last executing test programs: 1m45.647364114s ago: executing program 0 (id=1111): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002", 0x17}], 0x1}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x3}) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl(r0, 0x8b32, &(0x7f0000000040)) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000100)={0x3, 0x0, 0xa1, 0x3, 0x1000}) r5 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r5, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000084"], 0x18}}], 0x2, 0x844) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100feffffff00000000010000001c0007800c00018008000100", @ANYRES32=r4, @ANYBLOB="0c000180d04a0100", @ANYRES32=r4, @ANYBLOB="0c0002"], 0x3c}}, 0x20000000) connect(r1, &(0x7f0000000cc0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x80) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0xac}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c00018006000600800a000008001500", @ANYRES32=0x0, @ANYBLOB="060012fb0700f6adac0023", @ANYRESOCT=r8], 0x38}, 0x1, 0x0, 0x0, 0x20048814}, 0xc080) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000007061d080cb27cbc00000000020000020900010007"], 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x800) 1m45.565520792s ago: executing program 0 (id=1112): r0 = fsopen(&(0x7f0000000180)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x800, 0x40002) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f00000001c0)={0x3e, &(0x7f00000000c0)=[{0x24, '\x00', @st={0x4, [{0x0, @svalue=0x6000000000000000}, {0x3, @uvalue=0x10}, {0x3, @svalue=0x8}, {0x2, @svalue=0xd83a}]}}]}) (async) syz_io_uring_setup(0x3087, &(0x7f00000003c0)={0x0, 0x7562, 0x1000, 0x3, 0x862f8}, &(0x7f0000000f00), &(0x7f00000000c0)) r2 = fsmount(r0, 0x0, 0x1) openat$cgroup_int(r2, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) fchdir(r2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file0/file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x25b7c1da0e17548f, &(0x7f0000000dc0)='\xcd\xd2\xbeN\xd5\xf4\x97\x12I[\xd1\xeb\xdc\xe6\xd6]\xf2\xa5\xc7\x94\x1d\xaaJ\xd4t\x06(\xe5\va\xc1d\x92\a\x88\x96494\x7f\x02es\x8f\xdd.\x99\x9d\x94Pl\xb41\xb2\x87\x10=\xe5)\xa0E\xb4\x11\x96\b\xcc\xd4\xabWF4\x83\xbe_uZ\x90\xef\xc9\x15\x93t\xedSC\x12\xcd=e\x9b\xfcD\xfb\x05J?\xd9\xd5t\xc3\x12A\xb5\xbb\xebB\xcafCjD\n\x8eZo\x17+\xa8\xd4\x0f\xb2\xad\xe2\xea\xfc\xb5\xc9\xaa\xd1\x84\xc3LT\x16\xe1\xc9\xf5\t\"\xd7p\x8fX\x8b\xde\xd0\x87\xad\x8e\x85\xc5\xea\x85\xf3\xe0N\x96]\xba\xb7\x92\xbe\xa0\xe9\xafz\as\xef\xefG\xd1\xb1\x95\x19\x02\x7f-\xf8i[\xe6\xc2\xa55\x97\xe1\xb6\x83\xe2a\x87\x98tt\n\x9dt!Ck\xdd\x84\xe7\'\xea?\xe6\x06\xbeP\xb0\x1c\x8d\xd2\xf7\xa1\xae[\xb9\xa5:\xdd`\xa7\xfc\xc8\x89\x8e\xd0;\x82\x9e\x80S\xda\x89\xb3,cF\xd7\xef\x1c99Q\'\x95\x1d7\xceZ2\x9a\xda?\x9e\xac\x87\xb1\x93\xdb\x8e\xb3\x01<\xee\xdb_\xde\xcb5\x86\xef\xcaY\t\x82\xa8J\xbe\x1f\x91\xf9BV(d\x80\xf8\xf7c\xb2\x00\x00\x00\x00\x00\x00>\xe8\x95g\x94\xd3\n\xf1') r3 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) unlinkat(r3, &(0x7f0000000240)='./file0/file0\x00', 0x200) (async) quotactl_fd$Q_SETINFO(r3, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0x8000000000008, 0x7, 0x0, 0xc}) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000080)={0x2}, 0x2) sendmmsg(r4, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000540)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000600)="a65373c5944ca61f18998263665aac9691b59f3197c4baeeb6eb55d5a1937baee8c11d1d3d4109cd4a165129cec3df66cfe3f2025d9a9de6ae0ca8c3623f95861a320b75f0216e8119bac1b769abaa362690926c774c7ebd34073113c1007d0e1dcb1c9c0b5ad0d4c809acbffc63ff15f233b03de739c2517a1b5274cb95cadf8ebd68364000e6de1780b63d58f1ec7c9e6f532b364a334c87c3988751c8900862bd5e", 0xa3}, {&(0x7f00000006c0)="5d75b93f5fcf2b19c53ca41980ef64140456e00864a6d444b129c9e682b0e21a3b6143ac93e25c1a1bc60c684f1b2b20377be772082df0b22bd64f52814605e4b75de9b83e53776fdd84138a640fddfed51f0a7ae2ad6a185910b8347db90746ae37958eb373b05fb5da95fdda524adb801b86f6cfd6d12edccf785e5a1dd7ecbbd887e9600f474af35401c9bd5957fd8147e06fa5a9de5a84f2ce636a1c6fcbf14d039df6142c0bf945da9bc846ee4c879dad7c5742b20b77ee3c639aac82e614adcfa950ce0ac5d14f", 0xca}, {&(0x7f0000000480)="91eabed4353fa061216635017019f165f73aefc9f75186e4fe9d3a24af737f355a10ffce138629d59be486", 0x2b}], 0x3, &(0x7f0000000f40)=ANY=[@ANYBLOB="b000000000000000ff00000004000000a4104edf7ffcb7e7834cb1573518462cf2bf365bf16999f65be84a29474a61dd61e3a9e40417392ae4d4362bef6e4a351548150899badb9c6343fa0cdc36b1a9fda27d76b68b0fe528c73797fd371a23be469b0bd01f45ba254d179637aaaeb7466fd49bd968002ddc728b58cbf6614d07c387e46691ce6b882fcaf9b235c67761a4a5376e7169d04b13bc7f2cb059f74917c59c972e510f3d367b9f11c40e000801000000f60000ff000000040000009696f6f41fcd476fafa0994d615d92956b9f3730e0bd9d5ea208a4db9431713cd4cb98247ef2618673b911d6cd68d3f38c1e4b90ca2fe5469bd1530bf4c392d7d67803f949473e32c03fe27ff5257c7f80e8ce48c13f478ebd191ffe15646ce03de05bfabcdc911cb32e1afc1c0711b75814bb04f415aa2b08b2690c2e51d2b8ad63667bbb15f6a84072674d3a573a11c3ebb6e22dc63b2191e6855bc4f025cfb0cabea464887a3906053ad576bcd9429e8176f6cc6234e8faeab58cc08459be7c2e20fbdd7ef3687038ba1d8a4b1a683eb637ebad537b68ced0ef3382bceea203163d02e02579a338f4f8b8b4764e88a8fc75be8027c900080100000000000010010000f700000082bf2e275b840b66017aeeaddb2f2c25a968d02dfd49449d73a0ac3912b1f1960606b2ec792d1b67fef86b1d2d155bb4f933c53c55da7483ce302466553b6c8ef13aa88a6a386a34be28638e8325d915fa0d765337789adbaac6e372041d2e65258a734bbe7df97cb9ab974a818d0c89acc8c6a1626c6cde468e06c6e6ec98b51c265b4aab9c21a4cf0369419caffee94a7a58501b57b4f29ca84b5608244af58c7d114d2fb0fd8f727b2671d1247973d834032c8b88e5858324bf6003de0b161cb9d57f8a6d31378d5d4025f4f5b68f3df955f31f55dc1f25b6df4209a5766b5cbbe0d612543cd257b430ee9f69a6a536e368c47ed66aaa0f1e20329d10f273b389221b20000010010000000000000401000004000000add8a4e50f70d9fb6f4560309dfcf278a0307675963020e4cf01a8cb206687f71b0bb5d7f1842dab2f420b3468ddaaa4cbcd7e13911f6589d968c9b731ea958764532a0f531a760bb12040619dd0da7e52003c1ddd9cbb2b1b25555b251a1ccd35c854e502d811e83d085978dea4545f45e327d1eec721d511ea1cd41f4c2630079e294c141b7d43abae61fa520438297f4c0ba1e67cf02d989296411715b3f83392b88b105b3a34e7c225cbd7f1f392b6cbc5a00b48d0fba5d7e807aeb17f7430b4c620dfb9a3e1a13e9f15993aaffaaba4e7255da588610b70f86f8da66f2132815263214979a2772991c6f3da564bd36c7204faab04322f9b000000000000d800000000000000140100000000008028205b85213fa2dc3d963636c70f0c8ddffa2565bcf49e1fadcc1dee551f23dfe5cfeb3e6f1b1c1109d79e73a56e871ea6c174612deb31ae387e1aac84f046224c85171e3d4fb651602d6053088b1dffdd7e6a76b2bc7025bddec65c3d812798a2e803bca60ad3308a523fc63605f5522f46768588e9416c29cf3a5b66f7d0a1ff092e20cd7d0849ea7a002064cdda7f27889f4c73cf15b636bf93296328d675da50b0ae56fc201a66f02aad05aae5f003ab36e4faca3429e80656191d2917831d04c4000000000068000000000000008400000081000000288c4b97e970a804850231efcb2006ee92c27f49576574b1951e8c8fba9c8bd16ebbd53b154bc3809aeb3ed0e2c9e4baa1b5f83b76ae560c06124a7034e95a27b94c0da592127f80c8d0334dc574c16500ac35d645000000"], 0x510}}], 0x2, 0x20004840) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/ip6_tables_names\x00') pread64(r7, &(0x7f0000000180)=""/15, 0xfffffe9c, 0xb6) (async) r8 = inotify_init1(0x0) inotify_add_watch(r8, &(0x7f0000000200)='.\x00', 0x600) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1m45.505592039s ago: executing program 0 (id=1114): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f0000000600)="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", 0xfd) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x2, 0x7, 0x401, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x14) ioctl$XFS_IOC_AG_GEOMETRY(r2, 0xc080583d, &(0x7f0000000100)={0x8, 0x0, 0x8, 0x7f, 0x6, 0xa88, 0x1, 0x4}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6erspan0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14) close(0x4) syz_open_dev$vcsa(&(0x7f0000000040), 0x40, 0x298d40) 1m45.349155984s ago: executing program 0 (id=1116): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x24020084, &(0x7f0000000140), 0x14) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="d40000001b43c71569fad871960002002b797000fedbdf250a01010100705c422cf4f4d99b59000000000000ddffffff00"/64, @ANYRES32, @ANYRES32, @ANYBLOB="08000000000000000400000000000000030000000000000099f9ffffffffffff00000000000000000000000000001200b500000000000000000000000000000001000000000000009b000000000000000e00000000000000ff0300000000000087060000b06b6e000201000300000000090000000000000008001e00090000000c001c00", @ANYRES32, @ANYBLOB="02000000"], 0xd4}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffc, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m45.31681024s ago: executing program 0 (id=1117): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1) write$qrtrtun(r1, &(0x7f0000000600)="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", 0x144) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x6, 0xc9, 0x4}}}, 0x8) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000640)={0x0, @adiantum, 0x0, @desc4}) accept4$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @netrom}, [@netrom, @null, @remote, @netrom, @null, @default, @bcast, @rose]}, &(0x7f0000000180)=0x48, 0x80000) sendmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f00000001c0)=@in={0x2, 0x4e21, @loopback}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000240)="b24be743a4b26882696bd4550fef6d5947b31554c2d7fb06bd4775ac7cea", 0x1e}, {&(0x7f00000003c0)="f42983318b62c6aca9553026a32aca6feb2ba637120a1e5147573899aa1d0a6ef79fc44dea5b3cbc0f34c083591348d5a6f3f379d977d7c049540fe998be0dd7fd354d56c648f7d0c5e4a45d9fd30bcbbbbcdbfc34acba34dbb46d2395fa88b676f0", 0x62}, {&(0x7f0000000440)="5e9187d5a0fe9b1b23217db575bd520e6e5c6d8a14f53b84bf6a9c831ab307b22d0b1a810311d463306cfe2b0544878eec9df155be0341d8fe7bc8e7ef9f2c4bfc794e49e5e04ca8735a433e95d113340a37753fedac88b779712fc6844cdae943391ef6f8117bee61216c344553dec89c51726d3c417e7e9741859a88a525775d76d7575c2ff8ef1adbd5078df76cd881ed0291b4d355359640a304f8069196adef6426459c3276826e60f758662ea5c7d6cb0ea3b5ba8b57c4c0ed794afdfa1d14094d5ad7778195abfaa1639f67974b406b20c3", 0xd5}, {&(0x7f0000000540)="185a2d5c4d39b0bf7a1946de20fe615c8610cf367af535f94d30e02b6b2d3d1996c4a9e4851452253eaed7fba87599c7737d2d611c3539f3444b2b16be7280846560eb569fe531c2851d09989f5a0d873d9eb6e9610270251e6576321a6182fb4145f0d61e221b9ae8a2a8add3f69d82bb48a3f5188929925985abc82bbcc36dd648ce65af86aca42ef5ed2761c50970a31dc68b", 0x94}], 0x4, &(0x7f0000000880)=[{0x100, 0x10c, 0xfffffffa, "0683b67159e828d1aa230235b6513dacb0c99a160d1ad16ad0ea824f186c37d12f8880a3570ccfa6b81ad70cc38e2e9237e1ea7f412a0457c2873fa1f3f854750d62dcb8c7167aeabd466efcac05c9f23af98c1f6269d5bd3a5199a047f6e2e40852cf1ab4ac3f76d30243ed600e43b11010acc63761bb8b9ce9480fe805f8b9ab8198bffada365c91d167e405afd58bbc265d4490f62e34421fb6d1e274cc26691f952f015b5fd741cb94cc3b06de4a19bea89a45675da889f2cc95159ceb36b7c9b81dee2b5ad6770055060c00adb11a57c7541d7d5d1bf78b970a71bf946c9e5e8824e05b4cc6c6d8e78e"}, {0x90, 0x119, 0x1, "011c9d4ac9db40a0e13feacb2c05e0d05e5bbab86713f21d344174946f5463aea62b1383227dfe9e41dcd9fbc5146557ffb1b6795ddd93570109e46392b81996fa7c2f6f94483c89127b6d2024239e382316d2b0e8600d273ea853d6fe2e2b3553bb693bddb081468e6f18b25602f7b9c504b5296b74754e84d951e1d4bc1d46"}, {0x60, 0x3a, 0x2, "42a6bd9b2a5da657bd136bb670e05e5fe850496e8b097deb161d292ca4f3291f89b644714ddd5106abc4b461cc83d86c8d016ad69a211e72add5e4eff9975418fad838c2e024875b09"}, {0x28, 0x10e, 0x9, "e9fd1a96881390971ab0f085c2033f95762c1826d2b4"}, {0xb8, 0xff, 0x3, "d350f719bf474b3e477aaa9d2854c4193909331f5b2a248868912902e3af10e9917c12eac0ddb5f9ac04c83b565c0e7d11fc11829dc9953e6a21f3b6cb056c544bbf2d82bc75244fa6abf80688b6899188a541f8c085a013b20ec86d2b7a68e6737ee91e784d79a4da8e0a14442b0a4858165306fdde6b719301bef33e38b3c8641dc82496ef387884e1ad20b361d2852bc9eced182da3155b12bff73e2a2d26ffc62f"}, {0x20, 0x115, 0xefe, "118505f43b318519d5"}, {0x68, 0x111, 0x6f, "4564fb58ae68e1bf5d1c1f82d997f174f0c345fd3d496428a69e70239caf244551f562e25c04c262047111c33376285a7b749cc9857b41e96184256c5b4c69f26b8fe08a04f944e83bc0a42eafcf5a8bdb17794e59f4b6"}, {0x40, 0xe4, 0x5, "d7bcd7e961c133bb05adb27a56ad24629b8f5a2c7929609faf29b560552a8e9035a60cf449945cb3a3a3ee1b08"}, {0x90, 0x0, 0xfffffff9, "5353f00858f6a66ec643dc44d830b58d96f7c24c88d99a5eac07bd7f1a8000e96f31439bcc3afec72ebb1d7adb104d150bdbe3b60516f48b9ec2c4681c88c1eb51e5243a645e4f51c537e9468718c85dc286ee6ca942c0f43446d8c05d770e359a1cc0dcfe166f18cd60a0274fb5c2bada09dd87b9c293193965e3"}], 0x428}}], 0x1, 0xc804) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='memory.swap.current\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000100001000000000000d300000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000800000080005400000000d38001280140000800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050800) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0b06c9"], 0xe) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500feffff7f08001240000000000500050002000000050004000000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000002c0)={0x0, 0x11, 0x6, @random="69102a2332c9"}, 0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x6) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r9, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0xfffffffffffffed0}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x40, @private1, 0x8}, 0x1a) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x7a, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010044cf1f6bd103446b2d1013284f0270e8010203010902120001ff02007f0904307e00952fc10c81b0e6ec4567ec84c4cff0b60d02da85a57be2b4ff2c217cfb64d42132c72c6a6834df47e48484947c2a34cefb732065b07d7ae7d4a3a83e26aa7f2cc5ab5959a8f82490bc88509eece2ef055afdfa901e5a5239a2481258535207c4b7da571d047e745ea9806597b1a760d3cd2b7d"], &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0}) 1m44.758100993s ago: executing program 0 (id=1118): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000b1c0)={0x2020}, 0x2020) (async) read$FUSE(r4, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r5, 0x0, 0x7ffffd}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r5, 0x0, 0x7ffffd}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r5, r6, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r8, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r8, r9, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r8, r9, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x20404, &(0x7f0000000380)={{'fd', 0x3d, r3}, 0x2c, {}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x8042edd8b491d4ea}}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise}, {@fsname={'fsname', 0x3d, '9p\x00'}}, {@subj_role={'subj_role', 0x3d, '\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '\xff\xff'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@hash}, {@dont_hash}]}}) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r10, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x1000, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x5, {[0x0, 0x4, 0xfffffffe, 0x0, 0xffffffff, 0x8, 0x4]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r10, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffc}, {0xa, 0x4e22, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x2]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC(r10, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffc}, {0xa, 0x4e22, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x2]}}, 0x5c) r11 = syz_open_dev$loop(&(0x7f0000000140), 0xd, 0x4043) ioctl$LOOP_SET_BLOCK_SIZE(r11, 0x4c09, 0x8) setsockopt$MRT6_FLUSH(r10, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="150000006bffff"], 0x15) 1m42.745946033s ago: executing program 1 (id=1132): openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100)={0x0, 0x0, 0xa}, 0x18) (async) mount(&(0x7f0000000140)=@nullb, 0x0, &(0x7f0000000000)='bfs\x00', 0x10008, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9aec, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000340)={0x2, @pix={0x8, 0x3, 0x34325258, 0x5, 0xffffffff, 0x4, 0x7, 0x4, 0x1, 0x0, 0x1}}) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7fffffff) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='yeah', 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async) sendto$inet(r2, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1m42.663287847s ago: executing program 1 (id=1133): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c001480080011"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000580)={0x40, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000002380)={0x34, &(0x7f0000002180)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, &(0x7f0000000e80)={0x2c, &(0x7f0000000c00)={0x0, 0x7, 0x2, {0x2, 0x10}}, 0x0, &(0x7f0000000d80)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, 0x0}, &(0x7f00000012c0)={0x84, &(0x7f0000000ec0)={0x0, 0x209c1c935fc9d4bd, 0x4, "95b1407b"}, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x20, 0x0, 0x4, {0x1000, 0xf652c4931ec59a0b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)={0x40, 0x1a, 0x2, 0x7}, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x15, 0x800000000004, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 1m38.798557317s ago: executing program 1 (id=1141): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1) write$qrtrtun(r1, &(0x7f0000000600)="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", 0x144) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x6, 0xc9, 0x4}}}, 0x8) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000640)={0x0, @adiantum, 0x0, @desc4}) accept4$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @netrom}, [@netrom, @null, @remote, @netrom, @null, @default, @bcast, @rose]}, &(0x7f0000000180)=0x48, 0x80000) sendmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f00000001c0)=@in={0x2, 0x4e21, @loopback}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000240)="b24be743a4b26882696bd4550fef6d5947b31554c2d7fb06bd4775ac7cea", 0x1e}, {&(0x7f00000003c0)="f42983318b62c6aca9553026a32aca6feb2ba637120a1e5147573899aa1d0a6ef79fc44dea5b3cbc0f34c083591348d5a6f3f379d977d7c049540fe998be0dd7fd354d56c648f7d0c5e4a45d9fd30bcbbbbcdbfc34acba34dbb46d2395fa88b676f0", 0x62}, {&(0x7f0000000440)="5e9187d5a0fe9b1b23217db575bd520e6e5c6d8a14f53b84bf6a9c831ab307b22d0b1a810311d463306cfe2b0544878eec9df155be0341d8fe7bc8e7ef9f2c4bfc794e49e5e04ca8735a433e95d113340a37753fedac88b779712fc6844cdae943391ef6f8117bee61216c344553dec89c51726d3c417e7e9741859a88a525775d76d7575c2ff8ef1adbd5078df76cd881ed0291b4d355359640a304f8069196adef6426459c3276826e60f758662ea5c7d6cb0ea3b5ba8b57c4c0ed794afdfa1d14094d5ad7778195abfaa1639f67974b406b20c3", 0xd5}, {&(0x7f0000000540)="185a2d5c4d39b0bf7a1946de20fe615c8610cf367af535f94d30e02b6b2d3d1996c4a9e4851452253eaed7fba87599c7737d2d611c3539f3444b2b16be7280846560eb569fe531c2851d09989f5a0d873d9eb6e9610270251e6576321a6182fb4145f0d61e221b9ae8a2a8add3f69d82bb48a3f5188929925985abc82bbcc36dd648ce65af86aca42ef5ed2761c50970a31dc68b", 0x94}], 0x4, &(0x7f0000000880)=[{0x100, 0x10c, 0xfffffffa, "0683b67159e828d1aa230235b6513dacb0c99a160d1ad16ad0ea824f186c37d12f8880a3570ccfa6b81ad70cc38e2e9237e1ea7f412a0457c2873fa1f3f854750d62dcb8c7167aeabd466efcac05c9f23af98c1f6269d5bd3a5199a047f6e2e40852cf1ab4ac3f76d30243ed600e43b11010acc63761bb8b9ce9480fe805f8b9ab8198bffada365c91d167e405afd58bbc265d4490f62e34421fb6d1e274cc26691f952f015b5fd741cb94cc3b06de4a19bea89a45675da889f2cc95159ceb36b7c9b81dee2b5ad6770055060c00adb11a57c7541d7d5d1bf78b970a71bf946c9e5e8824e05b4cc6c6d8e78e"}, {0x90, 0x119, 0x1, "011c9d4ac9db40a0e13feacb2c05e0d05e5bbab86713f21d344174946f5463aea62b1383227dfe9e41dcd9fbc5146557ffb1b6795ddd93570109e46392b81996fa7c2f6f94483c89127b6d2024239e382316d2b0e8600d273ea853d6fe2e2b3553bb693bddb081468e6f18b25602f7b9c504b5296b74754e84d951e1d4bc1d46"}, {0x60, 0x3a, 0x2, "42a6bd9b2a5da657bd136bb670e05e5fe850496e8b097deb161d292ca4f3291f89b644714ddd5106abc4b461cc83d86c8d016ad69a211e72add5e4eff9975418fad838c2e024875b09"}, {0x28, 0x10e, 0x9, "e9fd1a96881390971ab0f085c2033f95762c1826d2b4"}, {0xb8, 0xff, 0x3, "d350f719bf474b3e477aaa9d2854c4193909331f5b2a248868912902e3af10e9917c12eac0ddb5f9ac04c83b565c0e7d11fc11829dc9953e6a21f3b6cb056c544bbf2d82bc75244fa6abf80688b6899188a541f8c085a013b20ec86d2b7a68e6737ee91e784d79a4da8e0a14442b0a4858165306fdde6b719301bef33e38b3c8641dc82496ef387884e1ad20b361d2852bc9eced182da3155b12bff73e2a2d26ffc62f"}, {0x20, 0x115, 0xefe, "118505f43b318519d5"}, {0x68, 0x111, 0x6f, "4564fb58ae68e1bf5d1c1f82d997f174f0c345fd3d496428a69e70239caf244551f562e25c04c262047111c33376285a7b749cc9857b41e96184256c5b4c69f26b8fe08a04f944e83bc0a42eafcf5a8bdb17794e59f4b6"}, {0x40, 0xe4, 0x5, "d7bcd7e961c133bb05adb27a56ad24629b8f5a2c7929609faf29b560552a8e9035a60cf449945cb3a3a3ee1b08"}, {0x90, 0x0, 0xfffffff9, "5353f00858f6a66ec643dc44d830b58d96f7c24c88d99a5eac07bd7f1a8000e96f31439bcc3afec72ebb1d7adb104d150bdbe3b60516f48b9ec2c4681c88c1eb51e5243a645e4f51c537e9468718c85dc286ee6ca942c0f43446d8c05d770e359a1cc0dcfe166f18cd60a0274fb5c2bada09dd87b9c293193965e3"}], 0x428}}], 0x1, 0xc804) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='memory.swap.current\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000100001000000000000d300000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000800000080005400000000d38001280140000800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050800) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0b06c9"], 0xe) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500feffff7f08001240000000000500050002000000050004000000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000002c0)={0x0, 0x11, 0x6, @random="69102a2332c9"}, 0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x6) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r9, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0xfffffffffffffed0}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x40, @private1, 0x8}, 0x1a) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x7a, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010044cf1f6bd103446b2d1013284f0270e8010203010902120001ff02007f0904307e00952fc10c81b0e6ec4567ec84c4cff0b60d02da85a57be2b4ff2c217cfb64d42132c72c6a6834df47e48484947c2a34cefb732065b07d7ae7d4a3a83e26aa7f2cc5ab5959a8f82490bc88509eece2ef055afdfa901e5a5239a2481258535207c4b7da571d047e745ea9806597b1a760d3cd2b7d"], &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0}) 1m35.735450045s ago: executing program 1 (id=1149): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x900, &(0x7f0000001340)=[{&(0x7f00000001c0)="2e00000010008188040f46ecdb4cb9cca7480ef40f000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000034c000480240001800b000100736f636b657400001400028008000240000000030800014000000001240001800a00010071756575650000001400028008000440bf35ecb383e97c345e06e7f8e50000001006000340000300000900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x0) 1m35.539755927s ago: executing program 1 (id=1150): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000001200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)={0x20, 0xb, 0x98, "c96a6401cba6760d815fc0bc7719039576f54c397a725b0bad1019a058c108d3bfaf784d70d159fdd8bf0b69bf7adc21dbd01e25f976d2d72b9ff5af28071c7e9b3fd15cb04bc1f565a92e9bb5225a8850c0209c00666486cce5de49a22ed54e944581d84d8a36b11a07d18b06a733e0e74bedd5dc96e20d568063e3a03d2022bc51789235883a09bd5073072cba5301b7611831e7a59f06"}, 0x0, 0x0}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 1m33.829476728s ago: executing program 1 (id=1155): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80040, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0) unshare(0x24040600) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001100), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000033c0)={0x0, 0x0, &(0x7f0000003380)={&(0x7f0000000340)={0x14, r6, 