last executing test programs: 3m23.555241472s ago: executing program 1 (id=1872): socketpair(0x1f, 0x80000, 0x92, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = memfd_create(&(0x7f0000000080)='^\x00', 0x6) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) poll(&(0x7f0000000100)=[{r0, 0x11}, {r2, 0xc000}, {r3, 0x10}, {r4, 0x8}], 0x4, 0x101) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = getpgid(0x0) fcntl$lock(r5, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x3, 0xad4e, r6}) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) r7 = open(&(0x7f0000000240)='./file0\x00', 0x80400, 0x8) mount_setattr(r4, &(0x7f0000000200)='./file0\x00', 0x1800, &(0x7f0000000280)={0x100000, 0xe4, 0x140000, {r7}}, 0x20) open_by_handle_at(r5, &(0x7f00000002c0)=@orangefs_parent={0x28, 0x2, {{"7370f2363541a6fa0df2ed7dc5736f98", 0x57ab3aad}, {"e96a394547f91402e15484cdef014626", 0x10}}}, 0x8000) setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000300)=0x1, 0x4) mknodat$null(r4, &(0x7f0000000340)='./file0\x00', 0x200, 0x103) sendto$inet(r0, &(0x7f0000000380)="98b9f305b2294e285199e609a8cf88e719a5f81f5fd9f6eb433ff7b8d31c74bd049648f57bf53bea4cc6ef79dae8bcb10bb5fa2592dca7533772c02bd5c693a499805d9b222bf7ca27f346db8bf84f29e1c90224faaf6241cfe5c840c4e2f729325c315ae921af2e07e04e997d9fc104b35233daf9ec941239a44beb990255ae5c30", 0x82, 0x4040, &(0x7f0000000440)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$bt_hci_HCI_FILTER(r7, 0x0, 0x2, &(0x7f0000000480)={0x7181, [0x3, 0x874], 0x5}, 0x10) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000004c0)={[0xfffffffffffffffa, 0x9, 0xfbe9, 0x5a3, 0x80, 0x4, 0x86, 0x1, 0x6, 0x40, 0x5cd6fe8e, 0xce65d80, 0x40d6, 0x8, 0x9, 0x5], 0x6000, 0x58000}) bind$isdn(r4, &(0x7f0000000580)={0x22, 0x5, 0xb7, 0x7, 0x2}, 0x6) r8 = syz_usb_connect(0x5, 0xbb5, &(0x7f00000005c0)={{0x12, 0x1, 0x140, 0x46, 0xf4, 0x13, 0x10, 0x2a39, 0x3fa0, 0x24e0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba3, 0x3, 0x7f, 0x3, 0xe0, 0x0, [{{0x9, 0x4, 0x0, 0xcc, 0xf, 0xff, 0x39, 0xa3, 0x12, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xdd}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xf, 0x594d, 0x10}, [@mbim_extended={0x8, 0x24, 0x1c, 0x253, 0x56, 0x6}, @country_functional={0xc, 0x24, 0x7, 0x4, 0xe6c5, [0x8, 0x6, 0x2]}, @acm={0x4, 0x24, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x3, 0x2}]}, @generic={0xa3, 0x22, "c4208cecdd95769958efd5bdc58f1c233052eebca2e6bacf6779382755fc5ddc960959d9ff710836a52afe06bb089fa8c11a2edb939d452864d5ff25ee9b9e397b9f793cec957f3bbff31e36c1a71f207366613cf7c71ca442ae638a2e5bb56f2b43610fbec5fba85e9187ed756c8edc2913656bb219e428d76abf334787f1526775797bafe1513f4b169e3a28af3df42a6eab7971ee9ea8442813809c5f91c7cb"}], [{{0x9, 0x5, 0xb, 0x2, 0x400, 0xfe, 0x2, 0xd1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x4}]}}, {{0x9, 0x5, 0x0, 0x3, 0x220, 0xf1, 0xf1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xc, 0x9}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x3, 0x6, 0x6a, [@generic={0xa7, 0x0, "49b09a0d0b89c7bc0e77d386804a0d4e79ac57dcf2e8e79623937ebdf1b70d3103c783cd89bd16c59ed1f79430ad7e2b4e6c0b8694dcd62614ed0ae0e2b5d599187a7fbbdc5569c9d0d5e99f153fb5d961a4b7d6b81dcf0333ce28e9c4d2ae1153a7ae1a7c18aca69c57644f1d4cb93ae7f9f88187489cd6fdf3f27fd48fa2f34d013a71ca8f8ed0a80dd0039cf17688dacc0fed672f48598f0441c19d9837a3c7ff910739"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x8, 0xef, 0x40, 0xc, [@generic={0xf4, 0x4, "261ee36a10767e964db9c38338c3bc2d6e9225c1bf2c0bfc66c9d1d1f23fa64bb4c067b59727648ac115f356d39766a2ec45a3c21cb5bdcbee301b3524f65d2c5bdcceedabc98cef94a5b4707868dfc57d0dbceb6d93ae7d9c4e27f7d5bc465ffc7f6e3871cc57027a892a0315df6edb482f4a9234dfe970de38c03b9aeab8e8070ff93abe9f3a2e50789a205750f50964826f8e1b08fa935530741b157bb91073c3419a12b3a77b14f057243be3960661d1a5518306c1050e81292b4dd73541a7b4d1e53bc3d039fe792d338467e2df2aabcf4f5760d7c0e6e1bc2affb3b211f8247baca869d72bdbb6da7360bcc40b9caf"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x80}]}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x0, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xfffb}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x7}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0xfc, 0x3, 0x0, [@generic={0x39, 0x11, "a36cf20f8f940968708737df9ed5125d87f354c00a817ee7f76912536a7cc940a11c02a2ba8fd3ce4623b174f77ee280bb09ad89a7fdd0"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x7, 0x7, 0xbc, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x6ee0}]}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x7, 0x40, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x2}]}}, {{0x9, 0x5, 0x9, 0x4, 0x18f, 0x8, 0xaa, 0x1c, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x3}]}}, {{0x9, 0x5, 0x7, 0x1, 0x20, 0x3, 0x10, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x81, 0xa23}]}}, {{0x9, 0x5, 0x4, 0x0, 0x408, 0x0, 0x1, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x8001}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x1, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xf9}]}}, {{0x9, 0x5, 0x3, 0x4, 0x20, 0x4, 0x4, 0x4, [@generic={0xaf, 0x21, "6caee12427e1cf68edecb5aaccf2d4718d0fc2f91e902ca7d7ecfbb599deb472203112ce5be56413932e7e227f9c6c37a5cde28f55312185cd1fef31b45aae2b22d4224d19304b70969fc3cea51c6db60af33c247bb1769b70c6f9484b5ce3c433c0f46da2ab21003a09670201b834a21f2cce7d18b7e03d8a5fce7c5a9333eb78000bf804288b87e36b3b742b0e3894ab69ac99e96e72e6386acc95bc9b0cf005edec64a4a5d3ec06c25666ee"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x8, 0x8, 0x2, [@generic={0x24, 0xe, "7a5e7eb6a6832d67bf634a66ac0cbf813482c7f18c7367bebf51c6f3acd5c78b6cd7"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x5, 0x7, 0xd7, [@generic={0xe3, 0xb, "043bedf2eed1bd4d0ef1e7ee2b81bd74973bc74a09efe757cfc4c76af3ea26f86acf79a22304263bdef619872d99ab847944345a7c7ceadb0ef5b7bac4f54218739b0dfbf3937f616ff5ac93c74efc17240f3463a1f8f51d93d14587aabb0112d05e94545dd5515d403886d805192774c2cf25b95b57651fe90766c28b62c4ceec9ca858aed44e4b122bd5aeceb3872b88bef44adab60da7c2999274669a8adb504e17a34e8f131ac2e48c7721ae4736440c1640ac7fd09be42269d7eebcfff29e0db8ca052c5bd985cd136cbd9c9ce1155791390f5e71b00f8e85483480d5bb5f"}, @generic={0x8a, 0x9, "4006c075d76e331288b4159558c839ab72dff6970467d71c5da02d3e0f04daf7fc3c31ec5a993206bfcfccb789a17dd85700f3a68891f31e605efd0d9143c8026a2d49f1e2ac34b6cfe9024cc9568764b2120872c8181cf4b1469d5367bc7b8bc861659ce91d23e7dc88f9b09e607135e182bb56c16c8d44cbe6205f5692d4d205f1769a7816e777"}]}}]}}, {{0x9, 0x4, 0x37, 0xf4, 0x3, 0xa8, 0x2c, 0x2d, 0x5, [@hid_hid={0x9, 0x21, 0x1742, 0x5, 0x1, {0x22, 0x53b}}], [{{0x9, 0x5, 0xb, 0x0, 0x400, 0x5, 0x5, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x9}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0xd, 0x88, 0x8, [@generic={0xcc, 0x1, "d355567bf2d86f8700f1690a3578c34822b15b1ff27f1aef50b2702751aae359cf35dafd96f8f7a4836e0b50b7ce9b413a673dcbeacd2823c9602d6b44e4066ab6ca57d2aa9ab146215fd5ce76cb6eeb6e631dd0ae3c133504c80c16ef1047ad61999a70e461c07081b6f08615c7f9bc33e4e3ff0bee6619e79dc9a219c192691ab584cfee3027f0f08f275827dc9bdee960645cfd17e80b5348d787cfb33a40963bd00f770e6ae70d9491a4e6f65daed105d63c09d26d1389ce3c3af2cc7448c36b359225cda7b5adc4"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x400, 0x1, 0xe2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xff, 0xd93}]}}]}}, {{0x9, 0x4, 0xb2, 0x64, 0x9, 0xff, 0x0, 0x0, 0xd, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "a4537255d5"}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xb4, 0xa, 0xa}, [@country_functional={0x8, 0x24, 0x7, 0x1, 0x0, [0x9]}]}], [{{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x9e, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x8}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x80, 0x4, 0x17, [@generic={0x11, 0x24, "f8e726450f139c2c46a9ef24515ef1"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x40, 0x5a, 0xd, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xe, 0x605d}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5}]}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0x4, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x8}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0xff, 0x1, 0x8, [@generic={0xdb, 0x10, "b07b6364debc36b82ef9612e8c34d6b6eb641a49488f9d1fe4569091271fb9c58c78b307db24458bca5edb596a906332a157c16e2159e75eb1e2b99af7cfe33b04284cfdeb34d84cb5c2851d1d6fa9ad9a8eec77b2ab70319b915dc6f4883d5b351e092ed3a7a9ad0c10a76a60a6084f779c1b71237e305a49ef185db829647274854375e9f3ea9ba683a29eee3a2bf7641f4c34fa5a1fe18fc9c89d46b321fcb9c6b5c5cd4bb8a774ebaf46b6598a016939be5953a2e9da8da8d6a11ec75885b1b7c9b7ee54ddbaafe0a5df611c5c3567fb8d0fce68648df3"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x1, 0x7, 0x8, [@generic={0xaa, 0x7, "22dc57116db6c7b647bf49e51591d7fe2dde4022c7f9ed5d9f7b6788d57e2a8c595905f804bda141d4c338c9e666776f59e4e806eab3013381263ccc4384219c8653876658430e072e9215d1ee9a38f5e496ae7d34de4de8ded674c7b8016a50d84e208e58637670d44112c82ccd49ee64645aa05d3e847470916fd7b55f87f6a8424a7b39f144642846bbc31fe0c6c248d96a06c083ded60286115af0e9c70743186de689410e25"}, @generic={0xf3, 0x23, "50f4a1ecfbd5e0e7e5ee1edbd498144a1055e1a009a5cbeccc0584471767c799c3079437a2ec052b722c27deef7b312754a40017fece4c9b2f3ea89d765537553eee6be1e93ae2f11221a910038ecfd2ecd28850631fb0f62ab5c1d2bbf2e88e7b1f1ffca2e03ae4711ff6f553ada0c05ac3984a2196a017788556f69d5422c376d902c4a6fceef9877f9d2461b7cb13c5ab07dfbed91b9f8e8604aaeccb1fcb77e0b288e0ee1d798b663716e5805562a660fa125bf1150616d837a254edd8213c3c686ad7e80096552bd2a3ef4b870e7adc18617c82830f3ece6dc84145c3b998ff04b99c93d9a2150a0056bbefc401c6"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x20, 0x6, 0xfa, 0x6, [@generic={0xb2, 0x24, "a27e8ef4f596883c7ba163c2ad7152c388d52535bb1ee2ff41cc3a0d494a0a2195d6a0d2f6cec5cd2aa6288b74f1351259ee2d2bf90646e32a77340f04a431ae35f28a66fed1f0c75d19d13c2590e1a405098a83d38c62f0834a6e4032e9d6ebf6bdf59451c5d6577009d5275551a7198afa2d0adb9bd209c09c0ea4ca0cbecf339a6ec5c73736836d52d5a0703c428a6464ce2c54036d4a038241a8cff1203ea7a46438d54b4ca8bc7f8340e783c10c"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x9, 0x3, 0x8b, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x6}, @generic={0xbe, 0x3, "9a07342bdceef0f4e5a99874ee5a4640dd3b01008cc431e2b16bc3c3605e480fa58781d25c8cd7c5c4b45663105b0d4416ee1f64cc4be8c3714aa60d29aa4407ecfe6cf17f3dc3c5031414774f0a8e006bd927e351beaf9431ea41f95a7a77207ef1306d81535879fdc829b0f19f068f1dd87884daa688dca729271dc69a8770f2d690081ba3cab81c0e75d56a8bc2f0223021bb2fb45188985d7a276d507665262a6cb37911284016dafd0facf6f8b224ad8f6fd83bc5533f3fa729"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x20, 0xe0, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0xd7f}, @generic={0x20, 0x24, "448a3a25887c6c2e5a29bfa8464c1a24256e6b42c16f46568b0a92874a4c"}]}}]}}]}}]}}, &(0x7f0000001280)={0xa, &(0x7f0000001180)={0xa, 0x6, 0x200, 0x4, 0x8, 0x2, 0x20, 0x8}, 0x64, &(0x7f00000011c0)={0x5, 0xf, 0x64, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x5, 0x3, 0x8c98, 0xf000, 0x1ff, [0x3f, 0xc0, 0xff0000]}, @ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x9, 0xff00, 0xed31, [0x18, 0xffff3f]}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "be6f21674905220f021ea42f98804a2f"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x2e, 0x4, 0xc, 0x4, 0x40}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "c8727346c45f2c3b7e30dd9954af6f1e"}]}, 0x1, [{0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x429}}]}) syz_usb_control_io$hid(r8, &(0x7f0000001440)={0x24, &(0x7f00000012c0)={0x0, 0x22, 0x7, {0x7, 0x3, "09c471d825"}}, &(0x7f0000001300)={0x0, 0x3, 0x81, @string={0x81, 0x3, "2f12315f3f74942682de262cf82af644acd0adcc971ca4270254b1e011e11c4dc3ee5ec06a49828df658733c769a5af5da9374e6780043b4910f5b021911ecaedfe8ab07a2a7c96e8c8d72b8d878af309111e2f21d2de6d4a02856c3bea4c652d639689dd7d04248ea48c3b50f8608e87b40084c992bd292d6984256e67eb3"}}, &(0x7f00000013c0)={0x0, 0x22, 0xb, {[@main=@item_4={0x3, 0x0, 0xa, "ef91dd97"}, @local=@item_012={0x0, 0x2, 0x7}, @main=@item_4={0x3, 0x0, 0x8, "bed5d850"}]}}, &(0x7f0000001400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x800, 0x7f, 0x1, {0x22, 0x3a7}}}}, &(0x7f00000016c0)={0x2c, &(0x7f0000001480)={0x0, 0x5, 0xe0, "32ac40f2634ca0e771a909a11c47fb37b9036b212073f83bfd7d562e12ccc2e4164d0b28d820c5f4e0b9e79fcd1d49d2f755de96fe934a70a6ca7e859e3bf1c6bee183c8d239669c0aa84db0bd56f8c453ea71a84f6434872df4ac982def2f30d6601e4bad30c9a3a9eba0569dbe923fc781d23b11636f614d1936a6b2314181e9ca59b78510eaeb41ce739ae59e38fc2095fe0067db5435a2f0fb4140a0c4578284cc085a91c31c9d2912bbabe0e40ab5f5ef6cc0d404d19998b1c38a0fd58726f7f938a116815f93dd4f5ccc3304291d925d43a79fb9187a227233fbb8f338"}, &(0x7f0000001580)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000015c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001600)={0x20, 0x1, 0x5d, "8b50180e0cce3d339389d792b144f02c5a3bac399ecf9c6d4c91e868b4529ef8a8efef61fe1a5d07214b6530a75c88d861370ec807ef5999ff2770c1400149039500b11b8d0a7271af6d646bb89575f63829b9e6465df3f94c025b23b8"}, &(0x7f0000001680)={0x20, 0x3, 0x1, 0xf2}}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000001700), 0x4) connect$unix(r1, &(0x7f0000001740)=@abs={0x0, 0x0, 0x4e23}, 0x6e) bind$netlink(r7, &(0x7f00000017c0)={0x10, 0x0, 0x8, 0x8}, 0xc) syz_usb_control_io$cdc_ecm(r8, &(0x7f0000001880)={0x14, &(0x7f0000001800)={0x20, 0x6, 0x32, {0x32, 0xf, "e579dc4045d02c1e1277bc87a223e027be46044a6ed9e6f17f78815cca2cb69ff6b2856bf07a8e308f25ee314eea60ea"}}, &(0x7f0000001840)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001a40)={0x1c, &(0x7f00000018c0)={0x20, 0xd, 0xf6, "883580ad82e47bcee47dee6ca0dbf919925de2eea64f2424b247a4a8f2695a98c6309c53e68e6079044ae8931015ea6a9590e79fb77a617c24081e230680ac7e3f706b97fbb90300eac71bf9c542548eb5fea0ba7b5e8eab31fd75078ab4a513ebe60a19614d607fc0a5b48f1e81578ab6fbf19b44e0e1312c1f566a0bf1d12a25ec9684247b03a01309bf5e0e9ab823b47aed1709ccd49a7168c004ba2cb22a9867f1e2cf578a64afee941802caa4f6b865b72b347ab94b1a458a7d9e5c775f400ec896ca38131501e9652ffe0c4932dcbfa804c489700e73d509b3ce59463562a8a8918115aedd3b330bb61f348d0caea0694f6a0a"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001a00)={0x0, 0x8, 0x1, 0x5}}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000005, 0x2010, r1, 0xfa382000) syz_usb_control_io$rtl8150(r8, &(0x7f0000001b40)={0x14, &(0x7f0000001a80)={0x40, 0x23, 0x66, {0x66, 0x4, "b32244e25e1a1a949e2a90570238a0b602aa8c5dba167906da27eea745aadfdece0cad88b9912134088f274b7ae0ff4f9720a8e9fdbaac11a80e69e1bd79ff7aa65cefb5a2e7027d9150fec693c9326133b49d737e1403c784cb0060589d4d2366957b21"}}, &(0x7f0000001b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x827}}}, &(0x7f0000001cc0)={0x2c, &(0x7f0000001b80)={0x0, 0x14, 0x2a, "670a124d5f1edc6d3c13b634c1c5bf67f87baf5f06cd4aaaf15a11222673101f5709caed1b5fdbadd2e7"}, &(0x7f0000001bc0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001c00)={0x0, 0x8, 0x1}, &(0x7f0000001c40)={0xc0, 0x5, 0x6, "d166e102889b"}, &(0x7f0000001c80)={0x40, 0x5, 0x6, "b0371e252633"}}) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000001d00)="25508b640ca369aaa09b4acb1e4c50c0954765de1085958dfbada25dfdfa6488ca6f9c", 0x23) mount$bind(&(0x7f0000001d40)='./file0\x00', &(0x7f0000001d80)='./file0\x00', &(0x7f0000001dc0), 0x10c0020, 0x0) write$cgroup_subtree(r4, &(0x7f0000001e00)={[{0x2d, 'blkio'}, {0x2d, 'cpu'}, {0x2b, 'cpuset'}, {0x2b, 'freezer'}]}, 0x1d) 3m22.703400778s ago: executing program 1 (id=1876): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x48002, 0x0) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x10a, 0x0, 0x7ff}]}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{0x0, 0x114}], 0x1}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3m22.694459468s ago: executing program 1 (id=1877): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r5 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f00000002c0)={'a', ' *:* ', 'rwm\x00'}, 0xa) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYRESOCT=r2, @ANYRES16=r4, @ANYBLOB="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", @ANYRES16, @ANYBLOB="081400060076657468115f744dc8acc401875bfa000400cc0048000500090000001418040073"], 0x58}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r8, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) clock_adjtime(0xa00, &(0x7f0000000000)={0x7884, 0x55a0, 0x1, 0x4, 0x9, 0x8000000000000000, 0xffff, 0x7, 0x2, 0x9, 0xe079, 0x7, 0xfffd, 0x4, 0x7ff, 0xa085, 0x8001, 0x81, 0x800, 0x8, 0xc2, 0x203, 0x9, 0x9, 0x8}) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="690000001000010000000000000000000500000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010012ad00000800034000000001140000001100010000000000000000000300000a05686a2fd39f7d1f1b2c78634b2f9e5ecc7b74f6dbcd260fc62273d9754100"/142], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r10, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x300, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100001f000100ec214bc60800034000000001"], 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 3m22.59015964s ago: executing program 1 (id=1878): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r2 = open$dir(&(0x7f00000001c0)='./file0\x00', 0xc0000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', r2, &(0x7f0000000240)='./file0\x00', 0x100) bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000005c0)={{0xdddd2000, 0xdddd1000, 0xd, 0xf7, 0x6, 0x5, 0x1, 0xb, 0x0, 0xf8, 0xb, 0x29}, {0xffff1000, 0x0, 0xe, 0x0, 0x3, 0x2, 0x3, 0x1, 0xa, 0x70, 0xb, 0x1}, {0xeeee8000, 0xa002, 0x19, 0x8, 0x29, 0x6, 0xf5, 0x7, 0xf4, 0x6, 0x4, 0xc8}, {0x4, 0xdddd1000, 0xf, 0xc, 0x1, 0x0, 0x3, 0x9, 0x9, 0x1, 0x3, 0x6}, {0xeeee0000, 0xeeee0000, 0x0, 0x5b, 0x8, 0x4, 0xe, 0x2, 0x8, 0x6, 0x2, 0x14}, {0x4, 0xf000, 0x10, 0x0, 0xfc, 0x3, 0xf8, 0x81, 0x1, 0x8, 0x0, 0x81}, {0x166672000, 0x8080000, 0x0, 0x5, 0x8, 0xfd, 0x1, 0xee, 0x9, 0xa, 0x80, 0x3}, {0xeeee8000, 0x6000, 0xc, 0x4, 0x5, 0x7, 0x2f, 0x0, 0x4, 0xd, 0x9, 0x3}, {0xffff1000}, {0xeeeeb000, 0x1}, 0x2, 0x0, 0x6000, 0x400, 0x9, 0x9801, 0x1000, [0x9, 0x8001, 0x1000, 0xd378]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) (async) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) open$dir(&(0x7f00000001c0)='./file0\x00', 0xc0000, 0x0) (async) move_mount(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', r2, &(0x7f0000000240)='./file0\x00', 0x100) (async) bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000005c0)={{0xdddd2000, 0xdddd1000, 0xd, 0xf7, 0x6, 0x5, 0x1, 0xb, 0x0, 0xf8, 0xb, 0x29}, {0xffff1000, 0x0, 0xe, 0x0, 0x3, 0x2, 0x3, 0x1, 0xa, 0x70, 0xb, 0x1}, {0xeeee8000, 0xa002, 0x19, 0x8, 0x29, 0x6, 0xf5, 0x7, 0xf4, 0x6, 0x4, 0xc8}, {0x4, 0xdddd1000, 0xf, 0xc, 0x1, 0x0, 0x3, 0x9, 0x9, 0x1, 0x3, 0x6}, {0xeeee0000, 0xeeee0000, 0x0, 0x5b, 0x8, 0x4, 0xe, 0x2, 0x8, 0x6, 0x2, 0x14}, {0x4, 0xf000, 0x10, 0x0, 0xfc, 0x3, 0xf8, 0x81, 0x1, 0x8, 0x0, 0x81}, {0x166672000, 0x8080000, 0x0, 0x5, 0x8, 0xfd, 0x1, 0xee, 0x9, 0xa, 0x80, 0x3}, {0xeeee8000, 0x6000, 0xc, 0x4, 0x5, 0x7, 0x2f, 0x0, 0x4, 0xd, 0x9, 0x3}, {0xffff1000}, {0xeeeeb000, 0x1}, 0x2, 0x0, 0x6000, 0x400, 0x9, 0x9801, 0x1000, [0x9, 0x8001, 0x1000, 0xd378]}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) (async) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) 3m22.375316138s ago: executing program 1 (id=1879): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x118, 0x2c, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x10c4, 0xea90, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x81, 0x10, 0x9, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x8, 0xcb, 0x1, {0x22, 0x332}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xe9, 0x9, 0xe}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xff, 0x8, 0x9}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x8, 0x6, 0x3, 0x20, 0x80}, 0x21, &(0x7f0000000140)={0x5, 0xf, 0x21, 0x1, [@ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x552f, 0xf00f, 0x0, [0xff00f0, 0xc0, 0xf, 0xc030]}]}, 0x1, [{0xe1, &(0x7f0000000380)=ANY=[@ANYBLOB="e103b2b8cd2e7da13f43e4692a583b9b77a36bfb39ad510883b2cf3a59ce4f9ee146ec6a675cfaf41c3d0985b6626a89b30675bad864252fed0449c2ab65c9a656ab04c6d64455e110fb7524299f4ebb7c1f37a6abe202fce8a255fce51fd7aeee768f77c6c2a0e12d2ddcf30641681d9acd5d335dea1e681e83fd89c3a7393fbb6346113ef032d29a3db435ceb6e9d8e40ecd22510fd5897632651ac71f00e2fdc91f5684abe5b005e3a75092ab3dac9d9daa9227639baf0e37cd561766dbe0fa4760b662a50ae4f8e3377f87502148e9e8bf9284c83312bc4319000000000000"]}]}) syz_usb_control_io(r2, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x5, {0x5, 0xf, "00f400"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3m21.571246927s ago: executing program 1 (id=1886): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000600)=@x86={0x6, 0x0, 0x8, 0x0, 0x4, 0x8, 0x6, 0xb, 0x83, 0xf, 0x5, 0x9, 0x0, 0x101, 0x29, 0x0, 0x0, 0x0, 0x0, '\x00', 0xff, 0xd}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000028000000060a010400000000000000000100000008000b40000000f50900010073797a3000000000140000001100010000000000000000000700000a23c732aa7163aba50184fba81f1d254c"], 0x9c}}, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000040)={0xa000005, 0x6, &(0x7f0000001180), 0x80001, 0x8}) r5 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@cpuid={0x64, 0x18, {0xfffffff9, 0x8}}], 0x18}) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{0x0, 0x0, 0x3, 0x6, 0x9, 0x1, 0xb}, {0x6, 0x0, 0x3, 0x5, 0x20b, 0x3, 0x2}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @null}, [@bcast, @rose, @bcast, @netrom, @netrom, @default, @bcast, @default]}, &(0x7f0000000080)=0x48, 0x80800) connect$netrom(r9, &(0x7f00000002c0)={{0x3, @bcast, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @bcast, @null, @null]}, 0x48) 3m21.167881945s ago: executing program 32 (id=1886): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000600)=@x86={0x6, 0x0, 0x8, 0x0, 0x4, 0x8, 0x6, 0xb, 0x83, 0xf, 0x5, 0x9, 0x0, 0x101, 0x29, 0x0, 0x0, 0x0, 0x0, '\x00', 0xff, 0xd}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000028000000060a010400000000000000000100000008000b40000000f50900010073797a3000000000140000001100010000000000000000000700000a23c732aa7163aba50184fba81f1d254c"], 0x9c}}, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000040)={0xa000005, 0x6, &(0x7f0000001180), 0x80001, 0x8}) r5 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@cpuid={0x64, 0x18, {0xfffffff9, 0x8}}], 0x18}) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{0x0, 0x0, 0x3, 0x6, 0x9, 0x1, 0xb}, {0x6, 0x0, 0x3, 0x5, 0x20b, 0x3, 0x2}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @null}, [@bcast, @rose, @bcast, @netrom, @netrom, @default, @bcast, @default]}, &(0x7f0000000080)=0x48, 0x80800) connect$netrom(r9, &(0x7f00000002c0)={{0x3, @bcast, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @bcast, @null, @null]}, 0x48) 2m37.746042156s ago: executing program 0 (id=2100): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) (async) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) name_to_handle_at(r0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@ceph_nfs_confh={0x10, 0x2, {0x3ff, 0xffffffff}}, &(0x7f00000004c0), 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2c}, 0x78, r3}) (async) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8916, &(0x7f0000000000)) ioctl(r4, 0x8936, &(0x7f0000000000)) (async) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) (async) r6 = dup2(r0, r0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0xfffffffe, 0x8}) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xcc}}, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2ed10779}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x121af961}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r9, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x1d8, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x48, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b2d6678}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25eb5ede}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67642198}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2df23f7c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x365c7e35}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x124, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c5dcda1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd83a7b2}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56450e3f}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8e0fc89}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ca9dd08}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f21ebe6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf005a2c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c782732}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5de0d551}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9154b65}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x109607a4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x39a8b6ae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37e956f5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x784e1d21}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x16}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x644c7ca8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d7dfb5f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a7790ee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x566dcb56}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x800c}, 0x20000000) 2m37.706698121s ago: executing program 0 (id=2101): fchdir(0xffffffffffffffff) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x149a82, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x1c8, 0x12) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) syz_usb_connect(0x5, 0xca5, &(0x7f0000001800)=ANY=[@ANYBLOB="12011000efdc9b401097107837b3010203010902930c03040740010904e7"], 0x0) 2m36.427029619s ago: executing program 0 (id=2111): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/warn_count', 0x0, 0x0) read$FUSE(r0, &(0x7f0000006680)={0x2020}, 0x2020) syz_usb_connect(0x5, 0x3d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0) 2m33.390917761s ago: executing program 0 (id=2134): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5, 0x4, 0xaa, 0x80000001}, {0xe7, 0x7, 0x9, 0x200000}, {0x7, 0x0, 0x7, 0x3}]}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, &(0x7f0000000780)={0x14, &(0x7f00000005c0)={0x0, 0x23, 0x2, {0x2, 0x8}}, 0x0}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000940)='./file1\x00', 0x0, 0x1a) 2m32.694876359s ago: executing program 2 (id=2136): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000003a00010020000000000000000a000000140001"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40010) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000012c35b400304106098c60e0000010902120001000000000904"], 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x104c0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000003a00010020000000000000000a000000140001"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40010) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000012c35b400304106098c60e0000010902120001000000000904"], 0x0) (async) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x104c0, 0x0) (async) 2m32.055565204s ago: executing program 2 (id=2138): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xfffffd20, @remote, 0x3}, @in6={0xa, 0x4e23, 0x2, @remote, 0x9}], 0x38) (async, rerun: 32) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x9, @local, 0x7}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001740)='p', 0x1}], 0x1}}], 0x1, 0x5dc) (rerun: 32) 2m32.032448117s ago: executing program 2 (id=2139): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x4) (async, rerun: 64) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc211, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1000, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) (rerun: 64) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "31f078aa"}]}}, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f00000000c0)={0x40, 0xd, 0xd8, {0xd8, 0xb, "7194a054ecb25a9b6b991bcd62ad1034d3ebf77dbfe10511cccaa98f149de0fb8c6b94efd0adf85e3b3f4305860d267aaa007994a72bb1c545c778c55597173aab60bfae4d2e799e20d1a32a64a95d6eca14d33832abf4c2869e1dccca3718dfdd7078f08de939418c5ca1e078f398d2a7a815e208b69d2c4822d2c8ad29c2290f635ef408087357605c8f9ef8cc1118d6fb7f21d04e784a8aaee6c294308fc7e61575120d8cc67b28b3e187cf03378682c0fe7f155fa8f908eecda5da01131851c3119e0df6d8895e1bc3f1d248130b5363c479016a"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x412}}, &(0x7f00000001c0)={0x0, 0xf, 0x10d, {0x5, 0xf, 0x10d, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0x0, 0xff}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x8, 0x2, 0x100}, @ssp_cap={0x1c, 0x10, 0xa, 0xfe, 0x4, 0x2, 0xff00, 0x6, [0x3f00, 0xff3f0f, 0x3f00, 0x90]}, @generic={0xab, 0x10, 0x1, "8ae947d57bfa13f7187640116405ecf36e73bba2f3ccd35a86518e71497756467c17e47dc334f113d0c6a1dee9586c61e5f2a37281eaf25648b3fd2bce0104e162ed2441e05a86e3f38015bf1e112dd264e0b38707c89f3c3ac56c2a4fbe6e56e29be93c2217ff98ef079e243118fadf5819dab91184c54150ff2e7e4d171a0898f33719886694a96fa615d29b4e7444e060cd6799c6cd4e2c77c94daeafbc4abb57b90a52859da8"}, @generic={0x26, 0x10, 0xb, "c408c89d213f6ce36fec8423258fa6e6a40e174e647332c86badb581f8ec55d08713ef"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xd4d5ce5ec2a8324b, 0xd3, 0x6, 0x7}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x1, 0xe0, 0x5, "00a419ae", "caad349f"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x6, 0x9, 0x9, 0x0, 0x6}}}, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x0, 0x15, 0xc7, "f09844084e01cacfb00776abb395e719ce521af899381dc13f5e9d326e44c0247fddb69f9705c5a50b89c86a0f7f3c6882e83ef2fce83080f1ff48302b1f73f050642dc329e50cf82e1459dae2d33e8cdaae1541e148aacf7e09ac2c95f25b25975af6596b52accb6320cce6af267647356596f389b1d0630d1bcaa8607c7632120944aaec62954f186c8c1722a93a918d81b580c4f2f7eac48a246072754646dd86e42054b51ae012df034477bcb670de7b9d49c898f19212c6804c6f62a6b215a450da6e3beb"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x1e0, 0x80}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0xb, 0x2, "5cd3"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x40}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000700)={0x40, 0x17, 0x6}, &(0x7f0000000740)={0x40, 0x19, 0x2, "471a"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x9f}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x8}}) (async) ioctl$KDGKBSENT(r0, 0x4b48, 0x0) 2m30.259597028s ago: executing program 0 (id=2150): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000001740)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x1, 0xc8, 0x80}}}, 0x7) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, 0x0, 0x80) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c000280080003400000000005000200890000000800014000e90009080006400000000208000440000000170900010073797a30000000000900020073797a32"], 0x94}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x1, 0x7, 0x8, 0x4}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000700)={0xc8, 0x1, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x70, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x31}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffffc}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}]}, @CTA_MARK_MASK={0x8}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40}, 0x84000) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x20, r7, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) readv(r5, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/69, 0x45}, {&(0x7f00000003c0)=""/168, 0xa8}, {&(0x7f0000000480)=""/192, 0xc0}, {&(0x7f0000000540)=""/140, 0x8c}, {&(0x7f0000000600)=""/100, 0x64}], 0x5) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x8000) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='hpfs\x00', 0x800, 0x0) 2m30.171881411s ago: executing program 0 (id=2151): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0x5) syz_usb_connect(0x5, 0x117, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) 2m28.951725326s ago: executing program 2 (id=2155): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000280)={0x2020}, 0x2020) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bb0002010650000904000001020d00000524060001052400a9b30d240f01020000000300ff000606241a0c001407240a050905580c241b04000200a90c090003042402eb032402"], 0x0) (async) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 2m28.311149993s ago: executing program 2 (id=2156): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000000)=0xffffffff, 0x4) (async) sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000080)="1e", 0x1}], 0x1}, 0x4000001) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r5, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) (async) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2) (async) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) statx(r0, &(0x7f0000000040)='./file0\x00', 0x100, 0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) (async) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1600) (async) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) read$FUSE(r0, &(0x7f0000000400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000300)={0xa0, 0xffffffffffffffda, r9, {{0x1, 0x3, 0x7fff, 0x9, 0xa0b, 0x83dd, {0x2, 0x0, 0x3, 0x9, 0xff9a, 0x7, 0x10000, 0x7, 0x6e8, 0x4000, 0x27, r6, r7, 0x10, 0x4}}, {0x0, 0x2}}}, 0xa0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x8001, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20c0062, &(0x7f0000000100)={[{@uid={'uid', 0x3d, r6}}]}) 2m28.006172132s ago: executing program 2 (id=2157): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="020100020200000000003503000000c5cf1c386a000000000000"], 0x10}, 0x1, 0x7}, 0x0) 2m27.871187149s ago: executing program 33 (id=2157): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="020100020200000000003503000000c5cf1c386a000000000000"], 0x10}, 0x1, 0x7}, 0x0) 2m14.597141921s ago: executing program 34 (id=2151): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0x5) syz_usb_connect(0x5, 0x117, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) 42.652142052s ago: executing program 5 (id=2670): sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r3 = fcntl$getown(r0, 0x9) migrate_pages(r3, 0x7, &(0x7f0000000000)=0xffffffffffffdb01, &(0x7f0000000140)=0xffffffffffff8000) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r2, 0x1, 0x4, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0xfffffffffffffe20, 0x4, {{0x14, 0x1, @in={0x2, 0x3, @multicast1}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x28, r2, 0x100, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 42.630932539s ago: executing program 5 (id=2671): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000010c0)={0xb, {"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", 0x1000}}, 0x1006) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@empty, 0xdcb, 0x2, 0x0, 0x3, 0x7ff, 0x4}, &(0x7f0000000140)=0x20) (async) r3 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000480)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r1], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) (rerun: 32) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x22, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c"}, {0x7fff, 0x10, 0x0, 0x0}], 0x2}) (async, rerun: 32) r5 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f0000000280)=@ethtool_perm_addr}) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x4, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x1}) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async, rerun: 64) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) (async, rerun: 64) read$FUSE(r1, &(0x7f0000002100)={0x2020}, 0x2020) (async) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000400)='veno', 0x4) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async) r9 = accept(r2, &(0x7f0000000200)=@caif=@dbg, &(0x7f0000000040)=0x80) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000a40)=ANY=[@ANYBLOB="34030000b9590e773548d8a45dae97065464d9450375064a4491f8e202650a53a8c10dcf4db02e4cbf0f79bd5f5102", @ANYRES16=r10, @ANYBLOB="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"], 0x334}, 0x1, 0x0, 0x0, 0x8041}, 0x4000000) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 39.531457119s ago: executing program 5 (id=2681): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x6, 0x1, 0xe011, 0x9, 0x10, 0xa7, 0x6f9, 0x0, 0xa}, 0x0) wait4(r0, &(0x7f0000000080), 0x8, &(0x7f00000000c0)) pselect6(0x40, &(0x7f0000000180)={0x0, 0x8, 0x6, 0x80, 0x4, 0x7a3, 0x5, 0x6}, &(0x7f00000001c0)={0x7, 0xff, 0x7fffffffffffffff, 0x4, 0x3, 0x7, 0x0, 0xfffffffffffffffe}, &(0x7f0000000200)={0xfffffffffffffff9, 0x7fffffff, 0x0, 0x0, 0x7, 0x1ff, 0x7}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280)={[0xffffffffffffff31]}, 0x8}) wait4(r0, &(0x7f0000000300), 0x2, &(0x7f0000000340)) io_setup(0x5, &(0x7f0000000400)=0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) io_pgetevents(r1, 0x3, 0x2, &(0x7f0000000440)=[{}, {}], &(0x7f00000004c0)={r2, r3+10000000}, &(0x7f0000000540)={&(0x7f0000000500), 0x8}) timer_create(0x6, &(0x7f0000000580)={0x0, 0x33, 0x2, @tid=r0}, &(0x7f00000005c0)=0x0) timer_settime(r4, 0x0, &(0x7f0000000600)={{}, {0x77359400}}, &(0x7f0000000640)) r5 = syz_open_procfs(r0, &(0x7f0000000680)='attr/exec\x00') timer_delete(r4) io_destroy(r1) sendmmsg$alg(r5, &(0x7f0000000f40)=[{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000006c0)="07477c62532f75a6b808b5940d3ee0cf44d1cb6c1ba46b2bc11550e81f26d8ef0ede7a70410d186f0a13580d332f340cc4180457b34a7c449083b467c5bc333aa0586787958878e809c756b93982990a577637eed16b39499019d3c594db297b7509dcfee4e85346d00001fd85ee2e7588606fb23ca1b9a29e58fbd7471714c62509b9f134f591672ae4062f31181acf65ea95417c52a41eaa40d70fbf1bcb76a2c24601d0d5a347f279bb23a929297aca58e70605c748afc158", 0xba}, {&(0x7f0000000780)="4d83c4809884d3a4559962212e18237ef06842ac94d4adea5ee6f6430e48de9cca2463089d17c4950a68426e114404", 0x2f}, {&(0x7f00000007c0)="ff4410bc9eb805c3909efcaee2fe628970bfbd034f804291bab8d9cf2a07958458a1769140cbad1223edcc6309d88776df426f5031db90d55dc4ac2dc3d9b8894c562863988c4f3462ee66869fadb6a0c639ce69d02e7437c9ed1e54451b61f3c306d600fa2c88b68aec34aa50ae84358b3c9debe325a50e48a7bb7c13150a09ce5a", 0x82}, {&(0x7f0000000880)="a54850435887bfd2b2c20b541f0815eb4e9fdbaed2798f2c69c0312f30efac7e019c5d4fa3b6e211b5e2d6d745b1d05ab794cbaabc8dd3601b39cc2ae664cdb15365e4c73306d96877ac807feaed6e3ed29f8211614b113a526b149e935e1b8464336b533d37de2be2554cea728be8c8a69839d81dc5281db9e7", 0x7a}, {&(0x7f0000000900)="8cd71164dce976fa0b3944c47a95a70f1d5e3a371c61695e7eb47060cad8bbb4da1acdd1ca683ee1d49950c385492bbf0cb2df887fe5ba87df2855dca5f0cb7e8aacafd1c3c2f2af90dd39e1247ece85ca2e24efe49161f5e18bff11f6e49f7a681006e1411a95022607afbe991cfb0a83385429a12f6f92a2c8b78e8e53795c0809078890d1cf5e", 0x88}, {&(0x7f00000009c0)="3aedf918add5d88687beb75b57b094f202e7cecf6d235fc836cbe46b3287e054e99cfbd2879877420679846717fa701c944fed2d4e7c9fa1c6f1dd5cc48f52673c44b44134c263b299a6abb4c735045f56a62208df5a9faae08b4121695c22595267323aa84d505079f59b953743671044fc25b1d508cc651a4ab6e418f4d5e839845ddbf1ce8ea8e70823dbefb62ee26eedf55ffff624630280cc22", 0x9c}], 0x6, &(0x7f0000000b00)=[@assoc={0x18, 0x117, 0x4, 0x3}, @iv={0xc8, 0x117, 0x2, 0xae, "bf226a2d896cfaf818412cc8f5c093b99d3e6e7628c9d0bdc41f0009f869964e41ba39063104f495d5646323c3de4268e62ab275305ea3c38a619a66a35c7db8914873fbd26fd1500f4542f1bd719cc304023cc51d3bf6aca13f056d95e9ad39e4975dee957c8bbb7c54c33a5041116d65d5bb21a6c1dd5041a9a2ad089ed7f38e3c6e94d28a86cdfcb6dd6001a88892a3cbbd04719bc14a1ea0c9da2aca3a60c547d43a841740a3687245130eaa"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7ff}, @iv={0x58, 0x117, 0x2, 0x41, "10f445ee4abb3a149af8898c1a8496622954cb51edd7443e4c1a551df31bd46a63a56284f9e5f57271ec55f12205af4440be80e10dcbd057e2c91ea58fee6de04d"}, @assoc={0x18}], 0x180, 0x8000000}, {0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000c80)="bd12f38dbe6ac14b26da6e8d173b81a95c5f36774793eef1ee77ab582f918540a7b31ea3af003c3d385a50f90a32e03d7ca0028b1cd4ae131423543a551b7e774b895cb0b1dda7092114958e6eb1ca247b4c83e7f64dfc644b88462fd0ec20955c0ba85a509e265ac59da1d392c01a", 0x6f}], 0x1, &(0x7f0000000d40)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x58, 0x117, 0x2, 0x41, "2870aeddd5cf570396f892368b95d2d86a84e1ddbc45fb2c96146479d8adf4433733d441e85518a4987cbadddd566b5ec1e48300c4c8b24640b4d079099ef03168"}, @iv={0xd8, 0x117, 0x2, 0xbd, "7bb92f266c9c7a4d722915561efba097d1cb713e5c38bc36e96ce04922e603472876d642b901c4549135d647e406a3701a87b980978ce728754cb1f74d3aec18148245a5fa8a902d5fec820c296f07c037088e22f5ad295b6ad7933fec434d0e76a9ec5c6088c4da27fc0933206014e98ebc427f9fb66b20a7484659092905a17e20cfaddea5e1f7d207e393a9552c376df4893a1ed89f2163415e842f4483c2b9bbfa10bf1db9286b894f2839826ed61745ae8c5592bc302901c49670"}, @iv={0x70, 0x117, 0x2, 0x55, "5f0fbe987bba4ad83ffb9e319ea628402648cb29736749a27bce87904a0747e5dff80a18688cc005b9de1a8a2ce46db9d94644ae2024383732a190bca0d252e8d680e958081e051222ab4cf8cf4058fefae94d01b1"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x1e8, 0x24008810}], 0x2, 0x44010) r6 = accept4$bt_l2cap(r5, &(0x7f0000000fc0), &(0x7f0000001000)=0xe, 0x80000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r6, 0x8982, &(0x7f0000001040)) getsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000001080), &(0x7f00000010c0)=0x4) openat$cgroup_ro(r5, &(0x7f0000001100)='devices.list\x00', 0x0, 0x0) gettid() mount(&(0x7f0000001140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000001180)='./file0\x00', &(0x7f00000011c0)='rpc_pipefs\x00', 0x1408, &(0x7f0000001200)='devices.list\x00') r7 = semget$private(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000001280)={0x0, 0x0}) semtimedop(r7, &(0x7f0000001240), 0x0, &(0x7f00000012c0)={r8, r9+60000000}) io_setup(0x3, &(0x7f0000001300)) timer_create(0x7, &(0x7f0000001340)={0x0, 0x1, 0x0, @tid=r0}, &(0x7f0000001380)=0x0) timer_gettime(r10, &(0x7f00000013c0)) r11 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001400), 0x21a0c6, 0x0) ioctl$SNDCTL_DSP_SYNC(r11, 0x5001, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000001440)='THAWED\x00', 0x7) io_destroy(r1) 39.347478058s ago: executing program 5 (id=2682): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000180)={@default, @default, @null, 0x6, 0x4, 0x15, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) fsopen(&(0x7f0000000180)='proc\x00', 0x1) (async) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x1) (async) r4 = fsmount(r3, 0x0, 0x1) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0xab3011, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000200)={0x5, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0]}) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x80000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) (async) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$BLKPG(r6, 0x1269, &(0x7f0000000040)={0x3, 0x0, 0x98, &(0x7f0000000400)={0x5, 0x1000, 0x12}}) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0xb) fchdir(r4) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents64(r7, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x11}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x11}) r8 = socket$kcm(0x10, 0x0, 0x4) sendmsg$inet(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="96eb000014006b409e", 0x9}], 0x51, 0x0, 0x0, 0x1f000000}, 0x600) recvmsg$kcm(r8, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000022) (async) recvmsg$kcm(r8, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000022) connect$bt_rfcomm(r2, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) readv(r8, &(0x7f0000000300), 0x0) shutdown(r2, 0x0) 39.252632637s ago: executing program 5 (id=2683): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r5, 0x7ff}, 0x8) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000a40)={0x48, r1, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfff}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) 39.151562694s ago: executing program 5 (id=2684): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r1, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000000)={0xc, {0x3, 0x8, 0xffffffc0, 0xfffffffb}}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r3, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmmsg$inet6(r3, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000002c0)='\x00#\x00', 0x3}, {&(0x7f0000000340)="751af6b645cce9", 0x7}], 0x2}}, {{0x0, 0x0, &(0x7f00000008c0)}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="85005d20fadb", 0x6}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x4e20, 0x5, @rand_addr=' \x01\x00', 0x51be}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000540)="cee21c098bd6bf906a66fb399ca5808519cd47145a21683ac530ca6346bc36943f3b8251bd4f9dbf29ea5a4953df0359af4dcec4eddeb1acc8916d3c51ec1755c93b41113ca541c58d68bcf6f397f291ce", 0x51}, {&(0x7f00000005c0)="b3764f9d2d59cdfc4707e4f152cf0fd1b16cd73f4434f5b78729cd464cd6c9093f9f42ac32fdc078142a44965f2e34431ba8a2e60262879cd6947e81dc2fad5bc89fcc73fba24ce7271e3fdc053ec0f811adc2c272e11d1fb73a8a2bc061630e376ae6a4c5c3c82f94005295a95aa0c95627695da236906c580876882fbae1208760ce40760b3c162ef47438f474e4ac146ce1", 0x93}], 0x2, &(0x7f0000000900)=ANY=[@ANYBLOB="14000000000000002900000043000000010400000000000024000000000000002900000000000000000000000000000000000000000000003e32533467419aadd7eac290377fa244335906", @ANYRES32, @ANYBLOB="00000000e0000000000000002900000036000000ff180000000000000001000103000000c910fc020000000000000000000000000000c910fc0200000000000000000000000000010740000000020e7f0000f2ffffffffffffff010000000000000000000000000000000900000000000000810000000000000040000000000000000100000001000000040106c20400000007c910ff02000000000000000000000000000103270ccee8e42e9d59c62a138f30c7f3017adcf1740ec4d24747e1eda9c59f5d228114b29ebc1e9e5ac910ff020000000000000000000000000001000000001400000000000000290000000b0000000000008100000000"], 0x138}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000006c0)}], 0x1}}], 0x5, 0x2008000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c000300000000000200000000000000d09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x142d00) 39.041393006s ago: executing program 35 (id=2684): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r1, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000000)={0xc, {0x3, 0x8, 0xffffffc0, 0xfffffffb}}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r3, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmmsg$inet6(r3, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000002c0)='\x00#\x00', 0x3}, {&(0x7f0000000340)="751af6b645cce9", 0x7}], 0x2}}, {{0x0, 0x0, &(0x7f00000008c0)}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="85005d20fadb", 0x6}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x4e20, 0x5, @rand_addr=' \x01\x00', 0x51be}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000540)="cee21c098bd6bf906a66fb399ca5808519cd47145a21683ac530ca6346bc36943f3b8251bd4f9dbf29ea5a4953df0359af4dcec4eddeb1acc8916d3c51ec1755c93b41113ca541c58d68bcf6f397f291ce", 0x51}, {&(0x7f00000005c0)="b3764f9d2d59cdfc4707e4f152cf0fd1b16cd73f4434f5b78729cd464cd6c9093f9f42ac32fdc078142a44965f2e34431ba8a2e60262879cd6947e81dc2fad5bc89fcc73fba24ce7271e3fdc053ec0f811adc2c272e11d1fb73a8a2bc061630e376ae6a4c5c3c82f94005295a95aa0c95627695da236906c580876882fbae1208760ce40760b3c162ef47438f474e4ac146ce1", 0x93}], 0x2, &(0x7f0000000900)=ANY=[@ANYBLOB="14000000000000002900000043000000010400000000000024000000000000002900000000000000000000000000000000000000000000003e32533467419aadd7eac290377fa244335906", @ANYRES32, @ANYBLOB="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"], 0x138}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000006c0)}], 0x1}}], 0x5, 0x2008000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c000300000000000200000000000000d09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x142d00) 6.259865309s ago: executing program 4 (id=2818): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0xc, 0x7, 0x6, 0x4000}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'ipvlan0\x00', @random="31ff066cc57a"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0) ioctl$SIOCGSKNS(r2, 0x894c, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x400}) 6.2372414s ago: executing program 4 (id=2819): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x100) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0x800455d1, 0xffffffffffffffff) 6.206880724s ago: executing program 4 (id=2820): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r1) listen(0xffffffffffffffff, 0x7) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000300)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000600)="4bb1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000000d00)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r1) (async) listen(0xffffffffffffffff, 0x7) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000300)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r4, r3, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000600)="4bb1"}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000cc0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000000d00)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) (async) 6.055987876s ago: executing program 4 (id=2821): sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x248}, 0x1, 0x0, 0x0, 0x4010}, 0x800) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="21ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dbfaf8eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc71", 0x282}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067", 0x23}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454", 0x60}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x13c, 0x10, 0x413, 0x3, 0x25dfdbfb, {{@in=@multicast2, @in6=@private1, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x10, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'aegis128l\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x4000) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) syz_usb_connect(0x1, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="120100020592020881060500c0560102030109021b0001070340f20904fc08010a"], &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000080)={'gre0\x00', &(0x7f00000006c0)={'sit0\x00', 0x0, 0x40, 0x10, 0x5, 0x4, {{0x24, 0x4, 0x2, 0x37, 0x90, 0x64, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @remote, {[@rr={0x7, 0x27, 0x90, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @local, @local, @broadcast, @local, @rand_addr=0x64010102, @broadcast]}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp_addr={0x44, 0x44, 0xf, 0x1, 0xd, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfff}, {@private=0xa010101, 0x4}, {@remote, 0x9}, {@remote, 0x3}, {@multicast1, 0x80000000}, {@multicast2}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x2}]}, @timestamp_prespec={0x44, 0xc, 0xe5, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x15}, 0x8}]}]}}}}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000b40)={{{@in6=@remote, @in6=@remote, 0x4e22, 0x2, 0x4e23, 0x9, 0x2, 0xa0, 0x20, 0x2f, r2, r3}, {0x80, 0xc0, 0x4, 0x9, 0x51, 0x3, 0xf, 0x5}, {0x6, 0x5, 0x9, 0x2}, 0x4a43, 0x6e6bbd, 0x1, 0x0, 0x2, 0x2}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in=@broadcast, 0x3503, 0x0, 0x0, 0x9, 0x4, 0xb, 0x5247e420}}, 0xe8) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x248}, 0x1, 0x0, 0x0, 0x4010}, 0x800) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x282}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067", 0x23}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454", 0x60}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x13c, 0x10, 0x413, 0x3, 0x25dfdbfb, {{@in=@multicast2, @in6=@private1, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x10, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'aegis128l\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x4000) (async) socket(0x10, 0x803, 0x0) (async) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (async) syz_usb_connect(0x1, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="120100020592020881060500c0560102030109021b0001070340f20904fc08010a"], &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000080)={'gre0\x00', &(0x7f00000006c0)={'sit0\x00', 0x0, 0x40, 0x10, 0x5, 0x4, {{0x24, 0x4, 0x2, 0x37, 0x90, 0x64, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @remote, {[@rr={0x7, 0x27, 0x90, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @local, @local, @broadcast, @local, @rand_addr=0x64010102, @broadcast]}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp_addr={0x44, 0x44, 0xf, 0x1, 0xd, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfff}, {@private=0xa010101, 0x4}, {@remote, 0x9}, {@remote, 0x3}, {@multicast1, 0x80000000}, {@multicast2}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x2}]}, @timestamp_prespec={0x44, 0xc, 0xe5, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x15}, 0x8}]}]}}}}}) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000ac0), 0x0) (async) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000b40)={{{@in6=@remote, @in6=@remote, 0x4e22, 0x2, 0x4e23, 0x9, 0x2, 0xa0, 0x20, 0x2f, r2, r3}, {0x80, 0xc0, 0x4, 0x9, 0x51, 0x3, 0xf, 0x5}, {0x6, 0x5, 0x9, 0x2}, 0x4a43, 0x6e6bbd, 0x1, 0x0, 0x2, 0x2}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in=@broadcast, 0x3503, 0x0, 0x0, 0x9, 0x4, 0xb, 0x5247e420}}, 0xe8) (async) 3.898255668s ago: executing program 7 (id=2831): socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$igmp(0x2, 0x3, 0x2) (async) r0 = syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0xfffffffffffffe93, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="20130300000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x6, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}, 0xfffffffd}) (async) ptrace(0x4206, 0x0) (async) tkill(0x0, 0x12) tkill(0x0, 0x12) (async) ptrace(0x4208, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) (async) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r3) 3.687419635s ago: executing program 3 (id=2832): unshare(0x2a020480) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0xcb0a) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_create1(0x0) (async) r3 = epoll_create1(0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x10, 0xa0, 0xfd, 0x20, 0x2c42, 0x16f8, 0xbae3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb5, 0x51, 0xd2}}]}}]}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xd, 0x11, 0xffffffffffffffff, 0x0) (async) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xd, 0x11, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0xa0000001}) poll(&(0x7f00000000c0)=[{r3, 0x1009}], 0x1, 0x8000007) (async) poll(&(0x7f00000000c0)=[{r3, 0x1009}], 0x1, 0x8000007) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000180)}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000140)={@my=0x0}) close_range(r5, 0xffffffffffffffff, 0x0) 3.300041763s ago: executing program 7 (id=2833): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1044, 0x7a4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_io_uring_setup(0x24f2, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000100), &(0x7f0000000140)) r1 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x40, 0x4, 0x2, {0x2, 0x7}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.050380244s ago: executing program 4 (id=2835): r0 = syz_usb_connect(0x0, 0x1b, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0x32, 0x88, 0x40, 0xf201, 0x5370, 0x35a2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0x0, 