last executing test programs: 18m36.25555489s ago: executing program 2 (id=303): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2}) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000140)={0x1, 0x1}) syz_usb_connect$uac1(0x5, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xa4, 0x0, 0xd3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xec}, [@selector_unit={0x6, 0x24, 0x5, 0x4, 0x8, "cf"}, @feature_unit={0xd, 0x24, 0x6, 0x4, 0x2, 0x3, [0x3, 0x2, 0x3], 0xfd}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x0, 0xc1, 0x4, {0x7, 0x25, 0x1, 0xcf48081ed2274dc5, 0x8, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x2, 0x1}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x6, 0x8, 0x1, "8a72b6"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xb1, 0xd4, 0x5, {0x7, 0x25, 0x1, 0x0, 0xfb, 0x3}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 18m34.753132139s ago: executing program 2 (id=307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0xc, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) execveat(r1, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000000), &(0x7f0000000080)=@ng={0x4, 0x0, "cb2af3a102082ccbb29178c70d"}, 0xf, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x4, 0x6, 0x6c, 0x101}, {0x8, 0x3e, 0x2, 0x4e28}, {0x8e, 0x2, 0x3, 0x8}, {0x0, 0x9, 0xfc, 0x10}, {0x3, 0x35, 0x7, 0x2}]}) 18m34.66538212s ago: executing program 2 (id=309): r0 = msgget$private(0x0, 0x790) msgsnd(r0, &(0x7f0000000800)=ANY=[@ANYRES8], 0x401, 0x800) (async) msgsnd(r0, &(0x7f0000000800)=ANY=[@ANYRES8], 0x401, 0x800) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e00ecffffff940200000000000040000000000000000000000000000000000000002c8f380003"], 0xe6) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000001c0)=@multiplanar_overlay={0x6, 0x8, 0x4, 0x10, 0x6, {0x77359400}, {0x1, 0xc, 0x10, 0x4, 0x7, 0x3, "e963b719"}, 0x7, 0x3, {0x0}, 0x142d}) (async) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000001c0)=@multiplanar_overlay={0x6, 0x8, 0x4, 0x10, 0x6, {0x77359400}, {0x1, 0xc, 0x10, 0x4, 0x7, 0x3, "e963b719"}, 0x7, 0x3, {0x0}, 0x142d}) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000080)=""/14) (async) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000080)=""/14) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000040)={0x3, 0x4, 0x2}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$cont(0x19, r1, 0xd, 0x4) r2 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^\x84{\x00\x02\xb9~B\x9f\xacl\x1d3\xa6\xab\x81\x9d\x13\x89\x9b\x00\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\7\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~\x03\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x1) write$binfmt_elf32(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc82200005"], 0xd8) (async) write$binfmt_elf32(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc82200005"], 0xd8) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 18m34.553053161s ago: executing program 2 (id=310): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="74010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbfc0000000000000000000000000000002001000000000000000000000000000100"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000bb7700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f000200000044000500fc020000000000000000000000000000000000003c00000000000000e000000200"/188], 0x174}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_proto_private(r1, 0x89e0, &(0x7f00000006c0)) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000002240), 0x80) r2 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r5, 0x80045700, &(0x7f0000000300)) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x3) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0xffffffffffffffff) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='qnx6\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) r6 = open(&(0x7f00000001c0)='./cgroup\x00', 0x200c01, 0x157) syz_clone3(&(0x7f0000000340)={0x3a0000080, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x12c5c18, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000180)='./file0/file0\x00', 0x0) 18m34.457058961s ago: executing program 2 (id=311): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYRES32], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000f80)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="00061c0000005ad6723f09e2"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x46, "4870f9fb7e71cac430259c779979cac7499711feba8c9b5543e791639d041b178c5924831213e323688ee863f6fb3a005340b6679854018c713c88ef0501b4dadbc959b1bbf8"}, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x80, 0x1c, {0x57, 0x8, 0xffffff80, 0xfb, 0xe, 0x0, 0x8000, 0x7, 0xe, 0x9, 0x3}}, 0x0, 0x0, 0x0, 0x0}) 18m33.545685716s ago: executing program 2 (id=314): r0 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) r1 = shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) (async) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) (async) shmdt(r1) (async) shmdt(r1) 18m33.349305385s ago: executing program 32 (id=314): r0 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) r1 = shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) (async) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) (async) shmdt(r1) (async) shmdt(r1) 17m8.151884355s ago: executing program 1 (id=812): syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000300)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f000056d000/0x4000)=nil, 0x4, 0x0, 0x0, 0xe, 0x0, 0x10, 0x0, 0x58}) 17m8.097275979s ago: executing program 1 (id=814): pipe(&(0x7f0000000080)={0xffffffffffffffff}) close(0x4) (async) close(0x4) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r1, 0x8f5, 0x100000000000000) write(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000787000/0x2000)=nil, 0x2000, &(0x7f00000003c0)='+++\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000788000/0x1000)=nil, 0x1000, &(0x7f0000000100)='\x00') 17m8.070798502s ago: executing program 1 (id=815): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000180)={0x0, 0x5}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000340)={0x1, 0x0, {0x0, 0x0, 0x3011, 0x0, 0x9, 0xd, 0x3}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4004014) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x6, 0x6, 0x9, 0x40, 0x2, 0x6}, &(0x7f0000000180)=0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={r4, @in6={{0xa, 0x4e21, 0x3c4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x889}}, 0x635, 0x1, 0xa21c, 0x4, 0x11, 0x0, 0x3}, &(0x7f00000001c0)=0x9c) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) wait4(0x0, 0x0, 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x13, 0xffffffffffffffff, 0x0) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) 17m7.140176419s ago: executing program 1 (id=819): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0) r0 = gettid() close(0xffffffffffffffff) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x19, 0x17, 0xa1, 0x8, 0x10b8, 0xbb9, 0x5629, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x20, 0x5, [{{0x9, 0x4, 0xc9, 0x0, 0x0, 0x7f, 0x2e, 0x15, 0xfc}}]}}]}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cgroups\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, 0x0, 0x8000) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x78, 0x0, 0x3, {0x8000, 0xcd, 0x0, {0x2, 0x0, 0x9ef1, 0x1000, 0x5, 0x9b, 0xf79c000, 0x2339fdf8, 0x5, 0x8000, 0x538, 0x0, 0xffffffffffffffff, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000002100)=ANY=[@ANYRESHEX=r0], 0xb0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0xfffffffffffffffd, 0x5, 0xfffffff8}}, 0x30) write$FUSE_DIRENTPLUS(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="b0"], 0xb0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',posixacl']) r6 = inotify_init() r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') r8 = inotify_add_watch(r6, &(0x7f0000000200)='.\x00', 0x82000714) inotify_rm_watch(r6, r8) inotify_rm_watch(r1, r8) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r9, &(0x7f0000000040)={0x27, 0x0, 0x2}, 0x6) 17m6.259845428s ago: executing program 1 (id=822): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x4f26, 0x1, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x0, 0x395, 0x80001089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x40003e, 0x8, 0x4, 0x8000000, 0x100]}) (async, rerun: 64) r1 = socket(0x1e, 0x5, 0x0) (rerun: 64) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) listen(r1, 0x0) (async, rerun: 32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) r3 = getpgrp(0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000280)={0x40000002}) (async, rerun: 64) r6 = syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) kcmp$KCMP_EPOLL_TFD(r3, r6, 0x7, r4, &(0x7f0000000180)={r5, 0xffffffffffffffff, 0x3}) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x4620, 0x6, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c) (async) recvfrom(r1, &(0x7f0000000180)=""/90, 0x5a, 0x40000002, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}}, [0x2, 0xfffffffffffffd49, 0xcc, 0x80000000, 0x2, 0x4, 0x2, 0x0, 0x11, 0x38e, 0x9, 0x29c, 0x4, 0x3, 0x9]}, &(0x7f0000000440)=0x100) (rerun: 64) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000480)={0x7, 0x400, 0x820e, 0x8, 0xb9, 0x4, 0xbfc4, 0x4, r10}, 0x20) (async) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) ioctl$KVM_IRQ_LINE_STATUS(r9, 0xc008ae67, &(0x7f0000000200)={0x4, 0xc1eb}) (async) r11 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r11, &(0x7f0000000280)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x0, @remote}}}, 0x90) accept4$inet6(r1, 0x0, 0x0, 0x0) 17m5.325833136s ago: executing program 1 (id=824): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = getpid() syz_pidfd_open(r3, 0x0) setns(r2, 0x24020000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01864ba, &(0x7f0000000100)={0xfffffffffffffffe, 0xe, 0x1f}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="6c66b8ae008ec865da00b8010000000f01d90f01df0fc7360f320fae8f00a0000066b81f018ee8b9840b00000f32", 0x2e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000140)={0xc9, 0x0, 0xc}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f00000000c0)={0xa8, 0x0, 0x1}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') read(r6, &(0x7f0000000200)=""/4096, 0x1000) ioctl$KVM_RUN(r1, 0xae80, 0x0) 17m5.016835507s ago: executing program 33 (id=824): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = getpid() syz_pidfd_open(r3, 0x0) setns(r2, 0x24020000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01864ba, &(0x7f0000000100)={0xfffffffffffffffe, 0xe, 0x1f}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="6c66b8ae008ec865da00b8010000000f01d90f01df0fc7360f320fae8f00a0000066b81f018ee8b9840b00000f32", 0x2e}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000140)={0xc9, 0x0, 0xc}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f00000000c0)={0xa8, 0x0, 0x1}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') read(r6, &(0x7f0000000200)=""/4096, 0x1000) ioctl$KVM_RUN(r1, 0xae80, 0x0) 16m22.305414088s ago: executing program 0 (id=991): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r1, 0x401070cd, &(0x7f0000000040)) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000094760138b4af7eea3418ca106a0c9adc4fae9ea16aea62a01c6b1b77fe4e80d95ef80168044884fd44c804303a37df1d55e9bcd4ebbc20faef8a7a659c2c2b39c09f45178f89b1fad2257842ee76490f3fc1c31f8c7730c89ccd55314faa3a0000000000000800000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) close(r2) socket(0x1d, 0x2, 0xfd) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="09ff00"}) syz_usb_control_io$printer(r0, 0x0, 0x0) 16m20.356658544s ago: executing program 0 (id=1003): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in=@broadcast}, {@in=@dev, 0x0, 0x6c}, @in6=@mcast2}, 0x0, 0x7fff}, [@proto={0x5, 0x1b}]}, 0x100}}, 0x0) mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000200)=""/129, 0x81}], 0x1, 0x80000001, 0x3f7e) getdents(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r4, 0x102, 0x0) lseek(0xffffffffffffffff, 0x6f5, 0x5) getdents(r4, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="5437b069624063310ee960057b664a36389ee7da3fcb712db7ef69f4fef554928d03d2e291175c70e750bccf20", 0x2d) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000100)={0x11, @empty, 0x15, 0x4, 'wlc\x00', 0x3c, 0xc, 0x83}, 0x2c) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x14, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'caif0\x00', {0x2, 0x4e23, @broadcast}}) 16m19.413497942s ago: executing program 0 (id=1007): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 16m19.412203056s ago: executing program 0 (id=1008): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, 0x18, 0x209, 0x0, 0x0, {0x2}, [@typed={0x4, 0x800}, @typed={0x14, 0xf2, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x2c}}, 0x0) write$tun(r0, &(0x7f0000002980)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xb16, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast}, "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"}}, 0xb24) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 16m19.196451339s ago: executing program 0 (id=1009): r0 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r0, 0x4000000000000000, 0x0) 16m18.125058095s ago: executing program 0 (id=1013): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000780)={0x400, 0xffffffffffffffff, 'id0\x00'}) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x9, 0x4) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af25, &(0x7f0000000140)=0x20c000000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010002000020000000002500000008000300", @ANYRES32=r5, @ANYBLOB="08002600b41400000a000600ffffffffffff000008003500000000000a003400020202020202000034005080110001005a4ac6ae0963ee7ffa96cb120900000009000100408922a0bd00000005000200010000000800030001ac0f"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x70, r4, 0x400, 0x70bd2b, 0x80, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x24, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffc}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084014) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000bc0)=ANY=[@ANYBLOB="120100004107f540f30c75939e1a000000010902120001000000000904000000bee4f900f70e5aabcaf8a9d583196f25f31ef2cf6d8f7bb561c5505c3102e63041b1059d3061857315e13842898d8bfa3d93edf05dc54c1b25df6cfc"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) r7 = syz_open_dev$vcsa(&(0x7f0000000380), 0x9, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000980)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f0000000440)={0x1c, r4, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x77}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x4004044) (async) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000080)={0x0, 0x0, 0x8, "fa0fffffffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_connect$cdc_ecm(0x0, 0x87, &(0x7f0000000b00)=ANY=[@ANYBLOB="12015002020000402505a1a44000010203010902750001010700030904020600470a2406000095c668e863052400480b0d240f01020000000100020021122407d500000b000000000109000001ba0006241a3200100a240700fcffb4088bf106241ae0e004052401007f08241c02006605000905820208000f0500090503022000000fff8b6765edc0d733b30fd931dced5ec54691ee85f6bef590eb4bd26e513be14a5932ee5cab4e57fe7415ae"], &(0x7f0000000680)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x3, 0x40, 0x7, 0x40, 0xde}, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x5, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1401}}, {0xcd, &(0x7f0000000500)=@string={0xcd, 0x3, "6da9ab7027c15e0022bcf6c606a010ebec4daa5730bce649b76a8d727ac07d95cb9aff5a625cf1da1305a2b99c81ffe5ce12c1d0c25ad7d85d3c51e0012bf84a534d624bda4432df03f0e339054ca5d44d8271cd6b43444bd7a4d61af368bb86e0e69f241e15345cefa19882a5ad5776702fc2cce2e0aa67cfc98088167137f2c009cf6a05871792f05dd9acd1b8ac21c0fee54370d9f08a59e6541a4d2503f98d83c1039ab6c28bace863504d2b9b26f628477684df155fd5ca1ebea2fd12cbb0e25d2b6405b24bbdc77d"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x446}}]}) (async, rerun: 32) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r10, &(0x7f0000000180)={0xa, 0x4000, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c) (async) r11 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x4e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x20000804) (async) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r11, r12, 0x0) keyctl$chown(0x4, r11, 0x0, 0xee01) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4e21, 0x6, @local, 0x3ff}, 0x1c) (async) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)={0x34, 0x42, 0x107, 0xfffffffe, 0x25dfdbfc, {0xa, 0x7c}, [@nested={0x4, 0x142}, @generic="068bb466551100895cc09de89964006e91f5ca14e1eeb8176fa2654f"]}, 0x34}}, 0x40000) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000005000000340000000000000000000000f21be072b54f", @ANYBLOB="9ec2c5c060ea896189bf1eea721a6d7e44e7b1af7d63d18734e1e5481fa7cf7449d805be88673d2d255b334432ebe7ee3f94216bc0c679dd4f878df4f7a5512d5afc7158297b9887c7373e5fabf2da8f7f90170d95a6e39423c0ab04961a418d0c413e06e2d3e5d87df892655b89efd19cc7ad3538a52393539deb205c03bc371831cc90b83610dc559f8ac0dde42c4ea4d731cb336425532591e8dcc07adb52bbebd7febf975e55ee85bc287c5127a293ad572b31a23bd8c9dd4c9e733f0d037e774316991d629d50d56896cae8e05e48725edadb00431d039c29d0849d2e298dd857", @ANYBLOB="0a8034000101000000000000000061ce"], 0x3c}, 0x1, 0x0, 0x0, 0x4000041}, 0x20040040) 16m17.512684238s ago: executing program 34 (id=1013): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000780)={0x400, 0xffffffffffffffff, 'id0\x00'}) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x9, 0x4) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af25, &(0x7f0000000140)=0x20c000000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010002000020000000002500000008000300", @ANYRES32=r5, @ANYBLOB="08002600b41400000a000600ffffffffffff000008003500000000000a003400020202020202000034005080110001005a4ac6ae0963ee7ffa96cb120900000009000100408922a0bd00000005000200010000000800030001ac0f"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x70, r4, 0x400, 0x70bd2b, 0x80, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x24, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffc}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084014) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000bc0)=ANY=[@ANYBLOB="120100004107f540f30c75939e1a000000010902120001000000000904000000bee4f900f70e5aabcaf8a9d583196f25f31ef2cf6d8f7bb561c5505c3102e63041b1059d3061857315e13842898d8bfa3d93edf05dc54c1b25df6cfc"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) r7 = syz_open_dev$vcsa(&(0x7f0000000380), 0x9, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000980)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f0000000440)={0x1c, r4, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x77}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x4004044) (async) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000080)={0x0, 0x0, 0x8, "fa0fffffffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_connect$cdc_ecm(0x0, 0x87, &(0x7f0000000b00)=ANY=[@ANYBLOB="12015002020000402505a1a44000010203010902750001010700030904020600470a2406000095c668e863052400480b0d240f01020000000100020021122407d500000b000000000109000001ba0006241a3200100a240700fcffb4088bf106241ae0e004052401007f08241c02006605000905820208000f0500090503022000000fff8b6765edc0d733b30fd931dced5ec54691ee85f6bef590eb4bd26e513be14a5932ee5cab4e57fe7415ae"], &(0x7f0000000680)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x3, 0x40, 0x7, 0x40, 0xde}, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x5, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1401}}, {0xcd, &(0x7f0000000500)=@string={0xcd, 0x3, "6da9ab7027c15e0022bcf6c606a010ebec4daa5730bce649b76a8d727ac07d95cb9aff5a625cf1da1305a2b99c81ffe5ce12c1d0c25ad7d85d3c51e0012bf84a534d624bda4432df03f0e339054ca5d44d8271cd6b43444bd7a4d61af368bb86e0e69f241e15345cefa19882a5ad5776702fc2cce2e0aa67cfc98088167137f2c009cf6a05871792f05dd9acd1b8ac21c0fee54370d9f08a59e6541a4d2503f98d83c1039ab6c28bace863504d2b9b26f628477684df155fd5ca1ebea2fd12cbb0e25d2b6405b24bbdc77d"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x446}}]}) (async, rerun: 32) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r10, &(0x7f0000000180)={0xa, 0x4000, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c) (async) r11 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x4e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x20000804) (async) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r11, r12, 0x0) keyctl$chown(0x4, r11, 0x0, 0xee01) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4e21, 0x6, @local, 0x3ff}, 0x1c) (async) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)={0x34, 0x42, 0x107, 0xfffffffe, 0x25dfdbfc, {0xa, 0x7c}, [@nested={0x4, 0x142}, @generic="068bb466551100895cc09de89964006e91f5ca14e1eeb8176fa2654f"]}, 0x34}}, 0x40000) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000005000000340000000000000000000000f21be072b54f", @ANYBLOB="9ec2c5c060ea896189bf1eea721a6d7e44e7b1af7d63d18734e1e5481fa7cf7449d805be88673d2d255b334432ebe7ee3f94216bc0c679dd4f878df4f7a5512d5afc7158297b9887c7373e5fabf2da8f7f90170d95a6e39423c0ab04961a418d0c413e06e2d3e5d87df892655b89efd19cc7ad3538a52393539deb205c03bc371831cc90b83610dc559f8ac0dde42c4ea4d731cb336425532591e8dcc07adb52bbebd7febf975e55ee85bc287c5127a293ad572b31a23bd8c9dd4c9e733f0d037e774316991d629d50d56896cae8e05e48725edadb00431d039c29d0849d2e298dd857", @ANYBLOB="0a8034000101000000000000000061ce"], 0x3c}, 0x1, 0x0, 0x0, 0x4000041}, 0x20040040) 7m48.367599272s ago: executing program 4 (id=3567): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x2, 0x4, 0xd000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x2, 0x4, 0xd000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) ioctl$AUTOFS_IOC_FAIL(r0, 0x40087543, 0x200000000000) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000240)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000040)={0x10, 0x0, "aa7e483d92730884566a3c85f09eabea"}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r4, r5, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x0, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) 7m47.08362169s ago: executing program 4 (id=3570): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x1000000, r4}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r7, 0xffffffffffffffff, 0x0) syz_open_dev$ndb(&(0x7f0000001800), 0x0, 0x100) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r10, 0x4b32, 0xf1a) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x3c, r11, 0x633d41a77d0888ff, 0x70bd26, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3f}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044084}, 0x20048841) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r9) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x60a3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) 7m45.720350921s ago: executing program 4 (id=3577): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x4, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2fc}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[], 0x18c0}}, 0x0) 7m45.585140602s ago: executing program 4 (id=3578): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r1, &(0x7f00000010c0)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000240)="a905000000007464000100002400000000e5c06417e436a106993e1e4ad8311dabcd25ca", 0x24}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000840)=[@ip_ttl={{0x14}}], 0x18}}], 0x2, 0x44884) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000540)="b5399e9379812f531c0725fee6f2a4cff5028d22c33d5b5f3341adacb4f49b1aa0ba38f8885f0f32ed112835b8fe0b7e6f1f0737cafec837adfb878a9799f4c27cf5479375c7d6f32aaec6ce08133806406f34cabbdc4aa4418c888bb3d213cb4f72c4829036faf50e5717", 0xfffffffffffffdea) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "fee896072000001ea89de600da2e5125960001400000000000000000000000000007000000000000000000000000000000000000000000000000000000e600", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd0000007dcbd7d6c300"}}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000340)=[@in={0x2, 0x4e23, @multicast1}]}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000400)=r5, 0x4) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r2, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001380)={0x0, 