '\x00', 0x4b}, {0xf9, 0x6, 0x47, '\x00', 0x7f}, {0x0, 0x5, 0x8, '\x00', 0x8}, {0x28, 0xd, 0x5, '\x00', 0x3}, {0x2, 0x5, 0x6, '\x00', 0x3}, {0x6, 0xf, 0x4b, '\x00', 0x6}, {0x5, 0x90, 0x6, '\x00', 0xe5}, {0xd, 0x7, 0xa7, '\x00', 0x1}, {0x9, 0xcc, 0x9, '\x00', 0x5}, {0x1, 0x0, 0xb, '\x00', 0x8}, {0x0, 0x3, 0x2, '\x00', 0x7}, {0x1, 0xca, 0x80, '\x00', 0xa}, {0x7, 0xf1, 0x2}, {0x8, 0x4, 0x0, '\x00', 0xfd}, {0x6, 0x0, 0x4, '\x00', 0x9}, {0x7, 0x2, 0x4, '\x00', 0x10}, {0x9, 0x6, 0x4, '\x00', 0xff}, {0x11, 0x41, 0xf, '\x00', 0xfe}, {0x22, 0x3, 0x54, '\x00', 0x4}, {0x1, 0x3, 0x6, '\x00', 0x4}, {0x9, 0x40, 0x7, '\x00', 0xfc}, {0xa, 0x0, 0x6, '\x00', 0x7}, {0x7, 0x5, 0xfa, '\x00', 0x40}]}}) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000100)=0x9) ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, &(0x7f0000000040)) ioctl$KVM_SET_TSC_KHZ_cpu(r5, 0xaea2, 0x6) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffa000/0x3000)=nil, r6, 0xa, 0x80010, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xb2}}, './file0\x00'}) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000140)=""/200) 8.626426905s ago: executing program 8 (id=1997): r0 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582", @ANYRESHEX=0x0], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='proc\x00', 0x4045, 0x0) chroot(&(0x7f0000000b80)='./file0\x00') openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r1 = socket(0x15, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f00000002c0), 0x2, 0x0) syz_io_uring_setup(0x77a9, &(0x7f0000000140)={0x0, 0xe498, 0x2, 0x0, 0x43}, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffb]}, 0x0, 0x8) syz_clone3(&(0x7f0000000280)={0x100000, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x58) rt_sigtimedwait(&(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x0, 0x8) write$cgroup_freezer_state(r3, &(0x7f00000000c0)='FROZEN\x00', 0x7) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) getsockopt(r1, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8483e0000005e145802000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 8.081217845s ago: executing program 6 (id=2001): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r4, &(0x7f0000000680)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000001140)=""/5, 0x5}}, 0x120) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0xc8, r2, 0x101, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x74, 0x51, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x1f580e}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "09d3b4811b39d4bfc8c5429ae8"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "81340d2bcab61c4d046cc91b4b"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_SEQ={0x7, 0x4, "f41e69"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}]}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x800, 0x1, 0x2, 0x0, {0xff, 0x1965, 0x0, 0xf2, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x400, 0x80000000, 0x6}}]}, 0xc8}, 0x1, 0x0, 0x0, 0xc095}, 0x4010) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba12", 0x11}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, 0x0, &(0x7f0000000000)=0x51) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r8, 0x10, 0x3, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x56}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) close(0xffffffffffffffff) 7.186658433s ago: executing program 6 (id=2004): r0 = socket$kcm(0x10, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000540), 0x3179d5ea, 0x163d01) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210003000401a80016000a00014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 6.208092823s ago: executing program 6 (id=2006): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0/../file0\x00'}, 0x6e) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r2, 0xf0000000) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000014c0)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect$cdc_ecm(0x2, 0x62, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x0, 0xb0, 0x9, "", [{{0x9, 0x4, 0x0, 0x10, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x9, 0x24, 0x6, 0x0, 0x0, "ab63e78d"}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x3ff, 0x7ff, 0x80, 0x12}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7, 0xf7, 0xe2a}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x73, 0x0, 0x80}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0x9, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xb, 0x8, 0x80}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x2c, 0x1, 0x5, 0x20, 0x9}, 0x24, &(0x7f0000000180)={0x5, 0xf, 0x24, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x0, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x5, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0x6, 0xc0, 0x5, 0xff}]}, 0x7, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x82c}}, {0xfa, &(0x7f00000002c0)=@string={0xfa, 0x3, "16306964b3bdec881fb0e2c72293631b325b42bd22d8bded280173d56772d7a1e5725a2b21e9657acb6a214c433f843855cc9216e33c73ce663d31b69e47098008934bdfb5ff16d5676355b26c78b1d25739b0eaa32090144402fd1df8ff4d24ea70d09051a69f15242ea8b42cc220858b084a1f0bbbaaab32714df36fd3358cd5db2b38a6ab68806383d4d4597a5a03aa2c0e59253ebbfcbbce7364fd75571ca976472eabf4197a97361e40531c60f5e95289d180a8aa9a94d0c9d33abcdff33c036e82b9e5d6b65696e67d974f2f97164e7cb21bfc25efd0166029f8b73a89430574870edc4753ac430d0dd610aaef070056fa5f9c482b"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x424}}, {0xf0, &(0x7f00000004c0)=@string={0xf0, 0x3, "8d2e55a4530565c88c5cddbcfe01a25ea569e0a365557a3a0b0eab2056b8585e2ac4f28dbe07c086b236a8fb574cdf28d70b4eb00f9793d6aeee33cbf0275de4b9b32036afaa0e1902b7c22f22a212148ec034d417c3876e9eb4697b9d37eca723d0890e000c44f919d4682517385b40543f00bf8f573f1066269a92ef2de135357c25b69a7dcc2deafd2c05a54b7013f547cfb5129c1cb5a81feff667a425db2c16c994986377c5ed95c5c3ffe54be4d0ee3043ccad8ce26ac9edf9b082f1e78ec34eb8cb96f8f7f36d1ee0fbb2cb33bd015ef2f6ffa7924c4f629afa73c7d2901a1d0ee8fbf9bdbfd6af929ea4"}}]}) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000740)={0x14, &(0x7f0000000640)={0x40, 0x2a, 0xbb, {0xbb, 0x6, "1be0518a650ee0ee867db0f9504f4c3f39b032ab14e4b291a69436ae6474cf6250e1783ac61ebcf1474466d8cc24e8dccf12f35e2b7a6a603398e348ac403013aef8a8a3264e6f3136380e2256f1bccf6e3713b9437df274f2c1a0e2385066d6fddfb86947eae1f262cbed35456cee3bdbfdb81dce9b8060e9250a22aa31b26ad9172783adc84b60612968e4095fa19c740e2653035fd5fdcfcbe8037f0a5b8b67a73afc5e8c16baea25ada879c30a8ec41124d0bcb56140d6"}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x1c, &(0x7f0000000780)={0x40, 0x17, 0x55, "ce0a6277c96a45e6ddf1168788a65ff5a8095a76632b6621a9dcf4fd1df3e0e9405cc9e5b7c83124d425eabb4e9e156ac60927705089dd13464ed0bc26c3a23c6cd63d023094f053319ffad48e8ed4919ad35c3406"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x7f}}) 6.205259864s ago: executing program 8 (id=2007): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000580)={r1, 0x2, 0x1, 0x9, 0x5c0, 0x1ff, 0x8, 0x100, {r1, @in6={{0xa, 0x4e23, 0x7fff, @remote, 0x800}}, 0x6, 0x2, 0x7, 0x401}}, &(0x7f0000000340)=0xb0) 5.088457146s ago: executing program 8 (id=2013): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0xfb848b59267d3823, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x25}, @void, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000800}, 0xc0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)={0x3c, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 4.91987278s ago: executing program 8 (id=2014): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff018}, {0x6}]}, 0x10) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f00000014c0)={'sit0\x00', &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @empty}, @multicast2, 0x10, 0x8}}) listxattr(&(0x7f0000000100)='./cgroup\x00', 0x0, 0x0) r3 = semget$private(0x0, 0x5, 0x0) semop(r3, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) 3.924691725s ago: executing program 6 (id=2017): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'wg0\x00', 0x0}) r2 = socket(0x10, 0x2, 0x405) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r1, 0x29, 0x0, 0x0, 0x0, 0x5a, @dev={0xfe, 0x80, '\x00', 0xf}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x7f, 0xfffffffc, 0xdc66}}) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000080)={0x0, 0x34324241, 0x0, @stepwise}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', r1, 0x0, 0x0, 0x1, 0x0, 0xd, @loopback, @empty, 0x700, 0x0, 0xfffffffc}}) bind$rose(r2, &(0x7f0000000140)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) 3.382573819s ago: executing program 6 (id=2021): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) (rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x22) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (rerun: 64) 2.868510284s ago: executing program 7 (id=2024): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x98}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560f, &(0x7f0000000000)) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x804) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x200102, 0x0) poll(&(0x7f0000000140), 0x41, 0x5) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}}, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002c0001000000000000000000020000800c000000000000000000000014"], 0x114}], 0x1}, 0x0) 2.627879856s ago: executing program 6 (id=2026): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="034c4bde2cc9e87883b7d5bc7c628e24e30cf097125649b4757344d2d544c6d6cf4abc085d0ecad661dc8d79900ef69f66"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000380)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f00000006c0)={0x40, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.327314312s ago: executing program 4 (id=2028): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x4040050) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r5 = accept4(r0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000001000)={@private1, 0x5e}) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000005000)=ANY=[], 0x1198}, 0x1, 0x0, 0x0, 0x40}, 0x880) recvfrom$inet(r5, &(0x7f0000000000)=""/4084, 0x1198, 0x2102, 0x0, 0x0) 2.184282162s ago: executing program 4 (id=2029): setresgid(0x0, 0xee01, 0xffffffffffffffff) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0xefffffff, 0x20000080}, 0x40048004) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) writev(r0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota']) r1 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000701, 0x0, 0x0) chown(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) 2.129920374s ago: executing program 4 (id=2030): unshare(0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000005140)={'syz0\x00', {}, 0x0, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000], [0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40004, 0x10001, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x1], [0x2, 0x0, 0x0, 0x0, 0x0, 0x65e, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x533f30c6, 0x0, 0x0, 0x0, 0x5, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100004, 0x80000000, 0x0, 0xfffffffe, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3]}, 0x45c) getsockopt$bt_hci(r0, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) 1.987606799s ago: executing program 4 (id=2031): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x200, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x200}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000011}, 0x4040104) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14, 0x10}}, 0xbc}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) 1.860380194s ago: executing program 7 (id=2032): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0xfb848b59267d3823, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x25}, @void, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000800}, 0xc0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)={0x3c, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 1.596377857s ago: executing program 8 (id=2033): socket$netlink(0x10, 0x3, 0x4) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0x15, 0x0, &(0x7f0000000040)) (async) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="b805000000090200e1490000320f01d9660ff7e31bf7ececea55bf000000010000c0fe0fae41d90100c8800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x56}], 0x48, 0x17, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) (async) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000340)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.596060459s ago: executing program 4 (id=2034): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRES8, @ANYRES8, @ANYRES64=r0, @ANYRES32=r0, @ANYRES64=r0], 0x0) 1.554108921s ago: executing program 7 (id=2035): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x600, 0x0) ioctl$TCFLSH(r1, 0x40045431, 0xfffffffffffffffd) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r3) (async) r4 = open(&(0x7f0000000100)='./file0\x00', 0x800, 0x10e) fcntl$setlease(r4, 0x400, 0x1) (async) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x20400, 0x74) unlinkat(r5, &(0x7f0000000080)='./file0\x00', 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000040)={r3, 0x0, 0x0, 0x9}) close_range(r6, 0xffffffffffffffff, 0x0) (async) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fcdbdf25260000001000b00003020000000407004000a1000800a1000a0000000800270003000000050019f6c6000000080027000000000008002700010000000800270000000000080027000200000010009d000000000c0e00040002000000c683aaed8f05b091feca55815d7713f451727f4d97df48a80a6fd5b9778c52ce5c62901a5470ad55810bcb5acf5949a79b1d690c086ee3218cc86c7410369693f6c525e33e437344e57dc13eaaa9c88c8f4375865ea1c3c487a189bd84645c6665f3563950dece3aebaffb396719129fd51962382bc4888ae4376b30814f0f367bea555b5034d37302ea2e146b6ccc3e45f25efd3f6f196a62e5e7106397ca917d25a10cb7f4b4dce2d05812fa16da824ab78db31192c61a8641db46e376f2e28157b8db845988b06f6adf601bd27c0362a0e717a79f9b6591bcef6600"/332], 0x6c}, 0x1, 0x0, 0x0, 0x140000c0}, 0x81) 1.375431762s ago: executing program 7 (id=2036): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) request_key(&(0x7f0000000000)='.dead\x00', 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) clock_nanosleep(0x3, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="75b377804bfd68c447a663d33ca3be79eff51d37b871f4814f22e12de46ef9f5f38a333b11e2e7047d84349ac2e9c8158fb6d8c273b00325e9ab59ffd3705028640b70dea963be31f7d350e74ad3ba8a15666ace670d3e835d5e4177660a5b", @ANYRES16=r2, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r3, @ANYBLOB="040046000a0034000202020202020000080022010b02000008009f000000000004005180"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x4c8c0) syz_init_net_socket$ax25(0x3, 0x2, 0x1) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000440)=0x9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x7f) capset(&(0x7f00000004c0)={0x20071026}, &(0x7f0000000100)) syz_init_net_socket$ax25(0x3, 0x5, 0xce) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SIOCAX25ADDFWD(r5, 0x89ea, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) close(0xffffffffffffffff) 1.18435063s ago: executing program 7 (id=2037): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x7d) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x815, 0x13, 0xfffffffd, 0x4}) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000066c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x2, {0x2, 0x0, 0x10001, 0x10000, 0x0, 0x3, {0x80000000000000, 0x3, 0x400000, 0x5, 0x0, 0x0, 0x250, 0x0, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000000800)={0x50, 0x0, r7, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x26b66926}}, 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r8, 0x401870cb, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000000c0)={0x2, '\x00', {0x5}, 0xfffc}) listen(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}, {@verity_require}]}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000000)=0xc25, 0x4) sendto$inet6(r1, &(0x7f0000000100)="90c0203ee649c2c11c2f80100a313424d84180f46da00e56be0aa51541dd81ed06471d91b118824ad95fb220f7a4fef50808a237eb31c21cd3e55bf691258ed54bc912e1a708e485fd2a304f2527407376547c69a1acd021afeb6cb0296716404d4e21654bdc93ace1050c41df84838e581eec5726cf6967baa8242a070f5dfc133613a09ae5d59cf36498f8b732dc662a213b92c989c9ce2c456e99d6cdc6a727a1fb70aa13637ea2ad364de136ece6abd4052c6c2293f4085fe46ec4f84cad8e56d0f4775239478016831eb3621cf5681be65827d2ce7fcfb3305a07d4e0ce1d26fd50eabea334591428ea59b1", 0xee, 0x20000000, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000706010200000000000000000500000605000100070000000900020073797a3200000000b6423dbfabcf8c7605c9011fb2ad504f34da96e603e84304ffed04f6ce8875edb255902cc357f9ce11286b79ceca3ad8b154e7e0728efc2d6548e5e5fb38fd9c68ca13a9ccd1f30f1c2d1857021a49a128352b7c3c6ab96a838358a369e615442f89773c6a6f4a8ceb"], 0x28}}, 0x10) socket$igmp6(0xa, 0x3, 0x2) 922.518322ms ago: executing program 7 (id=2038): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000f00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r4, &(0x7f0000000240)={0x1000000, 0x0, 0x2, 0xffff, 0x3, "82b0cfc4337965941538be02000000000000000000007400a391793ba7f40000000000fdf700"/48}, 0x40) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r2) unshare(0x2040400) r5 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) r6 = memfd_secret(0x0) fsmount(r6, 0x4000000000000000, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc, 0x2}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x4, 0x7}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r7, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x80000001, 0x0, 0x0, 0x10000004, {0x40, 0xd08, 0x0, 0xfe, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r7, &(0x7f0000000440)={0x50, 0x0, r8, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r9 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r9, 0x400c0930, 0x200000000005) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r10, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r11, 0xffffffffffffffff, 0x0) close(r0) 302.356802ms ago: executing program 8 (id=2039): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)={0x18000002}) (async) time(&(0x7f0000000000)) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[], 0x0) 0s ago: executing program 4 (id=2040): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x24, r1, 0x1, 0x70bd31, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x24}, 