0x50, 0xff}}]}}, 0x0) syz_usb_connect(0x0, 0x3b, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c8301020301090229000100000000090429000002020100052406"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000000)={0x14, &(0x7f00000005c0)={0x40, 0x21, 0x102, {0x102, 0xe, "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"}}, &(0x7f0000000180)={0x0, 0x3, 0x7e, @string={0x7e, 0x3, "935680bf7094dad534a1c5288dbcdb9ff9c2431194f0420c4302b05c595da59bac25957dc6dadfe574a888242194425cdb9d6ceb60ad335f7e02361b6b284bb9fc8d0ef0f71a8c5827193882b2a051f2446ccfc105b5c2c707f5b85ecf65ab1d4517675911263c1950f4053bbc6a685aca05233c6767a1edbe5e5b07"}}}, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)={0x20, 0x10, 0xf9, "c68a1920d5b215a27c0612500ab58b9ff8ce7630854c23a44ae499e06efeb19d419c356a448ddced9cad2aaca5b19f9a67142aa3598ece833127fc497a03ad8b4716b9f24fe9f2ac0259c162519937b4d97a785c7d5a7d69f7f152b11f9d08d8d96fbbac2fa1e8341dbe849f523821efa71fe4000d47a33502af436d3d5934d0242d62d009b52a8da7f4cc7d1c0c23ee71757aca7b72c7801b15c09242bad415c7f2c7e9f3ab6ce4fb7dd1801826ff0641178a66291aa7a1d5b5f0b3c40b473bfe29206dc43ab68acc47ad5e6fca23705aa10fc346ecf4c2b36455bf05c4f792d35b0cb224010d265856dc1a7e58af2589e9357dc478be0b59"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xd0}, &(0x7f0000000400)={0xc0, 0x5, 0x5, "4cb662a365"}, &(0x7f0000000080)=ANY=[@ANYBLOB="a09ab59d7aa7bfa9cf25fbe7e10875400502000000f84b"]}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000280)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.85051369s ago: executing program 3 (id=2837): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000300)=0x30, 0x1) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {}, {0x0, 0x4000000}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000000104030600000000006a6bb05800ffff0500010003"], 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0xc044) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000040)={0xa1b, "c7080000000000000009a0721972dd40cb00000000000800"}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0x5000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) 2.523620191s ago: executing program 3 (id=2838): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x40000) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000040)) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @default}, [@null, @netrom, @bcast, @rose, @remote, @bcast, @null, @rose]}, &(0x7f0000000100)=0x48, 0x80000) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) write$evdev(r0, &(0x7f00000001c0)=[{{}, 0x1f, 0x81, 0x5}, {{0x77359400}, 0x4, 0x2, 0x4}, {{0x77359400}, 0x14, 0x8, 0x4}, {{0x0, 0xea60}, 0x14, 0x1, 0x2}, {{r2, r3/1000+10000}, 0x3, 0x43, 0xad91}, {{}, 0x1f, 0x80, 0xe3d}, {{}, 0xc, 0x8, 0x28}, {{}, 0x16, 0x2, 0xd989}, {{r4, r5/1000+60000}, 0x5, 0x5, 0x1}, {{0x0, 0xea60}, 0x4, 0xe0b5, 0x3}], 0xf0) r6 = socket$inet_icmp(0x2, 0x2, 0x1) open_by_handle_at(r6, &(0x7f00000002c0)=@FILEID_INO32_GEN={0x8, 0x1, {0x10001, 0x9}}, 0x482001) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r8 = getpgrp(0xffffffffffffffff) getresuid(&(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r11 = openat2(0xffffffffffffff9c, &(0x7f0000002500)='./file0\x00', &(0x7f0000002540)={0x82, 0x22, 0x11}, 0x18) fstat(r0, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000002600), &(0x7f0000002640)=0x0, &(0x7f0000002680)) r14 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) r15 = getpid() syz_clone3(&(0x7f0000002840)={0x200800800, &(0x7f00000026c0), &(0x7f0000002700)=0x0, &(0x7f0000002740), {0x28}, &(0x7f0000002780)=""/18, 0x12, &(0x7f00000027c0)=""/11, &(0x7f0000002800)=[0x0, 0x0, 0xffffffffffffffff], 0x3}, 0x58) read$FUSE(0xffffffffffffffff, &(0x7f00000028c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000005dc0)={'\x00', 0x9, 0x4, 0x7, 0x1000, 0x7fffffff, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000005e40)={0x0, 0x0}, &(0x7f0000005e80)=0xc) syz_clone3(&(0x7f0000006100)={0x20000100, &(0x7f0000005ec0), &(0x7f0000005f00), &(0x7f0000005f40)=0x0, {0x33}, &(0x7f0000005f80)=""/248, 0xf8, &(0x7f0000006080)=""/52, &(0x7f00000060c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3}, 0x58) r21 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000007440), 0x2, 0x0) r22 = openat$full(0xffffffffffffff9c, &(0x7f0000007480), 0x8000, 0x0) r23 = eventfd(0x1) r24 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000074c0), 0x1c1000) r25 = getpgid(0x0) fstat(r0, &(0x7f0000007500)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000007580)='./file0\x00', &(0x7f00000075c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r7, &(0x7f000000a940)=[{{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000003c0), 0x0, &(0x7f0000004900)=[@rights={{0x18, 0x1, 0x1, [r6, r1]}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @rights={{0x1c, 0x1, 0x1, [r11, r6, r6]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r12, r13}}}, @rights={{0x1c, 0x1, 0x1, [r6, r0, r14]}}, @cred={{0x1c, 0x1, 0x2, {r15, 0x0, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r1, r1, r6, r0, r0]}}, @rights={{0x1c, 0x1, 0x1, [r6, r0, r6]}}, @cred={{0x1c, 0x1, 0x2, {r16, 0x0, r17}}}], 0x138, 0x80}}, {{&(0x7f0000004a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005d80)=[{&(0x7f0000004ac0)="0c6f4278ae819a119ebf6f9ed7f1560a46317ca6d5b876339064bffbb0a01e71ef8e0778c7a04d3957820e0a0225469024c27f5cd9297e3f1c34d6bff88d75fca286c5df93b0f80ae0c0a7f91c6a394eb40541b4d25a109de5bb56ec60031f009e145800016a64ea6443c337371495ac95777a49c5372eb777718e18dba0c8975daf9cb26c0918a6996bef96ff51245f68b30ce6ae4659cfe3315cfbc45ac7e3190852b64695badd0dd78a8b29f3e889c98f0a2b99528ad44674b945e5e1c735e42ab20c540603da25d08a", 0xcb}, {&(0x7f0000004bc0)="578e7bdd8806d40a688cc249b1577be80a4b437027ed4f4b7506b83492d03f4c4fed7b8e413f54e0d474439df4c9252e855b80c6a8990c5f90def85212bddb6bfaeb10f76e591d8cd8ca50c08d8963bd83d967c6b60d01d6e2477226c51f639c07dbe4c99394b967d0e2e4e8ebc0261a4d70ac6f259aaeff22b50e394f08df93caa10c9b907f0b2f33059dc67824cb8ec006113ea53c02e242cc4fbaeaf9fffc407573e39b28e94aadf46ba85a5623ab39dc864bf053d0ae6de10064e85f691f51e4262b2a0caa928dafafc68337fc398e04d5373a8ccdef65", 0xd9}, {&(0x7f0000004cc0)="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", 0x1000}, {&(0x7f0000005cc0)="55a19842366b2852fdcac6beb2fb99db3d980e371544793e7abd180a013632b6c27753c27ecb198e3aad61ee4998e54ef2b96ffedca3a03089165b1ca304df846a40c33f30258736f098674e27be11a20d84df0261fc828af3ad56712bf16ee7a0ace87fbc51257881a4b8db45c3643887b6ebf30406a0f112d16fbcab6ce024cf7b62688422d617209fa8b2b681e4ce4e1cf6790b5ad87f", 0x98}], 0x4, &(0x7f0000006180)=[@cred={{0x1c, 0x1, 0x2, {r18, r19, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r20, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r6, r6, r6]}}], 0x68, 0x4}}, {{&(0x7f0000006200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000007400)=[{&(0x7f0000006280)="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", 0x1000}, {&(0x7f0000007280)="29b2ed967bf52de455a28d12b10cbe49a7b9d2f08515e559dea70f2ced610a3bae36b6ad6e25e832d032ffe088255ab37a4a143b8e1ab05e06bef656455b095e8e3a47c24b359e2926442297d1706e48472d81bd5660dae1812da0cb0fc7b041314bd860ace59b7749a508b51ea7a86070e5da0980a65d536d7860f265d6173a47409bbfb63f95a2dad539c1a5a99cce0ae034195c2520de81b222ca90fa32bc56d9f098bb93ea941e570e84e66c43", 0xaf}, {&(0x7f0000007340)="a5ad1932b643cfedab826f896497886b61df9fb7f606c1b922fb08aa808f6f1f89640521cfc377e454c577ea1f6b64bae0208321b80c1b292df6fff131d7bfaa894dac7059b5896ab2b4d326673d3f4da6e41ac38b5796b9c14f47242055d784d0b238a4bdc1a9d82d97f3641726e10e8da8562ee050da984bf8da20cf19f47627994df2cad5e441609f9c3f91", 0x8d}], 0x3, &(0x7f0000009a00)=[@rights={{0x30, 0x1, 0x1, [r0, r6, r0, r6, r6, r21, r22, r23]}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r6, r24, r6, r1, r1, r6]}}, @cred={{0x1c, 0x1, 0x2, {r25, r26, r27}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8, 0x8855}}, {{0x0, 0x0, &(0x7f0000009f80)=[{&(0x7f0000009b00)="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", 0xfb}, {&(0x7f0000009c00)="b56115028186612cfe85", 0xa}, {&(0x7f0000009c40)}, {&(0x7f0000009c80)="077d28c07a0da6037985787b8b72a9a2023440a3140a87c2aea72e2f853bf100b530faf236d1241f96c86a0f90a0b3f5d988f0718b2f5b303ed9d747d5c2f2f998c794e5afc009d7f8fb2295d4c46c694fdb9311d696b60e9a51415cfe2578ea04f55a1fe0b5cf052223fd465a971e2e4f4486337c6d75278d95d9782d28d9f6293a108e17c4b4b13123e3a4c54140b2d5ca381dc0794f7f75bbf16811ba", 0x9e}, {&(0x7f0000009d40)="01fe3cdbe5e6f189f7caa9f6f4ae148081bffd642335d5ec8fe40a81650f35d2dc5c7977657c0752b9e5ff8de1e909d67fe636c209ff0e39947e00df6d68faf388be6bc767c6d2cf78d646d668c997f128baea2b6924df6607f4a5995ff475f6f1f55a08c10b975f58e949c52cefc158a328b49ab9105bd6555b", 0x7a}, {&(0x7f0000009dc0)="1444fcc130be3150622678751db28cd2e03ec4256d1736f2d31ab05d6214041d4069f8a7fef17c0ef9d7b2873661dd484874f585c2952d25b9c3aa01fb3b65683e43568af76790b4ed5602b5b759bc91cb47", 0x52}, {&(0x7f0000009e40)="ca187e4baf076e73d6a3f988ce94fff2f4c94a0999d4b0dcf1f3ac7803dd34eb37d08188c8f53ea5caf8f99494154197b1f680a2d7777b07a32b99b4bba720f541f66fb6edd3c88c60b17a272ec13d87a0d2c5fac6c515ca6167abb75061ee78089c5314829b2bb534cc7c02ddcedc3858f95223f0db4e3ec746fa63447aecb4270f4f9c4971d7a67894c14cfd8435553384101ea81ed30992c14f868eda", 0x9e}, {&(0x7f0000009f00)="844e61306bd144502323c0418d618fd91221031ce4689ea3bc2ef12e596dd9909a587dc582517130ef8daebbcfef036cafb20da78a2db7c3086327f6ca0da97f78dd3bf75d3ed1d6946ae74ff21d463da3d3293349237d86ae0e0a4178962d", 0x5f}], 0x8, &(0x7f000000a240)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r6, r6, 0xffffffffffffffff, r6, r6, 0xffffffffffffffff, r1, r0]}}], 0x50}}, {{&(0x7f000000a2c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000a600)=[{&(0x7f000000a340)="d149d299accdb6508295d9dd457928900df54125413b819d6d42d5cc7f4432ba57bae50a3702de8bf7d184586a364d6ec40056b4e950d1d1310c2c96c1749751e2112f3cb162697d102528e4b717d8a1f8612b4d3e58974899b825a0e48ada2fd6d39273af7fd35023fdd91de7c068b14183759b5047879703832c40f31bd2e0f6b42eff89a49ff9d8c2520702a8555f5cd43ef0111be3710f75ec57a7e5bb5ec770574e3fda868221b6c0e6085576ee8d1dfc2ccfa90dd5fbfc5b9b968e0746bfb19d0382be5338e3cda8b96e6610e322350391f3e012949894eb2eec4fcb585542767c4684a6b2e0809f3d76653d3a4e17e1c138398f82", 0xf8}, {&(0x7f000000a440)="7f1575aa4d115619fa844c49c7730aa1431a40b8f07974214915b471e1e9365080fe3bba1effc3e314edce9c32179470970a07e405805281ab2002644637af21e646e23fea", 0x45}, {&(0x7f000000a4c0)="f2df9e859e4e33e9fb73facc91a406010b8aef2aaf787469a2d06b3fe8f094aa9d24e4d12b09e6b6a9d539bd5f3ff47cb047b911959fa98bb3f2df1fec00a3b3e16d9497abbac3c5b9a182f4e402f9d0126827475c27caf0ac75db39efb8d999c041824bd3ffbd30bc47ab526b10d418e27cf69e8fe548ad8bf4b2d5eeccc914596ba1", 0x83}, {&(0x7f000000a580)="e24c4db9ddcbab1ae9e5e62600450146ed0e20509c7281fb9ad101c2d81da7432b1563d313246796f324eeeec4881d09cee1f6c2e7e4615fc95f556d30eb44", 0x3f}, {&(0x7f000000a5c0)="11f12f10a22869d7dd1257c7d82bd7ee11ec6d", 0x13}], 0x5, &(0x7f000000a8c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r6, r1, r6, r0, r1]}}], 0x48, 0x40040c4}}], 0x5, 0x20008081) 2.363735239s ago: executing program 3 (id=2839): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x10000, &(0x7f0000000000)={0x0, 0x3938700}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="00000c000000070001", @ANYRESOCT], 0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'ipvlan0\x00', @random="31ff066cc57a"}) 1.162201196s ago: executing program 6 (id=2840): r0 = creat(&(0x7f0000000080)='./bus\x00', 0x24) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x4000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r2, &(0x7f0000000000)="fa", 0xfffffdef) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000040)={0xc, 0x7, 0x6, 0x4000}) truncate(&(0x7f0000000040)='./bus\x00', 0x9472) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001300010000c78103c0da00ab2a4bf26d"], 0x14}}, 0x20000000) r5 = dup3(r1, r0, 0x0) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x11, r1, 0x38000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r6, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0xffdd) finit_module(r5, 0x0, 0x5) 928.936758ms ago: executing program 3 (id=2841): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000240)=0x1) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0xe) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r5, 0x86}, 0x8) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r7 = fanotify_init(0x8, 0x80000) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) fanotify_mark(r7, 0x105, 0x10, r6, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x800, 0x0, 0x59455247, 0x6, 0x2048, 0x1, 0x9, 0x9, 0x1, 0x6, 0x0, 0x5}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000480)={0x9, 0x1, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000840)={0x2, @win={{0x0, 0xffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 823.494011ms ago: executing program 3 (id=2842): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000080)={{0xa, 0x5, 0xff, 0x0, 'syz1\x00', 0x5}, 0x0, 0x20, 0x6, 0x0, 0x3, 0x4, 'syz0\x00', &(0x7f0000000040)=['\x00', '#]\x00', '\x00'], 0x5}) (async) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f00000001c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @empty}}, 0x24) (async) r2 = syz_usb_connect(0x6, 0xc5, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0xb5, 0x2d, 0x2f, 0x10, 0x19d2, 0x8, 0x2a5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb3, 0x2, 0xa1, 0x7, 0x80, 0x2, [{{0x9, 0x4, 0x11, 0x5, 0x3, 0xff, 0xff, 0xff, 0x2, [], [{{0x9, 0x5, 0x3, 0x0, 0x200, 0xff, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0x3}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x8, 0xf9, 0x40}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x50, 0x0, 0x6}}]}}, {{0x9, 0x4, 0x82, 0x8, 0x5, 0xff, 0x3, 0x48, 0x4, [@uac_as={[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x1, 0x3, 0xa, 0x5, "3cb5"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xea, 0x4, 0x1, 0x13, "c0cdd7", "19b0"}, @as_header={0x7, 0x24, 0x1, 0xc3, 0x8e, 0x1}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x9, 0x3, 0x8, 0x8f, "5a7f8d4bb6"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x0, 0x3, 0x4, 0x1, "e007ed"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x4, 0x2, 0x4, "217614", "86"}]}], [{{0x9, 0x5, 0x5, 0x10, 0x200, 0xa2, 0x9, 0x1}}, {{0x9, 0x5, 0x4, 0x11, 0x400, 0x9, 0x8, 0x7}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x10, 0x5, 0x60}}, {{0x9, 0x5, 0x8, 0x1, 0x8, 0xfa, 0x8, 0x7}}, {{0x9, 0x5, 0x9d2bc6b5dac15166, 0x1, 0x400, 0xa7, 0x2, 0x7f}}]}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x310, 0x55, 0x6, 0xc8, 0x10, 0x3}, 0x10, &(0x7f0000000340)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x24, 0x7, 0x4, 0x3, 0x7}]}, 0x3, [{0x95, &(0x7f0000000380)=@string={0x95, 0x3, "ebbb73af6e3f0988131e5b22a3217d04f2a55502ce48e34d1193da7d4a77fffb45983a2ff7df84037f1266e1e0d17856332d67b150cfd189ded06a8bdc4bcc6bd6bc777b54a0c80c431e863b13fdc9a339203e7c58da81d511488a98c519aec193eddf62e5f3af895b8b84bb5a09633f64f8e0fd9a91ca36526538a599f7ac295cff5366f0c22a5d48e89bc159e4e69c01cbeb"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x40d}}, {0x75, &(0x7f0000000480)=@string={0x75, 0x3, "bb046e55b8b3b00d8869a6bf028bd54ab03b95080ea7b6ec1859b6e36c879093ac78860219c2e6363e37ee4c33363ed8045365236094eac9b87e4fa34ed7430577023bb696b505779209ae7b47f6b731bd7f35e8d4476fd18b43ebecf57ab2612c2eef562323e2e7951686efde773e005a5e7a"}}]}) (async) r3 = syz_usb_connect$cdc_ecm(0x2, 0x174, &(0x7f0000000540)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x162, 0x1, 0x1, 0x1, 0x50, 0xdc, [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x9, 0x24, 0x6, 0x0, 0x0, "5c89125a"}, {0x5, 0x24, 0x0, 0xfae6}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0x6, 0x8f1, 0xca}, [@ncm={0x6, 0x24, 0x1a, 0x4}, @mdlm={0x15, 0x24, 0x12, 0x40}, @mdlm_detail={0xf3, 0x24, 0x13, 0x7, "3f63af4a25cef261e2b30af2329893c171a8b35806668ba5050fedbb27c0c447ccbb465f772c7f9bfbc59ace538c48a6c33c66209fe28289407f2538459cc194dd0bc56eb3219adee81bea064920074407ce294dc51717e2f312deb0fb213cb341ef73399178e7ebae478d4e707b31c4c6cf52967e5c95e3ab568df4030d71c0923a203041b2730354d7350eba1ea30d7870c724dde1935cedf526de3f6a18b7d0a76d79832ebbe0e6a24251eb5c297e65150deb5a0d077b52859fb9a7c6093c346e0ea2674fa1a8feae015aef1350466925a8d7dad98e04ff99b575b2574d1daac65123725418334271dc3d735feb"}, @mdlm_detail={0xc, 0x24, 0x13, 0x1, "f8a474d0dfcd03e0"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xc8, 0x69}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xfd, 0x1, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x1, 0x7}}}}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x201, 0x10, 0xfb, 0x9, 0x10, 0x4}, 0x8, &(0x7f0000000700)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x4, [{0x3b, &(0x7f0000000740)=@string={0x3b, 0x3, "c58ebd848ae372437b498441b47df3bdee443b89d4e8a73256e22a2bd41be5c518732b42455f0dc6705f084606d927b46c1fd8729cf3b1c747"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x180c}}, {0xe, &(0x7f0000000800)=@string={0xe, 0x3, "ab41adf0c8bae9b12376a015"}}]}) syz_usb_disconnect(r3) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000008c0)) (async) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000900)=0x3) syz_usb_control_io(r2, &(0x7f0000000ac0)={0x2c, &(0x7f0000000940)={0x0, 0xe, 0x53, {0x53, 0xb, "7f1e1d2da9821392247a9209bc891df6dc3b864d09e225377f728d4039161ad05435984d80fb4c5a4ab5de2789a362d8cb5978e3f79596605e5fccd8784dba0558d6c31d0c90dd2e52780322d9f48dafce"}}, &(0x7f00000009c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x425}}, &(0x7f0000000a00)={0x0, 0xf, 0x18, {0x5, 0xf, 0x18, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x3, 0x3, 0x2}, @ptm_cap={0x3}]}}, &(0x7f0000000a40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x2, 0x8, 0x9, "d0843098", "f6c4acb4"}}, &(0x7f0000000a80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x48, 0x1, 0xe8, 0x50, 0x5, 0x89ef, 0x293}}}, &(0x7f0000000f80)={0x84, &(0x7f0000000b00)={0x40, 0x0, 0xa6, "e4bcf10e1ce26ae64d5e6aad9012fd70ca4c4326ff16c502f46408a3924185bff2599f6977ba33e342d3b40bc30448409d1b4570b433fe87d615ea673f839de4342b18038f1b0d76ff32c26350273211aa95ef7032c7df7e208e9a282a6b17bd5a40255bd4da5f4a4e949d3cfbb0f6761fca066aeaaf93a1d1a816ecaca6daecc9484698226f26f7ecd401a7f86ddd4efffcd6a58e02b938a67cd82f30e0dd83000ded0de35f"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x67}, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000c80)={0x20, 0x0, 0x4, {0x400, 0x10}}, &(0x7f0000000cc0)={0x40, 0x7, 0x2, 0x7008}, &(0x7f0000000d00)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000d40)={0x40, 0xb, 0x2, "21f9"}, &(0x7f0000000d80)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000dc0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000e00)={0x40, 0x17, 0x6, @random="accc7c8eb0e0"}, &(0x7f0000000e40)={0x40, 0x19, 0x2, "518d"}, &(0x7f0000000e80)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000ec0)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000f00)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000f40)={0x40, 0x21, 0x1, 0x8}}) pipe2$9p(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RUNLINKAT(r6, &(0x7f0000001080)={0x7, 0x4d, 0x2}, 0x7) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000010c0)) ioctl(r5, 0x1, &(0x7f0000001140)="42bfc70ddee098083fc4eb6589cb12dfeca8b464a02eb65e258fe29232e0e30f770a0338a071eda938e6d74c31ca280c1f1aec89cc6ba6a4420c507e888be3673a4d8b700b2cc4f81972cb5a2a46e9b900a95e1f9ed4a9639c08defbdd0e744678df93f200841576d1800839672e144ea44b23796b6a197187d67e9f43bfc5b3907d56b1191c7163bcb4a7383a2159ec9365f9519b2d40a53ebf58dae826edfdc43ba896c33843657e612ddfccb9df8e8288961ed0279388252d12ef19b35e5e93e994cf72f6") (async) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000001240)={0x10, 0x4, 0x4, 0xfffffff9, '\x00', '\x00', '\x00', 0xffffffc0, 0x4, 0x80000000, 0x0, "924e9c63ed8122a968de84debd5a1c4b"}) (async) syz_usb_control_io(r2, &(0x7f0000001580)={0x2c, &(0x7f0000001380)={0x40, 0x0, 0x2a, {0x2a, 0x3d, "30df02d7504f0764ae6ae0d425af8d15ac43bf887c04b18613ba7c24b5cbf3a811f82332765a7638"}}, &(0x7f00000013c0)={0x0, 0x3, 0xd8, @string={0xd8, 0x3, "af46d0e553f88b7910c3bc8c95d51308bd5d174270b7f6dbdc14c77863e341871e2a61e1383c8e40694ed660965ca7690357f4083aac034dc9a8611846c1950cf1bf787c3fa21565e6dca15f947a9c6ad976a1bc43726b6e113f3d36a10e991b35dec8cc71712e107255006b63678afd596a1395d82c0da9f346c2bd8d577390c6ffe84f2e68ff577434552baf1c7da292ec7a189517d0f31d6b2e60b690caeda474a0638f5cc3ecd3c5d264b513b78cbd26125ce7b3127fd92f94fed680b790fdf59ffce0b9634d0df846435ec610ec451ae9a9d5bb"}}, &(0x7f00000014c0)={0x0, 0xf, 0x26, {0x5, 0xf, 0x26, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x1, 0x5c5}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x1, 0xff00, 0x8, [0xcf, 0x3f30]}]}}, &(0x7f0000001500)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc0, 0x1, 0x1, 0x40, "0cc8f531", "e8177530"}}, &(0x7f0000001540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x59, 0x0, 0x1, 0x10, 0x6d, 0x332, 0x7}}}, &(0x7f0000001a00)={0x84, &(0x7f00000015c0)={0x20, 0xc, 0x66, "fce1be3c1775db77528cd345e4149faf51f251c42cf43f8e8eeec1d9409b2253efeac51366ca30df96f745b0c0d74bbde33e27e9bdcc072889bd6eb305862431f89ea887ffb356270e84d8785a2631e6ad7be62259118f02edcdebc716fbfde09f088bf26f0a"}, &(0x7f0000001640)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001680)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000016c0)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000001700)={0x20, 0x0, 0x4, {0x2a0, 0x20}}, &(0x7f0000001740)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001780)={0x40, 0x9, 0x1, 0x2}, &(0x7f00000017c0)={0x40, 0xb, 0x2, "9abd"}, &(0x7f0000001800)={0x40, 0xf, 0x2, 0x10}, &(0x7f0000001840)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000001880)={0x40, 0x17, 0x6, @remote}, &(0x7f00000018c0)={0x40, 0x19, 0x2, 'qV'}, &(0x7f0000001900)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000001940)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000001980)={0x40, 0x1e, 0x1}, &(0x7f00000019c0)={0x40, 0x21, 0x1, 0x3}}) (async) syz_usb_connect$cdc_ecm(0x5, 0x8b, &(0x7f0000001ac0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x1, 0x1, 0x9, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0xf4, {{0x6, 0x24, 0x6, 0x0, 0x0, 'v'}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x2, 0x6, 0xe}, [@mdlm={0x15, 0x24, 0x12, 0x8000}, @mbim_extended={0x8, 0x24, 0x1c, 0x1ff, 0x3}, @dmm={0x7, 0x24, 0x14, 0x8106, 0x101}, @country_functional={0x10, 0x24, 0x7, 0x4, 0x6, [0xe, 0x101, 0x3, 0x1, 0x0]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x210, 0x5, 0xa7, 0xff}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x1, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0xc, 0x10, 0xfb}}}}}]}}]}}, &(0x7f0000001e00)={0xa, &(0x7f0000001b80)={0xa, 0x6, 0x250, 0x1, 0x10, 0x7, 0x20, 0x40}, 0x33, &(0x7f0000001bc0)={0x5, 0xf, 0x33, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x0, 0x2, 0x2}, @ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x5, 0x0, 0x2, [0x30]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0xf9, 0x10, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xe, 0x8, 0x7}]}, 0x5, [{0x4, &(0x7f0000001c00)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000001c40)=@lang_id={0x4, 0x3, 0x458}}, {0x10, &(0x7f0000001c80)=@string={0x10, 0x3, "d9fe90e1fec0c0ecc18a86211323"}}, {0xe9, &(0x7f0000001cc0)=@string={0xe9, 0x3, "b477cd8a9bba276112e15ecb35b18fe538a161d0efac2cc665fb1ebf1796c13011e80ec9b99f2407f50f3a90fad23598b6c039ea81e56ee545b8d9af6233b9223c5aabb4d241663e89e64079b77496438ba3be3697a0ada1e69a0c06d73f3a585d39114f7d9253b4cd7583da6d7705f506a8cd159c68a21a9dba66da001de8c3c40f3c8baeeb7aa525fa1ac406fffa3785da51a044156437cc18d1451d79f78ba4f72975852a3b6d891056f90c0bd606fcf55963076cf93a121e559e26bbd8be3f311324b5523693ac9f573a23eb2eacc5de33c60af5e86c87027cfc6624d2609626b4a8552e87"}}, {0x4, &(0x7f0000001dc0)=@lang_id={0x4, 0x3, 0x1407}}]}) (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) listen(r7, 0x0) (async) syz_usb_control_io(r3, &(0x7f00000020c0)={0x2c, &(0x7f0000001e80)={0x20, 0x22, 0x1b, {0x1b, 0x9, "570e453c1cb1d268dd12e0019200d47c48f6d58ca3eb5fba19"}}, &(0x7f0000001ec0)={0x0, 0x3, 0xf, @string={0xf, 0x3, "7af6f21d285d772c92603c59b2"}}, &(0x7f0000001f00)={0x0, 0xf, 0x10e, {0x5, 0xf, 0x10e, 0x5, [@generic={0xb7, 0x10, 0x2, "d0ba1450a3da08ee6f33fda5cafeb7d8814465cd057ca184c50d9e53c1b903f4ea5836465cb92ed4c78ba3a08c16e71c6ff927c8a0f415cfa7d4cf1b24faeb9b5a8f1951d2f818741b3bb3b704137427328c66b98425631ee50346f34f08f58367258a2ced7bafb653fa13e799c2b045f0eb3b6f2270a6325eafc2ef3bc19cba058025f02c50b87b79258a403bb5a022dc5b0b5cadc5992be20c65e4caf40b0d297e0e8dd16b4905f1f4c50361a67720f7cca041"}, @ssp_cap={0x24, 0x10, 0xa, 0xa, 0x6, 0x2, 0xf, 0x40, [0x0, 0xff000f, 0x3f00, 0x37, 0x3fd8, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x34, 0x9, 0x61, 0x7, 0x8}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x37b9, 0xff0f, 0x3, [0xff0000, 0x3f0f, 0x7f800f, 0xffc000, 0x3f00]}, @ptm_cap={0x3}]}}, &(0x7f0000002040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x2, 0x1, 0x2, "dafe62af", "e76e0398"}}, &(0x7f0000002080)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x10, 0x9, 0x8, 0x5, 0x100, 0x6}}}, &(0x7f00000025c0)={0x84, &(0x7f0000002100)={0x20, 0x5, 0xbe, "977114533dc9c58c90b62ce9eecd1e79ed2d4e828ffdb4cb2ef5cf2d91749d89a70ec8ebf5e2251d930cc61e5c32730b50abd7d810113413bdf2631f09e6d22d80b6f54527c6892f29f4a0d923a1ad1b61192697f8a6a08729a3c774fe929f7c3b24df16b0c82bd15fcdd2afb8068efe15af15621212375b8cd3a438380a126afe5fd3e78d9f0f93a8b2b04aecf3e8950a4fcf8b34a092a08b1e5e1f5f0cfc1b3388110abb55aa3fd68e0ec1fbada923a9ae61bf34fd9a8f811d1c188e24"}, &(0x7f0000002200)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000002240)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000002280)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f00000022c0)={0x20, 0x0, 0x8, {0x0, 0x40, [0xf000]}}, &(0x7f0000002300)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000002340)={0x40, 0x9, 0x1, 0x7e}, &(0x7f0000002380)={0x40, 0xb, 0x2, 'p\x00'}, &(0x7f00000023c0)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000002400)={0x40, 0x13, 0x6}, &(0x7f0000002440)={0x40, 0x17, 0x6}, &(0x7f0000002480)={0x40, 0x19, 0x2, "53fb"}, &(0x7f00000024c0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000002500)={0x40, 0x1c, 0x1, 0xa5}, &(0x7f0000002540)={0x40, 0x1e, 0x1}, &(0x7f0000002580)={0x40, 0x21, 0x1, 0x8}}) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r7, 0x8040942d, &(0x7f0000002680)) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000026c0), 0x800, 0x0) (async) r8 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000002700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r8, &(0x7f00000028c0)={0x14, &(0x7f0000002740)={0x20, 0xc, 0xa6, {0xa6, 0x5, "062340365f5887461c6037b63ed2d5b00d8291b6c2cc343fe32ac60dbbeba32f53c435952a29c960ebb7261b32385dc13f2fc8571bd1aefd1b9329edf38296c6d8cf68c27156d71e446eaac4e314525a96d0fe5e2207941301fb90c886e24184d3a556e40cd74871d18c9ffb9b9b874f459987be75cfc1b57709ee1e24a51762ed99cc6ae8a444940a7c77702b19191aad25177e974ecbee0a8ee2feafb6f66553fe29da"}}, &(0x7f0000002800)={0x0, 0x3, 0xa4, @string={0xa4, 0x3, "1ec1523a9a51dbc370e273dfa990cb2e3728d5cefde839e57536a9affccba5f3f1baa918e04e67a122ae15b800ac133d3991af7fa99be7089048fec2c64bff8800f9553eaff2aaa7213f8478ab607b489defa6c02552391505d1749274521720fbc0393d9ec95895ddfc5147946b44397f80409c1000566703c8b97c4bfc5e338304e9ae68070548795c2d3bcbb0f303b22b25add1b598e51f46792046a30dcbed42"}}}, &(0x7f0000002ac0)={0x34, &(0x7f0000002900)={0x0, 0x17, 0x67, "b163f2e8a6e2cff67f50ba69b88cfe319a3dc5b2457cbb6e774cd4a3318a859e78d48f2facfe0898b6bbd757a44313200f984485cbeacccdc8c1104f5900678234c5b227940594e1f1522e464079d82b9d225cdfe407b7281fde8b131ae45cce049d63fbc03592"}, &(0x7f0000002980)={0x0, 0xa, 0x1, 0xfe}, &(0x7f00000029c0)={0x0, 0x8, 0x1, 0xfc}, &(0x7f0000002a00)={0xc0, 0xa1, 0x4, 0xfe}, &(0x7f0000002a40)={0x40, 0xa0, 0x4, 0x2}, &(0x7f0000002a80)={0xc0, 0xa2, 0x2f, "5397e4ad0faaefbd3e23a473ea9cd596e306ef4ba237d98501490126b7ba9ca410ad3817db9516e3fd927fbe661d9f"}}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000002b00)={'tunl0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002b40), 0x200, 0x0) (async) r9 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000002b80), 0x2, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r9, 0xffffffff80000902, 0xee01, &(0x7f0000002bc0)) (async) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000002c40)=0x8000) 712.905515ms ago: executing program 6 (id=2843): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) (async) sendmmsg$inet6(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000680)='A7', 0x2}], 0x1}}], 0x1, 0x4000001) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x6fba950d, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x2c, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3f, 0x8f, 0x4006, 0x6, 0x0, 0xffffffff, 0x4, 0x8, 0x400, 0x10000080, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8800012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xb, 0x2bd, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x10, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x0, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x2, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x8], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x3, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x4, 0x1ef, 0x8, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x5, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x1ff], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0xfffffff9, 0xffff, 0x2000a620, 0x2, 0x5, 0x4, 0x5, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0xa, 0x3, 0x10000, 0x7, 0x7e, 0x100, 0x7f, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x4048010) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xcd20}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) (async) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x10280, 0x0) read$dsp(r3, &(0x7f0000000180)=""/119, 0x77) 668.121857ms ago: executing program 6 (id=2844): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x2}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r2) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) r3 = openat$binfmt(0xffffffffffffff9c, r1, 0x2, 0x0) close(r3) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, &(0x7f00000005c0)={[&(0x7f00000004c0)='&@\\./,)*\x00']}, 0x100) 423.943308ms ago: executing program 6 (id=2845): r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') read$msr(r0, &(0x7f0000000080)=""/90, 0x5a) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f00000002c0)=@default) syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x460240) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="8aea15a84a97c3c55b8bd95578bc2cf295bcb295bea3388c55daf75056da464ac3e2e6d794bdf19604300ade703c98cc3b33ec6fa5d37ad7e8d4fe61be6bd6df11d78c1b91c7b1a254a2f43ba6ed2681936ec2514bc32295e9fcd72bc51069f808fa72106f357f2ef2aac76cc59227c2911f6f5602a3bef5bd03508e8bb42f84bc297f90b60992a928991c4cb4a4b597c56551f5a50722a5067e754f4e7892098b9d666238f8197a450680c8404e0c323517f611924e9bc5be5bd1a16ca81831270747", 0xc3, 0x7) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x78, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_FLOW={0x6, 0x6, 0xb}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_FAMILY={0x5, 0xd, 0x2b}, @GTPA_MS_ADDR6={0x14, 0xc, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x400c1}, 0x40084) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f0000000240)='.