last executing test programs: 3m11.064222891s ago: executing program 2 (id=455): syz_open_dev$vim2m(&(0x7f0000000080), 0xbfb, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) ioctl$SIOCAX25OPTRT(r0, 0x89e7, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000001fc0)={0x10c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xffffffff}, @NL80211_ATTR_FRAME={0x50, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x2}, @device_a, @broadcast, @from_mac, {0x9}, @value=@ver_80211n={0x0, 0x6, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x1012, 0x7, @device_a, {0x0, 0x6, @default_ap_ssid}, @val, @val={0x2d, 0x1a, {0x300, 0x0, 0x0, 0x0, {0x10001, 0x3, 0x0, 0x259, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x8, 0x800, 0x3}}}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xef}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xbb0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1000}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xd48}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x153}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e0}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}]]}, 0x10c}, 0x1, 0x0, 0x0, 0x24011}, 0x404c000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003700e41b0000900ac0006fc1100000004000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef409dd861c532e0df5c72f6cc3d6b92e3be65ed830a126361214c572c7d79207e20bdf860122b87104ce4e", 0x93}], 0x1}, 0x20004804) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r1], 0x0) 3m9.735620322s ago: executing program 2 (id=465): r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x81, 0x1, "d6"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x83, 0x2, "81f4"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000980)=ANY=[@ANYBLOB="201532"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f00000009c0)={0x40, 0x7, 0x2, "facd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000006c0)={0x40, 0x12, 0x6, "00a35b06cac6"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)={0x20, 0x39, 0x3, "e78e6d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m7.225099782s ago: executing program 2 (id=470): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) setsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000080), 0x4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20080a0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x40000}, 0x8051) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r4) connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0xc4c85513, &(0x7f0000000000)={0xb}) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000032001f0300000000000000007ec700002be0ca05483276bd07f84218a7e84367b24d438fe39417a25fef86ee4b0b45a98fa7ce59d8bc932788cd9bcf79f03b41e25d99a633746907f02ced5137d21723cdd9f88e278e823fe68f1530590d2c424dc668ffb3e649a1ce5ab39ec26d7d3150fa757210e463700bedfc41eb184207b2d4d3b7a3aa4a3e3a326f0dbf922aee6bfa603cbd4ef039043c7c80087e3eccd4cb3184b826989c76d05cab776c"], 0x14}], 0x1, 0x0, 0x0, 0x4004000}, 0x48000) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000055009155090893b31b71a54a07"], 0xfe33) 3m7.139952846s ago: executing program 2 (id=471): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x28, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000075220000000000022b0000000a000000fe8000000000000000000000000000aa000000000400"/180], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000180)) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000020301040000000000000000000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000002030300000000000000000000000000080001000200"], 0x1c}}, 0x0) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, r6, r7, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@v3={0x3000000, [{0x8, 0x9}, {0x1, 0xd}], r6}, 0x18, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 3m6.22185099s ago: executing program 2 (id=474): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x1d4) flistxattr(r0, &(0x7f0000000500)=""/185, 0xb9) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETA(r1, 0x5401, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "568beed00e80a9f8"}) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x10000000000, 0x2200c0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000240)={r2, 0x80000001, {0x0, 0x0, 0x0, 0xc73, 0x0, 0x0, 0x12, 0xe, 0x0, "c1e05b1224eef00a19594ec46da2592ea008aacc7262d5f48363e0d55faccd166ec4e35b09048f6500f8365edcb02b46725c7769bb94565406f60fabcc384d21", "af4dd52e9c081cab8bd45444e6f7ac325e34fe7d5da260ea9a9bec88c1577666db569ff30d64ae6b36f3ef50360429aba89aa6f05b87478dc0959f51879300fd", "081198dc0f35c7b3127d1ea5d3601ab6eff6e3824cb5b777cfce94c086eca597", [0x4, 0xffffffffffffb387]}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000064000000090a010406000000000000000300000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000002280011"], 0xac}}, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) readv(r3, &(0x7f0000003540)=[{&(0x7f0000000180)=""/188, 0xbc}], 0x1) syz_usb_connect(0x6, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201010043defd10f00a01748299010203010902240001020010060904e0fe028d5c620009050b02000000000009050a0200ebffffff"], 0x0) 3m5.961152718s ago: executing program 2 (id=476): syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009a65d0860040800dee2010203010902"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x32, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000001290010000060a0b0400000000000000000200ffff0000010073797a30000000000800010073797a3000000000090002f572797a3200000000140000001100010000000000000000000300000ae62e2918077eff5809050c80b7f1513862e6689be101ec182f6aa7923475733c8079ba0c1175ba108e1c64634c5a0b12dbb0b65a9c8cf74b56785157349ec9aa7b0715d9"], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x8, &(0x7f0000000200), 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x640, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x7f, 0x6, 0x5, 0x7c9, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbc0, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x7, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x40, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0xf, 0x2, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80200c1, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x1, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x4, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fbf, 0x35db, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x5, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0x20bfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x5393, 0x1, 0x1b18]}, 0x45c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x200000, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x1, 0x45, 0x1, 0xbdb], 0x1, 0x3ab613}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000206030705000100070000000900020073797a31000600000000000000001300000000000500050002000000050004000100000014000300686173683a69702c706f72742c697000"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000003c0)={{0x2000, 0x4, 0xb, 0x28, 0xff, 0xff, 0x40, 0x4, 0x5, 0x92, 0x2, 0x5}, {0xd000, 0xffff1000, 0x10, 0xe7, 0xd9, 0x9, 0x70, 0xf, 0x1, 0x4, 0xc6, 0xa}, {0x6000, 0x100000, 0x0, 0x9, 0x2, 0x8, 0x8, 0x8, 0x7, 0x3, 0xdf}, {0xeeef0000, 0x1000, 0x0, 0x4, 0x0, 0x88, 0xd, 0x5, 0x0, 0x1, 0x2, 0xf9}, {0x4, 0xeeee8000, 0x3, 0x8, 0x2, 0x9, 0x4, 0xb8, 0x5, 0x1, 0x5, 0x1}, {0xeeee8000, 0x2000, 0xe, 0x7, 0x92, 0x4, 0xfd, 0x0, 0x1b, 0x4, 0x8, 0xc2}, {0x1000, 0x80a0000, 0xb, 0x9, 0x3, 0xc1, 0x8, 0x8, 0x1, 0x9, 0x7, 0x5}, {0x1, 0x0, 0xe, 0x3, 0x1, 0xa, 0x3, 0x1, 0x3, 0x2, 0x6, 0x7}, {0x6000, 0x2}, {0x6000, 0xccc}, 0x40010019, 0x0, 0x3000, 0x4008, 0x4, 0x800, 0x1, [0x0, 0x1, 0x0, 0x3]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYRES16], 0xd4}}, 0x0) 3m5.384131002s ago: executing program 32 (id=476): syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009a65d0860040800dee2010203010902"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x32, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000001290010000060a0b0400000000000000000200ffff0000010073797a30000000000800010073797a3000000000090002f572797a3200000000140000001100010000000000000000000300000ae62e2918077eff5809050c80b7f1513862e6689be101ec182f6aa7923475733c8079ba0c1175ba108e1c64634c5a0b12dbb0b65a9c8cf74b56785157349ec9aa7b0715d9"], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x8, &(0x7f0000000200), 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x640, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x7f, 0x6, 0x5, 0x7c9, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbc0, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x7, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x40, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0xf, 0x2, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80200c1, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x1, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x4, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fbf, 0x35db, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x5, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0x20bfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x5393, 0x1, 0x1b18]}, 0x45c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x200000, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x1, 0x45, 0x1, 0xbdb], 0x1, 0x3ab613}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000206030705000100070000000900020073797a31000600000000000000001300000000000500050002000000050004000100000014000300686173683a69702c706f72742c697000"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000003c0)={{0x2000, 0x4, 0xb, 0x28, 0xff, 0xff, 0x40, 0x4, 0x5, 0x92, 0x2, 0x5}, {0xd000, 0xffff1000, 0x10, 0xe7, 0xd9, 0x9, 0x70, 0xf, 0x1, 0x4, 0xc6, 0xa}, {0x6000, 0x100000, 0x0, 0x9, 0x2, 0x8, 0x8, 0x8, 0x7, 0x3, 0xdf}, {0xeeef0000, 0x1000, 0x0, 0x4, 0x0, 0x88, 0xd, 0x5, 0x0, 0x1, 0x2, 0xf9}, {0x4, 0xeeee8000, 0x3, 0x8, 0x2, 0x9, 0x4, 0xb8, 0x5, 0x1, 0x5, 0x1}, {0xeeee8000, 0x2000, 0xe, 0x7, 0x92, 0x4, 0xfd, 0x0, 0x1b, 0x4, 0x8, 0xc2}, {0x1000, 0x80a0000, 0xb, 0x9, 0x3, 0xc1, 0x8, 0x8, 0x1, 0x9, 0x7, 0x5}, {0x1, 0x0, 0xe, 0x3, 0x1, 0xa, 0x3, 0x1, 0x3, 0x2, 0x6, 0x7}, {0x6000, 0x2}, {0x6000, 0xccc}, 0x40010019, 0x0, 0x3000, 0x4008, 0x4, 0x800, 0x1, [0x0, 0x1, 0x0, 0x3]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYRES16], 0xd4}}, 0x0) 2m50.105532003s ago: executing program 1 (id=521): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2a142, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f00000000c0)={0x1}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000021b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x8c}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0xfffffffffffffed1, r3, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x20}]}, 0xffffff1d}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) 2m50.036906347s ago: executing program 1 (id=522): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x202000, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000080)='/dev/snapshot\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x7, &(0x7f00000000c0)=[{0x6, 0x0, 0x4, 0x7}, {0xf41d, 0x6, 0x1, 0x200}, {0xff32, 0x3, 0x0, 0x9}, {0x9, 0x9, 0x7, 0x4}, {0x6, 0x5, 0x6, 0x2}, {0x6, 0x0, 0xd, 0xaf6}, {0x1, 0x5, 0x10, 0x4}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r4, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x3a, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xa}, @device_a, @broadcast, @from_mac, {0x5}}, @tdls_chsw_resp={0xc, 0x6, {0x1b, {0x65, 0x12, {@initial, @device_b}}, {0x68, 0x4, {0x6a, 0x1}}}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1032}]}, 0x60}}, 0x40010) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000300)={0xffffffffffffffff, 0xfffffffffffffffa, 0x9, 0xf}) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000340)) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r4, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x44) ioctl$AUTOFS_IOC_SETTIMEOUT(r3, 0x80049367, &(0x7f00000004c0)=0x8) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xb8, r4, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}, @NL80211_ATTR_IE={0x5c, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x55}, 0xfd, 0xff, @device_b, 0x3ff, 0x0, 0x8000}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x4, 0x3, @broadcast, 0x1000, @value=@broadcast, 0x2, 0x7fffffff, @broadcast, 0x800}}, @challenge={0x10, 0x1, 0x5d}, @rann={0x7e, 0x15, {{0x0, 0x2}, 0x5, 0x5, @device_b, 0x6, 0x5, 0x5}}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x3, 0x5, 0x0, {0x3ff, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x401, 0xfffffffd, 0x9}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x0, 0x0, 0x0, {0x8000000000000000, 0x3, 0x0, 0x1c7, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x800, 0xffffff8b, 0x32}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x801}, 0x40000) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000680), 0x103040, 0x0) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) ppoll(&(0x7f00000006c0)=[{r3, 0x2c4}, {r6, 0xc041}, {r1, 0x8000}, {0xffffffffffffffff, 0x8002}, {r6, 0x4}, {r7, 0xc3}, {r1, 0x22}], 0x7, &(0x7f0000000740)={r8, r9+10000000}, &(0x7f0000000780), 0x8) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f00000007c0)={0xd8, "74b12f504ab7764f1d05a7107c22547eb7e70a7b26b65050724eb6b5f961eadcf76b3a618edea2d418bc9e97322d67b17fe06bf334a467a95d5da3c1f666e37b8562127ca6630a6a7a079da72bd875af4cc6745de668d07a04b1f6c2019652d25828f783406895bcc0079372ea40f0549f03c2bacd6bb74314e0bba82e7a7135417b1bb23fca87036ff91a7a3bdc5e712043d6ee4ad75c255b842cc314f8e54c680a13e1342c5e50a3eb14b4cf6979917a83dc915b8ae2ddb36a848d82f0f7048d3883042d6ec7a9591042312942b453c23d96340b49be40"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000940)={0x9, &(0x7f00000008c0)=[{0x74, 0x7, 0x6, 0x3fa5}, {0xa, 0x7a, 0xab, 0x3}, {0x1000, 0xfa, 0x40, 0x1}, {0x2, 0x4, 0x2b, 0x800}, {0x1, 0x0, 0x0, 0x1}, {0x4, 0x5, 0x9, 0x3}, {0x2, 0x4, 0x9, 0x80000000}, {0xff, 0xff, 0x40, 0x9}, {0xb, 0x89, 0x7, 0x6}]}) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000009c0), r6) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, r10, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x2000) socket$can_bcm(0x1d, 0x2, 0x2) r11 = dup(r6) setsockopt$SO_BINDTODEVICE_wg(r11, 0x1, 0x19, &(0x7f0000000ac0)='wg1\x00', 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000b40)={'gretap0\x00', &(0x7f0000000b00)={'sit0\x00', 0x0, 0x1, 0x20, 0x80000001, 0x7ff, {{0x8, 0x4, 0x1, 0x18, 0x20, 0x66, 0x0, 0x0, 0x4, 0x0, @private=0xa010101, @private=0xa010100, {[@ra={0x94, 0x4, 0x1}, @end, @generic={0x7, 0x2}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000c00)={'syztnl0\x00', &(0x7f0000000b80)={'gretap0\x00', r12, 0x20, 0x8, 0x7921, 0x6, {{0x18, 0x4, 0x3, 0x6, 0x60, 0x64, 0x0, 0x9, 0x29, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0xf, 0xa3, [@private=0xa010101, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x3c, 0xb8, 0x1, 0xa, [{@private=0xa010102}, {@multicast2}, {@multicast1, 0xcea}, {@remote, 0x1}, {@loopback, 0x8000}, {@loopback, 0x80}, {@private=0xa010100, 0x4}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000c80)={'syztnl2\x00', &(0x7f0000000c40)={'gre0\x00', r12, 0x1, 0x8000, 0x3, 0x6, {{0x5, 0x4, 0x1, 0x12, 0x14, 0x64, 0x0, 0xff, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x22}}}}}) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000cc0), &(0x7f0000000d00)=0x4) 2m49.92615796s ago: executing program 1 (id=523): socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r1) (async) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x3, 0x202008, 0x1, {0xa, 0x4e1f, 0x9, @loopback, 0x97}}}, 0x80, 0x0}, 0x2000f765) ioctl$SIOCSIFHWADDR(r1, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="234602ffffff"}) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) socket$packet(0x11, 0x2, 0x300) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xe2f9586b}}, './file0\x00'}) 2m49.765722889s ago: executing program 1 (id=524): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000800)={0x7, {0xfffffff7, 0x80, 0x0, 0x2}, {0x3, 0x81, 0x4, 0x9}, {0x6, 0xbf}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xc) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x4000, 0x2) r3 = open$dir(&(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x9) move_mount(r2, &(0x7f0000000300)='./file0/../file0\x00', r3, &(0x7f0000000380)='./file0/../file0\x00', 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4e20, 0x7, @mcast2}, r4}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, {0xa, 0x4e20, 0x6, @mcast1, 0x9}, r4, 0x1}}, 0x48) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000180)={'pcl816\x00', [0x4f27, 0x6, 0x3, 0x4, 0x5, 0xcc9, 0xf, 0x4, 0xa, 0xfffffffc, 0x2, 0x3, 0xfffffffe, 0x1, 0x7, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x2, 0xcaa7, 0x0, 0x20001e58, 0x7, 0x63e, 0x3c, 0x8, 0xfffffffe, 0x0, 0xfffffff8]}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000240)={0x12, 0x10, 0xfa00, {&(0x7f0000000980), r4, r1}}, 0x2f) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) ioctl$sock_TIOCINQ(r6, 0x541b, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20d01, 0x0) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000100)=0x1054b474) sendmsg$inet_sctp(r7, &(0x7f0000000780)={&(0x7f00000003c0)=@in6={0xa, 0x4e24, 0x9, @remote, 0x4}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000400)="0c20f64abfa61ddd467eab321ca5b3536c04d8e9dca023bb545d6989f660e5a820edd806d78f10712386236b21fd3d51135e0f0675061c79e66d7b2105d94562e2188d8dd8", 0x45}, {&(0x7f0000000480)="de0fef0b9d39ba3c359ba155c415b59ab348b46b5fe1d1bf071f", 