last executing test programs: 6m57.882935223s ago: executing program 1 (id=384): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x1ce) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000580), 0x407, 0x2) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02af", 0x14, 0x6000000000000000, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006a00"], 0x1c}], 0x1}, 0x4000080) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x8, 0x8001, 0x31324d59, 0x2, 0x86, 0x4, 0x2, 0xdd4, 0x1, 0x3, 0x1, 0x2}}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000) 6m57.144342952s ago: executing program 1 (id=389): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00'}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001640)=ANY=[@ANYBLOB="12012800000000001036c0f6000100000064090400000103000200092100000001220700090581030004000004d1000000000000000026b4960db7ac81b7640d89f053710692130d464153130abe880116ec45c1df1d431da01234ba9bea4d9ccf5338e9630b3687b74525aff82f75c412f76f14d1f1d40270d8c482a76c20681fbdb636febcb195f228641610"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x20, 0x0, 0x4d, {0x4d, 0xd, "7b1b85f6731b55fdb3e2c5c27ee0273721ff041df500b2a38e00fca7bb46a402994bea355a28d0c4a534b2fa9ff07791157f6aa1d20030c2345f4cf0b71b134e01feb64d27e6456e156b57"}}, &(0x7f00000002c0)={0x0, 0x3, 0x76, @string={0x76, 0x3, "7e23cc9d5d104b004e2277ed53ee9a5df743d8073d93e7d481a3245b986efb884cef6f2d68847c66579a60b40bd791c426f8e31e8b7296d68405c87ea3048c311bcd251333a112d53d72fc787ab42fd95d1c1cee8df83c6f610943094a977d45181f8037dfe5090f19e25032d11aef1fac423fe4"}}, &(0x7f0000000340)={0x0, 0xf, 0x58, {0x5, 0xf, 0x58, 0x6}}, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x3, 0xf8, 0x1, "05527bf0", "7a602294"}}, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x80, 0x8, 0x6, 0xa, 0x1ff, 0x5}}}, &(0x7f0000000940)={0x84, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000640)={0x20, 0x0, 0x8, {0x400, 0x8, [0xff0]}}, &(0x7f0000000680)={0x40, 0x7, 0x14, 0x3e}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0xf2}, &(0x7f0000000700)={0x40, 0xb, 0x2, "739b"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000780)={0x40, 0x13, 0x6, @random="5edf98d74ce2"}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000800)={0x40, 0x19, 0x2, 'g\\'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x6}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x1}}) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)={0x0, 0x22, 0xf, {0xf, 0xd, "3d91419da546052dcdcf01abdc"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f00000001c0)={&(0x7f0000000040)="33327887ee151660583f9a24fad100b921178724355ba5f46ca657dd198488c3c7e261ec9418899a037bdc428fffa3f82b4099a7380a964278b159a777e115024b967058ecbb84a800cad87574a2f5a4e690e25c63390cd607", 0x59}, 0x1, 0x0, 0x0, 0x40000}, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000040), 0x0, 0x4040000}, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) r3 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x18\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000080)=0x5, 0x4) syz_usb_control_io(r2, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000380)=[{&(0x7f0000001140)=""/102, 0x66}, {&(0x7f0000000880)=""/169, 0xa9}], 0x2, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) r7 = syz_usb_connect(0x0, 0x4b0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1201500220839308d2191711cc370102030109029e0401400650090904d5080bffffff086703e42808e0e34ca3dfaf8725cc98be21faf88c3edf25e05f1d3cb6400af396c32f1ea903a883344a085933676f0095ea929bd79fb0f6a04e7a431a671327bc027684bc19cf476cb0706641b4c83c9f82b00f45a18620bec0217a26f9587f631c36855dc251af09050000ff030000f7e02481a8bab89a4e11039186c2d009c65918c80516d7df0528d10ad79b69c79ed02c6b628359e1e7fac609939a6e1201b361c56f0773e6d25f54267cad796f04f85575c7c9471bc08f805cddc6272f3fccb93df04ace3150140cc83272e15d18ca3012f8a3fd64a68146a110491b9fea3193ec7bef1f5fed683fd6f36b1543fbf56cb78589a2b58a8bf9b904afd4d54e1ab1ca7336558660b738278dba5d6a318e0c59ceb7c585bdf0d054bf78a7f757a96fdd3d0d96064eaad06d7bd7b9f20f4e01cceaf5950d744fa24823d89e49a432148d48338c6c84efa4d248aa6d8e9709050401ff034881080725018004010009050900200003ff051501b945a7ff7ef652339fe4904b71875df9635a78090508000800089304b4311ff325247a17795461f726d2f8061b525f766bd347a90f8a07ebafc67d46b40c1ac95324bee0b1de0ff0f467a7f09cddcf3bf41ba2d1b340a3c220a46a1ae5b1c0b4233e333466bbc94d51fede854b725ecd853af797621e3bd95ef4c8ccb49cb4481b216b3eaa800a3ebb5877aa290725422953ba3a5ae0f2ad667c7ce3b16d8accabd31c63caea3de280f109fe5e0d9f8733685ba22c7f072c99c79a8af0593dbdaf98687892c56ff45de693f56d4ce45509050b03ff010b00f707250102040104090501100002094003963d99b6b08370da4b04edfaf42d7c1fc2a89a86a9f8fad07f75c485b6c40c0f08ae59921b8271f4d72d6d9c8dc70ed87e53512cd7632070cf98a0eecf661248ff18267387827e28429dcbbc37cae0af3d88d9f0c74d3595cab5127c59fddc745ddb1e2e71af6753649fa40a9e0ed7bc5ab82ceb1b8f6ffad35145c8760505f730a24698b0c38556d769351661aa4b4c0cb165526d27090506ebd6b6228d00650ebbb04da87e301ed15a8c495652f22754200b473cfda3c5fccf20761338ba8034cb1e49044b6396a05ddb9b84e6d02bf246936a592b7d77e6fe75b2e148e40368e0b80cc6e33ab8dc96df7b35c8e7400e3ecf2186d62c61090505000004ff01010725010306a30009050b000800018630fb01fafb8eec92a6e5ddc1f9b1d7903bd5d38a31283aa9b6ec9de44aa036eab216f2676e78ef10d278668f3dbbaa57bef34ec0dd422700eb7e0860819ed6b2ac8166bc8b2049e7b283fe6edbba1dcfc65b388011d9d24b5062b9e31dec7d17ad5dc9f7d5661b57c23e15d4f9ccafed81af74221d0dba652ddd0ce8b3dc1c587567312db6fb1c758316c7d79c7734768b790f00273622021ec16e831cb96adb201336acf730cd5822cb6cda1a6d239b6728f6205f3c1246ddb6c5340161c11e8669f31a99da98170a09040564d2867d2d006c7f868dd6049eb6824c331e544046a68f0749b5fc72b86d69b931dcbad9ad457156dc6e821282c8a8be090508004000046c090725010301060009050600000407f400070a6476227ed100"/1200], &(0x7f0000001180)={0xa, &(0x7f0000000ec0)={0xa, 0x6, 0x300, 0xe, 0x2, 0xaf, 0x10, 0x8}, 0x51, &(0x7f0000000f00)={0x5, 0xf, 0x51, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0xf0, 0xf7, 0x7ff, 0x1}, @wireless={0xb, 0x10, 0x1, 0x2, 0xd8, 0xff, 0x35, 0x400, 0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x800, 0xf780, 0x9, [0xff000f, 0x9f0f, 0x6000]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x2, 0x7, 0xfffe}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "f6ab48cedead22dbca3cb9af64d3837f"}]}, 0x4, [{0x4f, &(0x7f0000000f80)=@string={0x4f, 0x3, "4a54e3778397b1be68a95684915d02286facba0330833db4f4b460194d984a8b01e62460147e7f417048d8163e37c303c4c98863cdb067c8945843aa555dba75e690dfdb3313ddf74b60593466"}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x405}}, {0xea, &(0x7f0000001040)=@string={0xea, 0x3, "5bbbe9b060259a6b14efdb8e6dd7704487239e2ed44a4f3e5c0a4d2e61ef882185ca6fe31f791ab48645ad549486c41edfc6e0453aee85dc41872d539d08049f4f4d93fd0d4f9287cd6be0e98ec115aceecbb9fc2f739afe3c2b8967c446da5d260654c1d0c725277038f85a08c6b993baacd7608c85c110bdb7f1819d41b6c9389b8866db15ef16d64607bb5394e0593f436a319fa208af695400365ad1ce9a4671f667d0eddf3d1022beb66c9130a800012f0bc5cd860a2640789f013d11243ea90c867cf9dd2d1f2e5d848c3c198df1f247bae54f60b64fa8930f1769af4b82d5ddd7f47413ae"}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x4001}}]}) syz_usb_control_io$printer(r7, &(0x7f0000001300)={0x14, &(0x7f0000001200)={0x20, 0xd, 0x9a, {0x9a, 0x4, "b6a7b3c39ec97c8cd887a02e97d89888afd21db49385095f53f49485fee741fff4c1813bd72ae40d67841d32305d3ba4a43477518f18324cdd1718b6aecd8a94f40e069f02d26b348d5ad0f04514134b122a36b6e3315d0dc0244603bf8d235bb79aa97de63eb369776e5ea3c413c9732f65d8f717df68d8e7bffdf6e2a7f22ef4faf0e69eaf46c42a7da1d1ddccd2b5e349fefce0c89489"}}, &(0x7f00000012c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x425}}}, &(0x7f0000001600)={0x34, &(0x7f0000001340)={0x0, 0x18, 0x7b, "830ce545aff6d94e85132724b25f450e2c6525209e79cfb07ff40e2e40ff859f452491863876356606157dd8c0955e6bc671c7bf882ba3afb3b23b0e5412a732eddd44c51bba52addbb06449ce9fbce18c7d963160734238daf8accc0c691aac120c857bdde537ae750f5c1a235bda8f01f64de99a091bc564c7d2"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x55}, &(0x7f0000001440)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001480)={0x20, 0x0, 0xd2, {0xd0, "681cd16b48e6bb932aec0b6dc8d0943a6e900752fea8968a009e72ec5a66f837396fc6e539193b7ac006a7ce13e61608ccc822b0ffd57096fe67e3da38d751318df1c582bc8d04b39ceaf8f9d5bb1691f91c5f2c6d528a696c100dbada35208d342306b2abf56ee6d1710431ddfb09305a1c56a30d3d896e7888d60fa44281f22a8ad6800c73a98b8a53ff55d9d4f8ebd886b54725bf2ee6570c8a5c56559ab4010f435637a52fc7ef3f6d018f7b59edafac35b1cd2c1b546985e2f31de3dab15cc21086ed149f96e955991fd2173437"}}, &(0x7f0000001580)={0x20, 0x1, 0x1, 0x81}, &(0x7f00000015c0)={0x20, 0x0, 0x1, 0x8}}) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) syz_usb_control_io$hid(r7, &(0x7f0000001880)={0x24, &(0x7f0000001700)={0x0, 0xc, 0xad, {0xad, 0x28, "3d1b409ca7cccbacca2f23808d8b80345ca2f93424d08773feb9b9d74cf0b460c3bf46b33d086721144b077b42f504e1792c8ce5271472017cd3896cfe7043ee76e7d889ac7b8ff73bad6f28459d73664ab2451c6b33c3956f38daac46f6ca937cbc0932296bd27c93419b37483944712032ba657e11e5fded54118bd55a566e726b4f6a851d0304c96349bff2bad6c90b3f77cd9837224d66bb22f1b75cd85e45e3a369dcf3409185567b"}}, &(0x7f00000017c0)={0x0, 0x3, 0x14, @string={0x14, 0x3, "6749e15fbe6440f16d362c5582c91c8b4f53"}}, &(0x7f0000001800)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0x7, "9754"}]}}, &(0x7f0000001840)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0xb0a}}}}, &(0x7f0000001b00)={0x2c, &(0x7f00000018c0)={0x0, 0xe, 0x7f, "e841df9f42dae529322078a621b36f4d797a511441fc87a8b7f0de6aca88d9b1ae21fec9f9305fcb40711862c913ad0a5c57debc0d262224b5c22984245df7b38e936382ae7c23ebb306c871d3312106e1b0638239047fdf38da96fa43728004666808a09e0acc8ae5c635ea078012bd146ac78f9ef12133519015be4de96f"}, &(0x7f0000001980)={0x0, 0xa, 0x1, 0x29}, &(0x7f00000019c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001a00)={0x20, 0x1, 0xaf, "9ef28ce3ed46806388f10aadd8d53d5a56a0072e47061aa81d1d96a0716c89ac5767a3cd6b328b1bc565e137ce0ba2ffdaf509ec94873b11e6ee9ddfb7d1adc890850f53213ac9a8366d0c451c2efbe38eafeb5bde1c13491071698d242091fd7e80214dfb61c9b1666ebbc4f46bfeb2673c64edb300813e56229ee7b49db43f9869832c2c3c112d1e12952bae2dd8f995fc71aac7d854f3eebc88e1b26d3a619d34568e1e3119ee16013e2ecaf7bc"}, &(0x7f0000001ac0)={0x20, 0x3, 0x1, 0x9}}) syz_open_dev$vim2m(&(0x7f0000000040), 0x3ff, 0x2) 6m56.550902036s ago: executing program 1 (id=394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x3, 0x386, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201500282057d00476d010203010902740302fb23304f090400000000"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r0, 0x0, 0x0) io_setup(0x7, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$video(&(0x7f0000000300), 0x8, 0x0) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000000)={0x1, "4f954bc017c4c443cb7c92f439e74d9ebe0ba3e61884587ac9e100"}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100fdfffffffedbdf7597f28a00080007007508000005001900010000df"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4048880) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e15632f44d200594c00000000000000000000051000", 0x1e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) io_submit(0x0, 0x1, &(0x7f0000000100)=[0x0]) io_pgetevents(0x0, 0x1, 0x0, &(0x7f0000000040), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$kcm(0x10, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f000000028000", 0x2b}, {&(0x7f0000000100)="c40ad38ae96bf7e8ef19243a4a63c9ede45421a4cc1ea4504d47866824674eaddcad792a2f1f58188c59fff4b1fb0b49630d4e7f229064316790a7916d12178651b69f849bfe114ae79e72f93c4829173295bf31f43bd1d62288c403eee7db47d164886c1fbb599665397adefcfe53401743b08ba4a79a7e140e09096a2c2354f66e94015f44215aa79ea38c482f4ec92b3552e7b6232db6f8736300d5845dc948128f60e4c1fd", 0xa7}], 0x2}, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x8801}, 0x20000000) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000892abad620000000000000000020000001c00058008000140000000160800014000000021080001400000006c0900020073797a32000000000900010073797a3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fbff007e", @ANYRESDEC=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES16=r2, @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1800}, 0x0) write$nci(r7, 0x0, 0x0) 6m55.676406672s ago: executing program 1 (id=401): r0 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b"], 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 6m55.116653677s ago: executing program 1 (id=406): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x1d4) lseek(r0, 0xffffffffcc5fced7, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x900a000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) 6m54.70820275s ago: executing program 1 (id=407): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000080)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x3}, {0x0, 0x1}, {0x0, 0x47}, {0x0, 0x4}, {}, {}, {0x20}, {}, {}, {}, {0x4}, {0x21}, {}, {}, {0x3, 0x0, 0xcc}, {}, {}, {}, {}, {}, {0xfe}, {0x0, 0x0, 0x40}]}}) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5800000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac008000200f6ff0200050005c05e776189eab556a705251e618294ff0051f60a84c9f4d4938037e786c6c953000000000000000000", 0x58}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='efs\x00', 0x100014, 0x0) 6m46.827423096s ago: executing program 0 (id=435): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x183140, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0xc, 0x110, r0, 0x73464000) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000080)={0xc, 0x0, 0x0, {0x4, 0x1ff, 0x2, 0x6}}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000100)={0x0, 0x0, {0xf, 0x54b226c4, 0x2010, 0x4, 0x2, 0x2, 0x3, 0x1}}) madvise(&(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x17) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x3) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) getresuid(&(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r3, r4, r6) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000340)={0x8, 0x4, 0x3, {0xb, @raw_data="020a34102a2f7078c60e3ce6cf74fe68ab195ed0f66d5bc33ecde7968783d598abbbf5d48ed5c3cbea2c895afe0871b4ca87d76c03bcc5da46d5f6bc6907c8a161ae78dbc6b1fd8d5a2748c1e6d76a7e70800bd8d4d4cc224a5588572dfc9b543dddaf4d1c1a4c67d60afa0b307579ab72e4a2d5a905721323dcbe9008437feadf8aac6c0f05e9e343720052e8f14ded2bea5891990c4f57d15660cc3b42acebeddbd316f3909a590b87c4ef001cceaac3a0fe026ba6e8e9b4fade0d25368d185f8381679b3e2d87"}, 0x6}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000440)=0x3, 0x0, 0x4) syz_emit_vhci(&(0x7f0000000480)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x3, 0x8d}, @l2cap_cid_signaling={{0x89}, [@l2cap_conn_rsp={{0x3, 0xf8, 0x8}, {0x5, 0xa, 0x6}}, @l2cap_conf_rsp={{0x5, 0x9, 0x48}, {0x8e95, 0x8, 0x2, [@l2cap_conf_mtu={0x1, 0x2, 0x9}, @l2cap_conf_efs={0x6, 0x10, {0xff, 0x0, 0x3, 0x1, 0x0, 0xffffffff}}, @l2cap_conf_efs={0x6, 0x10, {0x9, 0x2, 0x8, 0xfffffffe, 0x5780, 0x40}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x6, 0x80, 0x3, 0x1, 0x1fd}}, @l2cap_conf_flushto={0x2, 0x2, 0x4}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x7, 0x1, 0x8ebd, 0x1, 0x2}}]}}, @l2cap_cmd_rej_unk={{0x1, 0x81, 0x2}, {0x7fff}}, @l2cap_conf_req={{0x4, 0xfb, 0x21}, {0x7, 0x9, [@l2cap_conf_efs={0x6, 0x10, {0x8, 0x0, 0x5, 0x9, 0x9, 0x6}}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x4, 0x1, 0x2, 0x6, 0x2}}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xce, 0x2}, {0x3}}]}}, 0x92) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000540)={&(0x7f0000ff1000/0x4000)=nil}) keyctl$get_persistent(0x16, r5, 0xfffffffffffffffd) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0}, &(0x7f00000005c0)=0xc) ioctl$TUNSETOWNER(r3, 0x400454cc, r8) write$cgroup_int(r3, &(0x7f0000000600)=0xb7, 0x12) openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f00000006c0)={0x3165cdf094107e66, 0x9, 0xdc9, r3, 0x0, &(0x7f0000000680)={0xa30904, 0x0, '\x00', @ptr}}) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)) r9 = creat(&(0x7f0000000740)='./file0\x00', 0x10) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, &(0x7f0000000780)=0xffffffffffffffff, 0x4) r10 = add_key$fscrypt_provisioning(&(0x7f00000007c0), &(0x7f0000000800)={'syz', 0x3}, &(0x7f0000000840)={0x0, 0x0, @c}, 0x29, 0xfffffffffffffffb) keyctl$link(0x8, r10, 0xfffffffffffffffc) timer_create(0x0, &(0x7f0000000880)={0x0, 0x1c, 0x4, @tid=r7}, &(0x7f00000008c0)=0x0) timer_settime(r11, 0x1, &(0x7f0000000940)={{}, {0x0, 0x3938700}}, &(0x7f0000000980)) 6m46.676123344s ago: executing program 0 (id=436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) ioprio_set$pid(0x2, r0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0xaa, 0x3, 0x1, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x21, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r6, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmsg(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x20000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000080)={r8, 0xfffd, 0x10, 0x9, 0x7}, &(0x7f00000000c0)=0x18) 6m45.753340846s ago: executing program 0 (id=440): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x181100, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x7ffd) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x4004743c, 0x0) r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000fc0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000001380)={0x40, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x40, 0x2, 0xf8, {0xf8, 0x11, "6306f8414fc3258c9238f020241958cd290a2fae94f75e97a5a166c989aa64a56234e6c8f5d617df1b935c5befe897565d62a4dc21ed89bdfe7d51188cfd56748e7307724d4a44980350d5af6b803c418e5cc7dbaf4021831d05c9f3c832d3b987e822fe8e5d9e62870c868ec7ffd5f0d87ab867af4255ac7f129d7e0b9aeb228f175c66072ed2d025c4d4ba4357938fbebb895babfe0ef14f032a6bbda86e7cc2954770a62d7b5107a203f718ec2df425be7b0626a2b4beb5f2295d2b7043d94d70408403b2a2f8aec3054fa0c09b212251c31d5ac7ecf1c83479a5b457a38e9f9b789e8717925c8021291550c9fdef1951d6e35250"}}, &(0x7f0000000100)={0x0, 0x3, 0x48, @string={0x48, 0x3, "b6d22eabc29c3c1ee1d4ef84930872d037a172158d56a09a817149a9ef0f5eb46d31cf3d69d4b695cb93a308050b604a79dc66512a30f401d1ca192cbc645da9fc0a9b031327"}}}, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x40, 0xf, 0x9c, "be92d881e26fc2cf6a884cfec882a762b56d68acd9ac4a2ac1b31e1dc2a33eb0c51b347888fc0494e05415c74c4db73167007c6a260cdcf9f7e1cb3784c0fedec6e1046b652f21c47d1e2ad0aa75d317e307746c1b1756eb2b561e8792c5516cf72c0f00fa589ddf98d72fc00a1a8c49810d69c5f1c13f11a345844ff31d7ad2d6db7ff8fbb59cbe5a91e7ddc0792d3f5db68a9cd6395755ae6e2eae"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xb5}, &(0x7f0000000300)={0xc0, 0xa1, 0x4}, &(0x7f0000000340)={0x40, 0xa0, 0x4, 0x1}, &(0x7f0000000380)={0xc0, 0xa2, 0x2f, "371de09705b0cea182f6fd5bbd29d2b54964aa9bc5d8449084548ee6f68facec03369c0e66c84bd315ddb9482b536a"}}) syz_usb_control_io(r1, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000400)={0x40, 0x27, 0x2, "e6af"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m45.103458116s ago: executing program 0 (id=444): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x8000, 0x80400) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x10) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000040)) r1 = syz_init_net_socket$ax25(0x3, 0x0, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x8001, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001c00010000000200ffdbdf2507000000080000000400001e0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000200)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) openat(r6, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x1) 6m44.953230746s ago: executing program 0 (id=445): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[], 0x250}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[], 0x250}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) (async) 6m44.649623346s ago: executing program 0 (id=446): r0 = syz_usbip_server_init(0x4) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) signalfd(r0, &(0x7f0000000000)={[0x10b]}, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000540)=0x2) write$usbip_server(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x60) 6m44.401530363s ago: executing program 32 (id=446): r0 = syz_usbip_server_init(0x4) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) signalfd(r0, &(0x7f0000000000)={[0x10b]}, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000540)=0x2) write$usbip_server(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x60) 6m39.652644413s ago: executing program 33 (id=407): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000080)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x3}, {0x0, 0x1}, {0x0, 0x47}, {0x0, 0x4}, {}, {}, {0x20}, {}, {}, {}, {0x4}, {0x21}, {}, {}, {0x3, 0x0, 0xcc}, {}, {}, {}, {}, {}, {0xfe}, {0x0, 0x0, 0x40}]}}) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5800000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac008000200f6ff0200050005c05e776189eab556a705251e618294ff0051f60a84c9f4d4938037e786c6c953000000000000000000", 0x58}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='efs\x00', 0x100014, 0x0) 11.571403405s ago: executing program 2 (id=2290): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0x3) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000440)={"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"}) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a", 0x3, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005b40)=[{{0x0, 0x0, 0x0}, 0x18}], 0x1, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000e00)='maps\x00') r5 = socket(0x80000000000000a, 0x2, 0x0) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0xa1f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0xfc, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xbd, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5}]}}, 0x0}, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0xfffffe79) r7 = syz_usb_connect$cdc_ncm(0x2, 0x8e, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x18, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x2, 0x1, 0xc, 0x30, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "cf412b77ec"}, {0x5, 0x24, 0x0, 0x17}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x4, 0x6, 0x3}, {0x6, 0x24, 0x1a, 0x3, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x5, 0xbc, 0x8f, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @dmm={0x7, 0x24, 0x14, 0x1876, 0xbe6c}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x0, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x10, 0x0, 0x2a}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x57, 0xff, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x9, 0x6, 0x20}}}}}}}]}}, &(0x7f0000000b40)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0xfa, 0xca, 0x40, 0xff, 0x3}, 0x29, &(0x7f0000000400)={0x5, 0xf, 0x29, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x8001, 0xf0f, 0xff07, [0xf0, 0x30, 0xcf, 0x3f0f, 0xff0000, 0x3f00]}]}, 0x6, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x41c}}, {0x3b, &(0x7f0000000880)=@string={0x3b, 0x3, "f2e14307b962a2e2f42868046ed1a9155bab1c4c390e66b2de3e88cdd739dd9942a7addb809eb7cb4b05c2fc080afdc4ad7141809c83cf21d2"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x42d}}, {0xfd, &(0x7f0000000940)=@string={0xfd, 0x3, "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"}}, {0xca, &(0x7f0000000a40)=@string={0xca, 0x3, "2a1dfc45bdc0ff71fa1a8cff3fc429964dc628af3e77a1433f6a2a81c549f8d92760c7b71af83234fe508c7cf7d6bf4daacce660b71f3a4cf996b985fbcc748b43bcb88f6f5f161d0bd21097bfa55c4fe2cd48ff5608617b9b7c58b6ba1dfaf0dab1964063d96b797bbd12b1643647d45437e1d550af9d431ee5daba98406a1217a1a2ebc58ca4bf61acb8056612aaafc9d53202e87884a6557bd5e4f49a224543dfa0f7d7ec49b8fa52935b0c74aa6db8cfc842fe21cf11c95d8925c3367c9d053b9186357d4f7d"}}]}) syz_usb_control_io(r7, &(0x7f0000000e40)={0x2c, &(0x7f0000000bc0)={0x40, 0x7, 0x9f, {0x9f, 0x27, "70ba51f6027af53641600ce90c81cc4618096bdab6a8df727b550d9cefd27f2abf61bfb4319d97d6a08abde11ede8e91e4809e27b2e8687569eb35149b6f46e286d48f621cb52a1017a4081b07f1a5b5a7fe7f8365fef531075a8940a54701ce4750b5828a462c2bd255114a03bdb1ffb05ad9403b22a4470fa452e055f0dedde5d92e66a2826b80212deddb56937ce0780902449c47c5e0c662b0aefb"}}, &(0x7f0000000c80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x400a}}, &(0x7f0000000cc0)={0x0, 0xf, 0xad, {0x5, 0xf, 0xad, 0x4, [@generic={0x90, 0x10, 0x1, "76fbec46fb9aa98a08e9f7b0336e244fdfaa218b9e4013eae9a927ad14316f5c08d55af083ab8e54ae395cd4efaf40f780da0fcf0907adfad1d482e9e0ce872922f460ec5551bf166e938f9a10275b3272743e55aaa560bd58553ea4115a20446e4ec00e1c6fc5433f4172cd692c746fcd4709fe5a5c8da9348c3b03ab32f47c6cd303f00bc12fc3764377220f"}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x8, 0x1, 0xac}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xe, 0x3, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x8d, 0x3, 0x400}]}}, &(0x7f0000000d80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x3, 0x8, 