\x00', 0x848) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r3, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0x80, 0x8) getdents(r1, &(0x7f0000000f40)=""/243, 0xf3) 354.057126ms ago: executing program 6 (id=2846): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a001700000000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) (async) r1 = socket$inet(0x2, 0x6, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x20d6, 0xcb17, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffdc5, &(0x7f00000011c0)=[{&(0x7f00000000c0)="5c00000013006bcc9e3be35c6e17aa31066b876c1d0000007ea6e763160af36504001ac0080010000400020002000000ef64bc24eab556a705251e618294ff0051f60a9553adac000e4509c5bbcd72c6c953ec3ded4d8217961381fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4800) (async) syz_usb_control_io$hid(r2, &(0x7f0000000980)={0x24, 0x0, 0x0, &(0x7f0000000900)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x0, "c9005273"}, @main=@item_012={0x1, 0x0, 0xb, 'D'}]}}, 0x0}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x2e) (async) r4 = socket$igmp6(0xa, 0x3, 0x2) (async) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="66b9a00d00000f32dbd567f0879f00a00000670f4fa1ea000000660f388080062e0f01c5baf80c66b8d789868866efbafc0cec0f0666b9800000c00f320f304466b8010000000f23d80f21f86635800000300f23f866350a00000044360f01d1", 0x60}], 0xd82, 0x54, 0x0, 0x0) (async) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x5}) (async) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000080)={0x200, 0x2, 0x4, 0x0, 0x5}) (async) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x2, @win={{0x2, 0x1000c, 0x4, 0x23}, 0xb62d18fbf43bc210, 0xfffffffe, 0x0, 0xc, 0x0, 0x6}}) (async) sendmsg$netlink(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x20048090) sendto$inet6(r4, &(0x7f0000000100)="4c00000012001f15b9409b8400feffffffffffff000000000017030838c88cc055c5ac27a6c5b068d0bf46d323452536005ad94acc000000000000000000000051d1ec0cffc8792c6e850080", 0x4c, 0x0, 0x0, 0x0) 298.465846ms ago: executing program 7 (id=2847): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0xcee, 0x1, 0x10000, 0x100, 0x1, 0x0, 0x8}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010100}, 0x0, 0x0, 0x1, 0x1}}, 0x2e) (async) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @local}, 0x2}}, 0x2e) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={0x0, 0x3a}, 0x1, 0x0, 0x0, 0x4000011}, 0x8010) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x100000001, 0x2) (async) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) (async, rerun: 32) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x24000050) (rerun: 32) syz_usb_connect(0x0, 0x32, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000083ef0840e07d6e67db77000000030902200001000000000904000000ef"], 0x0) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) ptrace(0x10, r3) (async) ptrace$getsig(0x4202, r3, 0xa, 0x0) (async) r4 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0xfc}}}}}]}}]}}, 0x0) (async) r5 = socket$kcm(0x2, 0xa, 0x2) (async) r6 = socket(0x10, 0x80002, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f08", 0x15) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'ipvlan0\x00', @random="31ff066cc57a"}) syz_usb_control_io$printer(r4, 0x0, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ptrace(0x4208, r3) (async) syz_usb_ep_read(r4, 0x1, 0x12, &(0x7f0000000080)=""/18) (async) pwritev(r7, &(0x7f0000000140)=[{&(0x7f0000000100)="01", 0x1}], 0x1, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x0) 132.066166ms ago: executing program 7 (id=2848): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x2, &(0x7f0000000040)={0x0, 0x800389b, 0xc000, 0x1, 0x323}, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffff7}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000040)={0x0, 0x80038db, 0xc000, 0x1, 0x323}, 0x0, 0x0) 117.590151ms ago: executing program 6 (id=2849): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$isdn(0xffffffffffffffff, 0x0, 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @local=@item_4={0x3, 0x2, 0x2, "4e84a66b"}, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_012={0x1, 0x1, 0x7, '8'}, @main=@item_4={0x3, 0x0, 0x8, "c83e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_012={0x2, 0x2, 0x3, '\fh'}, @main=@item_4={0x3, 0x0, 0x9, ')$Q)'}]}}, 0x0}, 0x0) (async) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x1, 0x2, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x21bb5bbf56924102}, 0x4000880) 116.333282ms ago: executing program 7 (id=2850): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af25, &(0x7f0000000140)=0x20c000000) renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file2\x00', 0x1) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x4000040) 83.665071ms ago: executing program 7 (id=2851): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x163881) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000100)={0x80, 0x0, 0x0, 0x2}) r1 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r2, 0x0, 0x0) 0s ago: executing program 4 (id=2852): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) r2 = socket(0x40000000015, 0x5, 0xffffffff) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_int(r3, 0x1, 0x26, &(0x7f0000000000)=0x3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r5, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x1004) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) r6 = socket$key(0xf, 0x3, 0x2) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x64) setfsuid(0xee00) fcntl$F_SET_RW_HINT(r6, 0x40c, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x105100, 0x0) r8 = dup2(r7, r1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) write$cgroup_pid(r8, &(0x7f0000000100)=r9, 0x12) kernel console output (not intermixed with test programs): header checksum [ 548.286150][T15747] Bluetooth: (null): Invalid header checksum [ 548.286264][ T5873] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 548.315285][ T5873] usb 7-1: device descriptor read/8, error -71 [ 548.394988][ T1140] Bluetooth: (null): Invalid header checksum [ 548.425609][ T5873] usb usb7-port1: unable to enumerate USB device [ 548.504980][ T3889] Bluetooth: (null): Invalid header checksum [ 548.615045][T15747] Bluetooth: (null): Invalid header checksum [ 548.725303][ T1140] Bluetooth: (null): Invalid header checksum [ 548.834911][T15747] Bluetooth: (null): Invalid header checksum [ 548.944746][ T24] usb 4-1: reset high-speed USB device number 95 using dummy_hcd [ 548.955850][ T1939] Bluetooth: (null): Invalid header checksum [ 549.056839][ T3889] Bluetooth: (null): Invalid header checksum [ 549.087027][ T24] usb 4-1: device descriptor read/64, error -32 [ 549.164990][ T50] Bluetooth: (null): Invalid header checksum [ 549.274965][ T50] Bluetooth: (null): Invalid header checksum [ 549.324750][ T24] usb 4-1: reset high-speed USB device number 95 using dummy_hcd [ 549.378425][T17749] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2435'. [ 549.390013][ T1140] Bluetooth: (null): Invalid header checksum [ 549.465257][ T24] usb 4-1: device descriptor read/64, error -32 [ 549.495228][ T3889] Bluetooth: (null): Invalid header checksum [ 549.618133][ T1140] Bluetooth: (null): Invalid header checksum [ 549.714959][ T24] usb 4-1: reset high-speed USB device number 95 using dummy_hcd [ 549.723229][ T50] Bluetooth: (null): Invalid header checksum [ 549.744992][ T24] usb 4-1: device descriptor read/8, error -32 [ 549.830228][ T1939] Bluetooth: (null): Invalid header checksum [ 549.938120][T17779] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2439'. [ 549.979698][ T37] usb 6-1: USB disconnect, device number 37 [ 549.991139][ T24] usb 4-1: reset high-speed USB device number 95 using dummy_hcd [ 550.008775][T17788] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2440'. [ 550.060024][ T24] usb 4-1: device descriptor read/8, error -32 [ 550.125727][T17799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.134532][T17799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.177694][ T24] raw-gadget.0 gadget.3: failed to queue suspend event [ 550.196070][ T5873] usb 4-1: USB disconnect, device number 95 [ 550.239429][ T5873] raw-gadget.0 gadget.3: failed to queue reset event [ 550.315713][ T5873] raw-gadget.0 gadget.3: failed to queue resume event [ 550.385117][ T5873] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 550.393441][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 550.409417][ T5873] raw-gadget.0 gadget.3: failed to queue reset event [ 550.484737][ T5873] raw-gadget.0 gadget.3: failed to queue resume event [ 550.544825][ T5874] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 550.557622][ T5873] usb 4-1: device descriptor read/64, error -32 [ 550.583839][T17869] loop5: detected capacity change from 0 to 7 [ 550.600374][ T8233] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 550.605838][ T8233] loop5: partition table partially beyond EOD, truncated [ 550.615555][ T8233] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 550.643045][T17874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.652619][T17869] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 550.655899][T17874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.660794][T17869] loop5: partition table partially beyond EOD, [ 550.666822][ T5873] raw-gadget.0 gadget.3: failed to queue suspend event [ 550.668885][T17869] truncated [ 550.673628][ T5873] raw-gadget.0 gadget.3: failed to queue reset event [ 550.683134][T17869] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 550.700634][T17874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.712103][ T5874] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.722776][T17874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.731592][ T5874] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 550.743153][ T5874] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 550.752596][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 550.765498][ T5873] raw-gadget.0 gadget.3: failed to queue resume event [ 550.771445][ T8233] udevd[8233]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 550.772626][ T5874] usb 6-1: SerialNumber: syz [ 550.844717][ T5873] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 550.855568][ T8233] udevd[8233]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 550.870722][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 550.881783][ T5873] raw-gadget.0 gadget.3: failed to queue reset event [ 550.965146][ T5873] raw-gadget.0 gadget.3: failed to queue resume event [ 551.027835][ T5873] usb 4-1: device descriptor read/64, error -32 [ 551.049676][ T5874] usb 6-1: skipping empty audio interface (v1) [ 551.129659][ T5874] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 551.144336][ T5874] usb 6-1: USB disconnect, device number 38 [ 551.164816][ T5873] raw-gadget.0 gadget.3: failed to queue suspend event [ 551.172065][ T5873] usb usb4-port1: attempt power cycle [ 551.179550][ T8233] udevd[8233]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 551.204192][ T5873] raw-gadget.0 gadget.3: failed to queue disconnect event [ 551.212327][ T5873] raw-gadget.0 gadget.3: failed to queue reset event [ 551.294782][ T5873] raw-gadget.0 gadget.3: failed to queue resume event [ 551.303182][ T5873] raw-gadget.0 gadget.3: failed to queue reset event [ 551.324701][ T37] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 551.472889][T17941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.483808][ T37] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 551.486092][T17941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.493524][ T37] usb 7-1: config 0 has no interface number 0 [ 551.508384][ T37] usb 7-1: config 0 interface 41 has no altsetting 0 [ 551.515408][ T5873] raw-gadget.0 gadget.3: failed to queue resume event [ 551.525200][ T37] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 551.534320][ T37] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.542784][ T37] usb 7-1: Product: syz [ 551.547983][ T37] usb 7-1: Manufacturer: syz [ 551.553472][ T37] usb 7-1: SerialNumber: syz [ 551.560978][ T37] usb 7-1: config 0 descriptor?? [ 551.576604][ T5873] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 551.606075][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 551.627308][ T5873] usb 4-1: device descriptor read/8, error -32 [ 551.734795][ T5873] raw-gadget.0 gadget.3: failed to queue suspend event [ 551.762440][ T5873] raw-gadget.0 gadget.3: failed to queue reset event [ 551.844743][ T5873] raw-gadget.0 gadget.3: failed to queue resume event [ 551.906277][ T5873] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 551.925021][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 551.932209][ T5873] usb 4-1: device descriptor read/8, error -32 [ 552.049145][ T5873] raw-gadget.0 gadget.3: failed to queue suspend event [ 552.058924][ T5873] usb usb4-port1: unable to enumerate USB device [ 552.133171][T17984] fuse: Bad value for 'user_id' [ 552.138894][T17984] fuse: Bad value for 'user_id' syzkaller syzkaller login: [ 552.193296][T17986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.203114][T17986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.215058][T17986] binder: BINDER_SET_CONTEXT_MGR already set [ 552.222130][T17986] binder: 17985:17986 ioctl 4018620d 2000000000c0 returned -16 [ 552.377298][ T37] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 552.874233][ T37] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 552.888967][ T37] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 552.903889][ T37] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71 [ 552.918347][ T37] usb 7-1: USB disconnect, device number 29 [ 552.959949][T18006] netlink: zone id is out of range [ 552.967497][T18006] netlink: set zone limit has 8 unknown bytes [ 552.986892][T18006] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 553.416778][T18008] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2466'. [ 553.425870][T18008] netlink: 312 bytes leftover after parsing attributes in process `syz.6.2466'. [ 553.560588][T18013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.571416][T18013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.688482][T18019] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 553.701037][T18019] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 553.711382][T18019] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 553.720411][T18019] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 553.968182][T18032] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2472'. [ 554.304658][ T9586] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 554.473505][ T9586] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.495136][ T9586] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 554.504205][ T9586] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.521064][ T9586] usb 7-1: config 0 descriptor?? [ 554.594841][ T11] block nbd1: Possible stuck request ffff888025288000: control (read@0,1024B). Runtime 90 seconds [ 554.605625][ T11] block nbd1: Possible stuck request ffff888025288200: control (read@1024,1024B). Runtime 90 seconds [ 554.616584][ T11] block nbd1: Possible stuck request ffff888025288400: control (read@2048,1024B). Runtime 90 seconds [ 554.636464][T18062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2476'. [ 554.644907][ T11] block nbd1: Possible stuck request ffff888025288600: control (read@3072,1024B). Runtime 90 seconds [ 554.729476][T18039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.738584][T18039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.748577][T18039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.757379][T18039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.766356][T18039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.775876][T18039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.784430][T18039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy syzkaller[ 554.794413][T18039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 syzkaller login: [ 554.804048][T18039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.813306][T18039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.849592][ T9586] usbhid 7-1:0.0: can't add hid device: -71 [ 554.857472][ T9586] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 554.873909][ T9586] usb 7-1: USB disconnect, device number 30 [ 555.037446][ T7953] IPVS: starting estimator thread 0... [ 555.131027][T18101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.145926][T18094] IPVS: using max 29 ests per chain, 69600 per kthread [ 555.156534][T18101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.192173][T18109] veth1_to_bond: entered allmulticast mode [ 555.245747][T18108] veth1_to_bond: left allmulticast mode [ 555.302391][T18115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.317215][T18115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.375148][ T9586] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 555.473889][T18130] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2484'. [ 555.484247][T18130] openvswitch: netlink: Missing key (keys=40, expected=80) [ 555.533814][T18134] pim6reg1: entered promiscuous mode [ 555.540155][T18134] pim6reg1: entered allmulticast mode [ 555.547264][ T9586] usb 7-1: Using ep0 maxpacket: 16 [ 555.556938][ T9586] usb 7-1: config 0 descriptor has 1 excess byte, ignoring [ 555.564386][ T9586] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 555.594782][ T9586] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 555.624725][ T9586] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 223 [ 555.641678][ T9586] usb 7-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 555.662352][ T9586] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.672704][ T9586] usb 7-1: Product: syz [ 555.677004][ T9586] usb 7-1: Manufacturer: syz [ 555.681736][ T9586] usb 7-1: SerialNumber: syz [ 555.711185][ T9586] usb 7-1: config 0 descriptor?? [ 555.718861][T18100] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 555.726604][T18100] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 555.754709][ C0] mcba_usb 7-1:0.0 can0: Tx URB aborted (-71) [ 555.761278][ T9586] mcba_usb 7-1:0.0: Microchip CAN BUS Analyzer connected [ 555.768565][ C0] mcba_usb 7-1:0.0 can0: Tx URB aborted (-71) [ 555.830627][T18159] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2488'. [ 555.845955][T18160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.866992][T18160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.936387][ T9586] usb 7-1: USB disconnect, device number 31 [ 555.955119][ T9586] mcba_usb 7-1:0.0 can0: device disconnected [ 556.026832][ T7953] usb 6-1: new high-speed USB device number 39 using dummy_hcd syzkaller syzkaller login: [ 556.194650][ T7953] usb 6-1: Using ep0 maxpacket: 16 [ 556.206632][ T7953] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.223843][ T7953] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 556.233317][ T7953] usb 6-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 556.243515][ T7953] usb 6-1: Product: syz [ 556.255286][ T7953] usb 6-1: config 0 descriptor?? [ 556.267216][ T7953] gspca_main: spca501-2.14.0 probing 0000:0000 [ 556.538104][T18140] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2486'. [ 556.597616][T18198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2489'. [ 556.621675][T18198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.632067][T18198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.854714][ T5881] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 556.876620][ T7953] gspca_spca501: reg write: error -71 [ 556.882013][ T7953] spca501 6-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 556.891132][ T7953] spca501 6-1:0.0: probe with driver spca501 failed with error -22 [ 556.903902][ T7953] usb 6-1: USB disconnect, device number 39 [ 557.006675][ T5881] usb 7-1: config 4 has an invalid interface number: 84 but max is 0 [ 557.014982][ T5881] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 557.025229][ T5881] usb 7-1: config 4 has no interface number 0 [ 557.031327][ T5881] usb 7-1: too many endpoints for config 4 interface 84 altsetting 162: 241, using maximum allowed: 30 [ 557.042513][ T5881] usb 7-1: config 4 interface 84 altsetting 162 has 0 endpoint descriptors, different from the interface descriptor's value: 241 [ 557.056276][ T5881] usb 7-1: config 4 interface 84 has no altsetting 0 [ 557.062992][ T5881] usb 7-1: New USB device found, idVendor=0005, idProduct=0000, bcdDevice=5d.18 [ 557.072216][ T5881] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.493884][T18237] openvswitch: netlink: IP tunnel dst address not specified [ 557.693600][T18207] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2490'. [ 557.708315][ T5881] usb 7-1: string descriptor 0 read error: -71 [ 557.736335][ T5881] usb 7-1: USB disconnect, device number 32 [ 557.996951][T17736] raw-gadget.0 gadget.3: failed to queue disconnect event [ 558.188184][T18286] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 558.204119][T18286] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 558.215053][T18286] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 558.224096][T18286] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 558.239746][T18286] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 558.414261][T18295] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2499'. [ 558.425644][T18296] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2499'. [ 558.517560][T18300] overlay: Unknown parameter 'euid' [ 558.693911][T18282] chnl_net:caif_netlink_parms(): no params data found [ 558.791818][T18282] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.800417][T18282] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.808624][T18282] bridge_slave_0: entered allmulticast mode [ 558.823105][T18282] bridge_slave_0: entered promiscuous mode [ 558.832020][T18282] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.839603][T18282] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.846887][T18282] bridge_slave_1: entered allmulticast mode [ 558.854000][T18282] bridge_slave_1: entered promiscuous mode [ 558.854941][ T24] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 558.897048][T18282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.908952][T18282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.953481][T18282] team0: Port device team_slave_0 added [ 558.961559][T18282] team0: Port device team_slave_1 added [ 559.006533][T18282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.013513][T18282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.040641][T18282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.060179][ T24] usb 7-1: config 0 has an invalid interface number: 122 but max is 0 [ 559.060352][T18282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.075634][T18282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.101653][ T24] usb 7-1: config 0 has no interface number 0 [ 559.101694][ T24] usb 7-1: config 0 interface 122 has no altsetting 0 [ 559.115788][T18282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.117615][ T24] usb 7-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 559.137604][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.146088][ T24] usb 7-1: Product: syz [ 559.150725][ T24] usb 7-1: Manufacturer: syz [ 559.155533][ T24] usb 7-1: SerialNumber: syz [ 559.164161][ T24] usb 7-1: config 0 descriptor?? [ 559.262481][T18282] hsr_slave_0: entered promiscuous mode [ 559.270876][T18282] hsr_slave_1: entered promiscuous mode [ 559.277974][T18282] debugfs: 'hsr0' already exists in 'hsr' [ 559.283723][T18282] Cannot create hsr debugfs directory [ 559.384275][T18370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.413595][T18370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.504758][ T5874] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 