last executing test programs: 2m29.2958431s ago: executing program 1 (id=173): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x300) (async) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086e05fe0000000000000109022400010000b00009040000080300000009210000000122460009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi2\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000140)={'mpc624\x00', [0x4, 0xfffffffe, 0x3, 0x10000005, 0x6, 0x1, 0xa, 0x1, 0xffe, 0x7, 0x3, 0x1, 0x8, 0x4000007, 0xfff7, 0x6, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x3, 0x10, 0x0, 0x8, 0xe2df, 0x0, 0x8, 0x5, 0x3, 0x1, 0x0, 0x9]}) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000040)={0x40, 0x4, 0x4f, {0x4f, 0xa, "c205b518f9b40a4c146b1a3535b91fd995d80d913f35277d83e1636377f24dae3172e65934edacd26bd35b53da568afebd68c28ef4cfa2a9021ffd1c7a9942a79ab2aea05beb7990a830d5215e"}}, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x1a, 0x7f, 0x4, 0x0, 0x2, 0x2abc}}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m28.483726038s ago: executing program 1 (id=177): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)={0x1a4, 0x0, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0xa4, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x102}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_MASK={0xbc, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8094) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000640)="b9800000c00f001035000800000f3066b8f0000f00d0c4c27d5979778fc8388fa50f00000000660f71e00bd88200d0c00f3266baf80cb85a3a4984ef66bafc0cb9800000c00f3235000800000f3066b825018ee8660f3adfed806e", 0x5b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x4000, 0x6000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r4, 0x104, 0x0, 0x0, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x0) 2m25.391863533s ago: executing program 1 (id=183): socket$tipc(0x1e, 0x5, 0x0) (async) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000300)={{0x100000, 0xeeef0000, 0x3, 0xad, 0x3, 0x1, 0x7d, 0x6, 0x0, 0x2b, 0x9}, {0x91989000, 0x8080000, 0x4, 0xfc, 0x40, 0x9, 0x72, 0xfc, 0x6, 0x0, 0x3}, {0x80a0000, 0x1000, 0x4, 0x2, 0x1, 0xff, 0x0, 0x9, 0x0, 0xa7, 0xb, 0x85}, {0x1, 0xeeef0000, 0xb, 0xe7, 0x3, 0x2, 0x1, 0xfc, 0x4, 0x7, 0x2e, 0xf1}, {0xdddd0000, 0x2000, 0xf, 0x7f, 0x5, 0x5, 0xc, 0x2, 0x9, 0x8, 0xf7}, {0xeeef0000, 0x8080000, 0xb, 0x2, 0xb1, 0x5, 0x5, 0x80, 0x4, 0xf, 0x1, 0x3}, {0x10000, 0x11d004, 0xc, 0x7, 0x0, 0x0, 0x1, 0x4, 0x5, 0x80, 0x3, 0x4}, {0x4000, 0x8000000, 0xb, 0x5, 0x5, 0x7, 0x1, 0x37, 0x2, 0x0, 0xf0, 0xa}, {0xe6e50000, 0x70}, {0xdddd0000, 0x407}, 0xc0040033, 0x0, 0xdddd0000, 0x2000, 0x20000000000f, 0xb800, 0x5000, [0x8000000000000000, 0xfffffffffffffffc, 0x15e, 0x3]}) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r0) socket$kcm(0x10, 0x400000002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000049000/0x2000)=nil, 0x2000, 0x0, 0x20010, r5, 0xd8a40000) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_buf(r6, 0x0, 0x20, &(0x7f0000000040)="be9b5683", 0x4) r7 = socket(0xa, 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet6_int(r7, 0x29, 0x0, &(0x7f0000000000)=0xfffffffe, 0x4) (async) setsockopt$inet6_int(r7, 0x29, 0x0, &(0x7f0000000000)=0xfffffffe, 0x4) r9 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x1, 0x0) openat(r10, &(0x7f0000000040)='./file1\x00', 0x141242, 0x18f) (async) openat(r10, &(0x7f0000000040)='./file1\x00', 0x141242, 0x18f) ioctl(r7, 0x8916, &(0x7f0000000000)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) ioctl(r7, 0x8936, &(0x7f0000000000)) 2m25.07404704s ago: executing program 1 (id=185): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) (async) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg(r0, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000002500)={0x0, 0x0, 0x0}, 0x100) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000180)=0x1, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a1180002", 0x1f}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a1180002", 0x1f}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, 0x0, 0x0, 0xffffffffffffffff) chroot(&(0x7f0000000100)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x220a800, 0x0) (async) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x220a800, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[], 0xfe33) (async) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[], 0xfe33) 2m24.932003951s ago: executing program 1 (id=186): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x404c804) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0xf}, {&(0x7f0000000680)="a33d07f52a7d5192a6c65b63827d1065d041248b1c3a88b7dd0aa0933e455e56ba2a9e5419952523e166fcbba78e8f836362ffcb4d49d395", 0x38}], 0x2) 2m24.762553441s ago: executing program 1 (id=187): r0 = socket(0x1, 0x803, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32=r0], 0x1c}}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) rmdir(&(0x7f0000000500)='./cgroup\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFCONF(r3, 0x8912, 0x0) recvmsg$kcm(r2, &(0x7f0000000240)={&(0x7f0000000040)=@alg, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/164, 0xa4}], 0x1, &(0x7f00000001c0)=""/65, 0x41}, 0x1) 2m24.569854738s ago: executing program 32 (id=187): r0 = socket(0x1, 0x803, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32=r0], 0x1c}}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) rmdir(&(0x7f0000000500)='./cgroup\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFCONF(r3, 0x8912, 0x0) recvmsg$kcm(r2, &(0x7f0000000240)={&(0x7f0000000040)=@alg, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/164, 0xa4}], 0x1, &(0x7f00000001c0)=""/65, 0x41}, 0x1) 2m21.172185818s ago: executing program 3 (id=195): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x404c804) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0xf}, {&(0x7f0000000680)="a33d07f52a7d5192a6c65b63827d1065d041248b1c3a88b7dd0aa0933e455e56ba2a9e5419952523e166fcbba78e8f836362ffcb4d49d395", 0x38}], 0x2) 2m19.717653774s ago: executing program 3 (id=196): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1c23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffa, 0x9, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc9, 0xff}}}}}]}}]}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x60802, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x40, 0x22, 0x3e, {0x3e, 0x0, "b51a749047f01f43cd40c82e21bd89d776a3d27a73429586df27a7492edf6ed1535a0518974ab5775b4ca4a35a4f9a1a225edfe1ee90f0da291859af"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2m17.936063895s ago: executing program 3 (id=200): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001800)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210003000401a800160004", 0x35}, {&(0x7f0000001a00)="00f4bcb66ade04ac39d0955b9112c0829f67cf2fc2298a0325d17c137eea601b08622e2620541f236159d69ed0a9d8fb959d9dde30cd9601b3115b8cf7812233cca61073540be7d5db6fc74cb06a1ba2e5055a95fc0b9986d1fa755ce65a7af45d765a217b1a17c60ade87a7a263c9b50cd51cd9c257c7418c3afc3a96dcadcb82618fec327d4d9dff17e795818e16acc77ddf7f6262e42bd84109d432d78971b58224", 0xa3}], 0x2}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000780)="02", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000e80)="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", 0x4fd}], 0x1}}], 0x2, 0x100000c0) 2m17.776318888s ago: executing program 3 (id=204): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') rmdir(&(0x7f0000000440)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_trace_dev_match', 0x111000, 0x81) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000080)=0xffff) 2m17.643653155s ago: executing program 3 (id=206): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000780)="02", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000e80)="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", 0x4fd}], 0x1}}], 0x2, 0x100000c0) 2m16.010382025s ago: executing program 3 (id=212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vm(r3, 0x4018aee3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0x2}, 0x10}}, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f00000000c0)={0x0, 0x8}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc8}}, 0x0) 2m15.816829324s ago: executing program 33 (id=212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vm(r3, 0x4018aee3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0x2}, 0x10}}, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f00000000c0)={0x0, 0x8}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc8}}, 0x0) 4.903559709s ago: executing program 0 (id=791): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xf8, 0x0, 0x0) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r2, 0x8010aebc, &(0x7f0000000380)={0xf000, 0x18000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r4, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000014) 4.836876578s ago: executing program 0 (id=792): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mmap(&(0x7f0000f95000/0x3000)=nil, 0x3000, 0x2, 0x4c831, r0, 0x7000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 4.798492306s ago: executing program 0 (id=793): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gretap0\x00', 0x0}) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) sendto$packet(r3, &(0x7f00000004c0)="05", 0x1, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, r4, 0x1, 0x85, 0x6, @broadcast}, 0x14) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r5, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)='H', 0x1}], 0x1) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000780), 0x103b43, 0x0) 4.679958831s ago: executing program 0 (id=794): rt_sigprocmask(0x0, &(0x7f0000000400)={[0xfffff7feffff7ffc]}, 0x0, 0x8) r0 = gettid() setrlimit(0xb, &(0x7f0000000000)) tkill(r0, 0xb) io_pgetevents(0x0, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={[0x2368e8ff]}, 0x8}) r1 = socket$inet(0x2, 0x80000, 0x400) r2 = socket(0x28, 0x4, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r3, &(0x7f000000d400)=[{{&(0x7f0000004980)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x80, 0x0}}], 0x1, 0x24044000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x82, &(0x7f00000001c0)={r4, 0xb, 0x1}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={r4, 0xca}, &(0x7f0000000080)=0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r7, 0x5410, &(0x7f0000000100)) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r8 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r10 = syz_usb_connect(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070296d1ca001305060200020d0006090582020002000110e5fd04769ff73f9a532728324a25c4ad30d7a68ac475c730922ab248c05bff76d76a0d08cb4b6950a38bd85920e38be53f8aeeefa558e9e15bc47cded8f3698e88"], 0x0) syz_usb_control_io$uac1(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="001704000000ab"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r10, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r10, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000140)=ANY=[@ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r10, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000000c0)=ANY=[@ANYRES8=r6], 0x0, 0x0}) syz_usb_control_io$printer(r10, 0x0, 0x0) syz_usb_control_io$printer(r10, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="40310510000046c18a2860"], 0x0, 0x0, 0x0, 0x0, 0x0}) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r8, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r11}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) 3.64013934s ago: executing program 2 (id=801): r0 = syz_usb_connect(0x5, 0xc2, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf8, 0x64, 0x65, 0x10, 0x7af, 0x5, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb0, 0x1, 0x2, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x90, 0x2, 0x2, 0x65, 0xfc, 0xd2, 0x0, [@generic={0x86, 0x11, "386983d659cd0d539941da3a98b2d61cee477e98eada07795772701713e2edf245ac223028e6dd6b1415033921aba203a91aefe37b4c3e03840a136dfae889ca973e9d19f1b94605a15be47dceb15c427f3f6542e4035283ba2b4a0ca504b20e72de6bfcaaf441eb60cc9d91b18b3e74a7d0c6a4b71c7b8c4c86c218d9d219ed16bbb283"}, @generic={0x6, 0xc, "ea6f5b28"}], [{{0x9, 0x5, 0x7, 0x2, 0x200, 0x9}}, {{0x9, 0x5, 0x82, 0x10, 0x200}}]}}]}}]}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000100)=0x9, 0x4) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x4}, 0x2}, 0x18) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xd0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.100009544s ago: executing program 5 (id=808): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0xf6c52000) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x20, r2, 0x101, 0x0, 0x80000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x884}, 0x40804) 2.099534704s ago: executing program 4 (id=809): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd49032800030020000000600000000004730081e949b93897bc3b0000070000007d01ff020000000000000000000000000001"], 0xfdef) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/216, 0xd8, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x5, 0x1, 0xc400}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) r7 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, 0x0, 0xcc071acbf25dbf8f, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8040) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13, r8, 0x0) munmap(&(0x7f0000ff9000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ff8000/0x2000)=nil) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000014) 1.957174824s ago: executing program 4 (id=810): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x4e4400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000440)=0x14) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1.89145564s