0x1, 0x0, 0x0, 0x18800}, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x3, 0x0) read$msr(r2, &(0x7f0000000100)=""/20, 0x14) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xc, {"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", 0x3b3cc1e9e7df1ab7}}, 0x9b) r5 = socket(0x1e, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r7 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x1) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x9c, 0x0, &(0x7f0000000300)=[@release, @increfs_done, @enter_looper, @increfs, @release={0x40046306, 0x3}, @dead_binder_done, @free_buffer={0x40086303, r7}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fda={0x66646185, 0x8, 0x2, 0x2f}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/44, 0x2c, 0x1, 0x2e}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}}, &(0x7f0000000200)={0x0, 0x20, 0x48}}, 0x400}, @increfs={0x40046304, 0x1}], 0xca, 0x0, &(0x7f0000000480)="a6aed243f2134bdfb1b2dbdff5460d4bda360d35724303967be750492453020c0318320b41924a1839e65207bf26b6d24ce08a08c5b118bd1833d09b1aa548692ea52a88e77e77fa99019adbfe5f178cf819defd896c4f294f34653442479c9a64d64589801860dd9840ecbfb1f00efdb90f220b5007c41509f4dbd7481d63ecd4b911a701574b01aa645b45b52bc888e4896665b5ea6e7e4f0883e471b5fba93deaa79f7ac231120da7a50583d1d74426326826436530c88c0870269598fc472e65949c6cdc3cf15aec"}) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x4}, 0x10) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x1, 0x80}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="200000001e0021000000000000000000070008000a00020077a9e20000000000"], 0x20}}, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r9) r12 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x8240, 0x0) r13 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x3, 0x2, 0xffffffffffffffff) setpgid(r13, r13) setpgid(0x0, r13) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r14, r14) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000400)={0xfff, 0x8, {r13}, {r14}, 0x7, 0xa318}) mmap(&(0x7f000004c000/0x1000)=nil, 0x1000, 0x1000001, 0x28011, r12, 0x300000) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r11, 0x1, 0xfffffffc, 0x0, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x0, 0x6472333b}}}}, 0x30}}, 0x20000040) kernel console output (not intermixed with test programs): DC or it's busy [ 533.286306][ T5946] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 533.295890][T15975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.311226][T15975] overlayfs: failed to resolve './file0/file0': -2 [ 533.487081][ T5946] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 533.500863][T10380] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 533.518495][ T5946] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 533.529145][ T5946] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 533.537766][ T5946] usb 9-1: Product: syz [ 533.542507][ T5946] usb 9-1: Manufacturer: syz [ 533.549015][ T5946] usb 9-1: SerialNumber: syz [ 533.654812][T10380] usb 5-1: device descriptor read/64, error -71 [ 533.795921][ T5946] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 533.914943][T10380] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 534.054785][T10380] usb 5-1: device descriptor read/64, error -71 [ 534.165128][T10380] usb usb5-port1: attempt power cycle [ 534.526504][T10380] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 534.549921][T15981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.559255][T15981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.568749][T10380] usb 5-1: device descriptor read/8, error -71 [ 534.686404][ T5946] usb 7-1: reset high-speed USB device number 18 using dummy_hcd [ 534.698312][ T5946] usb 7-1: device reset changed ep0 maxpacket size! [ 534.713264][ T5946] usb 7-1: USB disconnect, device number 18 [ 534.722918][ T5946] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 534.731953][ T5946] f81232 7-1:0.0: device disconnected [ 534.824768][T10380] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 534.849978][T10380] usb 5-1: device descriptor read/8, error -71 [ 534.976079][T10380] usb usb5-port1: unable to enumerate USB device [ 535.084747][ T5946] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 535.256953][ T5946] usb 7-1: Using ep0 maxpacket: 16 [ 535.267139][ T5946] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 535.280648][ T5946] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 535.297786][ T5946] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 535.308935][ T5946] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.317890][ T5946] usb 7-1: Product: syz [ 535.322227][ T5946] usb 7-1: Manufacturer: syz [ 535.327407][ T5946] usb 7-1: SerialNumber: syz [ 535.353092][ T5946] usb 7-1: 0:2 : does not exist [ 535.547537][T15979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.566018][T15979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.599970][ T5946] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 535.682478][ T5946] usb 7-1: USB disconnect, device number 19 [ 535.743990][T15908] udevd[15908]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 536.343256][T15996] netlink: 'syz.4.1586': attribute type 1 has an invalid length. [ 536.352046][T15996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1586'. [ 536.366532][T15993] XFS (nullb0): Invalid superblock magic number [ 536.675612][T15996] could not allocate digest TFM handle cryptd(blake2b-160) [ 536.908184][T16025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.945567][T16025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.247128][T16036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.259761][T16036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.279004][T16036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.287960][ T5946] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 537.296352][T16036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.313592][T16036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.324042][T16036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.370934][T16038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1597'. [ 537.457959][ T5946] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 537.468379][ T5946] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 537.480517][ T5946] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 537.498395][ T5946] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 537.509771][ T5946] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.520798][ T5946] usb 7-1: Product: syz [ 537.525334][ T5946] usb 7-1: Manufacturer: syz [ 537.530255][ T5946] usb 7-1: SerialNumber: syz [ 537.549173][ T5946] usb 7-1: config 0 descriptor?? [ 537.557008][T16031] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 537.566648][T16031] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 537.577411][ T5946] usb 7-1: ucan: probing device on interface #0 [ 537.782821][T16043] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1594'. [ 537.815741][ T5946] usb 7-1: ucan: could not read protocol version, ret=-71 [ 537.829290][ T5946] usb 7-1: ucan: probe failed; try to update the device firmware [ 537.873427][ T5946] usb 7-1: USB disconnect, device number 20 [ 537.913707][T16047] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1599'. [ 537.931935][T16047] netlink: 'syz.6.1599': attribute type 29 has an invalid length. [ 537.941949][T16047] netlink: 'syz.6.1599': attribute type 29 has an invalid length. [ 537.954522][T16047] netlink: 500 bytes leftover after parsing attributes in process `syz.6.1599'. [ 538.458775][T16071] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1607'. [ 538.609791][T16075] netlink: 'syz.7.1608': attribute type 2 has an invalid length. [ 538.763330][T16083] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 538.788244][T16083] binder: 16081:16083 ioctl c0306201 200000000480 returned -14 [ 538.898704][T16085] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1606'. [ 538.925416][T16085] hsr_slave_0: left promiscuous mode [ 538.964524][T16085] hsr_slave_1: left promiscuous mode [ 539.401133][T16103] netlink: 204 bytes leftover after parsing attributes in process `syz.6.1615'. [ 539.418898][T16103] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1615'. [ 539.429137][T16103] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1615'. [ 539.503848][T16111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.520581][T16111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.538454][T16111] syzkaller1: entered promiscuous mode [ 539.544087][T16111] syzkaller1: entered allmulticast mode [ 539.734967][ T5927] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 539.884857][ T5927] usb 5-1: Using ep0 maxpacket: 8 [ 539.896937][ T5927] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 539.917465][ T5927] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 539.945361][ T5927] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 539.956272][ T5927] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 539.969961][ T5927] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 539.983178][ T5927] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 539.992414][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.497872][ T5927] usb 5-1: usb_control_msg returned -71 [ 540.511844][ T5927] usbtmc 5-1:16.0: can't read capabilities [ 540.537198][ T5927] usb 5-1: USB disconnect, device number 68 [ 540.610420][T16137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.637454][T16137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.655839][ T9] usb 9-1: USB disconnect, device number 12 [ 540.700291][ T9] usblp0: removed [ 540.834823][ T5946] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 541.014727][ T5946] usb 7-1: Using ep0 maxpacket: 8 [ 541.030363][ T5946] usb 7-1: config 0 has an invalid interface number: 200 but max is 0 [ 541.059783][ T5946] usb 7-1: config 0 has no interface number 0 [ 541.075694][ T9] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 541.086834][ T5946] usb 7-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 541.108607][ T5946] usb 7-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid wMaxPacketSize 0 [ 541.120821][ T5946] usb 7-1: config 0 interface 200 has no altsetting 0 [ 541.131463][ T5946] usb 7-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 541.141370][ T5946] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.160792][ T5946] usb 7-1: Product: syz [ 541.171906][ T5946] usb 7-1: Manufacturer: syz [ 541.182468][ T5946] usb 7-1: SerialNumber: syz [ 541.205420][ T5946] usb 7-1: config 0 descriptor?? [ 541.254718][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 541.262844][ T9] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 541.278754][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 541.289712][ T9] usb 9-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 541.300166][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.308823][ T9] usb 9-1: Product: syz [ 541.313388][ T9] usb 9-1: Manufacturer: syz [ 541.318941][ T9] usb 9-1: SerialNumber: syz [ 541.330883][ T9] usb 9-1: config 0 descriptor?? [ 541.424778][ T5927] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 541.449220][ T5946] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.200/input/input18 [ 541.473224][ T5946] usb 7-1: USB disconnect, device number 21 [ 541.580469][ T9] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input19 [ 541.590236][ T5927] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.635011][ T5927] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.654893][ T5927] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.674698][ T5927] usb 5-1: config 0 interface 0 has no altsetting 0 [ 541.682936][ T5927] usb 5-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 541.705858][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.719923][ T5927] usb 5-1: config 0 descriptor?? [ 541.874739][ T9] rc_core: IR keymap rc-imon-pad not found [ 541.880736][ T9] Registered IR keymap rc-empty [ 541.888836][ T9] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 541.899480][ T9] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 541.982488][ T9] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 542.039049][ T9] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input20 [ 542.102478][ T9] imon 9-1:0.0: iMON device (15c2:0041, intf0) on usb<9:13> initialized [ 542.191700][ T5927] usbhid 5-1:0.0: can't add hid device: -71 [ 542.217281][ T5927] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 542.278934][ T5927] usb 5-1: USB disconnect, device number 69 [ 542.354873][ T1222] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 542.360507][ C0] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 542.375864][ T9] usb 9-1: USB disconnect, device number 13 [ 542.525612][ T1222] usb 7-1: Using ep0 maxpacket: 16 [ 542.540508][ T1222] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 542.550059][ T1222] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.559349][ T1222] usb 7-1: Product: syz [ 542.563635][ T1222] usb 7-1: Manufacturer: syz [ 542.568815][ T1222] usb 7-1: SerialNumber: syz [ 542.580982][ T1222] usb 7-1: config 0 descriptor?? [ 542.791805][ T1222] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 542.832250][ T1222] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 542.833128][ T1222] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 542.833194][ T1222] usb 7-1: media controller created [ 542.917987][ T1222] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 543.071706][ T1222] zl10353_read_register: readreg error (reg=127, ret==0) [ 543.113118][ T1222] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 543.134334][ T1222] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 543.185654][ T1222] usb 7-1: USB disconnect, device number 22 [ 543.312198][ T1222] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 543.652702][ T1222] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 543.806067][ T1222] usb 7-1: device descriptor read/64, error -71 [ 543.848209][T16165] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1633'. [ 543.934765][ T5927] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 544.054838][ T1222] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 544.097298][ T5927] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 544.113023][ T5927] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 544.123646][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 544.137009][ T5927] usb 5-1: Product: syz [ 544.143592][ T9] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 544.144511][ T5927] usb 5-1: Manufacturer: syz [ 544.157960][ T5927] usb 5-1: SerialNumber: syz [ 544.194748][ T1222] usb 7-1: device descriptor read/64, error -71 [ 544.303722][T16171] efs: cannot read volume header [ 544.316868][ T1222] usb usb7-port1: attempt power cycle [ 544.326783][ T9] usb 9-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 544.337312][ T9] usb 9-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 544.345865][ T9] usb 9-1: Product: syz [ 544.350502][ T9] usb 9-1: Manufacturer: syz [ 544.360134][ T9] usb 9-1: SerialNumber: syz [ 544.398222][ T5927] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 70 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 544.409752][ T9] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 544.654760][ T1222] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 544.675861][ T1222] usb 7-1: device descriptor read/8, error -71 [ 544.782872][ T9] vp7045: USB control message 'in' went wrong. [ 544.805464][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 544.817701][ T9] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 544.834423][ T9] usb 9-1: USB disconnect, device number 14 [ 544.915368][ T1222] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 544.935811][ T1222] usb 7-1: device descriptor read/8, error -71 [ 545.045050][ T1222] usb usb7-port1: unable to enumerate USB device [ 545.366486][T16177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.380920][T16177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.706340][T16187] netlink: 65039 bytes leftover after parsing attributes in process `syz.8.1639'. [ 546.288142][ T138] wlan1: Trigger new scan to find an IBSS to join [ 549.324835][ T138] wlan1: Trigger new scan to find an IBSS to join [ 551.207942][ T5926] usb 5-1: USB disconnect, device number 70 [ 551.231889][ T5926] usblp0: removed [ 552.284860][T14034] wlan1: Trigger new scan to find an IBSS to join [ 553.188214][T14034] wlan1: Creating new IBSS network, BSSID 42:d1:ae:6b:cf:17 [ 563.330838][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.338883][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.553872][T16203] tmpfs: Unknown parameter 'grpquota_b¡ock_hardlimit' [ 573.599155][T16203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.625733][T16203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.760982][T16215] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1647'. [ 573.770322][T16215] openvswitch: netlink: Flow key attr not present in new flow. [ 574.144831][ T5927] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 574.317920][ T5927] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 574.351389][ T5927] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 574.371986][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 574.391201][ T5927] usb 5-1: Product: syz [ 574.400421][ T5927] usb 5-1: Manufacturer: syz [ 574.408305][ T5927] usb 5-1: SerialNumber: syz [ 574.573909][T16224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.584452][T16224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.648196][T16224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.648392][ T5927] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 71 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 574.652189][T16224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.864729][ T1222] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 575.017134][ T1222] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 575.034856][ T1222] usb 9-1: config 0 has no interface number 0 [ 575.044770][ T1222] usb 9-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 575.064686][ T1222] usb 9-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 575.079387][ T1222] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 575.104714][ T1222] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.114390][ T1222] usb 9-1: Product: syz [ 575.124684][ T1222] usb 9-1: Manufacturer: syz [ 575.129381][ T1222] usb 9-1: SerialNumber: syz [ 575.138106][ T1222] usb 9-1: config 0 descriptor?? [ 575.155818][T16226] raw-gadget.4 gadget.8: fail, usb_ep_enable returned -22 [ 575.163492][T16226] raw-gadget.4 gadget.8: fail, usb_ep_enable returned -22 [ 575.234768][ T5927] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 575.381943][T16226] raw-gadget.4 gadget.8: fail, usb_ep_enable returned -22 [ 575.385160][ T5927] usb 7-1: device descriptor read/64, error -71 [ 575.400462][T16226] raw-gadget.4 gadget.8: fail, usb_ep_enable returned -22 [ 575.628525][ T1222] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 575.641588][ T1222] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 575.651755][ T5927] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 575.804794][ T5927] usb 7-1: device descriptor read/64, error -71 [ 575.925354][ T5927] usb usb7-port1: attempt power cycle [ 576.007993][T16243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.026611][T16243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.274783][ T5927] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 576.315469][ T5927] usb 7-1: device descriptor read/8, error -71 [ 576.538924][ T1222] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 576.565200][ T1222] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -61 [ 576.585693][ T5927] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 576.618496][ T5927] usb 7-1: device descriptor read/8, error -71 [ 576.755201][ T5927] usb usb7-port1: unable to enumerate USB device [ 576.799934][T16250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.810365][T16250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.414778][ T5927] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 578.541122][ T9] usb 9-1: USB disconnect, device number 15 [ 578.575569][ T5927] usb 7-1: too many configurations: 72, using maximum allowed: 8 [ 578.612550][ T5927] usb 7-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 578.627875][ T5927] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.648594][ T5927] usb 7-1: config 0 descriptor?? [ 578.888390][ T9] usb 7-1: USB disconnect, device number 31 [ 578.974045][T16264] ./cgroup.net/devices.allow: Can't lookup blockdev [ 579.394744][ T5927] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 579.554719][ T5927] usb 9-1: Using ep0 maxpacket: 16 [ 579.581040][ T5927] usb 9-1: config index 0 descriptor too short (expected 1828, got 249) [ 579.593670][ T5927] usb 9-1: config 0 has an invalid interface number: 0 but max is -1 [ 579.623947][ T5927] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.635796][ T5927] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 579.645446][ T5927] usb 9-1: config 0 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 579.674722][ T5927] usb 9-1: config 0 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 579.694761][ T5927] usb 9-1: config 0 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 579.706774][ T5927] usb 9-1: config 0 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 579.716775][ T5927] usb 9-1: config 0 interface 0 has no altsetting 0 [ 579.723471][ T5927] usb 9-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 579.732824][ T5927] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.753203][ T5927] usb 9-1: config 0 descriptor?? [ 579.769678][ T5927] ums-sddr09 9-1:0.0: USB Mass Storage device detected [ 579.853107][ T5927] ums-sddr09 9-1:0.0: probe with driver ums-sddr09 failed with error -22 [ 580.078699][ T5160] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 580.092544][T16284] dvmrp0: entered allmulticast mode [ 580.124793][ T5927] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 580.274837][ T5927] usb 7-1: Using ep0 maxpacket: 16 [ 580.282905][ T5927] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.299268][ T5927] usb 7-1: config 0 interface 0 has no altsetting 0 [ 580.308733][ T5927] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 580.319822][ T5927] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.339342][T16292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.349721][ T5927] usb 7-1: config 0 descriptor?? [ 580.358866][T16292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.800236][T15804] Bluetooth: hci2: Frame reassembly failed (-90) [ 580.816028][T16308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.830565][T16308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.843073][T16308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.859232][ T5927] nzxt-smart2 0003:1E71:2009.0013: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 580.875997][T16308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.179385][ T5926] usb 7-1: USB disconnect, device number 32 [ 581.460965][ T5926] usb 5-1: USB disconnect, device number 71 [ 581.485203][ T5926] usblp0: removed [ 581.741285][T16319] sg_write: data in/out 434652/160 bytes for SCSI command 0x0-- guessing data in; [ 581.741285][T16319] program syz.7.1680 not setting count and/or reply_len properly [ 581.904715][ T5926] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 582.067589][ T5926] usb 5-1: Using ep0 maxpacket: 8 [ 582.103549][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 582.117217][T16326] netlink: 'syz.6.1683': attribute type 3 has an invalid length. [ 582.125057][ T5926] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 582.157886][ T5926] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 582.169064][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.185119][ T5926] usb 5-1: Product: syz [ 582.191144][ T5926] usb 5-1: Manufacturer: syz [ 582.197950][ T5926] usb 5-1: SerialNumber: syz [ 582.217524][ T5926] usb 5-1: config 0 descriptor?? [ 582.320973][T16328] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1684'. [ 582.555986][T16334] : entered promiscuous mode [ 582.787334][ T5927] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 582.847158][ T5160] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 582.847186][ T5839] Bluetooth: hci2: command 0x1003 tx timeout [ 582.912786][ T5926] usb 9-1: USB disconnect, device number 16 [ 582.934733][ T5927] usb 7-1: device descriptor read/64, error -71 [ 583.024162][T16338] 9p: Bad value for 'rfdno' [ 583.185129][ T5927] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 583.282066][T15802] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 583.364787][ T5927] usb 7-1: device descriptor read/64, error -71 [ 583.477557][ T5927] usb usb7-port1: attempt power cycle [ 583.504771][ T5907] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 583.664083][T16361] ªªªªªª: renamed from vlan0 (while UP) [ 583.681544][T16359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.698321][ T5907] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 583.715929][T16359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.730154][ T5907] usb 9-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 583.742535][ T5907] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.752864][ T5907] usb 9-1: Product: syz [ 583.757658][ T5907] usb 9-1: Manufacturer: syz [ 583.762613][ T5907] usb 9-1: SerialNumber: syz [ 583.782190][ T5907] usb 9-1: Audio class v2/v3 interfaces need an interface association [ 583.836306][ T5927] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 583.865613][ T5927] usb 7-1: device descriptor read/8, error -71 [ 583.880301][ T5907] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 583.941788][T16208] udevd[16208]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 583.976804][ T5907] usb 9-1: USB disconnect, device number 17 [ 584.114772][ T5927] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 584.150841][T10380] usb 5-1: USB disconnect, device number 72 [ 584.157431][ T5927] usb 7-1: device descriptor read/8, error -71 [ 584.274977][ T5927] usb usb7-port1: unable to enumerate USB device [ 584.639641][T16373] netlink: 'syz.7.1697': attribute type 16 has an invalid length. [ 584.648148][T16373] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1697'. [ 584.660537][T16373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.678823][T16373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.837657][T16375] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 585.195634][T16389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1703'. [ 585.352982][T16395] netlink: 'syz.7.1704': attribute type 51 has an invalid length. [ 585.439395][T16395] overlayfs: workdir and upperdir must be separate subtrees [ 585.457754][T16399] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1705'. [ 585.660034][T16403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.717077][T16403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.763527][T16403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.795197][T16403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.859490][T16403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.906066][T16403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.939930][T16403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.970805][T16403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.384746][ T5927] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 586.557929][T16434] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 586.571716][ T5927] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 586.591790][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.611145][T16438] 9p: Bad value for 'version' [ 586.618558][ T5927] usb 5-1: Product: syz [ 586.636145][ T5927] usb 5-1: Manufacturer: syz [ 586.651727][ T5927] usb 5-1: SerialNumber: syz [ 586.677371][ T5927] usb 5-1: config 0 descriptor?? [ 586.711083][ T5927] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 586.922700][T16448] netlink: 252 bytes leftover after parsing attributes in process `syz.7.1722'. [ 587.240583][ T5927] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 587.252447][ T5927] sq905c 5-1:0.0: Get version command failed [ 587.262383][ T5927] sq905c 5-1:0.0: probe with driver sq905c failed with error -110 [ 587.410662][ T1222] usb 5-1: USB disconnect, device number 73 [ 587.429596][T16465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.454080][T16465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.576910][T16471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.593648][T16471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.814801][ T9] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 587.954794][ T9] usb 9-1: device descriptor read/64, error -71 [ 587.965785][ T1222] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 588.124817][ T1222] usb 7-1: Using ep0 maxpacket: 32 [ 588.133686][ T1222] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 588.142455][ T1222] usb 7-1: config 0 has no interface number 0 [ 588.149104][ T1222] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 588.162852][ T1222] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 588.173425][ T1222] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.181768][ T1222] usb 7-1: Product: syz [ 588.186944][ T1222] usb 7-1: Manufacturer: syz [ 588.191759][ T1222] usb 7-1: SerialNumber: syz [ 588.204713][ T9] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 588.212660][ T1222] usb 7-1: config 0 descriptor?? [ 588.219044][T16483] netlink: 'syz.7.1733': attribute type 21 has an invalid length. [ 588.227845][T16476] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 588.355148][ T9] usb 9-1: device descriptor read/64, error -71 [ 588.431247][T16487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.443197][T16476] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 588.452842][T16487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.453432][T16488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.474036][T16488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.479187][ T9] usb usb9-port1: attempt power cycle [ 588.489502][ T5160] Bluetooth: hci3: unexpected event for opcode 0x0c57 [ 588.500039][T16487] netlink: 192 bytes leftover after parsing attributes in process `syz.7.1734'. [ 588.834705][ T9] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 588.869262][ T9] usb 9-1: device descriptor read/8, error -71 [ 589.114924][ T9] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 589.165396][ T9] usb 9-1: device descriptor read/8, error -71 [ 589.178671][ T5160] Bluetooth: hci3: unexpected event for opcode 0x200b [ 589.187357][T16491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.199687][ T5160] Bluetooth: hci3: unexpected event for opcode 0x200b [ 589.207416][ T5160] Bluetooth: hci3: unexpected event for opcode 0x200b [ 589.215427][ T5160] Bluetooth: hci3: unexpected event for opcode 0x200b [ 589.222843][ T5160] Bluetooth: hci3: unexpected event for opcode 0x200b [ 589.230012][ T5160] Bluetooth: hci3: unexpected event for opcode 0x200b [ 589.237086][ T5160] Bluetooth: hci3: unexpected event for opcode 0x200b [ 589.244068][ T5160] Bluetooth: hci3: unexpected event for opcode 0x200b [ 589.251190][ T5160] Bluetooth: hci3: unexpected event for opcode 0x200b [ 589.258387][ T5160] Bluetooth: hci3: unexpected event for opcode 0x200b [ 589.265542][ T5160] Bluetooth: hci3: unexpected event for opcode 0x200b [ 589.274911][ T5160] Bluetooth: hci3: unexpected event for opcode 0x200b [ 589.283705][ T5160] Bluetooth: hci3: unexpected event for opcode 0x200b [ 589.290783][ T5160] Bluetooth: hci3: unexpected event for opcode 0x200b [ 589.294449][T16491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.298051][ T5160] Bluetooth: hci3: unexpected event for opcode 0x200b [ 589.310126][ T9] usb usb9-port1: unable to enumerate USB device [ 589.313815][ T5160] Bluetooth: hci3: unexpected event for opcode 0x200b [ 589.326395][ T5160] Bluetooth: hci3: unexpected event for opcode 0x200b [ 589.333399][ T5160] Bluetooth: hci3: unexpected event for opcode 0x200b [ 589.340432][ T5160] Bluetooth: hci3: unexpected event for opcode 0x200b [ 589.347508][ T5160] Bluetooth: hci3: unexpected event for opcode 0x200b [ 589.356100][ T5160] Bluetooth: hci3: unexpected event for opcode 0x200b [ 589.363207][ T5160] Bluetooth: hci3: unexpected event for opcode 0x200b [ 589.370605][ T5160] Bluetooth: hci3: unexpected event for opcode 0x200b [ 589.377922][ T5160] Bluetooth: hci3: unexpected event for opcode 0x200b [ 589.388444][ T5160] Bluetooth: hci3: unexpected event for opcode 0x200b [ 589.395532][ T5160] Bluetooth: hci3: unexpected event for opcode 0x200b [ 589.402503][ T5160] Bluetooth: hci3: unexpected event for opcode 0x200b [ 589.409600][ T5160] Bluetooth: hci3: unexpected event for opcode 0x200b [ 589.418603][ T5160] Bluetooth: hci3: unexpected event for opcode 0x200b [ 589.426075][ T5160] Bluetooth: hci3: unexpected event for opcode 0x200b [ 589.433056][ T5160] Bluetooth: hci3: unexpected event for opcode 0x200b [ 589.440372][ T5160] Bluetooth: hci3: unexpected event for opcode 0x200b [ 589.444883][T16491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.447735][ T5160] Bluetooth: hci3: unexpected event for opcode 0x200b [ 589.468702][T16491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.484341][T16491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.496820][T16491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.506354][T16491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.517373][T16491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.529556][T16491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.539642][T16491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.549207][T16491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.558424][T16491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.704723][ T9] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 589.874689][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 589.883277][ T9] usb 5-1: config 0 has an invalid interface number: 83 but max is 0 [ 589.891752][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.902309][ T9] usb 5-1: config 0 has no interface number 0 [ 589.908810][ T9] usb 5-1: config 0 interface 83 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 589.920565][ T9] usb 5-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 589.937854][ T9] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 589.947590][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.955733][ T9] usb 5-1: Product: syz [ 589.960206][ T9] usb 5-1: Manufacturer: syz [ 589.971498][ T9] usb 5-1: SerialNumber: syz [ 589.982762][ T9] usb 5-1: config 0 descriptor?? [ 589.999420][ T9] redrat3 5-1:0.83: Couldn't find all endpoints [ 590.278311][ T5927] usb 5-1: USB disconnect, device number 74 [ 590.761380][T16504] bridge0: port 3(veth0_to_bridge) entered blocking state [ 590.771202][T16504] bridge0: port 3(veth0_to_bridge) entered disabled state [ 590.781477][T16504] veth0_to_bridge: entered allmulticast mode [ 590.794785][T16504] veth0_to_bridge: entered promiscuous mode [ 590.820223][T16504] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 590.864293][T16505] overlayfs: cannot append lower layer [ 590.910485][T16504] bridge0: port 3(veth0_to_bridge) entered blocking state [ 590.920401][T16504] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 591.214798][T10380] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 591.351191][T16476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.361535][T16476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.373062][ T1222] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 591.385241][ T1222] asix 7-1:0.188: probe with driver asix failed with error -71 [ 591.394051][T10380] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 591.406865][ T9] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 591.421811][T10380] usb 5-1: config 0 has an invalid descriptor of length 112, skipping remainder of the config [ 591.423752][ T1222] usb 7-1: USB disconnect, device number 37 [ 591.438420][T10380] usb 5-1: config 0 has no interface number 0 [ 591.445473][T10380] usb 5-1: config 0 interface 50 altsetting 77 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 591.460553][T10380] usb 5-1: config 0 interface 50 has no altsetting 0 [ 591.473555][T10380] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 