0x1000, "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"}, &(0x7f0000000140)=0x1008) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000001c0)={r6, 0xd}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000780)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x1, 0x32}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e23, 0x404, @mcast2, 0x5}}, 0x1ff, 0x8, 0x4, 0x0, 0x400}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={r7, 0x5}, &(0x7f00000000c0)=0x8) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000023c0)="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", 0x393}, {&(0x7f00000009c0)="f6c90cdedc37cdb39eae133fb46bb0b986be85321a17fc6e8ea85f018f6e81d55fa08f68960887cd420ea0c8ec111c66ec2c3baa2e4800207807a82a4559bad7736a5423c2d786f76c4aea14258d0bef41454167a1d439b5d9cfb6c508cd6b2fbbc751c26b5d345d2afa25b68d5d26612cc4af16ff3084f83682ac9b1e4dec81ac3bec3d01ca9c55e546bb09bdbc0534b04938b7a47cc4aa9f754b42d9012c35374c5576d7a1e7d5e64ced4d846135f8173ba207da142ad73646af1fcf1ec66859f0d2cf9fa2e6dbf733425eeb9b05ff7b1a3bfff2130084f8d175354899c362361d83c3025aa3df6db80e6187ca5ddc3a288a5405", 0xf5}, {&(0x7f0000000180)="1b0ad65e03f9915bfddf26c24e848a70b9d041082765acf5bbcc6657aea857184012783975c51c2f", 0x28}, {&(0x7f00000010c0)="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", 0x2bc}], 0x4}}], 0x2, 0x4048884) 7m45.445339018s ago: executing program 4 (id=3579): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async, rerun: 64) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000000)=""/98, 0x62) lseek(r1, 0x700, 0x0) (async, rerun: 64) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f00000000c0)={0x28, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r2 = socket$inet(0x2, 0x1, 0x7) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) (async, rerun: 32) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) (rerun: 32) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f0000000140)={0x0, 0x1, 0x87, 0x7}) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x20, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) (async) rt_sigprocmask(0x2, &(0x7f0000000040)={[0x3]}, 0x0, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) (async) sendmmsg$inet(r2, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="27c051140ce966c729205e1f42bda4d4bfa0d04ea0f3aca34a12be7fe01477df17cede1d86888516e1b14299f716b74b1d65a922e13f8bce125009baf93221c5f41f11d1857ca48bf5c81f74a64be5b9de7c64d738d375", 0x57}, {&(0x7f0000001040)="7f37c2baff0de55ce257091de4c8892e4e2d3615845085eae2e0699584e968c7141722f4305e686bb965fd42e6d1e565ac9a4c61a54bedbb3ed6d56b12c88dfd97cca4043efd9cc56ed65429e609e6df87544cd6486c2c74e84799c1fbc811fe1fbf14c3d474c2baa1e7c86427d235110101", 0x72}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000014c0)="44b896818dd13e040b09e9ff5327615afa549fe545b6e79585e067af4328bcc41f778fcecf104cf2318418907de2bda01878a558af061d15e45bfcba7610e1717120c4cd89550ca5069f6a023247437795a1028586291e3ff5ae2d9cd5d53032ac1d8e3f03fda211e4e8b45b57f046dcfde576d968f876c7f903e2fa43dca292ba5c8b339bb8d32875e723f56bf3f8c656c5c528a5b6976144b187c3d58e6bcb45d0236937b54f453e4f6db1a782473b11431baad933e77f6f394fcbec25197f80c65b92d44f127521fcbb98834bb63497275e62728c2cbdc74c00fe08a87b6b289b57110406423a213e83d1fc90e352b7ebdf6a7de4dfca1639d411be33644cafb5342e5653b5c01fce094b85f2af40d7feb1798e5cb1d29daa5def62e1aebf349a8801ab83566259fdb9b404f3d53ddb2ebdf1f25336da5560b6264253327846a1735ef6d24fcfc8dbe6ed7f05dee713c26b5912fbf3ef8fbdcea57709fd9840cd1e93c6397528fffeadc580a1758834f7266a7dd63f9b3f15185a9373beb9bef45bf0ce359f523be49540d1f6cc546e55d0997e7ac631a60bc084f1ab2d51d666a6ae1210ee05d21a2be362e2d4143f765317921bd355f58363b83a93adacd2a3a55da508c627adc43e2f812b1d639b5f210e9f57cf112cc502f9f8ee41569f3b485d95adfcd3dd078b7aababc5a604751bcebd2e703065485474410bf05de82509eea11a76173967b825ef781dc5fa072c10760136f921275805d2a7c4695f", 0x221}], 0x1}}], 0x2, 0x0) syz_io_uring_setup(0x7b66, &(0x7f0000000000)={0x0, 0x5658, 0x2, 0x3, 0x1c}, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) (async) r5 = syz_open_dev$sndpcmc(&(0x7f00000003c0), 0x0, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000009, 0x13, r5, 0x0) (async, rerun: 32) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) (rerun: 32) 7m44.840425171s ago: executing program 4 (id=3582): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x0, 0x0, 0x83, 0xec}}]}}]}}, 0x0) 7m29.912463279s ago: executing program 35 (id=3582): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x0, 0x0, 0x83, 0xec}}]}}]}}, 0x0) 27.918871582s ago: executing program 5 (id=5531): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x21, 0x0, 0x4) r2 = socket$qrtr(0x2a, 0x2, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x800000, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x4d2001, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_cmd_rej_unk={{0x1, 0x4, 0x2}, {0xfa8}}]}}, 0xf) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001900150000000000ffffffff0a0000000202000000000000240009801c00000000000000140005"], 0x40}], 0x1}, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) r5 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$sierra_net(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$rtl8150(r5, 0x0, 0x0) syz_usb_control_io$sierra_net(r5, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000480)=ANY=[], 0x0, 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCSETS(r3, 0x40204706, &(0x7f0000000040)={0x8, 0x5, 0xb1, 0x3f, 0x1a, "3eccd25500"}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000f, 0x110, 0xffffffffffffffff, 0x70fa6000) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000240)={[0x5240]}, 0x8, 0x0) getpeername$l2tp6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000100)=0x20) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) 26.153291514s ago: executing program 5 (id=5533): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x200800, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) (async) ioctl$sock_bt_hci(r1, 0x400448ca, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) 26.045496088s ago: executing program 5 (id=5534): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) setsockopt$inet_tcp_int(r1, 0x6, 0x25, &(0x7f0000000000)=0x40, 0x4) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000060601"], 0x14}}, 0x810) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x9) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 25.04412934s ago: executing program 5 (id=5539): r0 = socket(0x11, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='mpol=bind:0-N:N/N']) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x2, 0x6, @broadcast}, 0x14) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 24.901430392s ago: executing program 5 (id=5540): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) sendmmsg$unix(r1, &(0x7f0000002fc0), 0x0, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000080)={{0x8cae, 0x2}, 0x2}, 0x10) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) (async) getgroups(0x3, &(0x7f00000000c0)=[0x0, 0x0, 0xffffffffffffffff]) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090480000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) (async) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r0, 0x6f000) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000)={0x6}, 0x1) (async) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x2, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x2, 0x2, 0x210, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) 23.508997255s ago: executing program 5 (id=5542): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x0) ioctl$BLKTRACESTART(r2, 0x2275, 0xffefff1f00000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) 8.126967731s ago: executing program 36 (id=5542): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x0) ioctl$BLKTRACESTART(r2, 0x2275, 0xffefff1f00000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) 6.016792128s ago: executing program 6 (id=5592): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r0, &(0x7f0000000100)=@abs={0x27}, 0x6e) getpeername(r0, &(0x7f0000000000)=@phonet, &(0x7f0000000080)=0x80) 5.857403499s ago: executing program 6 (id=5593): r0 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000000)={'xfrm0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xcccc0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e1e, @broadcast}, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) (async) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4f24, @broadcast}, {0x2, 0x4e21, @private=0xa010101}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, 0x25, 0x0, 0x0, 0x0, 0xcc, &(0x7f0000000140)='macvtap0\x00', 0x80000001, 0xe0e, 0x7ff}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000030100c0"]) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160-generic\x00'}, 0x58) (async) r8 = syz_open_dev$radio(&(0x7f0000000280), 0x3, 0x2) ioctl$VIDIOC_DBG_S_REGISTER(r8, 0x4038564f, &(0x7f0000000300)={{0x4, @addr=0x4}, 0x8, 0x6, 0xfffffffffffffff9}) (async) r9 = accept(r7, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) 4.849798529s ago: executing program 6 (id=5594): setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)="8be15cb1a5e86b9d5d5f9ba5540491bd67d0514d5521c1cd46d745316c2c66750bc80524f90106af89eb59477e99bf5c648b0442aece755ff4e80f4d3a97ce013e150db0aa33e62c7fed1cf7a72e0c3bde9928f9fb7c6a3b005754d2488fce965051", 0x62, 0x1) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r1 = socket$inet6(0xa, 0xa, 0xee) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000001c0)={0x2527, 0x51, 0x4c6, 0x3, 0x1, "0f772efe7d616f511388caa06486ee85681fbd", 0x9, 0x4ad}) lremovexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@random={'os2.', ']\x00'}) sendto(r3, &(0x7f0000000280)="9ac8d547e7f945e5c79053a85ade7c0fba8e8ffd850f8d0bfc516d91fc6c41b0ca24ba122abe3f7f91b1638e6feb1a201057cf9ac274aa3ad2feeab3fa277e32d81fd2d3b128accf4f6c99a016e5f94ebe216ed29b9406bec23e55c4f9b5e259f763b4cc2dee890ecb3bb75a649201e6d80d6ef47d71757ded18596303049864e36032f72ef6ea0ed6859d2e85c4c8e0dda251deae68bfb80e7023f1e3ec18cd80c71bcfa5d4deefa196f479ea0f448c9282d8e9f388908f2a06f555ad2bc7", 0xbf, 0x4008000, &(0x7f0000000340)=@isdn={0x22, 0x8, 0x6f, 0x5, 0x40}, 0x80) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000007c0)={0xcf, 0x3, &(0x7f00000003c0)="462e1803f6ded9fb5677106e937356bd56264d49c4228c9c99df81d375f10857bb4d91ab2035451a8ee42414765466e2a002b59a15769212dca5adb6d78f7dc348ad18678e139fa3340b9d5ddf47659f10e9d0367f6d79052d3d8cb73debee6b06ba1c04f9b40308c16c33ce065ae8f3b6e808814e0e14ac87496a30c6bc9d12617645cdf67e41b709437e2b2e6714ad377e91634d4eefd625f649b51ec5278041321cddfaa6b1f6f88e4e5fc2050763dd97a654dbd1a83f185766318fa9c10586d691db074600426e0bbbca43fd2341392283ac82e8399d830f865da83a1949710d2bc0b122c7991ad263f5e53c342553f267edeb76316226b6f6331af70e174b95020a206f605f0c2c5814d4a7768235ef350a5295277dbf45f7a0b3523b5747ecd754348f8cb2c8a856afd2f35378a9ced65c4c85bb349ff603e2c89a687067b9884db2dfc4ee53643e78395126359234f9eda835e63bcad6b03f0053e2e95faab1a67d6667bfebf4cee06098c96b7bc149ab027ec39013bdbea15f03c729a3810cc39379cd542b19facebe36a7b73271cd1568b8f3ecf2db4169df288f92e00f9d6337fe779ba57563e35534ab20cfff548baf953ab7b5bacca323bbbae9bcd4fa5b2109c0324ee4931d8cf43cc2ec5ee400cf84b876c05b24142e4601bba51d82b5a4b1de23ac5995248b2dffe2294eb07c9e608b8651294386e6c8294cf3d4ba83bc914a0f51c74cebac050752a4dd18dbf314f8f1ee37334d6a82d23ef1be29b550d83dfd9b894427147a669eb6377e9c5dd2aa4e4a5a8a4d4b605a1f9840c98c85de7da478a918a15167e3076f94e80c663f1412a75a0d984cd9d26c63ab37efcb81313cb2db4443b25610390facf475c80a03009f6cc844d268f085b80d6d69e14798517538d235f6c6e5672c591b2239258ca9f9d9cfd15d3bf9f0644ad95c28075b28f88f3921b145c79f7bb1461cd1b004a4d8322ca0ce43a0b2dbeb044d3fb39efc24e989d3fe0caf71d1c556496a36b6477bb9145ada29079d39312cdb7e113cc2b93e87527c42f439393680cf049387041af60fb3eab2ae4015462caa2250578315a088058cee2b06e49a28965565d06267b7f9dc956e0a8d2936b81f22f45666fca902764b8dc30b60746bac9d8975c00d21e6ec612ec4d7abe1f730be246cc521ad4f70898086ae11ff2db402b740a35b6edd33995f7f2e9d729f087bc79f213fff6fe13fc35c075c98b68985f2fff082a97bf896eeae5726e700290555bdcca8f61c9b3725e099548e69b9ee9c7c3848781b9bd05e364c21b5a7ce01fd13df0d3851092383708c245d3881910e4226fea8cf3975942f264a2d57c3833870f099a6128c3898ae1b73249606cc0343b1bae38ae8d6c53653f2de88e9c2378ae1607587d29081e03a0f0647949471fd2e9efba8677a0bd5d4"}) writev(r1, &(0x7f0000000880)=[{&(0x7f0000000800)="d964e895d37d3f69d1dc405d080c3ee244acc146d8e8dbdef54a9f15971f46fad585d0d231f6ec0d3688a4da6a16c221be30bd4c496828e32a0f5d7cad211aa246721a6010ed265b5e96904aabbeee64343539b3cd7982cc82ea454dc6916ba85a8a38a0b2230bb64e921c73b88d58724dda6311014dc6854e0661c2f0", 0x7d}], 0x1) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f00000008c0)=0x1, 0x4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r2) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r5, 0x408, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000801) removexattr(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)=@random={'system.', ']#B\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000b00)={{r0}, 0x0, 0x0, @unused=[0x7f, 0xb7, 0x8, 0x7], @subvolid=0x1}) r6 = syz_create_resource$binfmt(&(0x7f0000001b00)='./file0\x00') execveat$binfmt(r2, r6, &(0x7f0000001bc0)={[&(0x7f0000001b40)='.\x00', &(0x7f0000001b80)='user.incfs.metadata\x00']}, &(0x7f0000001e40)={[&(0x7f0000001c00)='%(\x00', &(0x7f0000001c40)='}!\\\x1d(]\x00', &(0x7f0000001c80)='\\$)\x82/$[&\x00', &(0x7f0000001cc0)='/dev/vcsa\x00', &(0x7f0000001d00)=']#B\x00', &(0x7f0000001d40)='batadv\x00', &(0x7f0000001d80)='[\\[\x00', &(0x7f0000001dc0)='/dev/vcsa\x00', &(0x7f0000001e00)='{:@[+$%^{\'\x00']}, 0x800) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000001ec0)={0x0, 'team_slave_1\x00', {0x4}, 0x1}) symlinkat(&(0x7f0000001f00)='./file0\x00', r0, &(0x7f0000001f40)='./file0\x00') r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001fc0), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000002080)={'syztnl2\x00', &(0x7f0000002000)={'gre0\x00', 0x0, 0x10, 0x700, 0xd3, 0x3, {{0xe, 0x4, 0x2, 0x0, 0x38, 0x64, 0x0, 0x5, 0x0, 0x0, @multicast1, @loopback, {[@timestamp={0x44, 0x14, 0x97, 0x0, 0x0, [0x0, 0x4, 0xffff, 0x28]}, @timestamp_addr={0x44, 0xc, 0x7e, 0x1, 0x4, [{@empty, 0x8}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000002140)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x2c, r7, 0x70a, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x20000080) write$P9_RWSTAT(r2, &(0x7f0000002180)={0x7, 0x7f, 0x2}, 0x7) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000004280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000046c0)={&(0x7f0000004200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000004680)={&(0x7f00000042c0)={0x388, r9, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_RATES={0x1bc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x5, 0x0, 0x8, 0x2, 0x4, 0x0, 0x101]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x144, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xb, 0x48, 0x1e, 0xb, 0x5, 0x0, 0x2, 0x3, 0xb, 0x4, 0x4, 0x30, 0x18, 0xb, 0xc, 0x0, 0x24, 0x4, 0x30, 0x0, 0x16, 0x36, 0x30, 0x12, 0x1, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x3, 0x3ff, 0x3, 0x80, 0x5, 0x3, 0x9533]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x9, 0x0, 0x7, 0x9, 0xd95, 0xcf9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7f, 0x6, 0xf, 0x6, 0x4, 0xf3d2, 0x400]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x5, 0x3}, {0x1, 0x4}, {0x4, 0xa}, {0x3, 0x9}, {0x6, 0x1}, {0x6, 0x1}, {0x3, 0x8}, {0x1, 0x2}, {0x2, 0x6}, {0x6, 0xa}, {0x6, 0xa}, {0x3, 0x1}, {0x0, 0x8}, {0x4, 0x1}, {0x0, 0x4}, {0x1, 0x4}, {0x4, 0x3}, {0x4, 0x9}, {0x2, 0x3}, {0x0, 0x6}, {0x1, 0x9}, {0x3, 0x4}, {0x0, 0x2}, {0x1, 0x4}, {0x7, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x4, 0x4}, {0x1, 0x3}, {0x4, 0xa}, {0x2}, {0x1, 0x5}, {0x6, 0x9}, {0x1, 0x5}, {0x0, 0x2}, {0x6, 0x3}, {0x3, 0x5}, {0x5, 0x5}, {0x6, 0x4}, {0x3, 0x6}, {0x2, 0x4}, {0x5, 0x5}, {0x7, 0x4}, {0x6, 0x3}, {0x5, 0xa}, {0x7, 0x8}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x6}, {0x2, 0x2}, {0x5, 0x6}, {0x3}, {0x6, 0x7}, {0x7, 0x1}, {0x1, 0x1}, {0x4, 0x7}, {0x1, 0x8}, {0x7, 0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x4}, {0x2, 0x4}, {0x0, 0x5}, {0x0, 0x5}, {0x2, 0x3}, {0x4, 0x3}, {0x2, 0x6}, {0x2, 0x4}, {0x4, 0xa}, {0x7, 0x1}, {0x0, 0x4}, {0x0, 0x8}, {0x6, 0x6}, {}]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x6}, {0x6, 0xa}, {0x1, 0x7}, {0x1, 0x8}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0x7}, {0x5, 0x4}, {0x6, 0x8}, {0x0, 0x2}, {0x0, 0x3}, {0x5, 0x4}, {0x2, 0x5}, {0x2, 0x2}, {0x6, 0x6}, {0x7, 0x6}, {0x2, 0x9}, {0x1, 0xa}, {0x4, 0x9}, {0x5, 0x2}, {}, {0x5, 0x4}, {0x7, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x0, 0x6}, {0x3, 0x5}, {0x1, 0x5}, {0x6, 0x9}, {0x3, 0x1}, {0x4, 0x2}, {0x5, 0x4}, {0x1, 0x8}, {0x3, 0x5}, {0x6, 0x2}, {0x7, 0x9}, {0x3, 0x4}, {0x1, 0x3}, {0x3, 0x9}, {0x2, 0x2}, {}, {0x7, 0x9}, {0x1, 0x9}, {0x0, 0x8}, {0x3, 0x5}, {0x3, 0x9}, {0x1}, {0x6, 0x9}, {0x7, 0x9}, {0x7}, {0x7, 0x5}, {0x1, 0x8}, {0x7, 0x6}, {0x1, 0x4}, {0x5, 0x6}, {0x2, 0x2}, {0x7, 0x7}, {0x2, 0x4}, {0x0, 0x2}, {0x4, 0x3}, {0x2, 0x4}, {0x6, 0x6}, {0x0, 0x6}, {0x3, 0x9}, {0x0, 0x9}, {0x7, 0x1}, {0x1, 0x4}, {0x5, 0x4}, {0x7, 0x8}, {0x0, 0x7}, {0x6, 0x8}, {0x6, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x821a, 0x9, 0x99, 0x0, 0x380, 0x5, 0x7022, 0x5]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x9, 0x9, 0x4, 0x2, 0x18, 0xb, 0x60, 0xc, 0xb, 0xa, 0x24, 0x6c, 0x3, 0x16, 0x6, 0x24, 0x36, 0x9, 0x24, 0x6c, 0x48, 0x0, 0xb, 0xc, 0xb, 0x2, 0x6, 0xb]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x2, 0x8, 0x6, 0x0, 0xf75e, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x1, 0x6}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x2}, {0x4, 0x5}, {0x2, 0x5}, {0x2, 0x2}, {0x6, 0x1}, {0x0, 0xa}, {0x3, 0x2}, {0x6, 0xa}, {0x4, 0x8}, {0x1, 0xa}, {0x4, 0x2}, {0x2, 0x9}, {0x3}, {0x7, 0x1}, {0x1, 0x8}, {0x1, 0x7}, {0x1, 0x4}, {0x4, 0x9}, {0x5, 0x6}, {0x7, 0x4}, {0x3, 0xa}, {0x3, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x1b0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0xdc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x1, 0x8}, {0x4, 0x3}, {0x1, 0x4}, {0x1, 0x7}, {0x1, 0xa}, {0x6, 0x8}, {0x7, 0x7}, {0x0, 0xa}, {0x7, 0x7}, {0x0, 0x4}, {0x6, 0x2}, {0x6, 0x8}, {0x4, 0x2}, {0x6, 0xa}, {}, {0x7, 0x1}, {0x0, 0x5}, {0x5, 0x9}, {0x4, 0x6}, {0x3}, {0x2, 0x2}, {0x1, 0x9}, {0x1}, {0x7, 0x4}, {0x1, 0x2}, {0x0, 0x7}, {0x7, 0x6}, {0x4, 0x8}, {0x6, 0x9}, {0x1, 0x4}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x2, 0x5}, {0x5}, {0x4, 0x1}, {0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x2, 0x4}, {0x3}, {0x1, 0x4}, {0x1, 0x5}, {0x2, 0x4}, {0x3}, {0x4, 0x2}, {0x6, 0x6}, {0x4, 0x8}, {0x1, 0x2}, {0x2, 0x5}, {0x0, 0x4}, {0x3}, {0x4, 0x8}, {0x5, 0x4}, {0x7, 0x7}, {0x1, 0x6}, {0x7, 0x9}, {0x7, 0x2}, {0x3, 0x4}, {0x7, 0x4}, {0x2, 0x4}, {0x1, 0x2}, {0x6, 0x1}, {0x2, 0x8}, {0x3, 0x6}, {0x1, 0xa}, {0x7, 0x7}, {0x1}, {0x1, 0x2}, {0x3, 0x8}, {0x7, 0x8}, {}, {0x1, 0x3}, {0x0, 0x6}, {0x2, 0x6}, {0x2, 0x2}, {0x5, 0x7}, {0x2, 0xa}, {0x1}, {0x7, 0x4}, {0x4, 0xa}, {0x6, 0x6}, {0x5, 0x8}, {0x6}, {0x6, 0x8}, {0x0, 0x6}, {0x4, 0x2}, {0x7, 0x2}, {0x2, 0x9}, {}, {0x0, 0x9}, {0x0, 0x5}, {0x1, 0x3}, {0x0, 0x6}, {0x6, 0x7}, {0x0, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x90, 0x0, 0x7, 0xfffc, 0x4b33, 0x0, 0x1, 0x160]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x2}, {0x7, 0x6}, {0x1, 0x3}, {0x3, 0x8}, {}, {0x5, 0x4}, {0x0, 0x5}, {0x5, 0x6}, {0x6, 0x2}, {0x0, 0x9}, {0x4}, {0x0, 0x8}, {0x1, 0x9}, {0x2, 0x5}, {0x3, 0x8}, {0x2, 0x6}, {0x4, 0x3}, {0x5, 0x9}, {0x3, 0x7}, {0x6, 0x7}, {0x3, 0x1}, {0x3, 0x7}, {0x2, 0x4}, {0x5, 0x3}, {0x1, 0x7}, {0x0, 0x1}, {0x7, 0x4}, {0x3, 0x8}, {0x0, 0xa}, {0x6, 0x8}, {0x5}, {0x5, 0x4}, {0x1, 0x5}, {0x3, 0x5}, {0x5, 0x9}, {0x6}, {0x7, 0xa}, {0x7, 0x9}, {0x0, 0x5}, {0x4, 0x1}, {0x3}, {0x6}, {0x1, 0x7}, {0x0, 0x3}, {0x3, 0x8}, {0x3, 0x2}, {0x3, 0x9}, {0x5, 0x8}, {0x1}, {0x3, 0x2}, {0x0, 0xa}, {0x1, 0x3}, {0x1, 0x8}, {0x5, 0x1}, {0x2, 0x3}, {0x3, 0xa}, {0x2, 0x8}, {0x6, 0x6}, {0x0, 0x5}, {0x4}, {0x2, 0x3}, {0x0, 0x9}, {0x6, 0x6}, {0x1, 0x3}, {0x7, 0x4}, {0x5, 0x6}, {0x2, 0x2}, {0x5, 0x9}, {0x5, 0x3}, {0x6, 0x4}, {0x7, 0x4}, {0x4, 0x8}, {0x5, 0x6}, {0x7, 0x3}, {0x0, 0x8}, {0x6, 0x3}]}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x1, 0xa}, {0x3, 0x6}, {0x7, 0x2}, {0x0, 0x2}, {0x5, 0x9}, {0x4, 0x8}, {0x4, 0x8}, {0x1, 0x5}, {0x5, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x1, 0x1}, {0x2, 0x3}, {0x6, 0x9}, {0x5, 0x8}, {0x4, 0xa}, {0x1, 0x3}, {0x0, 0x9}, {0x3, 0x9}, {0x1, 0x6}, {0x7, 0x9}, {0x3, 0x5}, {0x6, 0x1}, {0x5, 0x2}, {0x5, 0x6}, {0x2, 0x1}, {0x0, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x7, 0x8}, {0x7, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x2, 0x4}, {0x5, 0x7}, {0x1, 0x6}, {0x1, 0x7}, {0x0, 0x1}, {0x4, 0x7}, {0x2, 0x1}, {0x7, 0x6}, {0x6, 0x3}, {0x5, 0x4}, {0x7, 0xa}, {0x4}, {0x5, 0x9}, {0x0, 0xb}, {0x2, 0x9}, {0x7, 0x1}, {0x6, 0x8}, {0x7, 0x4}, {0x0, 0x3}, {0x5, 0x6}, {0x6, 0xa}, {0x1, 0x6}, {0x1, 0x9}, {0x4, 0xa}, {0x1, 0xa}, {0x6, 0x3}, {0x3, 0x1}, {0x2}, {0x3, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xfffd, 0x7, 0x276, 0xf800, 0x8, 0xaee, 0x98]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0x7f, 0x9, 0x8001, 0x6, 0xd, 0x1]}}]}]}]}, 0x388}, 0x1, 0x0, 0x0, 0x40000}, 0x8041) 4.821649342s ago: executing program 3 (id=5595): openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0xaaca, 0xffff, 0x0, "87d3514787b8c600004a903184033c6700", 0x0, 0x6}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xa5) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xa5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x84) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x84) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r2) (async) setregid(0x0, r2) r3 = syz_clone(0x22000000, 0x0, 0x0, 0x0, 0x0, 0x0) setresgid(0xee00, 0x0, 0x0) prlimit64(r3, 0x9, 0x0, 0x0) close(r0) (async) close(r0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000082c000/0x1000)=nil, 0x1000}, 0x2}) 4.451563592s ago: executing program 3 (id=5597): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) r0 = openat2(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', &(0x7f0000006280)={0x80040, 0x86, 0x11}, 0x18) (async) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0xb, 0x6, "0d98f14f74a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="4013b9"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000b80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x40, 0x19, 0x2, "cec2"}, 0x0, 0x0, 0x0, 0x0}) (async) r2 = open$dir(&(0x7f00000062c0)='./file0/file0\x00', 0x4400, 0x10) mkdirat(r2, &(0x7f0000000100)='./file1\x00', 0x1c0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x115) (rerun: 64) r3 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x200000, 0x91) (async) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0xa, 0x3c}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="de319d947a8552dda8e7e19c6703bbb1e747aa3f373b5994"], 0x0}, 0x0) (async, rerun: 32) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x404500, 0x0) (rerun: 32) read$FUSE(r0, &(0x7f000000a4c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) fstat(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x40, &(0x7f0000006300)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@fowner_lt={'fowner<', r8}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@fowner_gt={'fowner>', r7}}, {@fsname={'fsname', 0x3d, 'user_id'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@uid_eq={'uid', 0x3d, r8}}, {@dont_appraise}, {@pcr={'pcr', 0x3d, 0x9}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@smackfsdef={'smackfsdef', 0x3d, 'fuse\x00'}}]}}) (async) read$FUSE(r0, &(0x7f0000006440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x29, 0xfffffffe, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x120}}, 0x50) (async) syz_fuse_handle_req(r9, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x90, 0x0, 0x4000000a74c, {0xfffffffffffffffc, 0x3, 0x1, 0xffff, 0xfffffff8, 0x84, {0x6, 0x40000000005, 0xb5b, 0xf, 0x1000, 0x5, 0x7d59, 0x9, 0x480, 0x2000, 0x120000, r11, r12, 0x1ff, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f00000023c0)={0xa0, 0x0, r6, {{0x2, 0x3, 0x2, 0x641, 0x6, 0x0, {0x6, 0x3, 0x10, 0x7f, 0x1000, 0xde8, 0xa8, 0x3, 0x1, 0x1000, 0xfd, r8, r12, 0x93d1, 0xd3}}, {0x0, 0x3}}}, 