0x4, "84dcda2a", "27a6ec2c"}}, &(0x7f0000000dc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x75, 0x18, 0x5, 0x6, 0x3, 0x8000, 0x132d}}}, &(0x7f0000001300)={0x84, &(0x7f0000000e80)={0x0, 0x8, 0x88, "ccd412f1a55ab64a3defb95ca4780ef13b3a9603d71bde63d6d03f48a0773906e13b497157931ee463add1138905f5428ab22e6005f45b0efb3994052876a01edc8616d240597e5cbbfeeac5296e69711a710f9576413f7e4140c2af2a925ce5c70aadf08063fe469ceeecd0b9852d1afb5346422cbbb4a4882c0454154fd7cbd77351863172230e"}, &(0x7f0000000f40)={0x0, 0xa, 0x1}, &(0x7f0000000f80)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000fc0)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000001000)={0x20, 0x0, 0x4, {0x4, 0x10}}, &(0x7f0000001040)={0x40, 0x7, 0x2, 0xfd}, &(0x7f0000001080)={0x40, 0x9, 0x1, 0x3}, &(0x7f00000010c0)={0x40, 0xb, 0x2, "32f6"}, &(0x7f0000001100)={0x40, 0xf, 0x2, 0x400}, &(0x7f0000001140)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001180)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, &(0x7f00000011c0)={0x40, 0x19, 0x2, "1789"}, &(0x7f0000001200)={0x40, 0x1a, 0x2}, &(0x7f0000001240)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000001280)={0x40, 0x1e, 0x1, 0x1a}, &(0x7f00000012c0)={0x40, 0x21, 0x1, 0x2}}) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) ioctl$UDMABUF_CREATE_LIST(r4, 0xc0686611, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x426000) ioctl$int_in(r4, 0x5421, &(0x7f0000000040)=0x9) 8.43636165s ago: executing program 2 (id=2300): sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x30) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES32=r1]) 6.320403306s ago: executing program 4 (id=2314): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x19}, 0xffffffff}], 0x1c) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r3 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000002c0)={0x1, 0x8, [{0xffffffffffffffff, 0x0, 0x4000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0x8000, 0x2000}, {0xffffffffffffffff, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x1000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffff0001000, 0x8000}, {0xffffffffffffffff, 0x0, 0x1000, 0x4000}, {0xffffffffffffffff, 0x0, 0x1000, 0x4000}, {0xffffffffffffffff, 0x0, 0x2000, 0xfffff000}]}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000040)='/dev/dri/card#\x00') (async) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000040)='/dev/dri/card#\x00') ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64d2, &(0x7f0000000280)={0x1, 0x0, 0x1, 0x1, 0xa, 0x1ff, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64d2, &(0x7f0000000280)={0x1, 0x0, 0x1, 0x1, 0xa, 0x1ff, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 6.314367714s ago: executing program 4 (id=2315): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x2f4, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_NODE={0x138, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x89, 0x3, "309601f2d030eca0e26b96123171ec1e3a1d553c552f0ed5683ae403cddf160e765a5f04be39708cf5172b773f7d37127c3ad7d0476295d45d99075eb9ea49f73fec65eba964abe5c002d57843afdcb03ee8df3dab43f6334be9c787d0324ce2a082504714b697ab184469c45c97a3c8875ded278af0cf577080626c709cb02cec8e6b95a4"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x5f, 0x3, "6195a9590046256a44f022ed13989ebd9cb91d94db260c1757af4259e2898ae98ce64cd723937b9b64aff80b99278a05dcef8bbb7c4277d5dc689d3e2e31b3684d76031f9cc59b574a6a206e3c31d329a96550cd22030c440dd129"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "435908ae2abbb4634dfc8c45b2feb125ef3d5d5a"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9, @private2, 0x5}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010101}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, r1, 0x100, 0x70bd2d, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x1000}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x10) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2d) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) (async) shmdt(0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x103000, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000540)={0x1, 0x0, 0x4, 0x100, 0x0, {}, {0x5, 0x1, 0xf7, 0x5, 0x3, 0x4, "de10e874"}, 0x7, 0x4, {0xffffffffffffffff}, 0x7fffffff}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600), 0x10000, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r5) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x80000) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000780)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000800)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f00000008c0)={0x28, 0x2, r8, r9, 0x0, 0x0, 0x0, 0x69, &(0x7f0000000840)="821a6d298fd104553324ea13107df9e2d5cb77aa57fc552f58537652fa4e2a8390e1001698d4007aed4520a7aeb63e84022e5d828b274edb137347ad87559acdbd7f70c498df609929ff18d2c13d31c7e6b0ad711acf620dac690953a1b5133d49762474f66ed96241"}) io_setup(0x2, &(0x7f0000000900)=0x0) (async) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000940), 0x109000, 0x0) (async) r12 = eventfd(0x2) r13 = syz_open_dev$sndmidi(&(0x7f0000000d40), 0x6, 0x10040) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000f40)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) io_submit(r10, 0x8, &(0x7f0000001140)=[&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0x2, r11, &(0x7f0000000980)="c2e0873547e4dca019e44bb38601d392423745b9b304d96853b897108ebb40c9c6f8ecb6a293c1a3a6a17d59e58942c47da5719e132f51c6a8de33fdfa0a262affa98064fe77773b2da31d68939e67c806e85a80d39f2fd51c6a002e441b5be5e178a2c94e", 0x65, 0x4, 0x0, 0x2}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, &(0x7f0000000a40)="e315fa3ed8d9b30b9f924e2f8a270582daea3a193a6e438c59599214f37bd0cb5154f7a6f30417c2f559bd4d9e624927f76cbb0ed9bba9f87177f07f91946cdea66de05232b29d885510eb0be2324b3e22f4e5d6fd6d74176d7325b593d74310d9c7f2edfa83f4d219cc44fe7f8cc1e86c21ad126ea6a2cdcd4c4db24b9ba899b3861505cccc0b46bbb7b6bc", 0x8c, 0x81, 0x0, 0x2, r6}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x8, 0x4f, r5, &(0x7f0000000b40)="36feb6b8d2e48586e3e42ddd3918e95454f815939ec57992ad181bcfe0daed209a3ac7036e79d2895cb818d37325a19139363f19125e44ed318dffd1f1c106cc8f070c8f6b649095509345d3355cbcc3c704fbb25d02e88b586ef92efd9086cf2e3a8029", 0x64, 0xfffffffffffffff7}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x5, 0xdb2, 0xffffffffffffffff, &(0x7f0000000c00)="311dc0dba05c352d69562784dfe2ac3984429c948c3bf27745caf5b0dde2b2568321757a429551b1528a91dddee026ebe784f46e50a06e897d7bbd6881aea95503bcdab7bae00955bde02cad2a5760e9674eaf2706eaaa37f2059145c40387c828c238ec0d85b6820dc9883a76801dcab96c0cf2c62af6f01a3aa51d2ad64330c4cd588f04148dd54379e5030e9bc09740082c696284fe1129ec9eea27e73a4cd858797d6c156cd467f069a9606301bff0251b664a005eba51cc0a2bd4fdb4e48bb07274", 0xc4, 0x4, 0x0, 0x1, r12}, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x2, 0x401, r13, &(0x7f0000000d80)="50bffc560eb2d85387f5e974a7d92b5c98b55467d4bfb886b2ace5648624be5bd603cfc74bd1d7dfe92baeae03ab7ac7687e5a57460b0fd72f3f27071d57a392cd29f998df006efa4ffded8c4fc2e30e0c6958685f66a8ec0edf769682dd4c24ac957b0217aa17bb251c081361901baf33700157cf4f51c807c6376989ec677e7a9969f7c33d", 0x86, 0x3, 0x0, 0x1, r6}, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x8, 0xbe, r3, &(0x7f0000000e80)="64afb744f663e47968ada7a69686774cdd49ff96cf24cd53f10fa972d99a945547ec3a69fa00daf244534023aaa9867084a0d6fc6b3e1c4c6fdcf2178a729ef0f964495cfa746f4aa8e2ec6250685a6db8debecd48cfb9a5e28f", 0x5a, 0xffffffffffffff36, 0x0, 0x2, r5}, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x5, 0x7, r14, &(0x7f0000000f80)="87f347e2a0c89907cf5f96830596f2c8c1b2aa5ae12fa6e8ed22500de1d5ce1a07f3753ffbd16f9f622773b391918d046564182ab8a760bb629f304da2ede28f1d7cf82a23855e6692e43af11d227718f90b55dbae840e5ec02cf676c4d6218ea5a85f310802a33ff1d76b63df0750f2d7d4d9490ad1628cd040b3e2c6feb8cbeb4b93e69fc51a2b8e8cfb022304dc9a0caa635ca7c6add3ddb207b08e043afac303adc77f9b1fa697d1ee00dacfacb0149cd2368aca989c95b888ae6f72cd38ede2193b21d8a6dec28ba5a0609404e1cf602df1b1fad22240a5a4b2ef0717bcc83bc2ed193a0a3f", 0xe8, 0xa4, 0x0, 0x3, r6}, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x6, 0x6, r2, &(0x7f00000010c0)="79f4a0aeffc8b2e6f3e339", 0xb, 0xfffffffffffffff6}]) (async) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r11) sendmsg$NL80211_CMD_AUTHENTICATE(r11, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x44, r15, 0xa10, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1f}}}}, [@NL80211_ATTR_SSID={0x1a, 0x34, @random="e4c1a08a7bda420f6f531c04b65f08a2e7e3f32e662c"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x40) (async) syz_open_dev$vim2m(&(0x7f0000001300), 0x24000000000000, 0x2) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000001340), r14) (async) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) (async) ioctl$IOMMU_DESTROY$hwpt(r14, 0x3b80, &(0x7f0000001380)={0x8}) 6.200181849s ago: executing program 4 (id=2316): r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$yama_ptrace_scope(r0, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0xffffffffffffffcb, &(0x7f0000000a40)={&(0x7f0000000840)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4000004) r3 = syz_clone(0x20000011, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) pipe2(&(0x7f0000000040), 0x84040) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x7, &(0x7f0000000140)=[{0x12, 0xe, 0x6}, {0xcf, 0x3, 0x6, 0x5}, {0xa150, 0x8, 0x3, 0x1}, {0x0, 0x4, 0x8, 0x10000}, {0x5, 0x10, 0xfd, 0xb}, {0x5, 0x7, 0x7, 0x7}, {0xfff8, 0x5, 0x86, 0x9}]}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)) ptrace(0x8, r3) (async, rerun: 32) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) setsockopt$sock_int(r4, 0x29, 0x2a, 0x0, 0x0) 6.096246592s ago: executing program 4 (id=2317): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14, &(0x7f0000000180)={0x0}, 0x7}, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r3 = fsopen(&(0x7f00000000c0)='bpf\x00', 0x1) r4 = dup2(r3, r3) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000040)='source', 0x0, r3) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet(0x2, 0x1, 0x0) close(0x3) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x2}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001040}, 0x40010) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="c0010000100001000000000000000000000000000000000000000000000000002001000000000000000000000000000200000000000000000000008001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000206b000000000100000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000ff030000000000000000000000000000000000000000800000000000000000000000000000000000000000000a000300af0000000000000048000200656362286369706865725f6e756c6c2900333f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c"], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000001c0)={[0x3ff, 0x6, 0xe0bd, 0xe, 0x10004, 0x41, 0x400200cc0, 0xffd, 0x8, 0x6, 0x7, 0x0, 0x6, 0x0, 0x6a, 0x400], 0xdddd0000, 0x1819c4}) ioctl$KVM_RUN(r5, 0xae80, 0x0) tee(r1, r5, 0x3, 0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xdd, 0x64, 0x82, 0x10, 0xfe9, 0xdb78, 0x522e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3a, 0x0, 0x0, 0x4, 0x74, 0x97}}]}}]}}, 0x0) 5.381486744s ago: executing program 2 (id=2318): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @local}], 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)}], 0x1}}], 0x1, 0xc0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r10], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x74, r5, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0xd, 0x14, '/dev/kvm\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '+'}, @NFC_ATTR_FIRMWARE_NAME={0x11, 0x14, '802.15.4 MAC\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_FIRMWARE_NAME={0x11, 0x14, '802.15.4 MAC\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x800) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x80000006c], 0x2000, 0x80cd4}) r12 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r12, &(0x7f00000000c0)={0x1d, r13}, 0x10) sendmsg$can_bcm(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x16b, 0x1, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x88, 0x3, 0x0, 0x0, "ae771949a0cb35d4"}}, 0x48}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_GET_SE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r14, 0x4, 0x70bd28, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8081}, 0x4c081) r15 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="070627bd7000fcdbdf252d0000000c000500020000aaaaaaaaaa05002b00000000000a0001007770616e3000000008002f0000040000"], 0x3c}, 0x1, 0x0, 0x0, 0x8801}, 0x810) 5.215397509s ago: executing program 3 (id=2319): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r1, 0x1) flock(r0, 0x5) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') flock(r1, 0x4) read$FUSE(r1, &(0x7f0000000bc0)={0x2020}, 0x2020) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local, 0x6}, 0x400, "787c2ce2fba15d4e9f8e96bc11e2ca247a20c3e26661b174fe1825253be9e8480cb4f3524914f59ba189c1429727ef39b4164f93bb821987b3b7f73495bc8e745304668e0e46798c7f5917ea8428d41cab5612336f04000300000000008e9c1c86a394feb64fb06f77dadbcb20fc62741432b7dca37007d68e98fe46135d6a1c5ed42102f58daa5211319db84aa9abac734be47c908dc3ffa3aa7b61ec16d3d1209fc618f6c4532ea582628502ac46d167db6d53d8f3184df68414e6b6ec0109664c570e155654e03d58dadd0e5a7bab42bbb4a9afdefc115eb1609e7b50dbd94b94ba09000000000000001c9e4a41d3e16af21d6c897a1121bc14de16e78d6d7f2ae79db44e302539fd926e0b91e0fc589e2fa19b218d0508b5ce3ad40d03936693ca5aa41ddc07cf492874569ab037e0530e38245b98131ae0c9afd871df5f51331938764f5a7dd96890edd467b2fbc335ed081729b5ea722a98b34d0dac6de995de4ee263c81b2567b3f87e0897857edd5d7e97d61fc67076eab4846010d4828cc879f95cddb69ff6438f2a109285c46d8224c36069d30c3c9cf4a6800ae224111136bd9c1e06c4bfc4685d7bb6a72345772b3ce9bf105490743dc4b700f24ce6b250b95e6c383fe44967a55d140baf0ec339e3815b29a2246cb5c953048c43266485bbd9d0caecf00e9501a4433b54930cba54e06607ada2f5d818e4804294fcf53058e58e0d33d4aa6dc943811056908fe9116e65cdddac1d2fb24d1eacee389af38b7e5a7056d0de50c6b49fb38388cf28c2d6dd3dbbab84ffbef4b0c02a77f018e8a9749a557909e6aa96185d268dad7744b094d8c6134b89efe26674d65f908f9c3a8c201f661fc26efe0eff248d3a473fe32a5b3643bfad8f186c2af3fbaa1d38560c1244c79a0e48893eefb792af281650f34f6c2d9a6c622aba234b63586713cb66179a0897d98ee5228569c32c1a682807c8db7eb197ccbbd6549db86a6a9aebbf5dc14060f22e2b07d6166f43c25ae0c88be7a4dc38e7ed08972a355b0e5d6fc43b8e5594fa6b36a36a44bb94b75eaff11dc17105f54beda54da2a1ea1acfab354745057dd2e7725f2c8450b19fdf37e19f6ce43449e9191f5a5beb4a1bc176f6130052e83acefd8ff18d592bb75f15f86c9113e4bd67ad420c33ae706cdc10060277b83ef30a50d4ac19c9a791b309377aa20a4743bbb799abc3ba58071b628c9ba8103bbfe389939e55296ec9b4f8d3a03aff30ce9aa0dd6e5158a672be8f3da8349ed4ad82f6ca67ee29e8b234840cf7846e604e5b8135abd94d71fe0a79180e75d4e193ea8df466c087b660fe984943751a9f6df8545699701d478c2b3daa949155770e74835bcd972de27afd20b02ce0e504c15b0237437200"}, 0x418, 0x7fffffff}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r2, 0x7ac, &(0x7f00000000c0)={&(0x7f0000000780)={{@hyper, 0x3}, {@host, 0x1ff}, 0x400, "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"}, 0x418, 0x3}) open(&(0x7f0000000180)='.\x00', 0x0, 0x0) (async) open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) (async) flock(r1, 0x1) (async) flock(r0, 0x5) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') (async) flock(r1, 0x4) (async) read$FUSE(r1, &(0x7f0000000bc0)={0x2020}, 0x2020) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@local}) (async) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local, 0x6}, 0x400, "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"}, 0x418, 0x7fffffff}) (async) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r2, 0x7ac, &(0x7f00000000c0)={&(0x7f0000000780)={{@hyper, 0x3}, {@host, 0x1ff}, 0x400, "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"}, 0x418, 0x3}) (async) 5.111203083s ago: executing program 3 (id=2320): r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r0, &(0x7f0000002100)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="68118cf0fc5d13467b2cdee756d4fb185d5402fa4c207408a1534e2ee9b8197ce10611ccd91339b6b1c0c65d6bca6588d42165531de5b59e1681ecea361095c09e303bc5d229eb461598d21230686fab65eb2c3b4ef9e8b81db55778b56c882625b26c7ed7997508e14f697d449d0905c74fcc3560678708328dfd44a0d25f0be3fb8184c4d6387ecf2aae937d6dc1372b", 0x91}, {&(0x7f00000000c0)="73a8fbf540aed9d3ceea35005717b0d3bf0d96800eed0eb9832d4c69536585fa2bebf238f75e8a2fc07ff7e367108786de50d0561cb3cf41692b70300e1370675d2cf7d7551b811e79ee75a440d1122711640497b9c6c93cbdeeb3b38943d8f2dce09179e8f989641b289e3e664c07e850dc41a916f60982c54e38fec18cd99930a6a89ca1df81ff764ae1ed91615e4278118bbabe91fac9fbf3de2892ed39bd9ca029d62210436edc8364d5b6852ded5b666d3ec6b2", 0xb6}, {&(0x7f0000000180)="91e46570045dab31ddd80aa61d5ceb6d5039d8b7c85ba2147933974de724f58e6c1c1e31e338ebf4a41e133493729f9646e497b625dae443a1b0f4ddadb92065570fa543bd12549d39f7d6cda779805004407b77e4877e44108f5f3376fc404d44b7253183e8442b2a98afd6", 0x6c}, {&(0x7f0000000200)="e1234ec92e00ed07eefd657ee17c9361a3862feaae30b8e0bd49ecc9e1acb3db979ff48f85d2f9805578eecd0f9a064c02dc5c27723b5a1713d5bf7d137edb9916ef92ba1f69db527b3adb9159db567477d918f934260c072cdd506a11fb20aa09f81b00c2136cd05559ceeda87a8d578fdbe5325b80c5b87a6fe181a043bed64dcb", 0x82}, {&(0x7f00000002c0)="f8bb2743d5bc99be76a2c0d30608ddea867c7a6277f2c71633bf4cc407224c77fdf55a09442454378405b2bf6868972cbac2a8c28982d4ea9b160dada8e9fe2543af12fe2e5acfd4fbf1de6afbcfb8b81b79f8caf840c776ca97f030fa18aed67f83e47e897f0d6fa0baa9e9c0afa566a31fd5782cc8ac148beeb1acd56addd89d01bfdea03379fe3f60f71fea281518fb364e6e7605980bdec13333029113e52fb47db7f5c8bcf39040314859d62010f8886c28506d2f7ce96dd53637ddb33e220f1a24aa56ce6a22375fc66259e61fa464063d6e73d2f0e30a17f36ebc", 0xde}, {&(0x7f00000003c0)="adeb57fd336c1de13d89d579292914327ac9fd4c30240929980745058026046ea7d71d7f069a476a7f7cc5007fdaa8b7ea9808d44fa49348dabee872446f2af16ecd56a42109be20b5849bfd06e4d950972500b2e1c534b8837cfca155faf98bfc3bb94e434066e56512008bd07bec5f004cb228057de01769cd62ced1853ee609d55e3736077a39aa0381146088b2332bb4c25793252acb8b27f92399666ec245344eabc4159439807d1ec9f49cc11188f664fcb3680d71dff73e", 0xbb}], 0x6, &(0x7f0000000500)=[@assoc={0x18, 0x117, 0x4, 0xe3f7}, @assoc={0x18, 0x117, 0x4, 0x76}, @assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18, 0x117, 0x3, 0x1}], 0x60}, {0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000580)="9777cd7d", 0x4}], 0x1, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x48, 0x4004800}, {0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000680)="4f8344ae9d23596ab0c29c6a3444c61519d1bcd529ca08aefb0db2d042eb1940be10769ae3a12cf2625f86bbadddfc1a192203956b58bb9e43830966d3e366a87fe9bc5197016c789636f89aaaa70e3304decabf", 0x54}, {&(0x7f0000000700)="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", 0xfe}, {&(0x7f0000000800)="3344225098de132c144268a038a6e012fa720f1e38aff3a9b3d8c95518d808d820229662f6b236164e03a081b45d2d99655f408f197112550bcd40c1af17dad6ad7a88b7106d59bd6df0bd226c11873a291dcd8fe7daacdf832eab7aede55db4521d6b25560011e69417bc48b9f583b478e0bed5b0", 0x75}, {&(0x7f0000000880)="9fcdcbb219c493fb21048a49e1a836601b58e13744822ca4b27f089f596f5be606c246101eeb4a9dfe3758bb9bbe5bf9fdad1048a084208c47342e4b418ee044ca4c0952c8868a663763974a3a34ed81bc323741bb590406371eb7f5022b926527b7ea388e044eefb01e51f793d051bf0e53e6ff9b30ce8c917aacbe68bf305d84e16a04df234d25e6eefa8de9c19b05dad1399ed319be3138cfae56955ef42dfdd017916a4155dc1fad4251", 0xac}, {&(0x7f0000000940)="b1b92a73acf745ca6a38a6de4340f2cd4f3952990cd96ffb711c6fc513727f1a923ec81ed8c21c8f710da615325e1ea05e9c37af3bd86ad97f804a0a4c5e8764eca19341045cc197d873969417c026e4950b50ca9a9aaaa3f75cff25e04472ed302f780a9e1dc57f9fb78170d69ae0f57199a2c7ecdba65bb24c40b40285053a0615840dd673d9b16bce6a40168c1c6d0da444dc3550689e00fe6bbc530a0d1644421b96fc6085c1851c230d087a20169b5e726159e4add8585a1421932bbd67c8843eb23c1cbd403f131d0d4b3cf8947e52392a778466667ac477bf87369f189d7098a56eaf0a67d0434109c39625", 0xef}, {&(0x7f0000000a40)="9049eacd0958599677230e5396199a8700d5469155", 0x15}, {&(0x7f0000000a80)="9988630124e719dd9fd7466c4cb0dedcb1514447ec590aa1bb1c91d118493e18a6b59b5928d6a61d4078de2c4491c3b530f6ad11724ab5a004d7e7e2b87cd3f2906842fc513118c56be95adc649ab7fa09f98ac9f63d3399acd17ef7c7430956", 0x60}, {&(0x7f0000000b00)="5256c7f9fe7039bab5f79c2c193f388044f39e626157c433fd63e084d01acf9bdc32e5be34c1fefabcd08e04883a8f97169e030224608c952bd31d17e1bc", 0x3e}, {&(0x7f0000000b40)="47bab6110dcdafc0f481e28aa66ceeb1b08131f33fa9a6dc10518ad863b37b0387a46d8aca4fd027675b3f776cd9a90a98f1912c6381cafca4f3aeaef3c2011617e3e2e97aeb6ef43a719f34da8b43f884a776004dd20544d2108f784d6d253ae5fb41527138644adf440a1bb2901c3353e3f56cc49f72773bd84159", 0x7c}], 0x9, 0x0, 0x0, 0x5}, {0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000c80)="2db07756de4cf7ea75c99363868b0b059f4885b896412937959b8135e17294eb03eb423917e09fa6cfd25ed94d397d9646768533b8aaeef33860781caf02be6ce906c21d48fcd64569aad22f72969ee5513b9911929d9ed6e261ceda662d23411e875175c55abc53a8019b1d514fbdfb340e53effb2740cfca7917069c85de6a78e92e1caceb7540933863fa7d06cfa6221bd4bb2b844c37c39eca8d6639803e8dbaf298a1c3aad9d229a9b78266c577a595d60899d2339aa5f11a6a46cd0e2c5b26fd80774bf3b5c08dc241e305640e1f05e862a6b7b21c2b6ba399e199e3a1ad7f7f04ae55228b1f582829fecd14c7d2362e97", 0xf4}], 0x1, &(0x7f0000000dc0)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xa8, 0x117, 0x2, 0x91, "7a6f061cef817236d7cac516c34341c141ac5650440b41b672d92225a027495bff28978335f6340a98e3977c05e08b197f842d4f85ac83b01d9425d7a0e732a2c48ac2373151062eb7092b951306463afc754068081edac9dc8309e99af24071f975551baad5f1371d627f5459e4f23acfa2bf560ba30a94a81a46fa2fcdba246df2ee84d82116a644efdca563765a68d7"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x4cf5aa69b11506a4}, @assoc={0x18, 0x117, 0x4, 0x3}, @iv={0xd8, 0x117, 0x2, 0xc4, "7bef3036ce79ddd954bc2f616726f2fcb0301e0a06c035635581adf648cb89d06265fadc84335259cb1885b080fe7ea1ac8482e5f3b46d57cdaf29910f3caf7806b597dac3b342a3899e6adae053d61f73ce966e44ca082893701a6122112bdf1309573c6612f04e7bae7ef12af077545a8c1cf627bea788c939ea49cd30b1f26d9adff3dcaf99c9896a2afcb73947ad37769ffacb71eed7d8eb2e2f68025843b241fb67e78ea16b1ef89bb1ecb37288d8b57f79bccf518170e7fbbcb68afe36d84b09bf"}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x108, 0x117, 0x2, 0xf0, "924935cdf6cb27eb5a794c3a9db3ac4b60b7b5a4ad74e06965c725052e396adb77a591a42810b95a377455ba58c1fc57f01a9cd3250ff20ab83775822c1cb03dab87ca9f9954335c027c2cedff65aa0dcb67b2aa44c71b2d664084553df858d515e3384f3a56c75007c06739fbc487f5eb75daeb6697b4b61ddf61b965977b97dd1e6bcb335c9ca98348dc142c7c6e1190c3ad6abdd81ceccbfac092b08bdb11fae81c19ed847a6c3207d6bc4726c8892271ffb299254974db11943f0b224f6ce68b51088ab68a5085afc1df1ab5b06806ed26f6a3a9aceb006857029fc8db81df02425c036c015c304be2c1260da6a4"}], 0x1330, 0x1}], 0x4, 0x41) pipe2$watch_queue(&(0x7f0000002200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$unix(r1, &(0x7f00000023c0)={&(0x7f0000002240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002380)=[{&(0x7f00000022c0)="4cdd8db870ce19c7518bffaa6a6ae3dcdd837b85f5ce37f85a51f19915432ba7304d29dda00900b4c4bff6a0a02e2c2c8c52cced9bc9001056de101dc9a2c1318d8d1d119ac947295d9020745b7e54058023f191afb04c0f771b1211531af63a9e3ea9b38ac2feb0511e59e023e2879d3231692a8f9f3ce2e6ba64936b22612130d05bddd63883bf5d9bdce322ad005d16135e8223dd83b97f7fe761ff9f8460a2d4ccd74987a012ab361b0b3d2848", 0xaf}], 0x1, 0x0, 0x0, 0x20000001}, 0xc804) syz_open_dev$dri(&(0x7f0000002400), 0x4, 0x80040) (async) syz_open_dev$dri(&(0x7f0000002400), 0x4, 0x80040) fsetxattr$security_ima(r1, &(0x7f0000002440), &(0x7f0000002480)=@v2={0x5, 0x2, 0x17, 0x800, 0x1d, "bf2b52183f9841b482405a0f9e87370cbc2072265d7993876692f80b4f"}, 0x26, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002600)={0x28, 0x0, &(0x7f00000024c0)=[@increfs_done, @acquire_done={0x40106309, 0x1}], 0xee, 0x0, &(0x7f0000002500)="fbcf40396872517eebd6d1708ad923a35a34ba8dcd085542f13787d56c49c870b193603a00a3a55ed2d5601063995a580ac94fe2a7d61769dc7c3beec095e74f4e21967b69a93eeb2d0425b609496331559b0e6c33980715d3f4d6463868bf07be5b675bc2c2be628b7942ead1291d8a02cef96acb917d146037b45acb1496e0dc7ec7ec9720546947ca72e127e3ec769b41764ecb24e6af24cedae0c7db6f45dce284372d21429462931d3b503605ff08ba68f19355eaa0d61079c6aa0caa54df760fa286c619780fe342ed9f83a9b1113e50138d9c22b48260e595e397dddbcc75087bc3651747a67f35db7d8d"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002680)={0x4, &(0x7f0000002640)=[{0xffff, 0x3, 0xa6, 0x7}, {0x7, 0x0, 0x4, 0xb}, {0xc, 0x3, 0x40, 0x67}, {0x1, 0xe, 0x81, 0x6}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002680)={0x4, &(0x7f0000002640)=[{0xffff, 0x3, 0xa6, 0x7}, {0x7, 0x0, 0x4, 0xb}, {0xc, 0x3, 0x40, 0x67}, {0x1, 0xe, 0x81, 0x6}]}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f00000026c0), 0xc100) r3 = openat(r2, &(0x7f0000002700)='./file0\x00', 0x100000, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002740)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000002880)={0x8, 