591.483393][T10380] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.509482][T10380] usb 5-1: config 0 descriptor?? [ 591.564852][ T9] usb 9-1: device descriptor read/64, error -71 [ 591.743853][T10380] usb 5-1: string descriptor 0 read error: -32 [ 591.804787][ T9] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 591.935463][ T9] usb 9-1: device descriptor read/64, error -71 [ 592.055285][ T9] usb usb9-port1: attempt power cycle [ 592.088668][T16533] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1749'. [ 592.240351][ T5160] Bluetooth: hci1: Unable to find connection for big 0x00 [ 592.359641][T16545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.370413][T16545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.404867][ T9] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 592.425750][ T9] usb 9-1: device descriptor read/8, error -71 [ 592.504732][ T5926] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 592.655046][ T5926] usb 7-1: Using ep0 maxpacket: 16 [ 592.662721][ T5926] usb 7-1: unable to get BOS descriptor or descriptor too short [ 592.670597][ T9] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 592.680182][ T5926] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 592.693863][ T5926] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 592.703866][ T5926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.712149][ T5926] usb 7-1: Product: syz [ 592.716468][ T5926] usb 7-1: Manufacturer: syz [ 592.721300][ T9] usb 9-1: device descriptor read/8, error -71 [ 592.727625][ T5926] usb 7-1: SerialNumber: syz [ 592.845900][ T9] usb usb9-port1: unable to enumerate USB device [ 592.949565][ T5926] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 592.951213][T16549] netdevsim netdevsim7: Direct firmware load for . failed with error -2 [ 592.963614][ T5926] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 592.972116][T16549] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 593.147652][T16541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.158911][T16541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.177048][ T5926] usb 7-1: 2:1 : can't get High Capability descriptor [ 593.384044][T16541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.393281][T16541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.408870][ T5926] usb 7-1: USB disconnect, device number 38 [ 594.038078][ T5907] usb 5-1: USB disconnect, device number 75 [ 594.223701][T16561] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 594.289754][T16561] syzkaller1: entered promiscuous mode [ 594.303354][T16561] syzkaller1: entered allmulticast mode [ 594.474704][ T1222] usb 7-1: new full-speed USB device number 39 using dummy_hcd [ 594.663199][ T1222] usb 7-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice= 0.40 [ 594.698198][ T1222] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.723110][T16579] (syz.7.1763,16579,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 594.733679][ T1222] usb 7-1: Product: à·ˆé¡ç•¤ã¨Ÿî â‡¡ã’¾á¶–魘趢二ἃ辀ê¦ê†žä·Ÿ [ 594.742766][ T1222] usb 7-1: Manufacturer: âšì§³çª®ï¶ºè¦ªî„œí‰çš‰ì‰·ê†—畮绬넳踨悔뀛ê§å ›ï™‹é€´ä­—㗫㨶噮迡匑鞌äˆæ¬ºä¦´ì¯‹ï­¯É¤â¹ƒá§›ì‰íˆžï­€â¤‚鱻⥘浲Ḡ筟碩㣰懮æ°ê‚­ìš¿ä®›ãŽä™‘臆䟗 [ 594.764312][T16579] (syz.7.1763,16579,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 594.796292][ T1222] usb 7-1: SerialNumber: syz [ 595.032533][T16589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.046603][ T1222] usb 7-1: selecting invalid altsetting 1 [ 595.053517][ T1222] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 595.067550][T16589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.085447][ T1222] usb 7-1: selecting invalid altsetting 1 [ 595.092477][ T1222] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 595.108965][ T1222] usb 7-1: selecting invalid altsetting 1 [ 595.152303][T16594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.163215][ T5927] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 595.192705][T16594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.207996][ T1222] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 595.252406][T16565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.273342][T16595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.288654][T16565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.298289][T16595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.317369][T16206] udevd[16206]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 595.344883][ T5927] usb 9-1: Using ep0 maxpacket: 8 [ 595.355435][ T5927] usb 9-1: unable to get BOS descriptor or descriptor too short [ 595.375158][ T5907] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 595.384322][ T5927] usb 9-1: config 6 has an invalid interface number: 215 but max is 0 [ 595.392986][ T5927] usb 9-1: config 6 has no interface number 0 [ 595.402206][ T5927] usb 9-1: config 6 interface 215 has no altsetting 0 [ 595.414864][ T5927] usb 9-1: New USB device found, idVendor=1bc7, idProduct=1211, bcdDevice=63.f5 [ 595.434680][ T5927] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.450692][ T5927] usb 9-1: Product: syz [ 595.455067][ T5927] usb 9-1: Manufacturer: syz [ 595.460673][ T5927] usb 9-1: SerialNumber: syz [ 595.518332][ T5926] usb 7-1: USB disconnect, device number 39 [ 595.524759][ T5907] usb 5-1: device descriptor read/64, error -71 [ 595.713930][ T5927] usb 9-1: USB disconnect, device number 26 [ 595.775013][ T5907] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 595.842443][T16602] netlink: 'syz.8.1771': attribute type 2 has an invalid length. [ 595.868574][ T30] audit: type=1800 audit(1774262079.883:7): pid=16604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1770" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 595.890576][T16602] hmac(sha224): entered promiscuous mode [ 595.911161][T16606] netlink: 212384 bytes leftover after parsing attributes in process `syz.8.1771'. [ 595.922934][T16606] openvswitch: netlink: Message has 6 unknown bytes. [ 595.925468][ T5907] usb 5-1: device descriptor read/64, error -71 [ 596.055075][ T5907] usb usb5-port1: attempt power cycle [ 596.125377][T16306] Bluetooth: hci4: command 0x0406 tx timeout [ 596.156999][T16613] cgroup: release_agent respecified [ 596.405324][ T5907] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 596.445385][ T5907] usb 5-1: device descriptor read/8, error -71 [ 596.694751][ T5907] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 596.705080][T16633] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 596.735510][ T5907] usb 5-1: device descriptor read/8, error -71 [ 596.834801][ T5927] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 596.855067][ T5907] usb usb5-port1: unable to enumerate USB device [ 596.974771][ T5946] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 597.006467][ T5927] usb 9-1: config 0 interface 0 has no altsetting 0 [ 597.013432][ T5927] usb 9-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 597.022652][ T5927] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.035227][ T5927] usb 9-1: config 0 descriptor?? [ 597.138103][ T5946] usb 7-1: Using ep0 maxpacket: 32 [ 597.149415][ T5946] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 597.161530][ T5946] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 597.176085][ T5946] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 597.188531][ T5946] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 597.206441][ T5946] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 597.216076][ T5946] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.224178][ T5946] usb 7-1: Product: syz [ 597.230208][ T5946] usb 7-1: Manufacturer: syz [ 597.235420][ T5946] usb 7-1: SerialNumber: syz [ 597.263442][ C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 597.282736][ T5946] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input22 [ 597.470965][ T5927] input: HID 0458:501a as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:501A.0014/input/input24 [ 597.475193][ T5946] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 597.494159][ T5946] (id 0x00) [ 597.532833][ T5927] input: HID 0458:501a as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:501A.0014/input/input25 [ 597.647227][T16631] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1776'. [ 597.704877][ T5946] rc_core: IR keymap rc-imon-pad not found [ 597.720754][T16643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.721491][ T5946] Registered IR keymap rc-empty [ 597.743467][T16643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.793029][ T5946] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 597.811769][ T5927] kye 0003:0458:501A.0014: input,hiddev0,hidraw1: USB HID v7f.7d Mouse [HID 0458:501a] on usb-dummy_hcd.8-1/input0 [ 597.857819][ T5946] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 597.932687][ T5946] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 597.954675][ T9] usb 9-1: USB disconnect, device number 27 [ 598.073943][T16651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.087974][ T5946] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input23 [ 598.096707][T16651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.119181][T16648] fido_id[16648]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 598.185384][T16651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.199755][ T5946] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:40> initialized [ 598.215714][T16651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.593607][T16661] x_tables: unsorted underflow at hook 3 [ 598.894692][ T5907] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 598.932701][ T30] audit: type=1326 audit(1774262082.943:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16671 comm="syz.7.1787" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa4fe99c799 code=0x0 [ 599.044756][ T5907] usb 5-1: device descriptor read/64, error -71 [ 599.189331][T16673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.199422][T16673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.259997][T16673] overlay: Unknown parameter 'subj_role' [ 599.285983][ T5907] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 599.434757][ T5907] usb 5-1: device descriptor read/64, error -71 [ 599.555220][ T5907] usb usb5-port1: attempt power cycle [ 599.789549][T16690] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 599.935136][ T5907] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 599.958304][ T5907] usb 5-1: device descriptor read/8, error -71 [ 600.120988][ T5927] usb 7-1: USB disconnect, device number 40 [ 600.207459][ T5907] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 600.227900][ T1222] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 600.256652][ T5907] usb 5-1: device descriptor read/8, error -71 [ 600.375770][ T5907] usb usb5-port1: unable to enumerate USB device [ 600.389325][ T1222] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.414678][ T1222] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.424679][ T1222] usb 9-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 600.436563][ T1222] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.460606][ T1222] usb 9-1: config 0 descriptor?? [ 600.835359][ T5907] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 600.984751][ T5907] usb 7-1: device descriptor read/64, error -71 [ 601.073779][ T1222] hid-led 0003:1D34:000A.0015: hidraw1: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.8-1/input0 [ 601.132844][ T1222] hid-led 0003:1D34:000A.0015: Dream Cheeky Webmail Notifier initialized [ 601.234956][ T5907] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 601.244710][T16306] Bluetooth: hci1: command 0x0406 tx timeout [ 601.275892][ T1222] usb 9-1: USB disconnect, device number 28 [ 601.384765][ T5907] usb 7-1: device descriptor read/64, error -71 [ 601.495170][ T5907] usb usb7-port1: attempt power cycle [ 601.694481][T16712] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 601.837291][ T5907] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 601.870836][ T5907] usb 7-1: device descriptor read/8, error -71 [ 602.022318][T16719] pim6reg1: entered promiscuous mode [ 602.028442][T16719] pim6reg1: entered allmulticast mode [ 602.044794][ T10] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 602.145714][ T5907] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 602.175670][ T5907] usb 7-1: device descriptor read/8, error -71 [ 602.217949][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 602.221660][T16725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.251161][T16725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.259780][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 602.275170][ T10] usb 5-1: config 1 has no interface number 0 [ 602.281480][ T10] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 602.299417][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 602.301848][ T5907] usb usb7-port1: unable to enumerate USB device [ 602.318765][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.330166][ T10] usb 5-1: Product: syz [ 602.336537][ T10] usb 5-1: Manufacturer: syz [ 602.342932][ T10] usb 5-1: SerialNumber: syz [ 602.343458][T16729] ptrace attach of "./syz-executor exec"[15153] was attempted by "  ¤    \x0a \x0a  \x09  syz0 H \x0a  \x09  syz0 \x09  syz0  \x07 nat  € @  @ÿ"[16729] [ 602.453123][ T10] usb 5-1: selecting invalid altsetting 1 [ 602.601399][ T10] cdc_ncm 5-1:1.1: bind() failure [ 602.618091][ T10] usb 5-1: USB disconnect, device number 84 [ 602.778085][ T9] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 602.935026][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 602.948176][ T9] usb 9-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 602.957616][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.966402][ T9] usb 9-1: Product: syz [ 602.970717][ T9] usb 9-1: Manufacturer: syz [ 602.975477][ T9] usb 9-1: SerialNumber: syz [ 602.983022][ T9] usb 9-1: config 0 descriptor?? [ 602.993963][ T9] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 603.197351][ T9] pwc: Warning: more than 1 configuration available. [ 603.521584][T16742] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 603.743272][ T9] pwc: send_video_command error -71 [ 603.753338][ T9] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 603.782590][ T9] Philips webcam 9-1:0.0: probe with driver Philips webcam failed with error -71 [ 603.805652][ T9] usb 9-1: USB disconnect, device number 29 [ 603.978375][ T5907] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 604.073663][T16757] netlink: 'syz.4.1812': attribute type 1 has an invalid length. [ 604.082553][T16757] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1812'. [ 604.141350][ T5907] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 604.154297][ T5907] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 604.187133][ T5907] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 604.211910][ T5907] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.239093][T16755] binder: 16754:16755 ioctl c0306201 200000001a80 returned -14 [ 604.240116][ T5907] usb 7-1: Product: syz [ 604.254853][ T5907] usb 7-1: Manufacturer: syz [ 604.259549][ T5907] usb 7-1: SerialNumber: syz [ 604.280073][ T5907] usb 7-1: config 0 descriptor?? [ 604.306835][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.308344][T16750] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 604.320515][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.340646][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.353237][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.353291][T16750] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 604.368788][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.384985][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.398499][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.411051][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.424689][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.437301][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.611588][T16750] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 604.628129][T16770] netlink: 'syz.8.1814': attribute type 21 has an invalid length. [ 604.636496][T16750] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 604.643914][T16770] netlink: 2452 bytes leftover after parsing attributes in process `syz.8.1814'. [ 604.658890][T16770] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1814'. [ 604.689709][T16770] sg_write: process 216 (syz.8.1814) changed security contexts after opening file descriptor, this is not allowed. [ 605.048946][T16773] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1815'. [ 605.061881][ T5907] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 605.225002][ T24] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 605.384895][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 605.412468][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.439353][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.463589][ T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 605.491309][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.550445][ T24] usb 5-1: config 0 descriptor?? [ 605.679774][ T5907] dm9601 7-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 605.814991][ T5907] dm9601 7-1:0.0 eth12: register 'dm9601' at usb-dummy_hcd.6-1, Davicom DM96xx USB 10/100 Ethernet, 72:9d:cb:95:9f:a9 [ 605.881789][ T5907] usb 7-1: USB disconnect, device number 45 [ 605.939255][ T5907] dm9601 7-1:0.0 eth12: unregister 'dm9601' usb-dummy_hcd.6-1, Davicom DM96xx USB 10/100 Ethernet [ 606.064203][T16782] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1818'. [ 606.101696][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 606.129914][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 606.147548][T16782] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1818'. [ 606.167526][ T24] usb 5-1: USB disconnect, device number 85 [ 606.176798][T16782] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1818'. [ 606.645766][ T24] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 606.814994][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 606.844490][ T24] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 606.860890][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.872213][ T24] usb 9-1: Product: syz [ 606.876837][ T24] usb 9-1: Manufacturer: syz [ 606.881687][ T24] usb 9-1: SerialNumber: syz [ 606.894304][ T24] usb 9-1: config 0 