0xa0) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000280)={0x100, r5}, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r13, &(0x7f00000001c0), 0x95) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r13, 0x0) (async) prlimit64(0x0, 0x2, &(0x7f0000000440)={0x6, 0x1000000000000000}, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2) 4.39977685s ago: executing program 6 (id=5598): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6) preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000540)=""/83, 0x53}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/182, 0xb6}], 0x3, 0x4, 0x3) pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='./file0\x00') ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000080)) preadv2(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/236, 0xec}, {&(0x7f00000001c0)=""/146, 0x92}, {&(0x7f0000000280)=""/97, 0x61}, {&(0x7f0000000440)=""/252, 0xfc}, {&(0x7f0000000300)=""/8, 0x8}], 0x5, 0x2, 0x80000000, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6) (async) preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000540)=""/83, 0x53}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/182, 0xb6}], 0x3, 0x4, 0x3) (async) pivot_root(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='./file0\x00') (async) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000080)) (async) preadv2(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/236, 0xec}, {&(0x7f00000001c0)=""/146, 0x92}, {&(0x7f0000000280)=""/97, 0x61}, {&(0x7f0000000440)=""/252, 0xfc}, {&(0x7f0000000300)=""/8, 0x8}], 0x5, 0x2, 0x80000000, 0x8) (async) 4.348262873s ago: executing program 7 (id=5599): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r5, 0x8004f50e, &(0x7f0000000500)) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r7, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x0, 0x3011}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) r8 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r8, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x60) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$unix(r10, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="1a", 0x1}], 0x1, 0x0, 0x0, 0x10004814}}], 0x1, 0x480d0) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0, 0x178}}, 0x20000800) r11 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000480)=[{&(0x7f0000000300)="0a8334d8974d41388ba081f6f65d525856828668c934e59303eeeff51bc48f26331d2a8e93e897831a5570579b3a32696f5b7965383e90ca1d33897c72980a4b24e5f64ea000f94e9d20c6df00bac2011dee3e8550af73f89ef3a112c7be1f1f41f099b57a19365dea2f9212fcbbc97054f94d1034eeba8028eb0372a4d11e0dd539d5f6142c4dccb31769f505fceb675affaeefa29221d9ed8ad7117227a5fd5486269d11c967a27b3c43f34a2482099c44c0f4e7faf4e5d9d4622fe97d1e9bcf81a1bc51be179aa839a6873f618c7e71c557ae5b9820acf8cf48bc8a5e9c289c72e69e2861dec20410d0743b40ce68", 0xf0}, {&(0x7f0000000400)="0402dbd0ee74e7ea41d3df406fe40ccba2ed3f7bb898ab160a620d99da5ea860ca662618b706aabfd5c3bf9abb5383e64751e667bd0fa98752dd69bafeaa4b76dda15f3046a94cc59dcc573d751195", 0x4f}], 0x2) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r4, @ANYBLOB], 0x24}}, 0x80) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r1, @ANYBLOB="6671690cc7cadc94b8bbcd8a650500b33fa9db28e0a1108f6156d5a409b4e1935fe1976a364c61ccdbe691e5d62707c7f9c056b91e6bfb810418ed31a9464543a46e202ac08859a029e15b983df2bd6f1aac21e56b25abb671e746096a7c1bcf1c32591fca8fe57d56c50ff900000000000000000000000000d5830cc4571b73bdc1f57a1077a20736c0c84dbd000000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r12 = socket(0x40000000015, 0x5, 0x0) getpeername$inet(r12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) 3.985216023s ago: executing program 6 (id=5600): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@get={0x128, 0x13, 0x400, 0x70bd26, 0x25dfdbfb, {{'morus640-sse2\x00'}, '\x00', '\x00', 0x2600, 0x400}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0xeffffffc}, {0x8, 0x1, 0xfffffbfa}, {0x8, 0x1, 0xf}, {0x8}, {0x8, 0x1, 0x8000}, {0x8}, {0x8, 0x1, 0x82a7}, {0x8, 0x1, 0x7}]}, 0x128}, 0x1, 0x0, 0x0, 0x64000}, 0x4040) r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x340, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0xa0, 0x6, [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x3, 0x8, {0x9, 0x21, 0x10, 0x6, 0x1, {0x22, 0x290}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xb, 0x80}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x10, 0x78, 0x40}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x0, 0x8, 0xf8, 0x0, 0x20}, 0x37, &(0x7f0000000100)={0x5, 0xf, 0x37, 0x4, [@generic={0x1a, 0x10, 0xb, "5efdbeb15e42a862ee87ba2d6eb278b46add41170a2e24"}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x8, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x8, 0x1, 0xffff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x6, 0x90, 0x5}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x180a}}]}) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, &(0x7f00000003c0)={0x0, 0x22, 0x35, {0x35, 0xb, "e0af464193347e383147a95910f79665af595e37715cf6a52d34939cc24f1354e877845a4b1b6ddbb269d45d654aedeb04fe74"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x340a}}, &(0x7f0000000440)={0x0, 0x22, 0x18, {[@local=@item_4={0x3, 0x2, 0x0, "c6a96c3b"}, @main=@item_4={0x3, 0x0, 0x9, "2fcf35f8"}, @main=@item_012={0x1, 0x0, 0xa, '!'}, @main=@item_012={0x1, 0x0, 0x0, ':'}, @global=@item_4={0x3, 0x1, 0x4, "a7bb9795"}, @local=@item_4={0x3, 0x2, 0x8, "b9f91060"}]}}, &(0x7f0000000480)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x80, 0x1, {0x22, 0xe6d}}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000500)={0x20, 0x17, 0x46, "70bfa733edf34b47baae3f1ca4f6f7958663c0450c2510ab4d9e43968df2414596618c51563c7c7356e8e79c6cea30639ba8c3eaa87f011227bd175eae0f25125981f65c3f6d"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000600)={0x20, 0x1, 0x53, "548e2b8951421bd7771abe1c2d47276a6a30f893e1ad0c5cc79bdd0c075eca482ac07f817c6a1498823f922ef8d4e97063e7c5401fcb902168015013bcf74430d0ff876618e335a6f71fead07efba686de5193"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x7f}}) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000800)={&(0x7f0000000700)=[0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x1, 0x8, 0x7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000940)={&(0x7f0000000840)=[0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x7, 0x1, 0x4}) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x12) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000400)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000440)={&(0x7f0000000240)=[r6, r7], 0x2}) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r9}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r8, 0xc01064ab, &(0x7f0000000380)={0x1, r10, r9}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r8, 0xc01064ab, &(0x7f0000000080)={0x0, r10, r9}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000a80)={&(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x1, 0x8, 0x6}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000bc0)={&(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0], 0x5, 0x5, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000d00)={&(0x7f0000000c00)=[0x0], &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c80)=[0x0], &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x9, 0x1, 0x5}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000e00)={&(0x7f0000000d40)=[r3, r4, r7, r9, r11, r12, r13], 0x7, 0x0, r14, 0x6f10, 0x1, 0x52, 0x10001, {0x0, 0x8, 0xde, 0x15f2, 0x400, 0x9, 0x7, 0x8, 0x4, 0x5, 0xe, 0x0, 0x3, 0xa, "f7b6fa47fde7d472fb563001e3979c975375a6ee4e3568d8930922cad934f814"}}) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 3.863289141s ago: executing program 7 (id=5601): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) r1 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x2, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x2, 0x2, 0x210, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x43f}}]}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}) landlock_restrict_self(r0, 0x1) r2 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) read(r2, &(0x7f0000000200)=""/199, 0xc7) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x3564}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) socket$unix(0x1, 0x2, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000000)={0x25, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1}, 0x6e) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010300000000000000001100000008000300", @ANYRES32=r8], 0x1c}}, 0x0) r10 = socket(0x1e, 0x1, 0x0) connect$tipc(r10, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}}}, 0x10) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x1, &(0x7f0000000540)=@ccm_128={{0x303}, "0693402a5955132b", "2500000000000000000000001400", "080000cf", "de441a4c13f9f450"}, 0x28) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000000), 0xffffff6a) 3.331471059s ago: executing program 3 (id=5602): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000e", 0x19) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x507, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05"], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) socket$inet6(0x10, 0x3, 0x0) (async) write(r0, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000e", 0x19) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x507, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) (async) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05"], 0x0) (async) 2.284899969s ago: executing program 3 (id=5603): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = socket$nl_crypto(0x10, 0x3, 0x15) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r4 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x300a}) sendmsg$nl_crypto(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES32=r1], 0x118}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x1ff, 0x4) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000400)=0xe8) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r8, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) close(0x3) sendmmsg$inet6(r8, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)='B\v', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="acbddf15", 0x4}], 0x1}}], 0x2, 0x400c404) mount$binder(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x22480, &(0x7f0000000440)={[{@stats}, {@max={'max', 0x3d, 0x2}}, {}], [{@fsname={'fsname', 0x3d, '\xff\xff'}}, {@audit}, {@dont_hash}, {@uid_eq={'uid', 0x3d, r7}}, {@hash}, {@measure}, {@measure}, {@audit}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x35, 0x37, 0x39, 0x64, 0x62, 0x61, 0x38], 0x2d, [0x62, 0x35, 0x34, 0x65], 0x2d, [0x66, 0x62, 0x37, 0x63], 0x2d, [0x61, 0x62, 0x37, 0x38], 0x2d, [0x63, 0x64, 0x62, 0x30, 0x53, 0x62, 0x31, 0x64]}}}]}) r9 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r9, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x80ad}, 0x1c) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000000)={0x0, "e0ffff13000000000000000000000000000000100000000000002000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r10, 0xc0383e04, &(0x7f0000000100)={"41984db90bbc29bffd6f85172ee82ceb2cb2ec10cfba27a8770f156fee9de10f", 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2}) syz_usb_connect(0x3, 0x36, &(0x7f0000002300)={{0x12, 0x1, 0x201, 0x7b, 0x4e, 0x64, 0x8, 0x2294, 0x425b, 0x1a35, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x10, 0x9, 0x50, 0xa, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x70, 0x7e, 0x8c, 0x1a, [], [{{0x9, 0x5, 0xe, 0x0, 0x10, 0x9, 0x2, 0xff}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x2, 0x9, 0x87}}]}}]}}]}}, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x0}) 1.657272619s ago: executing program 3 (id=5604): capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000180)={0x401, 0x7ff, 0x9, 0x58, 0x1, 0x9}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1781, 0x898, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0xa0, 0x2, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x3, 0x7, {0x9, 0x21, 0x2, 0x6, 0x1, {0x22, 0x57d}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x7, 0x9}}}}}]}}]}}, 0x0) 828.738524ms ago: executing program 6 (id=5605): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x1, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) epoll_create(0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r4, &(0x7f00000002c0), 0x220, 0x100, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x240303, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r5 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r3, 0x4068aea3, &(0x7f0000000240)={0xa4, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d00400511a09798bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab9d25bf46050d3c3a2b04", 0x4c}], 0x1}, 0x4008000) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r6], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) 667.024356ms ago: executing program 7 (id=5606): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000180)={0x4, 0x980900, 0x1}) r1 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000080)='@-.\'?*\\^-%%\\\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f00000001c0)={0x980900, 0x8081, @name="6736516728a5678c18a4ec047f3f1fa52fe9a9987d0406b3a0c705c611b66f06"}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x0, 0x5, 0x1}) 471.23228ms ago: executing program 7 (id=5607): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x82440, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x1c, &(0x7f00000000c0)="68fc2934f20c81796abf869e72a9a0abe89320838724c5dbf9f65950ed26d2289570e688c59a304fa9ce8d14aaea00db2dae7127be5fb7f52a2dc59586eb2b7c57635bc651ae05fbaa7461a542f420e7d421013d9770c2118f0977bd36d66626be6e472d2db2dc47", 0x68) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2901090, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0/../file0\x00', &(0x7f0000000300)={0x410102, 0x0, 0x10}, 0x18) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7, 0x9}}, './file0\x00'}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x82440, 0x0) (async) setsockopt$inet6_buf(r0, 0x29, 0x1c, &(0x7f00000000c0)="68fc2934f20c81796abf869e72a9a0abe89320838724c5dbf9f65950ed26d2289570e688c59a304fa9ce8d14aaea00db2dae7127be5fb7f52a2dc59586eb2b7c57635bc651ae05fbaa7461a542f420e7d421013d9770c2118f0977bd36d66626be6e472d2db2dc47", 0x68) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2901090, 0x0) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0/../file0\x00', &(0x7f0000000300)={0x410102, 0x0, 0x10}, 0x18) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7, 0x9}}, './file0\x00'}) (async) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) (async) 291.850442ms ago: executing program 7 (id=5608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xc5) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000340), 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r1, 0xde34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x12, r1, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) 193.216821ms ago: executing program 3 (id=5609): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYRESOCT=r0], 0x84}, 0x1, 0x0, 0x0, 0x20018004}, 0x1) listen(r1, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r1, 0x0, 0x0) r6 = dup(r4) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r7, 0x800, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008014}, 0x20000040) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 0s ago: executing program 7 (id=5610): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) r2 = dup2(r1, r0) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="1c00080001"], 0x4e) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='{\x00') kernel console output (not intermixed with test programs): 255.502889][T24669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1255.562518][ T10] usb 4-1: USB disconnect, device number 84 [ 1255.961932][T24691] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5283'. [ 1256.143826][ T5990] usb 6-1: new full-speed USB device number 112 using dummy_hcd [ 1256.293393][ T44] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1256.296821][ T5990] usb 6-1: config 0 has an invalid interface number: 93 but max is 0 [ 1256.309452][ T5990] usb 6-1: config 0 has no interface number 0 [ 1256.318932][ T5990] usb 6-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 1256.328526][ T5990] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.336628][ T5990] usb 6-1: Product: syz [ 1256.340869][ T5990] usb 6-1: Manufacturer: syz [ 1256.345640][ T5990] usb 6-1: SerialNumber: syz [ 1256.353714][ T5950] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1256.362405][ T5990] usb 6-1: config 0 descriptor?? [ 1256.456741][ T44] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1256.468325][ T44] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1256.478037][ T44] usb 7-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1256.487578][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.495724][ T44] usb 7-1: Product: syz [ 1256.500166][ T44] usb 7-1: Manufacturer: syz [ 1256.505080][ T44] usb 7-1: SerialNumber: syz [ 1256.512591][ T44] usb 7-1: config 0 descriptor?? [ 1256.525797][ T44] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1256.537014][ T5950] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1256.540435][ T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1256.558257][ T44] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1256.567179][ T44] usb 7-1: media controller created [ 1256.579340][ T5950] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1256.588671][ T5990] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 1256.604522][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1256.614333][ T5950] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1256.624908][ T5990] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1256.643092][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.651493][ T5950] usb 4-1: Product: syz [ 1256.656729][ T5990] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 1256.666210][ T5950] usb 4-1: Manufacturer: syz [ 1256.670863][ T5950] usb 4-1: SerialNumber: syz [ 1256.677572][ T5990] usb 6-1: media controller created [ 1256.686695][ T5990] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1256.698349][ T5950] usb 4-1: config 0 descriptor?? [ 1256.712631][ T44] DVB: Unable to find symbol tda10046_attach() [ 1256.713199][ T5950] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1256.727688][ T44] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1256.738647][ T5950] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1256.754365][ T5950] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1256.754624][ T44] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1256.773077][ T5950] usb 4-1: media controller created [ 1256.781078][T24689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1256.806207][T24689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1256.828892][T24689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1256.832854][ T5950] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1256.852681][ T5990] DVB: Unable to find symbol dib7000p_attach() [ 1256.859058][T24689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1256.870366][ T5990] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 1256.883342][ T5990] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1256.908746][ T5990] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 1256.934205][ T5990] usb 6-1: media controller created [ 1256.950337][ T5990] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1256.971383][ T5950] DVB: Unable to find symbol tda10046_attach() [ 1256.978037][ T5950] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1256.987436][ T5990] dib0700: the master dib7090 has to be initialized first [ 1256.995848][ T5950] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1257.011587][ T5990] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 1257.092872][ T5990] rc_core: IR keymap rc-dib0700-rc5 not found [ 1257.099217][ T5990] Registered IR keymap rc-empty [ 1257.111043][ T5990] dvb-usb: could not initialize remote control. [ 1257.117499][ T5990] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 1257.137719][ T5990] usb 6-1: USB disconnect, device number 112 [ 1257.220508][ T5990] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 1257.434224][ T5950] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1257.474347][ T5950] usb 4-1: USB disconnect, device number 85 [ 1257.783191][ T44] dvb_usb_m920x 7-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1257.802295][ T44] usb 7-1: USB disconnect, device number 57 [ 1257.812715][ T5990] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1257.942466][ T5990] usb 6-1: device descriptor read/64, error -71 [ 1258.000631][T24705] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5287'. [ 1258.018356][T24705] netlink: 204 bytes leftover after parsing attributes in process `syz.3.5287'. [ 1258.182509][ T5990] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1258.314643][ T5990] usb 6-1: device descriptor read/64, error -71 [ 1258.384782][T24719] random: crng reseeded on system resumption [ 1258.425176][ T5990] usb usb6-port1: attempt power cycle [ 1258.466689][T24719] binder: BINDER_SET_CONTEXT_MGR bad uid 60929 != 0 [ 1258.473482][T24719] binder: 24718:24719 ioctl 4018620d 200000000100 returned -1 [ 1258.782172][ T5990] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1258.831532][ T5990] usb 6-1: device descriptor read/8, error -71 [ 1258.916933][T24731] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5295'. [ 1259.045653][ T30] audit: type=1326 audit(1757219405.363:8271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24732 comm="syz.3.5296" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f350018ebe9 code=0x0 [ 1259.069167][ T30] audit: type=1326 audit(1757219405.363:8272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24732 comm="syz.3.5296" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f350018ebe9 code=0x0 [ 1259.097345][ T5990] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1259.123602][ T5990] usb 6-1: device descriptor read/8, error -71 [ 1259.171868][ T5950] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1259.239839][ T5990] usb usb6-port1: unable to enumerate USB device [ 1259.341874][ T5950] usb 7-1: Using ep0 maxpacket: 32 [ 1259.349993][ T5950] usb 7-1: config 0 has an invalid descriptor of length 38, skipping remainder of the config [ 1259.366632][ T5950] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1259.376535][ T5950] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.385572][ T5950] usb 7-1: Product: syz [ 1259.390047][ T5950] usb 7-1: Manufacturer: syz [ 1259.395776][ T5950] usb 7-1: SerialNumber: syz [ 1259.412767][ T5950] usb 7-1: config 0 descriptor?? [ 1259.430556][ T5950] usb 7-1: bad CDC descriptors [ 1259.437367][ T5950] usb 7-1: unsupported MDLM descriptors [ 1259.631103][ T44] usb 7-1: USB disconnect, device number 58 [ 1260.242991][T24741] program syz.6.5298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1260.257797][T24741] program syz.6.5298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1260.268042][T24741] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1260.281398][T24742] program syz.6.5298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1260.281919][T24743] program syz.6.5298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1260.300716][T24743] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1260.624153][ T44] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1260.783775][ T44] usb 7-1: config index 0 descriptor too short (expected 65183, got 72) [ 1260.796003][ T44] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1260.805290][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.813367][ T44] usb 7-1: Product: syz [ 1260.817663][ T44] usb 7-1: Manufacturer: syz [ 1260.823665][ T44] usb 7-1: SerialNumber: syz [ 1260.844760][ T44] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1260.869246][T17433] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1260.990999][ T5842] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1261.083494][T24745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1261.093682][T24745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1261.112856][ T44] usb 7-1: USB disconnect, device number 59 [ 1261.153175][ T5842] usb 6-1: Using ep0 maxpacket: 8 [ 1261.162637][ T5842] usb 6-1: config 0 has an