559.510379][T18282] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.604429][T18282] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.629607][ T7953] usb 7-1: USB disconnect, device number 33 [ 559.636628][ T7953] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 559.676586][ T5874] usb 6-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 93, changing to 10 [ 559.688150][ T5874] usb 6-1: config 1 interface 0 has no altsetting 0 [ 559.691352][T18282] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.710656][ T5874] usb 6-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 559.720806][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.729004][ T5874] usb 6-1: Product: syz [ 559.733258][ T5874] usb 6-1: Manufacturer: syz [ 559.738321][ T5874] usb 6-1: SerialNumber: syz [ 559.941805][T18282] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 559.959159][T18282] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 559.972773][ T5874] usbhid 6-1:1.0: can't add hid device: -71 [ 559.979059][ T5874] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 559.982968][T18282] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 559.990529][ T5874] usb 6-1: USB disconnect, device number 40 [ 560.012166][T18282] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 560.092665][T18282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.112798][T18282] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.126282][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.133525][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.149653][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.156874][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.335653][T18286] Bluetooth: hci5: command tx timeout [ 560.376215][T18282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.418216][T18282] veth0_vlan: entered promiscuous mode [ 560.431820][T18282] veth1_vlan: entered promiscuous mode [ 560.462627][T18282] veth0_macvtap: entered promiscuous mode [ 560.472598][T18282] veth1_macvtap: entered promiscuous mode [ 560.498207][T18282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.520171][T18282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.527577][ T7953] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 560.563474][ T3889] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.593283][ T3889] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.626212][ T3889] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.648937][T15747] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.675487][ T7953] usb 7-1: device descriptor read/64, error -71 [ 560.784085][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.809754][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.845615][T16860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.861328][T16860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.935007][ T7953] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 561.084736][ T7953] usb 7-1: device descriptor read/64, error -71 [ 561.195942][ T7953] usb usb7-port1: attempt power cycle [ 561.219391][ T5873] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 561.377470][ T5873] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 561.404738][ T5873] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 561.418029][ T5873] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 561.430527][ T5873] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 561.439969][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.448351][ T5873] usb 4-1: Product: syz [ 561.452640][ T5873] usb 4-1: Manufacturer: syz [ 561.461898][ T5873] usb 4-1: SerialNumber: syz [ 561.478238][ T5873] usb 4-1: config 0 descriptor?? [ 561.487462][T18720] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 561.495075][T18720] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 561.506196][ T5873] usb 4-1: ucan: probing device on interface #0 [ 561.564787][ T7953] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 561.595433][ T7953] usb 7-1: device descriptor read/8, error -71 [ 561.706494][ T5873] usb 4-1: ucan: device protocol version 0 is not supported [ 561.714212][ T5873] usb 4-1: ucan: probe failed; try to update the device firmware [ 561.854912][ T7953] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 561.875807][ T5873] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 561.877310][ T7953] usb 7-1: device descriptor read/8, error -71 [ 561.995097][ T7953] usb usb7-port1: unable to enumerate USB device [ 562.040786][ T5873] usb 6-1: config 0 interface 0 has no altsetting 0 [ 562.047772][ T5873] usb 6-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 562.058795][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.070752][ T5873] usb 6-1: config 0 descriptor?? [ 562.414932][T18286] Bluetooth: hci5: command tx timeout [ 562.488631][T18750] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 562.491677][ T5873] hid-rmi 0003:0461:4E72.002D: unknown main item tag 0x4 [ 562.503779][T18750] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 562.553110][ T5873] hid-rmi 0003:0461:4E72.002D: hidraw0: USB HID v0.fd Device [HID 0461:4e72] on usb-dummy_hcd.5-1/input0 [ 562.625738][T18758] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2510'. [ 562.635103][T18758] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 562.691353][ T5873] usb 6-1: USB disconnect, device number 41 [ 562.870169][T18776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2511'. [ 562.902720][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.910606][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.409213][ T5874] usb 4-1: USB disconnect, device number 100 [ 564.494953][ T5835] Bluetooth: hci5: command tx timeout [ 564.524772][ T24] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 564.654908][ T7953] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 564.674664][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 564.681545][ T24] usb 4-1: config 2 has an invalid interface number: 81 but max is 0 [ 564.690002][ T24] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 564.701009][ T24] usb 4-1: config 2 has no interface number 0 [ 564.704804][ T9586] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 564.710872][ T24] usb 4-1: config 2 interface 81 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 564.727701][ T24] usb 4-1: New USB device found, idVendor=2639, idProduct=0011, bcdDevice=2f.c1 [ 564.736990][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.824794][ T7953] usb 7-1: Using ep0 maxpacket: 8 [ 564.832177][ T7953] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 564.843103][ T7953] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 564.852137][ T9586] usb 6-1: device descriptor read/64, error -71 [ 564.858604][ T7953] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.870853][ T7953] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 564.880006][ T7953] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.897154][ T7953] hub 7-1:1.0: bad descriptor, ignoring hub [ 564.903106][ T7953] hub 7-1:1.0: probe with driver hub failed with error -5 [ 564.913142][ T7953] cdc_wdm 7-1:1.0: skipping garbage [ 564.918452][ T7953] cdc_wdm 7-1:1.0: skipping garbage [ 564.923728][ T7953] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 564.951830][ T24] usb 4-1: string descriptor 0 read error: -71 [ 564.968701][ T24] usb 4-1: USB disconnect, device number 101 [ 564.975106][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 565.104681][ T9586] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 565.204935][ T24] usb 7-1: USB disconnect, device number 38 [ 565.234666][ T9586] usb 6-1: device descriptor read/64, error -71 [ 565.346053][ T9586] usb usb6-port1: attempt power cycle [ 565.694927][ T9586] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 565.725478][ T9586] usb 6-1: device descriptor read/8, error -71 [ 565.974685][ T9586] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 565.995356][ T9586] usb 6-1: device descriptor read/8, error -71 [ 566.100757][T18924] IPVS: set_ctl: invalid protocol: 33 10.1.1.2:20001 [ 566.107817][ T9586] usb usb6-port1: unable to enumerate USB device [ 566.118769][T18924] CIFS mount error: No usable UNC path provided in device string! [ 566.118769][T18924] [ 566.129126][T18924] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 566.534683][ T9586] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 566.577083][T18286] Bluetooth: hci5: command tx timeout [ 566.694829][ T9586] usb 4-1: Using ep0 maxpacket: 32 [ 566.701982][ T9586] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.713988][ T9586] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.728328][ T9586] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 566.739225][ T9586] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.751187][ T9586] usb 4-1: config 0 descriptor?? [ 567.181864][ T9586] savu 0003:1E7D:2D5A.002E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 567.542158][ T24] usb 4-1: USB disconnect, device number 102 [ 568.201473][T18996] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.2546'. [ 568.227905][T18999] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.2546'. [ 568.694295][T19024] loop8: detected capacity change from 0 to 8 [ 568.702789][T19024] Dev loop8: unable to read RDB block 8 [ 568.708716][T19024] loop8: unable to read partition table [ 568.714694][T19024] loop8: partition table beyond EOD, truncated [ 568.720877][T19024] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 568.934663][ T5874] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 569.096834][ T5874] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 569.110915][ T5874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.120457][T18993] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 569.131503][ T5874] usb 7-1: config 0 descriptor?? [ 569.140216][ T5874] cp210x 7-1:0.0: cp210x converter detected [ 569.264732][T18993] usb 6-1: device descriptor read/64, error -71 [ 569.344708][ T5912] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 569.494819][ T5912] usb 4-1: Using ep0 maxpacket: 32 [ 569.501878][ T5912] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.512958][ T5912] usb 4-1: config 0 interface 0 has no altsetting 0 [ 569.519644][ T5912] usb 4-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 569.524668][T18993] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 569.528792][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.545048][ T5874] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 569.556027][ T5874] cp210x 7-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 569.562759][ T5912] usb 4-1: config 0 descriptor?? [ 569.564788][ T5874] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 569.585683][ T5874] usb 7-1: cp210x converter now attached to ttyUSB0 [ 569.600720][ T5874] usb 7-1: USB disconnect, device number 39 [ 569.617790][ T5874] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 569.628875][ T5874] cp210x 7-1:0.0: device disconnected [ 569.666383][T18993] usb 6-1: device descriptor read/64, error -71 [ 569.777711][T18993] usb usb6-port1: attempt power cycle [ 569.978845][ T5912] lg-g15 0003:046D:C225.002F: ignoring exceeding usage max [ 569.992047][ T5912] lg-g15 0003:046D:C225.002F: hidraw0: USB HID vb.27 Device [HID 046d:c225] on usb-dummy_hcd.3-1/input0 [ 570.115430][T18993] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 570.135310][T18993] usb 6-1: device descriptor read/8, error -71 [ 570.179946][ T5912] usb 4-1: USB disconnect, device number 103 [ 570.324729][ T5874] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 570.387143][T18993] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 570.415449][T18993] usb 6-1: device descriptor read/8, error -71 [ 570.474668][ T5874] usb 7-1: Using ep0 maxpacket: 16 [ 570.481375][ T5874] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.493405][ T5874] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 570.502707][ T5874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.514475][ T5874] usb 7-1: config 0 descriptor?? [ 570.525056][T18993] usb usb6-port1: unable to enumerate USB device [ 570.748550][T19105] netlink: 'syz.4.2557': attribute type 2 has an invalid length. [ 570.779296][T19105] !: entered promiscuous mode [ 570.788771][T19105] netlink: 'syz.4.2557': attribute type 2 has an invalid length. [ 570.797360][T19105] !: left promiscuous mode [ 570.939878][ T5874] mcp2221 0003:04D8:00DD.0030: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 571.334708][ T9586] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 571.356339][T19077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.365251][T19077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.474905][ T5874] usb 7-1: USB disconnect, device number 40 [ 571.484979][ T9586] usb 4-1: Using ep0 maxpacket: 16 [ 571.493309][ T9586] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 571.503699][ T9586] usb 4-1: config 0 has no interface number 0 [ 571.513631][ T9586] usb 4-1: config 0 interface 133 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 571.530163][ T9586] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 571.541598][ T9586] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.549902][ T9586] usb 4-1: Product: syz [ 571.554122][ T9586] usb 4-1: Manufacturer: syz [ 571.559399][ T9586] usb 4-1: SerialNumber: syz [ 571.566740][ T9586] usb 4-1: config 0 descriptor?? [ 571.838771][ T9586] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 571.848241][ T9586] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 571.857768][ T9586] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 571.867000][ T9586] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 571.886141][ T9586] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 571.921129][ T9586] usb 4-1: USB disconnect, device number 104 [ 571.957374][ T9586] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 571.984493][ T9586] keyspan 4-1:0.133: device disconnected [ 572.021447][T19191] xt_NFQUEUE: number of total queues is 0 [ 572.284727][ T5874] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 572.454737][ T5874] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 572.468880][ T5874] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 572.480498][ T5874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 572.491749][ T5874] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 572.512774][ T5874] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 572.522478][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.531464][ T5874] usb 6-1: Product: syz [ 572.537172][ T5874] usb 6-1: Manufacturer: syz [ 572.542541][ T5874] usb 6-1: SerialNumber: syz [ 572.551539][ T5874] usb 6-1: config 0 descriptor?? [ 572.562374][T19193] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 572.644869][ T5874] rc_core: IR keymap rc-imon-rsc not found [ 572.650756][ T5874] Registered IR keymap rc-empty [ 572.658871][ T5874] rc rc0: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 572.669792][ T5874] input: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input70 [ 572.771415][T19193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.781162][T19193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.791823][T19193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.817709][T19193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.830968][T19193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.842022][T19234] comedi comedi2: aio_aio12_8: I/O port conflict (0xb02b,32) [ 572.846923][T19193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.863646][T19193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.874733][ T5874] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 572.891400][T19193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.920802][T19239] netlink: 'syz.3.2571': attribute type 11 has an invalid length. [ 572.935067][ T24] usb 6-1: USB disconnect, device number 50 [ 573.034717][ T5874] usb 7-1: Using ep0 maxpacket: 16 [ 573.041339][ T5874] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.051873][ T5874] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 573.064237][ T5874] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 573.074931][ T5874] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 573.085189][ T5874] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 573.099714][ T5874] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 573.109090][ T5874] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 573.117172][ T5874] usb 7-1: Manufacturer: syz [ 573.123990][ T5874] usb 7-1: config 0 descriptor?? [ 573.284642][ T7953] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 573.397383][ T5874] rc_core: IR keymap rc-hauppauge not found [ 573.403587][ T5874] Registered IR keymap rc-empty [ 573.410944][ T5874] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 573.435961][ T5874] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 573.456592][ T5874] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 573.468156][T19254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.473775][ T5874] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input71 [ 573.479391][T19254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.499795][ T5874] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 573.513257][T19254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.525905][ T5874] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 573.533954][T19254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.574923][ T5874] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 573.602928][ T5874] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 573.624058][ T7953] usb 4-1: unable to get BOS descriptor or descriptor too short [ 573.634808][ T5874] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 573.648293][ T7953] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 573.670252][ T7953] usb 4-1: can't read configurations, error -71 [ 573.677411][T19278] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 573.677411][T19278] The task syz.5.2573 (19278) triggered the difference, watch for misbehavior. [ 573.684701][ T5874] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 573.724790][ T5874] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 573.744760][ T5874] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 573.765695][ T5874] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 573.787680][ T5874] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 573.828053][ T5874] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 573.837156][ T5874] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 573.850313][ T5874] usb 7-1: USB disconnect, device number 41 [ 574.034725][ T7953] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 574.196793][ T7953] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 574.205991][ T7953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.217581][ T7953] usb 4-1: config 0 descriptor?? [ 574.594686][ T10] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 574.625084][ T7953] ath6kl: Unsupported hardware version: 0x0 [ 574.650673][ T7953] ath6kl: Failed to init ath6kl core: -22 [ 574.658197][ T7953] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 574.768564][ T10] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 574.777739][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.786039][ T10] usb 7-1: Product: syz [ 574.790211][ T10] usb 7-1: Manufacturer: syz [ 574.796380][ T10] usb 7-1: SerialNumber: syz [ 574.804986][ T7953] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 574.826022][T19281] overlayfs: missing 'lowerdir' [ 574.838201][T19331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.848685][T19331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.870767][ T5874] usb 4-1: USB disconnect, device number 106 [ 574.967272][ T7953] usb 6-1: unable to get BOS descriptor or descriptor too short [ 574.976331][ T7953] usb 6-1: not running at top speed; connect to a high speed hub [ 574.988927][ T7953] usb 6-1: string descriptor 0 read error: -22 [ 574.995336][ T7953] usb 6-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5c [ 575.006034][ T7953] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=33 [ 575.018471][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 575.030863][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 575.042742][ T7953] usb 6-1: config 0 descriptor?? [ 575.218653][T18286] Bluetooth: hci4: command 0x0406 tx timeout [ 575.234832][ T5874] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 575.258596][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 575.270851][ T7953] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 575.281130][ T7953] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 575.289710][ T7953] dib0700: firmware download failed at 7 with -22 [ 575.296814][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 575.315111][ T7953] usb 6-1: USB disconnect, device number 51 [ 575.321468][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 575.338971][ T10] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -32 [ 575.394673][ T5874] usb 4-1: Using ep0 maxpacket: 16 [ 575.401549][ T5874] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 575.413587][ T5874] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 575.422876][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.431099][ T5874] usb 4-1: Product: syz [ 575.435423][ T5874] usb 4-1: Manufacturer: syz [ 575.440040][ T5874] usb 4-1: SerialNumber: syz [ 575.448048][ T5874] usb 4-1: config 0 descriptor?? [ 575.457786][ T5874] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 575.467571][ T5874] usb 4-1: Detected FT232R [ 575.623081][ T5873] usb 7-1: USB disconnect, device number 42 [ 575.657527][T19343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.669465][T19343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.681546][ T5874] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 575.697584][ T5874] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 575.705345][ T5874] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 575.714386][ T5874] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 575.739399][ T5874] usb 4-1: USB disconnect, device number 107 [ 575.749575][ T5874] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 575.762333][ T5874] ftdi_sio 4-1:0.0: device disconnected [ 576.669524][T19428] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 577.164893][ T30] audit: type=1326 audit(1766330229.352:11343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19467 comm="syz.3.2598" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9152d8f749 code=0x0 [ 577.189588][ T7953] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 577.386047][T19501] netlink: 'syz.6.2604': attribute type 4 has an invalid length. [ 577.393926][T19501] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2604'. [ 577.430989][T19501] binder: 19499:19501 ioctl c0306201 2000000001c0 returned -14 [ 577.439944][T19501] binder: 19499:19501 ioctl c0306201 200000000dc0 returned -14 [ 577.496530][T19504] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2605'. [ 577.821196][T19506] netlink: 'syz.6.2606': attribute type 2 has an invalid length. [ 577.830226][T19506] netlink: 'syz.6.2606': attribute type 9 has an invalid length. [ 577.839327][T19506] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2606'. [ 578.151117][T19543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2609'. [ 578.160323][T19543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2609'. [ 578.170137][T19544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2609'. [ 578.183482][T19544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2609'. [ 578.381943][T19555] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 578.534736][ T845] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 578.685151][ T5873] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 578.707607][ T845] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.718983][ T845] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.730169][ T845] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 578.747248][ T845] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 578.758384][ T845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.771119][ T845] usb 7-1: config 0 descriptor?? [ 578.860504][ T5873] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 578.871180][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.886093][ T5873] usb 4-1: config 0 descriptor?? [ 578.906625][ T5873] cp210x 4-1:0.0: cp210x converter detected [ 579.222313][ T845] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 579.304202][ T845] usb 7-1: USB disconnect, device number 43 [ 579.316198][ T5873] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 579.362951][T19575] fido_id[19575]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 579.599390][ T5873] cp210x 4-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 579.638431][ T5873] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 579.649428][ T5873] usb 4-1: cp210x converter now attached to ttyUSB0 [ 579.658859][ T5873] usb 4-1: USB disconnect, device number 108 [ 579.702684][ T5873] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 579.736719][ T5873] cp210x 4-1:0.0: device disconnected [ 580.055063][ T5873] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 580.224656][ T5873] usb 4-1: Using ep0 maxpacket: 32 [ 580.232347][ T5873] usb 4-1: unable to get BOS descriptor or descriptor too short [ 580.242163][ T5873] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 580.250646][ T5873] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 580.262767][ T5873] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 580.273169][ T5873] usb 4-1: config 128 has no interface number 0 [ 580.280519][ T5873] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 580.292170][ T5873] usb 4-1: config 128 interface 127 has no altsetting 0 [ 580.303070][ T5873] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 580.312844][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.321001][ T5873] usb 4-1: Product: syz [ 580.327089][ T5873] usb 4-1: Manufacturer: syz [ 580.332050][ T5873] usb 4-1: SerialNumber: syz [ 580.552790][T19644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.567972][T19644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.697633][ T5873] usb 4-1: USB disconnect, device number 109 [ 580.749039][ T8233] udevd[8233]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 581.299568][ T5835] Bluetooth: Wrong link type (-71) [ 581.325255][T19674] syzkaller1: entered promiscuous mode [ 581.330962][T19674] syzkaller1: entered allmulticast mode [ 581.342626][T19674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2622'. syzkaller syzkaller login: [ 583.144698][ T845] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 583.244694][ T5912] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 583.297003][ T845] usb 4-1: not running at top speed; connect to a high speed hub [ 583.307186][ T845] usb 4-1: config 0 has an invalid interface number: 75 but max is 2 [ 583.315713][ T845] usb 4-1: config 0 has an invalid interface number: 177 but max is 2 [ 583.324084][ T845] usb 4-1: config 0 has an invalid interface number: 4 but max is 2 [ 583.332592][ T845] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.343471][ T845] usb 4-1: config 0 has no interface number 0 [ 583.350083][ T845] usb 4-1: config 0 has no interface number 1 [ 583.356650][ T845] usb 4-1: config 0 has no interface number 2 [ 583.362798][ T845] usb 4-1: config 0 interface 75 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 583.374516][ T845] usb 4-1: config 0 interface 75 altsetting 12 endpoint 0x9 has invalid maxpacket 1024, setting