descriptor?? [ 606.911914][ T24] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 606.947901][ T24] usb 9-1: Detected FT-X [ 607.008145][T16790] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 607.027748][T16792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.051434][T16792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.113246][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 607.502728][T16787] fuse: Unknown parameter 'racerPid: 0 [ 607.502728][T16787] Uid: 0 0 0 0 [ 607.502728][T16787] Gid: 0 0 0 0 [ 607.502728][T16787] FDSize: 256 [ 607.502728][T16787] Groups: 0 10 [ 607.502728][T16787] NStgid: 226 [ 607.502728][T16787] NSpid: 227 [ 607.502728][T16787] NSpgid: 226 [ 607.502728][T16787] NSsid: 0 [ 607.502728][T16787] Kthread: 0 [ 607.502728][T16787] VmPeak: 102360 kB [ 607.502728][T16787] VmSize: 102360 kB [ 607.502728][T16787] VmLck: 0 kB [ 607.502728][T16787] VmPin: 0 kB [ 607.502728][T16787] VmHWM: 24820 kB [ 607.502728][T16787] VmRSS: 24820 kB [ 607.502728][T16787] RssAnon: 1440 kB [ 607.502728][T16787] RssFile: 23380 kB [ 607.502728][T16787] RssShmem: 0 kB [ 607.502728][T16787] VmData: 36712 kB [ 607.502728][T16787] VmStk: 132 kB [ 607.502728][T16787] VmExe: 1772 kB [ 607.502728][T16787] VmLib: 8 kB [ 607.502728][T16787] VmPTE: 136 kB [ 607.502728][T16787] VmSwap: 0 kB [ 607.502728][T16787] HugetlbPages: 0 kB [ 607.502728][T16787] CoreDumping: 0 [ 607.502728][T16787] THP_enabled: 1 [ 607.502728][T16787] untag_mask: 0xffffffffffffffff [ 607.502728][T16787] Threads: 3 [ 607.502728][T16787] SigQ: 0/12971 [ 607.502728][T16787] SigPnd: 0000000000000000 [ 607.502728][T16787] ShdPnd: 0000000000000000 [ 607.502728][T16787] SigBlk: 0000000000000000 [ 607.502728][T16787] SigIgn: fffffffefffaba35 [ 607.502728][T16787] SigCgt: 0000000100010440 [ 607.502728][T16787] CapInh: 0000000000000000 [ 607.502728][T16787] CapPrm: 000001ffff77ffff [ 607.502728][T16787] CapEff: 000001ffff77ffff [ 607.502728][T16787] CapBnd: 000001ffffffffff [ 607.502728][T16787] CapAmb: 0000000000000000 [ 607.502728][T16787] NoNewPrivs: 0 [ 607.502728][T16787] Seccomp: 0 [ 607.502728][T16787] Seccomp_filters: 0 [ 607.502728][T16787] Speculation_Store_Bypass: thread vulnerable [ 607.502728][T16787] SpeculationIndirectBranch: conditional enabled [ 607.502728][T16787] Cpus_allowed: 3 [ 608.444714][ T5927] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 608.597666][ T5927] usb 5-1: Using ep0 maxpacket: 16 [ 608.604255][T16819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.632825][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.632892][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.632935][ T5927] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 608.632962][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.643386][ T5927] usb 5-1: config 0 descriptor?? [ 608.675155][T16819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.738120][ T24] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 608.968458][T16819] sp0: Synchronizing with TNC [ 608.988293][T16825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.991813][T16825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.014028][T16819] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 609.136386][ T5927] ntrig 0003:1B96:0008.0016: hidraw1: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.4-1/input0 [ 609.284997][ T5927] usb 5-1: USB disconnect, device number 86 [ 609.316869][ C0] net_ratelimit: 5054 callbacks suppressed [ 609.316889][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.317357][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.318652][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.319102][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.320450][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.320932][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.322216][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.322696][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.323936][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.324396][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.350136][T16826] fido_id[16826]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 609.645308][ T5927] usb 9-1: USB disconnect, device number 30 [ 610.001790][ T5927] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 610.002582][ T5927] ftdi_sio 9-1:0.0: device disconnected [ 610.316956][ T24] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 610.413857][T16831] serio: Serial port ptm0 [ 610.486809][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 610.487858][ T24] usb 5-1: config 212 has an invalid interface number: 168 but max is 0 [ 610.487896][ T24] usb 5-1: config 212 has no interface number 0 [ 610.490047][ T24] usb 5-1: New USB device found, idVendor=110a, idProduct=1410, bcdDevice=ed.a0 [ 610.490079][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.490103][ T24] usb 5-1: Product: syz [ 610.490120][ T24] usb 5-1: Manufacturer: syz [ 610.490137][ T24] usb 5-1: SerialNumber: syz [ 610.757405][ T24] mxuport 5-1:212.168: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 610.758824][ T24] mxuport 5-1:212.168: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 610.758892][ T24] mxuport 5-1:212.168: probe with driver mxuport failed with error -71 [ 610.802295][ T24] usb 5-1: USB disconnect, device number 87 [ 610.896123][T16836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.896664][T16836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.901423][T16837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.901977][T16837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.971167][T16848] netlink: 'syz.8.1836': attribute type 44 has an invalid length. [ 612.474329][T16852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.526960][T16852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.572882][T16857] netlink: 'syz.8.1840': attribute type 39 has an invalid length. [ 612.748988][T16857] hsr_slave_0 (unregistering): left promiscuous mode [ 613.164518][T16864] overlay: filesystem on ./file1 is read-only [ 613.443043][T16872] FAULT_INJECTION: forcing a failure. [ 613.443043][T16872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 613.472728][T16872] CPU: 1 UID: 0 PID: 16872 Comm: syz.8.1846 Tainted: G L syzkaller #0 PREEMPT(full) [ 613.472764][T16872] Tainted: [L]=SOFTLOCKUP [ 613.472773][T16872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 613.472786][T16872] Call Trace: [ 613.472795][T16872] [ 613.472805][T16872] dump_stack_lvl+0xe8/0x150 [ 613.472842][T16872] should_fail_ex+0x412/0x560 [ 613.472876][T16872] _copy_from_user+0x2d/0xb0 [ 613.472908][T16872] ___sys_sendmsg+0x1c6/0x360 [ 613.472937][T16872] ? __lock_acquire+0x6b5/0x2cf0 [ 613.472975][T16872] ? __pfx____sys_sendmsg+0x10/0x10 [ 613.473039][T16872] ? __fget_files+0x2a/0x420 [ 613.473073][T16872] ? __fget_files+0x3a0/0x420 [ 613.473112][T16872] __x64_sys_sendmsg+0x1bd/0x2a0 [ 613.473146][T16872] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 613.473185][T16872] ? __pfx_ksys_write+0x10/0x10 [ 613.473220][T16872] do_syscall_64+0x14d/0xf80 [ 613.473246][T16872] ? trace_irq_disable+0x3b/0x140 [ 613.473272][T16872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.473295][T16872] ? clear_bhb_loop+0x40/0x90 [ 613.473322][T16872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.473345][T16872] RIP: 0033:0x7fcc1c79c799 [ 613.473367][T16872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.473387][T16872] RSP: 002b:00007fcc1d60c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 613.473420][T16872] RAX: ffffffffffffffda RBX: 00007fcc1ca15fa0 RCX: 00007fcc1c79c799 [ 613.473437][T16872] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 613.473451][T16872] RBP: 00007fcc1d60c090 R08: 0000000000000000 R09: 0000000000000000 [ 613.473465][T16872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 613.473478][T16872] R13: 00007fcc1ca16038 R14: 00007fcc1ca15fa0 R15: 00007ffeba2216c8 [ 613.473512][T16872] [ 613.949931][ T24] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 614.147209][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 614.172132][ T24] usb 7-1: config 0 has an invalid interface number: 107 but max is 0 [ 614.206074][ T24] usb 7-1: config 0 has no interface number 0 [ 614.241482][ T24] usb 7-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 614.298318][ T24] usb 7-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 614.325405][ C0] net_ratelimit: 6074 callbacks suppressed [ 614.325428][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:ac:a2:c7:7e:a0, vlan:0) [ 614.344223][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.356739][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.369881][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:ac:a2:c7:7e:a0, vlan:0) [ 614.382820][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.390073][ T24] usb 7-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 614.396121][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.417033][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:ac:a2:c7:7e:a0, vlan:0) [ 614.429526][T16882] netlink: 128 bytes leftover after parsing attributes in process `syz.8.1848'. [ 614.430806][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.451161][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.464251][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:ac:a2:c7:7e:a0, vlan:0) [ 614.472030][ T24] usb 7-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 614.511418][T16881] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1848'. [ 614.536472][ T24] usb 7-1: Product: syz [ 614.548450][ T24] usb 7-1: Manufacturer: syz [ 614.559558][ T24] usb 7-1: SerialNumber: syz [ 614.564446][T16881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.600611][ T24] usb 7-1: config 0 descriptor?? [ 614.648498][ T24] keyspan 7-1:0.107: Keyspan 4 port adapter converter detected [ 614.700583][ T24] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 81 [ 614.727967][ T24] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 1 [ 614.748903][ T24] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 614.760491][ T24] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 2 [ 614.775803][ T24] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 614.787381][ T24] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 4 [ 614.798449][T16892] netlink: 'syz.4.1851': attribute type 4 has an invalid length. [ 614.814097][ T24] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 614.859084][ T24] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 6 [ 614.881924][ T24] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 615.666939][T16902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.676167][T16902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.930388][T16906] FAULT_INJECTION: forcing a failure. [ 615.930388][T16906] name failslab, interval 1, probability 0, space 0, times 0 [ 615.959647][T16906] CPU: 1 UID: 0 PID: 16906 Comm: syz.8.1856 Tainted: G L syzkaller #0 PREEMPT(full) [ 615.959683][T16906] Tainted: [L]=SOFTLOCKUP [ 615.959691][T16906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 615.959711][T16906] Call Trace: [ 615.959720][T16906] [ 615.959730][T16906] dump_stack_lvl+0xe8/0x150 [ 615.959769][T16906] should_fail_ex+0x412/0x560 [ 615.959803][T16906] should_failslab+0xa8/0x100 [ 615.959842][T16906] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 615.959877][T16906] ? __alloc_skb+0x186/0x7d0 [ 615.959902][T16906] ? __alloc_skb+0x1d0/0x7d0 [ 615.959923][T16906] ? __local_bh_enable_ip+0xd0/0x130 [ 615.959960][T16906] __alloc_skb+0x1d0/0x7d0 [ 615.959990][T16906] netlink_sendmsg+0x5d4/0xb40 [ 615.960023][T16906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 615.960050][T16906] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 615.960081][T16906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 615.960105][T16906] sock_sendmsg_nosec+0x112/0x150 [ 615.960129][T16906] ____sys_sendmsg+0x589/0x8c0 [ 615.960157][T16906] ? __might_fault+0xaf/0x130 [ 615.960194][T16906] ? __pfx_____sys_sendmsg+0x10/0x10 [ 615.960231][T16906] ? import_iovec+0x73/0xa0 [ 615.960271][T16906] ___sys_sendmsg+0x2a5/0x360 [ 615.960298][T16906] ? __lock_acquire+0x6b5/0x2cf0 [ 615.960334][T16906] ? __pfx____sys_sendmsg+0x10/0x10 [ 615.960397][T16906] ? __fget_files+0x2a/0x420 [ 615.960426][T16906] ? __fget_files+0x3a0/0x420 [ 615.960466][T16906] __x64_sys_sendmsg+0x1bd/0x2a0 [ 615.960497][T16906] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 615.960536][T16906] ? __pfx_ksys_write+0x10/0x10 [ 615.960570][T16906] do_syscall_64+0x14d/0xf80 [ 615.960595][T16906] ? trace_irq_disable+0x3b/0x140 [ 615.960621][T16906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.960643][T16906] ? clear_bhb_loop+0x40/0x90 [ 615.960670][T16906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.960691][T16906] RIP: 0033:0x7fcc1c79c799 [ 615.960712][T16906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.960730][T16906] RSP: 002b:00007fcc1d60c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 615.960753][T16906] RAX: ffffffffffffffda RBX: 00007fcc1ca15fa0 RCX: 00007fcc1c79c799 [ 615.960769][T16906] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 615.960782][T16906] RBP: 00007fcc1d60c090 R08: 0000000000000000 R09: 0000000000000000 [ 615.960795][T16906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.960808][T16906] R13: 00007fcc1ca16038 R14: 00007fcc1ca15fa0 R15: 00007ffeba2216c8 [ 615.960840][T16906] [ 616.266345][ T24] usb 7-1: USB disconnect, device number 46 [ 616.283744][ T24] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 616.328865][ T24] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 616.383934][ T24] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 616.420142][ T24] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 616.430518][ T24] keyspan 7-1:0.107: device disconnected [ 617.386553][ T24] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 617.577083][ T24] usb 5-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 617.643899][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 617.684889][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 617.737614][ T24] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 617.753663][ T24] usb 5-1: Product: syz [ 617.762934][ T24] usb 5-1: Manufacturer: syz [ 617.782625][ T24] usb 5-1: SerialNumber: syz [ 617.816918][ T24] usb 5-1: config 0 descriptor?? [ 617.842747][T16926] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 617.902629][ T24] usb 5-1: selecting invalid altsetting 0 [ 618.123029][T16926] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 618.353817][T16952] veth1_virt_wifi: entered allmulticast mode [ 618.467608][ T5160] Bluetooth: hci1: Unable to find connection for big 0x00 [ 618.488801][T16952] netlink: 'syz.8.1866': attribute type 2 has an invalid length. [ 618.529665][T16955] netlink: 'syz.8.1866': attribute type 2 has an invalid length. [ 618.611721][T16952] veth1_virt_wifi: left allmulticast mode [ 618.697892][T16950] snd-usb-audio 5-1:0.0: Runtime PM usage count underflow! [ 618.744467][ T24] usb 5-1: USB disconnect, device number 88 [ 619.335309][ C0] net_ratelimit: 6277 callbacks suppressed [ 619.335333][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.353747][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.366724][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:ac:a2:c7:7e:a0, vlan:0) [ 619.379652][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.392174][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.405892][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:ac:a2:c7:7e:a0, vlan:0) [ 619.418841][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.431567][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.444608][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:ac:a2:c7:7e:a0, vlan:0) [ 619.457535][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.498911][ T24] usb 7-1: new full-speed USB device number 47 using dummy_hcd [ 619.659345][ T24] usb 7-1: device descriptor read/64, error -71 [ 619.915837][ T24] usb 7-1: new full-speed USB device number 48 using dummy_hcd [ 620.077026][ T24] usb 7-1: device descriptor read/64, error -71 [ 620.226187][ T24] usb usb7-port1: attempt power cycle [ 620.585673][ T24] usb 7-1: new full-speed USB device number 49 using dummy_hcd [ 620.636780][ T24] usb 7-1: device descriptor read/8, error -71 [ 620.904759][ T24] usb 7-1: new full-speed USB device number 50 using dummy_hcd [ 620.961082][ T24] usb 7-1: device descriptor read/8, error -71 [ 621.089906][ T24] usb usb7-port1: unable to enumerate USB device [ 621.174419][T16994] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1878'. [ 621.456195][ T24] usb 9-1: new full-speed USB device number 31 using dummy_hcd [ 621.594761][T17006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.614310][T17006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.628534][ T24] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 621.641501][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.650549][ T24] usb 9-1: Product: syz [ 621.655156][ T24] usb 9-1: Manufacturer: syz [ 621.659868][ T24] usb 9-1: SerialNumber: syz [ 621.683992][ T24] usb 9-1: config 0 descriptor?? [ 621.916624][ T24] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 622.034732][ T1222] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 622.234365][ T1222] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 622.274438][ T1222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.309441][ T1222] usb 5-1: Product: syz [ 622.315281][ T1222] usb 5-1: Manufacturer: syz [ 622.320888][ T1222] usb 5-1: SerialNumber: syz [ 622.339940][ T1222] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 622.503637][ T5907] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 622.624229][T17012] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1884'. [ 623.046222][T17008] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 623.071050][T17015] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 623.797058][ T5907] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 623.990773][ T5927] usb 5-1: USB disconnect, device number 89 [ 624.019788][ T5907] ath9k_htc: Failed to initialize the device [ 624.053834][ T5927] usb 5-1: ath9k_htc: USB layer deinitialized [ 624.327882][T17021] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 