invalid interface number: 49 but max is 0 [ 1261.170952][ T5842] usb 6-1: config 0 has no interface number 0 [ 1261.177082][ T5842] usb 6-1: config 0 interface 49 has no altsetting 0 [ 1261.186203][ T5842] usb 6-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=79.63 [ 1261.195488][ T5842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.203664][ T5842] usb 6-1: Product: syz [ 1261.207856][ T5842] usb 6-1: Manufacturer: syz [ 1261.215007][ T5842] usb 6-1: SerialNumber: syz [ 1261.225530][ T5842] usb 6-1: config 0 descriptor?? [ 1261.447208][ T5842] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 1261.456652][ T5842] gspca_m5602: Failed to find a sensor [ 1261.463051][ T5842] ALi m5602 6-1:0.49: ALi m5602 webcam failed [ 1261.472088][ T5842] usb 6-1: USB disconnect, device number 117 [ 1261.950820][T17433] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1261.960006][T17433] ath9k_htc: Failed to initialize the device [ 1261.967033][ T44] usb 7-1: ath9k_htc: USB layer deinitialized [ 1262.261048][ T44] usb 7-1: new full-speed USB device number 60 using dummy_hcd [ 1262.410259][T21137] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1262.435809][ T44] usb 7-1: config index 0 descriptor too short (expected 65183, got 72) [ 1262.444335][ T44] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1262.456217][ T44] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1262.468358][ T44] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1262.479552][ T44] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1262.490506][ T1210] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 1262.501920][ T44] usb 7-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice= 1.08 [ 1262.511065][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.519102][ T44] usb 7-1: Product: syz [ 1262.523338][ T44] usb 7-1: Manufacturer: syz [ 1262.528042][ T44] usb 7-1: SerialNumber: syz [ 1262.538507][T24745] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1262.546740][T24745] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1262.554831][T24745] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1262.565288][T24745] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1262.568407][T21137] usb 6-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=61.d7 [ 1262.582881][T21137] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.585053][ T44] mos7840 7-1:1.0: missing endpoints [ 1262.592206][T21137] usb 6-1: Product: syz [ 1262.602660][T21137] usb 6-1: Manufacturer: syz [ 1262.607307][T21137] usb 6-1: SerialNumber: syz [ 1262.616570][T21137] usb 6-1: config 0 descriptor?? [ 1262.631702][T21137] ldusb 6-1:0.0: Interrupt in endpoint not found [ 1262.653434][ T1210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1262.664899][ T1210] usb 4-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 1262.676068][ T1210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.688644][ T1210] usb 4-1: config 0 descriptor?? [ 1262.694559][T24763] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 1262.829404][T24745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1262.838930][T24745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1262.857738][T21137] usb 7-1: USB disconnect, device number 60 [ 1263.105321][ T1210] usbhid 4-1:0.0: can't add hid device: -71 [ 1263.116985][ T1210] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1263.129002][ T1210] usb 4-1: USB disconnect, device number 86 [ 1263.919783][ T1210] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1264.059635][ T1210] usb 4-1: device descriptor read/64, error -71 [ 1264.299351][ T1210] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1264.450777][ T1210] usb 4-1: device descriptor read/64, error -71 [ 1264.559739][ T1210] usb usb4-port1: attempt power cycle [ 1264.789315][T17433] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1264.899006][ T1210] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1264.919880][ T1210] usb 4-1: device descriptor read/8, error -71 [ 1264.944846][T17433] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1264.955321][T17433] usb 7-1: config 0 interface 0 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1264.968702][T17433] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1264.975535][T17433] usb 7-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 1264.984695][T17433] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.002208][T17433] usb 7-1: config 0 descriptor?? [ 1265.016880][T17433] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1265.162411][ T1210] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1265.189831][T17433] usb 6-1: USB disconnect, device number 118 [ 1265.211280][ T1210] usb 4-1: device descriptor read/8, error -71 [ 1265.320744][ T1210] usb usb4-port1: unable to enumerate USB device [ 1265.579839][T24796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1265.590667][T24796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1266.428395][ T5885] Bluetooth: hci0: command 0x0406 tx timeout [ 1267.083057][T24813] program syz.7.5322 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1267.457245][T24826] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20002 [ 1267.525952][ T30] audit: type=1326 audit(1757219413.837:8273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24827 comm="syz.5.5329" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde2218ebe9 code=0x0 [ 1267.552702][T21137] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1267.576403][ T1210] usb 7-1: USB disconnect, device number 61 [ 1267.623006][T24830] binder: 24829:24830 unknown command 0 [ 1267.630844][T24830] binder: 24829:24830 ioctl c0306201 200000000080 returned -22 [ 1267.646654][T24830] binder: 24829:24830 unknown command 0 [ 1267.652414][T24830] binder: 24829:24830 ioctl c0306201 200000000180 returned -22 [ 1267.707893][T21137] usb 4-1: Using ep0 maxpacket: 8 [ 1267.714814][T21137] usb 4-1: too many configurations: 115, using maximum allowed: 8 [ 1267.726560][T21137] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1267.734507][T21137] usb 4-1: can't read configurations, error -61 [ 1267.887547][T21137] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1267.987514][ T1210] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1268.037803][T21137] usb 4-1: Using ep0 maxpacket: 8 [ 1268.044073][T21137] usb 4-1: too many configurations: 115, using maximum allowed: 8 [ 1268.054055][T21137] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1268.061869][T21137] usb 4-1: can't read configurations, error -61 [ 1268.068819][T21137] usb usb4-port1: attempt power cycle [ 1268.167333][ T1210] usb 7-1: Using ep0 maxpacket: 8 [ 1268.175195][ T1210] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1268.192265][ T1210] usb 7-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1268.203083][ T1210] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.211288][ T1210] usb 7-1: Product: syz [ 1268.215502][ T1210] usb 7-1: Manufacturer: syz [ 1268.220249][ T1210] usb 7-1: SerialNumber: syz [ 1268.229171][ T1210] usb 7-1: config 0 descriptor?? [ 1268.236939][ T1210] ati_remote 7-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 1268.407545][T21137] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1268.440967][T17433] usb 7-1: USB disconnect, device number 62 [ 1268.443810][T21137] usb 4-1: Using ep0 maxpacket: 8 [ 1268.457442][T21137] usb 4-1: too many configurations: 115, using maximum allowed: 8 [ 1268.473193][T21137] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1268.481897][T21137] usb 4-1: can't read configurations, error -61 [ 1268.617317][T21137] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1268.637370][ T1210] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1268.647057][T21137] usb 4-1: Using ep0 maxpacket: 8 [ 1268.653004][T21137] usb 4-1: too many configurations: 115, using maximum allowed: 8 [ 1268.663128][T21137] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1268.671063][T21137] usb 4-1: can't read configurations, error -61 [ 1268.677930][T21137] usb usb4-port1: unable to enumerate USB device [ 1268.787084][ T1210] usb 6-1: Using ep0 maxpacket: 16 [ 1268.794199][ T1210] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1268.802571][ T1210] usb 6-1: config 0 has no interface number 0 [ 1268.810807][ T1210] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1268.825017][ T1210] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1268.837142][ T1210] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1268.845287][ T1210] usb 6-1: Product: syz [ 1268.851488][ T1210] usb 6-1: SerialNumber: syz [ 1268.859231][ T1210] usb 6-1: config 0 descriptor?? [ 1268.872632][ T1210] cm109 6-1:0.8: invalid payload size 255, expected 4 [ 1268.882199][ T1210] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input154 [ 1269.283914][T24832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1269.308128][T24832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1269.340529][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1269.340752][T21137] usb 6-1: USB disconnect, device number 119 [ 1269.347671][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1269.388973][T21137] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1269.493585][ T1156] bridge_slave_1: left allmulticast mode [ 1269.511769][ T1156] bridge_slave_1: left promiscuous mode [ 1269.523901][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.535123][ T1156] bridge_slave_0: left allmulticast mode [ 1269.541137][ T1156] bridge_slave_0: left promiscuous mode [ 1269.547434][ T1210] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1269.550580][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.564277][T20938] Bluetooth: hci1: command tx timeout [ 1269.700710][ T1210] usb 7-1: Using ep0 maxpacket: 32 [ 1269.712348][ T1210] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1269.728561][ T1210] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.749369][ T1210] usb 7-1: config 0 descriptor?? [ 1269.898561][ T1156] dvmrp0 (unregistering): left allmulticast mode [ 1269.974703][ T1210] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1269.987482][ T1210] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1270.004288][ T1210] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1270.012798][ T1210] usb 7-1: media controller created [ 1270.063128][ T1210] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1270.074938][ T1156] tipc: Disabling bearer [ 1270.093986][ T1156] tipc: Left network mode [ 1270.292576][ T1210] az6027: usb out operation failed. (-71) [ 1270.304571][ T1210] az6027: usb out operation failed. (-71) [ 1270.326439][ T1210] stb0899_attach: Driver disabled by Kconfig [ 1270.332568][ T1210] az6027: no front-end attached [ 1270.332568][ T1210] [ 1270.379626][ T1210] az6027: usb out operation failed. (-71) [ 1270.390776][ T1210] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1270.400923][ T1210] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input156 [ 1270.414967][ T1210] dvb-usb: schedule remote query interval to 400 msecs. [ 1270.427656][ T1210] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1270.438839][ T1210] usb 7-1: USB disconnect, device number 63 [ 1270.658144][ T1210] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1270.789353][ T1156] hsr_slave_0: left promiscuous mode [ 1270.816457][ T1156] hsr_slave_1: left promiscuous mode [ 1270.843168][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1270.857533][T24876] F2FS-fs: Conflicting test_dummy_encryption options [ 1270.867463][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1270.879844][T24873] F2FS-fs: Conflicting test_dummy_encryption options [ 1270.906842][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1270.926005][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1271.085502][ T1156] veth1_macvtap: left promiscuous mode [ 1271.108925][ T1156] veth0_macvtap: left promiscuous mode [ 1271.119778][ T1156] veth1_vlan: left promiscuous mode [ 1271.125608][ T1156] veth0_vlan: left promiscuous mode [ 1271.522100][T24890] netlink: 'syz.6.5347': attribute type 2 has an invalid length. [ 1271.575626][T21137] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1271.748240][T21137] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1271.765562][T21137] usb 4-1: config 1 has an invalid descriptor of length 178, skipping remainder of the config [ 1271.789800][T21137] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1271.809110][T21137] usb 4-1: config 1 has no interface number 0 [ 1271.815272][T21137] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1271.835506][T21137] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1271.851921][T21137] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1271.875467][T21137] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.894344][T21137] usb 4-1: Product: syz [ 1271.904476][T21137] usb 4-1: Manufacturer: syz [ 1271.909519][T21137] usb 4-1: SerialNumber: syz [ 1271.922583][T21137] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1271.954316][T21137] cdc_ncm 4-1:1.1: bind() failure [ 1272.038857][ C0] vkms_vblank_simulate: vblank timer overrun [ 1272.126244][ T5950] usb 4-1: USB disconnect, device number 95 [ 1272.206349][ C0] vkms_vblank_simulate: vblank timer overrun [ 1272.949165][ T1156] team0 (unregistering): Port device team_slave_1 removed [ 1273.102029][ T1156] team0 (unregistering): Port device team_slave_0 removed [ 1273.292597][T24908] Option 'TXœ÷Æd*Vná/ñg®‚' to dns_resolver key: bad/missing value [ 1273.545070][ T1210] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1273.704980][ T1210] usb 6-1: Using ep0 maxpacket: 32 [ 1273.712537][ T1210] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1273.722233][ T1210] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.743215][ T1210] usb 6-1: config 0 descriptor?? [ 1273.985057][ T1210] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1274.001895][ T1210] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1274.016643][ T1210] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1274.024138][ T1210] usb 6-1: media controller created [ 1274.053625][ T1210] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1274.093557][T24894] kthread_run failed with err -4 [ 1274.178442][ T1210] DVB: Unable to find symbol dib7000p_attach() [ 1274.205023][ T1210] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1274.364484][ T1210] rc_core: IR keymap rc-dib0700-rc5 not found [ 1274.371280][ T1210] Registered IR keymap rc-empty [ 1274.393980][ T1210] dvb-usb: could not initialize remote control. [ 1274.400828][ T1210] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1274.427537][ T1210] usb 6-1: USB disconnect, device number 120 [ 1274.516330][ T1210] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1274.595219][ T5950] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1274.666082][T24922] netlink: 'syz.7.5355': attribute type 10 has an invalid length. [ 1274.690676][T24922] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5355'. [ 1274.701234][T24922] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1274.709660][T24922] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1274.726328][T24922] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1274.744826][ T5950] usb 7-1: device descriptor read/64, error -71 [ 1274.760012][ T1156] IPVS: stop unused estimator thread 0... [ 1274.847331][T24927] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 1274.854175][T24927] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1274.864177][T24927] vhci_hcd vhci_hcd.0: Device attached [ 1274.948891][ T44] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1274.975931][T24930] vhci_hcd vhci_hcd.0: port 0 already used [ 1275.004028][ T5950] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1275.113859][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 1275.121264][ T44] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 1275.130694][ T44] usb 4-1: config 0 has no interface number 0 [ 1275.137340][ T5842] usb 48-1: SetAddress Request (2) to port 0 [ 1275.144008][ T5950] usb 7-1: device descriptor read/64, error -71 [ 1275.144267][ T44] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1275.162621][ T5842] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1275.169791][T24936] netlink: 'syz.5.5359': attribute type 1 has an invalid length. [ 1275.170371][ T44] usb 4-1: config 0 interface 196 has no altsetting 0 [ 1275.186159][T24936] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5359'. [ 1275.198043][ T44] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1275.207536][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.215776][ T44] usb 4-1: Product: syz [ 1275.220066][ T44] usb 4-1: Manufacturer: syz [ 1275.225989][ T44] usb 4-1: SerialNumber: syz [ 1275.233966][ T44] usb 4-1: config 0 descriptor?? [ 1275.240546][T24924] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1275.284449][ T5950] usb usb7-port1: attempt power cycle [ 1275.461725][ T44] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 1275.472446][ T44] ipheth 4-1:0.196: probe with driver ipheth failed with error -71 [ 1275.490630][ T44] usb 4-1: USB disconnect, device number 96 [ 1275.633875][ T5950] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1275.664161][ T5950] usb 7-1: device descriptor read/8, error -71 [ 1275.864331][ T5990] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1275.903699][ T5950] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1275.925416][ T5950] usb 7-1: device descriptor read/8, error -71 [ 1275.987513][T24928] vhci_hcd: connection reset by peer [ 1275.993220][T19725] vhci_hcd: stop threads [ 1276.000136][T19725] vhci_hcd: release socket [ 1276.008503][T19725] vhci_hcd: disconnect device [ 1276.027040][ T5990] usb 6-1: Using ep0 maxpacket: 32 [ 1276.041539][ T5950] usb usb7-port1: unable to enumerate USB device [ 1276.050209][ T5990] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1276.062918][ T5990] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1276.073602][ T5990] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1276.083063][ T5990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.101411][ T5990] usb 6-1: config 0 descriptor?? [ 1276.115386][ T5990] hub 6-1:0.0: USB hub found [ 1276.316711][ T5990] hub 6-1:0.0: 1 port detected [ 1276.406008][T24958] comedi comedi3: comedi_config --init_data is deprecated [ 1276.486466][T24960] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1276.529105][ T5990] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 1276.540941][ T5990] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 1276.556645][ T5990] usbhid 6-1:0.0: can't add hid device: -71 [ 1276.573436][ T5990] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1276.624128][ T5990] usb 6-1: USB disconnect, device number 121 [ 1276.923074][T21137] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 1277.081731][T21137] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1277.099193][T21137] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.119969][T21137] usb 4-1: config 0 descriptor?? [ 1277.140761][T21137] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1277.732797][ T5975] usb 7-1: new full-speed USB device number 68 using dummy_hcd [ 1277.822889][T17433] usb 6-1: new full-speed USB device number 122 using dummy_hcd [ 1277.852145][T21137] gp8psk: usb in 138 operation failed. [ 1277.858820][T21137] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1277.875930][T21137] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1277.894502][ T5975] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1277.896819][T21137] usb 4-1: USB disconnect, device number 97 [ 1277.916862][ T5975] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1277.931424][ T5975] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1277.940563][ T5975] usb 7-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 1277.952508][ T5975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.965324][ T5975] usb 7-1: config 0 descriptor?? [ 1278.005533][T17433] usb 6-1: config 0 has an invalid interface number: 217 but max is 0 [ 1278.014284][T17433] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.027264][T17433] usb 6-1: config 0 has no interface number 0 [ 1278.033816][T17433] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 1278.043771][T17433] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.055414][T17433] usb 6-1: config 0 descriptor?? [ 1278.186536][T24979] loop2: detected capacity change from 0 to 7 [ 1278.194109][T24979] Dev loop2: unable to read RDB block 7 [ 1278.199853][T24979] loop2: unable to read partition table [ 1278.206144][T24979] loop2: partition table beyond EOD, truncated [ 1278.212660][T24979] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1278.266668][T21137] usb 6-1: USB disconnect, device number 122 [ 1278.441566][ T5975] lenovo 0003:17EF:6009.0072: unknown main item tag 0x0 [ 1278.465228][ T5975] lenovo 0003:17EF:6009.0072: unknown main item tag 0x0 [ 1278.475279][ T5975] lenovo 0003:17EF:6009.0072: unknown main item tag 0x0 [ 1278.487917][ T5975] lenovo 0003:17EF:6009.0072: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.6-1/input0 [ 1278.636099][ T5990] usb 7-1: USB disconnect, device number 68 [ 1278.695385][T21137] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1278.852178][T21137] usb 4-1: Using ep0 maxpacket: 8 [ 1278.858799][T21137] usb 4-1: config index 0 descriptor too short (expected 164, got 36) [ 1278.867164][T21137] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1278.874769][T21137] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 1278.886594][T21137] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 18333, setting to 1024 [ 1278.898134][T21137] usb 4-1: config 168 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 1278.908547][T21137] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1278.928099][T21137] usb 4-1: config index 1 descriptor too short (expected 164, got 36) [ 1278.937048][T21137] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1278.944759][T21137] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 1278.956886][T21137] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 18333, setting to 1024 [ 1278.968209][T21137] usb 4-1: config 168 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 1278.979132][T21137] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1278.999081][T21137] usb 4-1: config index 2 descriptor too short (expected 164, got 36) [ 1279.008540][T21137] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1279.016346][T21137] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 1279.029222][T21137] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 18333, setting to 1024 [ 1279.040895][T21137] usb 4-1: config 168 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 1279.051408][T21137] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1279.065122][T24577] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1279.077002][T21137] usb 4-1: string descriptor 0 read error: -22 [ 1279.084297][T21137] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1279.093697][T21137] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.111927][T21137] adutux 4-1:168.0: interrupt endpoints not found [ 1279.221885][T24577] usb 6-1: Using ep0 maxpacket: 32 [ 1279.229623][T24577] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1279.238554][T24577] usb 6-1: config 0 has no interface number 0 [ 1279.247039][T24577] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1279.256940][T24577] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.265157][T24577] usb 6-1: Product: syz [ 1279.269404][T24577] usb 6-1: Manufacturer: syz [ 1279.274464][T24577] usb 6-1: SerialNumber: syz [ 1279.281845][T24577] usb 6-1: config 0 descriptor?? [ 1279.294419][T24577] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1279.303490][T24577] usb 6-1: selecting invalid altsetting 1 [ 1279.309290][T24577] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1279.325646][T24577] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1279.336346][T24577] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1279.337557][T17433] usb 4-1: USB disconnect, device number 98 [ 1279.345201][T24577] usb 6-1: media controller created [ 1279.405549][T24577] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1279.452419][T21137] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1279.612764][T21137] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 