0x0, &(0x7f0000002780)=[@acquire={0x40046305, 0x2}], 0x8c, 0x0, &(0x7f00000027c0)="af9ff872a8a79f2ea3b63bdf6760cfe8b1af5c81b5c1543f99ae2978787e6f60f7ef1c503cebedf994320a15aed4fc9f5dfb9f3341a32612d41e5ade558c3a9c84f87a1020a7030ae8bb8efd51b778393b19074c5815123f985b90cfe8562ca99f12ad09b8d1ac42e50aa72a3e1ce6e7c13f5d6c4fa652de0b9711d7492bdd7972e619181c5de89263fe3d0d"}) socket$netlink(0x10, 0x3, 0xe) (async) socket$netlink(0x10, 0x3, 0xe) r5 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f00000028c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0xeef, 0x7207, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0xc0, 0x9, [{{0x9, 0x4, 0x0, 0xf3, 0x1, 0x3, 0x1, 0x3, 0x8, {0x9, 0x21, 0x101, 0x1, 0x1, {0x22, 0xd59}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0xfc, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xa5, 0x80, 0x1}}]}}}]}}]}}, &(0x7f0000002b80)={0xa, &(0x7f0000002900)={0xa, 0x6, 0x341, 0xb, 0x4, 0xd2, 0x8, 0xf7}, 0x10, &(0x7f0000002940)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x0, 0x49, 0x2, 0x3, 0x1, 0x2}]}, 0x6, [{0x4, &(0x7f0000002980)=@lang_id={0x4, 0x3, 0xc1a}}, {0x38, &(0x7f00000029c0)=@string={0x38, 0x3, "369480fb3d1bca8574b53bd1e04978f9e1d4ebaecb8103d1c042c974848054889021f433430dc662b1a6f885bc8a0761069e85fbaa16"}}, {0x5e, &(0x7f0000002a00)=@string={0x5e, 0x3, "cfa83a87bb78b1a40fed8b2c4614bfdea5808153159509a32f35acd74dac8af6e9bfc3187636b024a5d1630f4a44111161e4062510156ac882f0f1181a489351d0389466698fc1be34c619a0184f3e763f6a038f3d85ab383ed0b8b3"}}, {0x4, &(0x7f0000002a80)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000002ac0)=@lang_id={0x4, 0x3, 0x2001}}, {0x4e, &(0x7f0000002b00)=@string={0x4e, 0x3, "151a316af3f6e0aecbf6a0a591350350bfb4777e5c257c2d4b66c0f5b4eb95649f5e550d0d62629c72cd98dbbb19211558d81b0c456c4696fe6f8920a8e9ca3c7f460a1af4fdeae22d105487"}}]}) syz_usb_control_io$hid(r5, &(0x7f0000002e00)={0x24, &(0x7f0000002c00)={0x0, 0x23, 0xff, {0xff, 0x8, "87d1325958969807c7acdb8a537ad88c21bb97c2144496945c3edbc80406f6338c63e7079a0a1d1958dbb31cdce457787720dde320746b6a77a5c7a195ae8b44bb6be26b565c5e8d882186451ecd50fad0ed67fe125f2ddb3b8e13e55152a3dca23b3002d42a5eb7d4e9de6f2c0aad8169c8591c58ee1516233bcb397f910fd8a37752a2596d05f6c174657527f160bc0f86af36b6bf68a5271ca91ebeedf8e164366e25bacde3a9de4bde5f2f0e1de50514271c5137287fda74f2e0b0d661fa41bed4cbca57786dfa270982701cd261285a3e4786995c0f1d34b55f66497a231f5bfaf2f4ee9dbf2ac22a035a78c44858e968ce537b39341537b0af94"}}, &(0x7f0000002d40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1809}}, &(0x7f0000002d80)={0x0, 0x22, 0xb, {[@main=@item_012={0x1, 0x0, 0xa, "e5"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_012={0x2, 0x1, 0x9, 'J6'}, @local=@item_4={0x3, 0x2, 0x9, "91877062"}]}}, &(0x7f0000002dc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x30, 0x1, {0x22, 0x14c}}}}, &(0x7f0000003080)={0x2c, &(0x7f0000002e40)={0x40, 0x1, 0x6a, "5fd6b7c8d9d01c80e4563e57a63e5561d1f50d093184861468ad1cd78bde33278e8a6ebc33d4946d272b586a33f7bc2ba1b5add5207e0a950e9be0c5d29a853094d34d8d5194974fd49efbfb21eed8966fa99bb2f54b769d0e26a870bfb3c7902717110ebbd145c3cc69"}, &(0x7f0000002ec0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000002f00)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000002f40)={0x20, 0x1, 0xe1, "8a63e19902f51a9fe3ea33d7ee135ea848a68e8d721131db072742fb5696c40f9c7921c3f2e41281b8f4d70f6c2d2ba61250762cc5f0debbc8e26e039939467219e3e12d5054260add33e77bf92016b859db7ea1c7f6dfd97ad19296a3a6b04db8bc257f363bfcb3dab8af2251b6db452a2363999be039703b9e4966c9c06fdf1d8e33e1d6983cadef70a72edf1e55a86641165b52490eaee931091120706824479131c8ab2016e1838c8dcf1d761a1b71a788e5dc92d466b3f27275573ef2aec503df7447174e35a3c19290f594ea740db363815b8125caeb00b6b8e4aef225d8"}, &(0x7f0000003040)={0x20, 0x3, 0x1}}) (async) syz_usb_control_io$hid(r5, &(0x7f0000002e00)={0x24, &(0x7f0000002c00)={0x0, 0x23, 0xff, {0xff, 0x8, "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"}}, &(0x7f0000002d40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1809}}, &(0x7f0000002d80)={0x0, 0x22, 0xb, {[@main=@item_012={0x1, 0x0, 0xa, "e5"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_012={0x2, 0x1, 0x9, 'J6'}, @local=@item_4={0x3, 0x2, 0x9, "91877062"}]}}, &(0x7f0000002dc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x30, 0x1, {0x22, 0x14c}}}}, &(0x7f0000003080)={0x2c, &(0x7f0000002e40)={0x40, 0x1, 0x6a, "5fd6b7c8d9d01c80e4563e57a63e5561d1f50d093184861468ad1cd78bde33278e8a6ebc33d4946d272b586a33f7bc2ba1b5add5207e0a950e9be0c5d29a853094d34d8d5194974fd49efbfb21eed8966fa99bb2f54b769d0e26a870bfb3c7902717110ebbd145c3cc69"}, &(0x7f0000002ec0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000002f00)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000002f40)={0x20, 0x1, 0xe1, "8a63e19902f51a9fe3ea33d7ee135ea848a68e8d721131db072742fb5696c40f9c7921c3f2e41281b8f4d70f6c2d2ba61250762cc5f0debbc8e26e039939467219e3e12d5054260add33e77bf92016b859db7ea1c7f6dfd97ad19296a3a6b04db8bc257f363bfcb3dab8af2251b6db452a2363999be039703b9e4966c9c06fdf1d8e33e1d6983cadef70a72edf1e55a86641165b52490eaee931091120706824479131c8ab2016e1838c8dcf1d761a1b71a788e5dc92d466b3f27275573ef2aec503df7447174e35a3c19290f594ea740db363815b8125caeb00b6b8e4aef225d8"}, &(0x7f0000003040)={0x20, 0x3, 0x1}}) statx(r3, &(0x7f00000030c0)='./file0\x00', 0x400, 0x200, &(0x7f0000003100)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25GETUID(r2, 0x89e0, &(0x7f0000003200)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, r6}) (async) ioctl$SIOCAX25GETUID(r2, 0x89e0, &(0x7f0000003200)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, r6}) ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f0000003240)=""/215) (async) ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f0000003240)=""/215) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000003400)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000033c0)={&(0x7f0000003380)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x2000010) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000003400)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000033c0)={&(0x7f0000003380)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x2000010) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f0000003440)) r7 = syz_usb_connect$cdc_ncm(0x4, 0x144, &(0x7f0000003480)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x132, 0x2, 0x1, 0x2, 0x50, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "84f1"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xfffffffc, 0x8, 0x9, 0x9}, {0x6, 0x24, 0x1a, 0x5, 0x10}, [@mdlm_detail={0xd4, 0x24, 0x13, 0x3, "1d4b69e0fff673c46cf439e42fa11f7be877525728f0217b084d8be4164960310387f684144c8a02b49ec49ac68fe88e69c8acedf364b92ef28efae1978740ccc327b30d90e028e2f34970050bf7fd1dce10fdde3f25c3846c3c08d17b2a017deab719eb292e27d8b7f8c6990b7f73f6c6a4f9e12a400d571242c0d06743cf6570e24c9f398db06469f8026f13aa451fd042e667ece6191456d1cf6c653728a05101b71488d68290379cb65052bc31ed6afd2953e05b42100d6518a94c33b8224964597e45fd7966ce06f7b371e8ef14"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xc, 0x3, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x2, 0x9, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x7f, 0x81}}}}}}}]}}, &(0x7f0000003780)={0xa, &(0x7f0000003600)={0xa, 0x6, 0x200, 0x8, 0x3, 0x9, 0x40, 0x40}, 0x24, &(0x7f0000003640)={0x5, 0xf, 0x24, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x7, 0x217b69cd9d2b2e10, 0x77e, [0x60, 0xc000]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0xe, 0xe, 0x9, 0xe}]}, 0x2, [{0x86, &(0x7f0000003680)=@string={0x86, 0x3, "842fac5d3fbc817b6f4c84585dcd324447ece85e75a70f59e2186ac51bbc76e9649490496fc17d71b3c605a25e9760b7ecbd02ed5a6f773e0382dcd4c55c53f5d6a51a7e5b0dd55f4c24c56bb7825fe68525cae9248b065543dbac711a492668cd339c63dc93f5bfd3050ee46ccbed05fdc05268df87901a9a5e4014d5650ea95e58f6ef"}}, {0x30, &(0x7f0000003740)=@string={0x30, 0x3, "c57afe709840e93dc54e89a15f8fa97a13e0e77541d052b359788cc288b907b02c7adaaedff9c93754d218aa702b"}}]}) syz_usb_control_io$cdc_ncm(r7, &(0x7f0000003880)={0x14, &(0x7f00000037c0)={0x20, 0xf, 0x55, {0x55, 0x2, "6c346a9b32e324426d422bd6a5ea3e518b1c79831d8edbdf2f2f1c4487cef45755573586b5023ea17093b4eebdbeb306d4e545d33b5cfcdf3256b298ddd6bf6cffccecc758653751b665c7339e0b7fa92f7cdd"}}, &(0x7f0000003840)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003ac0)={0x44, &(0x7f00000038c0)={0x0, 0xa, 0x2f, "c0579089a028b3f1350fba4bedab358b9ff033c9374e597e86c8826150351b37e4ac1de21d6e95b5a60d5e4ec17db7"}, &(0x7f0000003900)={0x0, 0xa, 0x1, 0x4c}, &(0x7f0000003940)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000003980)={0x20, 0x80, 0x1c, {0x7, 0x7, 0x5, 0x8, 0x101, 0x101, 0x1, 0x7, 0x1, 0x0, 0x4, 0x8}}, &(0x7f00000039c0)={0x20, 0x85, 0x4, 0xfffff8c1}, &(0x7f0000003a00)={0x20, 0x83, 0x2}, &(0x7f0000003a40)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000003a80)={0x20, 0x89, 0x2, 0x1}}) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000003b40)) syz_usb_connect$uac1(0x1, 0xd4, &(0x7f0000003b80)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc2, 0x3, 0x1, 0x4, 0x10, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1362, 0xe0}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x100, 0x5, 0x3, 0x5}, @selector_unit={0x8, 0x24, 0x5, 0x5, 0x6, '\viX'}, @selector_unit={0x6, 0x24, 0x5, 0x1, 0x5, "96"}, @processing_unit={0x9, 0x24, 0x7, 0x2, 0x5, 0x7, "1414"}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x4, 0x6, "45d153af1c"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x6, 0x6, 0xb3, {0x7, 0x25, 0x1, 0x0, 0x8, 0xa4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x1, 0x3, 0x80, 0x7d, "9af3"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x4, 0x1, 0x9, 0x1, "e7c6"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xff, 0x4, 0x94, 0x7, "9fdce6"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x8, 0x1, 0xf7, 0x9, "066d1b3ead48355336"}, @as_header={0x7, 0x24, 0x1, 0x4, 0xd, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x420, 0x1, 0x4, 0x1, {0x7, 0x25, 0x1, 0x80, 0x6, 0xf}}}}}}}]}}, &(0x7f0000003f40)={0xa, &(0x7f0000003c80)={0xa, 0x6, 0x250, 0x3, 0x4, 0x2, 0x20, 0x1e}, 0x5, &(0x7f0000003cc0)={0x5, 0xf, 0x5}, 0x4, [{0xa4, &(0x7f0000003d00)=@string={0xa4, 0x3, "935df4feb836f98378b50a3a9c82cff5413e7938aeb05222ca2131760f419dbdb42b43d9bd3da421674091ef263bd5c2b43562d05068cb936aa1cf884e75902a5ae0056c8cf596f5b4c83601cef786a77feb3a4dfabd0710929cfbce3d15076bcf727954d653b27e5a3a23f57800cca2993f9017fcee3d3567539f0cc98e74b190ad5b50036a867cccb3a7d6e2cddc910bc97871f01b42cbba200af025939ec455e0"}}, {0x3d, &(0x7f0000003dc0)=@string={0x3d, 0x3, "25a8b98e7e4b073ea148766f63eddc9a0eb64900308a600973fe0aad207d9d9eb119ca85804044f73ba3af105b7fa05f287699a396a5644e62dfc0"}}, {0x4, &(0x7f0000003e00)=@lang_id={0x4, 0x3, 0xc01}}, {0xe5, &(0x7f0000003e40)=@string={0xe5, 0x3, "260104fbb3cd279205ce07cb03a9a8fcfce94686559c289088683130ee346e35889decd8088ae25396fdd6085006a0cc39ed99c04da48b88f92c5cc7d666b9f11f19a361c940de5da19f4afa5a06f3f37356a6ffa13993140b8919f49ee7a1dbfd92cec79841acdc6f45980eb955fe86d68d8f9518a8b7d6e539cfc482e3ba0aaa941877c4839a17da4c5c5aa253007c79374a597d32a5c6736c861cfb689f6eaf8c0c7b5272be5bca7e567b93e9cad10c67d0537137501204aa550b3a4b105ec47181f9bb7854fb369f8487958c64a3960ab0e21bb362b72335fe784b521d13c772cc"}}]}) (async) r8 = syz_usb_connect$uac1(0x1, 0xd4, &(0x7f0000003b80)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc2, 0x3, 0x1, 0x4, 0x10, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1362, 0xe0}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x100, 0x5, 0x3, 0x5}, @selector_unit={0x8, 0x24, 0x5, 0x5, 0x6, '\viX'}, @selector_unit={0x6, 0x24, 0x5, 0x1, 0x5, "96"}, @processing_unit={0x9, 0x24, 0x7, 0x2, 0x5, 0x7, "1414"}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x4, 0x6, "45d153af1c"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x6, 0x6, 0xb3, {0x7, 0x25, 0x1, 0x0, 0x8, 0xa4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x1, 0x3, 0x80, 0x7d, "9af3"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x4, 0x1, 0x9, 0x1, "e7c6"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xff, 0x4, 0x94, 0x7, "9fdce6"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x8, 0x1, 0xf7, 0x9, "066d1b3ead48355336"}, @as_header={0x7, 0x24, 0x1, 0x4, 0xd, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x420, 0x1, 0x4, 0x1, {0x7, 0x25, 0x1, 0x80, 0x6, 0xf}}}}}}}]}}, &(0x7f0000003f40)={0xa, &(0x7f0000003c80)={0xa, 0x6, 0x250, 0x3, 0x4, 0x2, 0x20, 0x1e}, 0x5, &(0x7f0000003cc0)={0x5, 0xf, 0x5}, 0x4, [{0xa4, &(0x7f0000003d00)=@string={0xa4, 0x3, "935df4feb836f98378b50a3a9c82cff5413e7938aeb05222ca2131760f419dbdb42b43d9bd3da421674091ef263bd5c2b43562d05068cb936aa1cf884e75902a5ae0056c8cf596f5b4c83601cef786a77feb3a4dfabd0710929cfbce3d15076bcf727954d653b27e5a3a23f57800cca2993f9017fcee3d3567539f0cc98e74b190ad5b50036a867cccb3a7d6e2cddc910bc97871f01b42cbba200af025939ec455e0"}}, {0x3d, &(0x7f0000003dc0)=@string={0x3d, 0x3, "25a8b98e7e4b073ea148766f63eddc9a0eb64900308a600973fe0aad207d9d9eb119ca85804044f73ba3af105b7fa05f287699a396a5644e62dfc0"}}, {0x4, &(0x7f0000003e00)=@lang_id={0x4, 0x3, 0xc01}}, {0xe5, &(0x7f0000003e40)=@string={0xe5, 0x3, "260104fbb3cd279205ce07cb03a9a8fcfce94686559c289088683130ee346e35889decd8088ae25396fdd6085006a0cc39ed99c04da48b88f92c5cc7d666b9f11f19a361c940de5da19f4afa5a06f3f37356a6ffa13993140b8919f49ee7a1dbfd92cec79841acdc6f45980eb955fe86d68d8f9518a8b7d6e539cfc482e3ba0aaa941877c4839a17da4c5c5aa253007c79374a597d32a5c6736c861cfb689f6eaf8c0c7b5272be5bca7e567b93e9cad10c67d0537137501204aa550b3a4b105ec47181f9bb7854fb369f8487958c64a3960ab0e21bb362b72335fe784b521d13c772cc"}}]}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000003fc0)={'veth1\x00', @local}) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000004100)={0x14, &(0x7f0000004000)={0x20, 0xf0856f61a1d2d380, 0x7d, {0x7d, 0x3, "5e75baaf889645567c3b3f2e3968d4bd167b9429ba0b72a27c80c5d5ec555d780155febb0c261b930c695f3f4e70159fa5469d385dd84907b11604aa414039ea3a408ab2938895cbf0206b0b1b28da066ce40a1e24528b3f252bbc97fae3d6f3bd4e18f4f18055cbcece0f505767280804f0f6f8f2fba7674944bb"}}, &(0x7f00000040c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}}, &(0x7f0000004300)={0x2c, &(0x7f0000004140)={0x20, 0xc, 0xb2, "9207d728eb83b615fed9e7ed80beffb4f1bf321eb195b8c257b3e7bb8ebe310d1a153df207088826662f41f472104ea8adb5f9beab8a04647039a3ef7332b051f4589c5117571bab8879037a730765b783e13c03782e41193c60c72362caea82bbdc9136885027747f1443d724d837c03ba22b7ee94ed08d2d49aa2aeddff16fe084a4a875eb3ae9a0b85587e860abd70685d7e101156afe03ae452c9020548db586ef9bf9956171757e73cc3cd54fb6f6c3"}, &(0x7f0000004200)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000004240)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000004280)={0xc0, 0x5, 0x4, "b53eea32"}, &(0x7f00000042c0)={0x40, 0x5, 0x6, "5246bc949ca3"}}) ioctl$F2FS_IOC_DEFRAGMENT(r4, 0xc010f508, &(0x7f0000004340)={0x8, 0x9}) (async) ioctl$F2FS_IOC_DEFRAGMENT(r4, 0xc010f508, &(0x7f0000004340)={0x8, 0x9}) syz_usb_control_io(r8, &(0x7f0000004600)={0x2c, &(0x7f0000004380)={0x0, 0xd, 0x82, {0x82, 0xf, "f50da3de85ee91f83c8eb950628e97acfb750f8d5fb4a7cca17f2e2c9b6ef98acdec73b01b8e4fe749ff6445941746e9d9bfd5c11233ba7ea706770c2828f40a0f9c12ab067e9cbb93212118f924be7b7497bab7c6ca3894f455ec31623036d95cd0ed43ff4d810db4385ab2dcee2d11e7cc8199afebe5010dfe4f78d36e5fc0"}}, &(0x7f0000004440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1e}}, &(0x7f0000004480)={0x0, 0xf, 0xc1, {0x5, 0xf, 0xc1, 0x5, [@generic={0xa0, 0x10, 0xb, "56572f404c7539bb5d989e25f8986564cb044f9cda76b15f6b06ac664453cc39bc1ef679fe4634e58ecc7f697771b2356db670ed72c9f4e6ef179274f6fc7060a787cb85d285c74f6cf8de03a2f44809e102fbc962dfdcbe7a59eb5bc10aeef038cb6d12b4873319c661ccbdc6da36ccb24680bf36671bb98218a79ad4783d950490069334dfeaf4ccf85e16280f7162b7d9e5e06531715a1db55850bc"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x31, 0x9, 0x3, 0x0, 0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x3, 0xe, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x0, 0x3, 0xf4db}]}}, &(0x7f0000004580)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x3, 0x1, 0x8, "0f7a5341", "a0c34ef5"}}, &(0x7f00000045c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x20, 0xf8, 0x1, 0xf8, 0xa125, 0x1}}}, &(0x7f0000004a80)={0x84, &(0x7f0000004640)={0x20, 0xf, 0x41, "fb902bd3545a324695c1ab7701b1172d44c49e3861811d2c46f8fa0ee87682f031b26ec6d9f70cc8d53c36770949cc60a87fe7e1cf620dfaaefc01b9f01e5ec52e"}, &(0x7f00000046c0)={0x0, 0xa, 0x1, 0xc8}, &(0x7f0000004700)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000004740)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000004780)={0x20, 0x0, 0x4, {0xe0, 0x7}}, &(0x7f00000047c0)={0x40, 0x7, 0x2, 0x400}, &(0x7f0000004800)={0x40, 0x9, 0x1}, &(0x7f0000004840)={0x40, 0xb, 0x2, "07e0"}, &(0x7f0000004880)={0x40, 0xf, 0x2, 0x8}, &(0x7f00000048c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000004900)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000004940)={0x40, 0x19, 0x2, "8c32"}, &(0x7f0000004980)={0x40, 0x1a, 0x2, 0x400}, &(0x7f00000049c0)={0x40, 0x1c, 0x1, 0x5b}, &(0x7f0000004a00)={0x40, 0x1e, 0x1}, &(0x7f0000004a40)={0x40, 0x21, 0x1, 0x5}}) (async) syz_usb_control_io(r8, &(0x7f0000004600)={0x2c, &(0x7f0000004380)={0x0, 0xd, 0x82, {0x82, 0xf, "f50da3de85ee91f83c8eb950628e97acfb750f8d5fb4a7cca17f2e2c9b6ef98acdec73b01b8e4fe749ff6445941746e9d9bfd5c11233ba7ea706770c2828f40a0f9c12ab067e9cbb93212118f924be7b7497bab7c6ca3894f455ec31623036d95cd0ed43ff4d810db4385ab2dcee2d11e7cc8199afebe5010dfe4f78d36e5fc0"}}, &(0x7f0000004440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1e}}, &(0x7f0000004480)={0x0, 0xf, 0xc1, {0x5, 0xf, 0xc1, 0x5, [@generic={0xa0, 0x10, 0xb, "56572f404c7539bb5d989e25f8986564cb044f9cda76b15f6b06ac664453cc39bc1ef679fe4634e58ecc7f697771b2356db670ed72c9f4e6ef179274f6fc7060a787cb85d285c74f6cf8de03a2f44809e102fbc962dfdcbe7a59eb5bc10aeef038cb6d12b4873319c661ccbdc6da36ccb24680bf36671bb98218a79ad4783d950490069334dfeaf4ccf85e16280f7162b7d9e5e06531715a1db55850bc"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x31, 0x9, 0x3, 0x0, 0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x3, 0xe, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x0, 0x3, 0xf4db}]}}, &(0x7f0000004580)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x3, 0x1, 0x8, "0f7a5341", "a0c34ef5"}}, &(0x7f00000045c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x20, 0xf8, 0x1, 0xf8, 0xa125, 0x1}}}, &(0x7f0000004a80)={0x84, &(0x7f0000004640)={0x20, 0xf, 0x41, "fb902bd3545a324695c1ab7701b1172d44c49e3861811d2c46f8fa0ee87682f031b26ec6d9f70cc8d53c36770949cc60a87fe7e1cf620dfaaefc01b9f01e5ec52e"}, &(0x7f00000046c0)={0x0, 0xa, 0x1, 0xc8}, &(0x7f0000004700)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000004740)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000004780)={0x20, 0x0, 0x4, {0xe0, 0x7}}, &(0x7f00000047c0)={0x40, 0x7, 0x2, 0x400}, &(0x7f0000004800)={0x40, 0x9, 0x1}, &(0x7f0000004840)={0x40, 0xb, 0x2, "07e0"}, &(0x7f0000004880)={0x40, 0xf, 0x2, 0x8}, &(0x7f00000048c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000004900)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000004940)={0x40, 0x19, 0x2, "8c32"}, &(0x7f0000004980)={0x40, 0x1a, 0x2, 0x400}, &(0x7f00000049c0)={0x40, 0x1c, 0x1, 0x5b}, &(0x7f0000004a00)={0x40, 0x1e, 0x1}, &(0x7f0000004a40)={0x40, 0x21, 0x1, 0x5}}) setreuid(r6, r6) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x100010, r0, 0x48cf000) 4.829263394s ago: executing program 4 (id=2321): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) close(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) 4.42644438s ago: executing program 2 (id=2322): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f1080006"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) (async) syz_usb_connect(0x2, 0x1d6, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, [{0xc4, &(0x7f0000000080)=@string={0xc4, 0x3, "23601160956c4a9e6997fc2ffe6dde554a9b5330424713bcead9d001d3f17ca03dc68228c39d92a37713554ff9db67e6be223e6fba45a0f93c860b71727e9cd3b94444ac7e568ecd42402ac017cbc0418112ab471f9d17656a4f00cdd62dc97bc5c6acf2de7d4116ff8365247bbb6f38dea50765331c878f59233f1a2d19a5a26f0132364d23c4158c4a253861baeff768ee004071f4b8a424d926c6abe776d61b01c64dfdd881974ba07af5ad146d575eb7da9fd9023aa8d284b8cfd836b74e5e2f"}}, {0x43, &(0x7f0000000180)=@string={0x43, 0x3, "726d3af33d8ee4f1902e39415102c64737c8e2ec310936f0609e9492ff139ff6140f7449604d52c8f3f0c30faa54ed10efbf58a772b24a1f30e1688376dccff64b"}}]}) 4.350435759s ago: executing program 5 (id=2324): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) (async) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x401, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x808025, &(0x7f0000000880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"/275], 0x100}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000a00)="120000001200e7ef007b00000000000000a1fae550c28b381438a7e956d1c907765c123c079e69ae69fb9ea0d8e3e5f969b326b61c4d7f311efbcf5abc4843eef183ca25cb9081390d22280929d3c76e8493ac4c4f7ebb12eaa59524451f1f6a3b03c878b0503efd9427ef25cb9dfd0626890b8c5c4e78663e7e7f7a9e0f01960dc758b5e322d1ce25c9593978291099080a98884ed4f5269a8c8dc4be7a84d6ffac97ce550d63d729cc168bb116f4253f163c3abc12beedce05ff1445a042ee0c42cc72f1e187e8c6cb9b832bf5d6a8", 0xd0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 4.325196681s ago: executing program 5 (id=2325): syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x0) (async) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023893) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023893) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) socket(0xb, 0xa, 0x7) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000ac0)={0xc0000000, 0x0, "760b3e7b874213829561795ea5d9eb7cfd3f5a0fa82b1f7ba6444ac9530f6f58", 0x0, 0x3e73, 0x9, 0x0, 0x0, 0x7, 0x0, 0x0, [0x4, 0xfffffffe, 0x5]}) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000000)={0x4, "ae77035d1293c418f109f5c80e924f9817d7d8ce92bc205904dda07d987b3d46", 0x3}) 3.980829124s ago: executing program 5 (id=2326): sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x30) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES32=r1]) 2.343008718s ago: executing program 5 (id=2327): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e", @ANYRES32], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0045b0f, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x60, 0x14, 0x5, "099ef471b5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.092327654s ago: executing program 3 (id=2328): r0 = timerfd_create(0x6, 0x80800) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cc, &(0x7f0000000100)) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000000480)) timerfd_settime(r0, 0x2, &(0x7f0000000040)={{0x0, 0x3938700}, {r1, r2+10000000}}, &(0x7f0000000080)) r4 = syz_open_dev$audion(&(0x7f0000000240), 0x1, 0x4240) r5 = accept(r4, &(0x7f0000000380)=@x25, &(0x7f0000000400)=0x80) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@mcast1, @in6=@initdev}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) (async) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@mcast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x20000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@directio}, {@access_user}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/vhost-vsock\x00'}}, {@appraise}, {@fsmagic={'fsmagic', 0x3d, 0xfffffffffffffffd}}, {@uid_lt={'uid<', r6}}, {@audit}, {@mask={'mask', 0x3d, '^MAY_READ'}}]}}) socket$netlink(0x10, 0x3, 0x4) (async) r7 = socket$netlink(0x10, 0x3, 0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/66, 0x0, 0x100000}) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/82, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/82, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f00000008c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000000000)=0x1) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_ENDIAN(r8, 0x4008af13, &(0x7f0000000180)={0x1, 0x1}) (async) ioctl$VHOST_SET_VRING_ENDIAN(r8, 0x4008af13, &(0x7f0000000180)={0x1, 0x1}) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560a84606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b00000000", 0x48}], 0x1) 2.092100514s ago: executing program 3 (id=2329): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x6}, 0x4) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000000)="50bff127a2ac4f064eba839f9a156ff537", 0x11, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x4, @loopback, 0xfffffffc}, 0x1c) 2.063616511s ago: executing program 3 (id=2330): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x1, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xe49f, 0xeb36, 0x2, 0x19, 0x76c9, 0x200, 0x3, 0x1, 0x1, 0x5, 0x800009, 0x80000005, 0x9, 0x10, 0x80000000, 0x10, 0xb50, 0x0, 0x7, 0x3, 0xffffffff, 0x3, 0xfffffffe, 0x5, 0x8, 0x24, 0x7ffb, 0x8, 0xfffffffd, 0x20200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x6, 0x1], [0x66ac, 0xfffffff9, 0x4, 0x3, 0x6, 0x7, 0x13e, 0x9, 