624.345367][ C0] net_ratelimit: 6620 callbacks suppressed [ 624.345389][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.348117][T17022] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1887'. [ 624.352656][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.366203][ T8618] usb 7-1: new full-speed USB device number 51 using dummy_hcd [ 624.374977][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:ac:a2:c7:7e:a0, vlan:0) [ 624.404871][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.417367][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.430423][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:ac:a2:c7:7e:a0, vlan:0) [ 624.443380][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.455898][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.468870][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:ac:a2:c7:7e:a0, vlan:0) [ 624.481822][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.647080][ T8618] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 624.687867][ T8618] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.737143][ T8618] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 624.786240][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.795101][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.820735][ T8618] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.879187][ T8618] usb 7-1: config 0 descriptor?? [ 625.134084][T17029] gfs2: gfs2 mount does not exist [ 625.189022][T17029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.224974][T17029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.314294][ T24] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 625.336192][ T8618] hid_parser_main: 24 callbacks suppressed [ 625.336215][ T8618] elan 0003:04F3:0755.0017: unknown main item tag 0x0 [ 625.368547][ T24] usb 9-1: USB disconnect, device number 31 [ 625.387343][ T8618] elan 0003:04F3:0755.0017: unknown main item tag 0x0 [ 625.424542][ T8618] elan 0003:04F3:0755.0017: unknown main item tag 0x0 [ 625.464075][ T8618] elan 0003:04F3:0755.0017: unknown main item tag 0x0 [ 625.482220][ T8618] elan 0003:04F3:0755.0017: unknown main item tag 0x0 [ 625.499085][ T8618] elan 0003:04F3:0755.0017: failed to start in urb: -90 [ 625.516888][T17019] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1886'. [ 625.549724][ T8618] elan 0003:04F3:0755.0017: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 625.631899][ T8618] usb 7-1: USB disconnect, device number 51 [ 625.743981][T17033] fido_id[17033]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 626.394747][ T8618] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 626.631688][ T8618] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 626.679262][ T8618] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.741133][ T8618] usb 5-1: Product: syz [ 626.759994][ T8618] usb 5-1: Manufacturer: syz [ 626.771241][ T8618] usb 5-1: SerialNumber: syz [ 626.797764][ T8618] usb 5-1: config 0 descriptor?? [ 627.056859][ T8618] cx82310_eth 5-1:0.0: probe with driver cx82310_eth failed with error -22 [ 627.112698][ T8618] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 627.213913][ T8618] usb 5-1: USB disconnect, device number 90 [ 627.276311][T17063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.317036][T17063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.784752][ T8618] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 627.957836][ T8618] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 627.970528][ T8618] usb 9-1: config 0 has no interface number 0 [ 627.986377][ T8618] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.019286][ T8618] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.060488][ T8618] usb 9-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 628.102051][ T8618] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.181636][ T8618] usb 9-1: config 0 descriptor?? [ 628.199363][T17073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.231245][T17073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.446863][T10380] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 628.527416][T17079] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1905'. [ 628.626344][ T8618] usbhid 9-1:0.1: can't add hid device: -71 [ 628.642842][ T8618] usbhid 9-1:0.1: probe with driver usbhid failed with error -71 [ 628.668710][ T8618] usb 9-1: USB disconnect, device number 32 [ 629.051029][T17085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.082834][T17085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.158058][T17085] mkiss: ax0: crc mode is auto. [ 629.184708][ T8618] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 629.309448][T17091] binder: 17088:17091 ioctl 40087602 200000000340 returned -22 [ 629.334443][T17090] binder: 17088:17090 ioctl 8010661b 200000000400 returned -22 [ 629.355116][ C0] net_ratelimit: 6312 callbacks suppressed [ 629.355136][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.373677][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.386828][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:ac:a2:c7:7e:a0, vlan:0) [ 629.400845][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.413752][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.419410][ T8618] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 629.427982][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:ac:a2:c7:7e:a0, vlan:0) [ 629.447405][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.459946][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.473008][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:ac:a2:c7:7e:a0, vlan:0) [ 629.485977][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.510115][ T8618] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 629.548924][ T8618] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 629.583797][ T8618] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 629.624157][ T8618] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 629.671890][ T8618] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 629.692263][ T8618] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 629.728363][ T8618] usb 7-1: Product: syz [ 629.742137][ T8618] usb 7-1: Manufacturer: syz [ 629.789721][ T8618] cdc_wdm 7-1:1.0: skipping garbage [ 629.816424][ T8618] cdc_wdm 7-1:1.0: skipping garbage [ 630.037371][T10380] usb 5-1: Using ep0 maxpacket: 32 [ 630.083498][ T8618] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 630.103372][ T8618] cdc_wdm 7-1:1.0: Unknown control protocol [ 630.557300][T17101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.590370][T17101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.039449][T17106] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 631.451463][T10380] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 631.740095][ T30] audit: type=1326 audit(1774264163.757:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17108 comm="syz.4.1912" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcdbf59c799 code=0x0 [ 632.424810][ T5907] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 632.512007][ T24] usb 7-1: USB disconnect, device number 52 [ 632.528572][T17120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.600453][T17120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.624802][ T5907] usb 9-1: Using ep0 maxpacket: 32 [ 632.678492][ T5907] usb 9-1: config index 0 descriptor too short (expected 164, got 36) [ 632.757623][ T5907] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.852178][ T5907] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.959269][ T5907] usb 9-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 632.991038][T10380] usb 5-1: can't read configurations, error -71 [ 633.018671][ T5907] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.121509][ T5907] usb 9-1: config 0 descriptor?? [ 633.554747][ T5907] logitech 0003:046D:C29C.0018: unknown main item tag 0x0 [ 633.590703][ T5907] logitech 0003:046D:C29C.0018: unknown main item tag 0x0 [ 633.628665][ T5907] logitech 0003:046D:C29C.0018: unknown main item tag 0x0 [ 633.670143][ T5907] logitech 0003:046D:C29C.0018: unknown main item tag 0x0 [ 633.706630][ T5907] logitech 0003:046D:C29C.0018: unknown main item tag 0x0 [ 633.762517][ T5907] logitech 0003:046D:C29C.0018: hidraw1: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.8-1/input0 [ 634.365322][ C0] net_ratelimit: 6275 callbacks suppressed [ 634.365345][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:ac:a2:c7:7e:a0, vlan:0) [ 634.384153][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.396859][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.410046][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:ac:a2:c7:7e:a0, vlan:0) [ 634.423022][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.435670][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.448675][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:ac:a2:c7:7e:a0, vlan:0) [ 634.461648][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.474355][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.487475][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:ac:a2:c7:7e:a0, vlan:0) [ 634.636257][ T5907] logitech 0003:046D:C29C.0018: no inputs found [ 634.732281][ T5907] usb 9-1: USB disconnect, device number 33 [ 635.396616][T17169] netlink: 228 bytes leftover after parsing attributes in process `syz.6.1929'. [ 635.453308][T17167] PM: Enabling pm_trace changes system date and time during resume. [ 635.453308][T17167] PM: Correct system time has to be restored manually after resume. [ 636.071851][ C0] sched: DL replenish lagged too much [ 636.278325][T17196] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.1936'. [ 636.413814][T17198] smc: net device hsr0 applied user defined pnetid SYZ2 [ 636.426658][T17198] smc: net device hsr0 erased user defined pnetid SYZ2 [ 637.039175][T10380] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 637.393129][T17204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.406300][T17204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.206739][ T5160] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 638.216368][T10380] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 638.266093][T17207] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1939'. [ 638.281716][T17207] GUP no longer grows the stack in syz.6.1939 (17207): 200000004000-20000000a000 (200000002000) [ 638.328577][T17207] CPU: 1 UID: 0 PID: 17207 Comm: syz.6.1939 Tainted: G L syzkaller #0 PREEMPT(full) [ 638.328614][T17207] Tainted: [L]=SOFTLOCKUP [ 638.328623][T17207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 638.328637][T17207] Call Trace: [ 638.328646][T17207] [ 638.328657][T17207] dump_stack_lvl+0xe8/0x150 [ 638.328708][T17207] __get_user_pages+0x2378/0x2720 [ 638.328760][T17207] ? mtree_load+0x12a/0x780 [ 638.328798][T17207] get_user_pages_remote+0x2f6/0xab0 [ 638.328829][T17207] ? __pfx_mtree_load+0x10/0x10 [ 638.328861][T17207] ? __pfx_get_user_pages_remote+0x10/0x10 [ 638.328891][T17207] ? __access_remote_vm+0xa3/0x6f0 [ 638.328923][T17207] ? __access_remote_vm+0x42c/0x6f0 [ 638.328962][T17207] __access_remote_vm+0x222/0x6f0 [ 638.329006][T17207] ? __pfx___access_remote_vm+0x10/0x10 [ 638.329043][T17207] ? alloc_pages_noprof+0x13b/0x2a0 [ 638.329075][T17207] proc_pid_cmdline_read+0x419/0x7f0 [ 638.329111][T17207] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 638.329144][T17207] ? rw_verify_area+0x2a6/0x4d0 [ 638.329170][T17207] vfs_readv+0x587/0x840 [ 638.329199][T17207] ? __pfx_futex_wake+0x10/0x10 [ 638.329225][T17207] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 638.329258][T17207] ? __pfx_vfs_readv+0x10/0x10 [ 638.329302][T17207] ? __fget_files+0x2a/0x420 [ 638.329339][T17207] ? __fget_files+0x3a0/0x420 [ 638.329368][T17207] ? __fget_files+0x2a/0x420 [ 638.329408][T17207] __x64_sys_preadv+0x19f/0x2a0 [ 638.329437][T17207] ? __pfx___x64_sys_preadv+0x10/0x10 [ 638.329475][T17207] do_syscall_64+0x14d/0xf80 [ 638.329501][T17207] ? trace_irq_disable+0x3b/0x140 [ 638.329528][T17207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.329551][T17207] ? clear_bhb_loop+0x40/0x90 [ 638.329578][T17207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.329602][T17207] RIP: 0033:0x7f034d39c799 [ 638.329623][T17207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.329643][T17207] RSP: 002b:00007f034e2ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 638.329667][T17207] RAX: ffffffffffffffda RBX: 00007f034d615fa0 RCX: 00007f034d39c799 [ 638.329693][T17207] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000005 [ 638.329708][T17207] RBP: 00007f034d432c99 R08: 00000000fffffff9 R09: 0000000000000000 [ 638.329724][T17207] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 638.329738][T17207] R13: 00007f034d616038 R14: 00007f034d615fa0 R15: 00007fff2f19bdd8 [ 638.329777][T17207] [ 638.504144][T10380] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.995204][T10380] usb 5-1: config 0 has no interface number 0 [ 639.163485][T10380] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 639.188670][T10380] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 639.339949][T10380] usb 5-1: string descriptor 0 read error: -71 [ 639.374898][ C0] net_ratelimit: 5833 callbacks suppressed [ 639.374920][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.393833][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:ac:a2:c7:7e:a0, vlan:0) [ 639.407284][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.419824][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.432773][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:ac:a2:c7:7e:a0, vlan:0) [ 639.445807][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.458430][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.471988][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:ac:a2:c7:7e:a0, vlan:0) [ 639.485070][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.497687][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.518941][T10380] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 639.544849][T10380] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.830691][T17229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1947'. [ 639.953397][ T30] audit: type=1400 audit(1774264171.967:10): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=17233 comm="syz.8.1948" [ 640.810194][T10380] usb 5-1: config 0 descriptor?? [ 640.812631][T17254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.852408][T17254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.887683][T10380] usb 5-1: can't set config #0, error -71 [ 640.894783][ T24] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 640.946372][T17251] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 640.986075][ T5907] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 641.069520][ T24] usb 9-1: config 0 has an invalid interface number: 117 but max is 0 [ 641.125846][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.174316][ T24] usb 9-1: config 0 has no interface number 0 [ 641.201706][ T24] usb 9-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 641.240115][T17265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.253542][ T24] usb 9-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 641.286953][T17265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.306033][ T24] usb 9-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 641.319096][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.328266][ T24] usb 9-1: Product: syz [ 641.332591][ T24] usb 9-1: Manufacturer: syz [ 641.339484][ T24] usb 9-1: SerialNumber: syz [ 641.361555][ T24] usb 9-1: config 0 descriptor?? [ 641.947577][T10380] usb 5-1: USB disconnect, device number 92 [ 642.058188][T17246] program syz.8.1951 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 642.118667][T17267] comedi comedi3: 8255: I/O port conflict (0x4f27,4) [ 642.489249][ T5927] usb 9-1: USB disconnect, device number 34 [ 643.591193][T17303] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 643.705102][ T5927] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 643.874757][ T5927] usb 9-1: Using ep0 maxpacket: 16 [ 643.888180][ T5927] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 643.929036][ T5927] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 643.973434][ T5927] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 643.991172][ T5927] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.016365][ T5927] usb 9-1: Product: syz [ 644.029671][ T5927] usb 9-1: Manufacturer: syz [ 644.041892][ T5927] usb 9-1: SerialNumber: syz [ 644.084803][ T24] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 644.269115][T17316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.291507][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 644.322674][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 644.335135][T17316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.376887][ T24] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 644.384987][ C0] net_ratelimit: 6134 callbacks suppressed [ 644.385039][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.404893][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:ac:a2:c7:7e:a0, vlan:0) [ 644.417896][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.430440][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.441463][ T5927] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found [ 644.450399][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:ac:a2:c7:7e:a0, vlan:0) [ 644.463356][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.466348][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.476426][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.496682][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:ac:a2:c7:7e:a0, vlan:0) [ 644.500378][ T5927] cdc_ncm 9-1:1.0: bind() failure [ 644.510838][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.526565][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.583726][ T24] usb 7-1: config 0 descriptor?? [ 644.625950][ T5927] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 644.634846][ T24] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 644.678283][ T5927] cdc_ncm 9-1:1.1: bind() failure [ 644.738735][ T5927] usb 9-1: USB disconnect, device number 35 [ 644.947199][T17323] batadv_slave_1: entered promiscuous mode [ 645.203578][T17321] batadv_slave_1: left promiscuous mode [ 