1279.643057][T21137] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1279.662784][T21137] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.680110][T21137] usb 7-1: config 220 has no interface number 2 [ 1279.688177][T21137] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1279.706223][T24577] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1279.724462][T21137] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1279.751871][T21137] usb 7-1: config 220 interface 76 has no altsetting 0 [ 1279.760849][T21137] usb 7-1: config 220 interface 1 has no altsetting 0 [ 1279.781114][T21137] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1279.802124][T21137] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.820958][T24577] usb 6-1: USB disconnect, device number 123 [ 1279.827552][T21137] usb 7-1: Product: syz [ 1279.836473][T21137] usb 7-1: Manufacturer: syz [ 1279.841140][T21137] usb 7-1: SerialNumber: syz [ 1280.085692][T21137] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 1280.092472][T21137] usb 7-1: No valid video chain found. [ 1280.098000][T21137] usb 7-1: selecting invalid altsetting 0 [ 1280.125879][T21137] usb 7-1: selecting invalid altsetting 0 [ 1280.131825][T21137] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 1280.143577][T21137] usb 7-1: USB disconnect, device number 69 [ 1280.251459][T17433] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1280.261517][ T5842] usb 48-1: device descriptor read/8, error -110 [ 1280.292429][ T30] audit: type=1326 audit(1757219426.624:8274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25007 comm="syz.5.5385" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde2218ebe9 code=0x0 [ 1280.417809][T17433] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1280.428912][T17433] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.445723][T17433] usb 4-1: config 0 descriptor?? [ 1280.457804][T17433] cp210x 4-1:0.0: cp210x converter detected [ 1280.655484][T25006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1280.666662][T25006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1280.676624][T25006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1280.685910][T25006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1280.687355][ T5842] usb usb48-port1: attempt power cycle [ 1280.695917][T25006] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 1280.891446][ T5937] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1280.917158][T25006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1280.927975][T25006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1280.936586][T25012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1280.945847][T25012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1280.976347][T17433] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 1280.994400][T17433] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1281.008825][T17433] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 1281.024995][T17433] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1281.048574][T17433] usb 4-1: USB disconnect, device number 99 [ 1281.061335][ T5937] usb 7-1: Using ep0 maxpacket: 16 [ 1281.075245][ T5937] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1281.087877][ T5937] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.103927][T17433] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1281.115783][ T5937] usb 7-1: Product: syz [ 1281.128846][T17433] cp210x 4-1:0.0: device disconnected [ 1281.142558][ T5937] usb 7-1: Manufacturer: syz [ 1281.149656][ T5937] usb 7-1: SerialNumber: syz [ 1281.189140][ T5937] usb 7-1: config 0 descriptor?? [ 1281.222118][ T5937] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1281.272436][ T5842] usb usb48-port1: unable to enumerate USB device [ 1281.395698][T25025] netlink: 'syz.3.5389': attribute type 6 has an invalid length. [ 1281.425533][T25011] syz.6.5386 (25011): drop_caches: 4 [ 1281.479564][T25027] openvswitch: netlink: IP tunnel dst address not specified [ 1281.550770][T25021] nbd1: detected capacity change from 0 to 127 [ 1281.563556][T20938] block nbd1: Receive control failed (result -32) [ 1281.563578][ T5885] block nbd1: Receive control failed (result -32) [ 1281.581803][T24698] block nbd1: Dead connection, failed to find a fallback [ 1281.609041][T24698] block nbd1: shutting down sockets [ 1281.617179][T24698] blk_print_req_error: 55 callbacks suppressed [ 1281.617199][T24698] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1281.636982][T24698] buffer_io_error: 54 callbacks suppressed [ 1281.637002][T24698] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1281.660349][T24698] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1281.680853][T24698] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1281.688839][T24698] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1281.707642][T24698] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1281.718578][T24698] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1281.727757][T25031] binder: Bad value for 'max' [ 1281.740342][T24698] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1281.748764][T24698] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1281.766121][T24698] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1281.777452][T24698] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1281.796709][T24698] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1281.806454][T24698] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1281.823608][T25034] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5394'. [ 1281.825860][T24698] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1281.839108][T25034] binder: 25033:25034 ioctl c0306201 200000000640 returned -22 [ 1281.849285][T24698] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1281.851618][T25034] binder: 25033:25034 ioctl c0189375 200000000780 returned -22 [ 1281.858670][T24698] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1281.891252][T24698] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1281.907029][T24698] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1281.917684][T24698] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1281.937325][T24698] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1281.959394][T24698] ldm_validate_partition_table(): Disk read failed. [ 1281.974580][T24698] Dev nbd1: unable to read RDB block 0 [ 1281.982739][T24698] nbd1: unable to read partition table [ 1281.998086][T24698] ldm_validate_partition_table(): Disk read failed. [ 1282.019544][T24698] Dev nbd1: unable to read RDB block 0 [ 1282.029790][T24698] nbd1: unable to read partition table [ 1282.120605][T17433] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1282.196750][T25042] cifs: Unknown parameter 'giR¨çKnk]e' [ 1282.258347][T25011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1282.272616][T25011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1282.310801][T17433] usb 6-1: Using ep0 maxpacket: 8 [ 1282.320256][T17433] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1282.331218][T17433] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.339280][T17433] usb 6-1: Product: syz [ 1282.344703][T17433] usb 6-1: Manufacturer: syz [ 1282.349470][T17433] usb 6-1: SerialNumber: syz [ 1282.357232][T17433] usb 6-1: config 0 descriptor?? [ 1282.488580][T25011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1282.491370][T21137] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1282.498339][T25011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1282.524827][ T5937] usb 7-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 1282.576749][T17433] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1282.668702][T21137] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1282.678774][T21137] usb 4-1: config 0 has an invalid descriptor of length 29, skipping remainder of the config [ 1282.689468][T21137] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1282.706684][T21137] usb 4-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=70.01 [ 1282.716055][T21137] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.728493][T21137] usb 4-1: Product: syz [ 1282.734942][T21137] usb 4-1: Manufacturer: syz [ 1282.737290][ T5937] usb 7-1: USB disconnect, device number 70 [ 1282.739644][T21137] usb 4-1: SerialNumber: syz [ 1282.752978][T21137] usb 4-1: config 0 descriptor?? [ 1282.781354][ T5937] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 1282.793405][ T5937] ssu100 7-1:0.0: device disconnected [ 1282.966479][T21137] usb 4-1: USB disconnect, device number 100 [ 1283.007982][T25029] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5392'. [ 1283.063774][T17433] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1283.088844][T17433] usb 6-1: USB disconnect, device number 124 [ 1283.187953][T25052] Unsupported ieee802154 address type: 0 [ 1283.195498][T25052] netlink: 88 bytes leftover after parsing attributes in process `syz.7.5403'. [ 1283.389050][T25059] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1283.395660][T25059] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1283.407279][T25059] vhci_hcd vhci_hcd.0: Device attached [ 1283.412421][T25063] netlink: 'syz.7.5406': attribute type 11 has an invalid length. [ 1283.414990][T25060] vhci_hcd: connection closed [ 1283.422798][ T60] vhci_hcd: stop threads [ 1283.428315][T25063] netlink: 168 bytes leftover after parsing attributes in process `syz.7.5406'. [ 1283.432383][ T60] vhci_hcd: release socket [ 1283.446544][ T60] vhci_hcd: disconnect device [ 1283.667931][T25075] netlink: 4220 bytes leftover after parsing attributes in process `syz.3.5410'. [ 1283.679025][T25075] nbd: couldn't find a device at index -373156329 [ 1283.689171][T25075] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5410'. [ 1283.703337][T25075] bridge0: port 1(bridge_slave_0) entered disabled state [ 1283.753182][T25075] bridge_slave_0 (unregistering): left allmulticast mode [ 1283.764458][T25075] bridge_slave_0 (unregistering): left promiscuous mode [ 1283.775203][T25075] bridge0: port 1(bridge_slave_0) entered disabled state [ 1283.869507][T21137] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1284.035210][T25083] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5412'. [ 1284.044449][T25083] openvswitch: netlink: Flow key attr not present in new flow. [ 1284.044453][T21137] usb 6-1: Using ep0 maxpacket: 16 [ 1284.050931][T21137] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1284.067313][T21137] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.082220][T21137] usb 6-1: Product: syz [ 1284.082252][T21137] usb 6-1: Manufacturer: syz [ 1284.082273][T21137] usb 6-1: SerialNumber: syz [ 1284.100574][T21137] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1284.107707][T21137] r8152-cfgselector 6-1: config 0 descriptor?? [ 1284.419474][T17433] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 1284.572124][T17433] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1284.584838][T17433] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1284.596214][T17433] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1284.606379][T17433] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.614467][T17433] usb 4-1: Product: syz [ 1284.618679][T17433] usb 4-1: Manufacturer: syz [ 1284.623348][T17433] usb 4-1: SerialNumber: syz [ 1284.836596][T17433] usb 4-1: 0:2 : does not exist [ 1284.849016][T17433] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1284.879240][T17433] usb 4-1: USB disconnect, device number 101 [ 1284.944956][T24698] udevd[24698]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1285.445349][T25096] block nbd3: NBD_DISCONNECT [ 1285.778762][ T5937] usb 4-1: new low-speed USB device number 102 using dummy_hcd [ 1285.928651][ T5937] usb 4-1: Invalid ep0 maxpacket: 64 [ 1286.058922][ T5937] usb 4-1: new low-speed USB device number 103 using dummy_hcd [ 1286.087436][T25105] netlink: 'syz.6.5421': attribute type 10 has an invalid length. [ 1286.097715][T25105] lo: entered promiscuous mode [ 1286.107033][T25105] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1286.171705][T25107] ubi31: attaching mtd0 [ 1286.189166][T25107] ubi31: scanning is finished [ 1286.195952][T25107] ubi31: empty MTD device detected [ 1286.218468][ T5937] usb 4-1: Invalid ep0 maxpacket: 64 [ 1286.224085][ T5937] usb usb4-port1: attempt power cycle [ 1286.311260][T25107] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1286.319675][T25107] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1286.327223][T25107] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1286.335220][T25107] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1286.343391][T25107] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1286.351165][T25107] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1286.362759][T25107] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2136720434 [ 1286.375444][T25107] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1286.425092][T25109] ubi31: background thread "ubi_bgt31d" started, PID 25109 [ 1286.502390][T25111] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1286.569453][ T5937] usb 4-1: new low-speed USB device number 104 using dummy_hcd [ 1286.632171][ T5937] usb 4-1: Invalid ep0 maxpacket: 64 [ 1286.666708][T21137] r8152-cfgselector 6-1: USB disconnect, device number 125 [ 1286.768821][ T5937] usb 4-1: new low-speed USB device number 105 using dummy_hcd [ 1286.821216][ T5937] usb 4-1: Invalid ep0 maxpacket: 64 [ 1286.837296][ T5937] usb usb4-port1: unable to enumerate USB device [ 1286.850782][T25118] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5425'. [ 1287.241056][ T5937] IPVS: starting estimator thread 0... [ 1287.347832][T25131] IPVS: using max 26 ests per chain, 62400 per kthread [ 1287.474146][T25136] syzkaller1: entered promiscuous mode [ 1287.481304][T25136] syzkaller1: entered allmulticast mode [ 1287.607650][ T5937] usb 6-1: new low-speed USB device number 126 using dummy_hcd [ 1287.757756][ T5937] usb 6-1: Invalid ep0 maxpacket: 64 [ 1287.887511][ T5937] usb 6-1: new low-speed USB device number 127 using dummy_hcd [ 1288.047478][ T5937] usb 6-1: Invalid ep0 maxpacket: 64 [ 1288.053608][ T5937] usb usb6-port1: attempt power cycle [ 1288.407335][ T5937] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 1288.433270][ T5937] usb 6-1: Invalid ep0 maxpacket: 64 [ 1288.583517][ T5937] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 1288.607912][ T5937] usb 6-1: Invalid ep0 maxpacket: 64 [ 1288.613668][ T5937] usb usb6-port1: unable to enumerate USB device [ 1288.957209][ T5990] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 1289.122923][ T5990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1289.134500][ T5990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1289.152220][ T5990] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1289.161467][ T5990] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1289.170195][ T5990] usb 4-1: Manufacturer: syz [ 1289.177207][ T5990] usb 4-1: config 0 descriptor?? [ 1289.394745][T25140] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5433'. [ 1289.613406][ T5990] cougar 0003:060B:700A.0073: unknown main item tag 0x0 [ 1289.620803][ T5990] cougar 0003:060B:700A.0073: unknown main item tag 0x0 [ 1289.628366][ T5990] cougar 0003:060B:700A.0073: unknown main item tag 0x0 [ 1289.635375][ T5990] cougar 0003:060B:700A.0073: unknown main item tag 0x0 [ 1289.642562][ T5990] cougar 0003:060B:700A.0073: unknown main item tag 0x0 [ 1289.652716][ T5990] cougar 0003:060B:700A.0073: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1289.811045][ T5990] usb 4-1: USB disconnect, device number 106 [ 1290.473643][T25145] openvswitch: netlink: Flow key attr not present in new flow. [ 1290.756168][ T5975] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1290.885684][T25158] snd_dummy snd_dummy.0: control 2:0:128:syz0:0 is already present [ 1290.914264][T25157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1290.926889][ T5975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1290.938432][T25157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1290.946713][ T5975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1290.957071][ T5975] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1290.970188][ T5937] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1290.983896][ T5975] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1290.996030][T25157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1291.004918][T25157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1291.014348][ T5975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.027779][ T5975] usb 4-1: config 0 descriptor?? [ 1291.146278][ T5937] usb 7-1: Using ep0 maxpacket: 16 [ 1291.153369][ T5937] usb 7-1: too many configurations: 178, using maximum allowed: 8 [ 1291.164852][ T5937] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1291.172874][ T5937] usb 7-1: can't read configurations, error -61 [ 1291.315809][ T5937] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1291.439724][ T5975] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 1291.447736][ T5975] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 1291.455974][ T5975] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 1291.463570][ T5975] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 1291.471224][ T5975] plantronics 0003:047F:FFFF.0074: unknown main item tag 0x0 [ 1291.478988][ T5937] usb 7-1: Using ep0 maxpacket: 16 [ 1291.488676][ T5937] usb 7-1: too many configurations: 178, using maximum allowed: 8 [ 1291.506064][ T5937] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1291.514524][ T5975] plantronics 0003:047F:FFFF.0074: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1291.527136][ T5937] usb 7-1: can't read configurations, error -61 [ 1291.537684][ T5937] usb usb7-port1: attempt power cycle [ 1291.885565][ T5937] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1291.907280][ T5937] usb 7-1: Using ep0 maxpacket: 16 [ 1291.914225][ T5937] usb 7-1: too many configurations: 178, using maximum allowed: 8 [ 1291.924425][ T5937] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1291.933436][ T5937] usb 7-1: can't read configurations, error -61 [ 1291.972477][ T5990] usb 4-1: USB disconnect, device number 107 [ 1292.065383][ T5937] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1292.086072][ T5937] usb 7-1: Using ep0 maxpacket: 16 [ 1292.092170][ T5937] usb 7-1: too many configurations: 178, using maximum allowed: 8 [ 1292.109214][ T5937] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1292.117523][ T5937] usb 7-1: can't read configurations, error -61 [ 1292.124197][ T5937] usb usb7-port1: unable to enumerate USB device [ 1292.141314][T25166] comedi comedi3: mpc624: a I/O base address must be specified [ 1292.208650][ T30] audit: type=1400 audit(1757219438.540:8275): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=25167 comm="syz.3.5442" [ 1292.414695][T25170] block nbd3: Send control failed (result -32) [ 1292.424326][T25170] block nbd3: Request send failed, requeueing [ 1292.434976][T15074] block nbd3: Dead connection, failed to find a fallback [ 1292.442216][T15074] block nbd3: shutting down sockets [ 1292.447812][T15074] blk_print_req_error: 138 callbacks suppressed [ 1292.447831][T15074] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1292.467956][T25170] I/O error, dev nbd3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1292.480685][T25170] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1292.491518][T25170] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1292.502923][T25170] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1292.516746][T25170] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1292.527417][T25170] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1292.536950][T25170] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1292.546915][T25170] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1292.556612][T25170] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1292.569514][T25170] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1292.579816][T25170] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1292.589558][T25170] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1292.599460][T25170] I/O error, dev nbd3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1292.609436][T25170] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1292.619959][T25170] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1292.629717][T25170] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1292.639637][T25170] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1292.649298][T25170] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 1292.711644][T25174] MTD: Couldn't look up 'memory.events': -15 [ 1293.064903][ T5937] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1293.224816][ T1210] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1293.232595][ T5937] usb 7-1: Using ep0 maxpacket: 16 [ 1293.239382][ T5937] usb 7-1: too many configurations: 178, using maximum allowed: 8 [ 1293.250162][ T5937] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1293.257881][ T5937] usb 7-1: can't read configurations, error -61 [ 1293.385020][ T1210] usb 4-1: device descriptor read/64, error -71 [ 1293.394890][ T5937] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 1293.545149][ T5937] usb 7-1: Using ep0 maxpacket: 16 [ 1293.551379][ T5937] usb 7-1: too many configurations: 178, using maximum allowed: 8 [ 1293.561529][ T5937] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1293.569760][ T5937] usb 7-1: can't read configurations, error -61 [ 1293.579720][ T5937] usb usb7-port1: attempt power cycle [ 1293.624648][ T1210] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1293.744841][ T5990] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1293.755405][ T1210] usb 4-1: device descriptor read/64, error -71 [ 1293.874693][ T1210] usb usb4-port1: attempt power cycle [ 1293.938754][ T5990] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1293.978575][ T5990] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1294.017881][ T5990] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1294.038160][ T5990] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.055119][ T5990] usb 6-1: Product: syz [ 1294.059358][ T5990] usb 6-1: Manufacturer: syz [ 1294.064099][ T5990] usb 6-1: SerialNumber: syz [ 1294.094090][ T5990] usb 6-1: config 0 descriptor?? [ 1294.101581][T25184] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 1294.109616][T25184] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 1294.234357][ T1210] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1294.259709][ T1210] usb 4-1: device descriptor read/8, error -71 [ 1294.323186][T25184] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 1294.338805][T25184] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 1294.505724][ T1210] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1294.538518][ T1210] usb 4-1: device descriptor read/8, error -71 [ 1294.667683][ T1210] usb usb4-port1: unable to enumerate USB device [ 1295.024015][T21137] usb 7-1: new full-speed USB device number 78 using dummy_hcd [ 1295.164359][T21137] usb 7-1: device descriptor read/64, error -71 [ 1295.179282][ T5990] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 1295.197913][ T5990] usb 6-1: USB disconnect, device number 4 [ 1295.413873][T21137] usb 7-1: new full-speed USB device number 79 using dummy_hcd [ 1295.549772][T21137] usb 7-1: device descriptor read/64, error -71 [ 1295.669048][T21137] usb usb7-port1: attempt power cycle [ 1296.003528][ T5975] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1296.015473][T21137] usb 7-1: new full-speed USB device number 80 using dummy_hcd [ 1296.045006][T21137] usb 7-1: device descriptor read/8, error -71 [ 1296.154705][ T5975] usb 6-1: Using ep0 maxpacket: 16 [ 1296.164808][ T5975] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1296.175387][ T5975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.183807][ T5975] usb 6-1: Product: syz [ 1296.188044][ T5975] usb 6-1: Manufacturer: syz [ 1296.192793][ T5975] usb 6-1: SerialNumber: syz [ 1296.200674][ T5975] usb 6-1: config 0 descriptor?? [ 1296.209101][ T5975] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1296.283294][T21137] usb 7-1: new full-speed USB device number 81 using dummy_hcd [ 1296.304090][T21137] usb 