0x800, 0x70bd27, 0x259fdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4048804}, 0x24000804) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000e40)=ANY=[@ANYBLOB="68010000", @ANYRES16=r6, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x800}, 0x81) sendmmsg$inet6(r4, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="f704d645b866d5a666", 0x9}, {&(0x7f0000000300)="dbf0effa5c88c189df28f3474e1a0fb73cfff0b4eea97151dae1ad3a92f1a706e760c904b6d897e0ff2cfc6422702fa9aab589125767a343388ce4bbaf0065c06737b9bc0cf2a3908a55eafc710421f5485592e06c92f9adb3f645b0919d5868a769c97d4c0eb2807f13d3a4", 0x6c}, {&(0x7f0000000740)="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", 0x6dd}], 0x3}}, {{&(0x7f0000000240)={0xa, 0x4e22, 0x1, @private2, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="1400000000000000290000000800000006000000000000001800000000000000006d94943e0000e90000000029000000360000002e00"/72], 0x48}}], 0x2, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0xa2403, 0x0) ioctl$TCSETSW(r8, 0x5403, &(0x7f0000000000)={0x0, 0x8, 0xe14, 0x7fff, 0x10, "86a8d588207b9838a683adfdf773cba0f9792d"}) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) keyctl$get_persistent(0x16, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r9, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x5b}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8084}, 0x40014) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x4000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080)={r0, 0xda, 0xe5}, 0x0, &(0x7f0000000480)="cf8143c519f91bee7bf3161175743eae4f42e7911b1feb1ce333d20a3bf440fd460082c13ae192918fecef4e579c1ec98bec00853dd99bc16f0f34d5d023f6c7c46c73cb6a06bc700b5fda5dce10dac06bf8226b61957941d8a7b0ac26c366b000476ff3101ada5c9f6999c4858d94892443934f95da6799976cb51a4ca5c6e8444502ffe636e340866b4632c08e11c1754992542d84d67574d09fdc9d56ab74a70316fab353ef39a7d37deb5b54416d712360745274c626b7f26a8f4eed1f22f11f29a4f118fad8a3d87445002ef575e1999f8ba917348c6a95", &(0x7f0000000580)=""/229) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="030000184500006814000000000190780a0114aa05009078e000000243420002006800ff072f0008ac1e0001e00000014414d8a364010100000000070000000000000001010713cdffffffff7f00000100000004ffffffff00000001ffffff8907dbac1414aa000000000000"], 0x6c) 1m29.19987923s ago: executing program 32 (id=1118): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000b1c0)={0x2020}, 0x2020) (async) read$FUSE(r4, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r5, 0x0, 0x7ffffd}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r5, 0x0, 0x7ffffd}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r5, r6, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r8, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r8, r9, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r8, r9, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x20404, &(0x7f0000000380)={{'fd', 0x3d, r3}, 0x2c, {}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x8042edd8b491d4ea}}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise}, {@fsname={'fsname', 0x3d, '9p\x00'}}, {@subj_role={'subj_role', 0x3d, '\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '\xff\xff'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@hash}, {@dont_hash}]}}) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r10, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x1000, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x5, {[0x0, 0x4, 0xfffffffe, 0x0, 0xffffffff, 0x8, 0x4]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r10, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffc}, {0xa, 0x4e22, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x2]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC(r10, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffc}, {0xa, 0x4e22, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x2]}}, 0x5c) r11 = syz_open_dev$loop(&(0x7f0000000140), 0xd, 0x4043) ioctl$LOOP_SET_BLOCK_SIZE(r11, 0x4c09, 0x8) setsockopt$MRT6_FLUSH(r10, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="150000006bffff"], 0x15) 1m18.72839282s ago: executing program 33 (id=1155): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80040, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0) unshare(0x24040600) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001100), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000033c0)={0x0, 0x0, &(0x7f0000003380)={&(0x7f0000000340)={0x14, r6, 0x800, 0x70bd27, 0x259fdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4048804}, 0x24000804) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000e40)=ANY=[@ANYBLOB="68010000", @ANYRES16=r6, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x800}, 0x81) sendmmsg$inet6(r4, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="f704d645b866d5a666", 0x9}, {&(0x7f0000000300)="dbf0effa5c88c189df28f3474e1a0fb73cfff0b4eea97151dae1ad3a92f1a706e760c904b6d897e0ff2cfc6422702fa9aab589125767a343388ce4bbaf0065c06737b9bc0cf2a3908a55eafc710421f5485592e06c92f9adb3f645b0919d5868a769c97d4c0eb2807f13d3a4", 0x6c}, {&(0x7f0000000740)="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", 0x6dd}], 0x3}}, {{&(0x7f0000000240)={0xa, 0x4e22, 0x1, @private2, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="1400000000000000290000000800000006000000000000001800000000000000006d94943e0000e90000000029000000360000002e00"/72], 0x48}}], 0x2, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0xa2403, 0x0) ioctl$TCSETSW(r8, 0x5403, &(0x7f0000000000)={0x0, 0x8, 0xe14, 0x7fff, 0x10, "86a8d588207b9838a683adfdf773cba0f9792d"}) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) keyctl$get_persistent(0x16, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r9, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x5b}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8084}, 0x40014) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x4000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080)={r0, 0xda, 0xe5}, 0x0, &(0x7f0000000480)="cf8143c519f91bee7bf3161175743eae4f42e7911b1feb1ce333d20a3bf440fd460082c13ae192918fecef4e579c1ec98bec00853dd99bc16f0f34d5d023f6c7c46c73cb6a06bc700b5fda5dce10dac06bf8226b61957941d8a7b0ac26c366b000476ff3101ada5c9f6999c4858d94892443934f95da6799976cb51a4ca5c6e8444502ffe636e340866b4632c08e11c1754992542d84d67574d09fdc9d56ab74a70316fab353ef39a7d37deb5b54416d712360745274c626b7f26a8f4eed1f22f11f29a4f118fad8a3d87445002ef575e1999f8ba917348c6a95", &(0x7f0000000580)=""/229) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="030000184500006814000000000190780a0114aa05009078e000000243420002006800ff072f0008ac1e0001e00000014414d8a364010100000000070000000000000001010713cdffffffff7f00000100000004ffffffff00000001ffffff8907dbac1414aa000000000000"], 0x6c) 15.081193804s ago: executing program 2 (id=1585): syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b000101000000090400001202060000052406000005240000000d240f01000000000000000700000082020002000000090503020002000000"], 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) fsetxattr$security_evm(r0, &(0x7f00000002c0), 0x0, 0x0, 0x3) syz_usb_connect$cdc_ecm(0x5, 0xac, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x1, 0x4, 0x0, 0xa, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0x7f, {{0x9, 0x24, 0x6, 0x0, 0x0, "5aed3418"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x7fff, 0x3ff, 0x1}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x0, 0x7}, @obex={0x5, 0x24, 0x15, 0x1}, @mdlm_detail={0x45, 0x24, 0x13, 0xe, "ad7d98122481cca1c2a52598fab761a0d4f4f162e4f697e75aef467675c1255b60f2e3e3632cf4e90d99a80ea3abe6526a6dd274a220f6d7634ba03a23891a385e"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x9, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x0, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x9, 0x1, 0xfd}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x5, 0x5, 0x5, 0x40, 0x8}, 0x23, &(0x7f0000000100)={0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x81, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "9549c58f55ccc1ffd7c61b230e9b17a1"}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x3c01}}, {0x9b, &(0x7f0000000200)=@string={0x9b, 0x3, "2c2b6afa8015f4f69d6e63097519f2b4cdada26794719fac4aa30abb723b4a0e48e11521ace9f348ba870014d093a20bfd28a3371ef28f3224ecb11225ad8d9a2fd86761981c66f4bbdb214c21d3032f6f90052aee8007fe1223c198666a398527e531612d6e627e9562b1bcd56f022c4b8a5a27493e7a010a65671aa476c77e31a3e7c08c28769fb3e3023ac80769786c630ccdd2bb7d9b02"}}]}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x8000, 0x0, 0x0, 0x0}) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001f2000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000001200)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000480)=0x9) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x80000000000004, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000140)={0x11, 0x1, 0x0, "8eb89c2c11d85d06000000000000000000faff00000000eaff0000e600"}) r4 = syz_usb_connect$cdc_ecm(0x4, 0x13f, &(0x7f0000000700)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12d, 0x1, 0x1, 0x6, 0x10, 0xff, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x6, {{0xb, 0x24, 0x6, 0x0, 0x0, "e23b01c2eb28"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0xfffffffe, 0x1, 0x8, 0x49}, [@mbim={0xc, 0x24, 0x1b, 0xffff, 0x0, 0x53, 0x1, 0x3, 0xe}, @acm={0x4, 0x24, 0x2, 0x3}, @ncm={0x6, 0x24, 0x1a, 0xc4, 0xe}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x6, 0x7}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x7}, @mdlm_detail={0xc0, 0x24, 0x13, 0x5, "b2e5c16f3ff48456f416ffcafde83cd1e895bdcee577e9e1e1bc8a71f480e3fcfe4cde620d09c7f18fbab00800e84043231eed1a83afd0d790c64b746a35d42022f6156d15aeaed8843c0a433b4c00eeb0a9cfc8c516ee2924691033cbe8e1883a309e10687267ad41f04f661fbc8438d4bde337754ea0f81814678f4c461bf3d16df554442f7fc79985d137f75d0ab1143c70eca3282ae9c9cdce543154d1e85add6b7849321aca48c79a2f103ea0497834425c392e283e55a72332"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0x6, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x6, 0x6, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x6, 0x1, 0x7}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x300, 0xb, 0x9, 0x6, 0x40, 0x15}, 0x121, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x5, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x816}}, {0x7f, &(0x7f0000000500)=@string={0x7f, 0x3, "778c2723be81c38ed62332b2d035744315f62a2152d7bca3fc2140613c6130c2eb3095349e4421d10b3a87a3e4a3723092620acc4b22a8da1b87360cea1c11ede6cb451489a7f174748abaa455ec48fe1e0a49d41ab358ce1c84728eeb1a5f62b33fad680f53763c1cdebcbe516bc4e3253d398e23464f80687cadcf5c"}}, {0x6d, &(0x7f0000000580)=@string={0x6d, 0x3, "529c73fb7d3012ad8e93bd5547a22c99e19c057b2c985ce2d9cdd7d6a9f6342145dd1576890186b4387dfffec60f063169acef4929d0015d0ed2707219e719e3c766a0e950fbacbf7b7c59d832135666eb296401a3677eff2d52b3720bf7eae9ec33a300591e976fbfbf4d"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x82c}}]}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) 13.748717709s ago: executing program 2 (id=1592): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x7080000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4, 0x8}, 0x80, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000000290000000e00000000000000"], 0x10}}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = socket(0x2b, 0x80801, 0x1) connect$l2tp6(r4, &(0x7f0000000080)={0xa, 0x0, 0x292, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x2}, 0x20) getsockopt$PNPIPE_INITSTATE(r4, 0x113, 0x4, &(0x7f0000000080), &(0x7f0000000100)=0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="0c0100002d0001000000000000000000140073000000000000000000000000000000000009000080976b640868000000db0001"], 0x10c}], 0x1}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x59, 0xe0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f00000031c0)=@vmx={0x103, 0x0, 0x2080, {0x50000, 0xe000, {}, 0x0, 0x1}, {"d07ee511000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000057ae00", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"}}) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) r9 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x24020000) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x989, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r12, 0x4010ae67, &(0x7f0000000200)={0x1000, 0x110000}) r13 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sched\x00') lseek(r13, 0x4, 0x1) ioctl$KVM_RUN(r13, 0xae80, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r12, 0x4010ae68, &(0x7f0000000040)={0xfffffffffffff001, 0x10000}) 12.2552735s ago: executing program 2 (id=1596): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00', @ANYRESDEC], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000), 0x2, 0x0) 12.195163787s ago: executing program 2 (id=1597): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYBLOB="df4800000000000000000c0000000c000380040005"], 0x20}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r1) tkill(r1, 0x3c) ptrace$peeksig(0x4209, r1, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd00028008"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 11.305434794s ago: executing program 2 (id=1599): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x2}, 0x8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x8002}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x8, 0x1, 'SET\x00'}, @NFTA_TARGET_INFO={0xc, 0x3, "02b51112d439c592"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x800) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x20000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) 10.650685274s ago: executing program 2 (id=1602): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x808}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) ptrace$getenv(0x4201, r2, 0x8, &(0x7f0000000340)) close_range(r1, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000008c0)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0) syz_clone(0x2004c00, &(0x7f0000000080)="140cd8fd86abc7054c634ce9660d347fd45dc4619705a36dddb590fe53d075d9e9f5b870c85c13a6f8b8e4aa0799eac8e5c9ef29c6a86fabc809f3830158f32089641d709685e6f04e17d8f027e39604569fe0409cf64223b72b07e75bfe48e53eafe2c80fa8c2add79e50e3ff8f7c01291615a048b674d680f9bd769e9fbfa0ef57ae0d7bb86c71a160308a2fbdf46dbf06b9d2d748f8f7fc7ea52a7a85a8521365cb6bf78d6823df9a384fe965c793d187f9abcc7abd8c11fabcc5712cbd2f5cd3cce2b46c2fc1a213af", 0xcb, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="c7ca43bf8ccae95334bf7f2f8f303708381c391d7e233a8b9f32ebe820f04c0a30edc6bf9349b5a799278a138f5859d555e1a0863856d6b63d34cae0d7849746379a86caa0a1fb576288e4b819b0ac") 10.468580975s ago: executing program 34 (id=1602): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x808}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) ptrace$getenv(0x4201, r2, 0x8, &(0x7f0000000340)) close_range(r1, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000008c0)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0) syz_clone(0x2004c00, &(0x7f0000000080)="140cd8fd86abc7054c634ce9660d347fd45dc4619705a36dddb590fe53d075d9e9f5b870c85c13a6f8b8e4aa0799eac8e5c9ef29c6a86fabc809f3830158f32089641d709685e6f04e17d8f027e39604569fe0409cf64223b72b07e75bfe48e53eafe2c80fa8c2add79e50e3ff8f7c01291615a048b674d680f9bd769e9fbfa0ef57ae0d7bb86c71a160308a2fbdf46dbf06b9d2d748f8f7fc7ea52a7a85a8521365cb6bf78d6823df9a384fe965c793d187f9abcc7abd8c11fabcc5712cbd2f5cd3cce2b46c2fc1a213af", 0xcb, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="c7ca43bf8ccae95334bf7f2f8f303708381c391d7e233a8b9f32ebe820f04c0a30edc6bf9349b5a799278a138f5859d555e1a0863856d6b63d34cae0d7849746379a86caa0a1fb576288e4b819b0ac") 4.149033559s ago: executing program 6 (id=1603): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0xc0044dff, &(0x7f0000004000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x37) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="f7790066baa00066b86b4266afe2e239000f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d90f20d835080000000f22d8", 0x49}], 0xaaaaaaaaaaaaa5c, 0x47, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_RECEIVE(r6, 0xc0386106, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xe, 0x0, 0x0, "6dc0b81335057242d61a7e01e2acb96b"}) sendmsg$netlink(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x20, 0x20, 0x301, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x7}]}]}, 0x20}], 0x1}, 0x0) io_setup(0x81, &(0x7f0000001440)=0x0) r8 = syz_io_uring_setup(0x2af8, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000340), &(0x7f0000000080)) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r9, &(0x7f0000001280)=[{&(0x7f0000001180)="83", 0x1}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_submit(r7, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x5, r8, 0x0, 0x0, 0x100000}]) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x6, 0x8, 0x80, 0x25, 0x20000004, 0x7f, 0x44233, 0x1, 0x81, 0x4, 0x8001, 0x1005, 0xc, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xf000, 0x80b00}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.598541385s ago: executing program 3 (id=1639): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x80, 0x46, 0x2, 0x8, 0x7}, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="050f0f00010aa309020d00410575"]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x24020084, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="d40000001b43c71569fad871960002002b797000fedbdf250a01010100705c422cf4f4d99b59000000000000ddffffff00"/64, @ANYRES32, @ANYRES32, @ANYBLOB="08000000000000000400000000000000030000000000000099f9ffffffffffff00000000000000000000000000001200b500000000000000000000000000000001000000000000009b000000000000000e00000000000000ff0300000000000087060000b06b6e000201000300000000090000000000000008001e00090000000c001c00", @ANYRES32, @ANYBLOB="02000000"], 0xd4}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffc, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.133663753s ago: executing program 6 (id=1641): syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000965d06403e131508667e0102030109021b0001000000000904000001ff872800090505030000000000242f135c8bc296018f1e0ec68bf8a67b5362d94ef9395c472226bd49634ce34ef10a92a77fb0922571e8bbcb9c82a1d4ef3f0a4d5a1f14801ccd3033c49eb1a7b5295df586f6059b19239597493f956d842bf129fdbb0d892cd909cd6780bde3738fb3f244c417384fffb6c78edd4fa3"], 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0xfd, 0x0, 0x8, @dev={0xfe, 0x80, '\x00', 0x36}, @empty, 0x0, 0x40, 0x0, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000000100000051000000", 0xfe60) syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000965d06403e131508667e0102030109021b0001000000000904000001ff872800090505030000000000242f135c8bc296018f1e0ec68bf8a67b5362d94ef9395c472226bd49634ce34ef10a92a77fb0922571e8bbcb9c82a1d4ef3f0a4d5a1f14801ccd3033c49eb1a7b5295df586f6059b19239597493f956d842bf129fdbb0d892cd909cd6780bde3738fb3f244c417384fffb6c78edd4fa3"], 0x0) (async) socket(0x10, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0xfd, 0x0, 0x8, @dev={0xfe, 0x80, '\x00', 0x36}, @empty, 0x0, 0x40, 0x0, 0x4}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000000100000051000000", 0xfe60) (async) 2.98739451s ago: executing program 3 (id=1645): syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x5b, 0x2b, 0xe9, 0x8, 0x19d2, 0x4172, 0x9262, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7a, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x2, &(0x7f0000000040)={0x0, 0x800389b, 0x4000, 0x1, 0x323}, 0x0, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r1, 0x400, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 2.295912028s ago: executing program 6 (id=1651): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x3d, 0x0, 0x0, 0x3}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027bd700000000000040000000c00170002"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r3, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xf8, 0x4b}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4800) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0x7, 0x1, 0x0, "5841fbd909b60aabbb65862359eefc8e78a33afce2972e2f12f3e86e16f4d1f0"}) r6 = accept(r2, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000140)="8b5f47ee6f6b2684bced22a9cfb75fe0368d28a6b8e78d19aedf62a3084e1721213ae0baf603a3599d328130f6bdfd69e12a9c1d2dd7d21fc9cdd2072d5b0e6059fbcdc24da6de1bdb153ad26ff0fc720f5ca9b13ba01576561d3ceb7885740b01d72dbaef478b9cd201793a47585ab161e104dc631c12400d3142bb24178d67050b6744125ee31da47d98c9409fa34f18ee2c899b98361d8d4c36a0a6ff33a0f5cea1", 0xa3}], 0x1) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES8], 0xe0}}, 0x0) syslog(0x4, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0x18}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r6, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) 1.975347403s ago: executing program 6 (id=1652): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}) (async) mq_open(&(0x7f0000003b00)='9\x00', 0x40, 0x18b, &(0x7f0000000000)={0x7a1, 0xa, 0x800000000000000, 0xffffffff}) (async) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) timerfd_gettime(0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000040)) (async) ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, &(0x7f00000000c0)={0x4, 0x9}) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x9, 0x0, 0x2, 0x180, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x2, 0x0, 0x29, 0x0, 0x6, 0x0, 0x8000000bdb], 0xd000, 0x43102}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x75, &(0x7f0000000180)={0x7, {{0xa, 0x4e20, 0x10000, @mcast1, 0xbfd}}, {{0xa, 0x4e2b, 0x3ffc, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xfffff601}}}, 0x108) (async) getsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r3 = socket(0xa, 0x3, 0x3a) capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)={0x0, 0xad, 0x100000, 0x0, 0x0, 0xffffffff}) (async) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x3, 0x2004cb, 0x0, 0x1000007, 0xd2, 0x0, 0x9, 0x3, 0x0, 0x7, 0x800000000000], 0xeeee8000}) (async) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) preadv(r4, &(0x7f0000000740)=[{&(0x7f0000000a40)=""/4096, 0x1000}, {0x0}, {&(0x7f00000003c0)=""/69, 0x45}], 0x3, 0x0, 0x0) r5 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) (async) syz_usb_control_io$sierra_net(r5, 0x0, &(0x7f0000000640)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x0, 0x0}) (async) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="0a91201003000000c0"], 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x60000, 0xeeee0000, 0x0, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x2, 0x2e, 0x80}, {0x5000, 0xf000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0x6000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x4, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x1, 0xf000, 0xd, 0x6, 0x4, 0x34, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x80}, {0x1000, 0xfec00000, 0x9, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x28, 0x7}, {0xeeef0000, 0xeeef0000, 0x4, 0x5, 0x7, 0xc1, 0x7, 0x13, 0x9, 0x81, 0x40, 0x70}, {0x200000, 0x4000, 0x4, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x9, 0xb0, 0x9}, {0x3000, 0x30}, {0x8000000, 0x7}, 0x80010000, 0x0, 0x0, 0x2024, 0xffffffffffffffff, 0x9500, 0x3000, [0xc, 0x204, 0x5b, 0x6]}) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) socket(0x1d, 0x2, 0x6) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f00000004c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x2, @mcast1, 0x100}}, 0x80, 0x0, 0xffffff42, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x4048000) syz_open_dev$tty1(0xc, 0x4, 0x2) 1.70849175s ago: executing