0x4, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x40, 0x7ff, 0x7ff, 0x1, 0x9, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x7, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x8000, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x583c, 0x6, 0xb, 0x4, 0x400000fc, 0x2, 0x8d1, 0x8fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xadd, 0x7f, 0x9], [0x8396, 0x7, 0xffff6a0b, 0x9, 0x8000, 0x1, 0x3, 0xe88, 0x28, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0xb, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x47d8a7f1, 0x2, 0x3, 0xc, 0x4, 0xb0f, 0x22, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xf4, 0x4, 0xe, 0xffffffff, 0x6, 0x2ee, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0xbc0, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0d787d, 0xffffff4e, 0x9, 0x4, 0x7, 0x3, 0x0, 0x6, 0x9, 0x4, 0x3], [0x10000010, 0xb, 0x9, 0x5, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x0, 0xa, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xdaa, 0x2004, 0x7, 0x103, 0x6, 0x4c, 0x6, 0x4000400, 0x1fffe0, 0xfffffffb, 0x40, 0x80000002, 0x4, 0xb, 0xfff, 0x3c, 0x9, 0x0, 0x9, 0x1, 0x0, 0x7, 0x8ac1, 0x3, 0x5, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0x80000000, 0xffffffff, 0x7, 0xfffffff8, 0xd, 0x7, 0x10, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r1, 0x80045438, 0x300000000000000) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000000)) ioctl$UI_DEV_CREATE(r0, 0x5501) 2.013642561s ago: executing program 3 (id=2331): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000)=0x80000000, 0x4) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) (async) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYRESOCT=r2], 0x52) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x13) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x7, &(0x7f000027d000/0x2000)=nil) 1.740273853s ago: executing program 4 (id=2333): move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, 0x0, 0x0) r0 = socket$inet6(0x2d, 0x2, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}}], 0x1, 0x0) syz_usb_connect(0x0, 0x56, &(0x7f0000000140)=ANY=[@ANYRES64=r1, @ANYRES32, @ANYRES8=r0], 0x0) 1.312757969s ago: executing program 2 (id=2334): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4c831, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r3, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000180)='./file1\x00', 0x4) renameat2(r3, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x3, 0x2) syz_open_dev$char_usb(0xc, 0xb4, 0x7) 1.034318029s ago: executing program 2 (id=2335): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000008711e0e170000000000010d022400010000000009041000020300000009210400000122050009058103000000000032ea2b801d128bf9053d7779b58479916abde05a4ed75d53eeb4ca7df858557b13d9e5b0bf4a49136df4bfb34d03c8e4f49b6ab0ca14077ea49bddcc6d7ebed27a39e3e1d77398ef5c5f4995d4c5c0751072"], 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000003c0)={@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, {0x0}, 0x0, 0xc}, 0xa0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x3, 0xb7, &(0x7f0000000140)=""/183) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x7, {[@global=@item_4={0x3, 0x1, 0x8, "2142bc36"}, @local=@item_012={0x1, 0x2, 0xa, "b0"}]}}, 0x0}, 0x0) 544.363794ms ago: executing program 5 (id=2336): sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x30) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = syz_usb_connect(0x5, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES32=r1]) 0s ago: executing program 5 (id=2337): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r0, 0x0) read(r0, &(0x7f0000000180)=""/207, 0xcf) r1 = socket$kcm(0x29, 0x7, 0x0) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)}, {&(0x7f0000000280)=""/94, 0x5e}], 0x2, &(0x7f0000000300)=""/116, 0x74}, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181801, 0x0) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000080)={0x2000000, 0xf, &(0x7f0000000580)=[0x1388, 0x7f, 0x1, 0x0, 0x9, 0x1ed, 0x10002, 0x3, 0x8, 0xc58f, 0x2060, 0xfec, 0xfffffff7, 0x1ac, 0xfffffff8], 0x0, 0x4}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3) socket$rxrpc(0x21, 0x2, 0xa) (async) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) (async) listen(r0, 0x0) (async) read(r0, &(0x7f0000000180)=""/207, 0xcf) (async) socket$kcm(0x29, 0x7, 0x0) (async) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)}, {&(0x7f0000000280)=""/94, 0x5e}], 0x2, &(0x7f0000000300)=""/116, 0x74}, 0x0) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181801, 0x0) (async) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000080)={0x2000000, 0xf, &(0x7f0000000580)=[0x1388, 0x7f, 0x1, 0x0, 0x9, 0x1ed, 0x10002, 0x3, 0x8, 0xc58f, 0x2060, 0xfec, 0xfffffff7, 0x1ac, 0xfffffff8], 0x0, 0x4}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3) (async) kernel console output (not intermixed with test programs): s `syz.2.1977'. [ 561.795472][ T10] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 561.815800][ T10] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz1] on syz0 [ 561.831086][T12691] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1978'. [ 561.875152][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 561.875566][ T10] usb 4-1: USB disconnect, device number 107 [ 561.915606][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 561.978155][T12691] syz.4.1978 (12691) used greatest stack depth: 17832 bytes left [ 561.988078][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 562.001236][ T10] quatech2 4-1:0.51: device disconnected [ 562.039925][T12695] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1979'. [ 562.100368][T12689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1977'. [ 562.116086][T12698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.132317][T12698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.284745][ T5999] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 562.414805][ T5999] usb 5-1: device descriptor read/64, error -71 [ 562.448479][T12704] syzkaller1: entered promiscuous mode [ 562.453981][T12704] syzkaller1: entered allmulticast mode [ 562.664797][ T5999] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 562.694041][T12710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.703661][T12710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.805722][ T5999] usb 5-1: device descriptor read/64, error -71 [ 562.814709][ T10] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 562.858677][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.915376][ T5999] usb usb5-port1: attempt power cycle [ 562.964725][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 562.971424][ T10] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 562.979681][ T10] usb 4-1: config 0 has no interface number 0 [ 562.989116][ T10] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 562.998268][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.006700][ T10] usb 4-1: Product: syz [ 563.010861][ T10] usb 4-1: Manufacturer: syz [ 563.015531][ T10] usb 4-1: SerialNumber: syz [ 563.021865][ T10] usb 4-1: config 0 descriptor?? [ 563.031878][ T10] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 563.233963][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 563.252212][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 563.263242][ T5999] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 563.286269][ T5999] usb 5-1: device descriptor read/8, error -71 [ 563.433329][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 563.535270][ T5999] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 563.555138][ T5999] usb 5-1: device descriptor read/8, error -71 [ 563.633975][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 563.634426][ T43] usb 4-1: USB disconnect, device number 108 [ 563.652385][ T43] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 563.664243][T12737] syzkaller1: entered promiscuous mode [ 563.671169][ T43] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 563.672980][ T5999] usb usb5-port1: unable to enumerate USB device [ 563.690385][T12737] syzkaller1: entered allmulticast mode [ 563.692249][ T43] quatech2 4-1:0.51: device disconnected [ 563.814039][ T5871] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 563.816576][T12744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.832280][T12744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.430751][T12754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.441983][T12754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.464860][ T43] usb 4-1: new low-speed USB device number 109 using dummy_hcd [ 564.594736][ T43] usb 4-1: device descriptor read/64, error -71 [ 564.834728][ T43] usb 4-1: new low-speed USB device number 110 using dummy_hcd [ 564.964756][ T43] usb 4-1: device descriptor read/64, error -71 [ 565.040029][T12762] syzkaller1: entered promiscuous mode [ 565.045803][T12762] syzkaller1: entered allmulticast mode [ 565.078009][ T43] usb usb4-port1: attempt power cycle [ 565.126724][T12766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.136921][T12766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.414799][ T43] usb 4-1: new low-speed USB device number 111 using dummy_hcd [ 565.435571][ T43] usb 4-1: device descriptor read/8, error -71 [ 565.464733][ T5999] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 565.636256][ T5999] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 565.644368][ T5999] usb 5-1: config 0 has no interface number 0 [ 565.650601][ T5999] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 565.663031][ T5999] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 565.677901][ T43] usb 4-1: new low-speed USB device number 112 using dummy_hcd [ 565.687443][ T5999] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 565.696623][ T5999] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.705201][ T5999] usb 5-1: Product: syz [ 565.706674][ T43] usb 4-1: device descriptor read/8, error -71 [ 565.709841][ T5999] usb 5-1: Manufacturer: syz [ 565.720702][ T5999] usb 5-1: SerialNumber: syz [ 565.731180][ T5999] usb 5-1: config 0 descriptor?? [ 565.742904][T12764] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 565.750202][T12768] input: syz0 as /devices/virtual/input/input58 [ 565.758571][ T5999] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 565.774574][T12768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.787023][T12768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.787630][ T5999] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 565.799104][T12768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.816371][T12768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.835002][ T43] usb usb4-port1: unable to enumerate USB device [ 565.963597][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 566.168370][ T5999] usb 5-1: USB disconnect, device number 52 [ 566.177579][ T5999] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 566.189188][ T5999] cyberjack 5-1:0.69: device disconnected [ 566.269563][T12770] lo speed is unknown, defaulting to 1000 [ 566.490864][T12777] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2009'. [ 566.641926][T12783] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2011'. [ 566.694312][T12783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.704525][T12783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.984771][ T5955] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 567.134681][ T5955] usb 5-1: Using ep0 maxpacket: 32 [ 567.141459][ T5955] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 567.149880][ T5955] usb 5-1: config 0 has no interface number 0 [ 567.157814][ T5955] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 567.166934][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.175078][ T5955] usb 5-1: Product: syz [ 567.179229][ T5955] usb 5-1: Manufacturer: syz [ 567.183802][ T5955] usb 5-1: SerialNumber: syz [ 567.190445][ T5955] usb 5-1: config 0 descriptor?? [ 567.197683][ T5955] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 567.359679][ T5871] Bluetooth: hci4: unexpected event for opcode 0x041b [ 567.402421][ T5955] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 567.423537][ T5955] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 567.583238][T12811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.592061][T12811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.600735][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 567.735166][ T5955] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 567.801347][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 567.810767][ T5981] usb 5-1: USB disconnect, device number 53 [ 567.819959][ T5981] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 567.834023][ T5981] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 567.845819][ T5981] quatech2 5-1:0.51: device disconnected [ 567.875713][ T5955] usb 4-1: device descriptor read/64, error -71 [ 568.134750][ T5955] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 568.191761][T12813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.200548][T12813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.274770][ T5955] usb 4-1: device descriptor read/64, error -71 [ 568.385268][ T5955] usb usb4-port1: attempt power cycle [ 568.400883][T12820] syzkaller1: entered promiscuous mode [ 568.406559][T12820] syzkaller1: entered allmulticast mode [ 568.724776][ T5955] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 568.745413][ T5955] usb 4-1: device descriptor read/8, error -71 [ 568.754759][ T5999] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 568.775578][T12826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.784441][T12826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.907560][ T5999] usb 5-1: config index 0 descriptor too short (expected 19492, got 36) [ 568.916252][ T5999] usb 5-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 568.928811][ T5999] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 568.939389][ T5999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 568.951195][ T5999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.962564][ T5999] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 568.976399][ T5999] usb 5-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 568.985791][ T5999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.995046][ T5955] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 569.007585][ T5999] usb 5-1: config 0 descriptor?? [ 569.026990][ T5955] usb 4-1: device descriptor read/8, error -71 [ 569.029543][T12835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.042291][T12835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.144957][ T5955] usb usb4-port1: unable to enumerate USB device [ 569.241865][ T5999] lg-g15 0003:046D:C225.0031: hidraw0: USB HID v1.01 Device [HID 046d:c225] on usb-dummy_hcd.4-1/input0 [ 569.437187][ T5915] usb 5-1: USB disconnect, device number 54 [ 569.869962][T12846] lo speed is unknown, defaulting to 1000 [ 570.464745][ T5955] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 570.518248][T12858] syzkaller1: entered promiscuous mode [ 570.523808][T12858] syzkaller1: entered allmulticast mode [ 570.636039][ T5955] usb 5-1: Using ep0 maxpacket: 32 [ 570.647675][ T5955] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 570.657449][T12860] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 570.658439][ T5955] usb 5-1: config 0 has no interface number 0 [ 570.663420][T12860] syzkaller1: linktype set to 776 [ 570.681310][ T5955] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 570.689417][T12862] binder: 12861:12862 ioctl c0306201 0 returned -14 [ 570.691266][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.706458][ T5955] usb 5-1: Product: syz [ 570.710707][ T5955] usb 5-1: Manufacturer: syz [ 570.715801][ T5955] usb 5-1: SerialNumber: syz [ 570.727054][ T5955] usb 5-1: config 0 descriptor?? [ 570.736860][ T5955] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 570.940368][ T5955] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 570.956774][ T5955] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 571.081863][T12871] binder: 12870:12871 ioctl 40046210 0 returned -14 [ 571.094942][ T5999] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 571.141057][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 571.244697][ T5999] usb 4-1: Using ep0 maxpacket: 32 [ 571.251491][ T5999] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 571.259691][ T5999] usb 4-1: config 0 has no interface number 0 [ 571.267957][ T5999] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 571.277843][ T5999] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.285912][ T5999] usb 4-1: Product: syz [ 571.290073][ T5999] usb 4-1: Manufacturer: syz [ 571.295715][ T5999] usb 4-1: SerialNumber: syz [ 571.303037][ T5999] usb 4-1: config 0 descriptor?? [ 571.311657][ T5999] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 571.341595][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 571.349833][ T5915] usb 5-1: USB disconnect, device number 55 [ 571.360204][ T5915] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 571.374919][ T5915] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 571.386960][ T5915] quatech2 5-1:0.51: device disconnected [ 571.512565][ T5999] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 571.525464][ T5999] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 571.792120][T12878] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2040'. [ 571.801981][T12878] cgroup: Unknown subsys name 'cpuset' [ 571.846139][T12881] syzkaller1: entered promiscuous mode [ 571.851623][T12881] syzkaller1: entered allmulticast mode [ 571.915986][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 571.917870][ T5955] usb 4-1: USB disconnect, device number 117 [ 571.936530][ T5955] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 571.965010][ T5955] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 571.974408][T12885] binder: 12884:12885 ioctl c0306201 0 returned -14 [ 572.005873][ T5955] quatech2 4-1:0.51: device disconnected [ 572.144723][ T5915] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 572.274741][ T5915] usb 5-1: device descriptor read/64, error -71 [ 572.517360][ T5915] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 572.654737][ T5915] usb 5-1: device descriptor read/64, error -71 [ 572.734863][ T10] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 572.764947][ T5915] usb usb5-port1: attempt power cycle [ 572.865657][ T10] usb 4-1: device descriptor read/64, error -71 [ 572.896296][T12910] binder: 12909:12910 ioctl c0306201 0 returned -14 [ 573.039717][T12919] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2055'. [ 573.110819][ T5915] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 573.118545][ T10] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 573.157339][ T5915] usb 5-1: device descriptor read/8, error -71 [ 573.197944][T12929] tipc: Started in network mode [ 573.202924][T12929] tipc: Node identity ac14140f, cluster identity 4711 [ 573.213485][T12929] tipc: New replicast peer: 255.255.255.83 [ 573.219924][T12929] tipc: Enabled bearer , priority 10 [ 573.264929][ T10] usb 4-1: device descriptor read/64, error -71 [ 573.272523][T12929] FAT-fs (nullb0): bogus number of reserved sectors [ 573.279679][T12929] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 573.374941][ T10] usb usb4-port1: attempt power cycle [ 573.394732][ T5915] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 573.410125][ T30] audit: type=1800 audit(1758432824.472:110): pid=12931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2058" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 573.432877][ T5915] usb 5-1: device descriptor read/8, error -71 [ 573.527545][T12936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.541305][T12936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.544967][ T5915] usb usb5-port1: unable to enumerate USB device [ 573.557072][T12936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.570933][T12936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.587107][T12936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.597588][T12936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.718998][T12936] 9pnet_fd: p9_fd_create_tcp (12936): problem connecting socket to 127.0.0.1 [ 573.735022][ T10] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 573.735160][T12936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.753228][T12936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.766041][ T10] usb 4-1: device descriptor read/8, error -71 [ 574.004776][ T10] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 574.025418][ T10] usb 4-1: device descriptor read/8, error -71 [ 574.136132][ T10] usb usb4-port1: unable to enumerate USB device [ 574.214740][ T5981] tipc: Node number set to 2886997007 [ 575.304723][ T10] usb 5-1: new low-speed USB device number 60 using dummy_hcd [ 575.464721][ T10] usb 5-1: Invalid ep0 maxpacket: 32 [ 575.532794][T12950] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2066'. [ 575.604854][ T10] usb 5-1: new low-speed USB device number 61 using dummy_hcd [ 575.754727][ T10] usb 5-1: Invalid ep0 maxpacket: 32 [ 575.760363][ T10] usb usb5-port1: attempt power cycle [ 575.867300][ T5981] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 576.026304][ T5981] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 576.034332][ T5981] usb 4-1: config 0 has no interface number 0 [ 576.043413][ T5981] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 576.052875][ T5981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.062026][ T5981] usb 4-1: Product: syz [ 576.067336][ T5981] usb 4-1: Manufacturer: syz [ 576.071960][ T5981] usb 4-1: SerialNumber: syz [ 576.079612][ T5981] usb 4-1: config 0 descriptor?? [ 576.104780][ T10] usb 5-1: new low-speed USB device number 62 using dummy_hcd [ 576.125494][ T10] usb 5-1: Invalid ep0 maxpacket: 32 [ 576.254814][ T10] usb 5-1: new low-speed USB device number 63 using dummy_hcd [ 576.275429][ T10] usb 5-1: Invalid ep0 maxpacket: 32 [ 576.281139][ T10] usb usb5-port1: unable to enumerate USB device [ 576.292863][T12956] netlink: 'syz.3.2068': attribute type 6 has an invalid length. [ 576.301824][T12956] netlink: 147680 bytes leftover after parsing attributes in process `syz.3.2068'. [ 576.313139][ T5981] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 576.325705][ T5981] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 576.336879][ T5981] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 576.345218][ T5981] usb 4-1: media controller created [ 576.368710][ T5981] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 576.729144][ T10] usb 4-1: USB disconnect, device number 122 [ 576.738341][T12970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.758445][T12970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.406679][T12980] mkiss: ax0: crc mode is auto. [ 577.643545][T12995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.652600][T12995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.685670][ T5981] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 577.834756][ T5981] usb 4-1: Using ep0 maxpacket: 32 [ 577.842089][ T5981] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 577.850466][ T5981] usb 4-1: config 0 has no interface number 0 [ 577.858754][ T5981] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 577.867891][ T5981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.875922][ T5981] usb 4-1: Product: syz [ 577.880073][ T5981] usb 4-1: Manufacturer: syz [ 577.884804][ T5981] usb 4-1: SerialNumber: syz [ 577.891967][ T5981] usb 4-1: config 0 descriptor?? [ 577.899227][ T5981] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 578.105409][ T5981] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 578.125811][ T5981] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 578.290919][ T5955] usb 6-1: USB disconnect, device number 24 [ 578.302438][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 578.439682][T13004] Bluetooth: MGMT ver 1.23 [ 578.503289][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 578.505282][ T4587] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4a [ 578.512291][ T5955] usb 4-1: USB disconnect, device number 123 [ 578.546603][ T5955] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 578.587593][ T5955] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 578.605938][ T5955] quatech2 4-1:0.51: device disconnected [ 578.784894][T11188] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 578.793067][T11188] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 578.800941][T11188] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 578.810721][T11188] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 578.820886][T11188] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 578.856199][T13011] lo speed is unknown, defaulting