7-1: device descriptor read/8, error -71 [ 1296.420712][T21137] usb usb7-port1: unable to enumerate USB device [ 1296.462335][T25209] netlink: 'syz.3.5459': attribute type 1 has an invalid length. [ 1296.621423][T25207] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 1296.628025][T25207] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1296.636423][T25207] vhci_hcd vhci_hcd.0: Device attached [ 1296.903354][T21137] usb 44-1: SetAddress Request (6) to port 0 [ 1296.909611][T21137] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1297.476218][ T5975] usb 6-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 1297.543535][T25218] overlayfs: workdir and upperdir must reside under the same mount [ 1297.763098][ T5950] usb 6-1: USB disconnect, device number 5 [ 1297.772055][T25213] vhci_hcd: connection reset by peer [ 1297.795433][ T5950] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 1297.808350][ T5975] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1297.816734][ T60] vhci_hcd: stop threads [ 1297.821025][ T60] vhci_hcd: release socket [ 1297.825446][ T5950] ssu100 6-1:0.0: device disconnected [ 1297.858245][ T60] vhci_hcd: disconnect device [ 1297.891539][T25224] netlink: 'syz.6.5463': attribute type 1 has an invalid length. [ 1298.016928][ T5975] usb 4-1: New USB device found, idVendor=05ac, idProduct=b301, bcdDevice=e4.00 [ 1298.027471][ T5975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.035692][ T5975] usb 4-1: Product: syz [ 1298.040019][ T5975] usb 4-1: Manufacturer: syz [ 1298.044806][ T5975] usb 4-1: SerialNumber: syz [ 1298.052072][ T5975] usb 4-1: config 0 descriptor?? [ 1298.202410][T24577] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 1298.261766][ T5975] usb 4-1: USB disconnect, device number 112 [ 1298.362250][T24577] usb 7-1: Using ep0 maxpacket: 32 [ 1298.369524][T24577] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1298.385713][T24577] usb 7-1: config 0 has no interface number 0 [ 1298.394198][T24577] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1298.406663][T24577] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1298.417276][T24577] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1298.427790][T24577] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.439025][T24577] usb 7-1: config 0 descriptor?? [ 1298.809857][ T5950] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 1298.968912][T24577] usbhid 7-1:0.1: can't add hid device: -71 [ 1298.979673][ T5950] usb 6-1: Invalid ep0 maxpacket: 16 [ 1299.000114][T24577] usbhid 7-1:0.1: probe with driver usbhid failed with error -71 [ 1299.047129][T24577] usb 7-1: USB disconnect, device number 82 [ 1299.114161][T25249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1299.132379][T25249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1299.140392][ T5950] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 1299.292475][ T5950] usb 6-1: Invalid ep0 maxpacket: 16 [ 1299.307142][ T5950] usb usb6-port1: attempt power cycle [ 1299.313915][ T5990] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1299.473682][ T5990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1299.485562][ T5990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1299.496017][ T5990] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1299.505307][ T5990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.518322][ T5990] usb 4-1: config 0 descriptor?? [ 1299.572721][T24577] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 1299.661651][ T5950] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 1299.693631][ T5950] usb 6-1: Invalid ep0 maxpacket: 16 [ 1299.732015][T24577] usb 7-1: Using ep0 maxpacket: 32 [ 1299.747678][T24577] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 1299.771530][T24577] usb 7-1: config 0 has no interface number 0 [ 1299.784866][T24577] usb 7-1: New USB device found, idVendor=11f5, idProduct=0005, bcdDevice=57.c1 [ 1299.806642][T24577] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.816610][T24577] usb 7-1: Product: syz [ 1299.820859][T24577] usb 7-1: Manufacturer: syz [ 1299.826587][ T5950] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 1299.834803][T24577] usb 7-1: SerialNumber: syz [ 1299.845980][T24577] usb 7-1: config 0 descriptor?? [ 1299.865317][T24577] pl2303 7-1:0.196: required interrupt-in endpoint missing [ 1299.885852][ T5950] usb 6-1: Invalid ep0 maxpacket: 16 [ 1299.901805][ T5950] usb usb6-port1: unable to enumerate USB device [ 1299.972998][ T5990] pyra 0003:1E7D:2CF6.0075: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 1300.064595][T24577] usb 7-1: USB disconnect, device number 83 [ 1300.389560][ T5990] pyra 0003:1E7D:2CF6.0075: couldn't init struct pyra_device [ 1300.398044][ T5990] pyra 0003:1E7D:2CF6.0075: couldn't install mouse [ 1300.407862][ T5990] pyra 0003:1E7D:2CF6.0075: probe with driver pyra failed with error -71 [ 1300.421598][ T5990] usb 4-1: USB disconnect, device number 113 [ 1300.974254][T24577] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 1301.131192][T24577] usb 7-1: Using ep0 maxpacket: 8 [ 1301.138519][T24577] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1301.147060][T24577] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1301.157449][T24577] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1301.170813][T24577] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1301.170906][ T5842] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1301.190654][T24577] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1301.204263][T24577] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1301.213637][T24577] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.310968][ T5842] usb 4-1: device descriptor read/64, error -71 [ 1301.427400][T24577] usb 7-1: usb_control_msg returned -32 [ 1301.433928][T24577] usbtmc 7-1:16.0: can't read capabilities [ 1301.550677][ T5842] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1301.614308][T25267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1301.638199][T25267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1301.650847][T25267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1301.662225][T25267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1301.690971][ T5842] usb 4-1: device descriptor read/64, error -71 [ 1301.794206][T25269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1301.804146][T25269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1301.813233][ T5842] usb usb4-port1: attempt power cycle [ 1301.980446][ T5975] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1302.010950][T21137] usb 44-1: device descriptor read/8, error -110 [ 1302.132821][ T5975] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1302.143443][ T5975] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1302.156961][ T5975] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1302.166904][ T5842] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1302.176646][ T5975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.188611][ T5975] usb 6-1: Product: syz [ 1302.193328][ T5975] usb 6-1: Manufacturer: syz [ 1302.198335][ T5975] usb 6-1: SerialNumber: syz [ 1302.207452][ T5975] usb 6-1: config 0 descriptor?? [ 1302.213786][ T5842] usb 4-1: device descriptor read/8, error -71 [ 1302.230113][ T5975] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1302.241853][ T5975] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1302.252807][ T5975] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1302.263350][ T5975] usb 6-1: media controller created [ 1302.287860][ T5975] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1302.343425][ T5975] DVB: Unable to find symbol tda10046_attach() [ 1302.349642][ T5975] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1302.358915][ T5975] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1302.402167][T21137] usb usb44-port1: attempt power cycle [ 1302.423833][ T5975] dvb_usb_m920x 6-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1302.444939][ T5975] usb 6-1: USB disconnect, device number 10 [ 1302.460919][ T5842] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1302.501690][ T5842] usb 4-1: device descriptor read/8, error -71 [ 1302.610717][ T5842] usb usb4-port1: unable to enumerate USB device [ 1302.964657][T21137] usb usb44-port1: unable to enumerate USB device [ 1303.067702][T25274] comedi comedi3: 8255: I/O port conflict (0x10003,4) [ 1303.075274][T25274] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 1303.083819][T25274] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 1303.091010][T25274] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1303.097595][T25274] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 1303.105007][T25274] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1303.644572][T21137] usb 7-1: USB disconnect, device number 84 [ 1304.353703][ T10] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1304.515220][ T10] usb 4-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 1304.525185][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.545604][ T10] usb 4-1: Product: syz [ 1304.569557][ T10] usb 4-1: Manufacturer: syz [ 1304.575117][ T10] usb 4-1: SerialNumber: syz [ 1304.598172][ T10] usb 4-1: config 0 descriptor?? [ 1305.294153][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.721242][ T10] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1305.732266][ T10] asix 4-1:0.0: probe with driver asix failed with error -71 [ 1305.744463][ T10] usb 4-1: USB disconnect, device number 118 [ 1305.865890][ T1156] wlan1: Trigger new scan to find an IBSS to join [ 1306.445518][ T30] audit: type=1804 audit(1757219452.767:8276): pid=25307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.5486" name="/newroot/296/bus/file0" dev="overlay" ino=1590 res=1 errno=0 [ 1306.662816][ T30] audit: type=1400 audit(1757219452.997:8277): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=25312 comm="syz.7.5490" [ 1306.693191][ T30] audit: type=1400 audit(1757219453.007:8278): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=25312 comm="syz.7.5490" [ 1306.805418][T25311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1306.828018][T25311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1306.906020][ T5842] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1308.281563][T20938] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1308.305311][ C1] vkms_vblank_simulate: vblank timer overrun [ 1308.314574][T20938] Bluetooth: hci4: Injecting HCI hardware error event [ 1308.336163][ T5885] Bluetooth: hci4: hardware error 0x00 [ 1308.899970][T24898] wlan1: Trigger new scan to find an IBSS to join [ 1309.868579][T25329] netlink: 'syz.6.5494': attribute type 21 has an invalid length. [ 1309.877319][T25329] netlink: 128 bytes leftover after parsing attributes in process `syz.6.5494'. [ 1309.993724][T25331] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5496'. [ 1310.252495][T25339] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1310.291498][T25339] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1310.296736][T25345] tipc: MTU too low for tipc bearer [ 1310.307206][T25344] tipc: MTU too low for tipc bearer [ 1310.489108][ T5885] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1311.485840][ T5842] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 1311.656369][ T5842] usb 7-1: Using ep0 maxpacket: 32 [ 1311.663690][ T5842] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1311.677876][ T5842] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1311.869853][ T60] wlan1: Trigger new scan to find an IBSS to join [ 1312.052819][ T5842] usb 7-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1312.080049][ T5842] usb 7-1: config 0 interface 0 has no altsetting 1 [ 1312.098021][ T5842] usb 7-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice=8e.57 [ 1312.122023][ T5842] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.138163][ T5842] usb 7-1: Product: syz [ 1312.146906][ T5842] usb 7-1: Manufacturer: syz [ 1312.151555][ T5842] usb 7-1: SerialNumber: syz [ 1312.191752][ T5842] usb 7-1: config 0 descriptor?? [ 1312.221482][ T5842] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1312.300745][ T5842] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1312.420924][T24698] udevd[24698]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1312.455894][T25360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1312.481518][T25360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1312.725190][ T10] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1312.859932][T24898] wlan1: Creating new IBSS network, BSSID ce:2b:1c:b8:73:73 [ 1312.887041][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1312.898855][ T10] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1312.928433][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.980817][ T10] usb 4-1: Product: syz [ 1312.995269][ T10] usb 4-1: Manufacturer: syz [ 1312.999963][ T10] usb 4-1: SerialNumber: syz [ 1313.028136][T21137] usb 7-1: USB disconnect, device number 85 [ 1313.067636][ T10] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1313.073995][ T10] r8152-cfgselector 4-1: config 0 descriptor?? [ 1313.511566][T25375] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5508'. [ 1313.529920][T25317] Set syz1 is full, maxelem 65536 reached [ 1313.534569][ T5842] r8152-cfgselector 4-1: USB disconnect, device number 120 [ 1313.696411][T25377] overlay: ./file0 is not a directory [ 1314.028349][T25391] virt_wifi0 speed is unknown, defaulting to 1000 [ 1314.037600][T25391] lo speed is unknown, defaulting to 1000 [ 1314.189844][T25399] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.5515'. [ 1314.235210][T25399] openvswitch: netlink: Message has 512 unknown bytes. [ 1314.268781][T25399] netlink: 'syz.5.5515': attribute type 83 has an invalid length. [ 1314.666438][T25413] overlayfs: missing 'lowerdir' [ 1314.910551][T25416] block nbd6: Attempted send on invalid socket [ 1314.934000][T25416] blk_print_req_error: 2 callbacks suppressed [ 1314.934024][T25416] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1315.673613][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1315.825869][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 1315.842993][ T10] usb 6-1: config 25 has an invalid interface number: 77 but max is 0 [ 1315.858720][ T10] usb 6-1: config 25 has no interface number 0 [ 1315.866630][ T5885] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1315.878090][ T5885] CPU: 0 UID: 0 PID: 5885 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 1315.878121][ T5885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1315.878139][ T5885] Workqueue: hci1 hci_rx_work [ 1315.878177][ T5885] Call Trace: [ 1315.878187][ T5885] [ 1315.878199][ T5885] dump_stack_lvl+0x189/0x250 [ 1315.878228][ T5885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1315.878251][ T5885] ? __pfx__printk+0x10/0x10 [ 1315.878293][ T5885] ? kernfs_path_from_node+0x250/0x290 [ 1315.878316][ T5885] ? kernfs_path_from_node+0x2f/0x290 [ 1315.878344][ T5885] sysfs_create_dir_ns+0x259/0x280 [ 1315.878385][ T5885] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1315.878425][ T5885] ? do_raw_spin_unlock+0x122/0x240 [ 1315.878466][ T5885] kobject_add_internal+0x59f/0xb40 [ 1315.878500][ T5885] kobject_add+0x155/0x220 [ 1315.878527][ T5885] ? __pfx_kobject_add+0x10/0x10 [ 1315.878553][ T5885] ? _raw_spin_unlock+0x28/0x50 [ 1315.878592][ T5885] ? get_device_parent+0x366/0x3a0 [ 1315.878625][ T5885] device_add+0x408/0xb50 [ 1315.878656][ T5885] hci_conn_add_sysfs+0xd5/0x1e0 [ 1315.878690][ T5885] le_conn_complete_evt+0xc3a/0x1220 [ 1315.878728][ T5885] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1315.878770][ T5885] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1315.878793][ T5885] ? __asan_memcpy+0x40/0x70 [ 1315.878820][ T5885] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1315.878843][ T5885] ? skb_pull_data+0xfb/0x200 [ 1315.878880][ T5885] hci_le_conn_complete_evt+0x187/0x450 [ 1315.878925][ T5885] hci_event_packet+0x78f/0x1200 [ 1315.878963][ T5885] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1315.879003][ T5885] ? __pfx_hci_event_packet+0x10/0x10 [ 1315.879044][ T5885] ? kcov_remote_start+0x4d3/0x7f0 [ 1315.879069][ T5885] ? local_clock_noinstr+0xe0/0xe0 [ 1315.879109][ T5885] ? hci_send_to_monitor+0xe2/0x570 [ 1315.879138][ T5885] hci_rx_work+0x46a/0xe80 [ 1315.879180][ T5885] ? process_scheduled_works+0x9ef/0x17b0 [ 1315.879213][ T5885] process_scheduled_works+0xade/0x17b0 [ 1315.879277][ T5885] ? __pfx_process_scheduled_works+0x10/0x10 [ 1315.879326][ T5885] worker_thread+0x8a0/0xda0 [ 1315.879360][ T5885] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1315.879406][ T5885] ? __kthread_parkme+0x7b/0x200 [ 1315.879449][ T5885] kthread+0x70e/0x8a0 [ 1315.879488][ T5885] ? __pfx_worker_thread+0x10/0x10 [ 1315.879518][ T5885] ? __pfx_kthread+0x10/0x10 [ 1315.879664][ T5885] ? _raw_spin_unlock_irq+0x23/0x50 [ 1315.879699][ T5885] ? lockdep_hardirqs_on+0x9c/0x150 [ 1315.879718][ T5885] ? __pfx_kthread+0x10/0x10 [ 1315.879756][ T5885] ret_from_fork+0x47c/0x820 [ 1315.879786][ T5885] ? __pfx_ret_from_fork+0x10/0x10 [ 1315.879822][ T5885] ? __switch_to_asm+0x39/0x70 [ 1315.879846][ T5885] ? __switch_to_asm+0x33/0x70 [ 1315.879868][ T5885] ? __pfx_kthread+0x10/0x10 [ 1315.879902][ T5885] ret_from_fork_asm+0x1a/0x30 [ 1315.879944][ T5885] [ 1315.879973][ T5885] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1316.063620][ T1210] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1316.065678][ T5885] Bluetooth: hci1: failed to register connection device [ 1316.093929][ T5842] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 1316.106325][ T10] usb 6-1: config 25 interface 77 has no altsetting 0 [ 1316.213951][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=f2.d1 [ 1316.223069][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.231139][ T10] usb 6-1: Product: syz [ 1316.235423][ T10] usb 6-1: Manufacturer: syz [ 1316.240109][ T10] usb 6-1: SerialNumber: syz [ 1316.253676][ T5842] usb 7-1: device descriptor read/64, error -71 [ 1316.273323][ T1210] usb 4-1: Using ep0 maxpacket: 8 [ 1316.281308][ T1210] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1316.292414][ T1210] usb 4-1: config 16 interface 0 has no altsetting 0 [ 1316.302487][ T1210] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=1a.35 [ 1316.314572][ T1210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.322703][ T1210] usb 4-1: Product: syz [ 1316.328595][ T1210] usb 4-1: Manufacturer: syz [ 1316.334313][ T1210] usb 4-1: SerialNumber: syz [ 1316.452974][T25433] binder_alloc_mmap_handler: 54 callbacks suppressed [ 1316.453004][T25433] binder_alloc: binder_alloc_mmap_handler: 25432 200000735000-200000736000 already mapped failed -16 [ 1316.488824][ T10] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 1316.501743][ T10] gspca_sunplus: reg_w_riv err -71 [ 1316.513358][ T5842] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 1316.520269][ T10] sunplus 6-1:25.77: probe with driver sunplus failed with error -71 [ 1316.542967][ T10] usb 6-1: USB disconnect, device number 11 [ 1316.560189][T25442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1316.580208][T25442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1316.633748][ T1210] usb 4-1: ucan: probing device on interface #0 [ 1316.640788][ T1210] usb 4-1: ucan: invalid endpoint configuration [ 1316.649520][ T1210] usb 4-1: ucan: probe failed; try to update the device firmware [ 1316.659365][ T5842] usb 7-1: device descriptor read/64, error -71 [ 1316.670743][ T1210] usb 4-1: USB disconnect, device number 121 [ 1316.681205][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880778dd800: rx timeout, send abort [ 1316.774020][ T5842] usb usb7-port1: attempt power cycle [ 1317.115942][ T5842] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 1317.143509][ T5842] usb 7-1: device descriptor read/8, error -71 [ 1317.189365][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880778dd800: abort rx timeout. Force session deactivation [ 1317.382765][ T5842] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 1317.404008][ T5842] usb 7-1: device descriptor read/8, error -71 [ 1317.433201][T21137] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1317.514358][ T5842] usb usb7-port1: unable to enumerate USB device [ 1317.562779][T21137] usb 4-1: device descriptor read/64, error -71 [ 1317.809069][T21137] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1317.942713][T21137] usb 4-1: device descriptor read/64, error -71 [ 1318.032721][ T5990] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1318.052847][T21137] usb usb4-port1: attempt power cycle [ 1318.196622][ T5990] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1318.207688][ T5990] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1318.216994][ T5990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.227792][ T5990] usb 6-1: config 0 descriptor?? [ 1318.240176][ T5990] pwc: Askey VC010 type 2 USB webcam detected. [ 1318.393306][T21137] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1318.413127][T21137] usb 4-1: device descriptor read/8, error -71 [ 1318.636031][ T5990] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1318.644715][ T5990] pwc: recv_control_msg error -32 req 02 val 2700 [ 1318.651861][ T5990] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1318.661680][ T5990] pwc: recv_control_msg error -32 req 04 val 1000 [ 1318.669033][ T5990] pwc: recv_control_msg error -32 req 04 val 1300 [ 1318.675860][T21137] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1318.684862][ T5990] pwc: recv_control_msg error -32 req 04 val 1400 [ 1318.692138][ T5990] pwc: recv_control_msg error -32 req 02 val 2000 [ 1318.699717][ T5990] pwc: recv_control_msg error -32 req 02 val 2100 [ 1318.711278][T21137] usb 4-1: device descriptor read/8, error -71 [ 1318.717667][ T5990] pwc: recv_control_msg error -32 req 04 val 1500 [ 1318.726832][ T5990] pwc: recv_control_msg error -32 req 02 val 2500 [ 1318.734359][ T5990] pwc: recv_control_msg error -32 req 02 val 2400 [ 1318.844813][T21137] usb usb4-port1: unable to enumerate USB device [ 1319.042890][ T5990] pwc: recv_control_msg error -71 req 02 val 2900 [ 1319.050228][ T5990] pwc: recv_control_msg error -71 req 02 val 2800 [ 1319.059173][ T5990] pwc: recv_control_msg error -71 req 04 val 1100 [ 1319.073609][ T5990] pwc: recv_control_msg error -71 req 04 val 1200 [ 1319.087981][ T5990] pwc: Registered as video103. [ 1319.096104][ T5990] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input160 [ 1319.122986][ T5990] usb 6-1: USB disconnect, device number 12 [ 1319.272420][ T1210] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 1319.431835][ T1210] usb 7-1: Using ep0 maxpacket: 8 [ 1319.441258][ T1210] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1319.450634][ T1210] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.459134][ T1210] usb 7-1: Product: syz [ 1319.463519][ T1210] usb 7-1: Manufacturer: syz [ 1319.468499][ T1210] usb 7-1: SerialNumber: syz [ 1319.479633][ T1210] usb 7-1: config 0 descriptor?? [ 1319.491180][ T1210] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1319.778892][T25472] TCP: TCP_TX_DELAY enabled [ 1320.508312][T25461] netlink: 156 bytes leftover after parsing attributes in process `syz.6.5532'. [ 1320.532521][T21137] usb 7-1: USB disconnect, device number 90 [ 1320.681081][T24577] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1320.717927][T25486] tmpfs: Bad value for 'mpol' [ 1320.728087][T25486] netlink: 'syz.5.5539': attribute type 10 has an invalid length. [ 1320.746646][T25486] 8021q: adding VLAN 0 to HW filter on device team0 [ 1320.756965][T25486] bond0: (slave team0): Enslaving as an active interface with an up link [ 1320.841583][T24577] usb 4-1: Using ep0 maxpacket: 16 [ 1320.852992][T24577] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1320.869263][T24577] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.877915][T24577] usb 4-1: Product: syz [ 1320.883806][T24577] usb 4-1: Manufacturer: syz [ 1320.888529][T24577] usb 4-1: SerialNumber: syz [ 1320.898458][T24577] usb 4-1: config 0 descriptor?? [ 1320.909131][T24577] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1321.066898][T21137] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1321.231002][T21137] usb 6-1: Using ep0 maxpacket: 32 [ 1321.238896][T21137] usb 6-1: config 4 has an invalid