ago: executing program 4 (id=811): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f) r1 = eventfd2(0x2000000, 0x80000) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x10000, 0xf000, 0x1, r1, 0x6}) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000040)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @broadcast}}, [0x5, 0x8, 0x10001, 0x9, 0x5d24, 0x100000001, 0x8, 0x7fffffff, 0x2, 0x5, 0x7, 0x5, 0x83, 0xffffffffffffffff, 0x5]}, &(0x7f0000000180)=0x100) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={r3, 0x8}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000200)={r3, 0xfffffff8}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000280)={r4, 0x6, 0x30, 0xff, 0xc}, &(0x7f00000002c0)=0x18) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000300)={0x18, 0x0, {0x1, @broadcast, 'pim6reg\x00'}}, 0x1e) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f00000004c0)=0xc) r8 = getegid() socketpair(0x8, 0x2, 0x40, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000540), 0x2, 0x0) r11 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000580), 0x0) r12 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x181000, 0x0) r14 = openat$zero(0xffffffffffffff9c, &(0x7f0000000640), 0x232001, 0x0) r15 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000006c0)={0x6, &(0x7f0000000680)=[{0x8, 0x2, 0x35, 0xfffff000}, {0x9, 0x2, 0x2, 0x200}, {0xffff, 0x0, 0x5, 0x9}, {0x7, 0x2, 0xf, 0x7}, {0x4, 0x8, 0x8e, 0x8}, {0x9, 0x9, 0x3, 0x3}]}) r16 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000340)=@proc={0x10, 0x0, 0x25dfdbff, 0x20000}, 0xc, &(0x7f0000000440)=[{&(0x7f0000000380)={0x9c, 0x39, 0x400, 0x70bd28, 0x25dfdbfc, "", [@nested={0x8c, 0x11a, 0x0, 0x1, [@typed={0xc, 0xe, 0x0, 0x0, @u64=0x767}, @typed={0x4, 0x137}, @nested={0x4, 0x4a}, @generic="84f21470f938087e693ad65d2c9c0335cb7a58e4f84bc834676f14bb860c4a30dedc314962e90d88f9077b1878df1b0c65ce8b04d7c2cc8a6c46d7963a8c6ebd80d30df3d7e8774a93ef269c65ce427eefd32c887579067c38c31b4bf3ea80f20f2541ff6ade3c656c8a858030d85026", @nested={0x4, 0xa9}]}]}, 0x9c}], 0x1, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {0x0, r7, r8}}}, @rights={{0x30, 0x1, 0x1, [r5, r9, r1, r1, r1, r2, r1, r0]}}, @rights={{0x34, 0x1, 0x1, [r1, r10, r5, r0, r2, r11, r5, r1, r12]}}, @rights={{0x14, 0x1, 0x1, [r13]}}, @rights={{0x14, 0x1, 0x1, [r14]}}, @rights={{0x34, 0x1, 0x1, [r0, r2, r15, r2, r0, r16, r1, r1, r2]}}], 0xf0, 0x840}, 0x40) r17 = socket$key(0xf, 0x3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r17, 0xf518, 0x0) close(r9) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000880)={r3, @in6={{0xa, 0x4e20, 0xd, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x6}}, 0x7815, 0x4, 0x4, 0x2, 0xa2, 0x19, 0x2}, 0x9c) kcmp(r6, r6, 0x5, r13, r12) ioctl$TIOCL_GETSHIFTSTATE(r13, 0x541c, &(0x7f0000000940)={0x6, 0xe}) 1.763907607s ago: executing program 4 (id=812): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000003d00090000000000000000000100000004000000100001800c00208008000800e0000001080002"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x81, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r7 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r7, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e3d, 0x280000, @mcast1, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000000718"], 0x30}, 0x4000010) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r6, &(0x7f0000000400)={0x11, 0x1c, r9, 0x1, 0x9, 0x6, @multicast}, 0x14) write$cgroup_subtree(r6, &(0x7f00000000c0)={[{0x2d, 'freezer'}, {0x2d, 'hugetlb'}]}, 0x12) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x30, r11, 0x1, 0x70bd29, 0x25dfdbf9, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xfffffffe}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r12, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r12, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r12, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r12, 0x5412, &(0x7f00000001c0)=0xff) ioctl$TIOCSTI(r12, 0x5412, &(0x7f0000000000)=0x7e) 1.643492926s ago: executing program 5 (id=813): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) (async) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0xfffffffffffffffd}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000280001"], 0x50}, 0x1, 0x0, 0x0, 0x4000840}, 0x20004040) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100020a86f3401011249024db01020305090212000100e950090904"], 0x0) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc53f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x60, 0x1, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x10, 0x4, 0x1, {0x22, 0xcd8}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0xa, 0x6, 0x5, 0x40, 0xff}, 0x24, &(0x7f0000000080)={0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x6, 0x8, 0x8, 0xb}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "0d4a1f48e780f5b9a689e1b437ed99ac"}]}, 0x3, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x407}}, {0xc3, &(0x7f0000000140)=@string={0xc3, 0x3, "140be6850a997f3bcee90a9b28c479cc82b58b3fe244c151619b1f7cc54521983f5ad30671c89b21434f61c2746d28f4c2c646bb782374ce656a08fc64bda5a0cfe517c223c46f20dff340cfeddb4881b07a9c8aa6b99b2a14ae3a096a7e3e9fa280d401ba2cb7b1f2599ad389c05e19809645cfb8c0e663adabd0b97ad8592fbe2f5bbb5966e72195ce955a12e84994e5d1ae8d536972f2c396e903e6dd6dd79e3b3c1829e902f9e6cfc8bbd51fb39cd45b38c8558af97855eb50aeab024da9bb"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44d}}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_disconnect(r2) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000780)=ANY=[], 0x0) 1.601186584s ago: executing program 0 (id=814): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESDEC], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x3b, &(0x7f0000000100)=ANY=[]) (async) semget$private(0x0, 0x5, 0x742) 1.47999055s ago: executing program 4 (id=815): socket$kcm(0x29, 0x5, 0x0) mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x2a020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000440)={0xa0, 0x0, 0x0, {{0x6, 0x1, 0xc898, 0x401, 0x1, 0xd0c6, {0x2, 0xffff, 0x0, 0xe, 0x800, 0x9, 0xffffad0e, 0x7, 0x10000, 0x2000, 0x3, 0x0, 0x0, 0xc346, 0x6}}, {0x0, 0x4}}}, 0xa0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, r4, 0xc11, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x2, 0x1}, {0x73, 0x6}, {0x5, 0x3}, {0x0, 0x4}], "7ecd4163b8fccf09"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000840), 0x4) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0xee01, &(0x7f00000003c0)={0x0, 0x5, 0x1000, 0x472, 0x4000000000000000, 0xfffffffffffffffc, 0x23, 0x0, 0xfeff}) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) fchown(r1, 0xee01, 0x0) 650.760172ms ago: executing program 4 (id=816): mknod$loop(0x0, 0xfff, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="c461485cf164410fad9c1f00800000430f01cfc4a3791daa390000000a65dacb8fc978d3e2c42299aead00400000440f20c0350e000000440f22c0440388e61029dc0f9aed", 0x45}], 0x1, 0x8, &(0x7f0000000180), 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0xffffffe) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4, 0x5f1, 0x6, 0x3}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000140)=@x86={0x6, 0x0, 0xf, 0x0, 0xc, 0x8, 0x4, 0xb, 0x3, 0x10, 0x5, 0x70, 0x0, 0x11, 0xb, 0x4, 0xff, 0x0, 0x0, '\x00', 0x4, 0x2d}) syz_usb_connect$cdc_ecm(0x2, 0x5a, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010309024800010100000309040000ff02"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3c) 616.016801ms ago: executing program 2 (id=817): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x15, 0x0, &(0x7f0000000280)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x1023}) write$tun(r1, &(0x7f0000000140)={@val={0x0, 0x88f5}, @void, @x25={0x3, 0x3, 0xf, "e26f0a9713abc8256792cf771309e110ad0703ac6d7be17a4f7af29d941d5d63ba46226ff19f4d1a823195aae94ef6ff55687dc2a5adb3ef1ad63c97780ce6f7ebcd6ee2c3a9e2e89817d6691c6ea2cdb4be58e36a60eef32df5febb61b9b07629fdc997fe528fca86c7c752d469ad432391136755808e095cb5354bdffefe36ff61e7af2e471055c5d53cd7146f0212b3f6f950c0ff5c907397e29fc9b2d91c89dfa0317429ff9fa1c09f2cfc1d6667c0c00cefb241afab964d022e68c3276317d6e733ede17376b08af37530da4c6dcd24bdba572f12e44462fa8377b609fff38057743a358aafc3e8"}}, 0xf1) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x16) write$tun(r3, &(0x7f0000000040)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x3ffd, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x9, 0x0, @void}}}}}}}}, 0x32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 384.072487ms ago: executing program 2 (id=818): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') write$khugepaged_scan(r1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000014) 383.710054ms ago: executing program 2 (id=819): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000100)={0x0, 0x0, "a82de164f44a682528ff6ff6b9c42a67"}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) cachestat(r1, &(0x7f0000000080)={0x264, 0xfffffffffffffffe}, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38) setitimer(0x1, &(0x7f00000002c0), 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r2, 0x4068aea3, &(0x7f0000000080)={0x80, 0x0, 0x6}) r3 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000300), 0x2, 0x2) write(r5, 0x0, 0x0) close(r4) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r7, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="980000000a060101000000000000000003000009500007800500039d500000000c001840fffffffffffffff805001500e70000000c001b400000000000000001060005404e240000080006400000000d0900130073797a300000000008000a40000000090900020073797a31000000000900020073797a30000000001c0008800c00078008000940000000940c00078008000a4000000002982b39d61b2dd350857c2d215a7ec60ce13c08"], 0x98}, 0x1, 0x0, 0x0, 0x4800}, 0x4048081) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES8=r3, @ANYRES16=r3, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRES64=r2, @ANYRESHEX=r7], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x10008005) r8 = syz_pidfd_open(0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r8, 0xf502, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0xff07, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r8], 0x64}}, 0x0) 380.798249ms ago: executing program 5 (id=820): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x805}, 0x40a0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000280)={0x80000001, 0x8}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b4f2b612fa"}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x2004c005) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x8, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8035}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000015}, 0x40400c2) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3ff}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r4 = syz_create_resource$binfmt(&(0x7f00000005c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x41, 0x1ff) execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f0000000740)={[&(0x7f0000000600)='nl80211\x00', &(0x7f0000000640)='wlan0\x00', &(0x7f0000000680)='\x00', &(0x7f00000006c0)='netdevsim\x00', &(0x7f0000000700)='nl80211\x00']}, &(0x7f00000007c0)={[&(0x7f0000000780)='netdevsim\x00']}, 0x400) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000800), 0x1, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x38, r2, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x4000009) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r1) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, r6, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_SEQ={0xd, 0xa, "cd33c231253257b004"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x44) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000000a80)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000ac0)={'wg2\x00'}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000b00)={0x7, 'ip6gretap0\x00', {0x10001}, 0x4}) setxattr$trusted_overlay_opaque(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80), &(0x7f0000000bc0), 0x2, 0x1) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r5, &(0x7f0000002300)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000022c0)={&(0x7f0000000c40)={0x164c, r2, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x25}}}}, [@NL80211_ATTR_NAN_FUNC={0x1624, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "da8c8ff5ca3f"}, @NL80211_NAN_FUNC_TERM_REASON={0x5}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_SERVICE_INFO={0xb4, 0xb, "c9ae9af6876643bde11f82449024c9b176a1a941414cfda22fb7b943f4e5c37bd769e9139ded419f4020e69964487904d8f987ef39c53ae32164f34152816e64bd960dff53ed2df5c8e514756615bdaf9d06b39ab9bef7fc71d8c42d710f88cc2e63939d9b9ad44de0028a278721420862fccb0a41358a6cba881ee989821f76f5e6cb409a7893f1bf8bb2daf40b9141ddb76c65f97d9c868e45eac2d30b5f24b9234a07e40973e2c8f2949cd45f6521"}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0xd4, 0xe, 0x0, 0x1, [{0x10, 0x0, "c0aa3fc401c17742b0b49a0d"}, {0xbe, 0x0, "fcc324a7d0df82aa3280bda2cbc81b769687201515dc7b8dc62c029b650bbe19d61c0a9f358f6c49ff1cca0aea4e8bc068f37407e64a90fec9243cf9bc847ae3a14e6773b0c45ff75b34ccc2a824eac1fba97759ac47f3a5836b882802a5edf2b58a95ce3111995a8e45416f04b5f786b378e0170d649476eaf47ccf56473e0f33c821031253d78fad419b0a3c9720c0b3033402a8c369791bd822777d3a38cbc7b07029f08c5fff996226c4c2cdf28552fdfe9a083a933a3672"}]}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x11ec, 0xe, 0x0, 0x1, [{0xe1, 