0x1a}, {&(0x7f00000004c0)="43aa73a7ce15658d8d17146d9dbd786bee55283b5e7d71af92deb2a066d4c1a5ad1795f57f8526ac01190346ebcc62e83508d92b6f2cee4ab2ed0f6c91af687b0691934e788b162480f4143fd23546ece2442b87e61fec444e4cc94e15a1d38300421429fee974e7cff81a190d8e62a45099eb4f0148006996cf", 0x7a}, {&(0x7f0000000540)="0137418a234882d3a0eab45b14eca8c33d81a70369f49939f84e146fb12a51dae22a117ff4027d638d0648eadb5c12765bfc15c1cd50ca302c5d14b828c8cdcfe35275cbd1a033b8b8054286cfe06e3d4d8584f2f8c4b393a0c19d52da3140c2b595804c8d7885bb46c164ecd138f93c16799bc4cde6256938b3f9a32ded740f57e9eb7ee48bfdcf48ba1c603f275ee923acc63f185aa439", 0x98}, {&(0x7f0000000600)="4ddb504816867530db8469f1e2a57b524f14082735e0128035c2b744a2867115705c9e9c19333c16aa73357998390623d97569a8b795edef", 0x38}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000019c0)="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", 0x1000}], 0x7, &(0x7f00000006c0)=[@dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @authinfo={0x18, 0x84, 0x6, {0x1}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, '\x00', 0x43}}, @init={0x18, 0x84, 0x0, {0xfff8, 0x8, 0x6, 0x6}}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010100}], 0x88, 0x5}, 0x0) 2m49.722613935s ago: executing program 1 (id=525): syz_open_procfs(0x0, &(0x7f0000000080)='setgroups\x00') syz_open_dev$sg(&(0x7f0000000040), 0x2, 0x40a442) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000203c0)={0x0, 0x0, &(0x7f0000020380)={&(0x7f00000201c0)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe700}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000854) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x5, 0x9, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4002004c4, 0x1006, 0x45c5, 0xc597, 0x7, 0x8, 0xffffffffffffffff, 0x8000, 0x80000004000000, 0xc], 0x80a0000, 0x4000}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0209be02020000002cbd7000fedbdf25"], 0x10}}, 0x8004) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m49.472966497s ago: executing program 1 (id=528): socket$inet6(0xa, 0x80803, 0x88) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40104593, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x18000, "ffffd130be30000fb700000000be6f3380000000000003000000000000008000"}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000000)=0xffffffff, 0x4) (async) socket$unix(0x1, 0x1, 0x0) (async) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYRES64=r2], 0x0) 2m49.30765821s ago: executing program 33 (id=528): socket$inet6(0xa, 0x80803, 0x88) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40104593, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x18000, "ffffd130be30000fb700000000be6f3380000000000003000000000000008000"}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000000)=0xffffffff, 0x4) (async) socket$unix(0x1, 0x1, 0x0) (async) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYRES64=r2], 0x0) 6.104787544s ago: executing program 3 (id=1315): socket$kcm(0x10, 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x80000}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @loopback}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000100)={r6, @in={{0x2, 0x4e20, @empty}}, 0x1, 0x2b}, 0x90) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c1000ffffffa6224e0000", 0x58}], 0x1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x2) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r10 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r11 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r12, r12) socket$inet(0x2, 0x2, 0x1) ioctl$VIDIOC_S_SELECTION(r10, 0xc040565f, &(0x7f0000000100)={0x2, 0x3, 0x0, {0x0, 0xfffffffd, 0x0, 0x1}}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f00000001c0)={r9, 0x10, "4b3ccab09a7a6f5c528fcd1d4b86720d"}, &(0x7f0000000200)=0x18) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xc) r13 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r13, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159001c00010902"], 0x0) write$sysctl(r13, &(0x7f00000000c0)='2\x00', 0x2) 5.350039259s ago: executing program 0 (id=1324): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) write$ppp(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x2, 0x40a442) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r3 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r5, 0x400caed0, &(0x7f0000000000)={0xffffffffffffffff, 0x10ae9cf4f2b91c3e, 0x2000000c, 0x2, 0x571}) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x5, 0x9, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4002004c4, 0x1006, 0x45c5, 0xc597, 0x7, 0x8, 0xffffffffffffffff, 0x8000, 0x80000004000000, 0xc], 0x80a0000, 0x4000}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0209be020200"], 0x10}}, 0x8004) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0xf, 0x4700}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4.902947684s ago: executing program 0 (id=1327): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000000f"], 0x3c}}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="2e0000002a00818a04fb7fec598f866b29924a6f130000005e14060800000000000000000f0000000280a71802dd", 0x2e}], 0x1}, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card3/oss_mixer\x00', 0x105000, 0x0) 4.821788172s ago: executing program 0 (id=1328): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x42, 0x201, 0x0, 0x0, {0xa}}, 0x14}}, 0x40044c4) rt_sigqueueinfo(0x0, 0x1d, &(0x7f00000004c0)={0x21, 0x8, 0x5}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) syz_usb_connect(0x4, 0x36, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES16, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRESDEC=r0], 0x0) 4.74463489s ago: executing program 3 (id=1329): r0 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220f000000040b2100000195f5758483a6"], 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f00000000c0)={0x1, 0x0, [{0x80000000, 0x4, 0xfffff000, 0xe6, 0x4}]}) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="200146"], 0x0}) bind$802154_raw(r1, &(0x7f0000000140)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14) ioctl$HIDIOCGUSAGES(r6, 0xd01c4813, 0x0) openat(r1, &(0x7f0000000040)='./file1\x00', 0x141242, 0x18f) 4.269723444s ago: executing program 0 (id=1331): r0 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r1 = fanotify_init(0xf00, 0x1) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000e, 0x10, r0, 0x3d7c2000) close_range(r1, 0xffffffffffffffff, 0x0) (async) mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0x10001) (async) fchmodat(r0, &(0x7f0000000000)='./file0\x00', 0x8) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='xfs\x00', 0x10003, &(0x7f00000000c0)='norecovery') 4.096951913s ago: executing program 0 (id=1332): ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000000)) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRESHEX], 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x2aa6, 0x100) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000b80)={0xffffffffffffffff}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4734}}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000080)) close(r3) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28420000000000000109022400010000000009040100020300000009210000000122070009058103"], 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) ioctl$FBIOBLANK(r7, 0x4611, 0x1) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, &(0x7f0000000100)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00!\a'], 0x0}, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) sendmmsg$inet(r8, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000780)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2", 0x1d}], 0x2}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000800)="f6b328c4", 0x4}], 0x1}}], 0x2, 0xc0) sendto$inet(r8, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000004c0)={r10, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10) sendmsg$FOU_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010027e22200fcdbdf250300000008000b00", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20004800}, 0x4008001) 3.617654756s ago: executing program 5 (id=1336): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000008c0)="dc652d62a40ec670dc75edb60c1e57e82d4a5f7bd9653a1d8a380191833efa5d542cb7ca25319aa9db127bfa4377f3723bfe91246b928a1f609c0eca6ccd4f52f4a02e21993e89d6783309dec0c7c2cfd982ed67e5daa1879ed9ffe206a53200b45846e113c8acc8ee502a9c06d53dfe475f867e207c7e85e47f96f45751d0b727ab6693d4ad53065f5e266be6837d5295a09daf6c5adcbe41e873b1c5d735fb22f0e23e8c4ecd238518cae2e28078c0f1baa5ff5da9eeedc25f0e4d4e591203594b89be08fabe065cf913", 0xcb}], 0x1}}], 0x1, 0x40) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x2, 0x40a442) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x5, 0x9, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4002004c4, 0x1006, 0x45c5, 0xc597, 0x7, 0x8, 0xffffffffffffffff, 0x8000, 0x80000004000000, 0xc], 0x80a0000, 0x4000}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0209be020200"], 0x10}}, 0x8004) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6004, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x81, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x28, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0xa}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x8, "1f"}, @main=@item_012={0x2, 0x0, 0x8, 'Q;'}, @local=@item_012={0x1, 0x2, 0x5, "94"}]}}, 0x0}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="84010000", @ANYRES16=r5, @ANYBLOB="6e1e72d4771b0504b7bd9c32be3493fed20362c774669719c3c80204fb64a209b8d642f210a7dfbfc552c096391ae36f2ba0d7bd9a8423879d07baadc9e1f75ae98271b6c1f17e027ee4d282f505c4ec9965eacdb63477115595d4"], 0x184}, 0x1, 0x0, 0x0, 0x40800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.329574303s ago: executing program 3 (id=1341): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000406c256e000000000000010902240001000000000904000805030002000921000033012205000905810300"], 0x0) syz_open_dev$hiddev(&(0x7f0000000140), 0xfffffffffffffffb, 0x440000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="1e3200"/12], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect_ath9k(0x3, 0x595427d2c020841e, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x618, [{{0x9, 0x2, 0xffffffffffffffa0}}]}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xfffffffd, 0x34424752, 0x0, 0x0, 0x0, 0x0, 0x7}}) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8, 0x30100) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f00000000c0)={0x1, 0xe79, 0x69f, 0x801, 0xfffffffa}) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={r6, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e23, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x27fe}}, 0x7, 0x0, 0x20000, 0x81, 0xe, 0x0, 0x4}, 0x9c) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r8 = dup3(r7, r4, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r8}, @flat=@binder={0x73622a85, 0x10b, 0x1}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xd1}}, &(0x7f0000000600)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000000)=0x1) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x24, 0x0, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x7, 0x2, 0x6f1a9720fc2ab394, 0x1, 0x6be0, 0x0, 0xffffffff, 0x10000, 0x5, 0x200, 0x0, 0xfff, 0x10001, 0x6, 0x4, 0x1, {0xfffffff1, 0xb}, 0x0, 0x81}}) socket$isdn_base(0x22, 0x3, 0x0) 1.851191996s ago: executing program 5 (id=1342): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000003c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0xa, 0x0, 0x408d}, @mpls={[], @ipv6=@gre_packet={0x4, 0x6, "fe0e04", 0x44, 0x2f, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8, 0x88be, 0x3, {{0x4, 0x1, 0xfd, 0x2, 0x1, 0x0, 0x1, 0x4}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x0, {{0x9, 0x2, 0x2, 0x0, 0x1, 0x3, 0x0, 0x7f}, 0x2, {0x5, 0x7ff, 0x0, 0x6, 0x1, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}, 0x7a) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[], 0x10}], 0x1}, 0x20040051) 1.681167603s ago: executing program 5 (id=1344): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xf4, 0x17}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x6) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)={0x480, r2, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0xf8, 0x11d, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf7}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbb}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x41c}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x92}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10001}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7f}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xe4, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8e}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x76}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xa8}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xff13, 0x5, 0x4560, 0x7, 0x2, 0x0, 0x7056, 0x3]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x77}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xb}]}]}, @NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}]}]}, @NL80211_ATTR_TID_CONFIG={0x26c, 0x11d, 0x0, 0x1, [{0x198, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x164, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x8, 0x4, 0xff, 0x1, 0x4, 0x4]}}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x6, 0x6c, 0x1, 0x5, 0x289014b91530fef3, 0xb, 0x6c, 0x2, 0x60, 0x6]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0xb, 0x16, 0x0, 0x2, 0x60, 0xc, 0x1b, 0x4, 0x30, 0x6c, 0x2, 0x1b, 0x1b, 0x48, 0x3, 0x1b, 0x2b9c9fda74409811, 0xc, 0x30, 0x6c, 0x48, 0x3, 0x6c, 0x65, 0x60, 0x1b, 0x36, 0x36, 0x1, 0xb, 0x4, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x400, 0x5, 0x10, 0x3, 0x0, 0x7, 0x9113]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x2, 0x9, 0xc, 0x12, 0x2, 0x24, 0x4, 0x3, 0xb, 0x3, 0x48, 0x60, 0x6c, 0xc, 0xc, 0x3, 0x9, 0x2, 0x4f, 0x60, 0x5, 0x60, 0x48, 0x12, 0x60, 0x16, 0x36, 0xc, 0x9, 0x48]}]}, @NL80211_BAND_5GHZ={0xbc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0x9}, {0x6, 0xa}, {0x6, 0x4}, {0x3, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0xad5, 0x6, 0x7, 0x7, 0x4, 0x43, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0x1, 0x4, 0x5, 0x6300, 0x2, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x4, 0x1}, {0x0, 0x8}, {0x7, 0x5}, {0x4, 0xa}, {0x7, 0x8}, {0x0, 0x4}, {0x3, 0x4}, {0x0, 0xa}, {0x3, 0x5}, {0x7}, {0x2, 0x1}, {0x2, 0xa}, {0x3, 0xa}, {0x5, 0xa}, {0x0, 0x4}, {0x1, 0x1}, {0x2, 0x3}, {0x4, 0x5}, {0x0, 0x5}, {0x0, 0x7}, {}, {0x6, 0x5}, {0x6, 0x6}, {0x6, 0x4}, {0x1, 0x1}, {0x0, 0xa}, {0x5, 0x2}, {0x6, 0xa}, {0x5, 0x4}, {0x4, 0xa}, {0x5, 0x2}, {0x3, 0x9}, {0x5, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1b, 0x14, 0xc, 0x60, 0x16, 0xc, 0xc, 0x3, 0x36, 0x6c, 0x48, 0x1, 0x2, 0x11, 0x6, 0x24, 0x3, 0xb, 0x2, 0x1b, 0xb, 0x12, 0x18, 0xc, 0x6, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x5, 0x1, 0x3, 0x2, 0x8, 0x3, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x1, 0x0, 0x9, 0x40, 0x7ff]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0xd0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2a}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xac, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x10, 0xbb64, 0xfd, 0x7, 0x1, 0x8, 0xfff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1, 0x4, 0x4, 0x48, 0xc]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0xb, 0x2, 0x1, 0x5, 0x24, 0x6c, 0x5, 0x2]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x1000, 0x200, 0x4b9, 0x99db, 0x8, 0x1000]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0x480}, 0x1, 0x0, 0x0, 0x4004090}, 0x20000001) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRESOCT=r7]) r9 = syz_open_dev$sg(&(0x7f0000000080), 0x400, 0x121000) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5387, &(0x7f00000000c0)) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r2, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4002001) 1.51126013s ago: executing program 4 (id=1346): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000340001000000000000000000010100800c0007000000000000000000140003"], 0x114}], 0x1}, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000200)=0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080), 0x804004, &(0x7f0000000240)={[{@uuid_null}, {@index_off}, {@metacopy_off}, {@default_permissions}, {@nfs_export_on}, {@redirect_dir_nofollow}, {@redirect_dir_follow}], [{@euid_lt={'euid<', r1}}, {@smackfsroot={'smackfsroot', 0x3d, '^'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]}) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendto(r2, &(0x7f0000000380)="efbdd8f7837aa1591a15996a768d2a00f8380a72114f3853658875d3a0d1e3f306d874e857b5365abb4652fdb5331a7cde19cfa6a98077a82173b4351489e3e1c99bdf99d814e9081448fc739326eb2c80c79224d9233a8996a5cf36395728b4a5e3ff00e3d026b057efefad7a55d13c3babd21741a5ed2c60ab6ee1e6afed2b45f7361ec4b9f7e876db1917458f7633f54293dc356de5cd914ed6361b71f1b39d3473c79c37a6249ff2a923743e44d9fa", 0xb1, 0x10, &(0x7f0000000440)=@hci={0x1f, 0x2, 0x4}, 0x80) symlink(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00') 1.3803291s ago: executing program 4 (id=1347): r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x81, 0x1, "d6"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x83, 0x2, "81f4"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f00000009c0)={0x40, 0x7, 0x2, "facd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x20, 0xf, 0x1e, {0x1e, 0x23, "ed2c178e93ca4a4ac10b866a79cbabb4e6f51cada6f90cdd334b4d50"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x403}}, &(0x7f0000000380)={0x0, 0xf, 0x90, {0x5, 0xf, 0x90, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0xa, 