program 3 (id=1654): pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r0, &(0x7f0000002600)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000400)={0x50, 0x0, r2, {0x7, 0x28, 0x84000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0x50) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r5, 0x2, 0xbce}, &(0x7f0000000400)=0xc) fcntl$setpipe(r0, 0x407, 0xc000) 1.556545894s ago: executing program 3 (id=1655): unshare(0x2000100) r0 = gettid() add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001100)={r1, 0x1, {0x0, 0x0, 0x0, 0x1000001, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d0374029bacaac594b1b305000000c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}}) unshare(0x40020000) 1.340640684s ago: executing program 5 (id=1656): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0xac, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x32, 0xe, {{{}, {}, @broadcast, @device_a, @random="dbcb3528a342"}, 0x0, @default, 0xc00, @void, @void, @void, @void, @val={0x6, 0x2, 0x1}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x4, 0x2c, 0x4}}, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HE_OBSS_PD={0x4c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0xd}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0xe}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x8}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "82e9f3e5a60bb722"}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "14ea4e55d316fb5f"}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4801}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000300)={0x0, 0x3, r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0e19cd27afbd5acaa3431c1d8bdffb38a310364ef87b48499c76277e5c2e3653"}}) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000300)={0x0, 0x3, r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0e19cd27afbd5acaa3431c1d8bdffb38a310364ef87b48499c76277e5c2e3653"}}) r5 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r5, &(0x7f0000000e40)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x400, @loopback={0xff00000000000000}, 0x101}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000000)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000e80)=[@hoplimit={{0x14}}], 0xfffffffffffffe3a}}], 0x1, 0x4000880) 1.275208469s ago: executing program 5 (id=1657): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000040)=""/185, 0xb9}], 0x1, 0x0, 0x0) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2002, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0xb, 0x7fffffff, 0x2, 0x8000b, 0x7b, 0x20000006, 0x4d, 0x6, 0x5f, 0xb, 0x5, 0xffff2d37, 0xffffff01, 0xb, 0x3, 0x0, 0x5, 0x24, 0x1, 0x0, 0x3c58, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0xfffffff8, 0x4c76, 0x7, 0x40000, 0x3, 0x0, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3a, 0x8f, 0x4006, 0x3, 0x80000000, 0x9, 0x100004, 0x8, 0x400, 0x6, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000003, 0xf0000000, 0x8000012f, 0x8004, 0x7, 0x6, 0x129432e6, 0xc8, 0xf9, 0x800, 0x2bf, 0x6c7, 0x9, 0xfffffffe, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x315, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x8, 0x6, 0x0, 0x6, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x8, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x4001, 0xfe000000, 0xffff, 0xfffffffb, 0x7, 0x9, 0x5, 0x3, 0x4, 0x9b, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x3, 0x408, 0x8004, 0x0, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x5, 0x9, 0x5, 0x0, 0x4a61eab3, 0x5, 0x40000008, 0x10000, 0x3, 0x5, 0x2, 0xb, 0x5, 0x2, 0x2, 0x23, 0x20000008, 0x4, 0x26d01, 0x6, 0x1, 0x800003, 0x200, 0x5, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x5, 0xac8, 0x2, 0x2, 0x7eb6, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x7ff, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x8000b, 0x8, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x8, 0x9, 0x2, 0x58, 0x44e, 0x3, 0x501, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x6, 0x2, 0x5, 0xe7, 0x4, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xffffefff, 0x10003, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0x5, 0x7, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x8d67, 0x5, 0xf40, 0x1, 0x1, 0x1000, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) syz_io_uring_setup(0x237, &(0x7f0000000fc0)={0x0, 0x5cec, 0x10, 0x5, 0x2cc}, 0x0, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000140)=0x80) 1.167392729s ago: executing program 5 (id=1658): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x8, 0x6, 0x9, 0x10}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x884}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)={0xf0, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xd0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xc5, 0x4, "48418a1b3de8fb0bef70390c8b360f3c41caa5693f2022ca58a35432aa91a1212ac2f8482b2dc190652f92e499db9836a506d4f987cdd2cc1f44710ded19c3b6582938aa53ad0b4db4e140a0532ceef8d749d9ea181c8ecba4c80aaad16b232d4bdcb655481cc90749ec1774d8ed2c4d5f98efe99c380dbb2171cbc5ff0547dbdc71572a4824853df70379ad85cfcce219be330aa722b6e10ed7fdbbd2eab79be1fac54727b017b70fe1d6c5715af52342996140db00"/193}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4008004}, 0x8080) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0xffffffff, 0x5, 0x10006f0, 0x4}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8044) 1.156038161s ago: executing program 5 (id=1659): ioprio_set$pid(0x1, 0x0, 0x2000) r0 = socket$inet(0xa, 0x801, 0x84) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f00000002c0)={'broute\x00', 0x0, 0x4, 0x7f, [0x9, 0x3, 0x1, 0xf, 0x10, 0x9a3], 0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}], &(0x7f0000000140)=""/127}, &(0x7f0000000080)=0x78) listen(r2, 0xeb) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000000c0)={'mangle\x00', 0x0, [0x8, 0x0, 0x7, 0x4, 0x9]}, &(0x7f0000000200)=0x54) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.089169611s ago: executing program 5 (id=1660): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0xffffffff}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x7, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x14, 0x21, 0x1, 0x0, 0x2, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x20000000) 1.011469167s ago: executing program 5 (id=1661): r0 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x44f, 0xb324, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x80, 0x6, [{{0x9, 0x4, 0x0, 0x5a, 0x2, 0x3, 0x1, 0x3, 0x2, {0x9, 0x21, 0x400, 0xf9, 0x1, {0x22, 0xb7f}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x16, 0x0, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x1ef, 0x8, 0x5, 0x5}}]}}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, [{0xb9, &(0x7f0000000000)=@string={0xb9, 0x3, "ec644b53726fd56f1e147b3540a329f87c12810e68c5ebd834c9b8862bd2800dfad6de15eb8ac8824f36624a6dfea518781c3a5f081a909b53c5bdad485b0e72225df6a04794d99c3127de77cb82367b2b2079ba87751328a6dfe2e5d5a88faebc5c3248a96c49bebb9e3962fbd774e0588841d6103ec48c63a7a477bbaebb80de719e048a67f49354dfeac00da57d3ce76f8e418862a44d7381c8dc21eb2f9279164263de134763c2d63352115def40d3cc83174ebf8c"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x41c}}, {0xa4, &(0x7f0000000180)=@string={0xa4, 0x3, "cbf8211530ce8495bfef552afc864c53b668929856f3ce7674c5dac0c85dd42182a7db358eeeefae14381636f545fda33684c969341c3aa08de0dc7e3c1022322897ec74bfc751f3c92bb759a89e71127dafe4d5683901e31008e368664dcb09fc26426af53f39dd7939bfbb9b9a502084233b4950f74c3bdfe2ea6b1e688e00164ac2b5c2dcd93fe434ea4973539d0438b3f806ea96dda37243196d9254964b44c3"}}, {0xdf, &(0x7f0000000240)=ANY=[@ANYBLOB="df03cec18871173b727b1560013643ad7d7fc34ec3896d5b6ab86e108947fa1dbc9f54053903e65a250644def99cf375b6127ff9ff14b9d42677c75c312754481396f0cde5ba593457b2eb57a3fdf452547dffc1af120580f7c566de24244dd867b90a3f029c8cec548c9fdbc5369c766ed406a548fad3857c7159e09a9e7a4acbaf854715fec77e734bd0240723373411bd029a419870120bf3e87daf527b43b7d95891be1f8af81470203d784e7dc54a39b22f87b45c9c4531340bca836fe2b6215b85a0acd4248dc19630b2edfe7e6483e118923b97b45ebf6d"]}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) r3 = socket(0x15, 0x5, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e23, 0x80, @mcast2}, 0x1c) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000200)={0x100, r2}, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000280)={0x100, r4}, 0x0) close(r4) close(r2) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000402505a3a440000000010109023b000101010000090400001202eb0000052406000005240000000d240f010000000000000000000905820200020000000905", @ANYRES32], 0x0) bind$bt_hci(r6, &(0x7f0000000040), 0x6) close_range(r5, 0xffffffffffffffff, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) 855.185205ms ago: executing program 4 (id=1663): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000100)={0x1, r1}) r2 = dup3(r1, r0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x8, 0xff}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r8, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000485}, 0x4000) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r5, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "5c28a5cdba318be633"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "eeae6206a3"}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc005}, 0x4040001) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x7, &(0x7f0000000000)=[{0x6, 0x2, 0x0, 0x6}, {0xcd52, 0x70, 0x3}, {0x5, 0x9, 0x7, 0xa7}, {0x5, 0x4, 0x1, 0xf8c3}, {0x1, 0x9, 0x4, 0x1}, {0x7, 0x9, 0xa5, 0x1}, {0x8000, 0xc, 0x0, 0x758}]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0x4028af11, &(0x7f0000000c00)={{0x0, 0x80, 0x9, 0x9, 0x9, 0x3, 0x9, 0x2ac, 0x1, 0x2, 0x101, 0x6, 0x4aa, 0x2, 0x9}}) 767.76538ms ago: executing program 4 (id=1664): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x80, 0x46, 0x2, 0x8, 0x7}, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="050f0f00010aa309020d00410575"]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x24020084, &(0x7f0000000140), 0x14) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffc, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 734.534735ms ago: executing program 3 (id=1665): r0 = socket(0x400000000010, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x34325241, 0x3, [0x2], [0x80ffff, 0x5], [], [0x400000000000003]}) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xf, 0x0, 0x0, 0x202, 0x0, 0x0, 0x8}}) 657.109411ms ago: executing program 3 (id=1666): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="401606"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x20, 0x8, 0x2, "5490"}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$sierra_net(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x7, 0x2, 0x400, 0x1, 0x8, 0x5}, {0x9, 0x5, 0xf, 0x2, 0x0, 0xcc, 0x66, 0x6f}, {0x9, 0x5, 0xd, 0x3, 0x10, 0x1, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r1, &(0x7f00000005c0)={0x14, &(0x7f0000000580)={0x20, 0x21, 0x3, {0x3, 0xa, "ac"}}, &(0x7f00000007c0)={0x0, 0x3, 0xe9, @string={0xe9, 0x3, "ec15163d60152cd26dd43161296cfcc25e3f72f3a1dff29d2731ec7733bec1e6b8c345564469100282ffc8dd40f518e0cce052f4d28a7a39a5061da2002f6df8040a5fe0f2fc08f37aa54e88d1b83b4ed050594a3b8546ec25aeb6c33b9696197feb5d91ab5e467fa8aef18ded2c714847fc4cfb324ae207e6b56413dc15df91765f94d618ca0a4b252a33e27c731a9c59abcd803ea352780e4c88030ea4bdb05355155b5183f261d55ac4866f1ff6e874c5083a30debe4ffc46e266af8eebb980a12d355e11314d5b50730f1521b220c7485f7c55773a2a4f2263a3f3c9169075867a0c195117"}}}, &(0x7f0000000640)={0x1c, &(0x7f00000006c0)={0x0, 0x8, 0x7c, "17d786bface9f1fc3ebb4db9cc545ac7d1310f5400652e38f08678d76768c90c4d80e135a1a2ee81735fc65d3c02ddb1b1108199b22139f2df15eb8e86aacbff17a5ee48c5283276c40cab47175a044158d3a95e0cec1ea226ea9dcd22081e45f4286acd1e3d370fcfea9599a2563c4570962332649fb4e7e23f4761"}, &(0x7f0000000940)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000600)={0x21, 0x0, 0x2, 'y\''}}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000680)={0x40, 0x5, 0x2, "a9a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000000)={0x40, 0x5, 0x69, {0x69, 0x11, "c3a1ad5bd0ae6a66c3c76e05c6f1dbdd8d174bf9bf2917f0d6d296e948d7a15b76063cd08ce1557d24d260f859ce32f752f02e63cbc3c301089106c46fec517a3d61bbe598179ce38edd93451c94eed31083db66abd8aed7b4b544145abbfe3ecc08ec0be582fd"}}, &(0x7f0000000100)={0x0, 0x3, 0xcf, @string={0xcf, 0x3, "032bcea4c780e183278cb5f305492ba52e8475bf0a60b4f96c5f2a143136b2fec7ab5e8430d6edbb0865c0099737ea6c8338f94a1e6c0bffe2973d58ae627c3fe8b7dec5912264e6eb874d77f91a6d02fedc25c56770b019877bf53e460a3aea1c774c804726e9fd2839f11e8701dc38f8d8fe5ff011ee7eb5ec384c2f179cfe0f069e97abb6a880e11e6db5f3cb428a4574fc2c8da2e207f8c8cd60c7501fed5fe47f0c902277b57e4a763dd63a608d1d80cb3af119b39ceb6a89dab9be436a1d6fd45b4620155fe546804e28"}}, &(0x7f0000000200)={0x0, 0x22, 0x1a, {[@main=@item_012={0x1, 0x0, 0x9, "ae"}, @local=@item_4={0x3, 0x2, 0x5, "31c76905"}, @local=@item_012={0x2, 0x2, 0x9, "e5e9"}, @main=@item_012={0x1, 0x0, 0xc, 's'}, @main=@item_012={0x2, 0x0, 0xa, "349a"}, @local=@item_012={0x0, 0x2, 0x7}, @global=@item_012={0x1, 0x1, 0x1, "9c"}, @main=@item_4={0x3, 0x0, 0x8, "2eafbdeb"}, @global=@item_012={0x2, 0x1, 0x7, "b8c1"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0xf9, 0x1, {0x22, 0xff7}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000300)={0x0, 0x18, 0x1e, "17711ce0e9355cdb462f0b283bdf4dd24ba300225947df69b15b06319186"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000440)={0x20, 0x1, 0xcf, "0e518baa0e02418f7cb3f50f1fcb09ce351a501235596079a39e3ebe6fa2a615f9070668e22dcca0f108b9c0618437c2a632ade6cbb62e368e23ef63011ee4d346188584ea6e602a0414e514366ec42bc292c04619dd5e5486ebec265a9dec787a06311e04b1ca7c88e4a1bfe394a0e45e3464f5691661077d95b440d817e89cd6c53d5344671ef55617424ab01087dfb475711b39716a13caec5c75cc9c59e76f9fc37719bc3c1b4b6092fce767a55e5b25c36b1078d1fe7e21a1ff3101cb034db0f9ba5a485e41633b506bb34857"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x3}}) 171.959779ms ago: executing program 4 (id=1667): ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000001100)={{}, "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"}) socket$netlink(0x10, 0x3, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000000c0)={0xa10000, 0xc31e, 0xc65b, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x990971, 0x5, '\x00', @p_u32=&(0x7f0000000040)=0x80}}) 87.966612ms ago: executing program 4 (id=1668): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = fsopen(&(0x7f00000002c0)='erofs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r3, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) r4 = fsmount(r2, 0x1, 0x1) fchdir(r4) r5 = creat(&(0x7f0000000180)='./file0\x00', 0xc4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000001c0)={0x6, 0x200, 0x40, 0xdacb, r6}, &(0x7f0000000200)=0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x205, 0x800000, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008040}, 0x48810) 87.304007ms ago: executing program 4 (id=1669): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008001e00fff3c00e", 0x24}], 0x1}, 0x0) bind$tipc(r1, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0xfdef) 0s ago: executing program 4 (id=1670): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x8840, 0x85) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/notes', 0x101020, 0xa) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r0, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRESHEX=0x0], 0x0) kernel console output (not intermixed with test programs): er 13 using dummy_hcd [ 308.563657][ T5912] usb 5-1: Using ep0 maxpacket: 32 [ 308.570977][ T5912] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 308.580145][ T5912] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 308.590401][ T5912] usb 5-1: config 1 has no interface number 1 [ 308.598354][ T5912] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 308.611386][ T5912] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 242, changing to 7 [ 308.626434][ T5912] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 308.635835][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.644035][ T5912] usb 5-1: Product: ۭ䣜ꠁ됢メ穎鏾ᚽ὘⁩㍢㢣웙֋䂿Ƙ璧袷㌫壿 [ 308.659471][ T5912] usb 5-1: Manufacturer: 挸᪥楅ߋ퇆틻㹥ꖮ홥յ♏跷ꙙேꀑ襴氋滩៎묚䮮洄Ȭ넷顔῔ΰ흒팝拨ﯱ똫齬኿䎬蹅꾉儼陚橲鬶彲餙ꗶཱུ컖舖枞怇녂ꯞ혼Ộ⃹狿䊺麮㵸擷鰑聱홤䃫㕿❂䓺㮯᪜鍍⇕첉耨鞟论띏㜵툐䝠컨웍⟝ؕ⣾⺆ૡ熘鄬ĉ趶䜼鷥ⱡȋ⍆ῃ [ 308.690294][ T5912] usb 5-1: SerialNumber: င [ 308.772339][ T9992] netlink: 'syz.3.1279': attribute type 4 has an invalid length. [ 308.784444][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 308.791740][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 308.813310][ T10] usb 4-1: USB disconnect, device number 111 [ 308.910579][ T5912] usb 5-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 308.919185][ T5912] usb 5-1: 2:1 : sample bitwidth 251 in over sample bytes 1 [ 308.927018][ T5912] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 308.980430][ T5912] usb 5-1: USB disconnect, device number 13 [ 309.019444][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 309.386360][T10000] mmap: syz.3.1282 (10000) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 309.713827][T10014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1287'. [ 310.155378][ T130] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.266085][ T130] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.322307][ T130] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.371118][ T130] team0: Port device netdevsim0 removed [ 310.378253][ T130] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.518271][ T130] bond0: left allmulticast mode [ 310.523459][ T130] bond_slave_0: left allmulticast mode [ 310.529599][ T130] bond_slave_1: left allmulticast mode [ 310.537205][ T130] bridge0: port 3(bond0) entered disabled state [ 310.547125][ T130] bridge_slave_1: left allmulticast mode [ 310.552793][ T130] bridge_slave_1: left promiscuous mode [ 310.558894][ T130] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.569180][ T130] bridge_slave_0: left allmulticast mode [ 310.575560][ T130] bridge_slave_0: left promiscuous mode [ 310.581290][ T130] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.822066][ T130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.831066][ T130] bond_slave_0: left promiscuous mode [ 310.840174][ T130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.849362][ T130] bond_slave_1: left promiscuous mode [ 310.858005][ T130] bond0 (unregistering): Released all slaves [ 310.884242][ T797] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 311.055597][ T797] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 311.064886][ T797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.074899][ T797] usb 4-1: config 0 descriptor?? [ 311.083391][ T797] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 311.252316][ T130] hsr_slave_0: left promiscuous mode [ 311.258909][ T130] hsr_slave_1: left promiscuous mode [ 311.265851][ T130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.273726][ T130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.282114][ T130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.290761][ T130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.310406][ T797] gspca_cpia1: usb_control_msg 05, error -71 [ 311.322802][ T797] gspca_cpia1: usb_control_msg 01, error -71 [ 311.329792][ T130] veth1_macvtap: left promiscuous mode [ 311.336561][ T797] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 311.347057][ T130] veth1_vlan: left promiscuous mode [ 311.377252][ T797] usb 4-1: USB disconnect, device number 112 [ 311.534391][ T130] team0 (unregistering): Port device team_slave_1 removed [ 311.547959][ T130] team0 (unregistering): Port device team_slave_0 removed [ 311.660591][T10049] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 311.667421][T10049] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 311.702184][T10049] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 311.709758][T10049] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 311.728697][T10049] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 311.738020][T10049] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 311.762647][T10049] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 311.779048][T10049] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 311.785585][T10049] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 311.809203][T10049] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 311.923134][T10056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1296'. [ 312.805877][T10017] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 313.033384][ T29] audit: type=1326 audit(1770893282.068:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10065 comm="syz.2.1299" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f842959bf79 code=0x0 [ 313.374015][ T5912] usb 3-1: new low-speed USB device number 118 using dummy_hcd [ 313.516763][ T5912] usb 3-1: device descriptor read/64, error -71 [ 313.694021][ T5818] Bluetooth: hci1: command 0x0406 tx timeout [ 313.773870][ T5818] Bluetooth: hci4: command 0x0c1a tx timeout [ 313.780227][ T5818] Bluetooth: hci3: command 0x0406 tx timeout [ 313.783685][ T5912] usb 3-1: new low-speed USB device number 119 using dummy_hcd [ 313.855197][ T5827] Bluetooth: hci5: command 0x0c1a tx timeout [ 313.933768][ T5912] usb 3-1: device descriptor read/64, error -71 [ 314.064130][ T5912] usb usb3-port1: attempt power cycle [ 314.383796][ T797] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 314.545785][ T797] usb 6-1: config index 0 descriptor too short (expected 539, got 27) [ 314.554317][ T797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 4 [ 314.595060][ T797] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 314.615723][ T797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.660755][ T797] usb 6-1: Product: syz [ 314.670888][ T797] usb 6-1: Manufacturer: syz [ 314.679552][ T797] usb 6-1: SerialNumber: syz [ 314.708420][ T797] usb 6-1: config 0 descriptor?? [ 314.726837][ T797] hub 6-1:0.0: bad descriptor, ignoring hub [ 314.735021][ T797] hub 6-1:0.0: probe with driver hub failed with error -5 [ 314.773667][ T5912] usb 3-1: new low-speed USB device number 120 using dummy_hcd [ 314.797950][ T797] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input35 [ 314.820627][ T5912] usb 3-1: device descriptor read/8, error -71 [ 314.840606][ T797] usbtouchscreen 6-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 314.867477][T10124] netlink: 'syz.4.1307': attribute type 1 has an invalid length. [ 314.884395][ T797] usbtouchscreen 6-1:0.0: probe with driver usbtouchscreen failed with error -22 [ 314.906246][T10124] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1307'. [ 314.944435][T10124] netlink: 'syz.4.1307': attribute type 1 has an invalid length. [ 314.952223][T10124] netlink: 638 bytes leftover after parsing attributes in process `syz.4.1307'. [ 314.996066][T10124] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1307'. [ 315.073773][ T5912] usb 3-1: new low-speed USB device number 121 using dummy_hcd [ 315.081834][ T5862] usb 6-1: USB disconnect, device number 5 [ 315.117174][ T5912] usb 3-1: device descriptor read/8, error -71 [ 315.163704][ T5883] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 315.224025][ T5912] usb usb3-port1: unable to enumerate USB device [ 315.313695][ T5883] usb 5-1: Using ep0 maxpacket: 16 [ 315.329242][ T5883] usb 5-1: too many endpoints for config 0 interface 0 altsetting 3: 63, using maximum allowed: 30 [ 315.583989][ T5883] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.603831][ T5883] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 63 [ 315.633646][ T5883] usb 5-1: config 0 interface 0 has no altsetting 0 [ 315.640312][ T5883] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 315.776365][ T5818] Bluetooth: hci1: command 0x0406 tx timeout [ 315.793749][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.815721][ T5883] usb 5-1: config 0 descriptor?? [ 315.863777][ T5818] Bluetooth: hci3: command 0x0406 tx timeout [ 315.869954][ T5827] Bluetooth: hci4: command 0x0c1a tx timeout [ 315.937228][ T5827] Bluetooth: hci5: command 0x0c1a tx timeout [ 316.201354][T10152] sp0: Synchronizing with TNC [ 316.231606][ T5883] hid_parser_main: 60 callbacks suppressed [ 316.231626][ T5883] lua 0003:1E7D:2C2E.0016: unknown main item tag 0x4 [ 316.267886][ T5883] lua 0003:1E7D:2C2E.0016: item fetching failed at offset 4/5 [ 316.276165][ T5883] lua 0003:1E7D:2C2E.0016: parse failed [ 316.282114][ T5883] lua 0003:1E7D:2C2E.0016: probe with driver lua failed with error -22 [ 316.443117][ T5869] usb 5-1: USB disconnect, device number 14 [ 316.475808][ T10] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 316.560295][T10176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1315'. [ 316.572923][T10176] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1315'. [ 316.633818][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 316.641014][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 316.650457][ T10] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 316.658960][ T10] usb 3-1: config 0 has no interface number 0 [ 316.665255][ T10] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 55, changing to 9 [ 316.676599][ T10] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 8496, setting to 1024 [ 316.687908][ T10] usb 3-1: config 0 interface 88 has no altsetting 0 [ 316.697110][ T10] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 316.706376][ T10] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 316.714509][ T10] usb 3-1: Product: syz [ 316.718663][ T10] usb 3-1: Manufacturer: syz [ 316.723237][ T10] usb 3-1: SerialNumber: syz [ 316.731095][ T10] usb 3-1: config 0 descriptor?? [ 316.833731][ T5869] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 316.957269][ T10] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input36 [ 317.003783][ T5869] usb 4-1: Using ep0 maxpacket: 32 [ 317.019539][ T5869] usb 4-1: config 0 has an invalid interface number: 111 but max is 1 [ 317.034617][ T10] usb 3-1: USB disconnect, device number 122 [ 317.048385][ T5869] usb 4-1: config 0 has no interface number 1 [ 317.071353][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.079929][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.107248][ T5869] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 317.116884][ T5869] usb 4-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 317.128930][ T5869] usb 4-1: Product: syz [ 317.133117][ T5869] usb 4-1: Manufacturer: syz [ 317.138081][ T5869] usb 4-1: SerialNumber: syz [ 317.142781][ T29] audit: type=1326 audit(1770893286.188:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10180 comm="syz.4.