interface number: 128 but max is 0 [ 1321.248066][T21137] usb 6-1: config 4 has no interface number 0 [ 1321.254372][T21137] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1321.265654][T21137] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1321.276232][T21137] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1321.285806][T21137] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.303575][T21137] hub 6-1:4.128: USB hub found [ 1321.506325][T25492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1321.517453][T25492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1321.709287][T21137] hub 6-1:4.128: config failed, can't read hub descriptor (err -22) [ 1321.752459][T21137] usb 6-1: USB disconnect, device number 13 [ 1322.129641][T24577] usb 4-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 1322.328344][T24577] usb 4-1: USB disconnect, device number 126 [ 1322.348950][T24577] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 1322.376440][T24577] ssu100 4-1:0.0: device disconnected [ 1323.178328][T25499] netlink: 420 bytes leftover after parsing attributes in process `syz.7.5545'. [ 1323.191560][T25500] netlink: 420 bytes leftover after parsing attributes in process `syz.7.5545'. [ 1323.211982][T25499] netlink: 'syz.7.5545': attribute type 2 has an invalid length. [ 1323.250391][T25500] netlink: 'syz.7.5545': attribute type 2 has an invalid length. [ 1324.016739][T25514] syz.3.5548: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1324.043087][T25514] CPU: 1 UID: 0 PID: 25514 Comm: syz.3.5548 Not tainted syzkaller #0 PREEMPT(full) [ 1324.043122][T25514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1324.043134][T25514] Call Trace: [ 1324.043141][T25514] [ 1324.043148][T25514] dump_stack_lvl+0x189/0x250 [ 1324.043171][T25514] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1324.043187][T25514] ? __pfx__printk+0x10/0x10 [ 1324.043212][T25514] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1324.043237][T25514] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1324.043263][T25514] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1324.043289][T25514] warn_alloc+0x214/0x310 [ 1324.043309][T25514] ? stack_depot_save_flags+0x40/0x860 [ 1324.043332][T25514] ? __pfx_warn_alloc+0x10/0x10 [ 1324.043352][T25514] ? kasan_save_track+0x3e/0x80 [ 1324.043367][T25514] ? __kasan_kmalloc+0x93/0xb0 [ 1324.043385][T25514] ? xsk_setsockopt+0x4dc/0x8d0 [ 1324.043406][T25514] ? do_sock_setsockopt+0x179/0x1b0 [ 1324.043421][T25514] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 1324.043437][T25514] ? do_syscall_64+0xfa/0xfa0 [ 1324.043451][T25514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.043474][T25514] __vmalloc_node_range_noprof+0x125/0x12f0 [ 1324.043515][T25514] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1324.043537][T25514] ? __kasan_kmalloc+0x93/0xb0 [ 1324.043558][T25514] vmalloc_user_noprof+0xad/0xf0 [ 1324.043576][T25514] ? xskq_create+0xbf/0x170 [ 1324.043601][T25514] xskq_create+0xbf/0x170 [ 1324.043632][T25514] xsk_init_queue+0xb0/0x110 [ 1324.043657][T25514] xsk_setsockopt+0x4dc/0x8d0 [ 1324.043682][T25514] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1324.043706][T25514] ? __pfx_aa_sk_perm+0x10/0x10 [ 1324.043731][T25514] ? aa_sock_opt_perm+0xff/0x1b0 [ 1324.043758][T25514] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1324.043781][T25514] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1324.043805][T25514] do_sock_setsockopt+0x179/0x1b0 [ 1324.043825][T25514] __x64_sys_setsockopt+0x13f/0x1b0 [ 1324.043847][T25514] do_syscall_64+0xfa/0xfa0 [ 1324.043861][T25514] ? lockdep_hardirqs_on+0x9c/0x150 [ 1324.043875][T25514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.043891][T25514] ? clear_bhb_loop+0x60/0xb0 [ 1324.043911][T25514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.043927][T25514] RIP: 0033:0x7f350018ebe9 [ 1324.043942][T25514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1324.043957][T25514] RSP: 002b:00007f3500fb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1324.043975][T25514] RAX: ffffffffffffffda RBX: 00007f35003c6180 RCX: 00007f350018ebe9 [ 1324.043987][T25514] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 1324.043997][T25514] RBP: 00007f3500211e19 R08: 0000000000000052 R09: 0000000000000000 [ 1324.044008][T25514] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1324.044019][T25514] R13: 00007f35003c6218 R14: 00007f35003c6180 R15: 00007fffb7660448 [ 1324.044044][T25514] [ 1324.044210][T25514] Mem-Info: [ 1324.304361][ C1] vkms_vblank_simulate: vblank timer overrun [ 1324.389864][T25514] active_anon:22583 inactive_anon:0 isolated_anon:0 [ 1324.389864][T25514] active_file:4513 inactive_file:53785 isolated_file:0 [ 1324.389864][T25514] unevictable:768 dirty:23 writeback:0 [ 1324.389864][T25514] slab_reclaimable:7677 slab_unreclaimable:114641 [ 1324.389864][T25514] mapped:25958 shmem:16729 pagetables:1584 [ 1324.389864][T25514] sec_pagetables:0 bounce:0 [ 1324.389864][T25514] kernel_misc_reclaimable:0 [ 1324.389864][T25514] free:1278485 free_pcp:15452 free_cma:0 [ 1324.446591][T25514] Node 0 active_anon:90332kB inactive_anon:0kB active_file:18052kB inactive_file:214904kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:107796kB dirty:92kB writeback:0kB shmem:65380kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13600kB pagetables:6304kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1324.498717][T25514] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:236kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1324.538241][T25514] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 1324.579093][T25514] lowmem_reserve[]: 0 2495 2496 2496 2496 [ 1324.607268][T25514] Node 0 DMA32 free:1203592kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:90284kB inactive_anon:0kB active_file:18052kB inactive_file:213820kB unevictable:1536kB writepending:92kB zspages:0kB present:3129332kB managed:2555528kB mlocked:0kB bounce:0kB free_pcp:36620kB local_pcp:19960kB free_cma:0kB [ 1324.653211][T25514] lowmem_reserve[]: 0 0 1 1 1 [ 1324.692415][T25514] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1084kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1324.775649][T25514] lowmem_reserve[]: 0 0 0 0 0 [ 1324.801393][T25514] Node 1 Normal free:3893812kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:236kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:24980kB local_pcp:12948kB free_cma:0kB [ 1324.842143][T25514] lowmem_reserve[]: 0 0 0 0 0 [ 1324.846941][T25514] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 1324.872187][T25514] Node 0 DMA32: 420*4kB (UME) 631*8kB (UME) 72*16kB (UME) 574*32kB (UME) 1044*64kB (UME) 443*128kB (UME) 186*256kB (UME) 129*512kB (UME) 27*1024kB (UME) 25*2048kB (UME) 210*4096kB (UME) = 1202440kB [ 1324.908017][T25522] netlink: 'syz.6.5551': attribute type 11 has an invalid length. [ 1324.916693][T25514] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1324.929267][T25514] Node 1 Normal: 195*4kB (UME) 53*8kB (UME) 46*16kB (UME) 239*32kB (UME) 111*64kB (UME) 30*128kB (UME) 10*256kB (UME) 4*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 943*4096kB (M) = 3893812kB [ 1324.980038][ T5885] Bluetooth: hci1: command 0x0406 tx timeout [ 1325.015629][T25514] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1325.034305][T25514] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1325.046201][T25514] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1325.065296][T25514] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1325.076527][T25514] 75025 total pagecache pages [ 1325.090908][T25514] 0 pages in swap cache [ 1325.095357][T25514] Free swap = 124996kB [ 1325.108047][T25514] Total swap = 124996kB [ 1325.115637][T25514] 2097051 pages RAM [ 1325.128371][T25514] 0 pages HighMem/MovableOnly [ 1325.135302][T25514] 426271 pages reserved [ 1325.145202][T25514] 0 pages cma reserved [ 1325.468680][ T5937] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1325.624554][ T5937] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1325.655605][ T5937] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1325.687674][ T5937] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1325.697669][ T5937] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1325.717274][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.740893][ T5937] usb 4-1: Product: syz [ 1325.744119][T25530] netlink: 'syz.6.5553': attribute type 11 has an invalid length. [ 1325.745213][ T5937] usb 4-1: Manufacturer: syz [ 1325.768230][ T5937] usb 4-1: SerialNumber: syz [ 1325.785557][T25528] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1325.803663][T25528] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1325.895725][T25532] ªªªªªª: renamed from wg2 (while UP) [ 1326.023576][T25528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5552'. [ 1326.043851][T25536] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5555'. [ 1326.071585][T25536] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5555'. [ 1326.198564][ T5937] rtl8150 4-1:1.0: couldn't reset the device [ 1326.218911][ T5937] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 1326.241592][ T5937] usb 4-1: USB disconnect, device number 127 [ 1326.338428][ T5950] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 1326.381402][T25546] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5558'. [ 1326.510397][ T5950] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1326.522762][ T5950] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1326.533815][ T5950] usb 7-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 1326.545703][ T5950] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.559390][ T5950] usb 7-1: config 0 descriptor?? [ 1326.678078][ T5937] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1326.811156][ T5937] usb 4-1: device descriptor read/64, error -71 [ 1326.979781][ T5950] hid_parser_main: 10 callbacks suppressed [ 1326.979809][ T5950] logitech 0003:046D:C294.0076: unknown main item tag 0x0 [ 1326.995812][ T5950] logitech 0003:046D:C294.0076: unknown main item tag 0x0 [ 1327.010221][ T5950] logitech 0003:046D:C294.0076: unknown main item tag 0x0 [ 1327.017437][ T5950] logitech 0003:046D:C294.0076: unknown main item tag 0x0 [ 1327.029867][ T5950] logitech 0003:046D:C294.0076: unknown main item tag 0x0 [ 1327.037273][ T5950] logitech 0003:046D:C294.0076: unknown main item tag 0x0 [ 1327.052988][ T5950] logitech 0003:046D:C294.0076: unknown main item tag 0x0 [ 1327.058845][ T5937] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1327.088433][ T5950] logitech 0003:046D:C294.0076: hidraw0: USB HID v0.00 Device [HID 046d:c294] on usb-dummy_hcd.6-1/input0 [ 1327.121564][ T5950] logitech 0003:046D:C294.0076: no inputs found [ 1327.176325][ T5950] usb 7-1: USB disconnect, device number 91 [ 1327.210762][ T5937] usb 4-1: device descriptor read/64, error -71 [ 1327.338074][ T5937] usb usb4-port1: attempt power cycle [ 1327.677957][ T5937] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1327.718196][ T5937] usb 4-1: device descriptor read/8, error -71 [ 1327.959045][ T5937] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1327.999128][ T5937] usb 4-1: device descriptor read/8, error -71 [ 1328.007820][T25555] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.021075][T19731] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.028540][T19731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1328.037661][ T5950] usb 7-1: new full-speed USB device number 92 using dummy_hcd [ 1328.118137][ T5937] usb usb4-port1: unable to enumerate USB device [ 1328.168136][ T5950] usb 7-1: device descriptor read/64, error -71 [ 1328.417614][ T5950] usb 7-1: new full-speed USB device number 93 using dummy_hcd [ 1328.557432][ T5950] usb 7-1: device descriptor read/64, error -71 [ 1328.667331][ T5950] usb usb7-port1: attempt power cycle [ 1329.007179][ T5950] usb 7-1: new full-speed USB device number 94 using dummy_hcd [ 1329.040163][ T5950] usb 7-1: device descriptor read/8, error -71 [ 1329.287036][ T5950] usb 7-1: new full-speed USB device number 95 using dummy_hcd [ 1329.323932][ T5950] usb 7-1: device descriptor read/8, error -71 [ 1329.440036][ T5950] usb usb7-port1: unable to enumerate USB device [ 1330.406328][ T1210] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1330.567131][ T1210] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1330.584197][ T1210] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1330.603329][ T1210] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1330.614774][ T1210] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1330.633382][ T1210] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1330.645891][ T1210] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1330.655033][ T1210] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1330.667955][ T1210] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1330.678915][ T1210] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1330.687097][ T1210] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1330.703610][ T1210] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1330.715006][ T1210] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1330.732655][ T1210] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1330.743648][ T1210] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1330.759633][ T1210] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1330.773470][ T1210] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1330.791145][ T1210] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1330.804150][ T1210] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1330.836124][ T1210] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1330.866722][ T1210] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1330.906454][ T1210] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1330.927223][ T1210] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1330.945665][ T1210] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1330.968025][ T1210] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1330.983728][ T1210] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1330.993617][ T1210] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1331.012569][ T1210] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1331.032819][ T1210] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1331.052434][ T1210] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1331.060775][ T1210] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1331.077864][ T1210] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1331.089398][ T1210] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1331.099656][ T1210] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1331.110522][ T1210] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1331.121696][ T1210] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1331.138871][ T1210] usb 4-1: Product: syz [ 1331.143116][ T1210] usb 4-1: Manufacturer: syz [ 1331.150391][ T1210] usb 4-1: SerialNumber: syz [ 1331.159789][ T1210] usb 4-1: config 0 descriptor?? [ 1331.176315][ T1210] yurex 4-1:0.0: Could not submitting URB [ 1331.182377][ T1210] yurex 4-1:0.0: probe with driver yurex failed with error -5 [ 1331.217045][T21137] usb 7-1: new full-speed USB device number 96 using dummy_hcd [ 1331.311696][T25571] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5567'. [ 1331.387970][T25567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1331.390092][T21137] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1331.406413][T25567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1331.408786][ T1210] usb 4-1: USB disconnect, device number 6 [ 1331.459162][T21137] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1331.498478][T21137] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1331.512838][T21137] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1331.522907][T21137] usb 7-1: SerialNumber: syz [ 1331.544204][T21137] cdc_ether 7-1:1.0: skipping garbage [ 1331.550253][T21137] usb 7-1: bad CDC descriptors [ 1331.556633][T21137] usb-storage 7-1:1.0: USB Mass Storage device detected [ 1331.571841][T21137] usb-storage 7-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1331.746030][T21137] usb 7-1: USB disconnect, device number 96 [ 1331.928375][ T1210] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 1332.085764][ T1210] usb 4-1: device descriptor read/64, error -71 [ 1332.325542][ T1210] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 1332.350159][T25577] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.5569'. [ 1332.477246][ T1210] usb 4-1: device descriptor read/64, error -71 [ 1332.587236][ T1210] usb usb4-port1: attempt power cycle [ 1332.652184][T25582] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1332.659780][T25582] overlayfs: failed to set xattr on upper [ 1332.676813][T25582] overlayfs: ...falling back to redirect_dir=nofollow. [ 1332.690462][T25582] overlayfs: ...falling back to index=off. [ 1332.700273][T25582] overlayfs: ...falling back to uuid=null. [ 1332.712324][T25582] overlayfs: ...falling back to xino=off. [ 1332.843691][T25585] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5572'. [ 1332.955852][ T1210] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 1332.975765][ T1210] usb 4-1: device descriptor read/8, error -71 [ 1333.215697][T24577] usb 7-1: new full-speed USB device number 97 using dummy_hcd [ 1333.224825][ T1210] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 1333.396949][T24577] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1333.411523][T24577] usb 7-1: not running at top speed; connect to a high speed hub [ 1333.423473][T24577] usb 7-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1333.437375][T24577] usb 7-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 1333.450177][T24577] usb 7-1: New USB device found, idVendor=187f, idProduct=0010, bcdDevice=5a.a7 [ 1333.454649][ T1210] usb 4-1: device not accepting address 10, error -71 [ 1333.460204][T24577] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.474889][T24577] usb 7-1: Product: syz [ 1333.481246][T24577] usb 7-1: Manufacturer: syz [ 1333.484977][ T1210] usb usb4-port1: unable to enumerate USB device [ 1333.486882][T24577] usb 7-1: SerialNumber: syz [ 1333.763347][T25587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.785119][T25587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.817155][ T1210] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1333.822233][T24577] usb 7-1: USB disconnect, device number 97 [ 1334.004454][ T1210] usb 4-1: Using ep0 maxpacket: 16 [ 1334.019303][ T1210] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1334.033283][ T1210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.042398][ T1210] usb 4-1: Product: syz [ 1334.047054][ T1210] usb 4-1: Manufacturer: syz [ 1334.051701][ T1210] usb 4-1: SerialNumber: syz [ 1334.065067][ T1210] usb 4-1: config 0 descriptor?? [ 1334.077370][ T1210] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1334.794529][ T1210] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110 [ 1335.862611][T25615] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:4096x2160 (0x38414262, 8, 0, 0, 0) [ 1335.946638][T25615] netlink: 'syz.6.5582': attribute type 29 has an invalid length. [ 1336.468342][T24577] usb 4-1: USB disconnect, device number 11 [ 1336.574030][ T5842] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 1336.753001][ T5842] usb 7-1: Using ep0 maxpacket: 16 [ 1336.783190][ T5842] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.796338][ T5842] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1336.807804][ T5842] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1336.822371][ T5842] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1336.832128][ T5842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1336.845203][ T5842] usb 7-1: SerialNumber: syz [ 1336.865238][ T5842] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1336.902978][T24577] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1337.063043][T24577] usb 4-1: Using ep0 maxpacket: 8 [ 1337.072937][ T5842] usb 7-1: USB disconnect, device number 98 [ 1337.074527][T24577] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1337.102945][T24577] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1337.117012][T24577] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 1337.137956][T24577] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1337.151714][T24577] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1337.177615][T24577] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1337.193471][T24577] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.418139][T24577] usb 4-1: GET_CAPABILITIES returned 0 [ 1337.425462][T24577] usbtmc 4-1:16.0: can't read capabilities [ 1337.628763][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1337.650981][ T5842] usb 4-1: USB disconnect, device number 12 [ 1338.083898][T24577] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 1338.286327][T24577] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1338.330380][ T5885] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1338.348463][ T5885] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1338.357946][ T5885] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1338.367311][ T5885] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1338.376294][ T5885] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1338.418483][T24577] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1338.428475][T24577] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1338.442009][T24577] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1338.452163][T24577] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.464011][T24577] usb 7-1: config 0 descriptor?? [ 1338.548525][T24898] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.583303][T25636] virt_wifi0 speed is unknown, defaulting to 1000 [ 1338.591679][T25636] lo speed is unknown, defaulting to 1000 [ 1338.652374][ T1210] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 1338.678537][T24898] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.800969][T24898] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.825276][ T1210] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1338.836810][ T1210] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1338.850327][ T1210] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1338.861456][ T1210] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 1338.885857][ T1210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.913382][ T1210] usb 4-1: config 0 descriptor?? [ 1338.933614][T24577] plantronics 0003:047F:FFFF.0077: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1339.000037][T24898] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.059664][T25636] chnl_net:caif_netlink_parms(): no params data found [ 1339.146716][ T5842] usb 7-1: USB disconnect, device number 99 [ 1339.306878][T25636] bridge0: port 1(bridge_slave_0) entered blocking state [ 1339.314511][T25636] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.329311][T25636] bridge_slave_0: entered allmulticast mode [ 1339.338049][ T1210] holtek 0003:1241:5015.0078: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.3-1/input0 [ 1339.352083][T25636] bridge_slave_0: entered promiscuous mode [ 1339.358090][ T1210] holtek 0003:1241:5015.0078: no inputs found [ 1339.390763][T25636] bridge0: port 2(bridge_slave_1) entered blocking state [ 1339.409513][T25636] bridge0: port 2(bridge_slave_1) entered disabled state [ 1339.417059][T25636] bridge_slave_1: entered allmulticast mode [ 1339.428468][T25636] bridge_slave_1: entered promiscuous mode [ 1339.506130][T25636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1339.531995][T25639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1339.546949][T25639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1339.568760][T25639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1339.576362][T25636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1339.588625][T25639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1339.632138][ T1210] usb 4-1: USB disconnect, device number 13 [ 1339.708548][T25636] team0: Port device team_slave_0 added [ 1339.745112][T25636] team0: Port device team_slave_1 added [ 1339.781752][T24898] bridge_slave_1: left allmulticast mode [ 1339.788388][T24898] bridge_slave_1: left promiscuous mode [ 1339.796282][T24898] bridge0: port 