0x2}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "b959f5c06ab9896bcb258570e2a8bd45"}, @generic={0x6d, 0x10, 0xa, "4c49d07e34c13cd988900bb4f1b0c3dd8f6e10a7ed1f86ced454df4c03ce738e141a4b02dfdba3f14a003835dad86d97af809d18eab0b5e2c2cd3d5ec30accda27174275a3d3dd97105ca5e12c4b6f6cdd552bf068a0862bcc5e91708387c8ea2ef262a200102695f709"}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x0, 0x0, 0xfa, "ebefe902", "7a5cf390"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x8, 0x4, 0xa, 0x0, 0x5, 0x845e}}}, &(0x7f0000000b80)={0x84, &(0x7f0000000580)={0x40, 0x15, 0x7f, "61f3be921411f85ad938c73800b4122e07f0c508c86cf0708bef900753785889b22d494852361add9ca6892197f9430bd0b43c186a412ffc3986934c261d49d10d5c19afdaa21919fe8d9bd9038c4c39bbe81fc739e058d8ecea92596087f198a4c910a225f5c6bc23374d3f0458ea683b4ddaf7a722849c04266af6e64e62"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0x800}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "a76e"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000940)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000a40)={0x40, 0x19, 0x2, "f4e0"}, &(0x7f0000000a80)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000b00)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0xf}}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000006c0)={0x40, 0x12, 0x6, "00a35b06cac6"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)={0x20, 0x39, 0x3, "e78e6d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.379527397s ago: executing program 5 (id=1348): r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b0e01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a3da5354c870000010000"], &(0x7f00000002c0)={0x9b, 0x0, 0x0, 0x0, 0x2, [{0xc9, &(0x7f0000000380)=@string={0xc9, 0x3, "f3d1f1df89e71d100975fd7b36c5d6cbc9b6645b968f49bcf16d80556170b1ac8b38a2eb039daaf1aca4b4e1bdc2594e4ddb3dda7e67f01ad769449636974424addebec7e3805305d0eaf731b6988f7b3459e3b0594b229614126f274c09ab2cf1e9d9c81af08f564d6a663a6dd91e0d82a94df32a40e720872ee7e69274d67d8d8951b0395e5bc15d3f3c2e835326269771816ffe17c50500e86206dba9943714672e51c99ac3d5fa7d221f366caa256fc7b535a144a2c43d05907f9b2034eb071a58cd95d5ea"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x41c}}]}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x81, 0x1, "d6"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x83, 0x2, "81f4"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000980)=ANY=[@ANYBLOB="201532"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000001c0)={0x84, &(0x7f0000000080)={0x40, 0x18, 0x2, "facd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x84, 0x2, "7f17"}, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000006c0)={0x40, 0x12, 0x6, "00a35b06cac6"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)={0x20, 0x39, 0x3, "e78e6d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.048985429s ago: executing program 0 (id=1349): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc8, 0x70, 0xe2, 0x10, 0xc45, 0x6248, 0x3d34, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x84, 0x2, 0x0, 0x44, 0x72, 0x91}}]}}]}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000070a05000000000000000000010000050900010073"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4804) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040045}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r5, 0xc0a85320, &(0x7f00000000c0)={{0x80}, 'port0\x00', 0xd3, 0x140043, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r6, 0x41b0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0xffffffffffffffff, 0xfe, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000300)="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", 0x0, 0x2, 0x0, 0x2, 0x0}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r8, 0x6, 0x9, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x44, r4, 0x1, 0x0, 0x0, {0x4, 0x74, 0x609}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}]}, 0x44}, 0x1, 0xffffffff00000003}, 0x0) 839.947714ms ago: executing program 4 (id=1350): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000004700)=""/4095, 0xfff}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000340)=""/144, 0x90}, {&(0x7f0000000200)=""/5, 0x5}, {&(0x7f0000000000)=""/43, 0x2b}], 0x5}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$qrtr(r3, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) 745.75281ms ago: executing program 4 (id=1351): syz_open_dev$sg(&(0x7f0000000100), 0x2, 0x40a442) prctl$PR_SET_IO_FLUSHER(0x4c, 0x1) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x5, 0x9, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4002004c4, 0x1006, 0x45c5, 0xc597, 0x7, 0x8, 0xffffffffffffffff, 0x8000, 0x80000004000000, 0xc], 0x80a0000, 0x4000}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0209be020200"], 0x10}}, 0x8004) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4004010) ioctl$KVM_CAP_PMU_CAPABILITY(r1, 0x4068aea3, &(0x7f0000000140)={0xd4, 0x0, 0x4}) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmmsg(r4, &(0x7f0000006880), 0x0, 0x4022, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 651.698608ms ago: executing program 4 (id=1352): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f00000006c0)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="9c00"/12, @ANYRES8=r2], 0xa0}}], 0x2, 0x0) 630.068597ms ago: executing program 3 (id=1353): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@remote, 0x4d3, 0x32}, @in=@rand_addr=0x1000000, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}]}, 0x138}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x1f, 0x1, 0x0, 0x80000, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0x14, 0xd5, 0x0, 0x0, @ipv6=@loopback}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b504681000000000000009ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x20000004}, 0x140000c4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async, rerun: 32) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (rerun: 32) move_mount(r2, &(0x7f00000012c0)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00', 0x120) 442.9499ms ago: executing program 3 (id=1354): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 32) r2 = socket(0x40000000015, 0x5, 0x0) (rerun: 32) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async, rerun: 64) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000580)="1e", 0x1}], 0x1, 0x0, 0x0, 0x4090}, 0x0) (async, rerun: 64) read$alg(r2, &(0x7f0000003780)=""/4096, 0x1000) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}]}) 388.770237ms ago: executing program 3 (id=1355): socket$nl_netfilter(0x10, 0x3, 0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0xa101, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) futex(0x0, 0xc, 0xfffffff2, 0x0, 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f00000000c0)={0xa458, 0x88, 0x1, 0x9e9b, 0xcb, "0982aa400000000000e6ffffab5b00", 0x5}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x9) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRES8=r1, @ANYBLOB="05"], 0x0) 118.341453ms ago: executing program 5 (id=1356): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d00)={0x14, 0x14, 0x1, 0x70bd2d, 0x0, "", [@generic='\t']}, 0x14}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a118000600014002020a600e41b0000900ac00040211000000560012000a00ff030048035c4ce477df0676f9edac91d698b8298c9061c1d67f6f94007133cf6efb8000a007a290457f01a7cee4090000001fb7d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de61fccd40dd6e4edef3d93452a9247c47870ae1d092665c07a81eaa034c5f9fbb42dd0f98a952c795c0e", 0xd8}], 0x1}, 0x40044) 1.746213ms ago: executing program 5 (id=1357): pwritev2(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x800000, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0041, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCSETS(r0, 0x40204706, &(0x7f0000000040)={0x8, 0x5, 0xb1, 0x3f, 0x1a, "3eccd25569e20900"}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f00000000c0), 0x4) 0s ago: executing program 4 (id=1358): r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x81, 0x1, "d6"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x83, 0x2, "81f4"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f00000009c0)={0x40, 0x7, 0x2, "facd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x20, 0xf, 0x1e, {0x1e, 0x23, "ed2c178e93ca4a4ac10b866a79cbabb4e6f51cada6f90cdd334b4d50"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x403}}, &(0x7f0000000380)={0x0, 0xf, 0x90, {0x5, 0xf, 0x90, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0xa, 0x2}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "b959f5c06ab9896bcb258570e2a8bd45"}, @generic={0x6d, 0x10, 0xa, "4c49d07e34c13cd988900bb4f1b0c3dd8f6e10a7ed1f86ced454df4c03ce738e141a4b02dfdba3f14a003835dad86d97af809d18eab0b5e2c2cd3d5ec30accda27174275a3d3dd97105ca5e12c4b6f6cdd552bf068a0862bcc5e91708387c8ea2ef262a200102695f709"}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x0, 0x0, 0xfa, "ebefe902", "7a5cf390"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x8, 0x4, 0xa, 0x0, 0x5, 0x845e}}}, &(0x7f0000000b80)={0x84, &(0x7f0000000580)={0x40, 0x15, 0x7f, "61f3be921411f85ad938c73800b4122e07f0c508c86cf0708bef900753785889b22d494852361add9ca6892197f9430bd0b43c186a412ffc3986934c261d49d10d5c19afdaa21919fe8d9bd9038c4c39bbe81fc739e058d8ecea92596087f198a4c910a225f5c6bc23374d3f0458ea683b4ddaf7a722849c04266af6e64e62"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0x800}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "a76e"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000940)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000a40)={0x40, 0x19, 0x2, "f4e0"}, &(0x7f0000000a80)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000b00)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0xf}}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000006c0)={0x40, 0x12, 0x6, "00a35b06cac6"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)={0x20, 0x39, 0x3, "e78e6d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 621.001D: unknown main item tag 0x0 [ 319.287952][ T5953] viewsonic 0003:0543:E621.001D: hidraw0: USB HID v0.00 Device [HID 0543:e621] on usb-dummy_hcd.0-1/input0 [ 319.352722][ T24] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 319.372877][ T24] em28xx 6-1:0.0: No AC97 audio processor [ 319.431767][ T5953] usb 4-1: USB disconnect, device number 118 [ 319.433721][ T24] usb 1-1: USB disconnect, device number 111 [ 319.879477][ T5953] usb 6-1: USB disconnect, device number 47 [ 319.888932][ T5953] em28xx 6-1:0.0: Disconnecting em28xx [ 319.895225][ T9547] vhci_hcd: connection reset by peer [ 319.902264][ T73] vhci_hcd: stop threads [ 319.909233][ T5953] em28xx 6-1:0.0: Freeing device [ 319.925462][ T73] vhci_hcd: release socket [ 319.934028][ T73] vhci_hcd: disconnect device [ 320.032850][ T9595] netlink: 16 bytes leftover after parsing attributes in process `syz.5.987'. [ 320.043465][ T9595] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 320.239527][ T1211] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 320.359949][ T5953] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 320.402238][ T1211] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 320.413941][ T1211] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.424290][ T1211] usb 4-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 320.433518][ T1211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.451263][ T1211] usb 4-1: config 0 descriptor?? [ 320.520282][ T5953] usb 1-1: Using ep0 maxpacket: 32 [ 320.532290][ T5953] usb 1-1: unable to get BOS descriptor or descriptor too short [ 320.545945][ T5953] usb 1-1: config 2 has an invalid interface number: 123 but max is 0 [ 320.560139][ T5953] usb 1-1: config 2 has no interface number 0 [ 320.567423][ T5953] usb 1-1: config 2 interface 123 has no altsetting 0 [ 320.578971][ T9615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.590506][ T5953] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02 [ 320.593752][ T9615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.608870][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.617129][ T5953] usb 1-1: Product: syz [ 320.622372][ T5953] usb 1-1: Manufacturer: syz [ 320.627042][ T5953] usb 1-1: SerialNumber: syz [ 320.646291][ T9615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.657775][ T9615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.672523][ T9615] binder: 9613:9615 ioctl 4018620d 0 returned -22 [ 320.688362][ T1211] uclogic 0003:2179:0077.001E: interface is invalid, ignoring [ 320.865864][ T30] audit: type=1800 audit(1759054299.572:80): pid=9624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.996" name="bus" dev="overlay" ino=624 res=0 errno=0 [ 320.907937][ T5953] go7007 1-1:2.123: probe with driver go7007 failed with error -12 [ 320.941570][ T5953] usb 1-1: USB disconnect, device number 112 [ 321.379465][ T5953] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 321.539372][ T5953] usb 1-1: Using ep0 maxpacket: 8 [ 321.556376][ T5953] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 321.567385][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.591006][ T5953] usb 1-1: Product: syz [ 321.591564][ T9642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.595227][ T5953] usb 1-1: Manufacturer: syz [ 321.595249][ T5953] usb 1-1: SerialNumber: syz [ 321.610571][ T5953] usb 1-1: config 0 descriptor?? [ 321.639105][ T5953] gspca_main: sq905-2.14.0 probing 2770:9120 [ 321.645587][ T9642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.732477][ T9645] dvmrp0: left allmulticast mode [ 321.840138][ T5964] option 5-1:3.5: GSM modem (1-port) converter detected [ 322.171463][ T52] Bluetooth: hci3: Invalid handle: 0x7562 > 0x0eff [ 322.231350][ T9657] syzkaller1: entered promiscuous mode [ 322.237551][ T9657] syzkaller1: entered allmulticast mode [ 322.336029][ T9660] IPVS: set_ctl: invalid protocol: 12 100.1.1.1:20001 [ 322.389557][ T44] vhci_hcd: vhci_device speed not set [ 322.405176][ T9662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.415174][ T9662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.436882][ T9662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.448638][ T9662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.461861][ T9662] binder: 9661:9662 ioctl 4018620d 0 returned -22 [ 322.569670][ T5953] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 322.577334][ T5953] sq905 1-1:0.0: probe with driver sq905 failed with error -110 [ 322.717456][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.725924][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.783069][ T9] usb 1-1: USB disconnect, device number 113 [ 322.929467][ T5964] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 323.029702][ T52] Bluetooth: hci0: command tx timeout [ 323.047251][ T9] usb 4-1: USB disconnect, device number 119 [ 323.097125][ T5964] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 323.108104][ T5964] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.118252][ T5964] usb 6-1: Product: syz [ 323.122884][ T5964] usb 6-1: Manufacturer: syz [ 323.127708][ T5964] usb 6-1: SerialNumber: syz [ 323.151833][ T5964] usb 6-1: config 0 descriptor?? [ 323.293292][ T9690] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 323.302881][ T9690] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 1th superblock [ 323.312263][ T9690] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 323.321257][ T9690] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 2th superblock [ 323.363444][ T5964] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 323.579451][ T5953] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 323.669978][ T44] usb 4-1: new full-speed USB device number 120 using dummy_hcd [ 323.733900][ T5953] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 323.743367][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.751686][ T5953] usb 1-1: Product: syz [ 323.755939][ T5953] usb 1-1: Manufacturer: syz [ 323.760693][ T5953] usb 1-1: SerialNumber: syz [ 323.774053][ T5953] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 323.793582][ T1211] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 323.831841][ T44] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 323.844201][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 323.856131][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 323.868815][ T44] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 323.878806][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.887099][ T44] usb 4-1: Product: syz [ 323.891408][ T44] usb 4-1: Manufacturer: syz [ 323.896067][ T44] usb 4-1: SerialNumber: syz [ 323.904712][ T44] usb 4-1: config 0 descriptor?? [ 323.915202][ T44] usb 4-1: no audio or video endpoints found [ 324.116308][ T5953] usb 4-1: USB disconnect, device number 120 [ 324.216723][ T9695] syzkaller1: entered promiscuous mode [ 324.222773][ T9695] syzkaller1: entered allmulticast mode [ 324.230236][ T9695] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 324.362684][ T9698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.374351][ T9698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.389103][ T9698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.398532][ T9698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.419922][ T9698] syzkaller1: entered promiscuous mode [ 324.425615][ T9698] syzkaller1: entered allmulticast mode [ 324.437999][ T9698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.447124][ T9698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.461118][ T9698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.471829][ T9698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.784862][ T5964] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 324.798503][ T5964] usb 6-1: USB