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70db9bf79 code=0x7fc00000 [ 317.169551][ T5869] usb 4-1: config 0 descriptor?? [ 317.185188][ T5883] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 317.353652][ T5883] usb 6-1: Using ep0 maxpacket: 32 [ 317.363465][ T5883] usb 6-1: config 0 has an invalid interface number: 16 but max is 0 [ 317.372747][ T5883] usb 6-1: config 0 has no interface number 0 [ 317.386164][T10176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.393705][ T5883] usb 6-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 317.406705][ T5883] usb 6-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 317.409104][T10176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.432798][ T5883] usb 6-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 317.435206][ T5869] snd-usb-6fire 4-1:0.111: unable to receive device firmware state. [ 317.452622][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.461055][ T5883] usb 6-1: Product: syz [ 317.471246][ T5869] snd-usb-6fire 4-1:0.111: probe with driver snd-usb-6fire failed with error -71 [ 317.473675][ T5883] usb 6-1: Manufacturer: syz [ 317.486707][ T5883] usb 6-1: SerialNumber: syz [ 317.497685][ T5883] usb 6-1: config 0 descriptor?? [ 317.503278][T10178] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 317.512258][ T5869] usb 4-1: USB disconnect, device number 113 [ 317.535422][ T5883] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 317.736626][T10178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.752101][T10178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.763355][ T5869] usb 6-1: USB disconnect, device number 6 [ 317.872659][ T29] audit: type=1326 audit(1770893286.908:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10180 comm="syz.4.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc70db95d97 code=0x7fc00000 [ 317.931151][T10188] Mount JFS Failure: -5 [ 317.935500][ T5827] Bluetooth: hci4: command 0x0c1a tx timeout [ 317.936043][T10188] jfs_mount failed w/return code = -5 [ 318.013778][ T5827] Bluetooth: hci5: command 0x0c1a tx timeout [ 318.313733][ T5823] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 318.486745][ T5823] usb 4-1: Using ep0 maxpacket: 16 [ 318.497334][ T5823] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 318.516341][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.527562][ T5823] usb 4-1: Product: syz [ 318.541136][ T5823] usb 4-1: Manufacturer: syz [ 318.546536][ T5823] usb 4-1: SerialNumber: syz [ 318.559881][ T5823] usb 4-1: config 0 descriptor?? [ 318.576828][ T5823] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 318.600409][ T5823] usb 4-1: Detected FT232B [ 318.792329][T10224] netlink: 'syz.4.1332': attribute type 10 has an invalid length. [ 318.800724][T10224] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1332'. [ 318.811930][T10224] netlink: 'syz.4.1332': attribute type 10 has an invalid length. [ 318.821395][T10224] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1332'. [ 318.831651][T10224] netlink: 'syz.4.1332': attribute type 10 has an invalid length. [ 318.841312][T10224] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1332'. [ 318.852031][T10224] netlink: 'syz.4.1332': attribute type 10 has an invalid length. [ 318.864200][T10224] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1332'. [ 318.881262][T10224] netlink: 'syz.4.1332': attribute type 10 has an invalid length. [ 318.890759][T10224] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1332'. [ 318.907236][T10224] netlink: 'syz.4.1332': attribute type 10 has an invalid length. [ 318.918904][T10224] netlink: 'syz.4.1332': attribute type 10 has an invalid length. [ 318.927885][T10224] netlink: 'syz.4.1332': attribute type 10 has an invalid length. [ 318.973773][ T5869] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 319.041642][ T5823] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 319.054467][ T5823] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 319.075529][ T5823] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 319.090916][ T5823] usb 4-1: USB disconnect, device number 114 [ 319.115611][ T797] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 319.124545][ T5823] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 319.144187][ T5823] ftdi_sio 4-1:0.0: device disconnected [ 319.153802][ T5869] usb 6-1: Using ep0 maxpacket: 32 [ 319.161226][ T5869] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 319.183388][ T5869] usb 6-1: config 0 has no interface number 0 [ 319.199023][ T5869] usb 6-1: config 0 interface 184 has no altsetting 0 [ 319.209987][ T5869] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 319.223131][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.231460][ T5869] usb 6-1: Product: syz [ 319.235775][ T5869] usb 6-1: Manufacturer: syz [ 319.240388][ T5869] usb 6-1: SerialNumber: syz [ 319.254435][ T5869] usb 6-1: config 0 descriptor?? [ 319.273792][ T797] usb 5-1: device descriptor read/64, error -71 [ 319.463983][T10217] netlink: 'syz.5.1329': attribute type 11 has an invalid length. [ 319.518213][ T5869] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 319.531636][ T5869] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 319.542809][ T797] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 319.561890][ T5869] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 319.573959][ T5869] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 319.594300][ T5869] usb 6-1: USB disconnect, device number 7 [ 319.704312][ T797] usb 5-1: device descriptor read/64, error -71 [ 319.814549][ T797] usb usb5-port1: attempt power cycle [ 319.903795][ T24] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 319.983845][ T5869] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 320.066916][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 320.078512][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.089427][ T24] usb 4-1: Product: syz [ 320.094362][ T24] usb 4-1: Manufacturer: syz [ 320.099259][ T24] usb 4-1: SerialNumber: syz [ 320.147287][ T5869] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 320.158705][ T797] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 320.166413][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.178548][ T5869] usb 3-1: Product: syz [ 320.182737][ T5869] usb 3-1: Manufacturer: syz [ 320.187401][ T5869] usb 3-1: SerialNumber: syz [ 320.195374][ T797] usb 5-1: device descriptor read/8, error -71 [ 320.433666][ T797] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 320.454386][ T797] usb 5-1: device descriptor read/8, error -71 [ 320.574163][ T797] usb usb5-port1: unable to enumerate USB device [ 320.607690][ T5869] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 320.620237][ T5869] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 320.966964][ T5869] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 320.992046][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 321.003669][ T5869] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 321.016204][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 321.023978][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 321.041662][ T5869] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 321.042568][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 321.062250][ T5869] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 321.079980][ T24] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 321.089815][ T5869] usb 3-1: USB disconnect, device number 123 [ 321.099321][ T24] usb 4-1: USB disconnect, device number 115 [ 321.204871][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 321.212363][ T9] usb 6-1: config 35 has an invalid interface number: 158 but max is 1 [ 321.221472][ T9] usb 6-1: config 35 has an invalid interface number: 113 but max is 1 [ 321.233109][ T9] usb 6-1: config 35 has no interface number 0 [ 321.240161][ T9] usb 6-1: config 35 has no interface number 1 [ 321.246566][ T9] usb 6-1: config 35 interface 158 altsetting 213 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 321.257954][ T9] usb 6-1: config 35 interface 158 altsetting 213 has a duplicate endpoint with address 0xB, skipping [ 321.269190][ T9] usb 6-1: config 35 interface 158 altsetting 213 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 321.280434][ T9] usb 6-1: config 35 interface 158 altsetting 213 has a duplicate endpoint with address 0x2, skipping [ 321.291815][ T9] usb 6-1: config 35 interface 158 altsetting 213 has an invalid descriptor for endpoint zero, skipping [ 321.303256][ T9] usb 6-1: config 35 interface 158 altsetting 213 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 321.315819][ T9] usb 6-1: config 35 interface 158 altsetting 213 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 321.327196][ T9] usb 6-1: config 35 interface 158 altsetting 213 has an invalid descriptor for endpoint zero, skipping [ 321.338488][ T9] usb 6-1: config 35 interface 158 altsetting 213 has a duplicate endpoint with address 0xD, skipping [ 321.350206][ T9] usb 6-1: config 35 interface 158 altsetting 213 has a duplicate endpoint with address 0x2, skipping [ 321.361999][ T9] usb 6-1: config 35 interface 158 altsetting 213 has a duplicate endpoint with address 0x2, skipping [ 321.373124][ T9] usb 6-1: config 35 interface 113 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 321.384187][ T9] usb 6-1: config 35 interface 113 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 321.395542][ T9] usb 6-1: config 35 interface 113 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 321.406515][ T9] usb 6-1: config 35 interface 113 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 321.417682][ T9] usb 6-1: config 35 interface 158 has no altsetting 0 [ 321.425197][ T9] usb 6-1: config 35 interface 113 has no altsetting 0 [ 321.434024][ T9] usb 6-1: New USB device found, idVendor=0404, idProduct=034c, bcdDevice=eb.11 [ 321.443925][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.452693][ T9] usb 6-1: Product: 殯ሺጕῙﶠ쵡䤭⒁䔭﬐㋆慃여擰꣮뽠硫쀃礐鲢饠莽쥲惡㈓⥨湞헦沁魄眑ꖺ䅅꿑碍⢴Ⲅ航촨쐓鼸഑域쳥屝牌愴◄䔸撳ᴬᆐ肰㻌汀침䳐岚ᵽ닌際㖣儠욍큂풞 [ 321.475391][ T9] usb 6-1: Manufacturer: 글㔭ࡌ꽊俹➈๦俢騷ﱈ⬥㔄븖 [ 321.483492][ T9] usb 6-1: SerialNumber: 癅՘ک鑏愑뀩倪驂煮⚯䛔욌岧ͼ祪檷犿젰炙浹킐꓇㗤腰瑾⯋뇶侻쬀Ԑ䄾㙅Ḁ郔䚩ਠꜶ뮳㈾ﮟ⠜ⓥ隭ዎ嶽䡘牎䩛椷ᖵ歹ꬷ槊랻䍀伓篑릉ᑔ䔊拺렪끍㯻ᤜ⡹魔渴ᙗﳸӘ홞ꋤ⥀蕸准崌矫粛何 [ 321.510740][ T5869] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 321.522606][T10257] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 321.530601][T10257] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 321.663714][ T5869] usb 3-1: Using ep0 maxpacket: 8 [ 321.670709][ T5869] usb 3-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.682045][ T5869] usb 3-1: config 0 interface 0 has no altsetting 0 [ 321.688921][ T5869] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 321.699155][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.709674][ T5869] usb 3-1: config 0 descriptor?? [ 321.750069][ T9] cp210x 6-1:35.158: cp210x converter detected [ 321.758024][ T9] cp210x 6-1:35.158: failed to get vendor val 0x370b size 1: -71 [ 321.766054][ T9] cp210x 6-1:35.158: querying part number failed [ 321.777539][ T9] usb 6-1: cp210x converter now attached to ttyUSB0 [ 321.803184][ T9] cp210x 6-1:35.113: cp210x converter detected [ 321.810773][ T9] cp210x 6-1:35.113: failed to get vendor val 0x370b size 1: -71 [ 321.818999][ T9] cp210x 6-1:35.113: querying part number failed [ 321.833308][ T9] usb 6-1: cp210x converter now attached to ttyUSB1 [ 321.856170][ T797] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 321.865444][ T9] usb 6-1: USB disconnect, device number 8 [ 321.876920][T10271] ipvlan0: entered promiscuous mode [ 321.882747][T10271] ipvlan0: entered allmulticast mode [ 321.890624][T10271] veth0_vlan: entered allmulticast mode [ 321.892083][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 321.906559][ T9] cp210x 6-1:35.158: device disconnected [ 321.927239][ T9] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 321.946129][ T9] cp210x 6-1:35.113: device disconnected [ 322.027940][ T797] usb 4-1: config 1 has an invalid descriptor of length 199, skipping remainder of the config [ 322.040860][ T797] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 322.067278][ T797] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 322.077509][ T797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 322.086051][ T797] usb 4-1: SerialNumber: ㊏雱斿輸暸ֈ텞餥䂻稏䘄⇖텼鴘㮾瘆蔭蝏㙏緗돬䇊迫䰗礡靱栊왁氇쏂ퟫ餶倁껭蜉৫ [ 322.131095][ T5869] smartjoyplus 0003:6666:8804.0017: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.2-1/input0 [ 322.151737][ T5869] smartjoyplus 0003:6666:8804.0017: Force feedback for SmartJoy PLUS PS2/USB adapter [ 322.320629][ T797] usb 4-1: bad CDC descriptors [ 322.328549][T10261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.346638][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 322.355554][T10261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.384169][ T5869] usb 3-1: USB disconnect, device number 124 [ 322.523921][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 322.530928][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.547256][ T9] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 322.556754][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.565592][ T9] usb 5-1: Product: syz [ 322.572095][ T9] usb 5-1: Manufacturer: syz [ 322.585393][ T9] usb 5-1: SerialNumber: syz [ 322.601665][ T9] usb 5-1: config 0 descriptor?? [ 322.602739][ T24] usb 4-1: USB disconnect, device number 116 [ 322.610276][ T9] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 323.023234][ T9] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 323.032003][ T9] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 323.037221][T10295] usb usb7: usbfs: process 10295 (syz.5.1352) did not claim interface 0 before use [ 323.064875][ T9] usb 5-1: USB disconnect, device number 19 [ 323.304360][ T797] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 323.399014][T10312] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 323.411011][T10312] __nla_validate_parse: 29 callbacks suppressed [ 323.411022][T10312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1357'. [ 323.483189][ T797] usb 6-1: string descriptor 0 read error: -22 [ 323.489783][ T797] usb 6-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 323.500491][ T797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.717632][T10295] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 323.725297][ T24] usb 6-1: USB disconnect, device number 9 [ 323.873779][ T5912] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 323.881595][ T5862] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 324.033720][ T5912] usb 3-1: Using ep0 maxpacket: 16 [ 324.039023][ T5862] usb 5-1: Using ep0 maxpacket: 32 [ 324.046889][ T5912] usb 3-1: config 6 has an invalid interface number: 70 but max is 0 [ 324.055174][ T5862] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.065313][ T5912] usb 3-1: config 6 has no interface number 0 [ 324.071493][ T5912] usb 3-1: config 6 interface 70 has no altsetting 0 [ 324.080534][ T5862] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=34.5b [ 324.089917][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.099155][ T5862] usb 5-1: Product: syz [ 324.103928][ T5912] usb 3-1: New USB device found, idVendor=0c45, idProduct=6248, bcdDevice=68.54 [ 324.113999][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.122119][ T5862] usb 5-1: Manufacturer: syz [ 324.126886][ T5912] usb 3-1: Product: syz [ 324.131318][ T5912] usb 3-1: Manufacturer: syz [ 324.136100][ T5862] usb 5-1: SerialNumber: syz [ 324.141627][ T5912] usb 3-1: SerialNumber: syz [ 324.147409][ T5862] usb 5-1: config 0 descriptor?? [ 324.155986][ T5862] usbserial_generic 5-1:0.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 324.167963][ T5862] usbserial_generic 5-1:0.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 324.183329][ T5862] usbserial_generic 5-1:0.0: device has no bulk endpoints [ 324.378477][ T5862] usb 5-1: USB disconnect, device number 20 [ 324.395783][T10321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.434349][T10321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.450710][ T5912] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6248 [ 324.460686][ T5912] gspca_sn9c20x: Write register 1000 failed -71 [ 324.468315][ T5912] gspca_sn9c20x: Device initialization failed [ 324.474680][ T5912] gspca_sn9c20x 3-1:6.70: probe with driver gspca_sn9c20x failed with error -71 [ 324.495162][ T5912] usb 3-1: USB disconnect, device number 125 [ 324.514161][ T29] audit: type=1326 audit(1770893293.538:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10313 comm="syz.3.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159439bf79 code=0x7fc00000 [ 324.538780][ T29] audit: type=1326 audit(1770893293.538:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10313 comm="syz.3.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f159439bf79 code=0x7fc00000 [ 324.569166][ T29] audit: type=1326 audit(1770893293.538:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10313 comm="syz.3.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159439bf79 code=0x7fc00000 [ 324.593168][ T29] audit: type=1326 audit(1770893293.538:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10313 comm="syz.3.