2(bridge_slave_1) entered disabled state [ 1339.815848][T24898] bridge_slave_0: left allmulticast mode [ 1339.822119][T24898] bridge_slave_0: left promiscuous mode [ 1339.828047][T24898] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.472305][ T5885] Bluetooth: hci3: command tx timeout [ 1340.570713][T24898] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1340.584225][T24898] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1340.596852][T24898] bond0 (unregistering): (slave team0): Releasing backup interface [ 1340.610136][T24898] bond0 (unregistering): Released all slaves [ 1340.706128][T25652] IPv6: system.posix_ac: Disabled Multicast RS [ 1340.882839][T25636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1340.921966][T25636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1340.982711][T25636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1341.010679][T25636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1341.031116][T25636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1341.061581][T25673] [U] ¥¥„ [ 1341.079825][T25672] [U] ¥¥„ [ 1341.080048][T25636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1341.441605][T25678] [U] ¥¥ [ 1341.741043][ T5950] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1341.748791][T25636] hsr_slave_0: entered promiscuous mode [ 1341.798428][T25636] hsr_slave_1: entered promiscuous mode [ 1341.813968][T25636] debugfs: 'hsr0' already exists in 'hsr' [ 1341.830557][T25636] Cannot create hsr debugfs directory [ 1341.920988][ T5950] usb 4-1: Using ep0 maxpacket: 16 [ 1341.929810][T24898] hsr_slave_0: left promiscuous mode [ 1341.933308][ T5950] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 1341.948514][ T5950] usb 4-1: config 0 has no interface number 0 [ 1341.955111][T24898] hsr_slave_1: left promiscuous mode [ 1341.955414][ T5950] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1341.974176][ T5950] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1341.985709][T24898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1342.001247][ T5950] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1342.004598][T24898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1342.023598][T24898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1342.031148][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.031179][ T5950] usb 4-1: Product: syz [ 1342.031198][ T5950] usb 4-1: Manufacturer: syz [ 1342.031217][ T5950] usb 4-1: SerialNumber: syz [ 1342.053201][T24898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1342.053983][ T5950] usb 4-1: config 0 descriptor?? [ 1342.080848][T25688] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1342.089257][T25688] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1342.100237][T24898] veth1_macvtap: left promiscuous mode [ 1342.100729][T24577] usb 7-1: new low-speed USB device number 100 using dummy_hcd [ 1342.105973][T24898] veth0_macvtap: left promiscuous mode [ 1342.120064][T24898] veth1_vlan: left promiscuous mode [ 1342.126544][T24898] veth0_vlan: left promiscuous mode [ 1342.272579][T24577] usb 7-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1342.284892][T24577] usb 7-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1342.296431][T24577] usb 7-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1342.312233][T24577] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1342.352542][ T5950] asix 4-1:0.251: probe with driver asix failed with error -71 [ 1342.370038][ T5950] usb 4-1: USB disconnect, device number 14 [ 1342.560705][T20938] Bluetooth: hci3: command tx timeout [ 1342.770292][ T5950] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1342.923902][ T5950] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1342.936165][ T5950] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1342.951444][ T5950] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1342.973836][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1342.982444][ T5950] usb 4-1: SerialNumber: syz [ 1343.107793][T24898] team0 (unregistering): Port device team_slave_1 removed [ 1343.189018][T24898] team0 (unregistering): Port device team_slave_0 removed [ 1343.326351][ T5950] usb 4-1: 0:2 : does not exist [ 1343.332148][ T5950] usb 4-1: unit 14 not found! [ 1343.380066][ T5950] usb 4-1: USB disconnect, device number 15 [ 1343.432319][T24698] udevd[24698]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1344.369479][ T5950] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 1344.531463][ T5950] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1344.553489][ T5950] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1344.565708][ T5950] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 1344.596142][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.630234][T20938] Bluetooth: hci3: command tx timeout [ 1344.639123][ T5950] usb 4-1: Product: syz [ 1344.643674][ T5950] usb 4-1: Manufacturer: syz [ 1344.658883][ T5950] usb 4-1: SerialNumber: syz [ 1344.909156][T24577] usb 7-1: New USB device found, idVendor=05ac, idProduct=0340, bcdDevice= 0.40 [ 1344.918423][T24577] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.943294][ T5950] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input162 [ 1345.009736][T25636] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1345.049051][T24577] usb 7-1: can't set config #1, error -71 [ 1345.099087][T24577] usb 7-1: USB disconnect, device number 100 [ 1345.114064][ T5950] usb 4-1: USB disconnect, device number 16 [ 1345.120364][ C0] pxrc 4-1:1.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 1345.132916][T25636] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1345.191178][ T5216] pxrc 4-1:1.0: pxrc_open - usb_submit_urb failed, error: -19 [ 1345.218250][T25636] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1345.311571][T25636] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1345.498692][T24577] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 1345.702299][T25636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1345.704005][T24577] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1345.769117][T24577] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.816225][T24577] usb 7-1: config 0 descriptor?? [ 1345.828290][T25636] 8021q: adding VLAN 0 to HW filter on device team0 [ 1345.838205][T24577] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1345.872863][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1345.880159][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1345.916205][T19730] bridge0: port 2(bridge_slave_1) entered blocking state [ 1345.923510][T19730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1346.000361][ T5950] [ 1346.002749][ T5950] ====================================================== [ 1346.009883][ T5950] WARNING: possible circular locking dependency detected [ 1346.017118][ T5950] syzkaller #0 Not tainted [ 1346.021576][ T5950] ------------------------------------------------------ [ 1346.028627][ T5950] kworker/0:4/5950 is trying to acquire lock: [ 1346.034724][ T5950] ffffffff8e642920 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x48/0x710 [ 1346.044614][ T5950] [ 1346.044614][ T5950] but task is already holding lock: [ 1346.052102][ T5950] ffff88805f26b560 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: __mptcp_push_pending+0x312/0x860 [ 1346.062011][ T5950] [ 1346.062011][ T5950] which lock already depends on the new lock. [ 1346.062011][ T5950] [ 1346.073059][ T5950] [ 1346.073059][ T5950] the existing dependency chain (in reverse order) is: [ 1346.082197][ T5950] [ 1346.082197][ T5950] -> #7 (k-sk_lock-AF_INET){+.+.}-{0:0}: [ 1346.090069][ T5950] lock_acquire+0x120/0x360 [ 1346.095226][ T5950] lock_sock_nested+0x48/0x100 [ 1346.100567][ T5950] mptcp_connect+0x4c3/0x830 [ 1346.105818][ T5950] __inet_stream_connect+0x2ab/0xe80 [ 1346.111671][ T5950] inet_stream_connect+0x66/0xa0 [ 1346.117265][ T5950] __sys_connect+0x313/0x440 [ 1346.122420][ T5950] __x64_sys_connect+0x7a/0x90 [ 1346.127729][ T5950] do_syscall_64+0xfa/0xfa0 [ 1346.132763][ T5950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.139183][ T5950] [ 1346.139183][ T5950] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 1346.146839][ T5950] lock_acquire+0x120/0x360 [ 1346.151959][ T5950] lock_sock_nested+0x48/0x100 [ 1346.157458][ T5950] tcp_sendmsg+0x21/0x50 [ 1346.162294][ T5950] __sock_sendmsg+0x19c/0x270 [ 1346.167513][ T5950] sock_sendmsg+0x158/0x230 [ 1346.172548][ T5950] __sock_xmit+0x1c1/0x470 [ 1346.177510][ T5950] nbd_send_cmd+0x863/0x1ba0 [ 1346.182634][ T5950] nbd_queue_rq+0xcdb/0xf10 [ 1346.187677][ T5950] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 1346.193773][ T5950] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 1346.200663][ T5950] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1346.207280][ T5950] blk_mq_run_hw_queue+0x348/0x4f0 [ 1346.212933][ T5950] blk_mq_dispatch_list+0xd0c/0xe00 [ 1346.218673][ T5950] blk_mq_flush_plug_list+0x469/0x550 [ 1346.224679][ T5950] __blk_flush_plug+0x3d3/0x4b0 [ 1346.230291][ T5950] __submit_bio+0x2d3/0x5a0 [ 1346.235329][ T5950] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 1346.241508][ T5950] __bread_gfp+0x216/0x3c0 [ 1346.246473][ T5950] udf_load_vrs+0x365/0xf20 [ 1346.251509][ T5950] udf_fill_super+0x5ad/0x17a0 [ 1346.256809][ T5950] get_tree_bdev_flags+0x40b/0x4d0 [ 1346.262456][ T5950] vfs_get_tree+0x8f/0x2b0 [ 1346.267421][ T5950] do_new_mount+0x302/0xa10 [ 1346.272471][ T5950] __se_sys_mount+0x313/0x410 [ 1346.277691][ T5950] do_syscall_64+0xfa/0xfa0 [ 1346.282816][ T5950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.289244][ T5950] [ 1346.289244][ T5950] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1346.296915][ T5950] lock_acquire+0x120/0x360 [ 1346.302136][ T5950] __mutex_lock+0x187/0x1350 [ 1346.307533][ T5950] nbd_queue_rq+0x257/0xf10 [ 1346.312561][ T5950] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 1346.318651][ T5950] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 1346.325519][ T5950] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1346.332045][ T5950] blk_mq_run_hw_queue+0x348/0x4f0 [ 1346.337687][ T5950] blk_mq_dispatch_list+0xd0c/0xe00 [ 1346.343449][ T5950] blk_mq_flush_plug_list+0x469/0x550 [ 1346.349361][ T5950] __blk_flush_plug+0x3d3/0x4b0 [ 1346.354756][ T5950] __submit_bio+0x2d3/0x5a0 [ 1346.359892][ T5950] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 1346.366156][ T5950] block_read_full_folio+0x599/0x830 [ 1346.371975][ T5950] filemap_read_folio+0x114/0x380 [ 1346.377538][ T5950] do_read_cache_folio+0x350/0x590 [ 1346.383208][ T5950] read_part_sector+0xb6/0x2b0 [ 1346.388518][ T5950] adfspart_check_ICS+0xa4/0xa50 [ 1346.394012][ T5950] bdev_disk_changed+0x75c/0x14b0 [ 1346.399594][ T5950] blkdev_get_whole+0x380/0x510 [ 1346.404997][ T5950] bdev_open+0x31e/0xd30 [ 1346.409775][ T5950] blkdev_open+0x457/0x600 [ 1346.414731][ T5950] do_dentry_open+0x950/0x13f0 [ 1346.420121][ T5950] vfs_open+0x3b/0x340 [ 1346.424725][ T5950] path_openat+0x2ee5/0x3830 [ 1346.429844][ T5950] do_filp_open+0x1fa/0x410 [ 1346.434875][ T5950] do_sys_openat2+0x121/0x1c0 [ 1346.440077][ T5950] __x64_sys_openat+0x138/0x170 [ 1346.445552][ T5950] do_syscall_64+0xfa/0xfa0 [ 1346.450715][ T5950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.457589][ T5950] [ 1346.457589][ T5950] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1346.464926][ T5950] lock_acquire+0x120/0x360 [ 1346.469971][ T5950] __mutex_lock+0x187/0x1350 [ 1346.475355][ T5950] nbd_queue_rq+0xc8/0xf10 [ 1346.480404][ T5950] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 1346.486522][ T5950] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 1346.493669][ T5950] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1346.500546][ T5950] blk_mq_run_hw_queue+0x348/0x4f0 [ 1346.506308][ T5950] blk_mq_dispatch_list+0xd0c/0xe00 [ 1346.512045][ T5950] blk_mq_flush_plug_list+0x469/0x550 [ 1346.517957][ T5950] __blk_flush_plug+0x3d3/0x4b0 [ 1346.523346][ T5950] __submit_bio+0x2d3/0x5a0 [ 1346.528393][ T5950] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 1346.534558][ T5950] submit_bio_wait+0x104/0x200 [ 1346.539854][ T5950] bdev_rw_virt+0x331/0x4c0 [ 1346.544886][ T5950] gfs2_read_super+0xff/0x980 [ 1346.550091][ T5950] gfs2_fill_super+0xfe0/0x20d0 [ 1346.555490][ T5950] get_tree_bdev_flags+0x40b/0x4d0 [ 1346.561250][ T5950] gfs2_get_tree+0x51/0x1e0 [ 1346.566544][ T5950] vfs_get_tree+0x8f/0x2b0 [ 1346.571493][ T5950] do_new_mount+0x302/0xa10 [ 1346.576529][ T5950] __se_sys_mount+0x313/0x410 [ 1346.581914][ T5950] do_syscall_64+0xfa/0xfa0 [ 1346.587031][ T5950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.593454][ T5950] [ 1346.593454][ T5950] -> #3 (set->srcu){.+.+}-{0:0}: [ 1346.600592][ T5950] lock_sync+0xba/0x160 [ 1346.605485][ T5950] __synchronize_srcu+0x96/0x3a0 [ 1346.610955][ T5950] elevator_switch+0x12b/0x640 [ 1346.616272][ T5950] elevator_change+0x2d4/0x450 [ 1346.621776][ T5950] elevator_set_default+0x186/0x260 [ 1346.627546][ T5950] blk_register_queue+0x34e/0x3f0 [ 1346.633289][ T5950] __add_disk+0x677/0xd50 [ 1346.638426][ T5950] add_disk_fwnode+0xfc/0x480 [ 1346.643683][ T5950] nbd_dev_add+0x717/0xae0 [ 1346.648667][ T5950] nbd_init+0x168/0x1f0 [ 1346.653367][ T5950] do_one_initcall+0x233/0x820 [ 1346.658658][ T5950] do_initcall_level+0x104/0x190 [ 1346.664135][ T5950] do_initcalls+0x59/0xa0 [ 1346.668993][ T5950] kernel_init_freeable+0x334/0x4b0 [ 1346.674727][ T5950] kernel_init+0x1d/0x1d0 [ 1346.679588][ T5950] ret_from_fork+0x47c/0x820 [ 1346.684718][ T5950] ret_from_fork_asm+0x1a/0x30 [ 1346.690013][ T5950] [ 1346.690013][ T5950] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1346.697854][ T5950] lock_acquire+0x120/0x360 [ 1346.702985][ T5950] __mutex_lock+0x187/0x1350 [ 1346.708219][ T5950] elevator_change+0x19b/0x450 [ 1346.713541][ T5950] elevator_set_none+0x42/0xb0 [ 1346.718942][ T5950] blk_mq_update_nr_hw_queues+0x598/0x1aa0 [ 1346.725304][ T5950] nbd_start_device+0x17f/0xb10 [ 1346.730756][ T5950] nbd_genl_connect+0x135b/0x18f0 [ 1346.736530][ T5950] genl_family_rcv_msg_doit+0x212/0x300 [ 1346.742631][ T5950] genl_rcv_msg+0x60e/0x790 [ 1346.747850][ T5950] netlink_rcv_skb+0x208/0x470 [ 1346.753245][ T5950] genl_rcv+0x28/0x40 [ 1346.758278][ T5950] netlink_unicast+0x82c/0x9e0 [ 1346.763587][ T5950] netlink_sendmsg+0x805/0xb30 [ 1346.768878][ T5950] __sock_sendmsg+0x219/0x270 [ 1346.774090][ T5950] ____sys_sendmsg+0x505/0x830 [ 1346.779393][ T5950] ___sys_sendmsg+0x21f/0x2a0 [ 1346.784617][ T5950] __x64_sys_sendmsg+0x19b/0x260 [ 1346.790101][ T5950] do_syscall_64+0xfa/0xfa0 [ 1346.795152][ T5950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.801602][ T5950] [ 1346.801602][ T5950] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1346.810270][ T5950] lock_acquire+0x120/0x360 [ 1346.815313][ T5950] blk_alloc_queue+0x538/0x620 [ 1346.820707][ T5950] __blk_mq_alloc_disk+0x15c/0x340 [ 1346.826353][ T5950] nbd_dev_add+0x46c/0xae0 [ 1346.831310][ T5950] nbd_init+0x168/0x1f0 [ 1346.836005][ T5950] do_one_initcall+0x233/0x820 [ 1346.841508][ T5950] do_initcall_level+0x104/0x190 [ 1346.847375][ T5950] do_initcalls+0x59/0xa0 [ 1346.852359][ T5950] kernel_init_freeable+0x334/0x4b0 [ 1346.858268][ T5950] kernel_init+0x1d/0x1d0 [ 1346.863145][ T5950] ret_from_fork+0x47c/0x820 [ 1346.868362][ T5950] ret_from_fork_asm+0x1a/0x30 [ 1346.873706][ T5950] [ 1346.873706][ T5950] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1346.881209][ T5950] validate_chain+0xb9b/0x2140 [ 1346.886551][ T5950] __lock_acquire+0xab9/0xd20 [ 1346.891774][ T5950] lock_acquire+0x120/0x360 [ 1346.896833][ T5950] fs_reclaim_acquire+0x72/0x100 [ 1346.902505][ T5950] kmem_cache_alloc_node_noprof+0x48/0x710 [ 1346.908855][ T5950] __alloc_skb+0x112/0x2d0 [ 1346.913837][ T5950] mptcp_sendmsg_frag+0x6a2/0x2d80 [ 1346.919500][ T5950] __subflow_push_pending+0x283/0xb40 [ 1346.925408][ T5950] __mptcp_push_pending+0x330/0x860 [ 1346.931138][ T5950] mptcp_release_cb+0x610/0x960 [ 1346.936515][ T5950] release_sock+0x1a0/0x1f0 [ 1346.941553][ T5950] mptcp_worker+0xa58/0x1160 [ 1346.946771][ T5950] process_scheduled_works+0xade/0x17b0 [ 1346.952848][ T5950] worker_thread+0x8a0/0xda0 [ 1346.958062][ T5950] kthread+0x70e/0x8a0 [ 1346.962760][ T5950] ret_from_fork+0x47c/0x820 [ 1346.968689][ T5950] ret_from_fork_asm+0x1a/0x30 [ 1346.974007][ T5950] [ 1346.974007][ T5950] other info that might help us debug this: [ 1346.974007][ T5950] [ 1346.984329][ T5950] Chain exists of: [ 1346.984329][ T5950] fs_reclaim --> sk_lock-AF_INET --> k-sk_lock-AF_INET [ 1346.984329][ T5950] [ 1346.997920][ T5950] Possible unsafe locking scenario: [ 1346.997920][ T5950] [ 1347.005389][ T5950] CPU0 CPU1 [ 1347.010762][ T5950] ---- ---- [ 1347.016139][ T5950] lock(k-sk_lock-AF_INET); [ 1347.020852][ T5950] lock(sk_lock-AF_INET); [ 1347.027823][ T5950] lock(k-sk_lock-AF_INET); [ 1347.034995][ T5950] lock(fs_reclaim); [ 1347.039037][ T5950] [ 1347.039037][ T5950] *** DEADLOCK *** [ 1347.039037][ T5950] [ 1347.047190][ T5950] 4 locks held by kworker/0:4/5950: [ 1347.052488][ T5950] #0: ffff88801a871548 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1347.063491][ T5950] #1: ffffc90004777ba0 ((work_completion)(&msk->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1347.075189][ T5950] #2: ffff888055863260 (sk_lock-AF_INET){+.+.}-{0:0}, at: mptcp_worker+0x36/0x1160 [ 1347.084623][ T5950] #3: ffff88805f26b560 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: __mptcp_push_pending+0x312/0x860 [ 1347.094930][ T5950] [ 1347.094930][ T5950] stack backtrace: [ 1347.100931][ T5950] CPU: 0 UID: 0 PID: 5950 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 1347.100958][ T5950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1347.100973][ T5950] Workqueue: events mptcp_worker [ 1347.101008][ T5950] Call Trace: [ 1347.101019][ T5950] [ 1347.101028][ T5950] dump_stack_lvl+0x189/0x250 [ 1347.101050][ T5950] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1347.101067][ T5950] ? __pfx__printk+0x10/0x10 [ 1347.101097][ T5950] ? stack_trace_save+0x9c/0xe0 [ 1347.101131][ T5950] print_circular_bug+0x2ee/0x310 [ 1347.101160][ T5950] check_noncircular+0x134/0x160 [ 1347.101189][ T5950] validate_chain+0xb9b/0x2140 [ 1347.101221][ T5950] ? tcp_established_options+0x326/0x610 [ 1347.101246][ T5950] __lock_acquire+0xab9/0xd20 [ 1347.101270][ T5950] ? kmem_cache_alloc_node_noprof+0x48/0x710 [ 1347.101290][ T5950] lock_acquire+0x120/0x360 [ 1347.101310][ T5950] ? kmem_cache_alloc_node_noprof+0x48/0x710 [ 1347.101337][ T5950] ? __pfx_tcp_current_mss+0x10/0x10 [ 1347.101361][ T5950] fs_reclaim_acquire+0x72/0x100 [ 1347.101384][ T5950] ? kmem_cache_alloc_node_noprof+0x48/0x710 [ 1347.101404][ T5950] kmem_cache_alloc_node_noprof+0x48/0x710 [ 1347.101465][ T5950] ? __alloc_skb+0x112/0x2d0 [ 1347.101485][ T5950] __alloc_skb+0x112/0x2d0 [ 1347.101505][ T5950] mptcp_sendmsg_frag+0x6a2/0x2d80 [ 1347.101534][ T5950] ? lockdep_hardirqs_on+0x9c/0x150 [ 1347.101558][ T5950] __subflow_push_pending+0x283/0xb40 [ 1347.101593][ T5950] __mptcp_push_pending+0x330/0x860 [ 1347.101621][ T5950] ? __pfx___mptcp_push_pending+0x10/0x10 [ 1347.101643][ T5950] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1347.101673][ T5950] mptcp_release_cb+0x610/0x960 [ 1347.101699][ T5950] ? __pfx_mptcp_release_cb+0x10/0x10 [ 1347.101716][ T5950] ? __pfx___mptcp_retrans+0x10/0x10 [ 1347.101746][ T5950] ? release_sock+0x2f/0x1f0 [ 1347.101774][ T5950] ? __pfx_mptcp_release_cb+0x10/0x10 [ 1347.101791][ T5950] release_sock+0x1a0/0x1f0 [ 1347.101820][ T5950] mptcp_worker+0xa58/0x1160 [ 1347.101849][ T5950] ? _raw_spin_unlock_irq+0x23/0x50 [ 1347.101877][ T5950] ? process_scheduled_works+0x9ef/0x17b0 [ 1347.101902][ T5950] process_scheduled_works+0xade/0x17b0 [ 1347.101938][ T5950] ? __pfx_process_scheduled_works+0x10/0x10 [ 1347.101969][ T5950] worker_thread+0x8a0/0xda0 [ 1347.101995][ T5950] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1347.102028][ T5950] ? __kthread_parkme+0x7b/0x200 [ 1347.102057][ T5950] kthread+0x70e/0x8a0 [ 1347.102088][ T5950] ? __pfx_worker_thread+0x10/0x10 [ 1347.102112][ T5950] ? __pfx_kthread+0x10/0x10 [ 1347.102141][ T5950] ? _raw_spin_unlock_irq+0x23/0x50 [ 1347.102169][ T5950] ? lockdep_hardirqs_on+0x9c/0x150 [ 1347.102185][ T5950] ? __pfx_kthread+0x10/0x10 [ 1347.102214][ T5950] ret_from_fork+0x47c/0x820 [ 1347.102237][ T5950] ? __pfx_ret_from_fork+0x10/0x10 [ 1347.102262][ T5950] ? __switch_to_asm+0x39/0x70 [ 1347.102281][ T5950] ? __switch_to_asm+0x33/0x70 [ 1347.102300][ T5950] ? __pfx_kthread+0x10/0x10 [ 1347.102335][ T5950] ret_from_fork_asm+0x1a/0x30 [ 1347.102363][ T5950] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1347.414504][T20938] Bluetooth: hci3: command tx timeout [ 1347.623413][T24577] gp8psk: usb in 128 operation failed. [ 1347.629522][T24577] gp8psk: usb in 137 operation failed. [ 1347.635020][T24577] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1347.645059][T24577] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 1347.653803][T24577] usb 7-1: media controller created [ 1347.671141][T24577] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1347.708048][T24577] gp8psk_fe: Frontend attached [ 1347.713354][T24577] usb 7-1: DVB: registering adapter 7 frontend 0 (Genpix DVB-S)... [ 1347.721691][T24577] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1347.775674][T24577] gp8psk: usb in 138 operation failed. [ 1347.807772][T24577] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 1347.817297][T24577] gp8psk: found Genpix USB device pID = 203 (hex) [ 1347.869490][T24577] usb 7-1: USB disconnect, device number 101 [ 1348.068249][T24577] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 1348.705923][T24898] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.796798][T24898] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.903105][T24898] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.976302][T24898] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.474485][T24898] bridge_slave_1: left allmulticast mode [ 1349.481637][T24898] bridge_slave_1: left promiscuous mode [ 1349.488447][T24898] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.498750][T24898] bridge_slave_0: left allmulticast mode [ 1349.504570][T24898] bridge_slave_0: left promiscuous mode [ 1349.513321][T24898] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.523611][T24898] bridge_slave_1: left allmulticast mode [ 1349.532410][T24898] bridge_slave_1: left promiscuous mode [ 1349.538820][T24898] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.548181][T24898] bridge_slave_0: left allmulticast mode [ 1349.553878][T24898] bridge_slave_0: left promiscuous mode [ 1349.559960][T24898] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.682905][T24898] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1349.693150][T24898] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1349.703369][T24898] bond0 (unregistering): Released all slaves [ 1349.782193][T24898] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1349.792515][T24898] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1349.802399][T24898] bond0 (unregistering): Released all slaves [ 1350.095011][T24898] hsr_slave_0: left promiscuous mode [ 1350.105579][T24898] hsr_slave_1: left promiscuous mode [ 1350.112113][T24898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1350.123354][T24898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1350.131831][T24898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1350.142360][T24898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1350.154196][T24898] hsr_slave_0: left promiscuous mode [ 1350.163536][T24898] hsr_slave_1: left promiscuous mode [ 1350.169995][T24898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1350.181010][T24898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1350.205454][T24898] veth1_macvtap: left promiscuous mode [ 1350.211378][T24898] veth0_macvtap: left promiscuous mode [ 1350.217273][T24898] veth1_vlan: left promiscuous mode [ 1350.222657][T24898] veth0_vlan: left promiscuous mode [ 1350.440814][T24898] team0 (unregistering): Port device team_slave_1 removed [ 1350.477766][T24898] team0 (unregistering): Port device team_slave_0 removed [ 1350.751533][T24898] team0 (unregistering): Port device team_slave_1 removed [ 1350.787477][T24898] team0 (unregistering): Port device team_slave_0 removed [ 1351.344041][T24898] IPVS: stop unused estimator thread 0...