to 1000 [ 579.100137][T13011] chnl_net:caif_netlink_parms(): no params data found [ 579.287705][T13011] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.298381][T13011] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.309150][T13011] bridge_slave_0: entered allmulticast mode [ 579.317444][T13011] bridge_slave_0: entered promiscuous mode [ 579.327886][T13011] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.335526][T13011] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.342715][T13011] bridge_slave_1: entered allmulticast mode [ 579.350010][T13011] bridge_slave_1: entered promiscuous mode [ 579.378952][T13011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 579.391224][T13011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 579.421772][T13011] team0: Port device team_slave_0 added [ 579.430930][T13011] team0: Port device team_slave_1 added [ 579.457929][T13011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.465040][T13011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.491004][T13011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.505168][T13011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.512114][T13011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.538731][T13011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.554872][ T10] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 579.565106][ T5981] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 579.590862][T13011] hsr_slave_0: entered promiscuous mode [ 579.597926][T13011] hsr_slave_1: entered promiscuous mode [ 579.604040][T13011] debugfs: 'hsr0' already exists in 'hsr' [ 579.609871][T13011] Cannot create hsr debugfs directory [ 579.724868][ T5981] usb 5-1: Using ep0 maxpacket: 32 [ 579.725336][T13011] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.732067][ T5981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.747138][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 579.753239][ T5981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.769747][ T5981] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 579.771089][ T10] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.778981][ T5981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.782483][ T5981] usb 5-1: config 0 descriptor?? [ 579.790306][ T10] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.819024][ T5981] hub 5-1:0.0: USB hub found [ 579.825030][ T10] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 579.838011][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 579.844689][ T10] usb 4-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 579.853731][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.857778][T13011] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.866418][ T10] usb 4-1: config 0 descriptor?? [ 579.943652][T13011] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.009868][ T5981] hub 5-1:0.0: 1 port detected [ 580.019778][T13011] batman_adv: batadv0: Removing interface: netdevsim0 [ 580.030115][T13011] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.176068][T13011] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 580.187391][T13011] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 580.198918][T13011] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 580.210937][T13011] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 580.296084][ T10] kye 0003:0458:0087.0032: unknown main item tag 0x0 [ 580.308100][ T10] kye 0003:0458:0087.0032: unknown main item tag 0x0 [ 580.317363][T13011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.324900][ T10] kye 0003:0458:0087.0032: unknown main item tag 0x0 [ 580.331730][ T10] kye 0003:0458:0087.0032: unknown main item tag 0x0 [ 580.339941][ T10] kye 0003:0458:0087.0032: unknown main item tag 0x0 [ 580.351736][T13011] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.355102][ T10] kye 0003:0458:0087.0032: hidraw0: USB HID v0.05 Device [HID 0458:0087] on usb-dummy_hcd.3-1/input0 [ 580.374043][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.381227][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.419257][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.426458][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.528563][ T5982] usb 4-1: USB disconnect, device number 124 [ 580.707351][T13011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.856179][T11188] Bluetooth: hci3: command tx timeout [ 580.941731][T13011] veth0_vlan: entered promiscuous mode [ 580.955769][T13011] veth1_vlan: entered promiscuous mode [ 580.990486][T13011] veth0_macvtap: entered promiscuous mode [ 581.001928][T13011] veth1_macvtap: entered promiscuous mode [ 581.022288][T13011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.040351][T13011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.057679][ T1153] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.074383][ T1153] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.096633][ T1153] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.102229][ T5981] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 581.113499][ T5981] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 581.128803][ T1153] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.138327][ T5981] usbhid 5-1:0.0: can't add hid device: -32 [ 581.138458][ T5981] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 581.198685][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.211362][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.237988][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.246553][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.285735][T13054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.294535][T13054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.424761][ T10] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 581.524806][ T5915] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 581.555663][ T10] usb 4-1: device descriptor read/64, error -71 [ 581.675158][ T5915] usb 6-1: Using ep0 maxpacket: 16 [ 581.682003][ T5915] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 581.692991][ T5915] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 581.702710][ T5915] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 581.716220][ T5915] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 581.725574][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.733575][ T5915] usb 6-1: Product: syz [ 581.737775][ T5915] usb 6-1: Manufacturer: syz [ 581.742364][ T5915] usb 6-1: SerialNumber: syz [ 581.804729][ T10] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 581.944858][ T10] usb 4-1: device descriptor read/64, error -71 [ 581.954772][ T5915] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 581.962609][ T5915] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 581.991168][ T5915] usb 6-1: USB disconnect, device number 25 [ 582.031242][T10506] udevd[10506]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 582.062485][ T10] usb usb4-port1: attempt power cycle [ 582.404740][ T10] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 582.425675][ T10] usb 4-1: device descriptor read/8, error -71 [ 582.518376][ T5915] usb 5-1: reset high-speed USB device number 64 using dummy_hcd [ 582.655107][ T5915] usb 5-1: device descriptor read/64, error -71 [ 582.664798][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 582.686783][ T10] usb 4-1: device descriptor read/8, error -71 [ 582.754801][ T5981] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 582.806168][ T10] usb usb4-port1: unable to enumerate USB device [ 582.884697][ T5981] usb 6-1: device descriptor read/64, error -71 [ 582.895401][ T5915] usb 5-1: reset high-speed USB device number 64 using dummy_hcd [ 582.935096][T11188] Bluetooth: hci3: command tx timeout [ 583.024768][ T5915] usb 5-1: device descriptor read/64, error -71 [ 583.125232][ T5981] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 583.257544][ T5981] usb 6-1: device descriptor read/64, error -71 [ 583.264735][ T5915] usb 5-1: reset high-speed USB device number 64 using dummy_hcd [ 583.285376][ T5915] usb 5-1: device descriptor read/8, error -71 [ 583.365036][ T5981] usb usb6-port1: attempt power cycle [ 583.534845][ T5915] usb 5-1: reset high-speed USB device number 64 using dummy_hcd [ 583.555870][ T5915] usb 5-1: device descriptor read/8, error -71 [ 583.638620][T13062] comedi comedi3: comedi_config --init_data is deprecated [ 583.648765][T13062] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 583.665591][ T5915] usb 5-1: USB disconnect, device number 64 [ 583.704835][ T5981] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 583.725510][ T5981] usb 6-1: device descriptor read/8, error -71 [ 583.964724][ T5981] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 583.964724][ T5915] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 583.985393][ T5981] usb 6-1: device descriptor read/8, error -71 [ 584.104780][ T5915] usb 5-1: device descriptor read/64, error -71 [ 584.106074][ T5981] usb usb6-port1: unable to enumerate USB device [ 584.354857][ T5915] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 584.485409][ T5915] usb 5-1: device descriptor read/64, error -71 [ 584.516625][T13066] netlink: 'syz.2.2096': attribute type 10 has an invalid length. [ 584.525772][T13066] macvlan0: entered promiscuous mode [ 584.531098][T13066] macvlan0: entered allmulticast mode [ 584.539535][T13066] veth1_vlan: entered allmulticast mode [ 584.544986][ T5999] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 584.550513][T13066] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 584.595017][ T5915] usb usb5-port1: attempt power cycle [ 584.704693][ T5999] usb 4-1: Using ep0 maxpacket: 32 [ 584.711277][ T5999] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 584.720157][ T5999] usb 4-1: config 0 has no interface number 0 [ 584.728445][ T5999] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 584.737586][ T5999] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.745626][ T5999] usb 4-1: Product: syz [ 584.749783][ T5999] usb 4-1: Manufacturer: syz [ 584.754377][ T5999] usb 4-1: SerialNumber: syz [ 584.760980][ T5999] usb 4-1: config 0 descriptor?? [ 584.768055][ T5999] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 584.948661][ T5915] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 584.970304][ T5999] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 584.980792][ T5915] usb 5-1: device descriptor read/8, error -71 [ 584.989574][ T5999] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 585.015089][T11188] Bluetooth: hci3: command tx timeout [ 585.171978][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 585.224966][ T5915] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 585.245383][ T5915] usb 5-1: device descriptor read/8, error -71 [ 585.355073][ T5915] usb usb5-port1: unable to enumerate USB device [ 585.372643][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 585.373093][ T5955] usb 4-1: USB disconnect, device number 3 [ 585.398943][ T5955] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 585.412877][ T5955] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 585.426965][ T5955] quatech2 4-1:0.51: device disconnected [ 585.674577][T13091] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2106'. [ 585.972267][T13115] syzkaller1: entered promiscuous mode [ 585.983874][T13115] syzkaller1: entered allmulticast mode [ 586.350080][ T5955] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 586.494350][T13134] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2119'. [ 586.506262][T13134] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 586.513199][T13134] overlayfs: failed to set xattr on upper [ 586.519320][T13134] overlayfs: ...falling back to redirect_dir=nofollow. [ 586.526449][ T5955] usb 4-1: Using ep0 maxpacket: 8 [ 586.526705][T13134] overlayfs: ...falling back to index=off. [ 586.533123][ T5955] usb 4-1: config 24 descriptor has 1 excess byte, ignoring [ 586.540417][T13134] overlayfs: ...falling back to uuid=null. [ 586.545243][ T5955] usb 4-1: config 24 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 586.562920][T13134] overlayfs: ...falling back to xino=off. [ 586.563362][ T5955] usb 4-1: New USB device found, idVendor=0b05, idProduct=1837, bcdDevice= 0.00 [ 586.577899][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.597490][ T5955] usbhid 4-1:24.0: can't add hid device: -22 [ 586.603566][ T5955] usbhid 4-1:24.0: probe with driver usbhid failed with error -22 [ 586.685688][ T5981] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 586.835215][ T5981] usb 5-1: Using ep0 maxpacket: 16 [ 586.842251][ T5981] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 586.852408][ T5981] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 586.863221][ T5981] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 586.872751][ T5981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.880813][ T5981] usb 5-1: Product: syz [ 586.885047][ T5981] usb 5-1: Manufacturer: syz [ 586.889631][ T5981] usb 5-1: SerialNumber: syz [ 586.894695][ T5955] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 587.064763][ T5955] usb 6-1: Using ep0 maxpacket: 32 [ 587.071888][ T5955] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 587.080085][ T5955] usb 6-1: config 0 has no interface number 0 [ 587.088152][ T5955] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 587.097497][ T5955] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.105767][ T5955] usb 6-1: Product: syz [ 587.110194][ T5955] usb 6-1: Manufacturer: syz [ 587.115128][ T5955] usb 6-1: SerialNumber: syz [ 587.120140][ T5981] usb 5-1: 0:2 : does not exist [ 587.125981][ T5981] usb 5-1: unit 9 not found! [ 587.131377][ T5955] usb 6-1: config 0 descriptor?? [ 587.140587][ T5981] usb 5-1: 4:0: cannot get min/max values for control 1 (id 4) [ 587.148878][ T5955] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 587.160904][ T5981] usb 5-1: 4:0: cannot get min/max values for control 3 (id 4) [ 587.171531][ T5981] usb 5-1: 4:0: cannot get min/max values for control 4 (id 4) [ 587.191159][ T5981] usb 5-1: USB disconnect, device number 69 [ 587.213239][T10611] udevd[10611]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 587.341035][ T5955] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 587.353201][ T5955] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 587.541651][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 587.678371][T13141] syzkaller1: entered promiscuous mode [ 587.683874][T13141] syzkaller1: entered allmulticast mode [ 587.686894][T13143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2123'. [ 587.699884][T13143] openvswitch: netlink: Flow key attr not present in new flow. [ 587.742411][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 587.751398][ T43] usb 6-1: USB disconnect, device number 30 [ 587.784290][ T43] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 587.821905][ T43] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 587.848477][ T43] quatech2 6-1:0.51: device disconnected [ 588.369111][T13163] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 588.375479][T13163] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 588.381665][T13163] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 588.387776][T13163] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 588.395020][T13163] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 588.684845][ T5915] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 588.756179][T13169] syzkaller1: entered promiscuous mode [ 588.761662][T13169] syzkaller1: entered allmulticast mode [ 588.834717][ T5915] usb 6-1: Using ep0 maxpacket: 8 [ 588.841710][ T5915] usb 6-1: unable to get BOS descriptor or descriptor too short [ 588.856651][ T5915] usb 6-1: too many endpoints for config 4 interface 0 altsetting 129: 244, using maximum allowed: 30 [ 588.868163][ T5915] usb 6-1: config 4 interface 0 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 244 [ 588.881753][ T5915] usb 6-1: config 4 interface 0 has no altsetting 0 [ 588.894410][ T5915] usb 6-1: string descriptor 0 read error: -22 [ 588.900851][ T5915] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 588.909963][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.932150][ T5915] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 588.957686][ T5915] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 588.972123][ T5915] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 588.979402][ T5915] usb 6-1: media controller created [ 588.999103][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 589.123273][ T43] usb 4-1: USB disconnect, device number 4 [ 589.157109][ T30] audit: type=1400 audit(1758432840.222:111): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A795A4E1B7BECD2543EC2D092C65286C4BBE16D3A20ABA4E90E7EB793B4303071EC6FECDBAD2F9C11C542FBF675E0FCC159675C53844E3AC9BCF54C9E22BDAE5E4A6CBCCD5436A558D6074B49815199D10832FB3B3488E4DE26F591293E566D4325249E7127CFC8225FD6A21AAD8EFF5E8F6CD2E2ACF7C2D24ECC73BE6D0AAF2993C5340330783030303030303030303030303030303330783030303030303030303030303030303303 pid=13174 comm="syz.3.2135" [ 589.190900][T13176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.217581][T13176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.217958][ T5981] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 589.305752][T13180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.314562][T13180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.364760][ T5981] usb 5-1: device descriptor read/64, error -71 [ 589.605677][ T5981] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 589.613309][ T43] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 589.745523][ T5981] usb 5-1: device descriptor read/64, error -71 [ 589.764717][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 589.771348][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.782367][ T43] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 589.791480][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.802413][ T43] usb 4-1: config 0 descriptor?? [ 589.855217][ T5981] usb usb5-port1: attempt power cycle [ 590.066025][ T5915] zl10353_read_register: readreg error (reg=127, ret==0) [ 590.104122][ T5915] usb 6-1: USB disconnect, device number 31 [ 590.194763][ T5981] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 590.211193][T13179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2136'. [ 590.219058][ T5981] usb 5-1: device descriptor read/8, error -71 [ 590.288795][ T43] mcp2221 0003:04D8:00DD.0033: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 590.374810][T11188] Bluetooth: hci1: command 0x0c1a tx timeout [ 590.454758][T11188] Bluetooth: hci3: command 0x0c1a tx timeout [ 590.454820][ T5871] Bluetooth: hci2: command 0x0406 tx timeout [ 590.465005][ T5981] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 590.484886][T13179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.493870][T13179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.496724][ T5981] usb 5-1: device descriptor read/8, error -71 [ 590.618919][ T5981] usb usb5-port1: unable to enumerate USB device [ 590.707708][ T5915] usb 4-1: USB disconnect, device number 5 [ 590.954754][ T5981] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 591.027722][T13193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.037485][T13193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.104730][ T5981] usb 6-1: Using ep0 maxpacket: 32 [ 591.111182][ T5981] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 591.119286][ T5981] usb 6-1: config 0 has no interface number 0 [ 591.127731][ T5981] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 591.136859][ T5981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.144966][ T5981] usb 6-1: Product: syz [ 591.149125][ T5981] usb 6-1: Manufacturer: syz [ 591.153699][ T5981] usb 6-1: SerialNumber: syz [ 591.160387][ T5981] usb 6-1: config 0 descriptor?? [ 591.168382][ T5981] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 591.279488][T13195] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2141'. [ 591.371002][ T5981] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 591.383121][ T5981] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 591.544739][ T5982] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 591.696293][ T5982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.707230][ T5982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.717085][ T5982] usb 4-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 591.727085][ T5982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.738314][ T5982] usb 4-1: config 0 descriptor?? [ 591.770826][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 591.778782][ T43] usb 6-1: USB disconnect, device number 32 [ 591.789078][ T43] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 591.804353][ T43] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 591.816511][ T43] quatech2 6-1:0.51: device disconnected [ 592.156442][ T5982] hid-led 0003:04D8:F372.0034: unknown main item tag 0x0 [ 592.164254][ T5982] hid-led 0003:04D8:F372.0034: unknown main item tag 0x0 [ 592.172399][ T5982] hid-led 0003:04D8:F372.0034: unknown main item tag 0x0 [ 592.189789][ T5982] hid-led 0003:04D8:F372.0034: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.3-1/input0 [ 592.313761][ T5982] hid-led 0003:04D8:F372.0034: Greynut Luxafor initialized [ 592.360314][ T5999] usb 4-1: USB disconnect, device number 6 [ 592.398221][ T1153] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 592.421815][ T1153] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 592.435817][ T1153] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 592.443513][T13202] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2143'. [ 592.456725][ T1153] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 592.473204][ T1153] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 592.486053][ T1153] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 592.507782][ T4587] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 592.521728][ T4587] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 592.541008][ T5871] Bluetooth: hci3: command 0x0c1a tx timeout [ 592.541198][ T4587] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 592.577333][ T4587] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 592.592932][ T1114] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 592.602116][T13206] netlink: 'syz.5.2146': attribute type 16 has an invalid length. [ 592.611509][T13206] netlink: 'syz.5.2146': attribute type 25 has an invalid length. [ 592.613086][ T1114] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 592.627687][T13206] netlink: 64094 bytes leftover after parsing attributes in process `syz.5.2146'. [ 592.641754][ T1114] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 592.662662][ T1114] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 592.680588][ T1114] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 592.682914][T13214] bad cache= option: none’[()bvتr [ 592.682914][T13214] ÜÙŸ »9Š;Ñ^ЬdÈ!å/™ê­7u\“—ÀÝ´ßMÙDÿÒ¥eYÿoî ˜–“­PÙ50œeÂB>KÜX’/¤æÆTJ*Ÿ)—J¨ý(ÔÅ)Õ€¶˜‘Kœ’¼÷™óµÌfË5&‹˜€Lq¾¼q£2ÞWµhWd¸çÂ0 [ 592.682914][T13214] [ 592.712909][T13214] CIFS: VFS: bad cache= option: none’[()bvتr [ 592.712909][T13214] ÜÙŸ »9Š;Ñ^ЬdÈ!