disconnect, device number 48 [ 324.879596][ T1211] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 324.886907][ T1211] ath9k_htc: Failed to initialize the device [ 324.916093][ T1211] usb 1-1: ath9k_htc: USB layer deinitialized [ 324.930394][ T24] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 325.095519][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 325.111548][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 325.125377][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.130808][ T9702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.136888][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 325.153883][ T9702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.174690][ T24] usb 4-1: string descriptor 0 read error: -22 [ 325.181763][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 325.193022][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.212255][ T24] usb 4-1: 0:2 : does not exist [ 325.649434][ T44] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 325.752948][ T9708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.763516][ T9708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.834507][ T44] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 325.845503][ T44] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 325.856866][ T44] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 325.872739][ T44] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 325.881971][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.890244][ T44] usb 6-1: Product: syz [ 325.894552][ T44] usb 6-1: Manufacturer: syz [ 325.899213][ T44] usb 6-1: SerialNumber: syz [ 325.908253][ T44] usb 6-1: config 0 descriptor?? [ 326.127965][ T9] usb 6-1: USB disconnect, device number 49 [ 326.221233][ T9700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.231490][ T9700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.241476][ T9700] binder: 9699:9700 ioctl 4018620d 0 returned -22 [ 326.309592][ T9] usb 1-1: USB disconnect, device number 114 [ 326.545539][ T9717] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 326.560339][ T73] Bluetooth: hci4: Frame reassembly failed (-84) [ 326.615383][ T9719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.626219][ T9719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.645648][ T9719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.656464][ T9719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.680446][ T24] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 326.703429][ T24] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 326.748336][ T24] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 326.763090][ T24] usb 4-1: USB disconnect, device number 121 [ 326.959637][ T44] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 327.111719][ T44] usb 6-1: unable to get BOS descriptor or descriptor too short [ 327.120184][ T44] usb 6-1: not running at top speed; connect to a high speed hub [ 327.129224][ T44] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 327.139550][ T44] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 327.155345][ T44] usb 6-1: string descriptor 0 read error: -22 [ 327.161851][ T44] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 327.171103][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.193323][ T44] usb 6-1: 0:2 : does not exist [ 327.356011][ T9726] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 327.368065][ T9726] block device autoloading is deprecated and will be removed. [ 327.377798][ T9725] md: md2 stopped. [ 327.390820][ T9725] md: md2 stopped. [ 327.631068][ T5953] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 327.789486][ T5953] usb 4-1: Using ep0 maxpacket: 16 [ 327.796247][ T5953] usb 4-1: config 0 has an invalid interface number: 174 but max is 0 [ 327.804929][ T5953] usb 4-1: config 0 has no interface number 0 [ 327.813728][ T5953] usb 4-1: New USB device found, idVendor=0c45, idProduct=6282, bcdDevice=30.ae [ 327.823047][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.838829][ T5953] usb 4-1: Product: syz [ 327.843152][ T5953] usb 4-1: Manufacturer: syz [ 327.847801][ T5953] usb 4-1: SerialNumber: syz [ 327.856143][ T5953] usb 4-1: config 0 descriptor?? [ 327.865977][ T5953] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6282 [ 328.063954][ T5953] gspca_sn9c20x: Write register 1000 failed -71 [ 328.077471][ T5953] gspca_sn9c20x: Device initialization failed [ 328.084074][ T5953] gspca_sn9c20x 4-1:0.174: probe with driver gspca_sn9c20x failed with error -71 [ 328.096826][ T5953] usb 4-1: USB disconnect, device number 122 [ 328.549543][ T52] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 328.549557][ T5871] Bluetooth: hci4: command 0x1003 tx timeout [ 328.774839][ T9737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.785192][ T9737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.802078][ T9737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.816971][ T9737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.837439][ T44] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 328.856518][ T44] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 328.902676][ T44] usb 6-1: USB disconnect, device number 50 [ 328.931565][ T1211] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 329.091072][ T1211] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.102496][ T1211] usb 4-1: config 0 interface 0 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 329.115645][ T1211] usb 4-1: config 0 interface 0 has no altsetting 0 [ 329.122708][ T1211] usb 4-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 329.131828][ T1211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.142756][ T1211] usb 4-1: config 0 descriptor?? [ 329.369664][ T5953] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 329.532685][ T5953] usb 1-1: config 0 has an invalid interface number: 98 but max is 0 [ 329.541016][ T5953] usb 1-1: config 0 has no interface number 0 [ 329.547231][ T5953] usb 1-1: config 0 interface 98 has no altsetting 0 [ 329.556170][ T5953] usb 1-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 329.573994][ T1211] viewsonic 0003:0543:E621.001F: unknown main item tag 0x0 [ 329.581385][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.591338][ T5953] usb 1-1: Product: syz [ 329.595537][ T5953] usb 1-1: Manufacturer: syz [ 329.600460][ T1211] viewsonic 0003:0543:E621.001F: unknown main item tag 0x0 [ 329.608248][ T1211] viewsonic 0003:0543:E621.001F: unknown main item tag 0x0 [ 329.617301][ T5953] usb 1-1: SerialNumber: syz [ 329.632548][ T5953] usb 1-1: config 0 descriptor?? [ 329.637684][ T1211] viewsonic 0003:0543:E621.001F: unknown main item tag 0x0 [ 329.644931][ T9761] netlink: 'syz.4.1043': attribute type 1 has an invalid length. [ 329.646956][ T1211] viewsonic 0003:0543:E621.001F: unknown main item tag 0x0 [ 329.653704][ T9761] netlink: 'syz.4.1043': attribute type 101 has an invalid length. [ 329.662286][ T1211] viewsonic 0003:0543:E621.001F: unknown main item tag 0x0 [ 329.668426][ T9761] netlink: 480 bytes leftover after parsing attributes in process `syz.4.1043'. [ 329.676437][ T1211] viewsonic 0003:0543:E621.001F: unknown main item tag 0x0 [ 329.693596][ T9761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.701742][ T1211] viewsonic 0003:0543:E621.001F: hidraw0: USB HID v0.00 Device [HID 0543:e621] on usb-dummy_hcd.3-1/input0 [ 329.705258][ T9761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.720729][ T5895] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 329.796047][ T44] usb 4-1: USB disconnect, device number 123 [ 329.875284][ T5953] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 329.885690][ T5895] usb 6-1: Using ep0 maxpacket: 8 [ 329.892839][ T5895] usb 6-1: unable to get BOS descriptor or descriptor too short [ 329.901909][ T5895] usb 6-1: config 1 has an invalid interface descriptor of length 4, skipping [ 329.913433][ T5895] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 329.923447][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 329.930317][ T5895] usb 6-1: config 1 has no interface number 1 [ 329.936565][ T5895] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 329.953994][ T5895] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 329.963660][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.972444][ T5895] usb 6-1: Product: syz [ 329.977187][ T5895] usb 6-1: Manufacturer: syz [ 329.982424][ T5895] usb 6-1: SerialNumber: syz [ 330.204803][ T5895] usb 6-1: 2:1: cannot set freq 15828157 to ep 0x82 [ 330.228930][ T5895] usb 6-1: USB disconnect, device number 51 [ 330.286748][ T6016] udevd[6016]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 330.509475][ T5953] usb 1-1: reset high-speed USB device number 115 using dummy_hcd [ 330.647457][ T9779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.656620][ T9779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.664513][ T5964] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 330.791621][ T9784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.802731][ T9784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.841352][ T5964] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 330.850240][ T5964] usb 4-1: config 1 has no interface number 0 [ 330.856495][ T5964] usb 4-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 330.868075][ T5964] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 16 [ 330.878459][ T5953] usb 1-1: failed to restore interface 98 altsetting 4 (error=-71) [ 330.889476][ T5964] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 330.899857][ T5953] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware [ 330.909369][ T5964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.917555][ T5964] usb 4-1: Product: syz [ 330.929385][ T5964] usb 4-1: Manufacturer: syz [ 330.932181][ T5953] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 330.934080][ T5964] usb 4-1: SerialNumber: syz [ 330.943908][ T1211] usb 1-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 330.971664][ T5953] usb 1-1: USB disconnect, device number 115 [ 330.977922][ T1211] usb 1-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 330.986738][ T9768] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 330.999800][ T9768] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 331.014193][ T5964] usb 4-1: Expected 3 endpoints, found: 2 [ 331.510998][ T5964] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 331.587200][ T44] usb 4-1: USB disconnect, device number 124 [ 331.701276][ T5964] usb 6-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.723137][ T5964] usb 6-1: config 0 interface 0 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 331.736961][ T5964] usb 6-1: config 0 interface 0 has no altsetting 0 [ 331.740201][ T5953] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 331.747581][ T5964] usb 6-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 331.762881][ T5964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.793031][ T5964] usb 6-1: config 0 descriptor?? [ 331.909966][ T5953] usb 1-1: Using ep0 maxpacket: 8 [ 331.917186][ T5953] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 331.927502][ T5953] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 331.937847][ T5953] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 331.949676][ T5953] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 331.962206][ T5953] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 331.976224][ T5953] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 331.985739][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.119452][ T5895] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 332.216559][ T5953] usb 1-1: GET_CAPABILITIES returned 0 [ 332.225703][ T5964] usbhid 6-1:0.0: can't add hid device: -71 [ 332.236218][ T5953] usbtmc 1-1:16.0: can't read capabilities [ 332.239560][ T5964] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 332.249472][ T5895] usb 4-1: device descriptor read/64, error -71 [ 332.322626][ T5964] usb 6-1: USB disconnect, device number 52 [ 332.519429][ T5895] usb 4-1: new full-speed USB device number 126 using dummy_hcd [ 332.556914][ T5964] usb 1-1: USB disconnect, device number 116 [ 332.649487][ T5895] usb 4-1: device descriptor read/64, error -71 [ 332.759939][ T5895] usb usb4-port1: attempt power cycle [ 333.008704][ T9822] tmpfs: Unknown parameter 'Ү' [ 333.026790][ T9824] binder: 9823:9824 ioctl 40046205 0 returned -22 [ 333.038078][ T9824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.048840][ T9824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.099926][ T5895] usb 4-1: new full-speed USB device number 127 using dummy_hcd [ 333.120141][ T5895] usb 4-1: device descriptor read/8, error -71 [ 333.164420][ T9827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.176133][ T9827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.186798][ T5870] Bluetooth: hci0: unexpected event for opcode 0x0c24 [ 333.359709][ T5895] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 333.380106][ T5895] usb 4-1: device descriptor read/8, error -71 [ 333.459511][ T9] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 333.489809][ T5895] usb usb4-port1: unable to enumerate USB device [ 333.609415][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 333.616295][ T9] usb 1-1: config 7 has an invalid interface number: 222 but max is 0 [ 333.624731][ T9] usb 1-1: config 7 has no interface number 0 [ 333.631192][ T9] usb 1-1: config 7 interface 222 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 333.641337][ T9] usb 1-1: config 7 interface 222 has no altsetting 0 [ 333.651592][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=008e, bcdDevice=37.e6 [ 333.660808][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.668817][ T9] usb 1-1: Product: syz [ 333.673305][ T9] usb 1-1: Manufacturer: syz [ 333.677974][ T9] usb 1-1: SerialNumber: syz [ 333.687512][ T9829] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 333.698924][ T9] em28xx 1-1:7.222: New device syz syz @ 480 Mbps (0ccd:008e, interface 222, class 222) [ 333.709503][ T9] em28xx 1-1:7.222: Video interface 222 found: bulk [ 333.959808][ T9] em28xx 1-1:7.222: unknown em28xx chip ID (0) [ 334.025878][ T9] em28xx 1-1:7.222: reading from i2c device at 0xa0 failed (error=-5) [ 334.035144][ T9] em28xx 1-1:7.222: board has no eeprom [ 334.109493][ T9] em28xx 1-1:7.222: Identified as Terratec Cinergy HTC USB XS (card=87) [ 334.118372][ T9] em28xx 1-1:7.222: Currently, V4L2 is not supported on this model [ 334.126659][ T5895] em28xx 1-1:7.222: Binding DVB extension [ 334.133355][ T5895] em28xx 1-1:7.222: no endpoint for DVB mode and transfer type 0 [ 334.141495][ T5895] em28xx 1-1:7.222: failed to pre-allocate USB transfer buffers for DVB. [ 334.152341][ T5895] em28xx 1-1:7.222: Registering input extension [ 334.162793][ T9] usb 1-1: USB disconnect, device number 117 [ 334.179392][ T9] em28xx 1-1:7.222: Disconnecting em28xx [ 334.191656][ T9] em28xx 1-1:7.222: Closing input extension [ 334.215808][ T9] em28xx 1-1:7.222: Freeing device [ 334.222394][ T5964] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 334.383334][ T5964] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 334.392879][ T5964] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.401255][ T5964] usb 6-1: Product: syz [ 334.405769][ T5964] usb 6-1: Manufacturer: syz [ 334.410777][ T5964] usb 6-1: SerialNumber: syz [ 334.634485][ T9840] ntfs3(nullb0): Primary boot signature is not NTFS. [ 334.642614][ T9840] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 334.969513][ T24] usb 1-1: new full-speed USB device number 118 using dummy_hcd [ 335.145585][ T5964] rtl8150 6-1:1.0: eth5: rtl8150 is detected [ 335.154758][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 335.164842][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 335.174017][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.184502][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 335.197355][ T24] usb 1-1: string descriptor 0 read error: -22 [ 335.204102][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 335.213737][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.244200][ T24] usb 1-1: 0:2 : does not exist [ 335.269964][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 335.408127][ T5895] usb 6-1: USB disconnect, device number 53 [ 335.431787][ T9] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.458018][ T9] usb 4-1: config 0 interface 0 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 335.473175][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 335.481602][ T9] usb 4-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 335.507796][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.540448][ T9] usb 4-1: config 0 descriptor?? [ 335.810870][ T9861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.822986][ T9861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.838108][ T9861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.850899][ T9861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.971819][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 335.983151][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 336.011212][ T9] usb 4-1: USB disconnect, device number 3 [ 336.066782][ T9861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.079970][ T9861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.229585][ T5950] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 336.290927][ T9843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.302371][ T9843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.312913][ T9843] binder: 9842:9843 ioctl 4018620d 0 returned -22 [ 336.392359][ T5950] usb 6-1: unable to get BOS descriptor or descriptor too short [ 