0x0, "36ecb326751f5e4468e19e0374a225849a47c7a508ec032f5dedb661c2007efcbe94c27a72dd40186b92451dc7d59b30181afcc94723cee8caac30e34c1fa772d74601d61b0e1b6ecd6ff090ad8d9ebd16fbf6e26b01518e24eac83f9bde13b92ec1f38b136a7dc58e31eb84c718b4a777815f0299426d507459978fc90b9d9850f1a150b0a00ac4f3e23b1b1376a40398a89a8812e167436fea29f742a2b5016b9db9241c643cd08ff17ceff0c0936f5ac106639af65f31eedf8284199139f7d9b21bb2fef6e51da5c7e6faffbf5264ff0d04a03d47372370805402df"}, {0x75, 0x0, "74df1ac41a63c37add678381f4650fb30837688376c3b2046c33a5389762e3823f6c34bd6289a7da722cf6dff7cf5fa55171bd831fb13296d767e889188b9957f764abbc86bded55e9273a862ef00b4761f1de057bdbb340e0252051fc22525b225ec5122d0f1d5419eb6b6a0830f4f7bc"}, {0x1004, 0x0, "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"}, {0x42, 0x0, "cd9c99b37db4a42388edc7f7c22aff67b178066e8d0e0fcb584a80cd442295c4c89a831f89d849d110e0a7f3046ee5ea89c48ea4e6c82bdebce8290ea707"}, {0x41, 0x0, "e40b483b0800e8ec82285b9f47bbdf7bb30c4336b0b95b9487a22573a3a675af7230ed79f79ced5b874fa3d55beff9378bcebd97e5ee562d96cf05fc60"}]}, @NL80211_NAN_FUNC_SRF={0x288, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x6}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_MAC_ADDRS={0x64, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "ba5c002879fd22eab41ee5c05cf80898b9b2bb28c3df894d6b3613a010db35bb7105ec29b43a4dcb7c310a038d1fb60f777fe73e24f6a73c5338f0a6db753eff786fb120171457ca077f8aee9031d6be777619c751d93166dfc0c5eb2cd42f0928fdb2a6f24d3beb2861942fad4b29a99fdf3c5873f9a554d7ee8d157825ababcc5ca13e2f412677624a063de02162f4989573e15fa635954bc034a048897aab790b164ef8672aaea4d12295fd0b3cbccbc47cfcfbba5e3d200441c2e18757f08289d7a23b8317b62018e572059e6636ca792ae88a76f7e5bbf3e103986ad92ac4bf271cf806849049745b2784e869d66831053ee30f64caedda9570c54190"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}]}]}, 0x164c}, 0x1, 0x0, 0x0, 0x20048090}, 0x20000040) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x4c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20010000) write(r5, &(0x7f0000002480)="3fa2ed33f6067657c571f1b7dd72851dd15ace8eb4ecf75af45f30aaa2fb7f0d06a21422e4cfee73eb91533dfc964dae43d5f0855d0db0f3765d60c242b5697e31ce06254f0a6f028e487ef5ee0905df69a7be773854fb0b0b53557f934eaae12771bb74f5484f36ebe0417204aa95c553467b61ffd43bb71e89871a96fa6e4c16e8cb1ff8595421da932d2e25ef528847ecc405c5fba9f3a896725cfedf846bcf4b45f16c0683992214df69d755b380af56c0e3c60d0d45da29d52f6f673147ca6de792e3464b5ac7342353f958813e00013453cb2a7557ae93890aa3cfe122aee00d", 0xe3) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000025c0), r5) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000002740)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x82000000}, 0xc, &(0x7f0000002700)={&(0x7f0000002600)={0xd4, r7, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x60, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffff8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x101}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xea5c429d}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x6, 0x3, 0x6, 0xfffffff7]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1c3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x13}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x13}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x26b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x587}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80000000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4c}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x60f}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xaca}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4}, 0x800) r8 = socket$pppl2tp(0x18, 0x1, 0x1) sendto(r8, &(0x7f0000002780)="7b49043588c554392ac3b2f1d710424c46702ff15f090142f67491d5455702a5785ade72af123797b655fa608d1c8a080e7077", 0x33, 0x44000, &(0x7f00000027c0)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000002900)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002880)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x38}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000002b00)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002ac0)={&(0x7f00000029c0)={0xd0, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x68}, @void, @val={0xc, 0x99, {0x8, 0x56}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv0\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xe}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5aad22fc7a7534746b92be7641b073c3da15191f1ed9f333"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20004810}, 0x40980) 346.981244ms ago: executing program 2 (id=821): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x0, 0x0) getpeername$qrtr(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) setregid(0xffffffffffffffff, r1) socket$inet(0x2, 0x2, 0x1) 321.261597ms ago: executing program 5 (id=822): pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f0000000280)=0x1000, 0x4) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r4, &(0x7f0000000080)={@val={0x3, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x8, 0x3, 0x0, {0x17, 0x4, 0x3, 0x7, 0x8, 0x68, 0x1, 0x0, 0x2f, 0x1, @empty, @local, {[@timestamp_prespec={0x44, 0x14, 0x56, 0x3, 0x9, [{@broadcast, 0x88be}, {@rand_addr=0x64010100, 0x4041}]}, @ssrr={0x89, 0xb, 0xcc, [@loopback, @empty]}, @generic={0x83, 0x12, "073b4c1e45bb5cc1c8081dcf1435dd97"}, @timestamp_addr={0x44, 0x14, 0x33, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x42}, 0x9}, {@rand_addr=0x64010100, 0x7}]}]}}}}}, 0x86) (async) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x60a, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 259.990294ms ago: executing program 2 (id=823): r0 = syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0x6b, 0xc, 0x37, 0x20, 0x41e, 0x4053, 0xee45, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xcf, 0x2, 0x0, 0xa3, 0x27, 0x2}}]}}]}}, 0x0) close(r1) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd038786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500031681905db88235f8a5447dd2a2fd6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd500800000000000000e4a62fb73c33424b437bb192c9b06ea6ed04983fe5c5ca033dfce0a82577ef14eee5e6be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b394de70400d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca147df97db"}) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000600)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f00000000c0)=r3) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_io_uring_setup(0x6c6, &(0x7f0000000000)={0x0, 0xef6d, 0x20, 0x2, 0xff}, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0x3}, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000180)={0x80, 0x2, 'client0\x00', 0xb, "047000", "e5dbc75b536b0e2fbb12e902000000b3067c903f04eb2f7400", 0xfffffbfb, 0x617c}) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000580)={0x53, 0x0, 0x6, 0x4, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="1201b6b661b9", 0x0, 0x1080, 0x4, 0x0, 0x0}) 208.639943ms ago: executing program 5 (id=824): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000400)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000020180)={0x1, 0x0, [{0x15201279be33ada3, 0xb3, &(0x7f000001fc80)=""/179}]}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000200)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000280)=0x1) timer_create(0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000001400)) timer_settime(0x0, 0x1, &(0x7f0000000500)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/57, 0x304000, 0x1800, 0x0, 0x3}, 0x20) 182.021725ms ago: executing program 5 (id=825): socket$kcm(0x29, 0x5, 0x0) mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x2a020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000440)={0xa0, 0x0, 0x0, {{0x6, 0x1, 0xc898, 0x401, 0x1, 0xd0c6, {0x2, 0xffff, 0x0, 0xe, 0x800, 0x9, 0xffffad0e, 0x7, 0x10000, 0x2000, 0x3, 0x0, 0x0, 0xc346, 0x6}}, {0x0, 0x4}}}, 0xa0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, r4, 0xc11, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x2, 0x1}, {0x73, 0x6}, {0x5, 0x3}, {0x0, 0x4}], "7ecd4163b8fccf09"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000840), 0x4) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0xee01, &(0x7f00000003c0)={0x0, 0x5, 0x1000, 0x472, 0x4000000000000000, 0xfffffffffffffffc, 0x23, 0x0, 0xfeff}) fchown(r1, 0xee01, 0x0) 0s ago: executing program 0 (id=826): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x5) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020301"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000000104"], 0x20}, 0x1, 0x0, 0x0, 0x20048805}, 0x0) kernel console output (not intermixed with test programs): x0001: -71 [ 208.200557][ T24] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 208.212556][ T24] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 208.224238][ T24] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 208.235792][ T24] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 208.247220][ T24] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 208.259085][ T24] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 208.270571][ T24] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 208.282191][ T24] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 208.293811][ T24] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 208.306030][ T24] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 208.318369][ T24] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 208.329798][ T24] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 208.341528][ T24] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 208.352991][ T24] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 208.726659][ T5951] usb 3-1: USB disconnect, device number 64 [ 209.345580][ T8005] tipc: Disabling bearer [ 209.362964][ T24] ax88179_178a 5-1:0.214 eth9: register 'ax88179_178a' at usb-dummy_hcd.4-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 2e:1a:53:ee:9b:08 [ 209.382347][ T24] usb 5-1: USB disconnect, device number 32 [ 209.390470][ T24] ax88179_178a 5-1:0.214 eth9: unregister 'ax88179_178a' usb-dummy_hcd.4-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 209.711302][ T116] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 209.777610][ T24] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 209.816842][ T8032] netlink: 'syz.5.515': attribute type 21 has an invalid length. [ 209.824933][ T8032] netlink: 164 bytes leftover after parsing attributes in process `syz.5.515'. [ 209.881879][ T116] usb 1-1: Using ep0 maxpacket: 32 [ 209.890532][ T116] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 209.899066][ T116] usb 1-1: config 0 has no interface number 0 [ 209.905191][ T116] usb 1-1: config 0 interface 230 has no altsetting 0 [ 209.918744][ T116] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 209.928496][ T116] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.936731][ T24] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 209.944775][ T116] usb 1-1: Product: syz [ 209.951119][ T116] usb 1-1: Manufacturer: syz [ 209.956650][ T116] usb 1-1: SerialNumber: syz [ 209.963082][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.973207][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.986978][ T116] usb 1-1: config 0 descriptor?? [ 209.995707][ T116] ums-usbat 1-1:0.230: USB Mass Storage device detected [ 210.005699][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 210.014097][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.024552][ T116] ums-usbat 1-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 210.032222][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.043514][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 210.051701][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.060702][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.071682][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 210.079668][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.088663][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.099623][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 210.108658][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.112626][ T8034] netlink: 84 bytes leftover after parsing attributes in process `syz.5.516'. [ 210.117865][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.137668][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 210.145335][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.154475][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.165544][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 210.173300][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.182493][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.193536][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 210.201367][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.211330][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.222430][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 210.231645][ T24] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 210.240795][ T24] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 210.249162][ T24] usb 5-1: Product: syz [ 210.253326][ T24] usb 5-1: Manufacturer: syz [ 210.258527][ T24] usb 5-1: SerialNumber: syz [ 210.265018][ T24] usb 5-1: config 0 descriptor?? [ 210.274025][ T24] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 210.482822][ T9] usb 5-1: USB disconnect, device number 33 [ 210.493865][ T9] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 210.595115][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.517'. [ 210.897679][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 210.905095][ T5871] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 210.982733][ T8054] netlink: 52 bytes leftover after parsing attributes in process `syz.2.522'. [ 210.992890][ T8054] netlink: 'syz.2.522': attribute type 1 has an invalid length. [ 211.028606][ T8053] tipc: Enabled bearer , priority 0 [ 211.036948][ T8051] tipc: Resetting bearer [ 211.241740][ T9] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 211.398316][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 211.405988][ T9] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 211.413490][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 211.425667][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 211.436558][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.446399][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 211.459441][ T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 211.468659][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.476700][ T9] usb 3-1: Product: syz [ 211.481008][ T9] usb 3-1: Manufacturer: syz [ 211.485640][ T9] usb 3-1: SerialNumber: syz [ 211.498174][ T9] usb 3-1: config 0 descriptor?? [ 211.507224][ T8054] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 212.149248][ T5952] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 212.305309][ T116] ums-usbat 1-1:0.230: probe with driver ums-usbat failed with error -5 [ 212.313390][ T5952] usb 5-1: Using ep0 maxpacket: 32 [ 212.323181][ T116] usb 1-1: USB disconnect, device number 52 [ 212.339052][ T5952] usb 5-1: config 0 has an invalid interface number: 166 but max is 0 [ 212.347725][ T5952] usb 5-1: config 0 has no interface number 0 [ 212.363331][ T5952] usb 5-1: New USB device found, idVendor=0c45, idProduct=627f, bcdDevice=c2.8a [ 212.372750][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.381392][ T5952] usb 5-1: Product: syz [ 212.385639][ T5952] usb 5-1: Manufacturer: syz [ 212.391379][ T5952] usb 5-1: SerialNumber: syz [ 212.400446][ T5952] usb 5-1: config 0 descriptor?? [ 212.620688][ T5952] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:627f [ 212.628218][ T5952] gspca_sn9c20x: Write register 1000 failed -71 [ 212.634557][ T5952] gspca_sn9c20x: Device initialization failed [ 212.641769][ T5952] gspca_sn9c20x 5-1:0.166: probe with driver gspca_sn9c20x failed with error -71 [ 212.657937][ T5952] usb 5-1: USB disconnect, device number 34 [ 212.664018][ T116] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 212.700589][ T8051] tipc: Disabling bearer [ 212.716587][ T9] mcba_usb 3-1:0.0 can0: couldn't setup read URBs [ 212.724294][ T9] mcba_usb 3-1:0.0 can0: couldn't start device: -90 [ 212.769255][ T9] mcba_usb 3-1:0.0: probe with driver mcba_usb failed with error -90 [ 212.790819][ T8061] netlink: 'syz.5.524': attribute type 13 has an invalid length. [ 212.799279][ T8061] macvtap0: entered promiscuous mode [ 212.807293][ T8061] macvtap0: refused to change device tx_queue_len [ 212.826658][ T30] kauditd_printk_skb: 383 callbacks suppressed [ 212.826675][ T30] audit: type=1400 audit(1758812210.129:598): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 1-1: Using ep0 maxpacket: 32 [ 212.954134][ T116] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.965325][ T116] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.976006][ T116] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 212.992204][ T116] usb 1-1: config 0 interface 0 has no altsetting 0 [ 212.998994][ T116] usb 1-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 213.008080][ T116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.022650][ T116] usb 1-1: config 0 descriptor?? [ 213.197789][ T5952] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 213.349848][ T5952] usb 6-1: Using ep0 maxpacket: 32 [ 213.358610][ T5952] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 213.366893][ T5952] usb 6-1: config 0 has no interface number 0 [ 213.375458][ T5952] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 213.392346][ T5952] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 213.402663][ T5952] usb 6-1: config 0 interface 85 has no altsetting 0 [ 213.411940][ T5952] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 213.423156][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.437998][ T5952] usb 6-1: Product: syz [ 213.442322][ T5952] usb 6-1: Manufacturer: syz [ 213.451737][ T5952] usb 6-1: SerialNumber: syz [ 213.463045][ T5952] usb 6-1: config 0 descriptor?? [ 213.677706][ T9] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 213.713136][ T116] usbhid 1-1:0.0: can't add hid device: -71 [ 213.719885][ T116] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 213.732607][ T116] usb 1-1: USB disconnect, device number 53 [ 213.817736][ T9] usb 5-1: device descriptor read/64, error -71 [ 213.880069][ T5952] appletouch 6-1:0.85: Failed to request geyser raw mode [ 213.887718][ T5952] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 213.900268][ T5952] usb 6-1: USB disconnect, device number 31 [ 213.981010][ T116] usb 3-1: USB disconnect, device number 65 [ 214.057557][ T9] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 214.187552][ T9] usb 5-1: device descriptor read/64, error -71 [ 214.296669][ T8083] tipc: Enabled bearer , priority 0 [ 214.303924][ T9] usb usb5-port1: attempt power cycle [ 214.309762][ T8082] tipc: Resetting bearer [ 214.368327][ T116] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 214.517601][ T116] usb 3-1: Using ep0 maxpacket: 32 [ 214.526027][ T116] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 214.537944][ T116] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 214.549874][ T116] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 214.559738][ T116] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 214.571100][ T116] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 214.585537][ T116] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 214.594867][ T116] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.603055][ T116] usb 3-1: Product: syz [ 214.607246][ T116] usb 3-1: Manufacturer: syz [ 214.612066][ T116] usb 3-1: SerialNumber: syz [ 214.621202][ T116] usb 3-1: config 0 descriptor?? [ 214.667504][ T9] usb 5-1: new low-speed USB device number 37 using dummy_hcd [ 214.681793][ T5933] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 214.708291][ T9] usb 5-1: device descriptor read/8, error -71 [ 214.863522][ T5933] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.874024][ T5933] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 214.883246][ T5933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.894640][ T5933] usb 6-1: config 0 descriptor?? [ 214.916911][ T5933] pwc: Askey VC010 type 2 USB webcam detected. [ 214.948969][ T9] usb 5-1: new low-speed USB device number 38 using dummy_hcd [ 214.970445][ T9] usb 5-1: device descriptor read/8, error -71 [ 215.081296][ T9] usb usb5-port1: unable to enumerate USB device [ 215.253861][ T116] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 215.269822][ T116] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 215.276565][ T116] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 215.283657][ T116] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 215.291964][ T116] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 215.298854][ T116] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 215.305344][ T116] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 215.313151][ T116] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 215.320667][ T116] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 215.327222][ T116] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 215.333543][ T5933] pwc: recv_control_msg error -32 req 02 val 2b00 [ 215.342930][ T116] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 215.349326][ T5933] pwc: recv_control_msg error -32 req 02 val 2700 [ 215.357555][ T116] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 215.364416][ T116] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 215.370820][ T5933] pwc: recv_control_msg error -32 req 02 val 2c00 [ 215.378016][ T116] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 215.384232][ T5933] pwc: recv_control_msg error -32 req 04 val 1000 [ 215.391272][ T116] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 215.398138][ T5933] pwc: recv_control_msg error -32 req 04 val 1300 [ 215.405253][ T116] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 215.412484][ T5933] pwc: recv_control_msg error -32 req 04 val 1400 [ 215.419261][ T116] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 215.426161][ T5933] pwc: recv_control_msg error -32 req 02 val 2000 [ 215.433009][ T116] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 215.439164][ T116] input input34: Timeout waiting for response from device. [ 215.448175][ T5933] pwc: recv_control_msg error -32 req 02 val 2100 [ 215.463234][ T116] usb 3-1: USB disconnect, device number 66 [ 215.469601][ T5933] pwc: recv_control_msg error -32 req 04 val 1500 [ 215.479344][ T5933] pwc: recv_control_msg error -32 req 02 val 2500 [ 215.704182][ T5933] pwc: recv_control_msg error -71 req 02 val 2600 [ 215.713484][ T5933] pwc: recv_control_msg error -71 req 02 val 2900 [ 215.728699][ T5933] pwc: recv_control_msg error -71 req 02 val 2800 [ 215.735954][ T5933] pwc: recv_control_msg error -71 req 04 val 1100 [ 215.755736][ T5933] pwc: recv_control_msg error -71 req 04 val 1200 [ 215.789437][ T5933] pwc: Registered as video103. [ 215.808711][ T5933] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input35 [ 215.852166][ T5933] usb 6-1: USB disconnect, device number 32 [ 216.277064][ T8082] tipc: Disabling bearer [ 216.507581][ T24] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 216.607596][ T5933] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 216.661930][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.672993][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.683063][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 216.696304][ T24] usb 6-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 216.705407][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.716285][ T24] usb 6-1: config 0 descriptor?? [ 216.747621][ T5933] usb 1-1: device descriptor read/64, error -71 [ 216.933466][ T8096] vxcan1: tx drop: invalid da for name 0xfffffffffffffffc [ 216.997495][ T5933] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 217.137521][ T5933] usb 1-1: device descriptor read/64, error -71 [ 217.150193][ T24] ortek 0003:1223:3F07.0019: unknown main item tag 0x0 [ 217.157158][ T24] ortek 0003:1223:3F07.0019: unknown main item tag 0x0 [ 217.164517][ T24] ortek 0003:1223:3F07.0019: unknown main item tag 0x0 [ 217.171485][ T24] ortek 0003:1223:3F07.0019: unknown main item tag 0x0 [ 217.178530][ T24] ortek 0003:1223:3F07.0019: unknown main item tag 0x0 [ 217.180522][ T5952] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 217.185464][ T24] ortek 0003:1223:3F07.0019: unknown main item tag 0x0 [ 217.200300][ T24] ortek 0003:1223:3F07.0019: unknown main item tag 0x0 [ 217.207491][ T24] ortek 0003:1223:3F07.0019: unknown main item tag 0x0 [ 217.214486][ T24] ortek 0003:1223:3F07.0019: unknown main item tag 0x0 [ 217.223485][ T24] ortek 0003:1223:3F07.0019: unknown main item tag 0x0 [ 217.231022][ T24] ortek 0003:1223:3F07.0019: item fetching failed at offset 66/69 [ 217.239688][ T24] ortek 0003:1223:3F07.0019: probe with driver ortek failed with error -22 [ 217.262198][ T5933] usb usb1-port1: attempt power cycle [ 217.349350][ T116] usb 6-1: USB disconnect, device number 33 [ 217.357618][ T5952] usb 3-1: Using ep0 maxpacket: 32 [ 217.366514][ T5952] usb 3-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 217.376330][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.387363][ T5952] usb 3-1: config 0 descriptor?? [ 217.399561][ T5952] usb 3-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 217.412779][ T5952] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 217.424033][ T5952] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 217.431791][ T5952] usb 3-1: media controller created [ 217.448466][ T5952] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 217.469833][ T5952] usb 3-1: selecting invalid altsetting 1 [ 217.475701][ T5952] set interface failed [ 217.476352][ T5952] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 217.488602][ T5952] error writing reg: 0xff, val: 0x00 [ 217.509083][ T5952] dvb_usb_mxl111sf 3-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 217.517564][ T24] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 217.607923][ T5933] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 217.624269][ T5952] usb 3-1: USB disconnect, device number 67 [ 217.632721][ T5933] usb 1-1: device descriptor read/8, error -71 [ 217.687519][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 217.694203][ T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 217.703567][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.719402][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 217.726497][ T24] pvrusb2: ********** [ 217.730567][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 217.740716][ T24] pvrusb2: Important functionality might not be entirely working. [ 217.749248][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 217.760815][ T24] pvrusb2: ********** [ 217.887576][ T5933] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 217.911051][ T5933] usb 1-1: device descriptor read/8, error -71 [ 217.923838][ T2347] pvrusb2: Invalid write control endpoint [ 217.986306][ T2347] pvrusb2: Invalid write control endpoint [ 217.992322][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 218.003052][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 218.011488][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 218.022353][ T2347] pvrusb2: Device being rendered inoperable [ 218.028663][ T5933] usb usb1-port1: unable to enumerate USB device [ 218.028947][ T2347] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 218.042228][ T2347] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 218.050874][ T2347] pvrusb2: Attached sub-driver cx25840 [ 218.056360][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 218.066915][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 218.145377][ T8111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.160490][ T8119] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 8119 comm: syz.5.545) [ 218.170296][ T8111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.177272][ T30] audit: type=1800 audit(1758812215.479:599): pid=8119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.545" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=19672 res=0 errno=0 [ 218.200520][ T5952] usb 5-1: USB disconnect, device number 39 [ 218.336791][ T8124] tipc: Enabled bearer , priority 0 [ 218.345032][ T8123] tipc: Resetting bearer [ 218.520239][ T9] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 218.680112][ T9] usb 3-1: too many endpoints for config 32 interface 0 altsetting 0: 252, using maximum allowed: 30 [ 218.691312][ T9] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 218.702929][ T9] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.713126][ T9] usb 3-1: config 32 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 252 [ 218.726723][ T9] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 218.736050][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.864598][ T8126] netlink: 'syz.4.548': attribute type 4 has an invalid length. [ 218.872784][ T8126] netlink: 17 bytes leftover after parsing attributes in process `syz.4.548'. [ 219.167582][ T5920] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 219.186678][ T9] bigben 0003:146B:0902.001A: unexpected rdesc, please submit for review [ 219.211743][ T9] bigben 0003:146B:0902.001A: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.2-1/input0 [ 219.224714][ T9] bigben 0003:146B:0902.001A: missing HID_OUTPUT_REPORT 0 [ 219.232876][ T9] bigben 0003:146B:0902.001A: no output report found [ 219.346955][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 219.358181][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.373521][ T9] usb 3-1: USB disconnect, device number 68 [ 219.381596][ T5920] usb 5-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 219.391462][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.418934][ T5920] usb 5-1: config 0 descriptor?? [ 219.635433][ T5920] hid-u2fzero 0003:10C4:8ACF.001B: item fetching failed at offset 4/5 [ 219.644822][ T5920] hid-u2fzero 0003:10C4:8ACF.001B: probe with driver hid-u2fzero failed with error -22 [ 219.857492][ T116] usb 1-1: new low-speed USB device number 58 using dummy_hcd [ 220.045165][ T116] usb 1-1: config 9 has an invalid interface number: 1 but max is 0 [ 220.061523][ T116] usb 1-1: config 9 has no interface number 0 [ 220.068249][ T116] usb 1-1: config 9 interface 1 has no altsetting 0 [ 220.086359][ T116] usb 1-1: string descriptor 0 read error: -22 [ 220.093048][ T116] usb 1-1: New USB device found, idVendor=2040, idProduct=b140, bcdDevice=75.36 [ 220.102387][ T116] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.136028][ T116] cx231xx 1-1:9.1: New device @ 1.5 Mbps (2040:b140) with 1 interfaces [ 220.144640][ T116] cx231xx 1-1:9.1: Not found matching IAD interface [ 220.294471][ T8123] tipc: Disabling bearer [ 220.313191][ T5920] usb 5-1: USB disconnect, device number 40 [ 220.331177][ T8141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.352650][ T8141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.399600][ T9] usb 1-1: USB disconnect, device number 58 [ 220.460646][ T116] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 220.653517][ T8164] netlink: 52 bytes leftover after parsing attributes in process `syz.0.559'. [ 220.668006][ T116] usb 3-1: Using ep0 maxpacket: 8 [ 220.679663][ T116] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 220.691900][ T116] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.705824][ T116] usb 3-1: config 0 descriptor?? [ 220.717602][ T5952] IPVS: starting estimator thread 0... [ 220.807676][ T8169] IPVS: using max 32 ests per chain, 76800 per kthread [ 220.837587][ T5920] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 220.887611][ T9] usb 6-1: new low-speed USB device number 34 using dummy_hcd [ 220.915422][ T116] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 220.957527][ T5952] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 220.989835][ T5920] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.000194][ T5920] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 221.010478][ T5920] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 221.019844][ T9] usb 6-1: device descriptor read/64, error -71 [ 221.026275][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 221.035165][ T5920] usb 5-1: SerialNumber: syz [ 221.097589][ T5952] usb 1-1: device descriptor read/64, error -71 [ 221.246285][ T8154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.255321][ T8154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.269354][ T9] usb 6-1: new low-speed USB device number 35 using dummy_hcd [ 221.280992][ T5920] usb 5-1: 0:2 : does not exist [ 221.296035][ T5920] usb 5-1: USB disconnect, device number 41 [ 221.334689][ T5882] udevd[5882]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.365033][ T5952] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 221.409848][ T116] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 221.422840][ T116] asix 3-1:0.0: probe with driver asix failed with error -71 [ 221.438484][ T116] usb 3-1: USB disconnect, device number 69 [ 221.439918][ T9] usb 6-1: device descriptor read/64, error -71 [ 221.519775][ T5952] usb 1-1: device descriptor read/64, error -71 [ 221.536066][ T8176] tipc: Enabled bearer , priority 0 [ 221.543986][ T8175] tipc: Resetting bearer [ 221.579974][ T9] usb usb6-port1: attempt power cycle [ 221.637931][ T5952] usb usb1-port1: attempt power cycle [ 221.921492][ T9] usb 6-1: new low-speed USB device number 36 using dummy_hcd [ 221.969090][ T9] usb 6-1: device descriptor read/8, error -71 [ 222.000264][ T5952] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 222.038395][ T5952] usb 1-1: device descriptor read/8, error -71 [ 222.052185][ T8178] netlink: 'syz.4.563': attribute type 83 has an invalid length. [ 222.216017][ T30] audit: type=1800 audit(1758812219.519:600): pid=8183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.564" name="bus" dev="overlay" ino=568 res=0 errno=0 [ 222.243243][ T9] usb 6-1: new low-speed USB device number 37 using dummy_hcd [ 222.278632][ T9] usb 6-1: device descriptor read/8, error -71 [ 222.312294][ T5952] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 222.341771][ T5952] usb 1-1: device descriptor read/8, error -71 [ 222.397878][ T9] usb usb6-port1: unable to enumerate USB device [ 222.461679][ T5952] usb usb1-port1: unable to enumerate USB device [ 223.067620][ T24] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 223.230372][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 223.252752][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 223.261803][ T24] usb 5-1: config 15 has an invalid interface number: 107 but max is 0 [ 223.271096][ T24] usb 5-1: config 15 has no interface number 0 [ 223.277333][ T24] usb 5-1: config 15 interface 107 has no altsetting 0 [ 223.286471][ T24] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=a7.8c [ 223.295739][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.304077][ T24] usb 5-1: Product: syz [ 223.313499][ T24] usb 5-1: Manufacturer: syz [ 223.318324][ T24] usb 5-1: SerialNumber: syz [ 223.398025][ T8175] tipc: Disabling bearer [ 223.543432][ T24] as10x_usb: device has been detected [ 223.550779][ T24] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 223.567952][ T24] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 223.587262][ T24] as10x_usb: error during firmware upload part1 [ 223.594368][ T24] Registered device Abilis Systems DVB-Titan [ 223.596853][ T24] usb 5-1: USB disconnect, device number 42 [ 223.635324][ T24] Unregistered device Abilis Systems DVB-Titan [ 223.637316][ T24] as10x_usb: device has been disconnected [ 223.789604][ T5952] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 223.959119][ T5952] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.969469][ T5952] usb 3-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 223.978577][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.988439][ T5952] usb 3-1: config 0 descriptor?? [ 223.996193][ T5952] usb 3-1: bad CDC descriptors [ 224.070939][ T9] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 224.137745][ T5920] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 224.196945][ T5934] usb 3-1: USB disconnect, device number 70 [ 224.207531][ T9] usb 6-1: device descriptor read/64, error -71 [ 224.297494][ T5920] usb 1-1: Using ep0 maxpacket: 16 [ 224.304143][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.307548][ T24] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 224.315210][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 224.335777][ T5920] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 224.345442][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.355427][ T5920] usb 1-1: config 0 descriptor?? [ 224.447520][ T24] usb 5-1: device descriptor read/64, error -71 [ 224.467734][ T9] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 224.570583][ T5920] HID 045e:07da: Invalid code 65791 type 1 [ 224.576484][ T5920] HID 045e:07da: Invalid code 65791 type 1 [ 224.584119][ T5920] HID 045e:07da: Invalid code 65791 type 1 [ 224.590225][ T5920] HID 045e:07da: Invalid code 65791 type 1 [ 224.596052][ T5920] HID 045e:07da: Invalid code 65791 type 1 [ 224.602815][ T9] usb 6-1: device descriptor read/64, error -71 [ 224.609244][ T5920] HID 045e:07da: Invalid code 65791 type 1 [ 224.615110][ T5920] HID 045e:07da: Invalid code 65791 type 1 [ 224.621067][ T5920] HID 045e:07da: Invalid code 65791 type 1 [ 224.626888][ T5920] HID 045e:07da: Invalid code 65791 type 1 [ 224.632787][ T5920] HID 045e:07da: Invalid code 65791 type 1 [ 224.643424][ T5920] microsoft 0003:045E:07DA.001C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 224.654937][ T5920] microsoft 0003:045E:07DA.001C: no inputs found [ 224.661397][ T5920] microsoft 0003:045E:07DA.001C: could not initialize ff, continuing anyway [ 224.691034][ T24] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 224.727776][ T9] usb usb6-port1: attempt power cycle [ 224.837783][ T24] usb 5-1: device descriptor read/64, error -71 [ 224.947804][ T24] usb usb5-port1: attempt power cycle [ 224.987509][ T5920] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 225.070179][ T9] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 225.097921][ T9] usb 6-1: device descriptor read/8, error -71 [ 225.157568][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 225.164488][ T5920] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.174689][ T5920] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.185556][ T5920] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 225.194778][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.202810][ T5920] usb 3-1: Product: syz [ 225.206983][ T5920] usb 3-1: Manufacturer: syz [ 225.212478][ T5920] usb 3-1: SerialNumber: syz [ 225.287589][ T24] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 225.307976][ T24] usb 5-1: device descriptor read/8, error -71 [ 225.337508][ T9] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 225.359935][ T9] usb 6-1: device descriptor read/8, error -71 [ 225.468384][ T9] usb usb6-port1: unable to enumerate USB device [ 225.547558][ T24] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 225.568083][ T24] usb 5-1: device descriptor read/8, error -71 [ 225.625122][ T5920] usb 3-1: cannot find UAC_HEADER [ 225.640259][ T5920] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 225.664754][ T5882] udevd[5882]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 225.681058][ T24] usb usb5-port1: unable to enumerate USB device [ 225.830652][ T9] usb 3-1: USB disconnect, device number 71 [ 226.637555][ T5952] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 226.796021][ T24] usb 1-1: USB disconnect, device number 63 [ 226.797848][ T8214] tipc: Enabled bearer , priority 0 [ 226.818360][ T8213] tipc: Resetting bearer [ 226.824631][ T5952] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 226.837581][ T5952] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 226.846331][ T5952] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 226.866936][ T5952] usb 3-1: config 8 has no interface number 0 [ 226.875076][ T5952] usb 3-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 226.887213][ T5952] usb 3-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.903569][ T5952] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 226.913155][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.921636][ T5952] usb 3-1: Product: syz [ 226.932130][ T5952] usb 3-1: Manufacturer: syz [ 226.936886][ T5952] usb 3-1: SerialNumber: syz [ 227.182989][ T5952] usb 3-1: USB disconnect, device number 72 [ 227.977552][ T24] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 228.151483][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 228.162728][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.179236][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 228.195702][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.207637][ T24] usb 3-1: config 0 descriptor?? [ 228.218845][ T24] hub 3-1:0.0: USB hub found [ 228.505781][ T24] hub 3-1:0.0: 3 ports detected [ 228.612476][ T8213] tipc: Disabling bearer [ 228.709830][ T24] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 228.716227][ T24] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 228.744408][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 228.775813][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 228.818404][ T24] usb 3-1: USB disconnect, device number 73 [ 228.977846][ T5952] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 229.037535][ T116] usb 5-1: new low-speed USB device number 47 using dummy_hcd [ 229.127578][ T5952] usb 1-1: Using ep0 maxpacket: 16 [ 229.134294][ T5952] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 229.142442][ T5952] usb 1-1: config 0 has no interface number 0 [ 229.148756][ T5952] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x3 has an invalid bInterval 48, changing to 9 [ 229.159670][ T5952] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x3 has invalid maxpacket 8240, setting to 1024 [ 229.167557][ T116] usb 5-1: device descriptor read/64, error -71 [ 229.176224][ T5952] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 229.186006][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 229.194204][ T5952] usb 1-1: Product: syz [ 229.198466][ T5952] usb 1-1: SerialNumber: syz [ 229.205606][ T5952] usb 1-1: config 0 descriptor?? [ 229.213710][ T5952] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 229.257703][ T8243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.407608][ T116] usb 5-1: new low-speed USB device number 48 using dummy_hcd [ 229.537526][ T116] usb 5-1: device descriptor read/64, error -71 [ 229.599616][ T5952] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 229.603740][ T8252] netlink: 16 bytes leftover after parsing attributes in process `syz.5.589'. [ 229.647869][ T116] usb usb5-port1: attempt power cycle [ 229.699543][ T8256] loop4: detected capacity change from 0 to 2560 [ 229.706614][ T8256] buffer_io_error: 11 callbacks suppressed [ 229.706628][ T8256] Buffer I/O error on dev loop4, logical block 0, async page read [ 229.721023][ T8256] Buffer I/O error on dev loop4, logical block 0, async page read [ 229.731074][ T8256] Buffer I/O error on dev loop4, logical block 0, async page read [ 229.739429][ T8256] Buffer I/O error on dev loop4, logical block 0, async page read [ 229.747879][ T8256] Buffer I/O error on dev loop4, logical block 0, async page read [ 229.755868][ T8256] Buffer I/O error on dev loop4, logical block 0, async page read [ 229.763885][ T5952] usb 3-1: Using ep0 maxpacket: 16 [ 229.764637][ T8256] Buffer I/O error on dev loop4, logical block 0, async page read [ 229.772182][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.777346][ T8256] Buffer I/O error on dev loop4, logical block 0, async page read [ 229.788174][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.798739][ T8256] ldm_validate_partition_table(): Disk read failed. [ 229.812591][ T5952] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 229.812641][ T5952] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 229.826166][ T8256] Buffer I/O error on dev loop4, logical block 0, async page read [ 229.843522][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.844168][ T8256] Buffer I/O error on dev loop4, logical block 0, async page read [ 229.856382][ T5952] usb 3-1: config 0 descriptor?? [ 229.862561][ T8256] Dev loop4: unable to read RDB block 0 [ 229.870675][ T8256] loop4: unable to read partition table [ 229.876700][ T8256] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 229.985422][ T8260] tipc: Enabled bearer , priority 0 [ 229.987507][ T116] usb 5-1: new low-speed USB device number 49 using dummy_hcd [ 230.000167][ T8259] tipc: Resetting bearer [ 230.018331][ T116] usb 5-1: device descriptor read/8, error -71 [ 230.258381][ T116] usb 5-1: new low-speed USB device number 50 using dummy_hcd [ 230.278272][ T116] usb 5-1: device descriptor read/8, error -71 [ 230.391089][ T116] usb usb5-port1: unable to enumerate USB device [ 230.479976][ T8250] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 230.499965][ T5952] usbhid 3-1:0.0: can't add hid device: -71 [ 230.506015][ T5952] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 230.519067][ T5952] usb 3-1: USB disconnect, device number 74 [ 231.339349][ T116] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 231.436048][ T8259] tipc: Disabling bearer [ 231.497697][ T116] usb 3-1: Using ep0 maxpacket: 16 [ 231.506504][ T116] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.518313][ T116] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 231.531664][ T116] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 231.541830][ T116] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.557610][ T116] usb 3-1: config 0 descriptor?? [ 231.736744][ T5934] usb 1-1: USB disconnect, device number 64 [ 231.967686][ T5952] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 231.971546][ T116] microsoft 0003:045E:07DA.001D: invalid report_count 159154539 [ 231.983160][ T116] microsoft 0003:045E:07DA.001D: item 0 4 1 9 parsing failed [ 231.991824][ T116] microsoft 0003:045E:07DA.001D: parse failed [ 231.998048][ T116] microsoft 0003:045E:07DA.001D: probe with driver microsoft failed with error -22 [ 232.077559][ T5934] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 232.109864][ T5952] usb 6-1: device descriptor read/64, error -71 [ 232.197708][ T9] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 232.229725][ T5934] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 232.238894][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.249592][ T5934] usb 1-1: config 0 descriptor?? [ 232.260952][ T5934] gspca_main: spca508-2.14.0 probing 8086:0110 [ 232.347526][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 232.352849][ T5952] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 232.362790][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 232.371508][ T9] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 232.379749][ T9] usb 5-1: config 0 has no interface number 0 [ 232.385866][ T9] usb 5-1: config 0 interface 65 has no altsetting 0 [ 232.397183][ T9] usb 5-1: New USB device found, idVendor=052b, idProduct=1911, bcdDevice= 1.00 [ 232.406355][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.414540][ T9] usb 5-1: Product: ᔄ蹓갆é¤ìŽ¯ì”Žåª¾î‘€ê†‡å‚…ç»„á¥¯èš£ï®å¶»áª©î£´âœ‚᪦橵︆穬쿞é¤ì±î«²åšžà®¡é¸„⽠頶蕤䭻シí˜ë»«â¸ŽÂ’áŠã–¬ã¦Ÿâ¤˜ï»¡è„£é·¼î«é—ã€¨å”æž…낊ᒓ䑎郴é•ඪ此᱘஬⨑碥氓í²âœ§í…¹ê¶’䃠é±å¤ê°¦ï“³à­¦ìš§âˆ°ã¬žèœ¤ê‹® [ 232.440004][ T9] usb 5-1: SerialNumber: syz [ 232.446973][ T9] usb 5-1: config 0 descriptor?? [ 232.456779][ T5934] gspca_spca508: reg_read err -32 [ 232.462584][ T5934] gspca_spca508: reg_read err -32 [ 232.507502][ T5952] usb 6-1: device descriptor read/64, error -71 [ 232.593184][ T5934] gspca_spca508: reg_read err -71 [ 232.602645][ T5934] gspca_spca508: reg_read err -71 [ 232.609140][ T5934] gspca_spca508: reg_read err -71 [ 232.614686][ T5934] gspca_spca508: reg write: error -71 [ 232.620263][ T5952] usb usb6-port1: attempt power cycle [ 232.627253][ T5934] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 232.641684][ T5934] usb 1-1: USB disconnect, device number 65 [ 232.658789][ T9] usb-storage 5-1:0.65: USB Mass Storage device detected [ 232.673988][ T9] usb-storage 5-1:0.65: Quirks match for vid 052b pid 1911: 20 [ 232.771306][ T9] usb 5-1: USB disconnect, device number 51 [ 232.957617][ T5952] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 232.978152][ T5952] usb 6-1: device descriptor read/8, error -71 [ 233.067612][ T5934] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 233.207555][ T8281] netlink: 'syz.4.599': attribute type 10 has an invalid length. [ 233.218029][ T5934] usb 1-1: Using ep0 maxpacket: 8 [ 233.221896][ T5952] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 233.232754][ T8281] team0: Port device macvlan1 added [ 233.238559][ T5934] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 233.247924][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.259044][ T5952] usb 6-1: device descriptor read/8, error -71 [ 233.273951][ T5934] pvrusb2: Hardware description: Terratec Grabster AV400 [ 233.289409][ T5934] pvrusb2: ********** [ 233.293448][ T5934] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 233.318181][ T5934] pvrusb2: Important functionality might not be entirely working. [ 233.326044][ T5934] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 233.341417][ T5934] pvrusb2: ********** [ 233.368210][ T5952] usb usb6-port1: unable to enumerate USB device [ 233.495075][ T2347] pvrusb2: Invalid write control endpoint [ 233.504697][ T5934] usb 1-1: USB disconnect, device number 66 [ 233.561169][ T2347] pvrusb2: Invalid write control endpoint [ 233.576167][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 233.589725][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 233.599135][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 233.609456][ T2347] pvrusb2: Device being rendered inoperable [ 233.615480][ T2347] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 233.622915][ T2347] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 233.635133][ T2347] pvrusb2: Attached sub-driver cx25840 [ 233.640698][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 233.651034][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 233.735282][ T8292] Invalid ELF header magic: != ELF [ 233.795946][ T8297] netlink: 108 bytes leftover after parsing attributes in process `syz.4.603'. [ 233.962608][ T5871] Bluetooth: hci2: unexpected cc 0x042d length: 1 < 7 [ 234.039531][ T5871] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 234.048709][ T5871] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 234.110444][ T116] usb 3-1: USB disconnect, device number 75 [ 234.197518][ T5959] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 234.317689][ T5934] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 234.357661][ T5959] usb 5-1: Using ep0 maxpacket: 32 [ 234.364311][ T5959] usb 5-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 234.375101][ T5959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.385196][ T5959] usb 5-1: config 0 descriptor?? [ 234.393563][ T5959] usb 5-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 234.402821][ T5959] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 234.413569][ T5959] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 234.420299][ T5959] usb 5-1: media controller created [ 234.435646][ T5959] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 234.456029][ T5959] usb 5-1: selecting invalid altsetting 1 [ 234.462007][ T5959] set interface failed [ 234.462033][ T5959] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 234.469522][ T5934] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 234.472689][ T5959] error writing reg: 0xff, val: 0x00 [ 234.481443][ T5934] usb 1-1: config 0 has no interface number 0 [ 234.502083][ T5934] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 234.508365][ T5959] dvb_usb_mxl111sf 5-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 234.516911][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.529009][ T116] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 234.537291][ T5934] usb 1-1: Product: syz [ 234.548249][ T5934] usb 1-1: Manufacturer: syz [ 234.563254][ T5934] usb 1-1: SerialNumber: syz [ 234.573086][ T5934] usb 1-1: config 0 descriptor?? [ 234.579784][ T8321] netlink: 24 bytes leftover after parsing attributes in process `syz.5.609'. [ 234.600546][ T5951] usb 5-1: USB disconnect, device number 52 [ 234.687856][ T116] usb 3-1: Using ep0 maxpacket: 32 [ 234.695766][ T116] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.709404][ T116] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.719461][ T116] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 234.728627][ T116] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.739607][ T116] usb 3-1: config 0 descriptor?? [ 234.927634][ T5959] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 234.990550][ T5934] usb 1-1: Firmware: major: 93, minor: 58, hardware type: UNKNOWN (182) [ 235.092345][ T5959] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 235.101485][ T5959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.109605][ T5959] usb 6-1: Product: syz [ 235.113788][ T5959] usb 6-1: Manufacturer: syz [ 235.118642][ T5959] usb 6-1: SerialNumber: syz [ 235.200689][ T5934] usb 1-1: no permanent extended address found, random address set [ 235.209433][ T5934] usb 1-1: atusb_probe: initialization failed, error = -524 [ 235.218723][ T5934] atusb 1-1:0.128: probe with driver atusb failed with error -524 [ 235.251876][ T116] hid_parser_main: 55 callbacks suppressed [ 235.251897][ T116] ft260 0003:0403:6030.001E: unknown main item tag 0x7 [ 235.407058][ T5920] usb 1-1: USB disconnect, device number 67 [ 235.427693][ T5951] usb 5-1: new low-speed USB device number 53 using dummy_hcd [ 235.445710][ T8319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.455512][ T8319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.468062][ T8319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.476845][ T8319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.541200][ T116] ft260 0003:0403:6030.001E: failed to retrieve chip version [ 235.549113][ T116] ft260 0003:0403:6030.001E: probe with driver ft260 failed with error -71 [ 235.557925][ T5951] usb 5-1: device descriptor read/64, error -71 [ 235.568414][ T116] usb 3-1: USB disconnect, device number 76 [ 235.743599][ T5959] rtl8150 6-1:1.0: eth9: rtl8150 is detected [ 235.807502][ T5951] usb 5-1: new low-speed USB device number 54 using dummy_hcd [ 235.937691][ T5951] usb 5-1: device descriptor read/64, error -71 [ 235.963084][ T116] usb 6-1: USB disconnect, device number 46 [ 236.080259][ T5951] usb usb5-port1: attempt power cycle [ 236.280426][ T5920] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 236.347508][ T5959] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 236.437524][ T5920] usb 1-1: Using ep0 maxpacket: 8 [ 236.444631][ T5920] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 236.447584][ T5951] usb 5-1: new low-speed USB device number 55 using dummy_hcd [ 236.456094][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.482982][ T5920] pvrusb2: Hardware description: Terratec Grabster AV400 [ 236.502480][ T5959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 236.507346][ T5951] usb 5-1: device descriptor read/8, error -71 [ 236.515502][ T5920] pvrusb2: ********** [ 236.524736][ T5959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 236.542414][ T5920] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 236.553026][ T8367] netlink: 80 bytes leftover after parsing attributes in process `syz.5.616'. [ 236.553057][ T5959] usb 3-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 236.571922][ T5920] pvrusb2: Important functionality might not be entirely working. [ 236.580340][ T8366] netlink: 80 bytes leftover after parsing attributes in process `syz.5.616'. [ 236.584715][ T5920] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 236.601514][ T5959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.609871][ T5920] pvrusb2: ********** [ 236.625155][ T5959] usb 3-1: config 0 descriptor?? [ 236.631623][ T8349] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 236.686436][ T2347] pvrusb2: Invalid write control endpoint [ 236.691069][ T5920] usb 1-1: USB disconnect, device number 68 [ 236.768346][ T5951] usb 5-1: new low-speed USB device number 56 using dummy_hcd [ 236.777156][ T2347] pvrusb2: Invalid write control endpoint [ 236.790341][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 236.800017][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 236.810518][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 236.823462][ T5951] usb 5-1: device descriptor read/8, error -71 [ 236.829896][ T2347] pvrusb2: Device being rendered inoperable [ 236.836007][ T2347] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 236.844027][ T2347] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 236.853480][ T2347] pvrusb2: Attached sub-driver cx25840 [ 236.859216][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 236.870250][ T5959] glorious 0003:22D4:1503.001F: hidraw0: USB HID v0.00 Device [Glorious Model I] on usb-dummy_hcd.2-1/input0 [ 236.887334][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 236.949625][ T5951] usb usb5-port1: unable to enumerate USB device [ 236.960523][ T116] usb 3-1: USB disconnect, device number 77 [ 236.993243][ T8375] fido_id[8375]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 237.079149][ T8381] netdevsim netdevsim2 ªªªªªª: renamed from netdevsim0 (while UP) [ 237.357568][ T5920] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 237.447493][ T116] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 237.517469][ T5920] usb 6-1: Using ep0 maxpacket: 16 [ 237.523973][ T5920] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 237.533062][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.543115][ T5920] usb 6-1: config 0 descriptor?? [ 237.552452][ T5920] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 237.597774][ T116] usb 3-1: Using ep0 maxpacket: 8 [ 237.606566][ T116] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 237.615765][ T116] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.623865][ T116] usb 3-1: Product: syz [ 237.628208][ T116] usb 3-1: Manufacturer: syz [ 237.632826][ T116] usb 3-1: SerialNumber: syz [ 237.640256][ T116] usb 3-1: config 0 descriptor?? [ 237.755200][ T8383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.764148][ T8383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.773349][ T5920] usb 6-1: Detected FT232B [ 237.848152][ T116] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 237.904397][ T5871] Bluetooth: hci3: unexpected cc 0x042d length: 1 < 7 [ 237.911790][ T5871] Bluetooth: hci3: unexpected event for opcode 0x042d [ 237.951698][ T116] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 237.972227][ T116] usb 3-1: USB disconnect, device number 78 [ 237.982430][ T5920] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 237.995836][ T5920] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 238.005928][ T5920] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 238.016023][ T5920] usb 6-1: USB disconnect, device number 47 [ 238.018606][ T5871] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 238.018673][ T5871] Bluetooth: hci2: Injecting HCI hardware error event [ 238.020656][ T51] Bluetooth: hci2: hardware error 0x00 [ 238.029540][ T5920] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 238.030095][ T5920] ftdi_sio 6-1:0.0: device disconnected [ 238.098172][ T5871] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 238.098236][ T5871] Bluetooth: hci3: Injecting HCI hardware error event [ 238.100009][ T5880] Bluetooth: hci3: hardware error 0x00 [ 238.137526][ T5959] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 238.297560][ T5959] usb 1-1: Using ep0 maxpacket: 32 [ 238.309379][ T5959] usb 1-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 238.337480][ T5959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.358726][ T5959] usb 1-1: config 0 descriptor?? [ 238.370313][ T5959] usb 1-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 238.410133][ T5959] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 238.437898][ T5959] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 238.444601][ T5959] usb 1-1: media controller created [ 238.474362][ T5959] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 238.515231][ T5959] usb 1-1: selecting invalid altsetting 1 [ 238.527519][ T5959] set interface failed [ 238.527546][ T5959] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 238.540323][ T5959] error writing reg: 0xff, val: 0x00 [ 238.588678][ T5959] dvb_usb_mxl111sf 1-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 238.624930][ T5959] usb 1-1: USB disconnect, device number 69 [ 238.709230][ T116] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 238.877627][ T116] usb 5-1: Using ep0 maxpacket: 32 [ 238.884430][ T8417] syzkaller1: entered promiscuous mode [ 238.884497][ T116] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 238.890393][ T8417] syzkaller1: entered allmulticast mode [ 238.901928][ T116] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 238.901959][ T116] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 238.902005][ T116] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 238.902026][ T116] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.909446][ T116] usb 5-1: config 0 descriptor?? [ 238.910149][ T8410] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 238.921498][ T5920] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 238.985565][ T8419] netlink: 80 bytes leftover after parsing attributes in process `syz.2.632'. [ 238.988044][ T116] hub 5-1:0.0: USB hub found [ 239.119541][ T8421] netlink: 'syz.0.633': attribute type 1 has an invalid length. [ 239.128589][ T5920] usb 6-1: Using ep0 maxpacket: 8 [ 239.135672][ T5920] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 239.146382][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.180684][ T5920] pvrusb2: Hardware description: Terratec Grabster AV400 [ 239.192181][ T5920] pvrusb2: ********** [ 239.196615][ T5920] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 239.197728][ T116] hub 5-1:0.0: 2 ports detected [ 239.210734][ T5920] pvrusb2: Important functionality might not be entirely working. [ 239.221767][ T5920] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 239.240866][ T5920] pvrusb2: ********** [ 239.370152][ T8412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.386191][ T8412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.404026][ T2347] pvrusb2: Invalid write control endpoint [ 239.442858][ T5920] usb 6-1: USB disconnect, device number 48 [ 239.450433][ T8429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.636'. [ 239.487513][ T24] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 239.519320][ T2347] pvrusb2: Invalid write control endpoint [ 239.525438][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 239.538768][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 239.546969][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 239.558438][ T2347] pvrusb2: Device being rendered inoperable [ 239.564555][ T2347] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 239.583403][ T2347] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 239.611814][ T2347] pvrusb2: Attached sub-driver cx25840 [ 239.625480][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 239.638386][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 239.670831][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 239.692926][ T24] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 239.708986][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.717245][ T24] usb 1-1: Product: syz [ 239.723404][ T24] usb 1-1: Manufacturer: syz [ 239.728714][ T24] usb 1-1: SerialNumber: syz [ 239.750315][ T24] usb 1-1: config 0 descriptor?? [ 239.759481][ T24] gspca_main: sq905-2.14.0 probing 2770:9120 [ 239.961221][ T24] gspca_sq905: sq905_command: usb_control_msg failed 2 (-32) [ 239.969499][ T24] sq905 1-1:0.0: probe with driver sq905 failed with error -32 [ 240.097923][ T51] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 240.134585][ T30] audit: type=1800 audit(1758812237.439:601): pid=8462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.5.645" name="/" dev="sockfs" ino=20236 res=0 errno=0 [ 240.167656][ T5952] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 240.180022][ T5880] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 240.347533][ T5952] usb 3-1: Using ep0 maxpacket: 16 [ 240.355952][ T5952] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 240.364848][ T5952] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.374987][ T5952] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 240.386379][ T5952] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 240.395927][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.404180][ T5952] usb 3-1: Product: syz [ 240.409462][ T5952] usb 3-1: Manufacturer: syz [ 240.414094][ T5952] usb 3-1: SerialNumber: syz [ 240.516664][ T8475] /dev/nullb0: Can't open blockdev [ 240.639155][ T8410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.648044][ T8410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.836352][ T5952] usb 3-1: 0:2 : does not exist [ 241.247485][ T5920] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 241.264198][ T116] hub 5-1:0.0: hub_ext_port_status failed (err = 0) [ 241.399897][ T5920] usb 6-1: unable to get BOS descriptor or descriptor too short [ 241.409430][ T5920] usb 6-1: not running at top speed; connect to a high speed hub [ 241.418440][ T5920] usb 6-1: config 8 has an invalid interface number: 11 but max is 0 [ 241.426595][ T5920] usb 6-1: config 8 has no interface number 0 [ 241.432889][ T5920] usb 6-1: config 8 interface 11 has no altsetting 0 [ 241.443846][ T8445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.453532][ T8445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.462306][ T5920] usb 6-1: New USB device found, idVendor=08e9, idProduct=bdb3, bcdDevice=7c.ff [ 241.473230][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.481359][ T5920] usb 6-1: Product: syz [ 241.485858][ T5920] usb 6-1: Manufacturer: syz [ 241.492280][ T5920] usb 6-1: SerialNumber: syz [ 241.512948][ T5952] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 241.541938][ T5952] usb 3-1: USB disconnect, device number 79 [ 241.574020][ T5882] udevd[5882]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 241.673876][ T116] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 241.674375][ T9] usb 5-1: USB disconnect, device number 57 [ 241.682634][ T116] usb 5-1-port2: attempt power cycle [ 241.710546][ T8487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.720253][ T8487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.245133][ T9] usb 1-1: USB disconnect, device number 70 [ 242.487867][ T5934] usb 3-1: new low-speed USB device number 80 using dummy_hcd [ 242.649156][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 242.660383][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.670409][ T5934] usb 3-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 242.679588][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.691166][ T5934] usb 3-1: config 0 descriptor?? [ 242.700184][ T5934] usbhid 3-1:0.0: can't add hid device: -22 [ 242.706207][ T5934] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 242.737512][ T9] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 242.747986][ T5952] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 242.887719][ T5952] usb 5-1: device descriptor read/64, error -71 [ 242.896020][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 242.899620][ T8500] comedi comedi2: aio_iiro_16: I/O port conflict (0x4f27,8) [ 242.905140][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.914875][ T24] usb 3-1: USB disconnect, device number 80 [ 242.927639][ T9] usb 1-1: config 0 has no interface number 0 [ 242.940275][ T9] usb 1-1: New USB device found, idVendor=0572, idProduct=58a2, bcdDevice=27.0a [ 242.949459][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.957749][ T9] usb 1-1: Product: syz [ 242.961964][ T9] usb 1-1: Manufacturer: syz [ 242.966559][ T9] usb 1-1: SerialNumber: syz [ 242.973645][ T9] usb 1-1: config 0 descriptor?? [ 242.983736][ T9] cx231xx 1-1:0.1: New device syz syz @ 12 Mbps (0572:58a2) with 1 interfaces [ 242.993525][ T9] cx231xx 1-1:0.1: Not found matching IAD interface [ 243.127602][ T5952] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 243.184326][ T24] usb 1-1: USB disconnect, device number 71 [ 243.267571][ T5952] usb 5-1: device descriptor read/64, error -71 [ 243.388041][ T5952] usb usb5-port1: attempt power cycle [ 243.717610][ T9] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 243.747845][ T5952] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 243.778773][ T5952] usb 5-1: device descriptor read/8, error -71 [ 243.871682][ T9] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 243.881138][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.894810][ T9] usb 3-1: Product: syz [ 243.899511][ T9] usb 3-1: Manufacturer: syz [ 243.904376][ T9] usb 3-1: SerialNumber: syz [ 243.914725][ T9] usb 3-1: config 0 descriptor?? [ 243.991630][ T5920] cdc_wdm 6-1:8.11: probe with driver cdc_wdm failed with error -22 [ 244.017330][ T5920] usb 6-1: USB disconnect, device number 49 [ 244.035569][ T5952] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 244.088302][ T5952] usb 5-1: device descriptor read/8, error -71 [ 244.134384][ T9] hso 3-1:0.0: Failed to find BULK IN ep [ 244.151085][ T9] usb-storage 3-1:0.0: USB Mass Storage device detected [ 244.197808][ T5952] usb usb5-port1: unable to enumerate USB device [ 244.331599][ T24] usb 3-1: USB disconnect, device number 81 [ 244.362609][ T8548] netlink: 8 bytes leftover after parsing attributes in process `syz.5.673'. [ 244.392922][ T8550] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 244.402960][ T8550] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 244.421628][ T8550] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 244.429998][ T8550] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 244.438897][ T8552] netlink: 20 bytes leftover after parsing attributes in process `syz.0.672'. [ 244.696314][ T8563] netlink: 20 bytes leftover after parsing attributes in process `syz.5.676'. [ 244.767517][ T5934] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 244.919183][ T5934] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 244.930232][ T5934] usb 1-1: config 0 interface 0 has no altsetting 0 [ 244.936855][ T5934] usb 1-1: New USB device found, idVendor=17ef, idProduct=61ae, bcdDevice= 0.00 [ 244.945939][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.956331][ T5934] usb 1-1: config 0 descriptor?? [ 244.966924][ T5934] usbhid 1-1:0.0: can't add hid device: -22 [ 244.975909][ T5934] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 244.979756][ T9] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 245.160778][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 245.170171][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.178314][ T9] usb 6-1: Product: syz [ 245.182735][ T9] usb 6-1: Manufacturer: syz [ 245.187349][ T9] usb 6-1: SerialNumber: syz [ 245.246202][ T5920] usb 1-1: USB disconnect, device number 72 [ 245.487777][ T5934] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 245.651921][ T5934] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 245.662100][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.670406][ T5934] usb 3-1: Product: syz [ 245.674588][ T5934] usb 3-1: Manufacturer: syz [ 245.679474][ T5934] usb 3-1: SerialNumber: syz [ 245.686823][ T5934] usb 3-1: config 0 descriptor?? [ 245.768209][ T5920] usb 1-1: new low-speed USB device number 73 using dummy_hcd [ 245.929679][ T5920] usb 1-1: config 9 has an invalid interface number: 1 but max is 0 [ 245.938060][ T5920] usb 1-1: config 9 has no interface number 0 [ 245.944203][ T5920] usb 1-1: config 9 interface 1 has no altsetting 0 [ 245.956000][ T5920] usb 1-1: string descriptor 0 read error: -22 [ 245.962544][ T5920] usb 1-1: New USB device found, idVendor=2040, idProduct=b140, bcdDevice=75.36 [ 245.972423][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.995056][ T5920] cx231xx 1-1:9.1: New device @ 1.5 Mbps (2040:b140) with 1 interfaces [ 246.003646][ T5920] cx231xx 1-1:9.1: Not found matching IAD interface [ 246.117571][ T5934] airspy 3-1:0.0: Board ID: 00 [ 246.122390][ T5934] airspy 3-1:0.0: Firmware version: [ 246.196818][ T5920] usb 1-1: USB disconnect, device number 73 [ 246.311162][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.680'. [ 246.625378][ T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 246.644205][ T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 246.655612][ T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 246.666555][ T9] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 246.686541][ T9] usb 6-1: USB disconnect, device number 50 [ 246.751618][ T5934] airspy 3-1:0.0: usb_control_msg() failed -71 request 12 [ 246.771867][ T5934] airspy 3-1:0.0: Registered as swradio24 [ 246.779973][ T5934] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 246.797647][ T5934] usb 3-1: USB disconnect, device number 82 [ 246.963868][ T8608] netlink: 140 bytes leftover after parsing attributes in process `syz.4.686'. [ 247.138673][ T8622] fuse: Bad value for 'group_id' [ 247.143752][ T8622] fuse: Bad value for 'group_id' [ 247.268387][ T5934] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 247.418278][ T5934] usb 5-1: device descriptor read/64, error -71 [ 247.427598][ T5920] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 247.477684][ T116] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 247.579507][ T5920] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 247.593657][ T5920] usb 6-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 247.603271][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.620964][ T5920] usb 6-1: config 0 descriptor?? [ 247.648776][ T116] usb 1-1: config 150 has an invalid interface number: 204 but max is 2 [ 247.657291][ T116] usb 1-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 247.666584][ T116] usb 1-1: config 150 has no interface number 0 [ 247.672978][ T116] usb 1-1: config 150 interface 204 has no altsetting 0 [ 247.680123][ T5934] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 247.691772][ T116] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 247.701436][ T116] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.710271][ T116] usb 1-1: Product: syz [ 247.714622][ T116] usb 1-1: Manufacturer: syz [ 247.719693][ T116] usb 1-1: SerialNumber: syz [ 247.837532][ T5934] usb 5-1: device descriptor read/64, error -71 [ 247.931647][ T116] xr_serial 1-1:150.204: skipping garbage [ 247.937876][ T116] xr_serial 1-1:150.204: xr_serial converter detected [ 247.948433][ T5934] usb usb5-port1: attempt power cycle [ 248.064244][ T5920] dragonrise 0003:0079:0006.0020: item fetching failed at offset 2/5 [ 248.073970][ T5920] dragonrise 0003:0079:0006.0020: parse failed [ 248.080610][ T5920] dragonrise 0003:0079:0006.0020: probe with driver dragonrise failed with error -22 [ 248.286091][ T8641] cifs: Unknown parameter ' 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 85 [ 269.822656][ T5880] Bluetooth: hci0: hardware error 0x00 [ 269.840465][ T5913] RSP: 0018:ffffc900050cf5c0 EFLAGS: 00010293 [ 269.840489][ T5913] RAX: ffffffff82619181 RBX: ffff88805af45690 RCX: ffff88807cef0000 [ 269.840504][ T5913] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 269.840515][ T5913] RBP: 0000000000000000 R08: ffff88805af45693 R09: 1ffff1100b5e8ad2 [ 269.840527][ T5913] R10: dffffc0000000000 R11: ffffed100b5e8ad3 R12: ffff888030f43ca8 [ 269.840541][ T5913] R13: 1ffff110061e8796 R14: ffff888030f43cb0 R15: 1ffff110061e8795 [ 269.840553][ T5913] FS: 0000000000000000(0000) GS:ffff8881257be000(0000) knlGS:0000000000000000 [ 269.840567][ T5913] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 269.840579][ T5913] CR2: 00002000000031c0 CR3: 0000000073138000 CR4: 00000000003526f0 [ 269.840595][ T5913] Call Trace: [ 269.840606][ T5913] [ 269.840619][ T5913] kobject_add_internal+0x632/0xb40 [ 269.840670][ T5913] kobject_add+0x155/0x220 [ 269.840712][ T5913] ? __pfx_kobject_add+0x10/0x10 [ 269.840728][ T5913] ? __kasan_kmalloc+0x93/0xb0 [ 269.840763][ T5913] ? kobject_init+0x83/0x1e0 [ 269.840793][ T5913] get_device_parent+0x316/0x3a0 [ 269.840840][ T5913] device_add+0x2e1/0xb50 [ 269.840885][ T5913] firmware_fallback_sysfs+0x2e4/0x9b0 [ 269.840918][ T5913] ? kmem_cache_free+0x19b/0x690 [ 269.840961][ T5913] _request_firmware+0xf83/0x15b0 [ 269.898883][ T9035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.826'. [ 269.902055][ T5913] ? __pfx__request_firmware+0x10/0x10 [ 269.985848][ T5913] ? process_scheduled_works+0x9ef/0x17b0 [ 269.991658][ T5913] request_firmware_work_func+0xaf/0x1c0 [ 269.997335][ T5913] ? process_scheduled_works+0x9ef/0x17b0 [ 270.003168][ T5913] process_scheduled_works+0xae1/0x17b0 [ 270.008908][ T5913] ? __pfx_process_scheduled_works+0x10/0x10 [ 270.014933][ T5913] worker_thread+0x8a0/0xda0 [ 270.019812][ T5913] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 270.026194][ T5913] ? __kthread_parkme+0x7b/0x200 [ 270.031217][ T5913] kthread+0x711/0x8a0 [ 270.035310][ T5913] ? __pfx_worker_thread+0x10/0x10 [ 270.040482][ T5913] ? __pfx_kthread+0x10/0x10 [ 270.045091][ T5913] ? _raw_spin_unlock_irq+0x23/0x50 [ 270.050334][ T5913] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.055541][ T5913] ? __pfx_kthread+0x10/0x10 [ 270.060197][ T5913] ret_from_fork+0x4bc/0x870 [ 270.064808][ T5913] ? __pfx_ret_from_fork+0x10/0x10 [ 270.069983][ T5913] ? __switch_to_asm+0x39/0x70 [ 270.074755][ T5913] ? __switch_to_asm+0x33/0x70 [ 270.079572][ T5913] ? __pfx_kthread+0x10/0x10 [ 270.084196][ T5913] ret_from_fork_asm+0x1a/0x30 [ 270.089093][ T5913] [ 270.092123][ T5913] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 270.099483][ T5913] CPU: 0 UID: 0 PID: 5913 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 270.108847][ T5913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 270.118934][ T5913] Workqueue: events request_firmware_work_func [ 270.125106][ T5913] Call Trace: [ 270.128375][ T5913] [ 270.131469][ T5913] dump_stack_lvl+0x99/0x250 [ 270.136053][ T5913] ? __asan_memcpy+0x40/0x70 [ 270.140632][ T5913] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.145820][ T5913] ? __pfx__printk+0x10/0x10 [ 270.150411][ T5913] vpanic+0x237/0x6d0 [ 270.154380][ T5913] ? __pfx_vpanic+0x10/0x10 [ 270.158881][ T5913] ? is_bpf_text_address+0x292/0x2b0 [ 270.164158][ T5913] ? is_bpf_text_address+0x26/0x2b0 [ 270.169373][ T5913] panic+0xb9/0xc0 [ 270.173102][ T5913] ? __pfx_panic+0x10/0x10 [ 270.177519][ T5913] ? ret_from_fork_asm+0x1a/0x30 [ 270.182473][ T5913] __warn+0x334/0x4c0 [ 270.186461][ T5913] ? kernfs_get+0x72/0x90 [ 270.190806][ T5913] ? kernfs_get+0x72/0x90 [ 270.195145][ T5913] report_bug+0x2be/0x4f0 [ 270.199482][ T5913] ? kernfs_get+0x72/0x90 [ 270.203848][ T5913] ? kernfs_get+0x72/0x90 [ 270.208190][ T5913] ? kernfs_get+0x74/0x90 [ 270.212522][ T5913] handle_bug+0x84/0x160 [ 270.216766][ T5913] exc_invalid_op+0x1a/0x50 [ 270.221261][ T5913] asm_exc_invalid_op+0x1a/0x20 [ 270.226100][ T5913] RIP: 0010:kernfs_get+0x72/0x90 [ 270.231028][ T5913] Code: e8 73 05 5f ff 48 89 df be 04 00 00 00 e8 86 49 c4 ff f0 ff 03 eb 05 e8 5c 05 5f ff 5b 5d c3 cc cc cc cc cc e8 4f 05 5f ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 85 [ 270.250620][ T5913] RSP: 0018:ffffc900050cf5c0 EFLAGS: 00010293 [ 270.256676][ T5913] RAX: ffffffff82619181 RBX: ffff88805af45690 RCX: ffff88807cef0000 [ 270.264634][ T5913] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 270.272598][ T5913] RBP: 0000000000000000 R08: ffff88805af45693 R09: 1ffff1100b5e8ad2 [ 270.280562][ T5913] R10: dffffc0000000000 R11: ffffed100b5e8ad3 R12: ffff888030f43ca8 [ 270.288523][ T5913] R13: 1ffff110061e8796 R14: ffff888030f43cb0 R15: 1ffff110061e8795 [ 270.296603][ T5913] ? kernfs_get+0x71/0x90 [ 270.300954][ T5913] kobject_add_internal+0x632/0xb40 [ 270.306159][ T5913] kobject_add+0x155/0x220 [ 270.310567][ T5913] ? __pfx_kobject_add+0x10/0x10 [ 270.315490][ T5913] ? __kasan_kmalloc+0x93/0xb0 [ 270.320247][ T5913] ? kobject_init+0x83/0x1e0 [ 270.324828][ T5913] get_device_parent+0x316/0x3a0 [ 270.329765][ T5913] device_add+0x2e1/0xb50 [ 270.334095][ T5913] firmware_fallback_sysfs+0x2e4/0x9b0 [ 270.339555][ T5913] ? kmem_cache_free+0x19b/0x690 [ 270.344499][ T5913] _request_firmware+0xf83/0x15b0 [ 270.349548][ T5913] ? __pfx__request_firmware+0x10/0x10 [ 270.355004][ T5913] ? process_scheduled_works+0x9ef/0x17b0 [ 270.360719][ T5913] request_firmware_work_func+0xaf/0x1c0 [ 270.366344][ T5913] ? process_scheduled_works+0x9ef/0x17b0 [ 270.372054][ T5913] process_scheduled_works+0xae1/0x17b0 [ 270.377614][ T5913] ? __pfx_process_scheduled_works+0x10/0x10 [ 270.383597][ T5913] worker_thread+0x8a0/0xda0 [ 270.388183][ T5913] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 270.394507][ T5913] ? __kthread_parkme+0x7b/0x200 [ 270.399440][ T5913] kthread+0x711/0x8a0 [ 270.403508][ T5913] ? __pfx_worker_thread+0x10/0x10 [ 270.408609][ T5913] ? __pfx_kthread+0x10/0x10 [ 270.413195][ T5913] ? _raw_spin_unlock_irq+0x23/0x50 [ 270.418384][ T5913] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.423567][ T5913] ? __pfx_kthread+0x10/0x10 [ 270.428154][ T5913] ret_from_fork+0x4bc/0x870 [ 270.432734][ T5913] ? __pfx_ret_from_fork+0x10/0x10 [ 270.437850][ T5913] ? __switch_to_asm+0x39/0x70 [ 270.442707][ T5913] ? __switch_to_asm+0x33/0x70 [ 270.447457][ T5913] ? __pfx_kthread+0x10/0x10 [ 270.452065][ T5913] ret_from_fork_asm+0x1a/0x30 [ 270.456854][ T5913] [ 270.460133][ T5913] Kernel Offset: disabled [ 270.464467][ T5913] Rebooting in 86400 seconds..