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159439bf79 code=0x7fc00000 [ 324.923986][ T797] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 324.942702][T10330] vivid-004: disconnect [ 324.948169][T10329] vivid-004: reconnect [ 325.093905][ T797] usb 4-1: Using ep0 maxpacket: 16 [ 325.110990][ T797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.133449][ T797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.143709][ T797] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 325.178981][ T5869] IPVS: starting estimator thread 0... [ 325.196798][ T797] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 325.225476][ T797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.257757][ T797] usb 4-1: config 0 descriptor?? [ 325.283723][T10343] IPVS: using max 35 ests per chain, 84000 per kthread [ 325.393704][ T5862] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 325.472344][ T797] usbhid 4-1:0.0: can't add hid device: -71 [ 325.479370][ T797] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 325.502026][ T797] usb 4-1: USB disconnect, device number 117 [ 325.523940][ T5862] usb 5-1: device descriptor read/64, error -71 [ 325.603682][ T5912] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 325.753740][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 325.760493][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 325.770572][ T5862] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 325.778307][ T5912] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 325.790681][ T5912] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 325.799828][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.807892][ T5912] usb 3-1: Product: syz [ 325.812060][ T5912] usb 3-1: Manufacturer: syz [ 325.816735][ T5912] usb 3-1: SerialNumber: syz [ 325.823143][ T5912] usb 3-1: config 0 descriptor?? [ 325.831440][ T5912] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 325.909055][ T5912] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 325.918160][ T5862] usb 5-1: device descriptor read/64, error -71 [ 325.955567][ T8753] udevd[8753]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 326.030102][ T5869] usb 3-1: USB disconnect, device number 126 [ 326.034092][ T5862] usb usb5-port1: attempt power cycle [ 326.113809][ T797] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 326.243661][ T797] usb 6-1: device descriptor read/64, error -71 [ 326.383795][ T10] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 326.394603][ T5862] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 326.415072][ T5862] usb 5-1: device descriptor read/8, error -71 [ 326.483653][ T797] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 326.543867][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 326.559618][ T10] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 326.570273][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.578699][ T10] usb 4-1: Product: syz [ 326.583048][ T10] usb 4-1: Manufacturer: syz [ 326.587973][ T10] usb 4-1: SerialNumber: syz [ 326.598221][ T10] usb 4-1: config 0 descriptor?? [ 326.614876][ T797] usb 6-1: device descriptor read/64, error -71 [ 326.655262][ T5862] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 326.684533][ T5862] usb 5-1: device descriptor read/8, error -71 [ 326.735278][ T797] usb usb6-port1: attempt power cycle [ 326.794067][ T5862] usb usb5-port1: unable to enumerate USB device [ 326.806646][ T10] speedtch 4-1:0.0: speedtch_bind: wrong device class 68 [ 326.813979][ T10] speedtch 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 326.905684][ T5912] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 327.018932][T10359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.036405][T10359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.048098][ T9] usb 4-1: USB disconnect, device number 118 [ 327.054288][ T5912] usb 3-1: device descriptor read/64, error -71 [ 327.075321][ T797] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 327.104524][ T797] usb 6-1: device descriptor read/8, error -71 [ 327.296033][ T5912] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 327.343727][ T797] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 327.364292][ T797] usb 6-1: device descriptor read/8, error -71 [ 327.433672][ T5912] usb 3-1: device descriptor read/64, error -71 [ 327.473931][ T797] usb usb6-port1: unable to enumerate USB device [ 327.554250][ T5912] usb usb3-port1: attempt power cycle [ 327.610644][T10383] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1376'. [ 327.893696][ T5883] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 327.903726][ T5912] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 327.924358][ T5912] usb 3-1: device descriptor read/8, error -71 [ 328.043675][ T5883] usb 4-1: Using ep0 maxpacket: 32 [ 328.050125][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.061108][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.070954][ T5883] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 328.083859][ T5883] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 328.092912][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.118243][ T5883] usb 4-1: config 0 descriptor?? [ 328.175878][ T5912] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 328.224871][ T5912] usb 3-1: device descriptor read/8, error -71 [ 328.346723][ T5912] usb usb3-port1: unable to enumerate USB device [ 328.569846][ T5883] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0018/input/input37 [ 328.739801][ T5883] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0018/input/input38 [ 328.854165][ T5883] kye 0003:0458:5011.0018: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 329.124003][ T5862] usb 4-1: USB disconnect, device number 119 [ 329.443815][ T5869] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 329.538432][ T797] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 329.593690][ T5869] usb 6-1: device descriptor read/64, error -71 [ 329.713784][ T797] usb 5-1: Using ep0 maxpacket: 8 [ 329.721337][ T797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 329.731975][ T797] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 329.745140][ T797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 329.756577][ T797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 329.769905][ T797] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 329.780653][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.800173][ T797] usb 5-1: Product: syz [ 329.824732][ T797] usb 5-1: Manufacturer: syz [ 329.829383][ T797] usb 5-1: SerialNumber: syz [ 329.834136][ T5869] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 329.859063][ T797] usb 5-1: config 0 descriptor?? [ 329.879783][ T797] radioshark 5-1:0.0: Invalid radioSHARK device [ 329.886887][ T797] radioshark 5-1:0.0: probe with driver radioshark failed with error -22 [ 329.952603][T10453] binder: 10452:10453 ioctl c018620b 200000000280 returned -14 [ 329.993763][ T5869] usb 6-1: device descriptor read/64, error -71 [ 330.078911][ T797] usb 5-1: USB disconnect, device number 25 [ 330.104040][ T5869] usb usb6-port1: attempt power cycle [ 330.444013][ T5869] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 330.484434][ T5869] usb 6-1: device descriptor read/8, error -71 [ 330.653796][ T5883] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 330.686486][T10461] omfs: Invalid superblock (0) [ 330.733975][ T5869] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 330.764534][ T5869] usb 6-1: device descriptor read/8, error -71 [ 330.816813][ T5883] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.829665][ T5883] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 330.839733][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 330.849373][ T5883] usb 3-1: Product: syz [ 330.854630][ T5883] usb 3-1: Manufacturer: syz [ 330.859420][ T5883] usb 3-1: SerialNumber: syz [ 330.869530][ T5883] usb 3-1: config 0 descriptor?? [ 330.884131][ T5869] usb usb6-port1: unable to enumerate USB device [ 330.927407][T10465] kvm: kvm [10463]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 330.930048][ T5883] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 330.937047][T10465] kvm: kvm [10463]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 330.945368][ T5862] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 330.989174][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 331.092591][ T5883] usb 3-1: USB disconnect, device number 5 [ 331.125326][ T5862] usb 5-1: config 6 has an invalid interface number: 194 but max is 0 [ 331.136900][ T5862] usb 5-1: config 6 has no interface number 0 [ 331.143030][ T5862] usb 5-1: config 6 interface 194 has no altsetting 0 [ 331.155862][ T5862] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=ac.84 [ 331.165055][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.176763][ T5862] usb 5-1: Product: syz [ 331.181719][ T5862] usb 5-1: Manufacturer: syz [ 331.186826][ T5862] usb 5-1: SerialNumber: syz [ 331.197212][ T5862] r8152-cfgselector 5-1: Unknown version 0x0000 [ 331.414757][ T5862] r8152-cfgselector 5-1: Unknown version 0x0000 [ 331.421271][ T5862] r8152-cfgselector 5-1: bad CDC descriptors [ 331.430655][ T5862] r8152-cfgselector 5-1: USB disconnect, device number 26 [ 331.760452][T10484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1394'. [ 331.845769][T10486] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1395'. [ 331.864979][T10486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1395'. [ 332.293664][ T5869] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 332.473693][ T5869] usb 4-1: Using ep0 maxpacket: 8 [ 332.485602][ T5869] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 332.500177][ T5869] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 332.521495][T10517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1406'. [ 332.530868][ T5869] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 332.542353][ T5869] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 332.554741][ T5869] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 332.568069][ T5869] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 332.577198][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.672911][T10523] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1408'. [ 332.686870][T10523] gfs2: error -5 reading superblock [ 332.794184][ T5862] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 332.796859][ T5869] usb 4-1: usb_control_msg returned -32 [ 332.809912][ T5869] usbtmc 4-1:16.0: can't read capabilities [ 332.948828][ T5862] usb 5-1: Using ep0 maxpacket: 8 [ 332.957678][ T5862] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 332.967611][ T5862] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 332.977453][ T5862] usb 5-1: Product: syz [ 332.981648][ T5862] usb 5-1: Manufacturer: syz [ 332.987162][ T5862] usb 5-1: SerialNumber: syz [ 333.002688][ T5862] usb 5-1: config 0 descriptor?? [ 333.011127][ T5862] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 333.134022][ T5869] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 333.153468][T10535] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 333.162412][ T9] usb 4-1: USB disconnect, device number 120 [ 333.298317][ T5869] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 333.307500][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 333.315683][ T5869] usb 3-1: Product: syz [ 333.319865][ T5869] usb 3-1: Manufacturer: syz [ 333.325563][ T5869] usb 3-1: SerialNumber: syz [ 333.338093][ T5869] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 333.628671][ T5862] input: gspca_zc3xx as /devices/platform/dummy_hcd.4/usb5/5-1/input/input39 [ 333.739275][ T5869] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 333.755867][ T5869] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 333.799651][T10538] syzkaller1: entered promiscuous mode [ 333.806248][T10538] syzkaller1: entered allmulticast mode [ 333.842299][ T9] usb 5-1: USB disconnect, device number 27 [ 333.997779][T10527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.006851][T10527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.022344][ T5912] usb 3-1: USB disconnect, device number 6 [ 334.123718][ T5869] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 334.183721][ T797] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 334.283799][ T5869] usb 6-1: Using ep0 maxpacket: 16 [ 334.290537][ T5869] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.300951][ T5869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 334.312094][ T5869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 334.322303][ T5869] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 334.332342][ T5869] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.346271][ T797] usb 4-1: Using ep0 maxpacket: 16 [ 334.353778][ T797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.364898][ T5869] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 334.374201][ T5869] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 334.382209][ T5869] usb 6-1: Manufacturer: syz [ 334.386942][ T797] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 334.411014][ T797] usb 4-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 334.421299][ T5869] usb 6-1: config 0 descriptor?? [ 334.432250][ T797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.448428][ T797] usb 4-1: config 0 descriptor?? [ 334.703739][ T5869] rc_core: IR keymap rc-hauppauge not found [ 334.709967][ T5869] Registered IR keymap rc-empty [ 334.715177][ T5869] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 334.726945][ T5912] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 334.746928][ T5869] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 334.774800][ T5869] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 334.788512][ T5869] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input40 [ 334.804491][ T5869] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 334.833700][ T5869] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 334.853790][ T5869] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 334.874922][ T5869] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 334.885895][ T5912] usb 5-1: too many configurations: 10, using maximum allowed: 8 [ 334.896391][ T5912] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 334.903717][ T5869] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 334.904200][ T5912] usb 5-1: can't read configurations, error -61 [ 334.923789][ T5869] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 334.943843][ T5869] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 334.963823][ T5869] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 334.984080][ T5869] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 335.014653][ T5869] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 335.036352][ T5869] mceusb 6-1:0.0: Registered 0 with mce emulator interface version 1 [ 335.043720][ T5912] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 335.044696][ T5869] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 335.070332][ T797] usbhid 4-1:0.0: can't add hid device: -71 [ 335.076802][ T797] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 335.096951][ T797] usb 4-1: USB disconnect, device number 121 [ 335.117154][ T5862] usb 6-1: USB disconnect, device number 18 [ 335.204307][ T5912] usb 5-1: too many configurations: 10, using maximum allowed: 8 [ 335.224362][ T5912] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 335.232016][ T5912] usb 5-1: can't read configurations, error -61 [ 335.239680][ T5912] usb usb5-port1: attempt power cycle [ 335.584183][ T5912] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 335.605668][ T5912] usb 5-1: too many configurations: 10, using maximum allowed: 8 [ 335.616918][ T5912] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 335.627662][ T5912] usb 5-1: can't read configurations, error -61 [ 335.756289][T10578] ufs: You didn't specify the type of your ufs filesystem [ 335.756289][T10578] [ 335.756289][T10578] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 335.756289][T10578] [ 335.756289][T10578] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 335.764918][ T5912] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 335.800733][T10578] ufs: ufs_fill_super(): bad magic number [ 335.833665][ T5912] usb 5-1: too many configurations: 10, using maximum allowed: 8 [ 335.853396][ T5912] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 335.902887][ T5912] usb 5-1: can't read configurations, error -61 [ 335.915527][ T5912] usb usb5-port1: unable to enumerate USB device [ 336.006667][T10587] fuseblk: Unknown parameter 'fowner>00000000000000000000' [ 336.050571][T10589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.065083][T10589] bond0: (slave rose0): Enslaving as an active interface with an up link [ 336.137415][T10594] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 336.507206][ T797] usb 4-1: new full-speed USB device number 122 using dummy_hcd [ 336.564577][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 336.669281][ T797] usb 4-1: device descriptor read/64, error -71 [ 336.706604][ T10] usb 3-1: device descriptor read/64, error -71 [ 336.915401][ T797] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 336.953690][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 336.993704][ T5869] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 337.065840][ T797] usb 4-1: device descriptor read/64, error -71 [ 337.103809][ T10] usb 3-1: device descriptor read/64, error -71 [ 337.150225][ T5869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 337.164552][ T5869] usb 6-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 337.177820][ T797] usb usb4-port1: attempt power cycle [ 337.185536][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.197147][ T5869] usb 6-1: config 0 descriptor?? [ 337.211779][T10629] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 337.220475][ T10] usb usb3-port1: attempt power cycle [ 337.436931][T10629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.445701][T10629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.458044][ T5869] usbhid 6-1:0.0: can't add hid device: -71 [ 337.466682][ T5869] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 337.479632][ T5869] usb 6-1: USB disconnect, device number 19 [ 337.547035][ T797] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 337.574237][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 337.584604][ T797] usb 4-1: device descriptor read/8, error -71 [ 337.604935][ T10] usb 3-1: device descriptor read/8, error -71 [ 337.629960][T10652] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1439'. [ 337.823788][ T797] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 337.844154][ T797] usb 4-1: device descriptor read/8, error -71 [ 337.853863][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 337.884377][ T10] usb 3-1: device descriptor read/8, error -71 [ 337.953977][ T797] usb usb4-port1: unable to enumerate USB device [ 337.993926][ T10] usb usb3-port1: unable to enumerate USB device [ 339.375196][ T5869] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 339.554138][ T5869] usb 6-1: Using ep0 maxpacket: 16 [ 339.566375][ T5869] usb 6-1: config 6 has an invalid interface number: 251 but max is 3 [ 339.584955][ T5869] usb 6-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 339.596050][ T5869] usb 6-1: config 6 has an invalid interface number: 122 but max is 3 [ 339.614237][ T5869] usb 6-1: config 6 has an invalid interface number: 10 but max is 3 [ 339.624006][ T5869] usb 6-1: config 6 has an invalid interface number: 112 but max is 3 [ 339.632328][ T5869] usb 6-1: config 6 has an invalid interface number: 59 but max is 3 [ 339.651164][ T5869] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 339.661545][ T5869] usb 6-1: config 6 has 5 interfaces, different from the descriptor's value: 4 [ 339.683056][ T5869] usb 6-1: config 6 has no interface number 0 [ 339.689227][ T5869] usb 6-1: config 6 has no interface number 1 [ 339.696191][ T5869] usb 6-1: config 6 has no interface number 2 [ 339.702358][ T5869] usb 6-1: config 6 has no interface number 3 [ 339.713619][ T5869] usb 6-1: config 6 has no interface number 4 [ 339.719804][ T5869] usb 6-1: config 6 interface 251 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 339.743789][ T5869] usb 6-1: config 6 interface 251 altsetting 8 endpoint 0xA has an invalid bInterval 74, changing to 10 [ 339.755538][ T5869] usb 6-1: config 6 interface 251 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 339.774359][ T5869] usb 6-1: config 6 interface 251 altsetting 8 endpoint 0xB has an invalid bInterval 175, changing to 7 [ 339.793606][ T5869] usb 6-1: config 6 interface 251 altsetting 8 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 339.804665][ T5869] usb 6-1: config 6 interface 122 altsetting 1 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 339.823618][ T5869] usb 6-1: config 6 interface 122 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 339.843658][ T5869] usb 6-1: config 6 interface 122 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 339.854829][ T5869] usb 6-1: config 6 interface 122 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 339.865782][ T5869] usb 6-1: config 6 interface 10 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 339.877140][ T5869] usb 6-1: config 6 interface 10 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 339.887794][ T5869] usb 6-1: config 6 interface 10 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 339.898475][ T5869] usb 6-1: config 6 interface 10 altsetting 8 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 339.922991][ T5869] usb 6-1: config 6 interface 10 altsetting 8 has 5 endpoint descriptors, different from the interface descriptor's value: 8 [ 339.973331][ T5869] usb 6-1: too many endpoints for config 6 interface 112 altsetting 11: 150, using maximum allowed: 30 [ 340.003728][ T5869] usb 6-1: config 6 interface 112 altsetting 11 endpoint 0x2 has invalid wMaxPacketSize 0 [ 340.023642][ T5869] usb 6-1: config 6 interface 112 altsetting 11 has a duplicate endpoint with address 0x4, skipping [ 340.036735][ T5869] usb 6-1: config 6 interface 112 altsetting 11 has 3 endpoint descriptors, different from the interface descriptor's value: 150 [ 340.075373][ T5869] usb 6-1: config 6 interface 59 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 340.097437][ T5869] usb 6-1: config 6 interface 59 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 340.142502][ T5869] usb 6-1: config 6 interface 59 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 340.182102][ T5869] usb 6-1: config 6 interface 59 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 340.196933][ T5869] usb 6-1: config 6 interface 251 has no altsetting 0 [ 340.205850][ T5869] usb 6-1: config 6 interface 122 has no altsetting 0 [ 340.218777][ T5869] usb 6-1: config 6 interface 10 has no altsetting 0 [ 340.229936][ T5869] usb 6-1: config 6 interface 112 has no altsetting 0 [ 340.240518][ T5869] usb 6-1: New USB device found, idVendor=c0e7, idProduct=9358, bcdDevice=d6.ea [ 340.251906][T10701] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 340.258940][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.271093][ T5869] usb 6-1: Product: У [ 340.275828][ T5869] usb 6-1: Manufacturer: 瞁瘕䙻乯ꑟ汵얲⸚3ඩÀ浇ụ꣄瞑闞쀶恶⚭ᓤﱰ￨醄蕠ꏗ갷杓⚽阨┏ﻙ锐㤮꩒憛㓟㼀䱉쀡黤譧ዉ냥䧙䷖銪⇧嗾䄢鱾㘭骲 [ 340.298280][ T5869] usb 6-1: SerialNumber:   [ 340.429527][ T5912] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 340.530326][T10668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.544231][T10668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.564732][T10668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.579633][T10668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.591553][T10668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.599271][ T5912] usb 3-1: unable to get BOS descriptor or descriptor too short [ 340.602493][T10668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.609441][ T5912] usb 3-1: not running at top speed; connect to a high speed hub [ 340.635692][ T5912] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.646166][ T5912] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 340.663704][ T5912] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 340.683691][ T5912] usb 3-1: language id specifier not provided by device, defaulting to English [ 340.691166][ T5869] usb 6-1: USB disconnect, device number 20 [ 340.712152][ T5912] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 340.721499][ T24] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 340.731841][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.741099][ T5912] usb 3-1: Product: syz [ 340.745743][ T5912] usb 3-1: Manufacturer: syz [ 340.750637][ T5912] usb 3-1: SerialNumber: syz [ 340.784763][T10707] 9p: Bad value for 'wfdno' [ 340.878474][ T24] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 340.893755][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.912624][ T24] usb 5-1: Product: syz [ 340.917569][ T24] usb 5-1: Manufacturer: syz [ 340.922239][ T24] usb 5-1: SerialNumber: syz [ 340.945289][ T24] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 340.962352][ T5862] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 340.994080][ T5883] Process accounting resumed [ 341.007523][T10699] fuse: Bad value for 'user_id' [ 341.016373][T10699] fuse: Bad value for 'user_id' [ 341.047127][ T5912] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 341.055354][T10713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1460'. [ 341.137897][ T5912] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 341.165194][ T5912] usb 3-1: USB disconnect, device number 11 [ 341.187671][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 341.322887][T10722] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1463'. [ 341.457830][T10725] netlink: 17260 bytes leftover after parsing attributes in process `syz.5.1464'. [ 341.615377][ T797] usb 5-1: USB disconnect, device number 32 [ 341.693665][ T5869] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 341.756968][T10735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1467'. [ 341.833796][ T5869] usb 4-1: device descriptor read/64, error -71 [ 342.093731][ T5869] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 342.094038][ T5862] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 342.118281][ T5862] ath9k_htc: Failed to initialize the device [ 342.130194][ T797] usb 5-1: ath9k_htc: USB layer deinitialized [ 342.233760][ T5869] usb 4-1: device descriptor read/64, error -71 [ 342.344100][ T5869] usb usb4-port1: attempt power cycle [ 342.461917][T10760] block device autoloading is deprecated and will be removed. [ 342.513671][ T5862] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 342.663677][ T5862] usb 3-1: Using ep0 maxpacket: 8 [ 342.670238][ T5862] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 342.681439][ T5862] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 342.690732][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.699113][ T5862] usb 3-1: Product: syz [ 342.703478][ T5862] usb 3-1: Manufacturer: syz [ 342.708858][ T5862] usb 3-1: SerialNumber: syz [ 342.713786][ T5869] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 342.723843][ T5862] usb 3-1: config 0 descriptor?? [ 342.732006][ T5862] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 342.746091][ T5869] usb 4-1: device descriptor read/8, error -71 [ 342.753738][ T797] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 342.903637][ T797] usb 5-1: Using ep0 maxpacket: 32 [ 342.915795][ T797] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 342.925585][ T797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.947273][ T797] usb 5-1: config 0 descriptor?? [ 342.962330][ T797] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 342.983748][ T5869] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 343.013837][ T5869] usb 4-1: device descriptor read/8, error -71 [ 343.124240][ T5869] usb usb4-port1: unable to enumerate USB device [ 343.283727][ T5869] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 343.435904][ T5869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.446890][ T5869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.456767][ T5869] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 343.470528][ T5869] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 343.479645][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.490101][ T5869] usb 6-1: config 0 descriptor?? [ 343.538234][ T5862] gspca_zc3xx: reg_w_i err -71 [ 343.560330][ T797] gspca_vc032x: reg_w err -71 [ 343.570923][ T797] gspca_vc032x: I2c Bus Busy Wait 00 [ 343.580679][ T797] gspca_vc032x: I2c Bus Busy Wait 00 [ 343.588228][ T797] gspca_vc032x: I2c Bus Busy Wait 00 [ 343.594170][ T797] gspca_vc032x: I2c Bus Busy Wait 00 [ 343.599633][ T797] gspca_vc032x: I2c Bus Busy Wait 00 [ 343.605629][T10779] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1481'. [ 343.617731][ T797] gspca_vc032x: I2c Bus Busy Wait 00 [ 343.623094][ T797] gspca_vc032x: I2c Bus Busy Wait 00 [ 343.629663][ T797] gspca_vc032x: I2c Bus Busy Wait 00 [ 343.635261][ T797] gspca_vc032x: I2c Bus Busy Wait 00 [ 343.640721][ T797] gspca_vc032x: I2c Bus Busy Wait 00 [ 343.646516][ T797] gspca_vc032x: I2c Bus Busy Wait 00 [ 343.652277][ T797] gspca_vc032x: I2c Bus Busy Wait 00 [ 343.658100][ T797] gspca_vc032x: I2c Bus Busy Wait 00 [ 343.663812][ T797] gspca_vc032x: I2c Bus Busy Wait 00 [ 343.670213][ T797] gspca_vc032x: I2c Bus Busy Wait 00 [ 343.676078][ T797] gspca_vc032x: I2c Bus Busy Wait 00 [ 343.681395][ T797] gspca_vc032x: I2c Bus Busy Wait 00 [ 343.687477][ T797] gspca_vc032x: I2c Bus Busy Wait 00 [ 343.692830][ T797] gspca_vc032x: Unknown sensor... [ 343.698942][ T797] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 343.707591][T10783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.710505][ T797] usb 5-1: USB disconnect, device number 33 [ 343.740729][T10783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.771703][ T5869] usbhid 6-1:0.0: can't add hid device: -71 [ 343.780745][ T5869] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 343.823328][ T5869] usb 6-1: USB disconnect, device number 21 [ 343.984265][T10795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.995558][T10795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.163635][ T5862] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 344.169985][ T5862] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 344.195798][ T5862] usb 3-1: USB disconnect, device number 12 [ 344.203629][ T5869] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 344.353693][ T5869] usb 6-1: device descriptor read/64, error -71 [ 344.503948][ T5862] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 344.603688][ T5869] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 344.643782][ T5862] usb 3-1: device descriptor read/64, error -71 [ 344.648134][T10809] binder: 10807:10809 ioctl c0306201 2000000003c0 returned -14 [ 344.702188][T10812] fuse: Bad value for 'fd' [ 344.743759][ T5869] usb 6-1: device descriptor read/64, error -71 [ 344.858324][ T5869] usb usb6-port1: attempt power cycle [ 344.872984][T10822] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 344.894834][ T5862] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 345.033732][ T5862] usb 3-1: device descriptor read/64, error -71 [ 345.144595][ T5862] usb usb3-port1: attempt power cycle [ 345.173758][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 345.203714][ T5869] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 345.225337][ T5869] usb 6-1: device descriptor read/8, error -71 [ 345.325317][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 345.334808][ T9] usb 4-1: config 255 has an invalid interface number: 178 but max is 0 [ 345.343153][ T9] usb 4-1: config 255 has no interface number 0 [ 345.351427][ T9] usb 4-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=2a.bd [ 345.360533][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.368602][ T9] usb 4-1: Product: syz [ 345.372761][ T9] usb 4-1: Manufacturer: syz [ 345.377564][ T9] usb 4-1: SerialNumber: syz [ 345.463919][ T5869] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 345.493662][ T5862] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 345.494285][ T5869] usb 6-1: device descriptor read/8, error -71 [ 345.514557][ T5862] usb 3-1: device descriptor read/8, error -71 [ 345.594713][ T9] ums-freecom 4-1:255.178: USB Mass Storage device detected [ 345.615174][ T5869] usb usb6-port1: unable to enumerate USB device [ 345.662312][ T9] usb 4-1: USB disconnect, device number 4 [ 345.715253][ T5912] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 345.753878][ T5862] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 345.775631][ T5862] usb 3-1: device descriptor read/8, error -71 [ 345.884869][ T5912] usb 5-1: Using ep0 maxpacket: 32 [ 345.890194][ T5862] usb usb3-port1: unable to enumerate USB device [ 345.898409][ T5912] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 345.906832][ T5912] usb 5-1: config 0 has no interface number 0 [ 345.912938][ T5912] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 345.925919][ T5912] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 345.935495][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.943890][ T5912] usb 5-1: Product: syz [ 345.948059][ T5912] usb 5-1: Manufacturer: syz [ 345.952636][ T5912] usb 5-1: SerialNumber: syz [ 345.959336][ T5912] usb 5-1: config 0 descriptor?? [ 345.966114][T10828] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 346.132442][T10832] sctp: [Deprecated]: syz.3.1497 (pid 10832) Use of struct sctp_assoc_value in delayed_ack socket option. [ 346.132442][T10832] Use struct sctp_sack_info instead [ 346.184033][T10828] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 346.190533][T10835] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1498'. [ 347.026167][T10848] validate_nla: 25 callbacks suppressed [ 347.026179][T10848] netlink: 'syz.2.1502': attribute type 1 has an invalid length. [ 347.633629][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 347.794266][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 347.806037][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 347.820781][ T24] usb 4-1: config 248 has an invalid interface number: 242 but max is 0 [ 347.840979][ T24] usb 4-1: config 248 has no interface number 0 [ 347.850230][ T24] usb 4-1: config 248 interface 242 has no altsetting 0 [ 347.868162][ T24] usb 4-1: New USB device found, idVendor=061d, idProduct=c1a0, bcdDevice=4c.13 [ 347.893662][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.901730][ T24] usb 4-1: Product: syz [ 347.914273][ T24] usb 4-1: Manufacturer: syz [ 347.918943][ T24] usb 4-1: SerialNumber: syz [ 348.144982][T10853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.174250][T10853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.223372][ T5912] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 348.245346][ T24] quatech2 4-1:248.242: Quatech 2nd gen USB to Serial Driver converter detected [ 348.255112][ T5912] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 348.279612][ T24] usb 4-1: qt2_attach - failed to power on unit: -71 [ 348.288335][ T5912] asix 5-1:0.188: probe with driver asix failed with error -71 [ 348.296898][ T24] quatech2 4-1:248.242: probe with driver quatech2 failed with error -71 [ 348.319720][ T5912] usb 5-1: USB disconnect, device number 34 [ 348.341109][ T24] usb 4-1: USB disconnect, device number 5 [ 349.035606][T10928] netlink: 'syz.3.1522': attribute type 1 has an invalid length. [ 349.271481][T10945] netlink: 'syz.3.1526': attribute type 10 has an invalid length. [ 349.280087][T10945] veth0_vlan: entered allmulticast mode [ 349.319040][T10945] veth0_vlan: left promiscuous mode [ 349.332187][T10945] veth0_vlan: entered promiscuous mode [ 349.343522][T10945] team0: Device veth0_vlan failed to register rx_handler [ 349.416537][T10956] tmpfs: Bad value for 'mpol' [ 349.428079][T10955] rtc_cmos 00:00: Alarms can be up to one day in the future [ 349.613729][ T5883] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 349.703896][ T5912] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 349.766208][ T5883] usb 6-1: unable to get BOS descriptor or descriptor too short [ 349.776861][ T5883] usb 6-1: not running at top speed; connect to a high speed hub [ 349.786181][ T5883] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 349.795428][ T5883] usb 6-1: config 1 has no interface number 1 [ 349.802579][ T5883] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 349.818506][ T5883] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 349.827702][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.835976][ T5883] usb 6-1: Product: syz [ 349.840153][ T5883] usb 6-1: Manufacturer: syz [ 349.845003][ T5883] usb 6-1: SerialNumber: syz [ 349.863630][ T5912] usb 4-1: Using ep0 maxpacket: 32 [ 349.870213][ T5912] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 349.879341][ T5912] usb 4-1: config 0 has no interface number 0 [ 349.886018][ T5862] rtc_cmos 00:00: Alarms can be up to one day in the future [ 349.894606][ T5862] rtc_cmos 00:00: Alarms can be up to one day in the future [ 349.902573][ T5862] rtc_cmos 00:00: Alarms can be up to one day in the future [ 349.912695][ T5862] rtc_cmos 00:00: Alarms can be up to one day in the future [ 349.920212][ T5912] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 349.929795][ T5862] rtc rtc0: __rtc_set_alarm: err=-22 [ 349.936311][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.944740][ T5912] usb 4-1: Product: syz [ 349.948906][ T5912] usb 4-1: Manufacturer: syz [ 349.953493][ T5912] usb 4-1: SerialNumber: syz [ 349.960693][ T5912] usb 4-1: config 0 descriptor?? [ 349.993653][ T24] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 350.067744][ T5883] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 350.104991][ T5883] usb 6-1: USB disconnect, device number 26 [ 350.147095][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 350.147899][ T24] usb 5-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 350.189739][ T24] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 350.200419][ T24] usb 5-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 350.211075][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.230520][ T24] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 350.382031][ T5912] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 350.394107][ T5912] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 350.630732][ T24] gspca_sn9c2028: read1 error -71 [ 350.642915][ T24] gspca_sn9c2028: read1 error -71 [ 350.648651][ T24] sn9c2028 5-1:220.0: probe with driver sn9c2028 failed with error -71 [ 350.669486][ T24] usb 5-1: USB disconnect, device number 35 [ 350.807484][T10959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.816423][T10959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.825571][T10959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.838842][T10959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.857364][ T5912] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 350.870105][ T5912] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 350.893910][ T5912] usb 4-1: USB disconnect, device number 6 [ 351.388187][T10997] netlink: 'syz.5.1543': attribute type 11 has an invalid length. [ 351.397622][T10997] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1543'. [ 351.703876][ T24] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 351.853679][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 351.863770][ T797] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 351.873907][ T24] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 351.886202][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.903751][ T24] usb 3-1: Product: syz [ 351.910317][ T24] usb 3-1: Manufacturer: syz [ 351.924661][ T24] usb 3-1: SerialNumber: syz [ 351.939880][ T24] r8152-cfgselector 3-1: Unknown version 0x0000 [ 351.946755][ T24] r8152-cfgselector 3-1: config 0 descriptor?? [ 352.033676][ T797] usb 6-1: Using ep0 maxpacket: 32 [ 352.045129][ T797] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 352.053336][ T797] usb 6-1: config 0 has no interface number 0 [ 352.068950][ T797] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 352.093917][ T797] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 352.112345][ T797] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 352.133863][ T797] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 352.153816][ T797] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 352.174665][ T797] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 352.193836][ T797] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 352.214055][ T797] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 26159, setting to 1024 [ 352.226000][ T797] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 352.236540][ T797] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 352.258910][ T797] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 352.273622][ T797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.283074][ T797] usb 6-1: Product: syz [ 352.298776][ T797] usb 6-1: Manufacturer: syz [ 352.303481][ T797] usb 6-1: SerialNumber: syz [ 352.313437][ T797] usb 6-1: config 0 descriptor?? [ 352.323326][T11014] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 352.330916][T11014] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 352.339684][ T797] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 352.348177][ T797] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 352.371365][ T24] r8152-cfgselector 3-1: USB disconnect, device number 17 [ 352.380865][ T797] scsi host1: microtekX6 [ 352.543712][ T5912] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 352.561127][ T5883] usb 6-1: USB disconnect, device number 27 [ 352.673815][ T797] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 352.714329][ T5912] usb 5-1: Using ep0 maxpacket: 8 [ 352.721208][ T5912] usb 5-1: config 5 has an invalid interface number: 15 but max is 0 [ 352.730952][ T5912] usb 5-1: config 5 has no interface number 0 [ 352.746393][ T5912] usb 5-1: config 5 interface 15 has no altsetting 0 [ 352.758013][ T5912] usb 5-1: New USB device found, idVendor=045e, idProduct=0441, bcdDevice=c2.b9 [ 352.767170][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.776081][ T5912] usb 5-1: Product: syz [ 352.780968][ T5912] usb 5-1: Manufacturer: syz [ 352.785687][ T5912] usb 5-1: SerialNumber: syz [ 352.836034][ T797] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 352.847911][ T797] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 352.859110][ T797] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 352.870507][ T797] usb 4-1: config 0 interface 0 has no altsetting 0 [ 352.879489][ T797] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 352.893612][ T797] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 352.902116][ T797] usb 4-1: Product: syz [ 352.911783][ T797] usb 4-1: Manufacturer: syz [ 352.916610][ T797] usb 4-1: SerialNumber: syz [ 352.924084][ T797] usb 4-1: config 0 descriptor?? [ 352.930056][T11047] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 352.949266][ T797] usb 4-1: selecting invalid altsetting 0 [ 353.004649][ T5912] usb 5-1: bad CDC descriptors [ 353.031997][ T5912] usb 5-1: USB disconnect, device number 36 [ 353.156774][T11047] usb 4-1: BOGUS urb xfer, pipe 0 != type 1 [ 353.373888][ T797] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 353.537926][ T797] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 353.565768][T11064] dvmrp6: entered allmulticast mode [ 353.599278][ T797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.667919][ T797] usb 6-1: config 0 descriptor?? [ 353.883845][ T797] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 354.101103][ T797] [drm:udl_init] *ERROR* Selecting channel failed [ 354.233861][ T797] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 354.240595][ T797] [drm] Initialized udl on minor 2 [ 354.317598][ T797] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 354.334710][T11072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1566'. [ 354.360226][ T797] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 354.414319][ T9] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 354.422393][ T9] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 354.455320][ T797] usb 6-1: USB disconnect, device number 28 [ 354.526570][T11077] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1568'. [ 354.539801][T11077] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 354.593722][ T24] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 354.721188][T11079] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1570'. [ 354.736666][T11082] misc userio: No port type given on /dev/userio [ 354.770539][T11079] PKCS7: Unknown OID: [4] 0.38.107.1697900.285475 [ 354.783396][ T24] usb 5-1: config 0 has an invalid interface number: 111 but max is 0 [ 354.813979][ T24] usb 5-1: config 0 has no interface number 0 [ 354.821691][T11079] PKCS7: Only support pkcs7_signedData type [ 354.848522][ T24] usb 5-1: New USB device found, idVendor=05a9, idProduct=8065, bcdDevice=41.96 [ 354.882122][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.930858][ T24] usb 5-1: config 0 descriptor?? [ 354.980144][ T24] gspca_main: ov534_9-2.14.0 probing 05a9:8065 [ 355.450878][ T5883] usb 4-1: USB disconnect, device number 7 [ 355.585471][T11073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.594046][ T5912] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 355.606408][T11073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.663724][ T5915] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 355.733774][ T5912] usb 6-1: device descriptor read/64, error -71 [ 355.813705][ T5915] usb 3-1: Using ep0 maxpacket: 8 [ 355.822527][ T5915] usb 3-1: unable to get BOS descriptor or descriptor too short [ 355.834784][ T5915] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 355.843275][ T5915] usb 3-1: config 0 has no interface number 0 [ 355.854668][ T5915] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 355.866086][ T5915] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 355.876208][ T5915] usb 3-1: config 0 interface 88 has no altsetting 0 [ 355.885580][ T5915] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 355.895193][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 355.903331][ T5915] usb 3-1: Product: syz [ 355.907955][ T5915] usb 3-1: Manufacturer: syz [ 355.912606][ T5915] usb 3-1: SerialNumber: syz [ 355.925113][ T5915] usb 3-1: config 0 descriptor?? [ 355.983755][ T5912] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 356.113693][ T5912] usb 6-1: device descriptor read/64, error -71 [ 356.138230][T11113] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 356.149865][T11114] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 356.193458][ T5915] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input42 [ 356.224446][ T5912] usb usb6-port1: attempt power cycle [ 356.237705][ T5915] usb 3-1: USB disconnect, device number 18 [ 356.293489][T11124] batadv_slave_1: entered promiscuous mode [ 356.316871][T11120] batadv_slave_1: left promiscuous mode [ 356.583736][ T5912] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 356.606924][ T5912] usb 6-1: device descriptor read/8, error -71 [ 356.661429][T11134] netlink: 796 bytes leftover after parsing attributes in process `syz.3.1584'. [ 356.676117][ T5915] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 356.835193][ T5915] usb 3-1: config 0 has an invalid interface number: 63 but max is 0 [ 356.843728][ T5912] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 356.851398][ T5915] usb 3-1: config 0 has no interface number 0 [ 356.857916][ T5915] usb 3-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=b2.a1 [ 356.867005][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.876762][ T5912] usb 6-1: device descriptor read/8, error -71 [ 356.885214][ T5915] usb 3-1: config 0 descriptor?? [ 356.914574][ T797] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 356.983888][ T5912] usb usb6-port1: unable to enumerate USB device [ 357.016148][ T24] gspca_ov534_9: reg_r err -71 [ 357.074587][ T797] usb 4-1: Using ep0 maxpacket: 32 [ 357.083955][ T797] usb 4-1: unable to get BOS descriptor or descriptor too short [ 357.092933][ T797] usb 4-1: config 1 interface 0 altsetting 164 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.153207][ T797] usb 4-1: config 1 interface 0 has no altsetting 0 [ 357.169938][ T797] usb 4-1: New USB device found, idVendor=0306, idProduct=ff3f, bcdDevice= 0.40 [ 357.178541][ T5912] usb 3-1: USB disconnect, device number 19 [ 357.179269][ T797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.199431][ T797] usb 4-1: Product: syz [ 357.213875][ T797] usb 4-1: Manufacturer: syz [ 357.222677][ T797] usb 4-1: SerialNumber: syz [ 357.294238][ T24] gspca_ov534_9: Unknown sensor 0000 [ 357.294322][ T24] ov534_9 5-1:0.111: probe with driver ov534_9 failed with error -22 [ 357.310737][ T24] usb 5-1: USB disconnect, device number 37 [ 357.433204][T11134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.442000][T11134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.460597][ T797] usbhid 4-1:1.0: fixing wrong optional hid class descriptors count [ 357.470361][ T797] usbhid 4-1:1.0: can't add hid device: -71 [ 357.476417][ T797] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 357.487717][ T797] usb 4-1: USB disconnect, device number 8 [ 357.593726][ T5912] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 357.745310][ T5912] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.755560][ T5912] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 357.770056][ T5912] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 357.779393][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 357.787631][ T5912] usb 3-1: SerialNumber: syz [ 357.800340][ T5912] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 358.002474][T11141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.011765][T11141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.040172][T11141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.050934][T11141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.059359][T11145] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 358.062208][ T5912] usb 3-1: USB disconnect, device number 20 [ 358.131708][T11148] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1588'. [ 358.160261][T11148] overlay: Unknown parameter 'subj_user' [ 358.393748][ T797] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 358.463746][ T9] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 358.543853][ T797] usb 4-1: Invalid ep0 maxpacket: 64 [ 358.614896][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 358.622521][ T9] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 358.630932][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 358.643615][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 358.655656][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 358.666992][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 358.677190][ T797] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 358.684701][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 358.698263][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 358.707463][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.883847][ T5869] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 358.891494][ T797] usb 4-1: Invalid ep0 maxpacket: 64 [ 358.897670][ T797] usb usb4-port1: attempt power cycle [ 358.925435][ T9] usb 5-1: usb_control_msg returned -32 [ 358.931094][ T9] usbtmc 5-1:16.0: can't read capabilities [ 358.978851][T11160] netlink: 'syz.5.1593': attribute type 27 has an invalid length. [ 359.033257][T11162] dns_resolver: Unsupported server list version (0) [ 359.073649][ T5869] usb 3-1: Using ep0 maxpacket: 32 [ 359.085771][ T5869] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 359.095361][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.103332][ T5869] usb 3-1: Product: syz [ 359.108678][ T5869] usb 3-1: Manufacturer: syz [ 359.113261][ T5869] usb 3-1: SerialNumber: syz [ 359.119780][ T5869] usb 3-1: config 0 descriptor?? [ 359.263679][ T797] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 359.279273][T11165] netlink: 'syz.4.1590': attribute type 1 has an invalid length. [ 359.288710][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 359.295287][ T797] usb 4-1: Invalid ep0 maxpacket: 64 [ 359.299368][T11165] usbtmc 5-1:16.0: Unable to send data, error -71 [ 359.310577][ T5883] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 359.350265][ T5869] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 021 [ 359.445364][ T797] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 359.465279][ T5883] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 359.487016][ T797] usb 4-1: Invalid ep0 maxpacket: 64 [ 359.492851][ T797] usb usb4-port1: unable to enumerate USB device [ 359.501776][ T5883] usb 6-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.40 [ 359.513651][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.521662][ T5883] usb 6-1: Product: syz [ 359.543725][ T5883] usb 6-1: Manufacturer: ᐄ [ 359.548350][ T5883] usb 6-1: SerialNumber: syz [ 359.974620][T11164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.983957][T11164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.015954][ T5883] usbhid 6-1:1.0: can't add hid device: -71 [ 360.021932][ T5883] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 360.043970][ T5883] usb 6-1: USB disconnect, device number 33 [ 360.206201][ T29] audit: type=1326 audit(1770893329.248:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11169 comm="syz.2.1597" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f842959bf79 code=0x0 [ 360.324989][T11173] netlink: 212356 bytes leftover after parsing attributes in process `syz.2.1597'. [ 360.482162][ T5883] usb 3-1: USB disconnect, device number 21 [ 360.547634][T11176] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1598'. [ 360.793663][ T5883] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 360.945944][ T5883] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 360.954244][ T5883] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.965513][ T5883] usb 6-1: config 0 has no interface number 0 [ 360.974614][ T5883] usb 6-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00 [ 360.984082][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.992070][ T5883] usb 6-1: Product: syz [ 360.996346][ T5883] usb 6-1: Manufacturer: syz [ 361.000942][ T5883] usb 6-1: SerialNumber: syz [ 361.007974][ T5883] usb 6-1: config 0 descriptor?? [ 361.249127][ T5883] uvcvideo 6-1:0.64: Found Unit with invalid ID 0 [ 361.268330][ T5869] usb 5-1: USB disconnect, device number 38 [ 361.272818][ T5883] uvcvideo 6-1:0.64: Found UVC 0.00 device syz (056d:0000) [ 361.299306][ T5883] uvcvideo 6-1:0.64: No valid video chain found. [ 361.328953][ T5883] usb 6-1: USB disconnect, device number 34 [ 361.497807][ T8031] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.596397][ T8031] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.721418][ T8031] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.779151][ T8031] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.988183][ T8031] bridge_slave_1: left allmulticast mode [ 362.000961][ T8031] bridge_slave_1: left promiscuous mode [ 362.006842][ T8031] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.051644][ T8031] bridge_slave_0: left allmulticast mode [ 362.067094][ T8031] bridge_slave_0: left promiscuous mode [ 362.079773][ T5912] IPVS: starting estimator thread 0... [ 362.084662][ T8031] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.087850][T11193] netlink: 'syz.5.1607': attribute type 1 has an invalid length. [ 362.101776][T11193] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1607'. [ 362.175402][T11196] IPVS: using max 33 ests per chain, 79200 per kthread [ 362.196362][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 362.208011][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 362.217156][ T9] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 362.232780][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 362.243028][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 362.252961][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 362.303660][ T5912] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 362.393687][ T5883] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 362.396095][ T9] usb 4-1: config 7 has an invalid interface number: 252 but max is 0 [ 362.410197][ T9] usb 4-1: config 7 has no interface number 0 [ 362.416588][ T9] usb 4-1: config 7 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 232, changing to 4 [ 362.427937][ T9] usb 4-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid maxpacket 64, setting to 0 [ 362.438760][ T9] usb 4-1: config 7 interface 252 has no altsetting 0 [ 362.452437][ T9] usb 4-1: string descriptor 0 read error: -22 [ 362.463664][ T5912] usb 5-1: Using ep0 maxpacket: 32 [ 362.471596][ T9] usb 4-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 362.473497][ T5912] usb 5-1: config 0 has an invalid interface number: 112 but max is 0 [ 362.482323][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.518966][ T5912] usb 5-1: config 0 has no interface number 0 [ 362.525933][ T5912] usb 5-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice= 8.32 [ 362.535534][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.545203][ T5883] usb 6-1: Using ep0 maxpacket: 32 [ 362.551604][ T8031] tipc: Disabling bearer [ 362.566994][ T9] idmouse 4-1:7.252: Unable to find bulk-in endpoint. [ 362.569472][ T5883] usb 6-1: config 0 has an invalid interface number: 16 but max is 0 [ 362.590649][ T8031] tipc: Disabling bearer [ 362.607455][ T5912] usb 5-1: config 0 descriptor?? [ 362.614479][ T8031] tipc: Left network mode [ 362.624824][ T5883] usb 6-1: config 0 has no interface number 0 [ 362.636414][ T5912] gspca_main: conex-2.14.0 probing 0572:0041 [ 362.647047][ T5883] usb 6-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 362.669957][ T5883] usb 6-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 362.688419][ T5883] usb 6-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 362.698816][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.707323][ T5883] usb 6-1: Product: syz [ 362.714997][ T5883] usb 6-1: Manufacturer: syz [ 362.719667][ T5883] usb 6-1: SerialNumber: syz [ 362.746426][ T5883] usb 6-1: config 0 descriptor?? [ 362.752959][T11198] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 362.777089][ T9] usb 4-1: USB disconnect, device number 13 [ 362.786400][ T5883] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 362.975260][T11198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.015320][T11198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.043319][ T8031] hsr_slave_0: left promiscuous mode [ 363.054451][ T5883] usb 6-1: USB disconnect, device number 35 [ 363.076459][ T8031] hsr_slave_1: left promiscuous mode [ 363.102943][ T8031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.111065][ T8031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.145103][ T5912] usb 5-1: USB disconnect, device number 39 [ 363.166750][ T8031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.194849][ T8031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.236486][ T8031] veth1_macvtap: left promiscuous mode [ 363.242211][ T8031] veth0_macvtap: left promiscuous mode [ 363.252353][ T8031] veth1_vlan: left promiscuous mode [ 363.360185][T11218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1609'. [ 363.409762][T11221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.444222][T11221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.484462][T11226] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1611'. [ 363.588542][T11226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1611'. [ 363.666518][ T8031] team0 (unregistering): Port device macvlan0 removed [ 363.667706][T11234] 9pnet_fd: p9_fd_create_tcp (11234): problem binding to privport [ 363.722255][T11236] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1614'. [ 363.802088][T11243] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1614'. [ 363.829620][ T8031] team0 (unregistering): Port device team_slave_1 removed [ 363.846068][ T8031] team0 (unregistering): Port device team_slave_0 removed [ 363.978088][T11236] gretap0: entered promiscuous mode [ 363.989065][T11243] 0{X: renamed from gretap0 [ 363.995622][T11243] 0{X: left promiscuous mode [ 364.000679][T11243] 0{X: entered allmulticast mode [ 364.013140][T11243] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 364.029368][ T5883] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 364.128963][T11199] chnl_net:caif_netlink_parms(): no params data found [ 364.215430][ T5883] usb 4-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 364.228322][ T5883] usb 4-1: config 0 interface 0 has no altsetting 0 [ 364.245764][ T5883] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 364.258610][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 364.282066][ T5883] usb 4-1: Product: syz [ 364.295049][ T5883] usb 4-1: Manufacturer: syz [ 364.299728][ T5883] usb 4-1: SerialNumber: syz [ 364.323280][ T5883] usb 4-1: config 0 descriptor?? [ 364.329819][T11242] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 364.335073][ T5818] Bluetooth: hci0: command tx timeout [ 364.342943][ T5883] usb 4-1: selecting invalid altsetting 0 [ 364.363102][T11199] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.383710][ T981] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 364.393420][T11199] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.424753][T11199] bridge_slave_0: entered allmulticast mode [ 364.462916][T11199] bridge_slave_0: entered promiscuous mode [ 364.479738][T11199] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.487477][T11263] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 364.512820][T11199] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.531697][T11199] bridge_slave_1: entered allmulticast mode [ 364.550422][ T981] usb 5-1: config 16 has an invalid interface number: 19 but max is 0 [ 364.563339][ T981] usb 5-1: config 16 has no interface number 0 [ 364.583028][ T981] usb 5-1: config 16 interface 19 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 364.600116][T11199] bridge_slave_1: entered promiscuous mode [ 364.611210][ T981] usb 5-1: config 16 interface 19 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 364.637092][ T981] usb 5-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 364.658082][ T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.662155][ T9] usb 4-1: USB disconnect, device number 14 [ 364.673602][ T981] usb 5-1: Product: syz [ 364.683880][ T981] usb 5-1: Manufacturer: syz [ 364.701846][ T981] usb 5-1: SerialNumber: syz [ 364.753393][T11199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.772399][T11199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.846998][T11199] team0: Port device team_slave_0 added [ 364.869002][T11199] team0: Port device team_slave_1 added [ 364.914250][T11199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.921416][T11199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.951623][T11199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.982750][T11199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.990158][T11199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.017791][T11199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.041768][ T981] usb 5-1: USB disconnect, device number 40 [ 365.068772][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:16.19/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 365.086325][ T5915] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 365.119799][T11199] hsr_slave_0: entered promiscuous mode [ 365.128051][T11199] hsr_slave_1: entered promiscuous mode [ 365.135437][T11199] debugfs: 'hsr0' already exists in 'hsr' [ 365.141181][T11199] Cannot create hsr debugfs directory [ 365.247009][ T5915] usb 6-1: not running at top speed; connect to a high speed hub [ 365.267412][ T5915] usb 6-1: config 6 has an invalid interface number: 180 but max is 3 [ 365.284833][ T5915] usb 6-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 365.313609][ T5915] usb 6-1: config 6 has an invalid interface number: 221 but max is 3 [ 365.321848][ T5915] usb 6-1: config 6 has an invalid interface number: 66 but max is 3 [ 365.343187][ T5915] usb 6-1: config 6 has an invalid interface number: 75 but max is 3 [ 365.369611][ T5915] usb 6-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 365.393456][ T5915] usb 6-1: config 6 has no interface number 0 [ 365.408159][ T5915] usb 6-1: config 6 has no interface number 1 [ 365.423778][ T5915] usb 6-1: config 6 has no interface number 2 [ 365.429901][ T5915] usb 6-1: config 6 has no interface number 3 [ 365.443725][ T5915] usb 6-1: config 6 interface 180 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 365.473613][ T5915] usb 6-1: config 6 interface 180 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 365.519239][ T5915] usb 6-1: config 6 interface 180 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 365.547511][ T5915] usb 6-1: config 6 interface 180 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 365.568976][ T5915] usb 6-1: config 6 interface 180 altsetting 2 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 365.582231][ T5915] usb 6-1: config 6 interface 180 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 365.593566][ T5915] usb 6-1: config 6 interface 180 altsetting 2 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 365.621011][ T5915] usb 6-1: config 6 interface 180 altsetting 2 has a duplicate endpoint with address 0x89, skipping [ 365.648354][ T5915] usb 6-1: config 6 interface 180 altsetting 2 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 365.660437][ T5915] usb 6-1: config 6 interface 221 altsetting 129 endpoint 0x88 has invalid maxpacket 455, setting to 64 [ 365.712089][ T5915] usb 6-1: config 6 interface 221 altsetting 129 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 365.738161][T11199] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 365.763871][T11199] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 365.774862][ T5915] usb 6-1: config 6 interface 221 altsetting 129 endpoint 0xC has invalid maxpacket 1104, setting to 1023 [ 365.793040][T11199] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 365.823419][T11199] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 365.833712][ T5915] usb 6-1: config 6 interface 221 altsetting 129 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 365.867908][ T5915] usb 6-1: config 6 interface 221 altsetting 129 has a duplicate endpoint with address 0xF, skipping [ 365.894003][ T5915] usb 6-1: config 6 interface 221 altsetting 129 has a duplicate endpoint with address 0x1, skipping [ 365.905438][ T5915] usb 6-1: config 6 interface 221 altsetting 129 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 365.946480][ T5915] usb 6-1: config 6 interface 221 altsetting 129 has a duplicate endpoint with address 0xE, skipping [ 365.976210][ T5915] usb 6-1: config 6 interface 221 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 366.004068][ T5915] usb 6-1: config 6 interface 221 altsetting 129 has a duplicate endpoint with address 0x3, skipping [ 366.022498][ T5915] usb 6-1: config 6 interface 221 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 366.040924][ T5915] usb 6-1: config 6 interface 221 altsetting 129 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 366.064435][ T5915] usb 6-1: config 6 interface 221 altsetting 129 has a duplicate endpoint with address 0xC, skipping [ 366.092541][ T5915] usb 6-1: config 6 interface 221 altsetting 129 has a duplicate endpoint with address 0x8, skipping [ 366.104311][ T5915] usb 6-1: config 6 interface 221 altsetting 129 has a duplicate endpoint with address 0x3, skipping [ 366.115392][ T5915] usb 6-1: config 6 interface 66 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 366.150650][T11199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.153593][ T5915] usb 6-1: config 6 interface 66 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 366.180828][ T5915] usb 6-1: config 6 interface 66 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 366.201843][T11199] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.221416][ T5915] usb 6-1: config 6 interface 66 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 366.221519][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.237161][ T5915] usb 6-1: config 6 interface 75 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 366.239389][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.250221][ T5915] usb 6-1: config 6 interface 75 altsetting 127 has a duplicate endpoint with address 0x5, skipping [ 366.276261][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.283507][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.312696][ T5915] usb 6-1: config 6 interface 75 altsetting 127 has a duplicate endpoint with address 0xB, skipping [ 366.354785][ T5915] usb 6-1: config 6 interface 75 altsetting 127 has a duplicate endpoint with address 0x1, skipping [ 366.379957][ T5915] usb 6-1: config 6 interface 75 altsetting 127 has a duplicate endpoint with address 0x5, skipping [ 366.391578][T11329] rtc_cmos 00:00: Alarms can be up to one day in the future [ 366.403515][ T29] audit: type=1800 audit(1770893335.438:25): pid=11329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1630" name="file0" dev="ramfs" ino=47303 res=0 errno=0 [ 366.416018][ T5818] Bluetooth: hci0: command tx timeout [ 366.463636][ T5915] usb 6-1: config 6 interface 75 altsetting 127 has a duplicate endpoint with address 0x4, skipping [ 366.499446][ T5915] usb 6-1: config 6 interface 75 altsetting 127 has a duplicate endpoint with address 0x8, skipping [ 366.531444][T11335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1631'. [ 366.553606][ T5915] usb 6-1: config 6 interface 75 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 366.577809][T11335] netlink: 'syz.3.1631': attribute type 27 has an invalid length. [ 366.593662][ T5915] usb 6-1: config 6 interface 75 altsetting 127 has a duplicate endpoint with address 0x9, skipping [ 366.593690][ T5915] usb 6-1: config 6 interface 75 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 366.593708][ T5915] usb 6-1: config 6 interface 75 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 366.593726][ T5915] usb 6-1: config 6 interface 75 altsetting 127 has a duplicate endpoint with address 0x1, skipping [ 366.593747][ T5915] usb 6-1: config 6 interface 75 altsetting 127 has a duplicate endpoint with address 0x5, skipping [ 366.593766][ T5915] usb 6-1: config 6 interface 75 altsetting 127 has a duplicate endpoint with address 0x3, skipping [ 366.593784][ T5915] usb 6-1: config 6 interface 180 has no altsetting 0 [ 366.593799][ T5915] usb 6-1: config 6 interface 221 has no altsetting 0 [ 366.593814][ T5915] usb 6-1: config 6 interface 66 has no altsetting 0 [ 366.593828][ T5915] usb 6-1: config 6 interface 75 has no altsetting 0 [ 366.596045][ T5915] usb 6-1: New USB device found, idVendor=04f2, idProduct=affc, bcdDevice=3b.e3 [ 366.596073][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.596092][ T5915] usb 6-1: Product: syz [ 366.596113][ T5915] usb 6-1: Manufacturer: ⡙蜐츆鉆숛ⱏײַꔹ綊ﲑ釘輌秔⧤续슑䨃響걳⫩煣媐䠦娅♙봄룢蛯罛鳓ꙗ䠃측櫿ᰴ榧庙፸昋ਠ [ 366.596131][ T5915] usb 6-1: SerialNumber: syz [ 366.608562][T11276] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 366.609244][T11276] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 366.780235][T11335] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.073183][T11335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.100345][T11335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.141978][T11335] veth0_vlan: left allmulticast mode [ 367.212170][ T155] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.241373][ T155] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.256171][ T155] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.287635][ T155] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.291555][ T5915] usb 6-1: USB disconnect, device number 36 [ 367.320580][T11199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.493744][ T797] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 367.643620][ T797] usb 5-1: Using ep0 maxpacket: 8 [ 367.643695][ T981] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 367.657630][T11199] veth0_vlan: entered promiscuous mode [ 367.667330][ T797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 367.675278][T11199] veth1_vlan: entered promiscuous mode [ 367.683289][ T797] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 367.697360][ T797] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 367.707531][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.721495][T11199] veth0_macvtap: entered promiscuous mode [ 367.724579][ T797] usb 5-1: Product: syz [ 367.732285][ T797] usb 5-1: Manufacturer: syz [ 367.737706][T11199] veth1_macvtap: entered promiscuous mode [ 367.747006][ T797] usb 5-1: SerialNumber: syz [ 367.755044][ T797] usb 5-1: config 0 descriptor?? [ 367.777216][T11199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.815313][T11199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.825954][ T981] usb 4-1: Using ep0 maxpacket: 16 [ 367.841383][ T130] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.855768][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.857663][ T981] usb 4-1: unable to get BOS descriptor or descriptor too short [ 367.875981][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.886682][ T981] usb 4-1: config 8 has an invalid interface number: 175 but max is 1 [ 