336.401351][ T5950] usb 6-1: not running at top speed; connect to a high speed hub [ 336.411030][ T5950] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.421606][ T5950] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 336.434639][ T5950] usb 6-1: string descriptor 0 read error: -22 [ 336.443192][ T5950] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 336.453453][ T5950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.651509][ T9882] nbd: must specify a size in bytes for the device [ 336.809460][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 336.824512][ T9884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.833546][ T9884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.945077][ T24] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 336.957314][ T24] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 336.959504][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 336.972450][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 336.984856][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 336.999189][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 337.012472][ T24] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 337.022869][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.033334][ T9] usb 4-1: Product: syz [ 337.037559][ T9] usb 4-1: Manufacturer: syz [ 337.040734][ T5950] usb 6-1: 0:2 : does not exist [ 337.046612][ T9] usb 4-1: SerialNumber: syz [ 337.052143][ T24] usb 1-1: USB disconnect, device number 118 [ 337.073756][ T9] usb 4-1: config 0 descriptor?? [ 337.085030][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 337.094737][ T9] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 337.466573][ T9865] netlink: 'syz.5.1070': attribute type 1 has an invalid length. [ 337.485773][ T9865] netlink: 'syz.5.1070': attribute type 101 has an invalid length. [ 337.507204][ T9888] dvmrp1: entered allmulticast mode [ 337.509584][ T9865] netlink: 832 bytes leftover after parsing attributes in process `syz.5.1070'. [ 337.657457][ T9894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.669804][ T9894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.702595][ T9880] tmpfs: Unknown parameter 's֧'0' [ 337.709123][ T9] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 337.717627][ T9] em28xx 4-1:0.0: Config register raw data: 0x86 [ 337.923316][ T9880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.932698][ T9880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.943035][ T9880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.953899][ T9880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.292729][ T9898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.303810][ T9898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.437361][ T5950] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 338.448806][ T5950] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 338.490258][ T5950] usb 6-1: USB disconnect, device number 54 [ 338.819498][ T24] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 338.936337][ T9905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.949919][ T9905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.989420][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 338.996916][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 339.006680][ T24] usb 1-1: config 1 has an invalid interface number: 26 but max is 1 [ 339.017923][ T24] usb 1-1: config 1 has an invalid interface number: 89 but max is 1 [ 339.027646][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.039605][ T24] usb 1-1: config 1 has no interface number 0 [ 339.046011][ T24] usb 1-1: config 1 has no interface number 1 [ 339.055766][ T24] usb 1-1: config 1 interface 26 altsetting 213 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 339.069779][ T24] usb 1-1: config 1 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 339.083551][ T24] usb 1-1: config 1 interface 26 has no altsetting 0 [ 339.090670][ T24] usb 1-1: config 1 interface 89 has no altsetting 0 [ 339.100123][ T24] usb 1-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 339.109756][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.117997][ T24] usb 1-1: Product: syz [ 339.122892][ T24] usb 1-1: Manufacturer: syz [ 339.128175][ T24] usb 1-1: SerialNumber: syz [ 339.374091][ T24] usb 1-1: unknown interface protocol 0x7d, assuming v1 [ 339.381253][ T24] usb 1-1: 26:2 : does not exist [ 339.394899][ T24] usb 1-1: unknown interface protocol 0x13, assuming v1 [ 339.402002][ T24] usb 1-1: 89:0 : does not exist [ 339.416993][ T24] usb 1-1: USB disconnect, device number 119 [ 339.450584][ T5866] udevd[5866]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 339.559917][ T5950] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 339.590317][ T5864] usb 4-1: USB disconnect, device number 4 [ 339.600303][ T5864] em28xx 4-1:0.0: Disconnecting em28xx [ 339.618768][ T5864] em28xx 4-1:0.0: Freeing device [ 339.725074][ T5950] usb 6-1: unable to get BOS descriptor or descriptor too short [ 339.741400][ T5950] usb 6-1: not running at top speed; connect to a high speed hub [ 339.758688][ T5950] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.769458][ T5950] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 339.782208][ T5950] usb 6-1: string descriptor 0 read error: -22 [ 339.788565][ T5950] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 339.803191][ T5950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.838224][ T5950] usb 6-1: 0:2 : does not exist [ 340.099449][ T5864] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 340.189476][ T5964] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 340.261945][ T5864] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 340.270361][ T5864] usb 4-1: config 0 has no interface number 0 [ 340.276533][ T5864] usb 4-1: config 0 interface 41 has no altsetting 0 [ 340.286836][ T5864] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 340.296476][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.304567][ T5864] usb 4-1: Product: syz [ 340.308780][ T5864] usb 4-1: Manufacturer: syz [ 340.313904][ T5864] usb 4-1: SerialNumber: syz [ 340.322563][ T5864] usb 4-1: config 0 descriptor?? [ 340.340929][ T5964] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.352026][ T5964] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 340.365198][ T5964] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 340.374396][ T5964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.382517][ T5964] usb 1-1: Product: syz [ 340.386766][ T5964] usb 1-1: Manufacturer: syz [ 340.391707][ T5964] usb 1-1: SerialNumber: syz [ 340.403787][ T5964] cdc_mbim 1-1:1.0: skipping garbage [ 340.618430][ T9936] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 340.637143][ T9942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.647131][ T9942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.830459][ T9936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.839877][ T9936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.857300][ T9916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.866341][ T9916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.876769][ T9916] binder: 9915:9916 ioctl 4018620d 0 returned -22 [ 340.961070][ T5864] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 340.975239][ T5864] usb 4-1: USB disconnect, device number 5 [ 341.114186][ T5964] cdc_mbim 1-1:1.0: failed GET_NTB_PARAMETERS [ 341.121687][ T5964] cdc_mbim 1-1:1.0: bind() failure [ 341.131662][ T5964] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 341.138594][ T5964] cdc_ncm 1-1:1.1: bind() failure [ 341.148919][ T5964] usb 1-1: USB disconnect, device number 120 [ 341.438057][ T9953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.447724][ T9953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.507373][ T5950] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 341.530195][ T5950] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 341.610833][ T5950] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 341.648681][ T5950] usb 6-1: USB disconnect, device number 55 [ 341.869457][ T5895] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 341.931961][ T9965] syzkaller1: entered promiscuous mode [ 341.937968][ T9965] syzkaller1: entered allmulticast mode [ 342.040721][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 342.053939][ T5895] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 342.078147][ T5895] usb 4-1: can't read configurations, error -61 [ 342.192226][ T5950] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 342.219466][ T5895] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 342.329396][ T5950] usb 1-1: device descriptor read/64, error -71 [ 342.379506][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 342.387099][ T5895] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 342.395096][ T5895] usb 4-1: can't read configurations, error -61 [ 342.401882][ T5895] usb usb4-port1: attempt power cycle [ 342.569424][ T5950] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 342.699462][ T5950] usb 1-1: device descriptor read/64, error -71 [ 342.739450][ T5895] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 342.760927][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 342.768804][ T5895] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 342.776541][ T5895] usb 4-1: can't read configurations, error -61 [ 342.822722][ T5950] usb usb1-port1: attempt power cycle [ 342.830387][ T9972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.845310][ T9971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.852400][ T9972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.855647][ T9971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.909431][ T5895] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 342.930526][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 342.938010][ T5895] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 342.952438][ T5895] usb 4-1: can't read configurations, error -61 [ 342.960010][ T5895] usb usb4-port1: unable to enumerate USB device [ 343.169577][ T5950] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 343.178489][ T9982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.187544][ T9982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.209626][ T5950] usb 1-1: device descriptor read/8, error -71 [ 343.410252][ T5895] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 343.431181][ T9984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.442877][ T9984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.459422][ T5950] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 343.490439][ T5950] usb 1-1: device descriptor read/8, error -71 [ 343.508859][ T9984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.517781][ T9984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.582620][ T5895] usb 6-1: unable to get BOS descriptor or descriptor too short [ 343.592265][ T5895] usb 6-1: config 13 has an invalid interface number: 50 but max is 3 [ 343.599952][ T5950] usb usb1-port1: unable to enumerate USB device [ 343.601076][ T5895] usb 6-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 343.617335][ T5895] usb 6-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 343.626709][ T5895] usb 6-1: config 13 has no interface number 0 [ 343.633100][ T5895] usb 6-1: config 13 interface 50 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 343.646682][ T5895] usb 6-1: config 13 interface 50 has no altsetting 0 [ 343.656632][ T5895] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 343.666138][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.674244][ T5895] usb 6-1: Product: syz [ 343.678534][ T5895] usb 6-1: Manufacturer: syz [ 343.683278][ T5895] usb 6-1: SerialNumber: syz [ 343.904123][ T12] usb 6-1: Failed to submit usb control message: -71 [ 343.912292][ T5895] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 343.912325][ T12] usb 6-1: unable to send the bmi data to the device: -71 [ 343.931078][ T5895] usb 6-1: USB disconnect, device number 56 [ 343.932866][ T12] usb 6-1: unable to get target info from device [ 343.945839][ T12] usb 6-1: could not get target info (-71) [ 343.952076][ T12] usb 6-1: could not probe fw (-71) [ 344.307131][ T9998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.321049][ T9998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.335380][ T9998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.344863][ T9998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.354981][ T9998] binder: 9997:9998 ioctl 4018620d 0 returned -22 [ 344.839481][ T10] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 344.989847][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 344.996871][ T10] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 345.005332][ T10] usb 6-1: config 0 has no interface number 0 [ 345.014651][ T10] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 345.024333][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.032818][ T10] usb 6-1: Product: syz [ 345.037124][ T10] usb 6-1: Manufacturer: syz [ 345.046326][ T10] usb 6-1: SerialNumber: syz [ 345.055311][ T10] usb 6-1: config 0 descriptor?? [ 345.072056][ T10] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 345.272705][T10013] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1112'. [ 345.272961][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 345.290874][ T10] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 345.291509][ T24] usb 1-1: new full-speed USB device number 125 using dummy_hcd [ 345.308724][ T10] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 345.445202][T10028] netlink: 14478 bytes leftover after parsing attributes in process `syz.3.1117'. [ 345.481891][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 345.490175][ C0] quatech-serial ttyUSB1: qt2_process_read_urb - unsupported command 115 [ 345.490474][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 345.507736][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.519061][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 345.531436][ T24] usb 1-1: string descriptor 0 read error: -22 [ 345.537772][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 345.547248][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.565256][ T24] usb 1-1: 0:2 : does not exist [ 345.699400][ T5950] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 345.700893][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 345.715714][ T5864] usb 6-1: USB disconnect, device number 57 [ 345.728113][ T5864] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 345.745155][ T5864] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 345.764546][ T5864] quatech2 6-1:0.51: device disconnected [ 345.829432][ T5950] usb 4-1: device descriptor read/64, error -71 [ 345.846616][T10031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.861621][T10031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.874880][T10030] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 345.937368][T10036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1119'. [ 346.079801][ T5950] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 346.202685][T10040] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 346.212961][ T44] IPVS: starting estimator thread 0... [ 346.229913][ T5950] usb 4-1: device descriptor read/64, error -71 [ 346.299675][T10042] IPVS: using max 27 ests per chain, 64800 per kthread [ 346.360293][ T5950] usb usb4-port1: attempt power cycle [ 346.477970][T10050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.487140][T10050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.515565][T10050] netlink: 'syz.4.1124': attribute type 12 has an invalid length. [ 346.523877][T10050] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1124'. [ 346.539443][ T5964] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 346.701614][ T5964] usb 6-1: unable to get BOS descriptor or descriptor too short [ 346.711158][ T5950] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 346.719491][ T5964] usb 6-1: not running at top speed; connect to a high speed hub [ 346.728287][ T5964] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 346.738606][ T5964] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 346.748184][ T5950] usb 4-1: device descriptor read/8, error -71 [ 346.756859][ T5964] usb 6-1: string descriptor 0 read error: -22 [ 346.763196][ T5964] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 346.772352][ T5964] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.999565][ T5950] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 347.020292][ T5950] usb 4-1: device descriptor read/8, error -71 [ 347.108617][T10053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.124781][T10053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.134295][ T5950] usb usb4-port1: unable to enumerate USB device [ 347.211638][T10057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.221187][T10057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.777026][T10062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.785993][T10062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.861295][T10063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.870876][T10063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.375370][T10066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.388352][T10066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.402301][T10028] block nbd3: shutting down sockets [ 348.420985][T10067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.433246][T10067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.442984][T10067] binder: 10043:10067 ioctl 4018620d 0 returned -22 [ 348.791768][ T5950] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 