to 1023 [ 583.392860][ T845] usb 4-1: config 0 interface 75 altsetting 12 endpoint 0xB has invalid maxpacket 1007, setting to 64 [ 583.405212][ T845] usb 4-1: config 0 interface 75 altsetting 12 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 583.417096][ T845] usb 4-1: config 0 interface 75 altsetting 12 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 583.428542][ T845] usb 4-1: config 0 interface 75 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 583.440095][ T845] usb 4-1: config 0 interface 75 altsetting 12 endpoint 0xA has invalid maxpacket 1048, setting to 64 [ 583.452207][ T5912] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 583.452261][ T845] usb 4-1: config 0 interface 177 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 583.467925][ T5912] usb 7-1: config 0 has no interface number 0 [ 583.474481][ T845] usb 4-1: too many endpoints for config 0 interface 4 altsetting 4: 134, using maximum allowed: 30 [ 583.491292][ T845] usb 4-1: config 0 interface 4 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 134 [ 583.506762][ T845] usb 4-1: config 0 interface 75 has no altsetting 0 [ 583.513468][ T845] usb 4-1: config 0 interface 177 has no altsetting 0 [ 583.514734][ T5912] usb 7-1: config 0 interface 67 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 583.520913][ T845] usb 4-1: config 0 interface 4 has no altsetting 0 [ 583.542939][ T845] usb 4-1: New USB device found, idVendor=1410, idProduct=a007, bcdDevice=ee.a0 [ 583.544830][ T5912] usb 7-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 583.552702][ T845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.572518][ T845] usb 4-1: Product: 㓿 [ 583.578193][ T845] usb 4-1: Manufacturer: Ј [ 583.583207][ T845] usb 4-1: SerialNumber: ᖡㆄ铇ଢ㶻毗뷥ꩢ塰ﱗ钏赢㑑輁㈉鐿ኾ蚟ᖭཆઉ뇨謳คᘛ蔛悸翖ꆿ㲔ᚏႵ滉苶䶿臀䇔畢끤殮킒㷲鼑霊䞵莯퀼䰵麎ꮚ獤㓚䨢癃⒓뎫潁髅ﮎ퍊㮃䬹 [ 583.607314][ T5912] usb 7-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=6d.88 [ 583.612692][ T845] usb 4-1: config 0 descriptor?? [ 583.624323][T19731] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 583.644890][ T5912] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.653051][ T5912] usb 7-1: Product: syz [ 583.657275][ T5912] usb 7-1: Manufacturer: syz [ 583.661875][ T5912] usb 7-1: SerialNumber: syz [ 583.670419][ T5912] usb 7-1: config 0 descriptor?? [ 583.846517][T19752] netlink: 4432 bytes leftover after parsing attributes in process `syz.4.2631'. [ 583.860090][T19752] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2631'. [ 583.876856][T19752] sctp: [Deprecated]: syz.4.2631 (pid 19752) Use of int in maxseg socket option. [ 583.876856][T19752] Use struct sctp_assoc_value instead [ 583.919087][ T7953] usb 7-1: USB disconnect, device number 44 [ 584.254285][ T845] usbhid 4-1:0.177: couldn't find an input interrupt endpoint [ 584.281028][ T845] usb 4-1: USB disconnect, device number 110 [ 584.488307][T19784] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2634'. [ 584.674818][ T11] block nbd1: Possible stuck request ffff888025288000: control (read@0,1024B). Runtime 120 seconds [ 584.685984][ T11] block nbd1: Possible stuck request ffff888025288200: control (read@1024,1024B). Runtime 120 seconds [ 584.697083][ T11] block nbd1: Possible stuck request ffff888025288400: control (read@2048,1024B). Runtime 120 seconds [ 584.708164][ T11] block nbd1: Possible stuck request ffff888025288600: control (read@3072,1024B). Runtime 120 seconds syzkaller syzkaller login: [ 586.634798][ T7953] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 586.816503][ T7953] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.834662][ T7953] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 586.864672][ T7953] usb 4-1: New USB device found, idVendor=1b96, idProduct=0003, bcdDevice= 0.00 [ 586.873766][ T7953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.915682][ T7953] usb 4-1: config 0 descriptor?? [ 586.935507][ T7953] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 587.934004][T19817] omfs: Invalid superblock (0) [ 588.178274][T19826] : renamed from vlan0 (while UP) [ 589.487992][T19859] wg2: entered promiscuous mode [ 589.505027][T19859] wg2: entered allmulticast mode [ 589.588544][ T5874] usb 4-1: USB disconnect, device number 111 [ 590.004705][ T5874] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 590.172743][ T5874] usb 4-1: device descriptor read/64, error -71 [ 590.265180][T19874] overlayfs: failed to resolve './file2': -2 [ 590.434822][ T5874] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 590.584647][ T5874] usb 4-1: device descriptor read/64, error -71 [ 590.695089][ T5874] usb usb4-port1: attempt power cycle [ 590.715074][ T9586] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 590.874785][ T9586] usb 7-1: Using ep0 maxpacket: 8 [ 590.883704][ T9586] usb 7-1: config 9 has an invalid interface number: 200 but max is 1 [ 590.900066][ T9586] usb 7-1: config 9 has an invalid interface descriptor of length 7, skipping [ 590.919457][ T9586] usb 7-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 590.938856][ T9586] usb 7-1: config 9 has an invalid interface number: 58 but max is 1 [ 590.956074][ T9586] usb 7-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 590.978784][ T9586] usb 7-1: config 9 has no interface number 0 [ 590.993445][ T9586] usb 7-1: config 9 has no interface number 1 [ 591.000138][ T9586] usb 7-1: config 9 interface 200 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 591.013743][ T9586] usb 7-1: config 9 interface 58 altsetting 4 endpoint 0xE has an invalid bInterval 231, changing to 7 [ 591.025600][ T9586] usb 7-1: config 9 interface 58 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 591.036804][ T9586] usb 7-1: config 9 interface 58 altsetting 4 endpoint 0x9 has invalid maxpacket 1592, setting to 64 [ 591.048226][ T9586] usb 7-1: config 9 interface 58 altsetting 4 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 591.067770][ T5874] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 591.070009][ T9586] usb 7-1: config 9 interface 58 altsetting 4 has 5 endpoint descriptors, different from the interface descriptor's value: 9 [ 591.090286][ T9586] usb 7-1: config 9 interface 200 has no altsetting 0 [ 591.097467][ T9586] usb 7-1: config 9 interface 58 has no altsetting 0 [ 591.106048][ T5874] usb 4-1: device descriptor read/8, error -71 [ 591.116180][ T9586] usb 7-1: New USB device found, idVendor=041e, idProduct=3f04, bcdDevice=ec.b1 [ 591.125530][ T9586] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.133637][ T9586] usb 7-1: Product: syz [ 591.138636][ T9586] usb 7-1: Manufacturer: syz [ 591.143407][ T9586] usb 7-1: SerialNumber: syz [ 591.151775][ T9586] usb 7-1: Interface #200 referenced by multiple IADs [ 591.344671][ T5874] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 591.376862][ T5874] usb 4-1: device descriptor read/8, error -71 [ 591.504740][ T5874] usb usb4-port1: unable to enumerate USB device [ 591.857006][ T9586] usb 7-1: unknown interface protocol 0xb6, assuming v1 [ 591.874587][ T9586] usb 7-1: cannot find UAC_HEADER [ 591.977495][ T9586] snd-usb-audio 7-1:9.200: probe with driver snd-usb-audio failed with error -22 [ 592.017986][ T9586] usb 7-1: USB disconnect, device number 45 [ 592.072555][ T8233] udevd[8233]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:9.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 592.284771][ T10] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 592.444747][ T10] usb 6-1: device descriptor read/64, error -71 [ 592.614683][ T9586] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 592.684783][ T10] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 592.765091][ T9586] usb 7-1: Using ep0 maxpacket: 8 [ 592.775557][ T9586] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 592.787005][ T9586] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 592.799915][ T9586] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 592.809978][ T9586] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 592.822864][ T10] usb 6-1: device descriptor read/64, error -71 [ 592.829752][ T9586] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 592.841761][ T9586] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 592.851179][ T9586] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.871451][ T9586] usb 7-1: config 0 descriptor?? [ 592.891770][T19912] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 592.935366][ T10] usb usb6-port1: attempt power cycle [ 593.135173][T18286] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 593.135344][ C1] Bluetooth: hci3: Unexpected continuation: 1 bytes [ 593.142638][T18286] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 593.157494][T18286] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 593.164332][T18286] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 593.176892][T18286] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 593.189061][T18286] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 593.197189][T18286] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 593.205982][T18286] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 593.212836][T18286] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 593.222715][T18286] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 593.230785][T18286] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 593.237943][T18286] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 593.245136][T18286] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 593.251965][T18286] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 593.258848][T18286] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 593.265747][T18286] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 593.272575][T18286] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 593.280070][T18286] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 593.286943][ T10] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 593.294787][T18286] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 593.301760][T18286] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 593.309660][T18286] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 593.319535][T18286] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 593.326555][T18286] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 593.334229][T18286] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 593.341822][T18286] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 593.348751][T18286] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 593.355769][T18286] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 593.362599][T18286] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 593.369566][T18286] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 593.395214][ T10] usb 6-1: device descriptor read/8, error -71 [ 593.429665][ T5835] Bluetooth: hci3: Opcode 0x0c03 failed: -71 [ 593.432305][ T5881] usb 7-1: USB disconnect, device number 46 [ 593.617714][ T9586] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 593.636076][ T10] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 593.657549][ T10] usb 6-1: device descriptor read/8, error -71 [ 593.765491][ T10] usb usb6-port1: unable to enumerate USB device [ 593.775027][ T9586] usb 4-1: Using ep0 maxpacket: 16 [ 593.781912][ T9586] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.792976][ T9586] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.802946][ T9586] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 593.815892][ T9586] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 593.825003][ T9586] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.834992][ T9586] usb 4-1: config 0 descriptor?? [ 594.224704][ T845] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 594.376929][ T845] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.387985][ T845] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 594.404087][ T845] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 594.413242][ T845] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.421748][ T845] usb 7-1: Product: syz [ 594.426164][ T845] usb 7-1: Manufacturer: syz [ 594.430820][ T845] usb 7-1: SerialNumber: syz syzkaller syzkaller login: [ 594.452251][ T9586] usbhid 4-1:0.0: can't add hid device: -71 [ 594.464480][ T9586] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 594.475879][ T9586] usb 4-1: USB disconnect, device number 116 [ 594.643153][T19973] tipc: Enabling of bearer rejected, failed to enable media [ 594.663446][ T845] cdc_ncm 7-1:1.0: bind() failure [ 594.675535][ T845] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 594.682420][ T845] cdc_ncm 7-1:1.1: bind() failure [ 594.694511][ T845] usb 7-1: USB disconnect, device number 47 [ 595.119845][T20010] comedi comedi3: 8255: I/O port conflict (0x4004f27,4) [ 595.218033][T20018] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2663'. [ 595.254865][ T845] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 595.407097][ T845] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 595.417597][ T845] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 595.426984][ T5874] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 595.434661][ T845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.452407][ T845] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 595.474724][ T5881] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 595.584670][ T5874] usb 6-1: Using ep0 maxpacket: 32 [ 595.592179][ T5874] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 595.602751][ T5874] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 595.614013][ T5874] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 595.623609][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.630017][ T5881] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 595.631676][ T5874] usb 6-1: Product: syz [ 595.641214][ T5881] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.645077][ T5874] usb 6-1: Manufacturer: ᠉ [ 595.658830][ T5874] usb 6-1: SerialNumber: syz [ 595.663642][ T5881] usb 7-1: Product: syz [ 595.673180][ T5881] usb 7-1: Manufacturer: syz [ 595.677938][ T5881] usb 7-1: SerialNumber: syz [ 596.074423][T20013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.083897][T20013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.101247][ T5874] usb 6-1: 0:2 : does not exist [ 596.157373][ T5874] usb 6-1: USB disconnect, device number 57 [ 596.187707][ T8233] udevd[8233]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 596.309994][ T5881] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 596.324974][ T5881] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 596.341452][ T5881] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 596.352150][ T5881] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 596.366093][ T5881] usb 7-1: USB disconnect, device number 48 [ 596.495864][ T845] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 596.686204][T20065] fuse: Bad value for 'fd' [ 596.696798][ T845] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 596.709671][ T845] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 596.718963][ T845] usb 4-1: USB disconnect, device number 117 [ 596.848616][T20077] cgroup: Unknown subsys name 'cpuset' [ 596.909573][T20080] mac80211_hwsim hwsim36 : renamed from wlan1 (while UP) [ 597.041279][T20094] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2670'. [ 597.214853][ T845] usb 7-1: new full-speed USB device number 49 using dummy_hcd [ 597.334771][ T9586] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 597.368239][ T845] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 597.371102][ T845] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 597.371132][ T845] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.371152][ T845] usb 7-1: Product: syz [ 597.371167][ T845] usb 7-1: Manufacturer: syz [ 597.371182][ T845] usb 7-1: SerialNumber: syz [ 597.382230][ T845] usb 7-1: config 0 descriptor?? [ 597.464717][ T9586] usb 6-1: device descriptor read/64, error -71 [ 597.628087][ T845] usb 7-1: USB disconnect, device number 49 [ 597.704671][ T9586] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 597.844699][ T9586] usb 6-1: device descriptor read/64, error -71 [ 597.954967][ T9586] usb usb6-port1: attempt power cycle [ 598.294707][ T9586] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 598.311993][T20143] syzkaller1: entered promiscuous mode [ 598.316137][ T9586] usb 6-1: device descriptor read/8, error -71 [ 598.317766][T20143] syzkaller1: entered allmulticast mode [ 598.337208][T20143] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2676'. [ 598.426794][ T845] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 598.462181][T20159] overlayfs: failed to resolve './file0': -2 [ 598.564720][ T9586] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 598.585837][ T9586] usb 6-1: device descriptor read/8, error -71 [ 598.604768][ T845] usb 7-1: Using ep0 maxpacket: 32 [ 598.611873][ T845] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 598.622578][ T845] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 598.634492][ T845] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 598.652007][ T845] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 598.670216][ T845] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 598.679442][ T845] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.687657][ T845] usb 7-1: Product: syz [ 598.691867][ T845] usb 7-1: Manufacturer: syz [ 598.696233][ T9586] usb usb6-port1: unable to enumerate USB device [ 598.696784][ T845] usb 7-1: SerialNumber: syz [ 598.715741][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 598.728815][ T845] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input73 [ 598.894807][ T9586] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 598.924809][ T845] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 598.933228][ T845] (id 0x00) [ 598.987143][ T845] rc_core: IR keymap rc-imon-pad not found [ 598.992971][ T845] Registered IR keymap rc-empty [ 598.999109][ T845] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 599.009534][ T845] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 599.034687][ T9586] usb 4-1: device descriptor read/64, error -71 [ 599.140166][ T845] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 599.152591][ T845] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input74 [ 599.169317][ T845] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:50> initialized [ 599.284657][ T9586] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 599.434657][ T9586] usb 4-1: device descriptor read/64, error -71 [ 599.545655][ T9586] usb usb4-port1: attempt power cycle [ 599.894740][ T9586] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 599.916214][ T9586] usb 4-1: device descriptor read/8, error -71 [ 600.078477][T20184] imon:send_packet: packet tx failed (-71) [ 600.078811][ T10] usb 7-1: USB disconnect, device number 50 [ 600.104925][T20184] imon:vfd_write: send packet #2 failed [ 600.176232][ T9586] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 600.215253][ T9586] usb 4-1: device descriptor read/8, error -71 [ 600.325590][ T9586] usb usb4-port1: unable to enumerate USB device [ 600.565786][ T1140] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.651447][ T1140] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.730037][ T1140] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.830350][ T1140] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.887707][T20218] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 600.903586][T20218] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 600.912774][T20218] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 600.923656][T20218] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 600.931382][T20218] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 601.016580][T20226] syzkaller1: entered promiscuous mode [ 601.022303][T20226] syzkaller1: entered allmulticast mode [ 601.120953][T20249] 8021q: VLANs not supported on syzkaller1 [ 601.206376][ T1140] bridge_slave_1: left allmulticast mode [ 601.214315][ T1140] bridge_slave_1: left promiscuous mode [ 601.223398][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.233449][ T1140] bridge_slave_0: left allmulticast mode [ 601.239540][ T1140] bridge_slave_0: left promiscuous mode [ 601.245493][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.798432][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.826141][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.838276][ T1140] bond0 (unregistering): Released all slaves [ 602.169813][T20215] chnl_net:caif_netlink_parms(): no params data found [ 602.234680][ T10] usb 4-1: new full-speed USB device number 122 using dummy_hcd [ 602.396719][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 602.405361][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 602.420743][ T10] usb 4-1: config 2 has an invalid interface number: 173 but max is 0 [ 602.420802][T18286] Bluetooth: hci5: command 0x0405 tx timeout [ 602.429463][ T10] usb 4-1: config 2 has no interface number 0 [ 602.442458][ T10] usb 4-1: config 2 interface 173 has no altsetting 0 [ 602.456886][ T1140] hsr_slave_0: left promiscuous mode [ 602.462411][ T10] usb 4-1: New USB device found, idVendor=413c, idProduct=7385, bcdDevice=b0.57 [ 602.471509][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.471573][ T1140] hsr_slave_1: left promiscuous mode [ 602.479629][ T10] usb 4-1: Product: syz [ 602.479646][ T10] usb 4-1: Manufacturer: syz [ 602.479667][ T10] usb 4-1: SerialNumber: syz [ 602.504444][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 602.512650][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.520985][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.528536][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.563840][ T1140] veth1_macvtap: left promiscuous mode [ 602.569999][ T1140] veth0_macvtap: left promiscuous mode [ 602.583077][ T1140] veth1_vlan: left promiscuous mode [ 602.591991][ T1140] veth0_vlan: left promiscuous mode [ 602.858674][ T10] usb 4-1: USB disconnect, device number 122 [ 602.978094][ T5835] Bluetooth: hci0: command tx timeout [ 603.572019][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 603.647739][ T1140] team0 (unregistering): Port device team_slave_0 removed syzkaller syzkaller login: [ 604.498102][T20215] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.525925][T20215] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.559157][T20215] bridge_slave_0: entered allmulticast mode [ 604.584424][T20215] bridge_slave_0: entered promiscuous mode [ 604.642828][T20215] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.661705][T20215] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.685372][T20215] bridge_slave_1: entered allmulticast mode [ 604.702870][T20215] bridge_slave_1: entered promiscuous mode [ 604.711659][T20486] syzkaller1: entered promiscuous mode [ 604.717357][T20486] syzkaller1: entered allmulticast mode [ 604.727046][T20494] tipc: Started in network mode [ 604.747327][T20494] tipc: Node identity 1e5f58b9ce81, cluster identity 4711 [ 604.766029][T20494] tipc: Enabled bearer , priority 0 [ 604.817666][T20489] syzkaller0: entered promiscuous mode [ 604.823652][T20489] syzkaller0: entered allmulticast mode [ 604.836284][T20494] tipc: Resetting bearer [ 604.883343][T20494] tipc: Disabling bearer [ 605.042018][T20215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.055542][ T5835] Bluetooth: hci0: command tx timeout [ 605.062564][T20526] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 605.070482][T20526] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 1th superblock [ 605.074509][T20215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.079862][T20526] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 605.112729][T20534] mkiss: ax0: crc mode is auto. [ 605.116638][T20526] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 2th superblock [ 605.293731][T20215] team0: Port device team_slave_0 added [ 605.306066][T20215] team0: Port device team_slave_1 added [ 605.446399][T20215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.453842][T20215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.502186][T20215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.557751][T20215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.572866][T20215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.601742][T20215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.860076][T20215] hsr_slave_0: entered promiscuous mode [ 605.886075][T20215] hsr_slave_1: entered promiscuous mode [ 606.232138][T20589] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 606.245464][T20589] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 606.260953][T20604] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 606.291557][T20589] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 606.298927][T20589] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 606.331624][T20589] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 606.354382][T20589] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 606.433737][T20589] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 606.475195][T20589] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 606.481267][T20589] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 606.510096][T20589] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 606.551004][T20215] netdevsim netdevsim7 netdevsim0: renamed from eth0 syzkaller syzkaller login: [ 606.595071][T20589] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 606.613725][T20215] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 606.624703][T20589] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 606.638689][T20589] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 606.659662][T20215] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 606.679377][T20215] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 606.879190][T20215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.922377][T20215] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.964406][T16886] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.971701][T16886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.016418][T16860] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.023690][T16860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.383103][T20215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.544978][T18993] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 607.739518][T18993] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 607.758059][T18993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.773429][T20215] veth0_vlan: entered promiscuous mode [ 607.782446][T18993] usb 4-1: Product: syz [ 607.786797][T18993] usb 4-1: Manufacturer: syz [ 607.791394][T18993] usb 4-1: SerialNumber: syz [ 607.809416][T20215] veth1_vlan: entered promiscuous mode [ 607.818903][T18993] usb 4-1: config 0 descriptor?? [ 607.846759][T18993] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 607.911710][T20215] veth0_macvtap: entered promiscuous mode [ 607.924179][T20790] netlink: 294 bytes leftover after parsing attributes in process `syz.6.2715'. [ 607.933810][T20790] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 607.939422][T20215] veth1_macvtap: entered promiscuous mode [ 608.001229][T20215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 608.037809][T20215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 608.059450][T15747] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.080198][T15747] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.104430][T15747] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.119371][T15747] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.177422][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 608.245512][ T7953] usb 7-1: new full-speed USB device number 51 using dummy_hcd [ 608.303794][ T3426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.319158][ T3426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.335098][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 608.335267][T18286] Bluetooth: hci4: command 0x0406 tx timeout [ 608.392077][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.400910][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.406939][ T7953] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 608.427235][ T7953] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 608.475975][ T7953] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 608.489798][ T7953] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.498038][T18286] Bluetooth: hci5: command 0x0405 tx timeout [ 608.507741][ T7953] usb 7-1: Product: syz [ 608.512001][ T7953] usb 7-1: Manufacturer: syz [ 608.516769][ T7953] usb 7-1: SerialNumber: syz [ 608.541916][ T7953] usb 7-1: config 0 descriptor?? [ 608.552590][ T7953] hub 7-1:0.0: bad descriptor, ignoring hub [ 608.559935][ T7953] hub 7-1:0.0: probe with driver hub failed with error -5 [ 608.581730][ T7953] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input75 [ 608.654743][T18286] Bluetooth: hci0: command 0x0419 tx timeout [ 609.186881][T20848] syz.4.2717 (20848): drop_caches: 2 [ 609.243905][T20769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.255978][T20769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.276578][T18993] gspca_sunplus: reg_r err -71 [ 609.281496][T18993] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 609.319493][T18993] usb 4-1: USB disconnect, device number 123 [ 609.462452][ T30] audit: type=1326 audit(1766330261.652:11344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20865 comm="syz.6.