å/™ê­7u\“—ÀÝ´ßMÙDÿÒ¥eYÿoî ˜–“­PÙ50œeÂB>KÜX’/¤æÆTJ*Ÿ)—J¨ý(ÔÅ)Õ€¶˜‘Kœ’¼÷™óµÌfË5&‹˜€Lq¾¼q£2ÞWµhWd¸çÂ0 [ 592.713484][ T1153] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 592.768410][ T1153] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 592.781678][ T4587] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 592.791145][T13219] overlay: Unknown parameter 'measure' [ 592.807842][T13221] overlay: Unknown parameter 'measure' [ 593.114815][ T5982] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 593.134728][ T5915] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 593.264724][ T5982] usb 5-1: Using ep0 maxpacket: 32 [ 593.271788][ T5982] usb 5-1: config 1 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 593.284991][ T5982] usb 5-1: config 1 interface 0 has no altsetting 0 [ 593.293578][ T5982] usb 5-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40 [ 593.302751][ T5982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.310842][ T5982] usb 5-1: Product: syz [ 593.315151][ T5982] usb 5-1: Manufacturer: syz [ 593.317316][ T5915] usb 6-1: Using ep0 maxpacket: 32 [ 593.320110][ T5982] usb 5-1: SerialNumber: syz [ 593.331542][ T5915] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 593.341241][ T5915] usb 6-1: config 0 has no interface number 0 [ 593.344846][ T43] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 593.349756][ T5915] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 593.363951][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.372223][ T5915] usb 6-1: Product: syz [ 593.376442][ T5915] usb 6-1: Manufacturer: syz [ 593.381034][ T5915] usb 6-1: SerialNumber: syz [ 593.388602][ T5915] usb 6-1: config 0 descriptor?? [ 593.396358][ T5915] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 593.506322][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 593.516638][ T43] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 593.526204][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.547274][ T43] usb 4-1: config 0 descriptor?? [ 593.554098][ T5982] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input61 [ 593.565723][ T43] pwc: Askey VC010 type 2 USB webcam detected. [ 593.573895][ T5221] bcm5974 5-1:1.0: could not read from device [ 593.586459][ T5221] bcm5974 5-1:1.0: could not read from device [ 593.593534][ T5221] bcm5974 5-1:1.0: could not read from device [ 593.601120][ T5982] usb 5-1: USB disconnect, device number 74 [ 593.609097][ T5221] bcm5974 5-1:1.0: could not read from device [ 593.617013][ T5915] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 593.636601][ T5915] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 593.756223][T13238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.765736][T13238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.775769][T13238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.784454][T13238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.793391][T13238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.802717][T13238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.811877][T13238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.821363][T13238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.830958][T13238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.840049][T13238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.855716][ T43] pwc: recv_control_msg error -32 req 02 val 2b00 [ 593.879139][ T43] pwc: recv_control_msg error -71 req 02 val 2700 [ 593.892862][ T43] pwc: recv_control_msg error -71 req 02 val 2c00 [ 593.900472][ T43] pwc: recv_control_msg error -71 req 04 val 1000 [ 593.907624][ T43] pwc: recv_control_msg error -71 req 04 val 1300 [ 593.915107][ T43] pwc: recv_control_msg error -71 req 04 val 1400 [ 593.925451][ T43] pwc: recv_control_msg error -71 req 02 val 2000 [ 593.933604][ T43] pwc: recv_control_msg error -71 req 02 val 2100 [ 593.940777][ T43] pwc: recv_control_msg error -71 req 04 val 1500 [ 593.947892][ T43] pwc: recv_control_msg error -71 req 02 val 2500 [ 593.955953][ T43] pwc: recv_control_msg error -71 req 02 val 2400 [ 593.962915][ T43] pwc: recv_control_msg error -71 req 02 val 2600 [ 593.970154][ T43] pwc: recv_control_msg error -71 req 02 val 2900 [ 593.977351][ T43] pwc: recv_control_msg error -71 req 02 val 2800 [ 593.984381][ T43] pwc: recv_control_msg error -71 req 04 val 1100 [ 593.991825][ T43] pwc: recv_control_msg error -71 req 04 val 1200 [ 594.005482][ T43] pwc: Registered as video103. [ 594.018121][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 594.022519][ T43] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input62 [ 594.026129][ T5915] usb 6-1: USB disconnect, device number 33 [ 594.081487][ T43] usb 4-1: USB disconnect, device number 7 [ 594.128780][ T5915] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 594.138763][T13250] netlink: 'syz.3.2157': attribute type 12 has an invalid length. [ 594.188222][ T5915] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 594.207694][ T5915] quatech2 6-1:0.51: device disconnected [ 594.291319][T13256] syzkaller1: entered promiscuous mode [ 594.297785][T13256] syzkaller1: entered allmulticast mode [ 594.584780][ T43] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 594.624827][ T5871] Bluetooth: hci3: command 0x0c1a tx timeout [ 594.715823][ T43] usb 4-1: device descriptor read/64, error -71 [ 594.894850][ T5981] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 594.986540][ T43] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 595.054724][ T5981] usb 6-1: Using ep0 maxpacket: 32 [ 595.062463][ T5981] usb 6-1: unable to get BOS descriptor or descriptor too short [ 595.071478][ T5981] usb 6-1: config 10 has an invalid interface number: 110 but max is 0 [ 595.080112][ T5981] usb 6-1: config 10 has no interface number 0 [ 595.089302][ T5981] usb 6-1: string descriptor 0 read error: -22 [ 595.095750][ T5981] usb 6-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice=4b.e5 [ 595.104820][ T5981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.125037][ T43] usb 4-1: device descriptor read/64, error -71 [ 595.234955][ T43] usb usb4-port1: attempt power cycle [ 595.318977][T13273] (syz.5.2166,13273,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 595.331805][T13273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.340658][T13273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.356133][ T5999] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 595.365232][ T5981] usb 6-1: USB disconnect, device number 34 [ 595.401021][T13286] syzkaller1: entered promiscuous mode [ 595.407871][T13286] syzkaller1: entered allmulticast mode [ 595.526381][ T5999] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 595.537591][ T5999] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 595.550003][ T5999] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 595.559569][ T5999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 595.567915][ T5999] usb 5-1: SerialNumber: syz [ 595.574727][ T43] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 595.595115][ T43] usb 4-1: device descriptor read/8, error -71 [ 595.824786][ T5915] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 595.834930][ T43] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 595.855280][ T43] usb 4-1: device descriptor read/8, error -71 [ 595.964981][ T43] usb usb4-port1: unable to enumerate USB device [ 595.985843][ T5915] usb 6-1: Using ep0 maxpacket: 32 [ 595.993008][ T5915] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 596.001572][ T5915] usb 6-1: config 0 has no interface number 0 [ 596.007825][ T5915] usb 6-1: config 0 interface 184 has no altsetting 0 [ 596.016936][ T5915] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 596.026123][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.034124][ T5915] usb 6-1: Product: syz [ 596.038603][ T5915] usb 6-1: Manufacturer: syz [ 596.043212][ T5915] usb 6-1: SerialNumber: syz [ 596.050607][ T5915] usb 6-1: config 0 descriptor?? [ 596.058157][ T5915] smsc75xx v1.0.0 [ 597.104064][ T5915] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 597.115468][ T5915] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 597.125233][ T5915] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 597.136122][ T5915] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 597.146773][ T5915] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 597.158666][ T5915] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 597.168512][ T5915] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 597.182850][ T5915] usb 6-1: USB disconnect, device number 35 [ 597.315411][T13293] overlayfs: failed to resolve './bus': -2 [ 597.414794][T13297] binder: 13296:13297 ioctl 660c 0 returned -22 [ 597.427163][T13297] binder: 13296:13297 ioctl 5412 200000000100 returned -22 [ 598.016102][ T5999] usb 5-1: 0:2 : does not exist [ 598.044391][ T5999] usb 5-1: USB disconnect, device number 75 [ 598.060055][ T5862] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 598.089833][T10611] udevd[10611]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 598.127431][T13311] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 598.224892][ T5862] usb 6-1: Using ep0 maxpacket: 16 [ 598.232048][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.243131][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.252899][ T5862] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 598.265988][ T5862] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 598.275146][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.289484][ T5862] usb 6-1: config 0 descriptor?? [ 598.308815][T13313] syzkaller1: entered promiscuous mode [ 598.314344][T13313] syzkaller1: entered allmulticast mode [ 598.474885][ T5999] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 598.636539][ T5999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 598.646665][ T5999] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 598.654799][ T43] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 598.656406][ T5999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 598.673618][ T5999] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 598.683391][ T5999] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 598.692470][ T5999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.702987][ T5999] usb 5-1: config 0 descriptor?? [ 598.715103][ T5862] usbhid 6-1:0.0: can't add hid device: -71 [ 598.724426][ T5862] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 598.734995][ T5862] usb 6-1: USB disconnect, device number 36 [ 598.814681][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 598.821358][ T43] usb 4-1: config 1 interface 0 altsetting 82 bulk endpoint 0x82 has invalid maxpacket 8 [ 598.832091][ T43] usb 4-1: config 1 interface 0 altsetting 82 bulk endpoint 0x3 has invalid maxpacket 1023 [ 598.843077][ T43] usb 4-1: config 1 interface 0 has no altsetting 0 [ 598.852146][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 598.861994][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.870049][ T43] usb 4-1: Product: syz [ 598.874212][ T43] usb 4-1: Manufacturer: ä›ê﫡믱薊쩂擭뵉䥾ꉜ욑踮綎몪ꢱ跧闕♾薩ã­á¸»äœ¿î†±ï‹â–›áƒ‡æŽªâ§†ì”¨é‹ï‚µç”춇è‹ãƒ³ë¸‡ë“ä³í”‡ä·‹è‹Žá˜­à®‡ïŒèžë¨â’µæ²£á‚’訩蓋涫ȡ뎔尋冎ⶦ긻᫶㨂喯険ã–⽫䲖⋀䥘듷勳âµì´±ï¼œî¢˜ã•䦹꽡⊒µᜰ炊9풼á™ê‹¡ [ 598.902255][ T43] usb 4-1: SerialNumber: syz [ 598.910510][T13315] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 598.915605][T13311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.918370][T13315] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 598.930729][T13311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.945211][ T5999] hdpvr 5-1:0.0: unexpected answer of status request, len -71 [ 598.954850][ T5999] hdpvr 5-1:0.0: device init failed [ 598.960101][ T5999] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 598.972227][ T5999] usb 5-1: USB disconnect, device number 76 [ 599.148823][T13315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.158778][T13315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.172055][ T43] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 599.184325][ T43] usb 4-1: USB disconnect, device number 12 [ 599.248243][T13317] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 599.254784][T13317] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 599.262918][T13317] vhci_hcd vhci_hcd.0: Device attached [ 599.435098][ T5981] vhci_hcd: vhci_device speed not set [ 599.494884][ T5981] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 599.495971][T13321] netlink: 'syz.4.2183': attribute type 64 has an invalid length. [ 599.510437][ T5999] usb 6-1: new low-speed USB device number 37 using dummy_hcd [ 599.511276][T13321] netlink: 'syz.4.2183': attribute type 4 has an invalid length. [ 599.526213][T13321] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2183'. [ 599.573920][T13323] tmpfs: Bad value for 'mpol' [ 599.676411][ T5999] usb 6-1: config 0 has no interfaces? [ 599.682032][ T5999] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 599.691409][ T5999] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.702595][ T5999] usb 6-1: config 0 descriptor?? [ 599.814901][ T43] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 599.921289][T13318] usbip_core: unknown command [ 599.924770][ T5982] usb 6-1: USB disconnect, device number 37 [ 599.936798][T13318] vhci_hcd: unknown pdu 50333440 [ 599.941825][T13318] usbip_core: unknown command [ 599.947057][ T1153] vhci_hcd: stop threads [ 599.951657][ T1153] vhci_hcd: release socket [ 599.958520][ T1153] vhci_hcd: disconnect device [ 599.967084][ T43] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 599.980402][ T43] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 599.995746][ T43] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 600.004953][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.012952][ T43] usb 5-1: Product: syz [ 600.018625][ T43] usb 5-1: Manufacturer: syz [ 600.023231][ T43] usb 5-1: SerialNumber: syz [ 600.032779][ T43] usb 5-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 600.075116][ T5999] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 600.236889][ T5999] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.246762][ T5999] usb 4-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 600.255829][ T5999] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.266344][ T5999] usb 4-1: config 0 descriptor?? [ 600.520240][T13332] binder: 13331:13332 ioctl c0306201 200000000080 returned -14 [ 600.682866][ T5999] wacom 0003:056A:0000.0035: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 600.697685][ T5999] wacom 0003:056A:0000.0035: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.3-1/input0 [ 600.715801][ T5999] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0000.0035/input/input63 [ 600.825951][ T5862] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 600.882279][T13330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.891209][T13330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.907273][T13330] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2186'. [ 600.917634][T13330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.926671][T13330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.938729][ T43] usb 4-1: USB disconnect, device number 13 [ 600.964779][ T5862] usb 6-1: device descriptor read/64, error -71 [ 601.204712][ T5862] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 601.354700][ T5862] usb 6-1: device descriptor read/64, error -71 [ 601.465044][ T5862] usb usb6-port1: attempt power cycle [ 601.471185][T13338] syzkaller1: entered promiscuous mode [ 601.476795][T13338] syzkaller1: entered allmulticast mode [ 601.583829][T13343] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2191'. [ 601.598059][T13343] hsr_slave_0: left promiscuous mode [ 601.606105][T13343] hsr_slave_1: left promiscuous mode [ 601.748698][T13347] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2192'. [ 601.824769][ T5862] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 601.845838][ T5862] usb 6-1: device descriptor read/8, error -71 [ 601.994718][ T43] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 602.094723][ T5862] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 602.115609][ T5862] usb 6-1: device descriptor read/8, error -71 [ 602.145897][ T43] usb 4-1: config 2 has an invalid interface number: 201 but max is 0 [ 602.154088][ T43] usb 4-1: config 2 has no interface number 0 [ 602.160828][ T43] usb 4-1: config 2 interface 201 has no altsetting 0 [ 602.169517][ T43] usb 4-1: New USB device found, idVendor=05ac, idProduct=c712, bcdDevice=9d.92 [ 602.178641][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.186678][ T43] usb 4-1: Product: syz [ 602.190837][ T43] usb 4-1: Manufacturer: syz [ 602.195523][ T43] usb 4-1: SerialNumber: syz [ 602.226244][ T5862] usb usb6-port1: unable to enumerate USB device [ 602.415446][ T43] usb 4-1: USB disconnect, device number 14 [ 602.580813][ T5862] usb 5-1: USB disconnect, device number 77 [ 602.613295][T13352] sctp: [Deprecated]: syz.4.2193 (pid 13352) Use of int in maxseg socket option. [ 602.613295][T13352] Use struct sctp_assoc_value instead [ 603.074403][T13370] syzkaller1: entered promiscuous mode [ 603.079996][ T5862] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 603.080030][T13370] syzkaller1: entered allmulticast mode [ 603.248125][ T5862] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 603.257742][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.266084][ T5862] usb 5-1: Product: syz [ 603.270233][ T5862] usb 5-1: Manufacturer: syz [ 603.274858][ T5862] usb 5-1: SerialNumber: syz [ 603.285026][ T5862] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 603.300920][ T10] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 603.444795][ T5862] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 603.606708][ T5862] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 603.618896][ T5862] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 603.628190][ T5862] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 603.639418][ T5862] usb 4-1: config 0 interface 0 has no altsetting 0 [ 603.648294][ T5862] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 603.661511][ T5862] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 603.672646][ T5862] usb 4-1: config 0 interface 0 has no altsetting 0 [ 603.681074][ T5862] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 603.690546][ T5862] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 603.701784][ T5862] usb 4-1: config 0 interface 0 has no altsetting 0 [ 603.704171][T13377] kvm: pic: non byte write [ 603.710304][ T5862] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 603.722183][ T5862] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 603.734312][ T5862] usb 4-1: config 0 interface 0 has no altsetting 0 [ 603.742728][ T5862] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 603.751820][ T5862] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 603.763242][ T5862] usb 4-1: config 0 interface 0 has no altsetting 0 [ 603.772054][ T5862] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 603.781064][ T5862] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 603.791989][ T5862] usb 4-1: config 0 interface 0 has no altsetting 0 [ 603.800269][ T5862] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 603.809437][ T5862] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 603.821360][ T5862] usb 4-1: config 0 interface 0 has no altsetting 0 [ 603.862206][ T5862] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 603.871931][ T5862] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 603.883311][ T5862] usb 4-1: config 0 interface 0 has no altsetting 0 [ 603.892900][T13380] (syz.2.2202,13380,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 603.903248][T13380] (syz.2.2202,13380,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 603.913236][ T5862] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 603.916341][ T43] usb 5-1: USB disconnect, device number 78 [ 603.932052][ T5862] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 603.940974][ T5862] usb 4-1: Product: syz [ 603.945428][ T5862] usb 4-1: Manufacturer: syz [ 603.950025][ T5862] usb 4-1: SerialNumber: syz [ 603.966310][ T5862] usb 4-1: config 0 descriptor?? [ 603.996535][ T5862] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 604.127660][T13394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.139825][T13394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.281395][T13397] program syz.3.2199 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 604.282976][ C0] usb 4-1: yurex_control_callback - control failed: -2 [ 604.313892][ T5955] usb 4-1: USB disconnect, device number 15 [ 604.327130][ T5955] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 604.364809][ T5982] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 604.447705][T13406] syzkaller1: entered promiscuous mode [ 604.453248][T13406] syzkaller1: entered allmulticast mode [ 604.514765][ T5982] usb 6-1: Using ep0 maxpacket: 32 [ 604.521378][ T5982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.532663][ T5982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.543882][ T5982] usb 6-1: New USB device found, idVendor=1b96, idProduct=000c, bcdDevice= 0.00 [ 604.553209][ T5982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.563727][ T10] usb 5-1: Service connection timeout for: 256 [ 604.565507][ T5982] usb 6-1: config 0 descriptor?? [ 604.570792][ T10] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 604.588254][ T10] ath9k_htc: Failed to initialize the device [ 604.600185][ T43] usb 5-1: ath9k_htc: USB layer deinitialized [ 604.606987][ T5981] vhci_hcd: vhci_device speed not set [ 604.646414][T13408] lo speed is unknown, defaulting to 1000 [ 604.664756][ T5955] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 604.801211][ T5982] usbhid 6-1:0.0: can't add hid device: -71 [ 604.807828][ T5982] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 604.824950][ T5982] usb 6-1: USB disconnect, device number 42 [ 604.834756][ T5955] usb 4-1: Using ep0 maxpacket: 32 [ 604.843563][ T5955] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 604.858827][ T5955] usb 4-1: config 0 has no interface number 0 [ 604.872577][ T5955] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 604.884633][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.892999][ T5955] usb 4-1: Product: syz [ 604.898042][ T5955] usb 4-1: Manufacturer: syz [ 604.902638][ T5955] usb 4-1: SerialNumber: syz [ 604.911834][ T5955] usb 4-1: config 0 descriptor?? [ 604.925601][ T5955] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 605.124044][ T5955] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 605.158374][ T5955] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 605.376446][ T5915] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 605.524237][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 605.524555][ T10] usb 4-1: USB disconnect, device number 16 [ 605.537832][ T5915] usb 5-1: Using ep0 maxpacket: 32 [ 605.548735][ T5915] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 605.560763][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 605.573571][ T5915] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 605.585257][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.593817][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 605.596529][ T5955] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 605.605797][ T5915] usb 5-1: Product: syz [ 605.617466][ T5915] usb 5-1: Manufacturer: syz [ 605.622064][ T5915] usb 5-1: SerialNumber: syz [ 605.627435][ T10] quatech2 4-1:0.51: device disconnected [ 605.639253][ T5915] usb 5-1: config 0 descriptor?? [ 605.650475][ T5915] cdc_ether 5-1:0.0: probe with driver cdc_ether failed with error -22 [ 605.659765][ T5915] usb 5-1: unsupported MDLM descriptors [ 605.764712][ T5955] usb 6-1: Using ep0 maxpacket: 32 [ 605.771575][ T5955] usb 6-1: config 0 has an invalid interface number: 247 but max is 0 [ 605.779870][ T5955] usb 6-1: config 0 has no interface number 0 [ 605.787877][ T5955] usb 6-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 605.797089][ T5955] usb 6-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 605.805163][ T5955] usb 6-1: Product: syz [ 605.809636][ T5955] usb 6-1: Manufacturer: syz [ 605.817786][ T5955] usb 6-1: config 0 descriptor?? [ 605.852908][T13413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.861728][T13413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.871985][ T5955] usb 5-1: USB disconnect, device number 79 [ 606.100650][ T10] usb 6-1: USB disconnect, device number 43 [ 606.565107][ T10] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 606.634748][ T5981] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 606.695595][T13435] syzkaller1: entered promiscuous mode [ 606.701089][T13435] syzkaller1: entered allmulticast mode [ 606.718811][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 606.727447][ T10] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 606.735965][ T10] usb 6-1: config 0 has no interface number 0 [ 606.744082][ T10] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 606.753360][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.761418][ T10] usb 6-1: Product: syz [ 606.765879][ T10] usb 6-1: Manufacturer: syz [ 606.770457][ T10] usb 6-1: SerialNumber: syz [ 606.779881][ T10] usb 6-1: config 0 descriptor?? [ 606.787121][ T10] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 606.796604][ T5981] usb 5-1: Using ep0 maxpacket: 8 [ 606.803499][ T5981] usb 5-1: config 1 interface 0 has no altsetting 0 [ 606.813336][ T5981] usb 5-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40 [ 606.822884][ T5981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.831532][ T5981] usb 5-1: Product: syz [ 606.836781][ T5981] usb 5-1: Manufacturer: syz [ 606.841388][ T5981] usb 5-1: SerialNumber: syz [ 606.986695][T13431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.995620][T13431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.004310][T13431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.013383][T13431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.023247][T13431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.033440][T13431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.045486][T13431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.054350][T13431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.068008][ T5981] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input67 [ 