348.945129][ T24] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 348.959569][ T5950] usb 4-1: Using ep0 maxpacket: 32 [ 348.978138][ T5950] usb 4-1: unable to get BOS descriptor or descriptor too short [ 348.980746][T10072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.997360][T10073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.000575][ T24] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 349.011685][T10073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.025043][ T5950] usb 4-1: config 8 has an invalid interface number: 247 but max is 3 [ 349.035996][T10072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.038336][T10075] netlink: 'syz.0.1131': attribute type 28 has an invalid length. [ 349.044425][ T5950] usb 4-1: config 8 has an invalid interface number: 163 but max is 3 [ 349.062880][ T5950] usb 4-1: config 8 has an invalid interface number: 130 but max is 3 [ 349.072891][ T24] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 349.080855][ T5950] usb 4-1: config 8 has an invalid interface number: 73 but max is 3 [ 349.089809][ T5950] usb 4-1: config 8 has an invalid interface number: 192 but max is 3 [ 349.098461][ T5950] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 349.108217][ T5950] usb 4-1: config 8 has an invalid interface number: 83 but max is 3 [ 349.117386][ T5950] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 349.127109][ T5950] usb 4-1: config 8 has 6 interfaces, different from the descriptor's value: 4 [ 349.130156][T10078] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1132'. [ 349.141254][ T5950] usb 4-1: config 8 has no interface number 0 [ 349.153074][ T5950] usb 4-1: config 8 has no interface number 1 [ 349.161160][ T5950] usb 4-1: config 8 has no interface number 2 [ 349.177712][ T5950] usb 4-1: config 8 has no interface number 3 [ 349.186682][ T5950] usb 4-1: config 8 has no interface number 4 [ 349.194794][ T24] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 349.205894][ T5950] usb 4-1: config 8 has no interface number 5 [ 349.213044][ T5950] usb 4-1: config 8 interface 247 altsetting 4 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 349.225006][ T5950] usb 4-1: config 8 interface 163 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 349.236555][ T5950] usb 4-1: config 8 interface 163 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 349.250498][ T5950] usb 4-1: too many endpoints for config 8 interface 130 altsetting 121: 75, using maximum allowed: 30 [ 349.262136][ T5950] usb 4-1: config 8 interface 130 altsetting 121 has an invalid descriptor for endpoint zero, skipping [ 349.278553][ T24] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 349.291001][ T24] usb 1-1: USB disconnect, device number 125 [ 349.297825][ T5964] usb 6-1: 0:2 : does not exist [ 349.303842][ T5950] usb 4-1: config 8 interface 130 altsetting 121 endpoint 0x8B has invalid maxpacket 1023, setting to 64 [ 349.316486][ T5950] usb 4-1: config 8 interface 130 altsetting 121 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 349.327835][ T5950] usb 4-1: config 8 interface 130 altsetting 121 has a duplicate endpoint with address 0x7, skipping [ 349.339198][ T5950] usb 4-1: config 8 interface 130 altsetting 121 has a duplicate endpoint with address 0x4, skipping [ 349.350843][ T5950] usb 4-1: config 8 interface 130 altsetting 121 has a duplicate endpoint with address 0x3, skipping [ 349.362332][ T5950] usb 4-1: config 8 interface 130 altsetting 121 has a duplicate endpoint with address 0x7, skipping [ 349.374216][ T5950] usb 4-1: config 8 interface 130 altsetting 121 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 349.385562][ T5950] usb 4-1: config 8 interface 130 altsetting 121 has 13 endpoint descriptors, different from the interface descriptor's value: 75 [ 349.399550][ T5950] usb 4-1: config 8 interface 73 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 349.410703][ T5950] usb 4-1: config 8 interface 73 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 349.422115][ T5950] usb 4-1: config 8 interface 73 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 349.433648][ T5950] usb 4-1: config 8 interface 192 altsetting 125 bulk endpoint 0x1 has invalid maxpacket 1024 [ 349.444238][ T5950] usb 4-1: config 8 interface 192 altsetting 125 has a duplicate endpoint with address 0xA, skipping [ 349.455220][ T5950] usb 4-1: config 8 interface 192 altsetting 125 has a duplicate endpoint with address 0x8, skipping [ 349.484167][ T5950] usb 4-1: config 8 interface 192 altsetting 125 has a duplicate endpoint with address 0x8, skipping [ 349.495436][ T5950] usb 4-1: config 8 interface 192 altsetting 125 has a duplicate endpoint with address 0x5, skipping [ 349.506519][ T5950] usb 4-1: config 8 interface 192 altsetting 125 has a duplicate endpoint with address 0x8, skipping [ 349.521930][ T5950] usb 4-1: config 8 interface 192 altsetting 125 has a duplicate endpoint with address 0x2, skipping [ 349.535120][ T5950] usb 4-1: config 8 interface 192 altsetting 125 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 349.547386][ T5950] usb 4-1: config 8 interface 192 altsetting 125 has an invalid descriptor for endpoint zero, skipping [ 349.562444][ T5950] usb 4-1: config 8 interface 192 altsetting 125 has a duplicate endpoint with address 0x4, skipping [ 349.591603][ T5964] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 349.603066][ T5950] usb 4-1: config 8 interface 192 altsetting 125 has a duplicate endpoint with address 0xF, skipping [ 349.615550][ T5950] usb 4-1: config 8 interface 192 altsetting 125 has a duplicate endpoint with address 0x1, skipping [ 349.627546][ T5950] usb 4-1: config 8 interface 192 altsetting 125 has 12 endpoint descriptors, different from the interface descriptor's value: 13 [ 349.642072][ T5950] usb 4-1: too many endpoints for config 8 interface 83 altsetting 34: 155, using maximum allowed: 30 [ 349.653791][ T5950] usb 4-1: config 8 interface 83 altsetting 34 has a duplicate endpoint with address 0x7, skipping [ 349.666651][ T5950] usb 4-1: config 8 interface 83 altsetting 34 has a duplicate endpoint with address 0x2, skipping [ 349.685724][ T5964] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 349.685778][T10089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.703867][ T5950] usb 4-1: config 8 interface 83 altsetting 34 has 2 endpoint descriptors, different from the interface descriptor's value: 155 [ 349.710055][T10089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.727838][ T5950] usb 4-1: config 8 interface 247 has no altsetting 0 [ 349.735085][ T5950] usb 4-1: config 8 interface 163 has no altsetting 0 [ 349.742293][ T5950] usb 4-1: config 8 interface 130 has no altsetting 0 [ 349.749892][ T5950] usb 4-1: config 8 interface 73 has no altsetting 0 [ 349.757225][ T5950] usb 4-1: config 8 interface 192 has no altsetting 0 [ 349.766717][ T5950] usb 4-1: config 8 interface 83 has no altsetting 0 [ 349.784770][ T5950] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=9b.c6 [ 349.795359][ T5964] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 349.806875][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.817222][ T5950] usb 4-1: Product: 玁䷍覛핺씠ホ䜇휕⡓춘沷邆뭬單⪍㯈좞෴㹡篾쒤觠恵膗㺀쫆积텴棠㰤✴쳛딼瞇⨰菂ၿ숚﷎⎨蒣쭕斧䀙鲆⽆놶昖ꑒ֊嵝꘩姯䱡鲋ョ醬Ꮗ葬팦鐃榬윉鋇爁ꇔ琙⓽᜶馒鯇彣 [ 349.853167][ T5950] usb 4-1: Manufacturer: 잷אּ賿ʏἡ稲꾣：ౚၪ홷嗅㦏௻븸퉞乯쵶廷↭㢽㻊߽섚퉔⅝하ẓ҅鑇ᑴ线뒚ᕥ䱴턥펬돌狄喞饮톑Öጭ੐婑훜ꊱỲ惾뎅뚻䞊혼뭝蚔䓁＼䘹꼆ꀦꁺ熅環㉁甀㒿ᒌ꟧䗑ꨇ⍣摊꣇橙訿븉徱㵹貖稦쇐궾皖쀍˛ꎴỎ驢캧ݧ쀜쾵ֺᛮ⥽넬ଖ匂嘄Ꮣ쑀䤾㞪ᛨ঵綍ㅑ晕 [ 349.889872][ T5950] usb 4-1: SerialNumber: syz [ 349.897399][ T5964] usb 6-1: USB disconnect, device number 58 [ 350.146175][ T5950] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 350.153898][ T5950] snd-usb-audio 4-1:8.247: probe with driver snd-usb-audio failed with error -2 [ 350.168093][ T5950] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 350.176094][ T5950] snd-usb-audio 4-1:8.163: probe with driver snd-usb-audio failed with error -2 [ 350.189550][ T5950] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 350.197742][ T5950] snd-usb-audio 4-1:8.130: probe with driver snd-usb-audio failed with error -2 [ 350.207575][ T24] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 350.226439][ T5950] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 350.237462][ T5950] snd-usb-audio 4-1:8.73: probe with driver snd-usb-audio failed with error -2 [ 350.246789][ T5964] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 350.259901][ T5950] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 350.267530][ T5950] snd-usb-audio 4-1:8.192: probe with driver snd-usb-audio failed with error -2 [ 350.284705][ T5950] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 350.321303][ T5950] snd-usb-audio 4-1:8.83: probe with driver snd-usb-audio failed with error -2 [ 350.341539][ T5950] usb 4-1: USB disconnect, device number 14 [ 350.369916][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 350.387923][T10098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.396036][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 350.408743][ T24] usb 1-1: config 6 has an invalid interface number: 202 but max is 0 [ 350.413883][ T5866] udevd[5866]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.83/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 350.422651][ T24] usb 1-1: config 6 has an invalid interface descriptor of length 2, skipping [ 350.434190][T10098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.446646][ T5964] usb 6-1: Using ep0 maxpacket: 8 [ 350.457678][ T24] usb 1-1: config 6 has no interface number 0 [ 350.466851][ T5964] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.479578][ T24] usb 1-1: config 6 interface 202 altsetting 244 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 350.493706][ T5964] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 350.503410][ T5964] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 350.515251][ T24] usb 1-1: config 6 interface 202 has no altsetting 0 [ 350.522507][ T5964] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10 [ 350.534545][ T5964] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024 [ 350.546043][ T5964] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 350.556682][ T5964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.564987][ T24] usb 1-1: New USB device found, idVendor=05da, idProduct=0099, bcdDevice=d4.1f [ 350.575801][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.585388][ T24] usb 1-1: Product: syz [ 350.593042][ T5964] hub 6-1:1.0: bad descriptor, ignoring hub [ 350.599217][ T5964] hub 6-1:1.0: probe with driver hub failed with error -5 [ 350.607619][ T5964] cdc_wdm 6-1:1.0: skipping garbage [ 350.612922][ T24] usb 1-1: Manufacturer: syz [ 350.617632][ T24] usb 1-1: SerialNumber: syz [ 350.623693][ T5964] cdc_wdm 6-1:1.0: skipping garbage [ 350.629448][ T5964] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 350.846797][ T24] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 14 is not bulk. [ 350.856829][ T24] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 8 is not bulk. [ 350.866696][ T24] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 7 is not bulk. [ 350.876586][ T24] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 350.891370][ T24] usb 1-1: USB disconnect, device number 126 [ 350.979643][ T5964] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 351.092318][T10104] syzkaller1: entered promiscuous mode [ 351.097921][T10104] syzkaller1: entered allmulticast mode [ 351.116385][T10104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.125495][T10104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.139182][ T5964] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 351.148961][ T5964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.157336][ T5964] usb 4-1: Product: syz [ 351.161681][ T5964] usb 4-1: Manufacturer: syz [ 351.166345][ T5964] usb 4-1: SerialNumber: syz [ 351.182461][ T5964] usb 4-1: config 0 descriptor?? [ 351.198356][ T5964] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 351.599554][ T9] usb 4-1: USB disconnect, device number 15 [ 351.689661][ T5964] usb 1-1: new full-speed USB device number 127 using dummy_hcd [ 351.767804][T10109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.778607][T10109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.793064][T10109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.802147][T10109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.811067][T10109] binder: 10108:10109 ioctl 4018620d 0 returned -22 [ 351.842422][ T5964] usb 1-1: unable to get BOS descriptor or descriptor too short [ 351.850807][ T5964] usb 1-1: not running at top speed; connect to a high speed hub [ 351.860129][ T5964] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.870498][ T5964] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 351.883228][ T5964] usb 1-1: string descriptor 0 read error: -22 [ 351.890077][ T5964] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 351.899407][ T5964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.917828][ T5964] usb 1-1: 0:2 : does not exist [ 352.619429][ T5895] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 352.678772][T10094] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 352.772097][ T5895] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.785249][ T5895] usb 4-1: config 0 interface 0 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 352.803782][ T5895] usb 4-1: config 0 interface 0 has no altsetting 0 [ 352.811691][ T5895] usb 4-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 352.821085][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.829533][T10120] input: syz1 as /devices/virtual/input/input34 [ 352.836562][ T24] usb 6-1: USB disconnect, device number 59 [ 352.850370][ T5895] usb 4-1: config 0 descriptor?? [ 353.169533][ T24] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 353.177808][ T5964] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 353.191623][ T5964] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 353.242789][ T5964] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 353.269629][ T5964] usb 1-1: USB disconnect, device number 127 [ 353.278130][ T5895] viewsonic 0003:0543:E621.0020: unknown main item tag 0x0 [ 353.286426][ T5895] viewsonic 0003:0543:E621.0020: unknown main item tag 0x0 [ 353.295756][ T5895] viewsonic 0003:0543:E621.0020: unknown main item tag 0x0 [ 353.304703][T10122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.314306][ T5895] viewsonic 0003:0543:E621.0020: unknown main item tag 0x0 [ 353.322453][ T5895] viewsonic 0003:0543:E621.0020: unknown main item tag 0x0 [ 353.331094][T10122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.339119][ T5895] viewsonic 0003:0543:E621.0020: unknown main item tag 0x0 [ 353.347493][ T5895] viewsonic 0003:0543:E621.0020: unknown main item tag 0x0 [ 353.357777][ T24] usb 6-1: config 2 has an invalid interface number: 174 but max is 0 [ 353.370819][ T5895] viewsonic 0003:0543:E621.0020: hidraw0: USB HID v0.00 Device [HID 0543:e621] on usb-dummy_hcd.3-1/input0 [ 353.372756][T10122] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1146'. [ 353.391786][ T24] usb 6-1: config 2 has no interface number 0 [ 353.397931][ T24] usb 6-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 353.414251][ T24] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 353.425832][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.451153][ T24] usb 6-1: Product: syz [ 353.455393][ T24] usb 6-1: Manufacturer: syz [ 353.462446][ T24] usb 6-1: SerialNumber: syz [ 353.474226][ T10] usb 4-1: USB disconnect, device number 16 [ 353.491166][T10120] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 353.497070][T10123] fido_id[10123]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0543:E621.0020/report_descriptor': No such device [ 353.708760][ T24] usb 6-1: probing VID:PID(0424:012C) [ 353.720942][ T24] usb 6-1: vub300 testing BULK IN EndPoint(0) 82 [ 353.729554][ T24] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs [ 353.742026][ T24] vub300 6-1:2.174: probe with driver vub300 failed with error -22 [ 353.758759][ T24] usb 6-1: USB disconnect, device number 60 [ 353.959432][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 353.988593][T10127] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 354.112185][ T10] usb 1-1: config 0 has an invalid interface number: 217 but max is 0 [ 354.124941][ T10] usb 1-1: config 0 has no interface number 0 [ 354.135563][ T10] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 354.152332][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.160859][ T10] usb 1-1: Product: syz [ 354.165069][ T10] usb 1-1: Manufacturer: syz [ 354.170124][ T10] usb 1-1: SerialNumber: syz [ 354.180298][ T10] usb 1-1: config 0 descriptor?? [ 354.191812][ T10] hub 1-1:0.217: bad descriptor, ignoring hub [ 354.203062][T10138] netlink: 'syz.4.1152': attribute type 3 has an invalid length. [ 354.211337][ T10] hub 1-1:0.217: probe with driver hub failed with error -5 [ 354.396490][ T10] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 354.415283][ T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 354.434209][ T10] dib0700: firmware download failed at 7 with -22 [ 354.575159][T10154] netlink: 'syz.3.1156': attribute type 1 has an invalid length. [ 354.585867][T10154] netlink: 'syz.3.1156': attribute type 2 has an invalid length. [ 354.600023][ T5895] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 354.609658][T10125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.619109][T10125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.739741][ T10] usb 1-1: USB disconnect, device number 2 [ 354.782500][ T5895] usb 6-1: unable to get BOS descriptor or descriptor too short [ 354.791577][ T5895] usb 6-1: not running at top speed; connect to a high speed hub [ 354.801678][ T5895] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.811990][ T5895] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 354.823988][ T5895] usb 6-1: string descriptor 0 read error: -22 [ 354.830368][ T5895] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 354.839398][ T5964] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 354.839694][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.863649][ T5895] usb 6-1: 0:2 : does not exist [ 355.013055][ T5964] usb 4-1: unable to get BOS descriptor or descriptor too short [ 355.022369][ T5964] usb 4-1: not running at top speed; connect to a high speed hub [ 355.033205][T10156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.042920][ T5964] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 355.044976][T10156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.054083][ T5964] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 355.083993][ T5964] usb 4-1: string descriptor 0 read error: -22 [ 355.091784][ T5964] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 355.101372][ T5964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.155934][T10161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.166307][T10161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.299515][T10168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.321876][T10168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.534068][T10175] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1162'. [ 355.819428][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 355.884080][T10147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.893810][T10147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.903719][T10147] binder: 10145:10147 ioctl 4018620d 0 returned -22 [ 355.969510][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 355.977187][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 355.986214][ T10] usb 1-1: config 4 has an invalid interface number: 101 but max is 0 [ 355.994628][ T10] usb 1-1: config 4 has no interface number 0 [ 356.001020][ T10] usb 1-1: config 4 interface 101 has no altsetting 0 [ 356.011176][ T10] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=a5.52 [ 356.020430][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.028760][ T10] usb 1-1: Product: syz [ 356.033172][ T10] usb 1-1: Manufacturer: syz [ 356.037898][ T10] usb 1-1: SerialNumber: syz [ 356.322815][ T10] ttusbir 1-1:4.101: cannot find expected altsetting [ 356.335213][ T10] usb 1-1: USB disconnect, device number 3 [ 356.527106][ T5895] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 356.539690][ T5895] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 356.577256][ T5895] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 356.587983][ T5964] usb 4-1: 0:2 : does not exist [ 356.591878][ T5895] usb 6-1: USB disconnect, device number 61 [ 356.913401][ T30] audit: type=1326 audit(1759054335.622:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.0.1165" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6dbc58eec9 code=0x100000 [ 357.386059][ T5964] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 357.407878][ T5964] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 357.473802][ T5964] usb 4-1: USB disconnect, device number 17 [ 357.809412][ T5895] usb 6-1: new low-speed USB device number 62 using dummy_hcd [ 357.978014][ T5895] usb 6-1: Invalid ep0 maxpacket: 32 [ 358.129430][ T5895] usb 6-1: new low-speed USB device number 63 using dummy_hcd [ 358.285161][T10200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1171'. [ 358.300804][ T5895] usb 6-1: Invalid ep0 maxpacket: 32 [ 358.317482][ T5895] usb usb6-port1: attempt power cycle [ 358.669415][ T5895] usb 6-1: new low-speed USB device number 64 using dummy_hcd [ 358.690324][ T5895] usb 6-1: Invalid ep0 maxpacket: 32 [ 358.809443][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 358.820998][ T5895] usb 6-1: new low-speed USB device number 65 using dummy_hcd [ 358.850239][ T5895] usb 6-1: Invalid ep0 maxpacket: 32 [ 358.856222][ T5895] usb usb6-port1: unable to enumerate USB device [ 358.899401][ T5953] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 358.969405][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 358.977497][ T9] usb 1-1: config 0 has an invalid interface number: 190 but max is 0 [ 358.986510][ T9] usb 1-1: config 0 has no interface number 0 [ 358.993259][ T9] usb 1-1: config 0 interface 190 altsetting 8 endpoint 0xA has invalid wMaxPacketSize 0 [ 359.004201][ T9] usb 1-1: config 0 interface 190 altsetting 8 bulk endpoint 0xA has invalid maxpacket 0 [ 359.017918][ T9] usb 1-1: config 0 interface 190 has no altsetting 0 [ 359.035631][ T9] usb 1-1: New USB device found, idVendor=1199, idProduct=0022, bcdDevice=96.f1 [ 359.050547][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.065764][ T5953] usb 4-1: unable to get BOS descriptor or descriptor too short [ 359.075229][ T9] usb 1-1: Product: syz [ 359.079939][ T9] usb 1-1: Manufacturer: syz [ 359.085068][ T5953] usb 4-1: not running at top speed; connect to a high speed hub [ 359.092976][ T9] usb 1-1: SerialNumber: syz [ 359.103054][ T5953] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.123642][ T9] usb 1-1: config 0 descriptor?? [ 359.129377][ T5953] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 359.153988][ T5953] usb 4-1: string descriptor 0 read error: -22 [ 359.160695][ T5953] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 359.169908][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.192982][ T5953] usb 4-1: 0:2 : does not exist [ 359.321990][T10218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.333140][T10218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.345702][ T9] sierra 1-1:0.190: Sierra USB modem converter detected [ 359.356922][T10218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.369224][T10218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.370426][ T9] usb 1-1: Sierra USB modem converter now attached to ttyUSB1 [ 359.387982][ T9] usb 1-1: Sierra USB modem converter now attached to ttyUSB2 [ 359.409599][ T9] usb 1-1: USB disconnect, device number 4 [ 359.441023][ T9] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 359.455590][ T9] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 359.465209][ T9] sierra 1-1:0.190: device disconnected [ 360.004211][T10224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.013580][T10224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.202505][T10213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.202958][T10213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.219718][ T9] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 360.229049][T10213] binder: 10212:10213 ioctl 4018620d 0 returned -22 [ 360.400764][ T9] usb 1-1: LPM exit latency is zeroed, disabling LPM. [ 360.409959][ T9] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x82 is Bulk; changing to Interrupt [ 360.420236][ T9] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x3 is Bulk; changing to Interrupt [ 360.433461][ T9] usb 1-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.435583][T10233] block nbd1: Unsupported socket: should be TCP or UNIX. [ 360.454704][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 360.467670][ T9] usb 1-1: string descriptor 0 read error: -22 [ 360.489629][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 360.498788][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.523929][T10222] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 360.531678][T10222] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 360.543576][ T9] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 360.702740][T10237] netlink: 'syz.4.1183': attribute type 3 has an invalid length. [ 360.710879][T10237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1183'. [ 360.761278][ T9] usb 1-1: USB disconnect, device number 5 [ 360.789891][ T24] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 360.829805][T10239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.840939][T10239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.872312][ T5953] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 360.886958][ T5953] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 360.932601][ T5953] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 360.956753][ T5953] usb 4-1: USB disconnect, device number 18 [ 360.969581][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 360.983211][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 361.001468][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 361.032034][ T24] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 361.048500][ T24] usb 6-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 361.058848][ T24] usb 6-1: Product: syz [ 361.064151][ T24] usb 6-1: Manufacturer: syz [ 361.069024][ T24] usb 6-1: SerialNumber: syz [ 361.086077][ T24] usb 6-1: config 0 descriptor?? [ 361.142435][ T24] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 361.389517][T10256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.471436][T10256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.503032][ T12] usb 6-1: Failed to submit usb control message: -71 [ 361.510853][ T9] usb 6-1: USB disconnect, device number 66 [ 361.521992][ T12] usb 6-1: unable to send the bmi data to the device: -71 [ 361.529164][ T12] usb 6-1: unable to get target info from device [ 361.537861][ T12] usb 6-1: could not get target info (-71) [ 361.544128][ T12] usb 6-1: could not probe fw (-71) [ 361.635557][T10264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.660056][T10264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.692694][T10266] netlink: 612 bytes leftover after parsing attributes in process `syz.3.1191'. [ 361.708193][T10266] binder: 10265:10266 ioctl c0306201 200000000080 returned -14 [ 362.515595][T10285] syz.0.1199 (10285): /proc/10284/oom_adj is deprecated, please use /proc/10284/oom_score_adj instead. [ 362.630906][ T5950] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 362.641502][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 362.769395][ T5953] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 362.791395][ T24] usb 4-1: device descriptor read/64, error -71 [ 362.814213][ T5950] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 362.826764][ T5950] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.845161][ T5950] usb 6-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 362.854497][ T5950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.869964][ T5950] usb 6-1: config 0 descriptor?? [ 362.924748][ T5953] usb 1-1: Using ep0 maxpacket: 16 [ 362.932641][ T5953] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.943861][ T5953] usb 1-1: config 0 interface 0 has no altsetting 0 [ 362.951093][ T5953] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 362.960429][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.971740][ T5953] usb 1-1: config 0 descriptor?? [ 363.042087][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 363.190657][ T24] usb 4-1: device descriptor read/64, error -71 [ 363.309833][ T5950] chicony 0003:04F2:1421.0021: item fetching failed at offset 4/5 [ 363.317953][ T24] usb usb4-port1: attempt power cycle [ 363.332222][ T5950] chicony 0003:04F2:1421.0021: Chicony hid parse failed: -22 [ 363.341432][ T5950] chicony 0003:04F2:1421.0021: probe with driver chicony failed with error -22 [ 363.389799][T10285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.400306][T10285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.412684][T10285] netlink: 'syz.0.1199': attribute type 1 has an invalid length. [ 363.420933][T10285] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1199'. [ 363.439021][T10285] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 363.515535][ T10] usb 6-1: USB disconnect, device number 67 [ 363.681138][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 363.727123][ T24] usb 4-1: device descriptor read/8, error -71 [ 363.982264][ T5953] usbhid 1-1:0.0: can't add hid device: -71 [ 363.994190][ T5953] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 364.003069][ T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 364.012175][ T5953] usb 1-1: USB disconnect, device number 6 [ 364.055907][ T24] usb 4-1: device descriptor read/8, error -71 [ 364.179847][ T24] usb usb4-port1: unable to enumerate USB device [ 364.470297][T10302] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1203'. [ 364.799481][ T24] usb 6-1: new low-speed USB device number 68 using dummy_hcd [ 364.991658][ T24] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 365.004208][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 365.016955][ T24] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 365.031544][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 365.045154][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 365.058782][ T24] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 365.067078][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 365.079163][ T24] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 365.091227][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 365.102668][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 365.114958][ T24] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 365.125117][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 365.145381][ T24] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 365.157272][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 365.178222][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 365.193564][ T24] usb 6-1: string descriptor 0 read error: -22 [ 365.202340][ T24] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 365.211645][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.249083][ T24] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 365.515951][T10315] netlink: 'syz.5.1204': attribute type 1 has an invalid length. [ 365.524058][T10315] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1204'. [ 365.549599][ T24] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 365.591644][T10318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.602851][T10318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.664251][T10320] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1211'. [ 365.678401][T10320] tipc: Invalid UDP bearer configuration [ 365.678475][T10320] tipc: Enabling of bearer rejected, failed to enable media [ 365.709449][ T24] usb 1-1: Invalid ep0 maxpacket: 16 [ 365.849470][ T24] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 365.904992][T10330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.920638][T10330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.991519][ T5953] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 366.000805][ T24] usb 1-1: Invalid ep0 maxpacket: 16 [ 366.006706][ T24] usb usb1-port1: attempt power cycle [ 366.129565][ T5953] usb 4-1: device descriptor read/64, error -71 [ 366.359480][ T24] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 366.369514][ T5953] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 366.381324][ T24] usb 1-1: Invalid ep0 maxpacket: 16 [ 366.499497][ T5953] usb 4-1: device descriptor read/64, error -71 [ 366.519508][ T24] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 366.550059][ T24] usb 1-1: Invalid ep0 maxpacket: 16 [ 366.555827][ T24] usb usb1-port1: unable to enumerate USB device [ 366.611016][ T5953] usb usb4-port1: attempt power cycle [ 366.949422][ T5953] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 366.970127][ T5953] usb 4-1: device descriptor read/8, error -71 [ 367.209408][ T5953] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 367.230144][ T5953] usb 4-1: device descriptor read/8, error -71 [ 367.340027][ T5953] usb usb4-port1: unable to enumerate USB device [ 367.523361][T10341] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 367.535847][T10341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.546903][T10341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.601686][ T5950] usb 6-1: USB disconnect, device number 68 [ 367.828357][T10352] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1221'. [ 368.106943][T10361] netlink: 324 bytes leftover after parsing attributes in process `syz.4.1224'. [ 368.179405][ T5950] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 368.336845][ T5950] usb 6-1: unable to get BOS descriptor or descriptor too short [ 368.346463][ T5950] usb 6-1: not running at top speed; connect to a high speed hub [ 368.356015][ T5950] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.366313][ T5950] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 368.379370][ T5950] usb 6-1: string descriptor 0 read error: -22 [ 368.390176][T10365] FAULT_INJECTION: forcing a failure. [ 368.390176][T10365] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 368.403616][T10365] CPU: 0 UID: 0 PID: 10365 Comm: syz.0.1225 Not tainted syzkaller #0 PREEMPT(full) [ 368.403643][T10365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 368.403669][T10365] Call Trace: [ 368.403678][T10365] [ 368.403686][T10365] dump_stack_lvl+0x189/0x250 [ 368.403721][T10365] ? __pfx____ratelimit+0x10/0x10 [ 368.403744][T10365] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.403776][T10365] ? __pfx__printk+0x10/0x10 [ 368.403815][T10365] should_fail_ex+0x414/0x560 [ 368.403850][T10365] __kvm_read_guest_page+0x18d/0x240 [ 368.403874][T10365] kvm_fetch_guest_virt+0x12b/0x170 [ 368.403904][T10365] ? __pfx_kvm_fetch_guest_virt+0x10/0x10 [ 368.403932][T10365] __do_insn_fetch_bytes+0x2fc/0x6d0 [ 368.403970][T10365] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 