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cb038f749 code=0x7ff00000 [ 609.495550][ T30] audit: type=1326 audit(1766330261.652:11345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20865 comm="syz.6.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cb038f749 code=0x7ff00000 [ 609.526342][ T30] audit: type=1326 audit(1766330261.652:11346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20865 comm="syz.6.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cb038f749 code=0x7ff00000 [ 609.551961][ T30] audit: type=1326 audit(1766330261.652:11347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20865 comm="syz.6.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cb038f749 code=0x7ff00000 [ 609.575807][ T30] audit: type=1326 audit(1766330261.652:11348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20865 comm="syz.6.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cb038f749 code=0x7ff00000 [ 609.617476][ T30] audit: type=1326 audit(1766330261.652:11349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20865 comm="syz.6.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cb038f749 code=0x7ff00000 [ 609.643365][ T30] audit: type=1326 audit(1766330261.652:11350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20865 comm="syz.6.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cb038f749 code=0x7ff00000 [ 609.668158][ T30] audit: type=1326 audit(1766330261.652:11351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20865 comm="syz.6.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cb038f749 code=0x7ff00000 [ 609.691816][ T30] audit: type=1326 audit(1766330261.652:11352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20865 comm="syz.6.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cb038f749 code=0x7ff00000 [ 609.717893][ T30] audit: type=1326 audit(1766330261.652:11353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20865 comm="syz.6.2718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cb038f749 code=0x7ff00000 [ 609.751871][ T5916] usb 7-1: USB disconnect, device number 51 [ 609.904890][ T5916] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 610.054665][ T5916] usb 7-1: Using ep0 maxpacket: 16 [ 610.062924][ T5916] usb 7-1: config 251 has an invalid interface number: 202 but max is 0 [ 610.084747][ T5916] usb 7-1: config 251 has no interface number 0 [ 610.091075][ T5916] usb 7-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 610.115007][ T5916] usb 7-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 610.144647][ T5916] usb 7-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 610.164766][ T5916] usb 7-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 610.195324][ T5916] usb 7-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid maxpacket 13688, setting to 1024 [ 610.214702][ T5916] usb 7-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 1024 [ 610.237468][ T5916] usb 7-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 610.256500][T18286] Bluetooth: hci1: command 0x0406 tx timeout [ 610.274633][ T5916] usb 7-1: config 251 interface 202 has no altsetting 0 [ 610.296369][ T5916] usb 7-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 610.314634][ T5916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.322666][ T5916] usb 7-1: Product: syz [ 610.337381][ T5916] usb 7-1: Manufacturer: syz [ 610.342028][ T5916] usb 7-1: SerialNumber: syz [ 610.368259][T20875] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 610.385294][T20875] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 610.414773][T18286] Bluetooth: hci4: command 0x0406 tx timeout [ 610.416638][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 610.477099][T20891] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2721'. [ 610.574950][ T5835] Bluetooth: hci5: command 0x0405 tx timeout [ 610.735307][ T5835] Bluetooth: hci0: command 0x0419 tx timeout [ 610.904696][ T5874] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 611.064684][ T5874] usb 4-1: Using ep0 maxpacket: 32 [ 611.075114][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.087637][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.098715][ T5874] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 611.109423][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.131153][ T5874] usb 4-1: config 0 descriptor?? [ 611.561805][ T5874] ft260 0003:0403:6030.0032: unknown main item tag 0x7 [ 612.398631][ T5916] cxacru 7-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 612.411551][ T5916] cxacru 7-1:251.202: probe with driver cxacru failed with error -22 [ 612.429026][ T5916] usb 7-1: USB disconnect, device number 52 [ 612.495756][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 612.654999][ T5835] Bluetooth: hci5: command 0x0405 tx timeout [ 612.784718][ T5916] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 612.801036][T20937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.810079][T20937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.818520][ T5835] Bluetooth: hci0: command 0x0419 tx timeout [ 612.935943][ T5916] usb 7-1: Using ep0 maxpacket: 32 [ 612.943481][ T5916] usb 7-1: config 0 interface 0 has no altsetting 0 [ 612.950760][ T5916] usb 7-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 612.960946][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.972057][ T5916] usb 7-1: config 0 descriptor?? [ 612.981862][ T5916] usb 7-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 612.997493][ T5916] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 613.010411][ T5916] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 613.018443][ T5916] usb 7-1: media controller created [ 613.032289][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 613.181777][ T5916] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 613.191300][ T5916] error writing reg: 0xff, val: 0x00 [ 613.220081][ T5916] dvb_usb_mxl111sf 7-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 613.901278][ T5874] ft260 0003:0403:6030.0032: failed to retrieve chip version [ 613.925232][ T5874] ft260 0003:0403:6030.0032: probe with driver ft260 failed with error -71 [ 613.958624][ T5874] usb 4-1: USB disconnect, device number 124 [ 614.123235][ T3510] bridge_slave_1: left allmulticast mode [ 614.129191][ T3510] bridge_slave_1: left promiscuous mode [ 614.135342][ T3510] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.145192][ T3510] bridge_slave_0: left allmulticast mode [ 614.150851][ T3510] bridge_slave_0: left promiscuous mode [ 614.156835][ T3510] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.264676][ T5874] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 614.442532][ T5874] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.452838][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 614.463123][ T5874] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 614.476156][ T5874] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 614.485868][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.500194][ T5874] usb 4-1: config 0 descriptor?? [ 614.722936][ T9586] usb 4-1: USB disconnect, device number 125 [ 614.753156][ T11] block nbd1: Possible stuck request ffff888025288000: control (read@0,1024B). Runtime 150 seconds [ 614.773213][ T11] block nbd1: Possible stuck request ffff888025288200: control (read@1024,1024B). Runtime 150 seconds [ 614.784328][ T11] block nbd1: Possible stuck request ffff888025288400: control (read@2048,1024B). Runtime 150 seconds [ 614.799127][ T11] block nbd1: Possible stuck request ffff888025288600: control (read@3072,1024B). Runtime 150 seconds [ 614.829040][ T3510] hsr_slave_0: left promiscuous mode [ 614.837492][ T3510] hsr_slave_1: left promiscuous mode [ 614.843445][ T3510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 614.851363][ T3510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.859908][ T3510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.868235][ T3510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.887827][ T3510] veth1_macvtap: left promiscuous mode [ 614.893361][ T3510] veth0_macvtap: left promiscuous mode [ 614.898926][ T5835] Bluetooth: hci0: command 0x0419 tx timeout [ 615.300769][ T3510] team0 (unregistering): Port device team_slave_1 removed [ 615.362252][ T3510] team0 (unregistering): Port device team_slave_0 removed [ 615.521812][ T9] usb 7-1: USB disconnect, device number 53 [ 615.570654][ T5874] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 615.774645][ T5874] usb 4-1: Using ep0 maxpacket: 32 [ 615.781544][ T5874] usb 4-1: config 2 has an invalid interface number: 45 but max is 0 [ 615.799918][ T5874] usb 4-1: config 2 has no interface number 0 [ 615.806207][ T5874] usb 4-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 615.817432][ T5874] usb 4-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 615.831020][ T5874] usb 4-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 615.840305][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.848472][ T5874] usb 4-1: Product: syz [ 615.852721][ T5874] usb 4-1: Manufacturer: syz [ 615.859972][ T5874] usb 4-1: SerialNumber: syz [ 615.886733][ T5874] kobil_sct 4-1:2.45: KOBIL USB smart card terminal converter detected [ 615.900599][ T5874] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 616.084366][ T5874] usb 4-1: USB disconnect, device number 126 [ 616.120260][ T5874] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 616.134261][ T5874] kobil_sct 4-1:2.45: device disconnected [ 616.321639][T21059] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2733'. [ 616.330744][T21059] netlink: 'syz.4.2733': attribute type 5 has an invalid length. [ 616.524953][ T9] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 616.549242][ T3510] IPVS: stop unused estimator thread 0... [ 616.678152][ T9] usb 7-1: device descriptor read/64, error -71 [ 616.935314][ T9] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 617.086299][ T9] usb 7-1: device descriptor read/64, error -71 [ 617.194982][ T9] usb usb7-port1: attempt power cycle [ 617.554855][ T9] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 617.595661][ T9] usb 7-1: device descriptor read/8, error -71 [ 617.844699][ T9] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 617.888580][ T9] usb 7-1: device descriptor read/8, error -71 [ 617.907792][T21097] netlink: 'syz.7.2739': attribute type 10 has an invalid length. [ 617.921084][T21097] batman_adv: batadv0: Adding interface: netdevsim0 [ 617.929617][T21100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.943441][T21097] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.961428][T21100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.971533][T21097] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 618.026497][ T9] usb usb7-port1: unable to enumerate USB device [ 618.166607][ T9] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 618.278955][T21120] binder: 21118:21120 ioctl c0306201 2000000003c0 returned -14 [ 618.334717][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 618.345664][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 618.354128][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 618.361804][ T9] usb 4-1: can't read configurations, error -71 [ 619.073466][T21145] delete_channel: no stack [ 619.155754][T21154] syzkaller1: entered promiscuous mode [ 619.172160][T21154] syzkaller1: entered allmulticast mode [ 619.207278][T21161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.508551][T21188] netlink: 'syz.6.2749': attribute type 31 has an invalid length. [ 619.516635][T21188] netlink: 'syz.6.2749': attribute type 1 has an invalid length. [ 619.528093][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 619.684845][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 619.705848][ T9] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 619.727992][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.742821][ T9] usb 4-1: Product: syz [ 619.749582][ T9] usb 4-1: Manufacturer: syz [ 619.754217][ T9] usb 4-1: SerialNumber: syz [ 619.771778][ T9] usb 4-1: config 0 descriptor?? [ 619.790860][ T9] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 619.800118][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 619.810320][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 619.821574][ T9] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 619.831737][ T9] usb 4-1: media controller created [ 619.869675][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 619.988407][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 620.018199][T21214] binder: 21213:21214 ioctl c0306201 2000000001c0 returned -22 [ 620.041181][T21216] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2751'. [ 620.050599][T21214] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2751'. [ 620.069794][T21216] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2751'. [ 620.079114][ T9] DVB: Unable to find symbol mt352_attach() [ 620.086291][ T9] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 620.095779][T21216] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 620.114131][T21214] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2751'. [ 620.125846][T21214] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 620.201775][T21154] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2746'. [ 620.311752][ T9] rc_core: IR keymap rc-dvico-portable not found [ 620.336981][ T9] Registered IR keymap rc-empty [ 620.355086][ T9] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 620.398704][ T9] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input76 [ 620.447452][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 620.454451][ T9] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 620.476468][ T9] usb 4-1: USB disconnect, device number 3 [ 620.540224][ T9] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 620.676950][T18993] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 620.835009][T18993] usb 7-1: Using ep0 maxpacket: 32 [ 620.860156][T18993] usb 7-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= d.65 [ 620.869443][T18993] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.878888][T18993] usb 7-1: Product: syz [ 620.883146][T18993] usb 7-1: Manufacturer: syz [ 620.888195][T18993] usb 7-1: SerialNumber: syz [ 620.899055][T18993] usb 7-1: config 0 descriptor?? [ 620.913495][T18993] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 621.216850][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 621.374718][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 621.381818][ T9] usb 4-1: config 0 has an invalid interface number: 145 but max is 1 [ 621.391472][ T9] usb 4-1: config 0 has an invalid interface number: 43 but max is 1 [ 621.399677][ T9] usb 4-1: config 0 has an invalid descriptor of length 107, skipping remainder of the config [ 621.410054][ T9] usb 4-1: config 0 has no interface number 0 [ 621.416345][ T9] usb 4-1: config 0 has no interface number 1 [ 621.422491][ T9] usb 4-1: config 0 interface 43 altsetting 250 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 621.435702][ T9] usb 4-1: config 0 interface 145 has no altsetting 0 [ 621.442480][ T9] usb 4-1: config 0 interface 43 has no altsetting 0 [ 621.451557][ T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=c8.6a [ 621.460909][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.469089][ T9] usb 4-1: Product: syz [ 621.473330][ T9] usb 4-1: Manufacturer: syz [ 621.478013][ T9] usb 4-1: SerialNumber: syz [ 621.485694][ T9] usb 4-1: config 0 descriptor?? [ 621.517411][T21249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.529642][T21249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.543143][T18993] gspca_vc032x: reg_r err -71 [ 621.548462][T18993] gspca_vc032x: I2c Bus Busy Wait 00 [ 621.553769][T18993] gspca_vc032x: I2c Bus Busy Wait 00 [ 621.559825][T18993] gspca_vc032x: I2c Bus Busy Wait 00 [ 621.565316][T18993] gspca_vc032x: I2c Bus Busy Wait 00 [ 621.570699][T18993] gspca_vc032x: I2c Bus Busy Wait 00 [ 621.576711][T18993] gspca_vc032x: I2c Bus Busy Wait 00 [ 621.582024][T18993] gspca_vc032x: I2c Bus Busy Wait 00 [ 621.587445][T18993] gspca_vc032x: I2c Bus Busy Wait 00 [ 621.594352][T18993] gspca_vc032x: I2c Bus Busy Wait 00 [ 621.599785][T18993] gspca_vc032x: I2c Bus Busy Wait 00 [ 621.605240][T18993] gspca_vc032x: I2c Bus Busy Wait 00 [ 621.610628][T18993] gspca_vc032x: I2c Bus Busy Wait 00 [ 621.616097][T18993] gspca_vc032x: I2c Bus Busy Wait 00 [ 621.621441][T18993] gspca_vc032x: I2c Bus Busy Wait 00 [ 621.627794][T18993] gspca_vc032x: I2c Bus Busy Wait 00 [ 621.633105][T18993] gspca_vc032x: I2c Bus Busy Wait 00 [ 621.639048][T18993] gspca_vc032x: I2c Bus Busy Wait 00 [ 621.644355][T18993] gspca_vc032x: I2c Bus Busy Wait 00 [ 621.649807][T18993] gspca_vc032x: I2c Bus Busy Wait 00 [ 621.655150][T18993] gspca_vc032x: Unknown sensor... [ 621.660249][T18993] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 621.675063][T18993] usb 7-1: USB disconnect, device number 58 [ 621.714819][T21284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.723736][T21284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.742204][ T9] keyspan_pda 4-1:0.145: required endpoints missing [ 621.757937][ T9] keyspan_pda 4-1:0.43: required endpoints missing [ 621.768381][ T9] usb 4-1: USB disconnect, device number 4 [ 622.140952][T21315] binfmt_misc: register: failed to install interpreter file ./file0 [ 622.399588][T21336] tipc: Enabling of bearer rejected, failed to enable media [ 622.431241][ T9] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 622.576177][T21349] netlink: 'syz.7.2764': attribute type 27 has an invalid length. [ 622.584930][T21349] netlink: 164 bytes leftover after parsing attributes in process `syz.7.2764'. [ 622.596784][T21349] program syz.7.2764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 622.606262][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 622.613286][ T9] usb 7-1: config 0 has an invalid interface number: 215 but max is 0 [ 622.632958][ T9] usb 7-1: config 0 has no interface number 0 [ 622.665926][ T9] usb 7-1: New USB device found, idVendor=1608, idProduct=0301, bcdDevice=f1.24 [ 622.683586][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.692688][ T9] usb 7-1: Product: syz [ 622.697645][ T9] usb 7-1: Manufacturer: syz [ 622.702303][ T9] usb 7-1: SerialNumber: syz [ 622.709754][ T9] usb 7-1: config 0 descriptor?? [ 622.719492][ T9] io_ti 7-1:0.215: required endpoints missing [ 622.884753][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 622.920648][T18993] usb 7-1: USB disconnect, device number 59 [ 623.034799][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 623.041957][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 623.051134][ T9] usb 4-1: config 255 has an invalid interface number: 48 but max is 0 [ 623.060307][ T9] usb 4-1: config 255 has no interface number 0 [ 623.066910][ T9] usb 4-1: config 255 interface 48 has no altsetting 0 [ 623.077213][ T9] usb 4-1: New USB device found, idVendor=2013, idProduct=024f, bcdDevice=e8.70 [ 623.086510][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.094507][ T9] usb 4-1: Product: syz [ 623.098776][ T9] usb 4-1: Manufacturer: syz [ 623.103380][ T9] usb 4-1: SerialNumber: syz [ 623.351917][ T9] em28xx 4-1:255.48: audio device (2013:024f): interface 48, class 1 [ 623.383016][ T9] usb 4-1: USB disconnect, device number 5 [ 623.935424][ T845] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 624.086416][ T845] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 624.094463][ T845] usb 7-1: config 0 has no interface number 0 [ 624.100820][ T845] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.111897][ T845] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.121718][ T845] usb 7-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 624.134620][ T845] usb 7-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 624.143656][ T845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.155448][ T845] usb 7-1: config 0 descriptor?? [ 624.214696][ T5873] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 624.343308][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.349939][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.376960][ T5873] usb 4-1: config 3 has an invalid interface number: 34 but max is 3 [ 624.385471][ T5873] usb 4-1: config 3 has an invalid descriptor of length 1, skipping remainder of the config [ 624.395943][ T5873] usb 4-1: config 3 has 1 interface, different from the descriptor's value: 4 [ 624.406558][ T5873] usb 4-1: config 3 has no interface number 0 [ 624.412665][ T5873] usb 4-1: config 3 interface 34 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 624.428508][ T5873] usb 4-1: config 3 interface 34 has no altsetting 0 [ 624.439429][ T5873] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=bb.41 [ 624.448758][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.456984][ T5873] usb 4-1: Product: 㐊 [ 624.462007][ T5873] usb 4-1: Manufacturer: 䗫梵꽩篹牽퓭ը拓紅㬅菒ᩖ杻䕡艡櫲䅣ﯓ謅賃播︝硞䩨鯶Ḛ隟侗ᒖ⯌鰏儊✿읡憳狗矅옕晁頋鍁醄⫓△凨坕ᤧቸ⸦澴✎ጻ틓磩勅⃔鼍识艴₩䡽갰་龱孾圍띹䣆ඤ댜젖巆屠䤺袏䍀懐໌厖䯎耻礳쏔ៀ쬂頬 [ 624.491310][ T5873] usb 4-1: SerialNumber: 䐊 [ 624.712601][ T5873] em28xx 4-1:3.34: audio device (0413:6023): interface 34, class 1 [ 624.751174][ T10] usb 4-1: USB disconnect, device number 6 [ 624.798644][ T845] input: HID 28bd:0042 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/0003:28BD:0042.0033/input/input78 [ 624.886249][ T845] uclogic 0003:28BD:0042.0033: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.6-1/input1 [ 624.918928][ T845] usb 7-1: USB disconnect, device number 60 [ 625.273512][T21460] fido_id[21460]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 625.684659][ T10] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 625.845701][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 625.856189][ T10] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 625.865293][ T10] usb 7-1: config 0 has no interface number 0 [ 625.872029][ T10] usb 7-1: config 0 interface 184 has no altsetting 0 [ 625.889102][ T10] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 625.902112][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.910461][ T10] usb 7-1: Product: syz [ 625.930592][ T10] usb 7-1: Manufacturer: syz [ 625.944322][ T10] usb 7-1: SerialNumber: syz [ 625.959371][ T10] usb 7-1: config 0 descriptor?? [ 625.978559][ T10] smsc75xx v1.0.0 [ 626.264671][ T5916] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 626.422013][ T5916] usb 4-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.439338][ T5916] usb 4-1: config 0 interface 0 has no altsetting 0 [ 626.448773][ T5916] usb 4-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 626.460734][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.471632][ T5916] usb 4-1: config 0 descriptor?? [ 626.594203][T21479] netlink: 116 bytes leftover after parsing attributes in process `syz.6.2779'. [ 626.886696][ T5916] aquacomputer_d5next 0003:0C70:F011.0034: item fetching failed at offset 0/5 [ 626.905360][ T5916] aquacomputer_d5next 0003:0C70:F011.0034: probe with driver aquacomputer_d5next failed with error -22 [ 627.090901][T21518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.100835][T21518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.122157][ T9] usb 4-1: USB disconnect, device number 7 [ 627.217920][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 627.245784][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 627.264950][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 627.287407][ T10] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 627.298834][ T3510] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.317887][ T10] usb 7-1: USB disconnect, device number 61 [ 627.870679][T21568] binder: 21565:21568 unknown command 32768 [ 627.876856][T21568] binder: 21565:21568 ioctl c0306201 200000004a40 returned -22 [ 630.295786][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 630.455136][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 630.472307][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 630.484026][ T10] usb 4-1: config 4 has an invalid interface number: 108 but max is 0 [ 630.492567][ T10] usb 4-1: config 4 has no interface number 0 [ 630.500890][ T10] usb 4-1: config 4 interface 108 has no altsetting 0 [ 630.512004][ T10] usb 4-1: New USB device found, idVendor=04e8, idProduct=8001, bcdDevice=68.9f [ 630.521541][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.529886][ T10] usb 4-1: Product: syz [ 630.534144][ T10] usb 4-1: Manufacturer: syz [ 630.539160][ T10] usb 4-1: SerialNumber: syz [ 630.960151][T21636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.969129][T21636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.979653][T21636] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 630.990919][T21636] VFS: Can't find a romfs filesystem on dev nullb0. [ 630.990919][T21636] [ 631.010097][ T10] usb 4-1: active config #4 != 1 ?? [ 631.026028][ T10] usb 4-1: USB disconnect, device number 8 [ 632.355250][ T5881] usb 7-1: new low-speed USB device number 62 using dummy_hcd [ 632.414794][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 632.504749][ T5881] usb 7-1: device descriptor read/64, error -71 [ 632.565763][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 632.573621][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 632.589480][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 632.603721][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.620438][ T10] usb 4-1: Product: syz [ 632.625619][ T10] usb 4-1: Manufacturer: syz [ 632.630324][ T10] usb 4-1: SerialNumber: syz [ 632.644373][ T10] usb 4-1: config 0 descriptor?? [ 632.661584][ T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 632.672054][ T10] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 632.764774][ T5881] usb 7-1: new low-speed USB device number 63 using dummy_hcd [ 632.905799][ T5881] usb 7-1: device descriptor read/64, error -71 [ 633.016393][ T5881] usb