367.888938][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.904070][ T981] usb 4-1: config 8 has an invalid interface number: 167 but max is 1 [ 367.904096][ T981] usb 4-1: config 8 has no interface number 0 [ 367.904110][ T981] usb 4-1: config 8 has no interface number 1 [ 367.947174][ T981] usb 4-1: config 8 interface 175 has no altsetting 0 [ 367.958045][ T981] usb 4-1: config 8 interface 167 has no altsetting 0 [ 367.968289][ T981] usb 4-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice= f.ae [ 367.978335][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.987486][ T981] usb 4-1: Product: syz [ 367.991901][ T981] usb 4-1: Manufacturer: syz [ 367.999147][ T981] usb 4-1: SerialNumber: syz [ 368.046299][ T797] usb 5-1: USB disconnect, device number 41 [ 368.087079][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.095110][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.131328][ T130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.141586][ T130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.163773][ T5823] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 368.213259][ T981] cypress_m8 4-1:8.175: HID->COM RS232 Adapter converter detected [ 368.231388][ T981] cyphidcom ttyUSB0: required endpoint is missing [ 368.240829][ T981] cypress_m8 4-1:8.167: HID->COM RS232 Adapter converter detected [ 368.252361][ T981] cyphidcom ttyUSB1: required endpoint is missing [ 368.271586][ T981] usb 4-1: USB disconnect, device number 15 [ 368.290361][ T981] cypress_m8 4-1:8.175: device disconnected [ 368.300407][ T981] cypress_m8 4-1:8.167: device disconnected [ 368.323867][ T5823] usb 6-1: Using ep0 maxpacket: 16 [ 368.331219][ T5823] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 368.343001][ T5823] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.358488][ T5823] usb 6-1: config 0 has no interface number 0 [ 368.367608][ T5823] usb 6-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 368.377361][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.387834][ T5823] usb 6-1: Product: syz [ 368.392013][ T5823] usb 6-1: Manufacturer: syz [ 368.397142][ T5823] usb 6-1: SerialNumber: syz [ 368.407723][ T5823] usb 6-1: config 0 descriptor?? [ 368.431653][ T5823] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 368.489737][ T5823] snd-usb-audio 6-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 368.500724][ T5818] Bluetooth: hci0: command tx timeout [ 368.521386][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 368.589533][ T29] audit: type=1326 audit(1770893337.628:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11385 comm="syz.4.1638" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc70db9bf79 code=0x0 [ 368.633120][T11379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.645336][T11379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.656757][ T797] usb 6-1: USB disconnect, device number 37 [ 369.461590][T11413] netlink: 'syz.4.1646': attribute type 9 has an invalid length. [ 369.469536][T11413] netlink: 'syz.4.1646': attribute type 11 has an invalid length. [ 369.479301][T11413] netlink: 'syz.4.1646': attribute type 12 has an invalid length. [ 369.487982][ T981] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 369.493685][T11413] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.1646'. [ 369.505854][T11413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1646'. [ 369.620353][T11420] binder: 11418:11420 ioctl 4018620d 0 returned -22 [ 369.625698][ T5915] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 369.645645][ T981] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 369.656829][ T981] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 369.668726][ T981] usb 7-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 369.681806][ T981] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.692095][ T981] usb 7-1: Product: syz [ 369.696713][ T981] usb 7-1: Manufacturer: syz [ 369.701315][ T981] usb 7-1: SerialNumber: syz [ 369.708702][ T981] usb 7-1: config 0 descriptor?? [ 369.717669][ T981] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 369.793632][ T5915] usb 4-1: Using ep0 maxpacket: 8 [ 369.800141][ T5915] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 369.808471][ T5915] usb 4-1: config 0 has no interface number 0 [ 369.815864][ T5915] usb 4-1: New USB device found, idVendor=19d2, idProduct=4172, bcdDevice=92.62 [ 369.824990][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.835693][ T5915] usb 4-1: config 0 descriptor?? [ 369.848309][ T5915] usb 4-1: bad CDC descriptors [ 369.913632][ T9] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 369.928924][T11398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.937816][T11398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.955511][ T5915] usb 7-1: USB disconnect, device number 2 [ 370.056442][T11410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.067804][T11410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.085686][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 370.092575][ T981] usb 4-1: USB disconnect, device number 16 [ 370.093181][ T9] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 370.113433][ T9] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 370.117831][T11431] netlink: 'syz.6.1651': attribute type 23 has an invalid length. [ 370.130860][T11431] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1651'. [ 370.137585][ T9] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 370.157616][ T9] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 370.190360][ T9] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 370.200750][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.209792][ T9] usb 5-1: Product: syz [ 370.214362][ T9] usb 5-1: Manufacturer: syz [ 370.219044][ T9] usb 5-1: SerialNumber: syz [ 370.249077][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 370.270677][ T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input44 [ 370.463758][ T9] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 370.472076][ T9] (id 0x00) [ 370.523658][ T9] rc_core: IR keymap rc-imon-pad not found [ 370.529551][ T9] Registered IR keymap rc-empty [ 370.536004][ T9] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 370.546311][ T9] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 370.573759][ T5818] Bluetooth: hci0: command tx timeout [ 370.603647][ T981] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 370.665349][ T9] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 370.677380][ T9] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input45 [ 370.692072][ T9] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:42> initialized [ 370.765935][ T981] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 370.788625][ T981] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.822353][ T981] usb 7-1: config 0 descriptor?? [ 370.861755][T11424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.874502][T11424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.886423][T11424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.897468][T11424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.910059][T11424] imon:vfd_write: invalid payload size [ 370.919367][ T9] usb 5-1: USB disconnect, device number 42 [ 371.018893][T11451] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1656'. [ 371.555796][ T5883] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 371.729046][ T5883] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 371.741522][ T5883] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 201, changing to 11 [ 371.753018][ T5883] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 371.764692][ T5883] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 371.780057][ T5883] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 371.789545][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 371.799567][ T5883] usb 6-1: SerialNumber: syz [ 371.807497][T11465] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 371.943718][ T5912] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 372.023754][ T5883] usbtest 6-1:1.0: couldn't get endpoints, -22 [ 372.031523][ T5883] usbtest 6-1:1.0: probe with driver usbtest failed with error -22 [ 372.042959][ T5883] usb 6-1: USB disconnect, device number 38 [ 372.073724][ T5912] usb 4-1: device descriptor read/64, error -71 [ 372.264812][ T981] pegasus 7-1:0.0: probe with driver pegasus failed with error -110 [ 372.335953][ T5912] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 372.395080][T11487] [ 372.397438][T11487] ====================================================== [ 372.404450][T11487] WARNING: possible circular locking dependency detected [ 372.411489][T11487] syzkaller #0 Tainted: G L [ 372.417453][T11487] ------------------------------------------------------ [ 372.424471][T11487] syz.4.1670/11487 is trying to acquire lock: [ 372.430531][T11487] ffff88801be8da20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9e/0x450 [ 372.440782][T11487] [ 372.440782][T11487] but task is already holding lock: [ 372.448133][T11487] ffff88802650f2c0 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 372.457890][T11487] [ 372.457890][T11487] which lock already depends on the new lock. [ 372.457890][T11487] [ 372.468274][T11487] [ 372.468274][T11487] the existing dependency chain (in reverse order) is: [ 372.477267][T11487] [ 372.477267][T11487] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 372.485874][T11487] blk_alloc_queue+0x546/0x680 [ 372.491141][T11487] __blk_mq_alloc_disk+0x197/0x390 [ 372.496759][T11487] loop_add+0x482/0xb40 [ 372.501425][T11487] loop_init+0xd9/0x170 [ 372.506091][T11487] do_one_initcall+0x250/0x8d0 [ 372.511370][T11487] do_initcall_level+0x104/0x190 [ 372.516811][T11487] do_initcalls+0x59/0xa0 [ 372.521644][T11487] kernel_init_freeable+0x2a6/0x3e0 [ 372.527345][T11487] kernel_init+0x1d/0x1d0 [ 372.532181][T11487] ret_from_fork+0x51e/0xb90 [ 372.537275][T11487] ret_from_fork_asm+0x1a/0x30 [ 372.542548][T11487] [ 372.542548][T11487] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 372.549748][T11487] fs_reclaim_acquire+0x71/0x100 [ 372.555199][T11487] kmem_cache_alloc_noprof+0x40/0x650 [ 372.561078][T11487] __kernfs_iattrs+0xdf/0x340 [ 372.566261][T11487] kernfs_iop_setattr+0xea/0x3f0 [ 372.571704][T11487] notify_change+0xc1a/0xf40 [ 372.576793][T11487] do_truncate+0x1c2/0x250 [ 372.581714][T11487] path_openat+0x2f89/0x3860 [ 372.586805][T11487] do_file_open+0x23e/0x4a0 [ 372.591811][T11487] do_sys_openat2+0x113/0x200 [ 372.596994][T11487] __x64_sys_openat+0x138/0x170 [ 372.602348][T11487] do_syscall_64+0x14d/0xf80 [ 372.607451][T11487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.613848][T11487] [ 372.613848][T11487] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 372.622340][T11487] __lock_acquire+0x15a5/0x2cf0 [ 372.627696][T11487] lock_acquire+0xf0/0x2e0 [ 372.632617][T11487] down_read+0x47/0x2e0 [ 372.637280][T11487] kernfs_iop_getattr+0x9e/0x450 [ 372.642720][T11487] vfs_getattr_nosec+0x2e1/0x430 [ 372.648164][T11487] loop_assign_backing_file+0x27a/0x4b0 [ 372.654216][T11487] lo_ioctl+0x1acb/0x1fb0 [ 372.659048][T11487] blkdev_ioctl+0x5e3/0x740 [ 372.664055][T11487] __se_sys_ioctl+0xfc/0x170 [ 372.669146][T11487] do_syscall_64+0x14d/0xf80 [ 372.674241][T11487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.680639][T11487] [ 372.680639][T11487] other info that might help us debug this: [ 372.680639][T11487] [ 372.690847][T11487] Chain exists of: [ 372.690847][T11487] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#24 [ 372.690847][T11487] [ 372.705259][T11487] Possible unsafe locking scenario: [ 372.705259][T11487] [ 372.712690][T11487] CPU0 CPU1 [ 372.718036][T11487] ---- ---- [ 372.723409][T11487] lock(&q->q_usage_counter(io)#24); [ 372.728770][T11487] lock(fs_reclaim); [ 372.735256][T11487] lock(&q->q_usage_counter(io)#24); [ 372.743132][T11487] rlock(&root->kernfs_iattr_rwsem); [ 372.748489][T11487] [ 372.748489][T11487] *** DEADLOCK *** [ 372.748489][T11487] [ 372.756617][T11487] 3 locks held by syz.4.1670/11487: [ 372.761793][T11487] #0: ffff88802679a448 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x14c7/0x1fb0 [ 372.770823][T11487] #1: ffff88802650f2c0 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 372.780990][T11487] #2: ffff88802650f2f8 (&q->q_usage_counter(queue)#8){+.+.}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 372.791339][T11487] [ 372.791339][T11487] stack backtrace: [ 372.797233][T11487] CPU: 1 UID: 0 PID: 11487 Comm: syz.4.1670 Tainted: G L syzkaller #0 PREEMPT(full) [ 372.797253][T11487] Tainted: [L]=SOFTLOCKUP [ 372.797259][T11487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 372.797275][T11487] Call Trace: [ 372.797284][T11487] [ 372.797294][T11487] dump_stack_lvl+0xe8/0x150 [ 372.797315][T11487] print_circular_bug+0x2e1/0x300 [ 372.797335][T11487] check_noncircular+0x12e/0x150 [ 372.797353][T11487] __lock_acquire+0x15a5/0x2cf0 [ 372.797374][T11487] lock_acquire+0xf0/0x2e0 [ 372.797387][T11487] ? kernfs_iop_getattr+0x9e/0x450 [ 372.797405][T11487] down_read+0x47/0x2e0 [ 372.797420][T11487] ? kernfs_iop_getattr+0x9e/0x450 [ 372.797435][T11487] kernfs_iop_getattr+0x9e/0x450 [ 372.797450][T11487] vfs_getattr_nosec+0x2e1/0x430 [ 372.797467][T11487] loop_assign_backing_file+0x27a/0x4b0 [ 372.797483][T11487] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 372.797505][T11487] lo_ioctl+0x1acb/0x1fb0 [ 372.797520][T11487] ? __pfx_lo_ioctl+0x10/0x10 [ 372.797532][T11487] ? __pfx_sched_balance_rq+0x10/0x10 [ 372.797549][T11487] ? __lock_acquire+0x6b5/0x2cf0 [ 372.797564][T11487] ? __lock_acquire+0x6b5/0x2cf0 [ 372.797579][T11487] ? __lock_acquire+0x6b5/0x2cf0 [ 372.797594][T11487] ? __lock_acquire+0x6b5/0x2cf0 [ 372.797608][T11487] ? __lock_acquire+0x6b5/0x2cf0 [ 372.797623][T11487] ? __lock_acquire+0x6b5/0x2cf0 [ 372.797637][T11487] ? __lock_acquire+0x6b5/0x2cf0 [ 372.797653][T11487] ? unwind_next_frame+0xa5/0x23c0 [ 372.797674][T11487] ? is_bpf_text_address+0x26/0x2b0 [ 372.797688][T11487] ? is_bpf_text_address+0x292/0x2b0 [ 372.797699][T11487] ? is_bpf_text_address+0x26/0x2b0 [ 372.797711][T11487] ? kernel_text_address+0xa5/0xe0 [ 372.797724][T11487] ? __kernel_text_address+0xd/0x30 [ 372.797736][T11487] ? unwind_get_return_address+0x4d/0x90 [ 372.797751][T11487] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 372.797764][T11487] ? arch_stack_walk+0xfb/0x150 [ 372.797783][T11487] ? stack_trace_save+0xa9/0x100 [ 372.797794][T11487] ? __pfx_stack_trace_save+0x10/0x10 [ 372.797805][T11487] ? kasan_save_free_info+0x46/0x50 [ 372.797822][T11487] ? stack_depot_save_flags+0x33/0x810 [ 372.797835][T11487] ? format_decode+0xd0/0xe10 [ 372.797852][T11487] ? kasan_save_track+0x4f/0x80 [ 372.797862][T11487] ? kasan_save_track+0x3e/0x80 [ 372.797872][T11487] ? kasan_save_free_info+0x46/0x50 [ 372.797887][T11487] ? __kasan_slab_free+0x5c/0x80 [ 372.797898][T11487] ? kfree+0x1c1/0x630 [ 372.797913][T11487] ? tomoyo_path_number_perm+0x501/0x630 [ 372.797930][T11487] ? security_file_ioctl+0xc3/0x2a0 [ 372.797945][T11487] ? __se_sys_ioctl+0x47/0x170 [ 372.797956][T11487] ? do_syscall_64+0x14d/0xf80 [ 372.797969][T11487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.797982][T11487] ? __asan_memset+0x22/0x50 [ 372.797998][T11487] ? blk_get_meta_cap+0x16d/0x7a0 [ 372.798013][T11487] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 372.798028][T11487] ? blkdev_common_ioctl+0x14b7/0x3250 [ 372.798045][T11487] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 372.798059][T11487] ? kasan_quarantine_put+0xbb/0x1f0 [ 372.798078][T11487] ? tomoyo_path_number_perm+0x219/0x630 [ 372.798095][T11487] ? tomoyo_path_number_perm+0x219/0x630 [ 372.798113][T11487] ? do_vfs_ioctl+0x1166/0x1530 [ 372.798125][T11487] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 372.798140][T11487] ? do_futex+0x333/0x420 [ 372.798158][T11487] ? __pfx_lo_ioctl+0x10/0x10 [ 372.798170][T11487] blkdev_ioctl+0x5e3/0x740 [ 372.798184][T11487] ? __pfx_blkdev_ioctl+0x10/0x10 [ 372.798196][T11487] ? __fget_files+0x2a/0x420 [ 372.798213][T11487] ? bpf_lsm_file_ioctl+0x9/0x20 [ 372.798227][T11487] ? __pfx_blkdev_ioctl+0x10/0x10 [ 372.798240][T11487] __se_sys_ioctl+0xfc/0x170 [ 372.798252][T11487] do_syscall_64+0x14d/0xf80 [ 372.798269][T11487] ? trace_irq_disable+0x3b/0x150 [ 372.798286][T11487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.798297][T11487] ? clear_bhb_loop+0x40/0x90 [ 372.798310][T11487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.798323][T11487] RIP: 0033:0x7fc70db9bf79 [ 372.798337][T11487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.798347][T11487] RSP: 002b:00007fc70eb42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 372.798362][T11487] RAX: ffffffffffffffda RBX: 00007fc70de15fa0 RCX: 00007fc70db9bf79 [ 372.798371][T11487] RDX: 0000000000000005 RSI: 0000000000004c06 RDI: 0000000000000004 [ 372.798379][T11487] RBP: 00007fc70dc327e0 R08: 0000000000000000 R09: 0000000000000000 [ 372.798387][T11487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.798395][T11487] R13: 00007fc70de16038 R14: 00007fc70de15fa0 R15: 00007ffc0ec19bd8 [ 372.798409][T11487] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 373.313800][ T5912] usb 4-1: device descriptor read/64, error -71 [ 373.393625][ T5823] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 373.423790][ T5912] usb usb4-port1: attempt power cycle [ 373.799203][ T8031] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.870683][ T8031] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.928623][ T5869] usb 7-1: USB disconnect, device number 3 [ 373.938085][ T8031] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.997037][ T8031] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.084030][ T8031] bridge_slave_1: left allmulticast mode [ 374.089722][ T8031] bridge_slave_1: left promiscuous mode [ 374.096692][ T8031] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.105722][ T8031] bridge_slave_0: left allmulticast mode [ 374.111351][ T8031] bridge_slave_0: left promiscuous mode [ 374.117244][ T8031] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.176206][ T8031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.203977][ T8031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.220107][ T8031] bond0 (unregistering): Released all slaves [ 374.499768][ T8031] hsr_slave_0: left promiscuous mode [ 374.513606][ T8031] hsr_slave_1: left promiscuous mode [ 374.519538][ T8031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.527123][ T8031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.538085][ T8031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.545594][ T8031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.556284][ T8031] veth1_macvtap: left promiscuous mode [ 374.561831][ T8031] veth0_macvtap: left promiscuous mode [ 374.569984][ T8031] veth1_vlan: left promiscuous mode [ 374.575563][ T8031] veth0_vlan: left promiscuous mode [ 374.699017][ T8031] team0 (unregistering): Port device team_slave_1 removed [ 374.711119][ T8031] team0 (unregistering): Port device team_slave_0 removed [ 375.000882][ T8031] IPVS: stop unused estimator thread 0... [ 375.051305][ T8031] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.106094][ T8031] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.136708][ T8031] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.191141][ T8031] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.313285][ T8031] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.386650][ T8031] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.431920][ T8031] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.480692][ T8031] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.843391][ T8031] bridge_slave_1: left allmulticast mode [ 375.849487][ T8031] bridge_slave_1: left promiscuous mode [ 375.856141][ T8031] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.866322][ T8031] bridge_slave_0: left allmulticast mode [ 375.871987][ T8031] bridge_slave_0: left promiscuous mode [ 375.878346][ T8031] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.887339][ T8031] bridge_slave_1: left allmulticast mode [ 375.892971][ T8031] bridge_slave_1: left promiscuous mode [ 375.898775][ T8031] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.907029][ T8031] bridge_slave_0: left allmulticast mode [ 375.912653][ T8031] bridge_slave_0: left promiscuous mode [ 375.919141][ T8031] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.929289][ T8031] bridge_slave_1: left allmulticast mode [ 375.935117][ T8031] bridge_slave_1: left promiscuous mode [ 375.940759][ T8031] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.039541][ T8031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.049385][ T8031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.058782][ T8031] bond0 (unregistering): Released all slaves [ 376.087354][ T8031] dvmrp6 (unregistering): left allmulticast mode [ 376.140229][ T8031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.149892][ T8031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.159353][ T8031] bond0 (unregistering): Released all slaves [ 376.267939][ T8031] smc: removing net device bond0 with user defined pnetid SYZ2 [ 376.277131][ T8031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.286935][ T8031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.296436][ T8031] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 376.305260][ T8031] bond0 (unregistering): Released all slaves [ 376.735714][ T8031] hsr_slave_0: left promiscuous mode [ 376.743036][ T8031] hsr_slave_1: left promiscuous mode [ 376.752067][ T8031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.760712][ T8031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.768663][ T8031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.776278][ T8031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.794045][ T8031] hsr_slave_0: left promiscuous mode [ 376.799896][ T8031] hsr_slave_1: left promiscuous mode [ 376.807569][ T8031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.815210][ T8031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.825446][ T8031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.833661][ T8031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.842917][ T8031] hsr_slave_0: left promiscuous mode [ 376.850918][ T8031] hsr_slave_1: left promiscuous mode [ 376.857980][ T8031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.865619][ T8031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.877707][ T8031] veth1_macvtap: left promiscuous mode [ 376.883180][ T8031] veth0_macvtap: left promiscuous mode [ 376.889012][ T8031] veth1_vlan: left promiscuous mode [ 376.894330][ T8031] veth0_vlan: left promiscuous mode [ 376.900229][ T8031] veth1_macvtap: left promiscuous mode [ 376.905816][ T8031] veth0_macvtap: left promiscuous mode [ 376.911351][ T8031] veth1_vlan: left promiscuous mode [ 376.916655][ T8031] veth0_vlan: left promiscuous mode [ 377.028833][ T8031] team0 (unregistering): Port device team_slave_1 removed [ 377.039277][ T8031] team0 (unregistering): Port device team_slave_0 removed [ 377.129891][ T8031] team0 (unregistering): Port device team_slave_1 removed [ 377.147863][ T8031] team0 (unregistering): Port device team_slave_0 removed [ 377.207186][ T8031] team0 (unregistering): Port device team_slave_1 removed [ 377.217365][ T8031] team0 (unregistering): Port device team_slave_0 removed [ 377.890816][ T8031] IPVS: stop unused estimator thread 0... [ 378.496105][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.502480][ T1299] ieee802154 phy1 wpan1: encryption failed: -22