607.079340][T13431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.090000][T13431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.100527][ T5862] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 607.110049][ T5221] bcm5974 5-1:1.0: could not read from device [ 607.122089][ T5221] bcm5974 5-1:1.0: could not read from device [ 607.135641][ T5981] usb 5-1: USB disconnect, device number 80 [ 607.265412][ T5862] usb 4-1: Using ep0 maxpacket: 8 [ 607.271770][ T5862] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.283009][ T5862] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.293767][ T5862] usb 4-1: config 0 interface 0 has no altsetting 0 [ 607.300830][ T5862] usb 4-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 607.309989][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.320286][ T5862] usb 4-1: config 0 descriptor?? [ 607.647641][ T10] gspca_spca1528: reg_w err -110 [ 607.664923][ T10] spca1528 6-1:0.1: probe with driver spca1528 failed with error -110 [ 607.735542][T13437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.744306][T13437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.956190][ T5862] usbhid 4-1:0.0: can't add hid device: -71 [ 607.963052][ T5862] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 607.975947][ T5862] usb 4-1: USB disconnect, device number 17 [ 608.638619][T13462] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2228'. [ 608.822220][T13471] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 608.959403][T13476] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2233'. [ 608.995291][ T5862] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 609.144771][ T5862] usb 5-1: Using ep0 maxpacket: 32 [ 609.151743][ T5862] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 609.161890][ T5862] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 609.171749][ T5862] usb 5-1: config 0 has no interface number 0 [ 609.179505][ T5862] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 609.190099][ T5862] usb 5-1: config 0 has no interface number 0 [ 609.197883][ T5862] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 609.206286][ T5862] usb 5-1: config 0 has no interface number 0 [ 609.214057][ T5862] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 609.222727][ T5862] usb 5-1: config 0 has no interface number 0 [ 609.230522][ T5862] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 609.239189][ T5862] usb 5-1: config 0 has no interface number 0 [ 609.247858][ T5862] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 609.256705][ T5862] usb 5-1: config 0 has no interface number 0 [ 609.263954][ T5862] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 609.272625][ T5862] usb 5-1: config 0 has no interface number 0 [ 609.280356][ T5862] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 609.283141][ T5955] usb 6-1: USB disconnect, device number 44 [ 609.289021][ T5862] usb 5-1: config 0 has no interface number 0 [ 609.310811][ T5862] usb 5-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 609.320236][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.328575][ T5862] usb 5-1: Product: syz [ 609.332850][ T5862] usb 5-1: Manufacturer: syz [ 609.338743][ T5862] usb 5-1: SerialNumber: syz [ 609.346650][ T5862] usb 5-1: config 0 descriptor?? [ 609.353883][ T5862] etas_es58x 5-1:0.2: Starting syz syz (Serial Number syz) [ 609.564758][ T5862] etas_es58x 5-1:0.2: could not parse product info: '424242424242' [ 609.774759][ T5955] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 609.924732][ T5955] usb 6-1: Using ep0 maxpacket: 32 [ 609.946062][ T5955] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 609.967126][ T5955] usb 6-1: config 0 has no interface number 0 [ 609.973254][ T5955] usb 6-1: config 0 interface 184 has no altsetting 0 [ 609.998416][ T5955] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 610.008329][ T5955] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.019010][ C1] etas_es58x 5-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x6280. [ 610.030220][ C1] etas_es58x 5-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 610.038219][ C1] etas_es58x 5-1:0.2: es58x_split_urb() returned error -EBADMSG [ 610.046319][ T5955] usb 6-1: Product: syz [ 610.050484][ T5955] usb 6-1: Manufacturer: syz [ 610.056599][ C1] etas_es58x 5-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x4FB7. [ 610.056856][ C1] etas_es58x 5-1:0.2: es58x_check_rx_urb: Biggest expected size for rx urb_cmd is 7809 but receive a command of size 48977 [ 610.056891][ C1] etas_es58x 5-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 610.056908][ C1] etas_es58x 5-1:0.2: es58x_split_urb() returned error -EBADMSG [ 610.060182][ T5531] etas_es58x 5-1:0.2 can1: bit-timing not yet defined [ 610.068027][ C1] etas_es58x 5-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 610.068061][ C1] etas_es58x 5-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 610.068078][ C1] etas_es58x 5-1:0.2: es58x_split_urb() returned error -EBADMSG [ 610.068957][ T5955] usb 6-1: SerialNumber: syz [ 610.137655][ T5955] usb 6-1: config 0 descriptor?? [ 610.145099][ T5955] smsc75xx v1.0.0 [ 610.297371][T13505] netlink: 'syz.2.2238': attribute type 1 has an invalid length. [ 610.306646][T13505] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2238'. [ 610.329383][ C1] etas_es58x 5-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 610.338603][ C1] etas_es58x 5-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 610.347773][ C1] etas_es58x 5-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 610.356944][ C1] etas_es58x 5-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 610.366114][ C1] etas_es58x 5-1:0.2 can0: es58x_write_bulk_callback: error -EPROTO [ 610.376054][ C1] etas_es58x 5-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 610.386219][ T5981] usb 5-1: USB disconnect, device number 81 [ 610.394377][ T5981] etas_es58x 5-1:0.2: Disconnecting syz syz [ 610.402584][ T5531] etas_es58x 5-1:0.2 can1: es58x_open: Could not open the network device: -EINVAL [ 610.734734][ T5862] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 610.811697][ T5955] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 610.822711][ T5955] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 610.886421][ T5862] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 610.894448][ T5862] usb 4-1: config 0 has no interface number 0 [ 610.903538][ T5862] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 610.913147][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.921509][ T5862] usb 4-1: Product: syz [ 610.926013][ T5862] usb 4-1: Manufacturer: syz [ 610.931185][ T5862] usb 4-1: SerialNumber: syz [ 610.946233][ T5862] usb 4-1: config 0 descriptor?? [ 611.000969][T13527] tmpfs: Bad value for 'mpol' [ 611.150477][ T30] audit: type=1326 audit(1758432862.212:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13529 comm="syz.4.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6abab8ec29 code=0x7fc00000 [ 611.210740][T13535] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2244'. [ 611.222845][T13535] binder: BINDER_SET_CONTEXT_MGR already set [ 611.229376][T13535] binder: 13534:13535 ioctl 4018620d 200000000040 returned -16 [ 611.231071][ T5955] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 611.252255][ T5955] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 611.254809][ T5862] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 611.261949][ T5955] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 611.283143][ T5955] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 611.293788][ T5862] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 611.317915][ T5862] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 611.331038][ T5862] usb 4-1: media controller created [ 611.347698][ T5862] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 611.453811][T13536] binder: 13508:13536 ioctl c018620c 200000000640 returned -22 [ 611.554723][ T5955] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 611.704708][ T5955] usb 5-1: Using ep0 maxpacket: 8 [ 611.711326][ T5955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 611.723099][ T5955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 611.732852][ T5955] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 611.742604][ T5955] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 49 [ 611.752852][ T5955] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 611.761982][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.772900][ T5955] usb 5-1: config 0 descriptor?? [ 611.778786][T13538] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 612.189377][T13538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.198166][T13538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.223894][ T5862] usb 5-1: USB disconnect, device number 82 [ 612.226426][ T5871] Bluetooth: hci4: Opcode 0x0c03 failed: -19 [ 612.544287][ T10] usb 6-1: USB disconnect, device number 45 [ 612.594717][ T5862] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 612.754766][ T5862] usb 5-1: Using ep0 maxpacket: 32 [ 612.761378][ T5862] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 612.769708][ T5862] usb 5-1: config 0 has no interface number 0 [ 612.780202][ T5862] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 612.789302][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.797341][ T5862] usb 5-1: Product: syz [ 612.801494][ T5862] usb 5-1: Manufacturer: syz [ 612.806223][ T5862] usb 5-1: SerialNumber: syz [ 612.813241][ T5862] usb 5-1: config 0 descriptor?? [ 612.820714][ T5862] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 612.944826][ T10] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 613.023869][ T5862] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 613.039939][ T5862] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 613.116970][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 613.125688][ T10] usb 6-1: config 13 has an invalid interface number: 120 but max is 0 [ 613.133979][ T10] usb 6-1: config 13 has no interface number 0 [ 613.140219][ T10] usb 6-1: config 13 interface 120 has no altsetting 0 [ 613.149409][ T10] usb 6-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=a1.c9 [ 613.158510][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.166671][ T10] usb 6-1: Product: syz [ 613.170835][ T10] usb 6-1: Manufacturer: syz [ 613.175772][ T10] usb 6-1: SerialNumber: syz [ 613.410590][ T10] usb 6-1: USB disconnect, device number 46 [ 613.427416][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 613.427880][ T5955] usb 5-1: USB disconnect, device number 83 [ 613.457660][ T5955] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 613.476232][ T5955] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 613.501045][T10498] udevd[10498]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:13.120/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 613.515560][ T5955] quatech2 5-1:0.51: device disconnected [ 613.530867][ T43] usb 4-1: USB disconnect, device number 18 [ 613.895261][ T43] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 614.045749][ T43] usb 4-1: not running at top speed; connect to a high speed hub [ 614.056834][ T43] usb 4-1: config 10 has an invalid interface number: 102 but max is 0 [ 614.065369][ T43] usb 4-1: config 10 has no interface number 0 [ 614.071556][ T43] usb 4-1: config 10 interface 102 altsetting 5 endpoint 0xB has invalid maxpacket 927, setting to 64 [ 614.082616][ T43] usb 4-1: config 10 interface 102 has no altsetting 0 [ 614.091614][ T43] usb 4-1: New USB device found, idVendor=9022, idProduct=d421, bcdDevice=c1.e2 [ 614.100742][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.109281][ T43] usb 4-1: Product: syz [ 614.113437][ T43] usb 4-1: Manufacturer: syz [ 614.118087][ T43] usb 4-1: SerialNumber: syz [ 614.225251][ T5955] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 614.338961][ T43] dvb-usb: found a 'TeVii S421 PCI' in warm state. [ 614.346117][ T43] dw2102: su3000_power_ctrl: 1, initialized 0 [ 614.352300][ T43] dvb-usb: bulk message failed: -22 (2/0) [ 614.362762][ T43] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 614.380037][ T43] dvb-usb: TeVii S421 PCI error while loading driver (-19) [ 614.389689][ T5955] usb 6-1: unable to get BOS descriptor or descriptor too short [ 614.402724][ T43] usb 4-1: USB disconnect, device number 19 [ 614.411387][ T5955] usb 6-1: not running at top speed; connect to a high speed hub [ 614.430902][ T5955] usb 6-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 614.464388][ T5955] usb 6-1: config 1 interface 0 has no altsetting 0 [ 614.475822][ T5955] usb 6-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.40 [ 614.486601][ T5955] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.495736][ T5955] usb 6-1: Product: syz [ 614.500038][ T5955] usb 6-1: Manufacturer: syz [ 614.506189][ T5955] usb 6-1: SerialNumber: syz [ 614.730424][ T5955] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input68 [ 614.749956][ T5221] bcm5974 6-1:1.0: could not read from device [ 614.778850][ T5221] bcm5974 6-1:1.0: could not read from device [ 614.789145][ T5955] usb 6-1: USB disconnect, device number 47 [ 614.845253][ T10] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 615.016403][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 615.027653][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 615.039197][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 615.052191][ T10] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 615.061319][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.069490][ T10] usb 5-1: Product: syz [ 615.073664][ T10] usb 5-1: Manufacturer: syz [ 615.078399][ T10] usb 5-1: SerialNumber: syz [ 615.085027][ T10] usb 5-1: config 0 descriptor?? [ 615.090562][T13572] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 615.098817][T13572] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 615.107507][ T10] usb 5-1: ucan: probing device on interface #0 [ 615.115770][ T5981] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 615.264757][ T5981] usb 4-1: Invalid ep0 maxpacket: 32 [ 615.308548][ T10] usb 5-1: ucan: could not read protocol version, ret=-71 [ 615.322931][ T10] usb 5-1: ucan: probe failed; try to update the device firmware [ 615.338987][ T10] usb 5-1: USB disconnect, device number 84 [ 615.395630][ T5981] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 615.404953][T13594] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2262'. [ 615.554749][ T5981] usb 4-1: Invalid ep0 maxpacket: 32 [ 615.560475][ T5981] usb usb4-port1: attempt power cycle [ 615.834715][ T10] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 615.904886][ T5981] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 615.925819][ T5981] usb 4-1: Invalid ep0 maxpacket: 32 [ 615.986731][ T10] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 615.996344][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.014808][ T10] usb 6-1: config 0 descriptor?? [ 616.064771][ T5981] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 616.100619][ T5981] usb 4-1: Invalid ep0 maxpacket: 32 [ 616.107337][ T5981] usb usb4-port1: unable to enumerate USB device [ 616.310708][ T10] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 616.511395][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 616.529785][ T10] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 616.536785][ T10] [drm] Initialized udl on minor 2 [ 616.543613][ T10] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 616.552057][ T10] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 616.561396][ T5862] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 616.571611][ T10] usb 6-1: USB disconnect, device number 48 [ 616.577960][ T5862] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 616.626406][ T5999] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 616.798161][ T5999] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 616.807431][ T5999] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.815864][ T5999] usb 5-1: Product: syz [ 616.820139][ T5999] usb 5-1: Manufacturer: syz [ 616.824805][ T5999] usb 5-1: SerialNumber: syz [ 616.834962][ T5999] r8152-cfgselector 5-1: Unknown version 0x0000 [ 616.841202][ T5999] r8152-cfgselector 5-1: config 0 descriptor?? [ 617.098778][ T5955] r8152-cfgselector 5-1: USB disconnect, device number 85 [ 618.030248][T13650] syzkaller1: entered promiscuous mode [ 618.039027][T13650] syzkaller1: entered allmulticast mode [ 618.304762][ T5999] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 618.456442][ T5999] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 618.466493][ T5999] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 618.474710][ T43] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 618.480888][ T5999] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 618.493065][ T5999] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.501154][ T5999] usb 5-1: Product: syz [ 618.505351][ T5999] usb 5-1: Manufacturer: syz [ 618.510254][ T5999] usb 5-1: SerialNumber: syz [ 618.517079][ T5999] usb 5-1: config 0 descriptor?? [ 618.522612][T13652] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 618.530049][T13652] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 618.636693][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 618.647776][ T43] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 618.660716][ T43] usb 6-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 618.669831][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.680483][ T43] usb 6-1: config 0 descriptor?? [ 618.686472][T13663] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 618.738409][T13652] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 618.746109][T13652] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 618.957162][ T5999] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 619.103255][ T43] hkems 0003:2006:0118.0036: unknown global tag 0xd [ 619.114825][ T43] hkems 0003:2006:0118.0036: item 0 4 1 13 parsing failed [ 619.123239][ T43] hkems 0003:2006:0118.0036: parse failed [ 619.131867][ T43] hkems 0003:2006:0118.0036: probe with driver hkems failed with error -22 [ 619.143734][T13671] IPVS: set_ctl: invalid protocol: 50 100.1.0.255:20003 [ 619.166372][T13652] random: crng reseeded on system resumption [ 619.199942][T13675] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 619.214086][T13676] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 620.133201][T13683] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 620.139720][T13683] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 620.148375][T13683] vhci_hcd vhci_hcd.0: Device attached [ 620.324745][ T5915] vhci_hcd: vhci_device speed not set [ 620.386221][ T5915] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 620.404858][ T10] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 620.576613][ T10] usb 4-1: config 0 has no interfaces? [ 620.582180][ T10] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 620.591260][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.602218][ T10] usb 4-1: config 0 descriptor?? [ 620.809741][T13684] vhci_hcd: unknown pdu 1 [ 620.813436][T13686] netlink: 'syz.3.2287': attribute type 8 has an invalid length. [ 620.816952][ T60] vhci_hcd: stop threads [ 620.823449][T13686] nftables ruleset with unbound set [ 620.830782][ T60] vhci_hcd: release socket [ 620.836546][ T60] vhci_hcd: disconnect device [ 620.847484][ T5955] usb 4-1: USB disconnect, device number 24 [ 620.874745][ T5915] vhci_hcd: vhci_device speed not set [ 620.939358][T13691] syzkaller1: entered promiscuous mode [ 620.945872][T13691] syzkaller1: entered allmulticast mode [ 621.107876][T13694] kvm: user requested TSC rate below hardware speed [ 621.117887][T13694] kvm: vcpu 1: requested 128 ns lapic timer period limited to 200000 ns [ 621.126596][T13694] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 621.248558][ T10] usb 6-1: USB disconnect, device number 49 [ 621.630706][T13707] No source specified [ 621.874721][ T10] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 621.884713][ T5955] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 622.036292][ T5955] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 622.046621][ T10] usb 6-1: config 5 has an invalid interface number: 123 but max is 0 [ 622.047298][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.058265][ T10] usb 6-1: config 5 has no interface number 0 [ 622.072651][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.074209][ T10] usb 6-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 622.094254][ T5955] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 622.094305][ T5955] usb 4-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 622.094327][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.110401][ T5955] usb 4-1: config 0 descriptor?? [ 622.117789][ T10] usb 6-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 255, setting to 64 [ 622.141793][ T10] usb 6-1: config 5 interface 123 has no altsetting 0 [ 622.152660][ T10] usb 6-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 622.161931][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.171194][ T10] usb 6-1: Product: syz [ 622.176429][ T10] usb 6-1: Manufacturer: syz [ 622.181123][ T10] usb 6-1: SerialNumber: syz [ 622.189868][T13707] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 622.401646][T13707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.410706][T13707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.439810][ T10] ni6501 6-1:5.123: driver 'ni6501' failed to auto-configure device. [ 622.456915][ T10] usb 6-1: USB disconnect, device number 50 [ 622.749691][ T5955] usbhid 4-1:0.0: can't add hid device: -71 [ 622.755955][ T5955] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 622.767248][ T5955] usb 4-1: USB disconnect, device number 25 [ 623.037161][T13712] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2296'. [ 623.305762][T13716] syzkaller1: entered promiscuous mode [ 623.311317][T13716] syzkaller1: entered allmulticast mode [ 623.354699][ T5955] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 623.530353][ T5955] usb 6-1: Using ep0 maxpacket: 8 [ 623.541347][ T5955] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 623.552590][ T5955] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.563860][ T5955] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.573922][ T5955] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 623.587979][ T5955] usb 6-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 623.597339][ T5955] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.609289][ T5955] usb 6-1: config 0 descriptor?? [ 624.025953][ T5999] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 624.246470][ T5955] redragon 0003:0C45:760B.0037: unknown main item tag 0x6 [ 624.268737][ T5955] redragon 0003:0C45:760B.0037: item fetching failed at offset 7/133 [ 624.278723][ T5955] redragon 0003:0C45:760B.0037: probe with driver redragon failed with error -22 [ 624.291852][T13668] Restarting kernel threads ... [ 624.300044][T13668] Done restarting kernel threads. [ 624.311680][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.345095][ T5955] usb 5-1: USB disconnect, device number 86 [ 624.442493][ T5999] usb 6-1: USB disconnect, device number 51 [ 624.474493][T13728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2302'. [ 624.785226][ T5981] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 624.856025][ T5955] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 624.935947][ T5981] usb 4-1: Using ep0 maxpacket: 16 [ 624.942808][ T5981] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 624.952093][ T5981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.963430][ T5981] usb 4-1: config 0 descriptor?? [ 624.979247][ T5981] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 625.035110][ T5955] usb 5-1: Using ep0 maxpacket: 32 [ 625.049583][ T5955] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 625.059163][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.062648][T13740] syzkaller1: entered promiscuous mode [ 625.069083][ T5955] usb 5-1: Product: syz [ 625.073054][T13740] syzkaller1: entered allmulticast mode [ 625.077392][ T5955] usb 5-1: Manufacturer: syz [ 625.088197][ T5955] usb 5-1: SerialNumber: syz [ 625.102416][ T5955] usb 5-1: config 0 descriptor?? [ 625.171440][T13735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.186042][T13735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.198172][T13735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.207434][T13735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.219254][T13735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.228117][T13735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.237082][T13735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.246476][T13735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.292379][ T5981] gspca_sonixj: reg_w1 err -71 [ 625.304891][ T5981] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 625.322901][ T5955] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 625.336343][ T5981] usb 4-1: USB disconnect, device number 26 [ 625.342690][ T5955] peak_usb 5-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 625.395252][ T5955] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 625.411726][ T5955] usb 5-1: USB disconnect, device number 87 [ 625.446865][ T5999] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 625.604719][ T5999] usb 6-1: Using ep0 maxpacket: 16 [ 625.611780][ T5999] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.622783][ T5999] usb 6-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 625.631873][ T5999] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.641686][ T5999] usb 6-1: config 0 descriptor?? [ 625.664788][ T5981] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 625.814743][ T5981] usb 4-1: Using ep0 maxpacket: 32 [ 625.822007][ T5981] usb 4-1: config 0 has an invalid interface number: 172 but max is 0 [ 625.830729][ T5981] usb 4-1: config 0 has no interface number 0 [ 625.836957][ T5981] usb 4-1: config 0 interface 172 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 625.848729][ T5981] usb 4-1: config 0 interface 172 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 625.859882][ T5981] usb 4-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 625.877948][ T5981] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 625.888030][ T5981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.896171][ T5981] usb 4-1: Product: syz [ 625.900404][ T5981] usb 4-1: Manufacturer: syz [ 625.905123][ T5981] usb 4-1: SerialNumber: syz [ 625.916800][T13750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.921723][ T5981] usb 4-1: config 0 descriptor?? [ 625.926190][T13750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.942966][ T5981] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 625.990442][T13754] sctp: [Deprecated]: syz.4.2311 (pid 13754) Use of struct sctp_assoc_value in delayed_ack socket option. [ 625.990442][T13754] Use struct sctp_sack_info instead [ 626.073235][ T5999] playstation 0003:054C:0BA0.0038: item fetching failed at offset 4/5 [ 626.082681][ T5999] playstation 0003:054C:0BA0.0038: Parse failed [ 626.090750][ T5999] playstation 0003:054C:0BA0.0038: probe with driver playstation failed with error -22 [ 626.142080][T13746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.151125][T13746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.160495][T13746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.172536][T13746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.185714][T13746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.197432][T13746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.209404][T13746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.221187][T13746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.234103][T13746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.245466][T13746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.528437][T13776] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2317'. [ 626.676741][ T5981] input: gspca_pac7302 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input69 [ 626.785369][ T5955] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 626.877854][ T5862] usb 4-1: USB disconnect, device number 27 [ 626.944706][ T5955] usb 5-1: Using ep0 maxpacket: 16 [ 626.951320][ T5955] usb 5-1: config 0 has an invalid interface number: 58 but max is 0 [ 626.959500][ T5955] usb 5-1: config 0 has no interface number 0 [ 626.967744][ T5955] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db78, bcdDevice=52.2e [ 626.976840][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.984939][ T5955] usb 5-1: Product: syz [ 626.989099][ T5955] usb 5-1: Manufacturer: syz [ 626.993705][ T5955] usb 5-1: SerialNumber: syz [ 627.000697][ T5955] usb 5-1: config 0 descriptor?? [ 627.008618][ T5955] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 4' in warm state. [ 627.017322][ T5955] usb 5-1: setting power ON [ 627.021830][ T5955] dvb-usb: bulk message failed: -22 (2/0) [ 627.030757][ T5955] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 627.040583][ T5955] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 4) [ 627.049802][ T5955] usb 5-1: media controller created [ 627.066480][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 627.082886][ T5955] cxusb: set interface failed [ 627.087683][ T5955] dvb-usb: bulk message failed: -22 (1/0) [ 627.093408][ T5955] dvb-usb: bulk message failed: -22 (3/0) [ 627.099703][ T5955] usb 5-1: bluebird_gpio_write failed. [ 627.105226][ T5955] dvb-usb: bulk message failed: -22 (3/0) [ 627.111380][ T5955] usb 5-1: bluebird_gpio_write failed. [ 627.134693][ T5955] dvb-usb: bulk message failed: -22 (3/0) [ 627.140472][ T5955] usb 5-1: bluebird_gpio_write failed. [ 627.146078][ T5955] dvb-usb: bulk message failed: -22 (3/0) [ 627.151800][ T5955] usb 5-1: bluebird_gpio_write failed. [ 627.174800][ T5955] dvb-usb: bulk message failed: -22 (3/0) [ 627.180587][ T5955] usb 5-1: bluebird_gpio_write failed. [ 627.186200][ T5955] dvb-usb: bulk message failed: -22 (5/0) [ 627.192742][ T5955] zl10353_read_register: readreg error (reg=127, ret==-121) [ 627.200125][ T5955] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 4' [ 627.264898][ T5955] rc_core: IR keymap rc-dvico-mce not found [ 627.279571][ T5955] Registered IR keymap rc-empty [ 627.285804][ T5955] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 4 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 627.304327][ T5955] input: DViCO FusionHDTV DVB-T Dual Digital 4 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input70 [ 627.318855][ T5955] dvb-usb: schedule remote query interval to 100 msecs. [ 627.326505][ T5955] usb 5-1: setting power OFF [ 627.331395][ T5955] dvb-usb: bulk message failed: -22 (2/0) [ 627.337396][ T5955] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 successfully initialized and connected. [ 627.351153][ T5955] usb 5-1: USB disconnect, device number 88 [ 627.432552][ T5955] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 successfully deinitialized and disconnected. [ 627.794717][ T43] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 627.974704][ T43] usb 4-1: Invalid ep0 maxpacket: 16 [ 628.054786][ T5862] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 628.104703][ T43] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 628.184700][ T5862] usb 5-1: device descriptor read/64, error -71 [ 628.223962][ T5981] usb 6-1: USB disconnect, device number 52 [ 628.260930][ T43] usb 4-1: Invalid ep0 maxpacket: 16 [ 628.276480][ T43] usb usb4-port1: attempt power cycle [ 628.342799][T13811] lo speed is unknown, defaulting to 1000 [ 628.424697][ T5862] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 628.564677][ T5862] usb 5-1: device descriptor read/64, error -71 [ 628.625099][ T43] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 628.659477][ T43] usb 4-1: Invalid ep0 maxpacket: 16 [ 628.677513][ T5862] usb usb5-port1: attempt power cycle [ 628.804685][ T43] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 628.826509][ T43] usb 4-1: Invalid ep0 maxpacket: 16 [ 628.832085][ T43] usb usb4-port1: unable to enumerate USB device [ 628.924846][ T5981] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 629.034736][ T5862] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 629.056461][ T5862] usb 5-1: device descriptor read/8, error -71 [ 629.084689][ T5981] usb 6-1: Using ep0 maxpacket: 32 [ 629.091297][ T5981] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 629.100590][ T5981] usb 6-1: config 0 has no interface number 0 [ 629.108651][ T5981] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 629.117804][ T5981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.125825][ T5981] usb 6-1: Product: syz [ 629.130001][ T5981] usb 6-1: Manufacturer: syz [ 629.134570][ T5981] usb 6-1: SerialNumber: syz [ 629.141151][ T5981] usb 6-1: config 0 descriptor?? [ 629.148255][ T5981] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 629.294688][ T5862] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 629.315336][ T5862] usb 5-1: device descriptor read/8, error -71 [ 629.350344][ T5981] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 629.363338][ T5981] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 629.424997][ T5862] usb usb5-port1: unable to enumerate USB device [ 629.550900][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 630.265895][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 630.272467][ T5862] usb 6-1: USB disconnect, device number 53 [ 630.285301][ T5862] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 630.304352][ T5862] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 630.324432][ T5862] quatech2 6-1:0.51: device disconnected [ 630.590913][T13828] input: syz0 as /devices/virtual/input/input71 [ 630.625460][ T5862] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 630.644194][T13830] tipc: Trying to set illegal importance in message [ 630.774706][ T5862] usb 6-1: Using ep0 maxpacket: 32 [ 630.781599][ T5862] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 630.789898][ T5862] usb 6-1: config 0 has no interface number 0 [ 630.796793][ T5862] usb 6-1: config 0 interface 12 has no altsetting 0 [ 630.812372][ T5862] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 630.821896][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.829982][ T5862] usb 6-1: Product: syz [ 630.834239][ T5862] usb 6-1: Manufacturer: syz [ 630.838883][ T5862] usb 6-1: SerialNumber: syz [ 630.847237][ T5862] usb 6-1: config 0 descriptor?? [ 631.256994][T13818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.268570][T13818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.270618][T11188] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 631.276403][ T5981] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 631.291696][T11188] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 631.300469][T11188] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 631.309763][T11188] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 631.321285][T11188] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 631.393192][T13836] lo speed is unknown, defaulting to 1000 [ 631.464744][ T5981] usb 5-1: device descriptor read/64, error -71 [ 631.523828][ T5862] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 631.534971][ T5862] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 631.552511][ T5862] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 631.564830][ T5862] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 631.618057][ T5862] usb 6-1: USB disconnect, device number 54 [ 631.718188][ T5981] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 631.874809][ T5981] usb 5-1: device descriptor read/64, error -71 [ 631.952160][T13836] chnl_net:caif_netlink_parms(): no params data found [ 631.986564][ T5981] usb usb5-port1: attempt power cycle [ 632.028734][T13836] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.037420][T13836] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.045600][T13836] bridge_slave_0: entered allmulticast mode [ 632.053789][T13836] bridge_slave_0: entered promiscuous mode [ 632.092640][ T1114] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.109695][T13836] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.117314][T13836] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.125426][T13836] bridge_slave_1: entered allmulticast mode [ 632.132779][T13836] bridge_slave_1: entered promiscuous mode [ 632.167909][T13836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.191157][ T1114] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.208856][T13836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.241628][T13836] team0: Port device team_slave_0 added [ 632.250751][T13836] team0: Port device team_slave_1 added [ 632.285114][ T1114] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.311790][T13836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.318789][T13836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.345401][ T5981] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 632.346162][T13836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.376626][ T1114] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.376899][ T5981] usb 5-1: device descriptor read/8, error -71 [ 632.397947][T13836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.405757][T13836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.431913][T13836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.489633][T13836] hsr_slave_0: entered promiscuous mode [ 632.497004][T13836] hsr_slave_1: entered promiscuous mode [ 632.611948][ T1114] bridge_slave_1: left allmulticast mode [ 632.619146][ T1114] bridge_slave_1: left promiscuous mode [ 632.625596][ T1114] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.638777][ T1114] bridge_slave_0: left allmulticast mode [ 632.644445][ T1114] bridge_slave_0: left promiscuous mode [ 632.650813][ T1114] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.654752][ T5981] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 632.686731][ T5981] usb 5-1: device descriptor read/8, error -71 [ 632.798563][ T5981] usb usb5-port1: unable to enumerate USB device [ 632.865862][ T1114] smc: removing net device bridge0 with user defined pnetid SYZ0 [ 632.900186][T13859] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 632.907002][T13859] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 632.913432][T13859] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 632.920013][T13859] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 632.926614][T13859] comedi comedi3: 8255: I/O port conflict (0x12,4) [ 632.933169][T13859] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 632.947971][T13859] comedi comedi3: 8255: I/O port conflict (0xd,4) [ 632.954440][T13859] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 632.962321][T13859] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 632.970276][T13859] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 632.976900][T13859] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 632.983347][T13859] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 632.989979][T13859] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 633.049566][ T1114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 633.060580][ T1114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 633.071178][ T1114] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 633.087329][ T1114] bond0 (unregistering): Released all slaves [ 633.177142][T13862] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 633.222713][ T1114] tipc: Disabling bearer [ 633.230997][ T1114] tipc: Disabling bearer [ 633.240846][ T1114] tipc: Disabling bearer [ 633.251037][ T1114] tipc: Left network mode [ 633.284141][T13864] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 633.291376][T13864] overlayfs: failed to set xattr on upper [ 633.297911][T13864] overlayfs: ...falling back to redirect_dir=nofollow. [ 633.306228][T13864] overlayfs: ...falling back to metacopy=off. [ 633.312600][T13864] overlayfs: ...falling back to index=off. [ 633.319441][T13864] overlayfs: ...falling back to uuid=null. [ 633.412785][ T1114] ------------[ cut here ]------------ [ 633.419304][ T1114] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 633.424867][T11188] Bluetooth: hci4: command tx timeout [ 633.427469][ T1114] WARNING: net/mac80211/driver-ops.c:366 at drv_unassign_vif_chanctx+0x50b/0x7e0, CPU#0: kworker/u8:6/1114 [ 633.443362][ T1114] Modules linked in: [ 633.448156][ T1114] CPU: 0 UID: 0 PID: 1114 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 633.458738][ T1114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 633.469386][ T1114] Workqueue: netns cleanup_net [ 633.474178][ T1114] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0 [ 633.480639][ T1114] Code: 8d 8d 48 0a 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 a0 6c d0 8c e8 96 64 87 f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 f7 f2 c3 f6 90 0f 0b 90 42 80 7c 3d [ 633.500566][ T1114] RSP: 0018:ffffc90003b2f220 EFLAGS: 00010246 [ 633.507192][ T1114] RAX: 6d274a2f1737c800 RBX: 0000000000000000 RCX: ffff8880276adac0 [ 633.515243][ T1114] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 633.523224][ T1114] RBP: ffff88805da4d7f8 R08: ffffffff8fe4db77 R09: 1ffffffff1fc9b6e [ 633.531267][ T1114] R10: dffffc0000000000 R11: fffffbfff1fc9b6f R12: ffff88805da4ead0 [ 633.539330][ T1114] R13: ffff88805da4cdc0 R14: 1ffff1100bb49aff R15: dffffc0000000000 [ 633.547394][ T1114] FS: 0000000000000000(0000) GS:ffff8881257a2000(0000) knlGS:0000000000000000 [ 633.556403][ T1114] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 633.563492][ T1114] CR2: 00007f0ab3969eb8 CR3: 0000000070f74000 CR4: 00000000003526f0 [ 633.571782][ T1114] Call Trace: [ 633.575177][ T1114] [ 633.578118][ T1114] ieee80211_assign_link_chanctx+0x1ec/0xd70 [ 633.584125][ T1114] __ieee80211_link_release_channel+0x33b/0x4a0 [ 633.584718][ T5955] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 633.590474][ T1114] ? __pfx_ieee80211_uninit+0x10/0x10 [ 633.603328][ T1114] unregister_netdevice_many_notify+0x1953/0x1ff0 [ 633.609843][ T1114] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 633.616675][ T1114] ? __pfx_call_rcu+0x10/0x10 [ 633.621380][ T1114] unregister_netdevice_queue+0x33c/0x380 [ 633.627188][ T1114] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 633.633447][ T1114] _cfg80211_unregister_wdev+0x165/0x590 [ 633.639146][ T1114] ieee80211_remove_interfaces+0x49a/0x6e0 [ 633.645031][ T1114] ? __pfx_synchronize_rcu+0x10/0x10 [ 633.650333][ T1114] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 633.656780][ T1114] ? rcu_is_watching+0x15/0xb0 [ 633.662068][ T1114] ieee80211_unregister_hw+0x5d/0x2c0 [ 633.667840][ T1114] mac80211_hwsim_del_radio+0x275/0x460 [ 633.673412][ T1114] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 633.679581][ T1114] hwsim_exit_net+0xef4/0xfb0 [ 633.684279][ T1114] ? hwsim_exit_net+0x333/0xfb0 [ 633.689210][ T1114] ? __pfx_hwsim_exit_net+0x10/0x10 [ 633.694427][ T1114] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 633.700309][ T1114] ops_undo_list+0x49a/0x990 [ 633.704962][ T1114] ? __pfx_ops_undo_list+0x10/0x10 [ 633.710089][ T1114] ? do_raw_spin_unlock+0x122/0x240 [ 633.715394][ T1114] cleanup_net+0x4d8/0x810 [ 633.719827][ T1114] ? __pfx_cleanup_net+0x10/0x10 [ 633.724827][ T1114] ? _raw_spin_unlock_irq+0x23/0x50 [ 633.730065][ T1114] ? process_scheduled_works+0x9ef/0x17b0 [ 633.735869][ T1114] ? process_scheduled_works+0x9ef/0x17b0 [ 633.741604][ T1114] process_scheduled_works+0xae1/0x17b0 [ 633.747261][ T1114] ? __pfx_process_scheduled_works+0x10/0x10 [ 633.753270][ T1114] worker_thread+0x8a0/0xda0 [ 633.757948][ T1114] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 633.764790][ T1114] ? __kthread_parkme+0x7b/0x200 [ 633.766644][ T5955] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 633.769748][ T1114] kthread+0x711/0x8a0 [ 633.782769][ T1114] ? __pfx_worker_thread+0x10/0x10 [ 633.787943][ T1114] ? __pfx_kthread+0x10/0x10 [ 633.792547][ T1114] ? _raw_spin_unlock_irq+0x23/0x50 [ 633.794770][ T5955] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 633.797833][ T1114] ? lockdep_hardirqs_on+0x9c/0x150 [ 633.813045][ T1114] ? __pfx_kthread+0x10/0x10 [ 633.817951][ T1114] ret_from_fork+0x4bc/0x870 [ 633.822560][ T1114] ? __pfx_ret_from_fork+0x10/0x10 [ 633.827757][ T1114] ? __switch_to_asm+0x39/0x70 [ 633.832528][ T1114] ? __switch_to_asm+0x33/0x70 [ 633.837398][ T1114] ? __pfx_kthread+0x10/0x10 [ 633.840231][ T5955] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 633.842000][ T1114] ret_from_fork_asm+0x1a/0x30 [ 633.855778][ T1114] [ 633.858818][ T1114] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 633.866087][ T1114] CPU: 0 UID: 0 PID: 1114 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 633.875532][ T1114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 633.885575][ T1114] Workqueue: netns cleanup_net [ 633.890337][ T1114] Call Trace: [ 633.893606][ T1114] [ 633.896525][ T1114] dump_stack_lvl+0x99/0x250 [ 633.901104][ T1114] ? __asan_memcpy+0x40/0x70 [ 633.905691][ T1114] ? __pfx_dump_stack_lvl+0x10/0x10 [ 633.910886][ T1114] ? __pfx__printk+0x10/0x10 [ 633.915480][ T1114] vpanic+0x237/0x6d0 [ 633.919458][ T1114] ? __pfx_vpanic+0x10/0x10 [ 633.923948][ T1114] ? is_bpf_text_address+0x292/0x2b0 [ 633.929218][ T1114] ? is_bpf_text_address+0x26/0x2b0 [ 633.934410][ T1114] panic+0xb9/0xc0 [ 633.938127][ T1114] ? __pfx_panic+0x10/0x10 [ 633.942545][ T1114] ? ret_from_fork_asm+0x1a/0x30 [ 633.947484][ T1114] __warn+0x334/0x4c0 [ 633.951456][ T1114] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 633.957164][ T1114] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 633.962873][ T1114] report_bug+0x2be/0x4f0 [ 633.967194][ T1114] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 633.972922][ T1114] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 633.978643][ T1114] ? drv_unassign_vif_chanctx+0x50d/0x7e0 [ 633.984360][ T1114] handle_bug+0x84/0x160 [ 633.988594][ T1114] exc_invalid_op+0x1a/0x50 [ 633.993087][ T1114] asm_exc_invalid_op+0x1a/0x20 [ 633.997925][ T1114] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0 [ 634.004243][ T1114] Code: 8d 8d 48 0a 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 a0 6c d0 8c e8 96 64 87 f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 f7 f2 c3 f6 90 0f 0b 90 42 80 7c 3d [ 634.023835][ T1114] RSP: 0018:ffffc90003b2f220 EFLAGS: 00010246 [ 634.029892][ T1114] RAX: 6d274a2f1737c800 RBX: 0000000000000000 RCX: ffff8880276adac0 [ 634.037852][ T1114] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 634.045809][ T1114] RBP: ffff88805da4d7f8 R08: ffffffff8fe4db77 R09: 1ffffffff1fc9b6e [ 634.053764][ T1114] R10: dffffc0000000000 R11: fffffbfff1fc9b6f R12: ffff88805da4ead0 [ 634.061724][ T1114] R13: ffff88805da4cdc0 R14: 1ffff1100bb49aff R15: dffffc0000000000 [ 634.069705][ T1114] ieee80211_assign_link_chanctx+0x1ec/0xd70 [ 634.075685][ T1114] __ieee80211_link_release_channel+0x33b/0x4a0 [ 634.081919][ T1114] ? __pfx_ieee80211_uninit+0x10/0x10 [ 634.087283][ T1114] unregister_netdevice_many_notify+0x1953/0x1ff0 [ 634.093693][ T1114] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 634.100444][ T1114] ? __pfx_call_rcu+0x10/0x10 [ 634.105119][ T1114] unregister_netdevice_queue+0x33c/0x380 [ 634.110830][ T1114] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 634.117062][ T1114] _cfg80211_unregister_wdev+0x165/0x590 [ 634.122683][ T1114] ieee80211_remove_interfaces+0x49a/0x6e0 [ 634.128479][ T1114] ? __pfx_synchronize_rcu+0x10/0x10 [ 634.133756][ T1114] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 634.140071][ T1114] ? rcu_is_watching+0x15/0xb0 [ 634.144829][ T1114] ieee80211_unregister_hw+0x5d/0x2c0 [ 634.150189][ T1114] mac80211_hwsim_del_radio+0x275/0x460 [ 634.155726][ T1114] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 634.161787][ T1114] hwsim_exit_net+0xef4/0xfb0 [ 634.166456][ T1114] ? hwsim_exit_net+0x333/0xfb0 [ 634.171296][ T1114] ? __pfx_hwsim_exit_net+0x10/0x10 [ 634.176488][ T1114] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 634.182286][ T1114] ops_undo_list+0x49a/0x990 [ 634.186873][ T1114] ? __pfx_ops_undo_list+0x10/0x10 [ 634.191976][ T1114] ? do_raw_spin_unlock+0x122/0x240 [ 634.197170][ T1114] cleanup_net+0x4d8/0x810 [ 634.201576][ T1114] ? __pfx_cleanup_net+0x10/0x10 [ 634.206500][ T1114] ? _raw_spin_unlock_irq+0x23/0x50 [ 634.211685][ T1114] ? process_scheduled_works+0x9ef/0x17b0 [ 634.217394][ T1114] ? process_scheduled_works+0x9ef/0x17b0 [ 634.223101][ T1114] process_scheduled_works+0xae1/0x17b0 [ 634.228656][ T1114] ? __pfx_process_scheduled_works+0x10/0x10 [ 634.234636][ T1114] worker_thread+0x8a0/0xda0 [ 634.239215][ T1114] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 634.245536][ T1114] ? __kthread_parkme+0x7b/0x200 [ 634.250464][ T1114] kthread+0x711/0x8a0 [ 634.254523][ T1114] ? __pfx_worker_thread+0x10/0x10 [ 634.259621][ T1114] ? __pfx_kthread+0x10/0x10 [ 634.264198][ T1114] ? _raw_spin_unlock_irq+0x23/0x50 [ 634.269384][ T1114] ? lockdep_hardirqs_on+0x9c/0x150 [ 634.274572][ T1114] ? __pfx_kthread+0x10/0x10 [ 634.279159][ T1114] ret_from_fork+0x4bc/0x870 [ 634.283737][ T1114] ? __pfx_ret_from_fork+0x10/0x10 [ 634.288837][ T1114] ? __switch_to_asm+0x39/0x70 [ 634.293586][ T1114] ? __switch_to_asm+0x33/0x70 [ 634.298332][ T1114] ? __pfx_kthread+0x10/0x10 [ 634.302912][ T1114] ret_from_fork_asm+0x1a/0x30 [ 634.307673][ T1114] [ 634.310931][ T1114] Kernel Offset: disabled [ 634.315235][ T1114] Rebooting in 86400 seconds..