645.339310][T17329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.395381][T17329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.430037][T17309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.479992][T17309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.548010][ T24] gspca_vc032x: reg_r err -110 [ 645.579467][ T24] vc032x 7-1:0.0: probe with driver vc032x failed with error -110 [ 645.772498][T17329] program syz.7.1974 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 645.874781][ T5907] usb 9-1: new full-speed USB device number 36 using dummy_hcd [ 646.057694][ T5907] usb 9-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 646.083736][ T5907] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.104433][ T5907] usb 9-1: Product: syz [ 646.110452][ T5907] usb 9-1: Manufacturer: syz [ 646.119926][T17309] 9p: Could not find request transport: xen [ 646.127699][ T5907] usb 9-1: SerialNumber: syz [ 646.145265][ T5907] usb 9-1: config 0 descriptor?? [ 646.160560][ T5907] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 646.224803][ T24] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 646.414471][ T24] usb 5-1: config 0 has an invalid interface number: 48 but max is 0 [ 646.423016][ T24] usb 5-1: config 0 has no interface number 0 [ 646.430067][ T24] usb 5-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 646.441687][ T24] usb 5-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 646.457758][ T24] usb 5-1: config 0 interface 48 has no altsetting 0 [ 646.469402][ T24] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 646.479169][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.495507][ T24] usb 5-1: config 0 descriptor?? [ 646.568169][ T5907] gspca_stk1135: reg_w 0x0 err -71 [ 646.601363][ T5907] gspca_stk1135: serial bus timeout: status=0x00 [ 646.634853][ T5907] gspca_stk1135: Sensor write failed [ 646.659364][ T5907] gspca_stk1135: serial bus timeout: status=0x00 [ 646.676202][ T5907] gspca_stk1135: Sensor write failed [ 646.689511][ T5907] gspca_stk1135: serial bus timeout: status=0x00 [ 646.706488][ T5907] gspca_stk1135: Sensor read failed [ 646.718810][ T5907] gspca_stk1135: serial bus timeout: status=0x00 [ 646.727160][ T5907] gspca_stk1135: Sensor read failed [ 646.732455][ T5907] gspca_stk1135: Detected sensor type unknown (0x0) [ 646.746341][ T5907] gspca_stk1135: serial bus timeout: status=0x00 [ 646.752926][ T5907] gspca_stk1135: Sensor read failed [ 646.764728][ T5907] gspca_stk1135: serial bus timeout: status=0x00 [ 646.772010][ T5907] gspca_stk1135: Sensor read failed [ 646.778400][ T5907] gspca_stk1135: serial bus timeout: status=0x00 [ 646.785160][ T5907] gspca_stk1135: Sensor write failed [ 646.800995][ T5907] gspca_stk1135: serial bus timeout: status=0x00 [ 646.816506][ T24] usb 5-1: string descriptor 0 read error: -71 [ 646.844105][ T5907] gspca_stk1135: Sensor write failed [ 646.859619][ T24] cp210x 5-1:0.48: cp210x converter detected [ 646.875042][ T5907] stk1135 9-1:0.0: probe with driver stk1135 failed with error -71 [ 646.890073][ T24] cp210x 5-1:0.48: failed to get vendor val 0x370b size 1: -71 [ 646.914337][ T5907] usb 9-1: USB disconnect, device number 36 [ 646.925994][ T24] cp210x 5-1:0.48: querying part number failed [ 646.984734][ T24] usb 5-1: cp210x converter now attached to ttyUSB0 [ 647.046426][ T24] usb 5-1: USB disconnect, device number 93 [ 647.124388][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 647.163950][ T24] cp210x 5-1:0.48: device disconnected [ 647.407895][T17354] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1983'. [ 647.580353][ T8618] usb 7-1: USB disconnect, device number 54 [ 647.634672][ T24] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 647.770986][T17360] trusted_key: encrypted_key: insufficient parameters specified [ 647.855630][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 647.881147][ T24] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 647.947844][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 647.988897][ T24] usb 9-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 648.024181][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.040415][T17360] usb 8-1: USB disconnect, device number 34 [ 648.067788][ T24] usb 9-1: Product: syz [ 648.089362][ T24] usb 9-1: Manufacturer: syz [ 648.109598][ T24] usb 9-1: SerialNumber: syz [ 648.149994][ T24] usb 9-1: config 0 descriptor?? [ 648.521063][ T24] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input28 [ 648.983865][T17369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.100821][ T24] rc_core: IR keymap rc-imon-pad not found [ 649.117221][T17369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.152227][ T24] Registered IR keymap rc-empty [ 649.180620][ T24] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 649.260767][ T24] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 649.367497][ T24] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 649.394687][ C0] net_ratelimit: 6201 callbacks suppressed [ 649.394708][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:ac:a2:c7:7e:a0, vlan:0) [ 649.413906][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.426385][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.441214][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:ac:a2:c7:7e:a0, vlan:0) [ 649.456378][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.468994][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.482314][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:ac:a2:c7:7e:a0, vlan:0) [ 649.495525][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.508124][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.521161][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:ac:a2:c7:7e:a0, vlan:0) [ 649.559675][ T24] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input29 [ 649.572832][T17376] XFS (nbd4): no-recovery mounts must be read-only. [ 649.632465][T17377] qrtr: Invalid version 43 [ 649.667830][ T24] imon 9-1:0.0: iMON device (15c2:0041, intf0) on usb<9:37> initialized [ 649.726593][T17377] XFS (nbd4): no-recovery mounts must be read-only. [ 649.746102][T17380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.823617][T17380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.914985][T17369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.974266][T17369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.827554][T17397] netlink: 'syz.7.1992': attribute type 3 has an invalid length. [ 650.848051][T17396] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 650.900442][T17396] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1994'. [ 650.964120][T17398] syzkaller1: entered promiscuous mode [ 650.973482][T17398] syzkaller1: entered allmulticast mode [ 651.012395][T17396] unsupported nlmsg_type 40 [ 651.039929][T17398] sg_write: data in/out 405724/47 bytes for SCSI command 0x0-- guessing data in; [ 651.039929][T17398] program syz.6.1994 not setting count and/or reply_len properly [ 651.357082][ C1] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 651.366164][ T5907] usb 9-1: USB disconnect, device number 37 [ 651.814043][T17415] netlink: 'syz.7.1999': attribute type 6 has an invalid length. [ 652.004819][ T5907] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 652.166108][ T24] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 652.187756][ T24] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 652.203059][ T5907] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 12408, setting to 64 [ 652.223290][ T24] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 652.235203][ T5907] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 652.256095][ T24] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 652.286065][ T5907] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.294382][ T24] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 652.315965][ T5907] usb 9-1: config 0 descriptor?? [ 652.341088][ T24] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz0] on syz0 [ 652.911867][T17430] fido_id[17430]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 652.950302][T17409] netlink: 'syz.8.1997': attribute type 10 has an invalid length. [ 653.314736][ T8618] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 653.350785][T17409] team0: Device veth0_macvtap failed to register rx_handler [ 653.415150][ T5907] ath6kl: Failed to submit usb control message: -110 [ 653.422135][ T5907] ath6kl: unable to send the bmi data to the device: -110 [ 653.430688][ T5907] ath6kl: Unable to send get target info: -110 [ 653.471986][ T5907] ath6kl: Failed to init ath6kl core: -110 [ 653.481906][ T8618] usb 5-1: Using ep0 maxpacket: 32 [ 653.499195][ T8618] usb 5-1: config 139 has an invalid interface number: 49 but max is 0 [ 653.513718][ T5907] ath6kl_usb 9-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 653.547155][ T8618] usb 5-1: config 139 has no interface number 0 [ 653.570005][ T8618] usb 5-1: config 139 interface 49 has no altsetting 0 [ 653.621939][ T8618] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 653.633426][T17439] netlink: 6 bytes leftover after parsing attributes in process `syz.6.2004'. [ 653.664253][ T8618] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.699945][ T8618] usb 5-1: Product: syz [ 653.722999][ T8618] usb 5-1: Manufacturer: syz [ 653.742507][ T8618] usb 5-1: SerialNumber: syz [ 653.780608][ T5907] usb 9-1: USB disconnect, device number 38 [ 654.007975][ C1] raw-gadget.2 gadget.4: ignoring, device is not running [ 654.052760][ T8618] radio-usb-si4713 5-1:139.49: Si4713 development board discovered: (10C4:8244) [ 654.118280][ T8618] radio-usb-si4713 5-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 654.155460][ T8618] usbhid 5-1:139.49: couldn't find an input interrupt endpoint [ 654.213132][ T8618] usb 5-1: USB disconnect, device number 94 [ 654.295221][ T5927] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 654.405159][ C0] net_ratelimit: 6286 callbacks suppressed [ 654.405181][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.423521][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.436611][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:ac:a2:c7:7e:a0, vlan:0) [ 654.449623][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.462396][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.475418][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:ac:a2:c7:7e:a0, vlan:0) [ 654.488392][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.500901][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.513971][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:ac:a2:c7:7e:a0, vlan:0) [ 654.526918][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.529399][ T5927] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 654.563075][ T5927] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 654.599880][T17457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.619292][ T5927] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.632365][T17457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.673397][ T5927] usb 7-1: config 0 descriptor?? [ 654.734112][ T5927] pwc: Askey VC010 type 2 USB webcam detected. [ 655.125882][ T5927] pwc: recv_control_msg error -32 req 02 val 2b00 [ 655.140531][ T5927] pwc: recv_control_msg error -32 req 02 val 2700 [ 655.160211][ T5927] pwc: recv_control_msg error -32 req 02 val 2c00 [ 655.207915][ T5927] pwc: recv_control_msg error -32 req 04 val 1000 [ 655.234134][ T5927] pwc: recv_control_msg error -32 req 04 val 1300 [ 655.261620][ T5927] pwc: recv_control_msg error -32 req 04 val 1400 [ 655.293079][ T5927] pwc: recv_control_msg error -32 req 02 val 2000 [ 655.339514][ T5927] pwc: recv_control_msg error -32 req 02 val 2100 [ 655.362465][ T5927] pwc: recv_control_msg error -32 req 04 val 1500 [ 655.432011][ T5927] pwc: recv_control_msg error -71 req 02 val 2500 [ 655.438864][ T8618] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 655.481856][ T5927] pwc: recv_control_msg error -71 req 02 val 2400 [ 655.514522][ T5927] pwc: recv_control_msg error -71 req 02 val 2600 [ 655.540301][ T5927] pwc: recv_control_msg error -71 req 02 val 2900 [ 655.562698][ T5927] pwc: recv_control_msg error -71 req 02 val 2800 [ 655.588478][ T5927] pwc: recv_control_msg error -71 req 04 val 1100 [ 655.606597][ T5927] pwc: recv_control_msg error -71 req 04 val 1200 [ 655.646509][ T8618] usb 9-1: device descriptor read/64, error -71 [ 655.690432][ T5927] pwc: Registered as video103. [ 655.742677][ T5927] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input30 [ 655.834457][ T5927] usb 7-1: USB disconnect, device number 55 [ 655.894979][ T8618] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 656.084967][ T8618] usb 9-1: device descriptor read/64, error -71 [ 656.231849][ T8618] usb usb9-port1: attempt power cycle [ 656.654715][ T8618] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 656.709565][ T8618] usb 9-1: device descriptor read/8, error -71 [ 656.994847][ T8618] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 657.057776][ T8618] usb 9-1: device descriptor read/8, error -71 [ 657.196198][ T8618] usb usb9-port1: unable to enumerate USB device [ 657.282512][T17501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.312993][T17501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.359072][T17501] netlink: 'syz.7.2024': attribute type 1 has an invalid length. [ 657.401186][T17501] netlink: 196 bytes leftover after parsing attributes in process `syz.7.2024'. [ 657.448367][T17501] netlink: 5 bytes leftover after parsing attributes in process `syz.7.2024'. [ 657.612002][T17510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2027'. [ 658.194228][ T5946] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 658.524755][ T5946] usb 7-1: Using ep0 maxpacket: 16 [ 658.634762][ T5927] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 658.681869][ T5946] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 658.709470][ T5946] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 658.814750][ T5927] usb 5-1: Using ep0 maxpacket: 8 [ 658.844301][ T5927] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 658.874090][ T5927] usb 5-1: config 0 has no interface number 0 [ 658.892500][ T5927] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 658.913920][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.952294][ T5927] usb 5-1: config 0 descriptor?? [ 659.088012][ T5927] viperboard 5-1:0.143: version 0.00 found at bus 005 address 095 [ 659.141039][ T5946] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 659.164412][ T5946] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.201446][T17529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.236245][ T5927] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 659.261046][T17529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.303079][ T5927] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 659.390012][ T5927] usb 5-1: USB disconnect, device number 95 [ 659.415132][ C0] net_ratelimit: 6473 callbacks suppressed [ 659.415149][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.433660][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.446646][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:ac:a2:c7:7e:a0, vlan:0) [ 659.459605][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.472090][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.485251][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:ac:a2:c7:7e:a0, vlan:0) [ 659.498351][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.510846][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.523777][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:ac:a2:c7:7e:a0, vlan:0) [ 659.536680][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.559199][ T5946] usb 7-1: Product: syz [ 659.579925][ T5946] usb 7-1: Manufacturer: syz [ 659.600614][ T5946] usb 7-1: SerialNumber: syz [ 659.621953][T17542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.662495][ T5946] usb 7-1: config 0 descriptor?? [ 659.684494][T17542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.872405][ T5946] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 659.903454][ T5946] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 660.101262][ C1] [ 660.101275][ C1] ======================================================== [ 660.101286][ C1] WARNING: possible irq lock inversion dependency detected [ 660.101305][ C1] syzkaller #0 Tainted: G L [ 660.101319][ C1] -------------------------------------------------------- [ 660.101329][ C1] syz.4.2040/17549 just changed the state of lock: [ 660.101342][ C1] ffff88802d3ec230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa4/0x330 [ 660.101413][ C1] but this lock took another, SOFTIRQ-READ-unsafe lock in the past: [ 660.101425][ C1] (tasklist_lock){.+.+}-{3:3} [ 660.101447][ C1] [ 660.101447][ C1] [ 660.101447][ C1] and interrupts could create inverse lock ordering between them. [ 660.101447][ C1] [ 660.101459][ C1] [ 660.101459][ C1] other info that might help us debug this: [ 660.101468][ C1] Chain exists of: [ 660.101468][ C1] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 660.101468][ C1] [ 660.101515][ C1] Possible interrupt unsafe locking scenario: [ 660.101515][ C1] [ 660.101523][ C1] CPU0 CPU1 [ 660.101532][ C1] ---- ---- [ 660.101540][ C1] lock(tasklist_lock); [ 660.101576][ C1] local_irq_disable(); [ 660.101586][ C1] lock(&dev->event_lock#2); [ 660.101616][ C1] lock(&client->buffer_lock); [ 660.101636][ C1] [ 660.101643][ C1] lock(&dev->event_lock#2); [ 660.101667][ C1] [ 660.101667][ C1] *** DEADLOCK *** [ 660.101667][ C1] [ 660.101675][ C1] 6 locks held by syz.4.2040/17549: [ 660.101690][ C1] #0: ffff88807a47c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 660.101759][ C1] #1: ffff88807a47c128 (&tty->atomic_write_lock){+.+.}-{4:4}, at: file_tty_write+0x211/0xa10 [ 660.101824][ C1] #2: ffff88807a47c2c8 (&tty->termios_rwsem){++++}-{4:4}, at: n_tty_write+0x1f2/0x1220 [ 660.101883][ C1] #3: ffffc90004226370 (&ldata->output_lock){+.+.}-{4:4}, at: n_tty_write+0x684/0x1220 [ 660.101942][ C1] #4: ffffffff8e94fc00 (console_lock){+.+.}-{0:0}, at: do_con_write+0x12c/0x58f0 [ 660.102011][ C1] #5: ffffffff8e95d7e0 (rcu_read_lock){....}-{1:3}, at: led_trigger_event+0x4b/0x210 [ 660.102080][ C1] [ 660.102080][ C1] the shortest dependencies between 2nd lock and 1st lock: [ 660.102108][ C1] -> (tasklist_lock){.+.