usb7-port1: attempt power cycle [ 633.263006][ T10] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 633.313985][ T5835] Bluetooth: hci1: unexpected event 0x2f length: 763 > 260 [ 633.367583][ T5881] usb 7-1: new low-speed USB device number 64 using dummy_hcd [ 633.417433][ T5881] usb 7-1: device descriptor read/8, error -71 [ 633.425254][T21747] ipvlan0: entered promiscuous mode [ 633.430547][T21747] ipvlan0: entered allmulticast mode [ 633.436074][T21747] veth0_vlan: entered allmulticast mode [ 633.565993][T21752] binder_alloc: 21750: binder_alloc_buf size 8 failed, no address space [ 633.577991][T21752] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 0 (num: 0 largest: 0) [ 633.664743][ T5881] usb 7-1: new low-speed USB device number 65 using dummy_hcd [ 633.685417][ T5881] usb 7-1: device descriptor read/8, error -71 [ 633.796295][ T5881] usb usb7-port1: unable to enumerate USB device [ 633.880660][ T10] em28xx 4-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 633.890273][ T10] em28xx 4-1:0.0: board has no eeprom [ 633.954678][ T10] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 633.962654][ T10] em28xx 4-1:0.0: dvb set to bulk mode. [ 633.968398][ T9586] em28xx 4-1:0.0: Binding DVB extension [ 633.980261][ T10] usb 4-1: USB disconnect, device number 9 [ 633.995585][ T10] em28xx 4-1:0.0: Disconnecting em28xx [ 634.022210][ T9586] em28xx 4-1:0.0: Registering input extension [ 634.029519][ T10] em28xx 4-1:0.0: Closing input extension [ 634.048347][ T10] em28xx 4-1:0.0: Freeing device [ 635.044745][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 635.196321][ T10] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 635.206876][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 635.219842][ T10] usb 4-1: config 0 has no interface number 0 [ 635.226054][ T10] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 635.236507][ T10] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 635.251077][ T10] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 635.260254][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.271554][ T10] usb 4-1: config 0 descriptor?? [ 635.303200][ T10] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 635.481616][T16860] usb 4-1: Failed to submit usb control message: -71 [ 635.482060][ T845] usb 4-1: USB disconnect, device number 10 [ 635.489749][T16860] usb 4-1: unable to send the bmi data to the device: -71 [ 635.504189][T16860] usb 4-1: unable to get target info from device [ 635.510837][T16860] usb 4-1: could not get target info (-71) [ 635.518565][T16860] usb 4-1: could not probe fw (-71) [ 635.574931][ T5873] usb 7-1: new full-speed USB device number 66 using dummy_hcd [ 635.748831][ T5873] usb 7-1: not running at top speed; connect to a high speed hub [ 635.758354][ T5873] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 635.767133][ T5873] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 635.777983][ T5873] usb 7-1: config 1 has no interface number 1 [ 635.785273][ T5873] usb 7-1: config 1 interface 2 has no altsetting 0 [ 635.807071][ T5873] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 635.816443][ T5873] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.825661][ T5873] usb 7-1: Product: syz [ 635.829852][ T5873] usb 7-1: Manufacturer: syz [ 635.834454][ T5873] usb 7-1: SerialNumber: syz [ 636.066231][ T5873] usb 7-1: 2:1: All rates were zero [ 636.072512][ T5873] usb 7-1: selecting invalid altsetting 0 [ 636.109478][ T5873] usb 7-1: USB disconnect, device number 66 [ 636.148365][ T8233] udevd[8233]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 636.304697][ T845] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 636.474744][ T845] usb 4-1: Using ep0 maxpacket: 32 [ 636.491588][ T845] usb 4-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 636.501293][ T845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.509584][ T845] usb 4-1: Product: syz [ 636.513750][ T845] usb 4-1: Manufacturer: syz [ 636.518395][ T845] usb 4-1: SerialNumber: syz [ 636.525128][ T845] usb 4-1: config 0 descriptor?? [ 636.616175][T21880] netlink: 'syz.6.2834': attribute type 21 has an invalid length. [ 636.624126][T21880] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2834'. [ 636.815222][ T845] f81534a_ctrl 4-1:0.0: failed to set register 0x116: -5 [ 636.823897][ T845] f81534a_ctrl 4-1:0.0: failed to enable ports: -5 [ 636.832734][ T845] f81534a_ctrl 4-1:0.0: probe with driver f81534a_ctrl failed with error -5 [ 636.855834][ T845] usb 4-1: USB disconnect, device number 11 [ 636.944676][ T5916] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 637.104664][ T5916] usb 7-1: Using ep0 maxpacket: 32 [ 637.111645][ T5916] usb 7-1: config 0 has an invalid interface number: 191 but max is 0 [ 637.120048][ T5916] usb 7-1: config 0 has no interface number 0 [ 637.126374][ T5916] usb 7-1: too many endpoints for config 0 interface 191 altsetting 0: 149, using maximum allowed: 30 [ 637.138256][ T5916] usb 7-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 637.148489][ T5916] usb 7-1: config 0 interface 191 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 149 [ 637.177799][ T5916] usb 7-1: config 0 has an invalid interface number: 191 but max is 0 [ 637.186299][ T5916] usb 7-1: config 0 has no interface number 0 [ 637.192491][ T5916] usb 7-1: too many endpoints for config 0 interface 191 altsetting 0: 149, using maximum allowed: 30 [ 637.204132][ T5916] usb 7-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 637.221021][ T5916] usb 7-1: config 0 interface 191 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 149 [ 637.235757][ T5916] usb 7-1: config 0 has an invalid interface number: 191 but max is 0 [ 637.243968][ T5916] usb 7-1: config 0 has no interface number 0 [ 637.250189][ T5916] usb 7-1: too many endpoints for config 0 interface 191 altsetting 0: 149, using maximum allowed: 30 [ 637.262479][ T5916] usb 7-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 637.272623][ T5916] usb 7-1: config 0 interface 191 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 149 [ 637.295746][ T5916] usb 7-1: config 0 has an invalid interface number: 191 but max is 0 [ 637.303949][ T5916] usb 7-1: config 0 has no interface number 0 [ 637.310642][ T5916] usb 7-1: too many endpoints for config 0 interface 191 altsetting 0: 149, using maximum allowed: 30 [ 637.326725][ T5916] usb 7-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 637.337166][ T5916] usb 7-1: config 0 interface 191 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 149 [ 637.352389][ T5916] usb 7-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 637.362518][ T5916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.370614][ T5916] usb 7-1: Product: syz [ 637.375174][ T5916] usb 7-1: Manufacturer: syz [ 637.379933][ T5916] usb 7-1: SerialNumber: syz [ 637.388088][ T5916] usb 7-1: config 0 descriptor?? [ 637.393674][T21887] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 637.565744][ T5881] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 637.602909][T21887] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 637.724651][ T5881] usb 4-1: Using ep0 maxpacket: 32 [ 637.731373][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.743486][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.753492][ T5881] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 637.762603][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.774513][ T5881] usb 4-1: config 0 descriptor?? [ 637.789803][ T5881] hub 4-1:0.0: USB hub found [ 637.811509][ T5916] asix 7-1:0.191 (unnamed net_device) (uninitialized): invalid hw address, using random [ 637.992760][ T5881] hub 4-1:0.0: 1 port detected [ 638.012060][ T5916] asix 7-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 638.024254][ T5916] asix 7-1:0.191 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 638.035345][ T5916] asix 7-1:0.191: probe with driver asix failed with error -71 [ 638.047563][ T5916] usb 7-1: USB disconnect, device number 67 [ 638.193630][T21921] ipvlan0: entered promiscuous mode [ 638.199074][T21921] ipvlan0: entered allmulticast mode [ 638.204434][T21921] veth0_vlan: entered allmulticast mode [ 638.219297][ T5881] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 638.226211][ T5881] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 638.237929][ T5881] usbhid 4-1:0.0: can't add hid device: -71 [ 638.243911][ T5881] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 638.266092][ T5881] usb 4-1: USB disconnect, device number 12 [ 638.612094][ T30] kauditd_printk_skb: 13170 callbacks suppressed [ 638.612113][ T30] audit: type=1800 audit(1766330290.802:24523): pid=21946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2840" name="bus" dev="tmpfs" ino=945 res=0 errno=0 [ 639.104694][ T5916] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 639.254798][ T5916] usb 4-1: device descriptor read/64, error -71 [ 639.361274][T21972] netlink: 9 bytes leftover after parsing attributes in process `syz.6.2846'. [ 639.371566][T21972] 0: renamed from hsr0 (while UP) [ 639.393861][T21972] 0: entered allmulticast mode [ 639.402486][T21972] hsr_slave_0: entered allmulticast mode [ 639.418099][T21972] hsr_slave_1: entered allmulticast mode [ 639.428278][T21972] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 639.465104][T21982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.489438][T21982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.515789][ T5916] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 639.639242][T22004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.649377][T22004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.665764][ T5916] usb 4-1: device descriptor read/64, error -71 [ 639.707556][ T31] INFO: task syz.0.2151:14534 blocked for more than 143 seconds. [ 639.724628][ T31] Tainted: G L syzkaller #0 [ 639.731172][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 639.740307][ T31] task:syz.0.2151 state:D stack:22968 pid:14534 tgid:14532 ppid:13030 task_flags:0x400040 flags:0x00080002 [ 639.752525][ T31] Call Trace: [ 639.755892][ T31] [ 639.758841][ T31] __schedule+0x150e/0x5070 [ 639.763384][ T31] ? __pfx___schedule+0x10/0x10 [ 639.768390][ T31] ? schedule+0x91/0x360 [ 639.772650][ T31] schedule+0x165/0x360 [ 639.776986][ T31] io_schedule+0x80/0xd0 [ 639.777253][ T5916] usb usb4-port1: attempt power cycle [ 639.781333][ T31] folio_wait_bit_common+0x6b0/0xb80 [ 639.792527][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 639.798445][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 639.804141][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 639.809730][ T31] ? page_has_movable_ops+0x151/0x400 [ 639.815413][ T5881] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 639.822458][ T31] ? migrate_pages_batch+0x108c/0x35e0 [ 639.828744][ T31] migrate_pages_batch+0x14cd/0x35e0 [ 639.834048][ T31] ? rcu_is_watching+0x15/0xb0 [ 639.839133][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 639.844524][ T31] ? __pfx_compaction_free+0x10/0x10 [ 639.849874][ T31] ? __pfx_migrate_pages_batch+0x10/0x10 [ 639.857118][ T31] ? css_rstat_updated+0x239/0x520 [ 639.862238][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 639.867752][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 639.873139][ T31] migrate_pages+0x2006/0x28e0 [ 639.877966][ T31] ? __pfx_compaction_free+0x10/0x10 [ 639.883260][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 639.888729][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 639.893943][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 639.900058][ T31] ? __pfx_migrate_pages+0x10/0x10 [ 639.905233][ T31] ? rcu_is_watching+0x15/0xb0 [ 639.910013][ T31] ? isolate_migratepages_block+0x393f/0x4140 [ 639.916366][ T31] compact_zone+0x25ba/0x4760 [ 639.922095][ T31] ? __pfx_compact_zone+0x10/0x10 [ 639.927269][ T31] ? __debug_object_init+0x78/0x4b0 [ 639.932610][ T31] sysctl_compaction_handler+0x3a1/0x7b0 [ 639.938449][ T31] ? __pfx_sysctl_compaction_handler+0x10/0x10 [ 639.944749][ T31] ? trace_kmalloc+0x1f/0xb0 [ 639.949336][ T31] ? __kvmalloc_node_noprof+0x5f5/0x920 [ 639.955021][ T31] proc_sys_call_handler+0x4cb/0x700 [ 639.960322][ T31] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 639.966425][ T31] ? __asan_memset+0x22/0x50 [ 639.971033][ T31] iter_file_splice_write+0x972/0x10b0 [ 639.976663][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 639.979524][ T5881] usb 7-1: Using ep0 maxpacket: 16 [ 639.982573][ T31] ? rcu_read_lock_any_held+0xb3/0x120 [ 639.990449][ T5881] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.993453][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 640.004784][ T5881] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.010245][ T31] direct_splice_actor+0x101/0x160 [ 640.027423][ T5881] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 640.040444][ T31] splice_direct_to_actor+0x5a8/0xcc0 [ 640.040939][ T5881] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 640.055195][ T31] ? __pfx_direct_splice_actor+0x10/0x10 [ 640.057996][ T5881] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.060893][ T31] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 640.074945][ T5881] usb 7-1: config 0 descriptor?? [ 640.088107][ T31] do_splice_direct+0x181/0x270 [ 640.093486][ T31] ? __pfx_do_splice_direct+0x10/0x10 [ 640.099083][ T31] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 640.105125][ T31] ? rw_verify_area+0x255/0x4d0 [ 640.110010][ T31] do_sendfile+0x4da/0x7e0 [ 640.114447][ T31] ? __pfx_do_sendfile+0x10/0x10 [ 640.119557][ T31] __se_sys_sendfile64+0xd9/0x190 [ 640.125576][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 640.130877][ T31] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 640.136630][ T31] ? do_syscall_64+0xbe/0xf80 [ 640.141332][ T31] do_syscall_64+0xfa/0xf80 [ 640.145949][ T5916] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 640.153665][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.160039][ T31] ? clear_bhb_loop+0x60/0xb0 [ 640.166514][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.172479][ T31] RIP: 0033:0x7fc11cd8f749 [ 640.177257][ T5916] usb 4-1: device descriptor read/8, error -71 [ 640.183789][ T31] RSP: 002b:00007fc11dc66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 640.192484][ T31] RAX: ffffffffffffffda RBX: 00007fc11cfe5fa0 RCX: 00007fc11cd8f749 [ 640.205404][ T31] RDX: 00002000000000c0 RSI: 0000000000000003 RDI: 0000000000000004 [ 640.213418][ T31] RBP: 00007fc11ce13f91 R08: 0000000000000000 R09: 0000000000000000 [ 640.221504][ T31] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 640.236191][ T31] R13: 00007fc11cfe6038 R14: 00007fc11cfe5fa0 R15: 00007fffa3ce7788 [ 640.244211][ T31] [ 640.247373][ T31] [ 640.247373][ T31] Showing all locks held in the system: [ 640.259250][ T31] 1 lock held by khungtaskd/31: [ 640.264218][ T31] #0: ffffffff8e33f2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 640.274833][ T31] 3 locks held by kworker/u8:4/60: [ 640.282128][ T31] #0: ffff8880b863ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 640.293944][ T31] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 640.303461][ T31] #2: ffff8880b86260d8 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 640.315373][ T31] 5 locks held by kworker/0:3/5881: [ 640.320600][ T31] #0: ffff888020af5148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x841/0x15a0 [ 640.332695][ T31] #1: ffffc9000496fb80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x868/0x15a0 [ 640.344077][ T31] #2: ffff888144702198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 640.353254][ T31] #3: ffff88801bb0b198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 640.363187][ T31] #4: ffff88802f31a160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 640.372515][ T31] 6 locks held by kworker/1:8/5916: [ 640.377827][ T31] #0: ffff888020af5148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x841/0x15a0 [ 640.388624][ T31] #1: ffffc90004a5fb80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x868/0x15a0 [ 640.399903][ T31] #2: ffff8881443e2198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 640.409072][ T31] #3: ffff8881443e5518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 640.419342][ T5916] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 640.427202][ T31] #4: ffff888144348768 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 640.438077][ T31] #5: ffff8880b873ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 640.448234][ T31] 1 lock held by udevd/7444: [ 640.452825][ T31] #0: ffff888025191358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 640.462237][ T31] 1 lock held by syz.0.2151/14534: [ 640.467500][ T31] #0: ffff8880579d8420 (sb_writers#3){.+.+}-{0:0}, at: direct_splice_actor+0x49/0x160 [ 640.477357][ T5916] usb 4-1: device descriptor read/8, error -71 [ 640.484018][ T31] 2 locks held by getty/20708: [ 640.489312][ T31] #0: ffff88814e2a80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 640.491306][ T5881] microsoft 0003:045E:07DA.0035: ignoring exceeding usage max [ 640.499152][ T31] #1: ffffc9000622d2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 640.499238][ T31] [ 640.499245][ T31] ============================================= [ 640.499245][ T31] [ 640.499254][ T31] NMI backtrace for cpu 1 [ 640.499269][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 640.499291][ T31] Tainted: [L]=SOFTLOCKUP [ 640.499297][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 640.499308][ T31] Call Trace: [ 640.499315][ T31] [ 640.499323][ T31] dump_stack_lvl+0x189/0x250 [ 640.499346][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 640.499363][ T31] ? __pfx__printk+0x10/0x10 [ 640.499399][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 640.499425][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 640.499469][ T31] ? __pfx__printk+0x10/0x10 [ 640.499504][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 640.499527][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 640.499552][ T31] sys_info+0x135/0x170 [ 640.499572][ T31] watchdog+0xe40/0xe90 [ 640.499596][ T31] ? watchdog+0x202/0xe90 [ 640.499618][ T31] kthread+0x711/0x8a0 [ 640.499635][ T31] ? __pfx_watchdog+0x10/0x10 [ 640.499653][ T31] ? __pfx_kthread+0x10/0x10 [ 640.499672][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 640.499689][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 640.499706][ T31] ? __pfx_kthread+0x10/0x10 [ 640.499724][ T31] ret_from_fork+0x599/0xb30 [ 640.499747][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 640.499778][ T31] ? __switch_to_asm+0x39/0x70 [ 640.499795][ T31] ? __switch_to_asm+0x33/0x70 [ 640.499811][ T31] ? __pfx_kthread+0x10/0x10 [ 640.499830][ T31] ret_from_fork_asm+0x1a/0x30 [ 640.499862][ T31] [ 640.499869][ T31] Sending NMI from CPU 1 to CPUs 0: [ 640.512344][ T5881] microsoft 0003:045E:07DA.0035: ignoring exceeding usage max [ 640.517610][ C0] NMI backtrace for cpu 0 [ 640.517627][ C0] CPU: 0 UID: 0 PID: 5881 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 640.517650][ C0] Tainted: [L]=SOFTLOCKUP [ 640.517656][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 640.517666][ C0] Workqueue: usb_hub_wq hub_event [ 640.517693][ C0] RIP: 0010:io_serial_out+0x7c/0xc0 [ 640.517717][ C0] Code: 90 9c fc 44 89 f9 d3 e5 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 fc 38 03 fd 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 44 89 f9 80 e1 07 38 c1 [ 640.517737][ C0] RSP: 0018:ffffc9000496ded0 EFLAGS: 00000002 [ 640.517751][ C0] RAX: 0000000000000034 RBX: 0000000000000034 RCX: 0000000000000000 [ 640.517762][ C0] RDX: 00000000000003f8 RSI: 00000000000fffff RDI: 0000000000100000 [ 640.517773][ C0] RBP: 00000000000003f8 R08: ffff888024418237 R09: 1ffff11004883046 [ 640.517784][ C0] R10: dffffc0000000000 R11: ffffffff85256770 R12: dffffc0000000000 [ 640.517797][ C0] R13: ffffffff99d399e5 R14: ffffffff9a04e480 R15: 0000000000000000 [ 640.517809][ C0] FS: 0000000000000000(0000) GS:ffff8881259dc000(0000) knlGS:0000000000000000 [ 640.517823][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 640.517834][ C0] CR2: 00007f0cb055fc90 CR3: 000000017bb94000 CR4: 00000000003526f0 [ 640.517849][ C0] Call Trace: [ 640.517855][ C0] [ 640.517864][ C0] serial8250_console_write+0x1410/0x1ba0 [ 640.517892][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 640.517914][ C0] ? console_flush_all+0x131/0xb60 [ 640.517934][ C0] ? console_flush_all+0x131/0xb60 [ 640.517955][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 640.517974][ C0] ? console_flush_all+0x131/0xb60 [ 640.517991][ C0] console_flush_all+0x745/0xb60 [ 640.518011][ C0] ? console_flush_all+0x131/0xb60 [ 640.518032][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 640.518049][ C0] ? rcu_is_watching+0x15/0xb0 [ 640.518069][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 640.518091][ C0] console_unlock+0xbb/0x190 [ 640.518107][ C0] ? vprintk_emit+0x321/0x5f0 [ 640.518123][ C0] ? __pfx_console_unlock+0x10/0x10 [ 640.518138][ C0] ? vprintk_emit+0x2a0/0x5f0 [ 640.518155][ C0] ? vprintk_emit+0x4c8/0x5f0 [ 640.518170][ C0] ? vprintk_emit+0x321/0x5f0 [ 640.518185][ C0] ? vprintk_emit+0x321/0x5f0 [ 640.518202][ C0] vprintk_emit+0x4f8/0x5f0 [ 640.518219][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 640.518234][ C0] ? rcu_is_watching+0x15/0xb0 [ 640.518251][ C0] ? __pfx_snprintf+0x10/0x10 [ 640.518271][ C0] ? __schedule+0x1524/0x5070 [ 640.518293][ C0] dev_vprintk_emit+0x337/0x3f0 [ 640.518311][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 640.518331][ C0] ? __pfx___schedule+0x10/0x10 [ 640.518349][ C0] dev_printk_emit+0xe0/0x130 [ 640.518367][ C0] ? rcu_is_watching+0x15/0xb0 [ 640.518383][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 640.518398][ C0] ? preempt_schedule_irq+0xde/0x150 [ 640.518414][ C0] ? __device_attach_driver+0x279/0x430 [ 640.518432][ C0] ? __device_attach+0x2b8/0x430 [ 640.518447][ C0] ? device_initial_probe+0xa1/0xd0 [ 640.518461][ C0] ? bus_probe_device+0x12a/0x220 [ 640.518483][ C0] ? __dev_printk+0x131/0x190 [ 640.518500][ C0] _dev_warn+0x10a/0x160 [ 640.518516][ C0] ? irqentry_exit+0x5dd/0x660 [ 640.518534][ C0] ? __pfx__dev_warn+0x10/0x10 [ 640.518554][ C0] ? hid_parser_local+0x52e/0xa50 [ 640.518570][ C0] ? hid_add_usage+0x262/0x550 [ 640.518590][ C0] hid_parser_local+0x647/0xa50 [ 640.518609][ C0] hid_open_report+0x85b/0xee0 [ 640.518627][ C0] ? __pfx_hid_open_report+0x10/0x10 [ 640.518644][ C0] ? devm_kmalloc+0x27e/0x300 [ 640.518665][ C0] ms_probe+0x159/0x430 [ 640.518690][ C0] hid_device_probe+0x416/0x7a0 [ 640.518710][ C0] ? driver_sysfs_add+0x1fe/0x210 [ 640.518732][ C0] ? __pfx_hid_device_probe+0x10/0x10 [ 640.518749][ C0] really_probe+0x26d/0xad0 [ 640.518769][ C0] __driver_probe_device+0x18c/0x320 [ 640.518787][ C0] driver_probe_device+0x4f/0x240 [ 640.518806][ C0] __device_attach_driver+0x279/0x430 [ 640.518825][ C0] bus_for_each_drv+0x251/0x2e0 [ 640.518846][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 640.518863][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 640.518894][ C0] __device_attach+0x2b8/0x430 [ 640.518911][ C0] ? __pfx___device_attach+0x10/0x10 [ 640.518926][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 640.518945][ C0] ? _raw_spin_unlock+0x28/0x50 [ 640.518961][ C0] device_initial_probe+0xa1/0xd0 [ 640.518978][ C0] bus_probe_device+0x12a/0x220 [ 640.518998][ C0] ? device_add+0x726/0xb80 [ 640.519013][ C0] device_add+0x7b6/0xb80 [ 640.519030][ C0] hid_add_device+0x272/0x3e0 [ 640.519048][ C0] usbhid_probe+0xe13/0x12c0 [ 640.519077][ C0] usb_probe_interface+0x668/0xc90 [ 640.519100][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 640.519117][ C0] really_probe+0x26d/0xad0 [ 640.519137][ C0] __driver_probe_device+0x18c/0x320 [ 640.519155][ C0] driver_probe_device+0x4f/0x240 [ 640.519174][ C0] __device_attach_driver+0x279/0x430 [ 640.519194][ C0] bus_for_each_drv+0x251/0x2e0 [ 640.519215][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 640.519232][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 640.519258][ C0] __device_attach+0x2b8/0x430 [ 640.519275][ C0] ? __pfx___device_attach+0x10/0x10 [ 640.519293][ C0] ? _raw_spin_unlock+0x28/0x50 [ 640.519308][ C0] device_initial_probe+0xa1/0xd0 [ 640.519326][ C0] bus_probe_device+0x12a/0x220 [ 640.519346][ C0] ? device_add+0x726/0xb80 [ 640.519361][ C0] device_add+0x7b6/0xb80 [ 640.519377][ C0] usb_set_configuration+0x1a87/0x2110 [ 640.519406][ C0] usb_generic_driver_probe+0x8d/0x150 [ 640.519424][ C0] usb_probe_device+0x1c4/0x3c0 [ 640.519458][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 640.519474][ C0] really_probe+0x26d/0xad0 [ 640.519494][ C0] __driver_probe_device+0x18c/0x320 [ 640.519512][ C0] driver_probe_device+0x4f/0x240 [ 640.519531][ C0] __device_attach_driver+0x279/0x430 [ 640.519550][ C0] bus_for_each_drv+0x251/0x2e0 [ 640.519571][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 640.519588][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 640.519614][ C0] __device_attach+0x2b8/0x430 [ 640.519639][ C0] ? __pfx___device_attach+0x10/0x10 [ 640.519659][ C0] ? _raw_spin_unlock+0x28/0x50 [ 640.519675][ C0] device_initial_probe+0xa1/0xd0 [ 640.519696][ C0] bus_probe_device+0x12a/0x220 [ 640.519716][ C0] ? device_add+0x726/0xb80 [ 640.519736][ C0] device_add+0x7b6/0xb80 [ 640.519752][ C0] usb_new_device+0xa39/0x1720 [ 640.519780][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 640.519804][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 640.519818][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 640.519836][ C0] hub_event+0x29b1/0x4ef0 [ 640.519874][ C0] ? __pfx_hub_event+0x10/0x10 [ 640.519890][ C0] ? process_one_work+0x868/0x15a0 [ 640.519914][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 640.519931][ C0] ? process_one_work+0x868/0x15a0 [ 640.519955][ C0] process_one_work+0x93a/0x15a0 [ 640.519986][ C0] ? __pfx_process_one_work+0x10/0x10 [ 640.520011][ C0] ? assign_work+0x3c7/0x5b0 [ 640.520034][ C0] worker_thread+0x9b0/0xee0 [ 640.520068][ C0] kthread+0x711/0x8a0 [ 640.520086][ C0] ? __pfx_worker_thread+0x10/0x10 [ 640.520108][ C0] ? __pfx_kthread+0x10/0x10 [ 640.520130][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 640.520145][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 640.520160][ C0] ? __pfx_kthread+0x10/0x10 [ 640.520176][ C0] ret_from_fork+0x599/0xb30 [ 640.520199][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 640.520225][ C0] ? __switch_to_asm+0x39/0x70 [ 640.520241][ C0] ? __switch_to_asm+0x33/0x70 [ 640.520258][ C0] ? __pfx_kthread+0x10/0x10 [ 640.520274][ C0] ret_from_fork_asm+0x1a/0x30 [ 640.520298][ C0] [ 640.596053][ T5916] usb usb4-port1: unable to enumerate USB device [ 640.600522][ T5881] microsoft 0003:045E:07DA.0035: usage index exceeded [ 641.491198][ T5881] microsoft 0003:045E:07DA.0035: item 0 2 2 2 parsing failed [ 641.500034][ T5881] microsoft 0003:045E:07DA.0035: parse failed [ 641.510325][ T5881] microsoft 0003:045E:07DA.0035: probe with driver microsoft failed with error -22 [ 641.524228][ T5881] usb 7-1: USB disconnect, device number 68 [ 644.817434][ T11] block nbd1: Possible stuck request ffff888025288000: control (read@0,1024B). Runtime 180 seconds [ 644.828308][ T11] block nbd1: Possible stuck request ffff888025288200: control (read@1024,1024B). Runtime 180 seconds [ 644.840779][ T11] block nbd1: Possible stuck request ffff888025288400: control (read@2048,1024B). Runtime 180 seconds [ 644.851884][ T11] block nbd1: Possible stuck request ffff888025288600: control (read@3072,1024B). Runtime 180 seconds [ 644.886482][ T5199] udevd[5199]: worker [7444] /devices/virtual/block/nbd1 timeout; kill it [ 644.897576][ T5199] udevd[5199]: seq 21834 '/devices/virtual/block/nbd1' killed