+}-{3:3} { [ 660.102143][ C1] HARDIRQ-ON-R at: [ 660.102157][ C1] lock_acquire+0x106/0x350 [ 660.102197][ C1] _raw_read_lock+0x36/0x50 [ 660.102221][ C1] __do_wait+0xde/0x740 [ 660.102248][ C1] do_wait+0x1e7/0x510 [ 660.102276][ C1] kernel_wait+0xd6/0x1c0 [ 660.102302][ C1] call_usermodehelper_exec_work+0xbe/0x230 [ 660.102336][ C1] process_one_work+0x9a3/0x1710 [ 660.102369][ C1] worker_thread+0xba8/0x11e0 [ 660.102389][ C1] kthread+0x388/0x470 [ 660.102414][ C1] ret_from_fork+0x51e/0xb90 [ 660.102446][ C1] ret_from_fork_asm+0x1a/0x30 [ 660.102468][ C1] SOFTIRQ-ON-R at: [ 660.102483][ C1] lock_acquire+0x106/0x350 [ 660.102515][ C1] _raw_read_lock+0x36/0x50 [ 660.102537][ C1] __do_wait+0xde/0x740 [ 660.102563][ C1] do_wait+0x1e7/0x510 [ 660.102590][ C1] kernel_wait+0xd6/0x1c0 [ 660.102618][ C1] call_usermodehelper_exec_work+0xbe/0x230 [ 660.102650][ C1] process_one_work+0x9a3/0x1710 [ 660.102683][ C1] worker_thread+0xba8/0x11e0 [ 660.102703][ C1] kthread+0x388/0x470 [ 660.102727][ C1] ret_from_fork+0x51e/0xb90 [ 660.102758][ C1] ret_from_fork_asm+0x1a/0x30 [ 660.102779][ C1] INITIAL USE at: [ 660.102795][ C1] lock_acquire+0x106/0x350 [ 660.102827][ C1] _raw_write_lock_irq+0x3d/0x50 [ 660.102852][ C1] copy_process+0x2b3f/0x4430 [ 660.102886][ C1] kernel_clone+0x26d/0x8e0 [ 660.102908][ C1] user_mode_thread+0x110/0x180 [ 660.102931][ C1] rest_init+0x23/0x300 [ 660.102962][ C1] start_kernel+0x38f/0x3e0 [ 660.102995][ C1] x86_64_start_reservations+0x24/0x30 [ 660.103022][ C1] x86_64_start_kernel+0x143/0x1c0 [ 660.103048][ C1] common_startup_64+0x13e/0x147 [ 660.103074][ C1] INITIAL READ USE at: [ 660.103088][ C1] lock_acquire+0x106/0x350 [ 660.103121][ C1] _raw_read_lock+0x36/0x50 [ 660.103144][ C1] __do_wait+0xde/0x740 [ 660.103169][ C1] do_wait+0x1e7/0x510 [ 660.103206][ C1] kernel_wait+0xd6/0x1c0 [ 660.103233][ C1] call_usermodehelper_exec_work+0xbe/0x230 [ 660.103267][ C1] process_one_work+0x9a3/0x1710 [ 660.103300][ C1] worker_thread+0xba8/0x11e0 [ 660.103320][ C1] kthread+0x388/0x470 [ 660.103345][ C1] ret_from_fork+0x51e/0xb90 [ 660.103375][ C1] ret_from_fork_asm+0x1a/0x30 [ 660.103397][ C1] } [ 660.103404][ C1] ... key at: [] tasklist_lock+0x18/0x40 [ 660.103435][ C1] ... acquired at: [ 660.103444][ C1] _raw_read_lock+0x36/0x50 [ 660.103465][ C1] send_sigurg+0x12b/0x420 [ 660.103486][ C1] sk_send_sigurg+0x6c/0x2e0 [ 660.103506][ C1] queue_oob+0x42c/0x4f0 [ 660.103537][ C1] unix_stream_sendmsg+0xcb1/0xe80 [ 660.103566][ C1] sock_sendmsg_nosec+0x112/0x150 [ 660.103586][ C1] ____sys_sendmsg+0x589/0x8c0 [ 660.103614][ C1] ___sys_sendmsg+0x2a5/0x360 [ 660.103641][ C1] __sys_sendmmsg+0x27c/0x4e0 [ 660.103669][ C1] __x64_sys_sendmmsg+0xa0/0xc0 [ 660.103698][ C1] do_syscall_64+0x14d/0xf80 [ 660.103723][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.103746][ C1] [ 660.103765][ C1] -> (&f_owner->lock){....}-{3:3} { [ 660.103798][ C1] INITIAL USE at: [ 660.103812][ C1] lock_acquire+0x106/0x350 [ 660.103843][ C1] _raw_write_lock_irq+0x3d/0x50 [ 660.103866][ C1] __f_setown+0x67/0x370 [ 660.103909][ C1] fcntl_dirnotify+0x3f9/0x6a0 [ 660.103932][ C1] do_fcntl+0x77e/0x1a20 [ 660.103951][ C1] __se_sys_fcntl+0xc8/0x150 [ 660.103970][ C1] do_syscall_64+0x14d/0xf80 [ 660.103993][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.104014][ C1] INITIAL READ USE at: [ 660.104028][ C1] lock_acquire+0x106/0x350 [ 660.104057][ C1] _raw_read_lock_irqsave+0x48/0x60 [ 660.104079][ C1] send_sigio+0x38/0x370 [ 660.104097][ C1] dnotify_handle_event+0x169/0x440 [ 660.104120][ C1] fsnotify+0x1831/0x1ae0 [ 660.104150][ C1] fsnotify_create+0x121/0x180 [ 660.104170][ C1] vfs_create+0x300/0x460 [ 660.104195][ C1] filename_mknodat+0x3e8/0x660 [ 660.104216][ C1] __se_sys_mknodat+0x3b/0x150 [ 660.104237][ C1] do_syscall_64+0x14d/0xf80 [ 660.104261][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.104282][ C1] } [ 660.104288][ C1] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 660.104315][ C1] ... acquired at: [ 660.104323][ C1] _raw_read_lock_irqsave+0x48/0x60 [ 660.104345][ C1] send_sigio+0x38/0x370 [ 660.104372][ C1] kill_fasync+0x24d/0x4d0 [ 660.104389][ C1] sock_wake_async+0x137/0x160 [ 660.104406][ C1] sock_def_readable+0x3c1/0x550 [ 660.104423][ C1] queue_oob+0x45e/0x4f0 [ 660.104449][ C1] unix_stream_sendmsg+0xcb1/0xe80 [ 660.104474][ C1] sock_sendmsg_nosec+0x112/0x150 [ 660.104491][ C1] ____sys_sendmsg+0x589/0x8c0 [ 660.104513][ C1] ___sys_sendmsg+0x2a5/0x360 [ 660.104535][ C1] __sys_sendmmsg+0x27c/0x4e0 [ 660.104556][ C1] __x64_sys_sendmmsg+0xa0/0xc0 [ 660.104597][ C1] do_syscall_64+0x14d/0xf80 [ 660.104620][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.104640][ C1] [ 660.104645][ C1] -> (&new->fa_lock){....}-{3:3} { [ 660.104676][ C1] INITIAL USE at: [ 660.104689][ C1] lock_acquire+0x106/0x350 [ 660.104728][ C1] _raw_write_lock_irq+0x3d/0x50 [ 660.104767][ C1] fasync_remove_entry+0xf1/0x1c0 [ 660.104787][ C1] sock_fasync+0x85/0xf0 [ 660.104815][ C1] __fput+0x754/0x8c0 [ 660.104841][ C1] task_work_run+0x1d9/0x270 [ 660.104866][ C1] exit_to_user_mode_loop+0xed/0x480 [ 660.104895][ C1] do_syscall_64+0x32d/0xf80 [ 660.104918][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.104939][ C1] INITIAL READ USE at: [ 660.104952][ C1] lock_acquire+0x106/0x350 [ 660.104981][ C1] _raw_read_lock_irqsave+0x48/0x60 [ 660.105003][ C1] kill_fasync+0x199/0x4d0 [ 660.105023][ C1] sock_wake_async+0x137/0x160 [ 660.105043][ C1] sock_def_readable+0x3c1/0x550 [ 660.105079][ C1] queue_oob+0x45e/0x4f0 [ 660.105109][ C1] unix_stream_sendmsg+0xcb1/0xe80 [ 660.105139][ C1] sock_sendmsg_nosec+0x112/0x150 [ 660.105159][ C1] ____sys_sendmsg+0x589/0x8c0 [ 660.105194][ C1] ___sys_sendmsg+0x2a5/0x360 [ 660.105222][ C1] __sys_sendmmsg+0x27c/0x4e0 [ 660.105250][ C1] __x64_sys_sendmmsg+0xa0/0xc0 [ 660.105279][ C1] do_syscall_64+0x14d/0xf80 [ 660.105304][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.105327][ C1] } [ 660.105334][ C1] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 660.105362][ C1] ... acquired at: [ 660.105370][ C1] _raw_read_lock_irqsave+0x48/0x60 [ 660.105392][ C1] kill_fasync+0x199/0x4d0 [ 660.105412][ C1] evdev_pass_values+0x627/0xbd0 [ 660.105432][ C1] evdev_events+0x1e6/0x340 [ 660.105452][ C1] input_pass_values+0x288/0x890 [ 660.105484][ C1] input_event_dispose+0x330/0x6b0 [ 660.105511][ C1] input_inject_event+0x1dc/0x330 [ 660.105538][ C1] evdev_write+0x325/0x4c0 [ 660.105558][ C1] vfs_write+0x29a/0xb90 [ 660.105577][ C1] ksys_write+0x150/0x270 [ 660.105595][ C1] do_syscall_64+0x14d/0xf80 [ 660.105620][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.105641][ C1] [ 660.105648][ C1] -> (&client->buffer_lock){....}-{3:3} { [ 660.105681][ C1] INITIAL USE at: [ 660.105695][ C1] lock_acquire+0x106/0x350 [ 660.105726][ C1] _raw_spin_lock+0x2e/0x40 [ 660.105747][ C1] evdev_pass_values+0xb9/0xbd0 [ 660.105767][ C1] evdev_events+0x1e6/0x340 [ 660.105787][ C1] input_pass_values+0x288/0x890 [ 660.105819][ C1] input_event_dispose+0x330/0x6b0 [ 660.105847][ C1] input_inject_event+0x1dc/0x330 [ 660.105874][ C1] evdev_write+0x325/0x4c0 [ 660.105893][ C1] vfs_write+0x29a/0xb90 [ 660.105912][ C1] ksys_write+0x150/0x270 [ 660.105932][ C1] do_syscall_64+0x14d/0xf80 [ 660.105957][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.105979][ C1] } [ 660.105986][ C1] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 660.106025][ C1] ... acquired at: [ 660.106033][ C1] _raw_spin_lock+0x2e/0x40 [ 660.106053][ C1] evdev_pass_values+0xb9/0xbd0 [ 660.106073][ C1] evdev_events+0x1e6/0x340 [ 660.106092][ C1] input_pass_values+0x288/0x890 [ 660.106123][ C1] input_event_dispose+0x330/0x6b0 [ 660.106150][ C1] input_inject_event+0x1dc/0x330 [ 660.106177][ C1] evdev_write+0x325/0x4c0 [ 660.106204][ C1] vfs_write+0x29a/0xb90 [ 660.106222][ C1] ksys_write+0x150/0x270 [ 660.106241][ C1] do_syscall_64+0x14d/0xf80 [ 660.106266][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.106287][ C1] [ 660.106293][ C1] -> (&dev->event_lock#2){..-.}-{3:3} { [ 660.106332][ C1] IN-SOFTIRQ-W at: [ 660.106345][ C1] lock_acquire+0x106/0x350 [ 660.106376][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 660.106398][ C1] input_inject_event+0xa4/0x330 [ 660.106426][ C1] led_trigger_event+0x138/0x210 [ 660.106458][ C1] kbd_bh+0x1c6/0x2e0 [ 660.106481][ C1] tasklet_action_common+0x2da/0x4b0 [ 660.106503][ C1] handle_softirqs+0x22a/0x840 [ 660.106534][ C1] __irq_exit_rcu+0xca/0x220 [ 660.106567][ C1] irq_exit_rcu+0x9/0x30 [ 660.106597][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 660.106622][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 660.106646][ C1] _raw_spin_unlock_irqrestore+0x47/0x80 [ 660.106669][ C1] do_con_write+0x45ad/0x58f0 [ 660.106701][ C1] con_write+0x27/0x290 [ 660.106731][ C1] n_tty_write+0xd4f/0x1220 [ 660.106754][ C1] file_tty_write+0x558/0xa10 [ 660.106782][ C1] vfs_write+0x61d/0xb90 [ 660.106800][ C1] ksys_write+0x150/0x270 [ 660.106818][ C1] do_syscall_64+0x14d/0xf80 [ 660.106860][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.106881][ C1] INITIAL USE at: [ 660.106894][ C1] lock_acquire+0x106/0x350 [ 660.106923][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 660.106955][ C1] input_inject_event+0xa4/0x330 [ 660.106982][ C1] kbd_led_trigger_activate+0xbc/0x100 [ 660.107006][ C1] led_trigger_set+0x535/0x960 [ 660.107037][ C1] led_trigger_set_default+0x260/0x2a0 [ 660.107067][ C1] led_classdev_register_ext+0x787/0x9c0 [ 660.107096][ C1] input_leds_connect+0x517/0x790 [ 660.107126][ C1] input_register_device+0xce0/0x1140 [ 660.107158][ C1] atkbd_connect+0x71e/0xa10 [ 660.107190][ C1] serio_driver_probe+0x82/0xb0 [ 660.107241][ C1] really_probe+0x267/0xaf0 [ 660.107265][ C1] __driver_probe_device+0x18c/0x320 [ 660.107289][ C1] driver_probe_device+0x4f/0x240 [ 660.107314][ C1] __driver_attach+0x34c/0x640 [ 660.107336][ C1] bus_for_each_dev+0x23b/0x2c0 [ 660.107365][ C1] serio_handle_event+0x1af/0xf80 [ 660.107387][ C1] process_one_work+0x9a3/0x1710 [ 660.107419][ C1] worker_thread+0xba8/0x11e0 [ 660.107439][ C1] kthread+0x388/0x470 [ 660.107463][ C1] ret_from_fork+0x51e/0xb90 [ 660.107494][ C1] ret_from_fork_asm+0x1a/0x30 [ 660.107516][ C1] } [ 660.107523][ C1] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 660.107563][ C1] ... acquired at: [ 660.107571][ C1] mark_lock+0x115/0x190 [ 660.107590][ C1] __lock_acquire+0x689/0x2cf0 [ 660.107621][ C1] lock_acquire+0x106/0x350 [ 660.107652][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 660.107675][ C1] input_inject_event+0xa4/0x330 [ 660.107702][ C1] led_trigger_event+0x138/0x210 [ 660.107736][ C1] kbd_bh+0x1c6/0x2e0 [ 660.107758][ C1] tasklet_action_common+0x2da/0x4b0 [ 660.107780][ C1] handle_softirqs+0x22a/0x840 [ 660.107811][ C1] __irq_exit_rcu+0xca/0x220 [ 660.107843][ C1] irq_exit_rcu+0x9/0x30 [ 660.107874][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 660.107899][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 660.107922][ C1] _raw_spin_unlock_irqrestore+0x47/0x80 [ 660.107945][ C1] do_con_write+0x45ad/0x58f0 [ 660.107978][ C1] con_write+0x27/0x290 [ 660.108008][ C1] n_tty_write+0xd4f/0x1220 [ 660.108030][ C1] file_tty_write+0x558/0xa10 [ 660.108058][ C1] vfs_write+0x61d/0xb90 [ 660.108078][ C1] ksys_write+0x150/0x270 [ 660.108097][ C1] do_syscall_64+0x14d/0xf80 [ 660.108122][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.108145][ C1] [ 660.108151][ C1] [ 660.108151][ C1] stack backtrace: [ 660.108168][ C1] CPU: 1 UID: 0 PID: 17549 Comm: syz.4.2040 Tainted: G L syzkaller #0 PREEMPT(full) [ 660.108206][ C1] Tainted: [L]=SOFTLOCKUP [ 660.108215][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 660.108230][ C1] Call Trace: [ 660.108239][ C1] [ 660.108248][ C1] dump_stack_lvl+0xe8/0x150 [ 660.108281][ C1] print_irq_inversion_bug+0x1d2/0x1e0 [ 660.108307][ C1] mark_lock_irq+0x3d2/0x420 [ 660.108334][ C1] mark_lock+0x115/0x190 [ 660.108355][ C1] __lock_acquire+0x689/0x2cf0 [ 660.108392][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 660.108432][ C1] ? input_inject_event+0xa4/0x330 [ 660.108461][ C1] lock_acquire+0x106/0x350 [ 660.108492][ C1] ? input_inject_event+0xa4/0x330 [ 660.108525][ C1] ? rcu_is_watching+0x15/0xb0 [ 660.108548][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 660.108571][ C1] ? input_inject_event+0xa4/0x330 [ 660.108600][ C1] input_inject_event+0xa4/0x330 [ 660.108631][ C1] ? led_trigger_event+0x4b/0x210 [ 660.108666][ C1] led_trigger_event+0x138/0x210 [ 660.108701][ C1] kbd_bh+0x1c6/0x2e0 [ 660.108726][ C1] tasklet_action_common+0x2da/0x4b0 [ 660.108753][ C1] handle_softirqs+0x22a/0x840 [ 660.108788][ C1] ? __irq_exit_rcu+0xca/0x220 [ 660.108825][ C1] __irq_exit_rcu+0xca/0x220 [ 660.108857][ C1] irq_exit_rcu+0x9/0x30 [ 660.108888][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 660.108914][ C1] [ 660.108922][ C1] [ 660.108931][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 660.108956][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 660.108982][ C1] Code: f7 e8 6d df e4 f5 f7 c3 00 02 00 00 74 05 e8 60 38 10 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 84 7d d6 f5 65 8b 05 9d 58 84 07 85 c0 74 18 5b 41 5e e9 41 48 [ 660.109003][ C1] RSP: 0018:ffffc90006ed7648 EFLAGS: 00000206 [ 660.109023][ C1] RAX: 0000000000000002 RBX: 0000000000000282 RCX: 0000000000000001 [ 660.109038][ C1] RDX: 0000000000000006 RSI: ffffffff8e05f4c1 RDI: 0000000000000001 [ 660.109054][ C1] RBP: ffffc90006ed7a20 R08: ffffffff903444f7 R09: 1ffffffff206889e [ 660.109071][ C1] R10: dffffc0000000000 R11: fffffbfff206889f R12: dffffc0000000000 [ 660.109089][ C1] R13: ffff88805ee883a6 R14: ffffffff8f2218c0 R15: ffff88813fe2a000 [ 660.109116][ C1] do_con_write+0x45ad/0x58f0 [ 660.109168][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 660.109227][ C1] ? __pfx_do_con_write+0x10/0x10 [ 660.109262][ C1] ? __mutex_lock+0x320/0x1420 [ 660.109292][ C1] ? n_tty_write+0xe20/0x1220 [ 660.109318][ C1] ? n_tty_write+0x684/0x1220 [ 660.109341][ C1] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 660.109371][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 660.109399][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 660.109430][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 660.109457][ C1] con_write+0x27/0x290 [ 660.109490][ C1] n_tty_write+0xd4f/0x1220 [ 660.109524][ C1] ? __pfx_n_tty_write+0x10/0x10 [ 660.109547][ C1] ? trace_kmalloc+0x2a/0xf0 [ 660.109566][ C1] ? __pfx_woken_wake_function+0x10/0x10 [ 660.109598][ C1] ? rcu_is_watching+0x15/0xb0 [ 660.109621][ C1] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 660.109645][ C1] ? __pfx_n_tty_write+0x10/0x10 [ 660.109669][ C1] file_tty_write+0x558/0xa10 [ 660.109703][ C1] vfs_write+0x61d/0xb90 [ 660.109727][ C1] ? __pfx_vfs_write+0x10/0x10 [ 660.109753][ C1] ? __fget_files+0x2a/0x420 [ 660.109789][ C1] ksys_write+0x150/0x270 [ 660.109811][ C1] ? __pfx_ksys_write+0x10/0x10 [ 660.109839][ C1] do_syscall_64+0x14d/0xf80 [ 660.109865][ C1] ? trace_irq_disable+0x3b/0x140 [ 660.109892][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.109915][ C1] ? clear_bhb_loop+0x40/0x90 [ 660.109940][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.109963][ C1] RIP: 0033:0x7fcdbf59c799 [ 660.109983][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.110002][ C1] RSP: 002b:00007fcdc03ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 660.110025][ C1] RAX: ffffffffffffffda RBX: 00007fcdbf815fa0 RCX: 00007fcdbf59c799 [ 660.110042][ C1] RDX: 000000000000009b RSI: 0000200000001040 RDI: 0000000000000005 [ 660.110057][ C1] RBP: 00007fcdbf632c99 R08: 0000000000000000 R09: 0000000000000000 [ 660.110072][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 660.110086][ C1] R13: 00007fcdbf816038 R14: 00007fcdbf815fa0 R15: 00007fff5c590668 [ 660.110112][ C1] [ 660.125789][ T24] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 660.274772][ T24] usb 9-1: device descriptor read/64, error -71 [ 660.492335][ T5946] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 660.539575][ T24] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 660.681164][ T24] usb 9-1: device descriptor read/64, error -71 [ 660.800903][ T24] usb usb9-port1: attempt power cycle [ 660.865116][ T5946] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 661.164863][ T24] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 661.199573][ T24] usb 9-1: device descriptor read/8, error -71 [ 661.456280][ T24] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 661.485298][ T24] usb 9-1: device descriptor read/8, error -71 [ 661.594895][ T24] usb usb9-port1: unable to enumerate USB device [ 664.425805][ C0] net_ratelimit: 5927 callbacks suppressed [ 664.425821][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.426123][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.426723][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:ac:a2:c7:7e:a0, vlan:0) [ 664.427231][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.427552][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.428080][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:ac:a2:c7:7e:a0, vlan:0) [ 664.428648][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.428930][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.429451][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:ac:a2:c7:7e:a0, vlan:0) [ 664.429992][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.067961][ T5946] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 668.099358][ T5946] em28xx 7-1:0.0: No AC97 audio processor [ 668.305070][ T5946] usb 7-1: USB disconnect, device number 56 [ 668.317772][ T5946] em28xx 7-1:0.0: Disconnecting em28xx [ 668.335909][ T5946] em28xx 7-1:0.0: Freeing device [ 669.434687][ C0] net_ratelimit: 15073 callbacks suppressed [ 669.434703][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:ac:a2:c7:7e:a0, vlan:0) [ 669.453117][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.465370][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.477834][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:ac:a2:c7:7e:a0, vlan:0) [ 669.490367][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.502615][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.515323][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:ac:a2:c7:7e:a0, vlan:0) [ 669.527791][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.539921][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.552450][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:ac:a2:c7:7e:a0, vlan:0)