368.403992][T10365] ? x86_decode_insn+0x42fe/0x5470 [ 368.404022][T10365] x86_decode_insn+0x31d/0x5470 [ 368.404064][T10365] ? __pfx_x86_decode_insn+0x10/0x10 [ 368.404095][T10365] ? __pfx_x86_decode_insn+0x10/0x10 [ 368.404136][T10365] ? __asan_memset+0x22/0x50 [ 368.404164][T10365] ? init_decode_cache+0x78/0x90 [ 368.404186][T10365] ? init_emulate_ctxt+0x4d6/0x660 [ 368.404220][T10365] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 368.404248][T10365] ? x86_emulate_instruction+0xacf/0x1f90 [ 368.404291][T10365] x86_emulate_instruction+0x61b/0x1f90 [ 368.404337][T10365] ? vmx_vcpu_run+0xe92/0x2b70 [ 368.404367][T10365] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 368.404399][T10365] ? __pfx_handle_mmio_page_fault+0x10/0x10 [ 368.404432][T10365] ? __pfx___kvm_io_bus_write+0x10/0x10 [ 368.404473][T10365] kvm_mmu_page_fault+0x91a/0xb70 [ 368.404513][T10365] vmx_handle_exit+0xd9e/0x18c0 [ 368.404542][T10365] ? vcpu_run+0x361b/0x7040 [ 368.404580][T10365] vcpu_run+0x43aa/0x7040 [ 368.404615][T10365] ? vcpu_run+0x361b/0x7040 [ 368.404703][T10365] ? __pfx_vcpu_run+0x10/0x10 [ 368.404727][T10365] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 368.404759][T10365] ? complete_emulated_mmio+0x18e/0x7a0 [ 368.404781][T10365] ? __asan_memcpy+0x40/0x70 [ 368.404810][T10365] ? complete_emulated_mmio+0x4d2/0x7a0 [ 368.404842][T10365] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 368.404870][T10365] ? __mutex_trylock_common+0x153/0x260 [ 368.404904][T10365] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 368.404928][T10365] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 368.404959][T10365] ? rcu_is_watching+0x15/0xb0 [ 368.404987][T10365] ? trace_contention_end+0x39/0x120 [ 368.405016][T10365] ? __mutex_lock+0x335/0x1350 [ 368.405050][T10365] ? kasan_quarantine_put+0xdd/0x220 [ 368.405080][T10365] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.405104][T10365] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 368.405127][T10365] ? __pfx___mutex_lock+0x10/0x10 [ 368.405153][T10365] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 368.405180][T10365] ? do_vfs_ioctl+0xbe8/0x1430 [ 368.405199][T10365] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 368.405222][T10365] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 368.405246][T10365] kvm_vcpu_ioctl+0x95c/0xe90 [ 368.405273][T10365] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 368.405318][T10365] ? __fget_files+0x2a/0x420 [ 368.405348][T10365] ? __fget_files+0x3a0/0x420 [ 368.405371][T10365] ? __fget_files+0x2a/0x420 [ 368.405400][T10365] ? bpf_lsm_file_ioctl+0x9/0x20 [ 368.405425][T10365] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 368.405445][T10365] __se_sys_ioctl+0xfc/0x170 [ 368.405468][T10365] do_syscall_64+0xfa/0xfa0 [ 368.405490][T10365] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.405513][T10365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.405534][T10365] ? clear_bhb_loop+0x60/0xb0 [ 368.405560][T10365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.405580][T10365] RIP: 0033:0x7f6dbc58eec9 [ 368.405598][T10365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.405617][T10365] RSP: 002b:00007f6dbd4e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 368.405639][T10365] RAX: ffffffffffffffda RBX: 00007f6dbc7e5fa0 RCX: 00007f6dbc58eec9 [ 368.405656][T10365] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 368.405669][T10365] RBP: 00007f6dbd4e4090 R08: 0000000000000000 R09: 0000000000000000 [ 368.405682][T10365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.405695][T10365] R13: 00007f6dbc7e6038 R14: 00007f6dbc7e5fa0 R15: 00007ffd80ec3e58 [ 368.405732][T10365] [ 368.408807][ T5950] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 368.852486][ T5950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.868928][ T5950] usb 6-1: 0:2 : does not exist [ 368.905866][T10369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.922282][T10369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.189619][ T5953] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 369.341623][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.354078][ T5953] usb 4-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.00 [ 369.363412][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.374291][ T5953] usb 4-1: config 0 descriptor?? [ 369.506318][T10381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.517206][T10381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.794820][ T5953] smartjoyplus 0003:0925:0005.0022: item fetching failed at offset 6/7 [ 369.804062][ T5953] smartjoyplus 0003:0925:0005.0022: parse failed [ 369.810613][ T5953] smartjoyplus 0003:0925:0005.0022: probe with driver smartjoyplus failed with error -22 [ 369.879745][T10359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.888777][T10359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.996182][ T5953] usb 4-1: USB disconnect, device number 27 [ 370.478033][T10387] netlink: 'syz.4.1232': attribute type 11 has an invalid length. [ 370.510812][ T5950] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 370.539474][ T5950] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 370.608845][ T5950] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 370.634967][T10391] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1234'. [ 370.640488][ T5950] usb 6-1: USB disconnect, device number 69 [ 370.715112][T10395] FAULT_INJECTION: forcing a failure. [ 370.715112][T10395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.741594][T10395] CPU: 0 UID: 0 PID: 10395 Comm: syz.4.1236 Not tainted syzkaller #0 PREEMPT(full) [ 370.741624][T10395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 370.741637][T10395] Call Trace: [ 370.741645][T10395] [ 370.741655][T10395] dump_stack_lvl+0x189/0x250 [ 370.741691][T10395] ? __pfx____ratelimit+0x10/0x10 [ 370.741714][T10395] ? __pfx_dump_stack_lvl+0x10/0x10 [ 370.741747][T10395] ? __pfx__printk+0x10/0x10 [ 370.741786][T10395] should_fail_ex+0x414/0x560 [ 370.741823][T10395] _copy_to_user+0x31/0xb0 [ 370.741851][T10395] simple_read_from_buffer+0xe1/0x170 [ 370.741879][T10395] proc_fail_nth_read+0x1b3/0x220 [ 370.741920][T10395] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 370.741967][T10395] ? rw_verify_area+0x2a6/0x4d0 [ 370.741994][T10395] ? __lock_acquire+0xab9/0xd20 [ 370.742025][T10395] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 370.742066][T10395] vfs_read+0x200/0xa30 [ 370.742095][T10395] ? fdget_pos+0x247/0x320 [ 370.742136][T10395] ? __pfx___mutex_lock+0x10/0x10 [ 370.742170][T10395] ? __pfx_vfs_read+0x10/0x10 [ 370.742200][T10395] ? __fget_files+0x2a/0x420 [ 370.742239][T10395] ? __fget_files+0x3a0/0x420 [ 370.742271][T10395] ? __fget_files+0x2a/0x420 [ 370.742317][T10395] ksys_read+0x145/0x250 [ 370.742347][T10395] ? __fget_files+0x2a/0x420 [ 370.742382][T10395] ? __pfx_ksys_read+0x10/0x10 [ 370.742417][T10395] ? do_syscall_64+0xbe/0xfa0 [ 370.742454][T10395] do_syscall_64+0xfa/0xfa0 [ 370.742484][T10395] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.742515][T10395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.742555][T10395] ? clear_bhb_loop+0x60/0xb0 [ 370.742589][T10395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.742617][T10395] RIP: 0033:0x7fae26f8d8dc [ 370.742643][T10395] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 370.742668][T10395] RSP: 002b:00007fae27e97030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 370.742698][T10395] RAX: ffffffffffffffda RBX: 00007fae271e5fa0 RCX: 00007fae26f8d8dc [ 370.742719][T10395] RDX: 000000000000000f RSI: 00007fae27e970a0 RDI: 0000000000000006 [ 370.742737][T10395] RBP: 00007fae27e97090 R08: 0000000000000000 R09: 0000000000000000 [ 370.742757][T10395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.742775][T10395] R13: 00007fae271e6038 R14: 00007fae271e5fa0 R15: 00007ffc2a126e08 [ 370.742818][T10395] [ 370.988989][ C0] vkms_vblank_simulate: vblank timer overrun [ 371.267777][T10402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.290124][T10402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.382455][T10408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.392892][T10408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.550490][ T5953] usb 6-1: new full-speed USB device number 70 using dummy_hcd [ 371.701776][ T5953] usb 6-1: config 1 interface 0 has no altsetting 0 [ 371.710816][ T5953] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 371.720275][ T5953] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.728284][ T5953] usb 6-1: Product: syz [ 371.732614][ T5953] usb 6-1: Manufacturer: syz [ 371.737240][ T5953] usb 6-1: SerialNumber: syz [ 371.769502][ T5950] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 371.921362][ T5950] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.931786][ T5950] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 371.942293][ T5950] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 371.957910][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.969377][ T5950] usb 4-1: config 0 descriptor?? [ 372.188165][ T5950] Bluetooth: Can't get state to change to load ram patch err [ 372.205171][ T5953] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 70 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 372.216851][ T5950] Bluetooth: Loading patch file failed [ 372.231574][ T5953] usb 6-1: USB disconnect, device number 70 [ 372.250139][ T5953] usblp0: removed [ 372.273554][ T5950] ath3k 4-1:0.0: probe with driver ath3k failed with error -121 [ 372.410190][ T24] usb 4-1: USB disconnect, device number 28 [ 372.567764][T10424] kvm: pic: non byte write [ 372.677092][T10427] netlink: 'syz.0.1245': attribute type 13 has an invalid length. [ 373.128001][T10447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.141189][T10447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.156713][T10447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1252'. [ 373.199485][ T5895] usb 6-1: new full-speed USB device number 71 using dummy_hcd [ 373.362317][ T5895] usb 6-1: unable to get BOS descriptor or descriptor too short [ 373.371181][ T5895] usb 6-1: not running at top speed; connect to a high speed hub [ 373.381096][ T5895] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.391665][ T5895] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 373.404335][ T5895] usb 6-1: string descriptor 0 read error: -22 [ 373.410806][ T5895] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 373.420387][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.437721][ T5895] usb 6-1: 0:2 : does not exist [ 373.512575][ T5950] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 373.521619][ T24] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 373.679416][ T5950] usb 1-1: Using ep0 maxpacket: 32 [ 373.684801][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 373.692298][ T5950] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 373.705373][ T24] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 373.716846][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 373.729556][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 373.740036][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 373.752789][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 373.764964][ T24] usb 4-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 373.775509][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.784602][ T24] usb 4-1: Product: syz [ 373.789160][ T24] usb 4-1: Manufacturer: syz [ 373.794290][ T24] usb 4-1: SerialNumber: syz [ 373.800236][ T5950] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 373.811165][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.819407][ T5950] usb 1-1: Product: syz [ 373.823629][ T5950] usb 1-1: Manufacturer: syz [ 373.828281][ T5950] usb 1-1: SerialNumber: syz [ 373.853920][T10457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.855121][ T5950] usb 1-1: config 0 descriptor?? [ 373.878180][T10457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.041034][ T24] usb 4-1: selecting invalid altsetting 1 [ 374.242382][ T24] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 374.242650][ T24] dvb_usb_lmedm04 4-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 374.290359][ T5950] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 374.298426][ T5950] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 374.305571][ T5950] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 374.312801][ T5950] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 374.319249][ T5950] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 374.326489][ T5950] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 374.333195][ T5950] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 374.340031][ T5950] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 374.346500][ T5950] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 374.353116][ T5950] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 374.360612][ T5950] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 374.367221][ T5950] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 374.373767][ T5950] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 374.380727][ T5950] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 374.388052][ T5950] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 374.395042][ T5950] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 374.401599][ T5950] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 374.408429][ T5950] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 374.415552][ T5950] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 374.421699][ T5950] input input37: Timeout waiting for response from device. [ 374.433858][ T5950] usb 1-1: USB disconnect, device number 11 [ 374.454673][ T5953] usb 4-1: USB disconnect, device number 29 [ 374.552739][T10459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.562450][T10459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.054094][T10470] netlink: 'syz.0.1259': attribute type 2 has an invalid length. [ 375.064333][T10470] netlink: 204732 bytes leftover after parsing attributes in process `syz.0.1259'. [ 375.077280][ T5895] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 375.089923][ T5895] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 375.147598][ T5895] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 375.172091][ T5895] usb 6-1: USB disconnect, device number 71 [ 375.652428][ T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 375.815394][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 375.825850][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.862785][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 375.894044][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 375.906885][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.928525][ T24] usb 1-1: config 0 descriptor?? [ 376.182294][T10493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.193837][T10493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.355450][ T24] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 376.362947][ T24] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 376.371757][ T24] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 376.379040][ T24] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 376.387750][ T24] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 376.396870][ T24] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 376.406988][ T24] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 376.408302][T10493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.418414][ T24] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 376.430648][T10493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.439793][ T24] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 376.449049][ T24] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 376.458156][ T24] HID 045e:07da: Invalid code 65791 type 1 [ 376.464905][ T24] HID 045e:07da: Invalid code 768 type 1 [ 376.471839][ T24] HID 045e:07da: Invalid code 769 type 1 [ 376.477578][ T24] HID 045e:07da: Invalid code 770 type 1 [ 376.484444][ T24] HID 045e:07da: Invalid code 771 type 1 [ 376.490789][ T24] HID 045e:07da: Invalid code 772 type 1 [ 376.496465][ T24] HID 045e:07da: Invalid code 773 type 1 [ 376.502185][ T24] HID 045e:07da: Invalid code 774 type 1 [ 376.508618][ T24] HID 045e:07da: Invalid code 775 type 1 [ 376.514365][ T24] HID 045e:07da: Invalid code 776 type 1 [ 376.527901][ T24] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0023/input/input38 [ 376.610179][ T24] microsoft 0003:045E:07DA.0023: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 376.641021][ T24] usb 1-1: USB disconnect, device number 12 [ 376.669575][ T5953] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 376.714430][T10508] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1271'. [ 376.724814][T10506] fido_id[10506]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 376.726739][T10509] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1271'. [ 376.755894][T10508] usb usb8: usbfs: process 10508 (syz.0.1271) did not claim interface 0 before use [ 376.767492][T10508] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 376.777612][T10509] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 376.787364][T10508] overlayfs: missing 'lowerdir' [ 376.793327][T10509] overlayfs: missing 'lowerdir' [ 376.844065][ T5953] usb 6-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 376.855247][ T5953] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.865113][ T5953] usb 6-1: Product: syz [ 376.870074][ T5953] usb 6-1: Manufacturer: syz [ 376.876395][ T5953] usb 6-1: SerialNumber: syz [ 376.890760][ T5953] usb 6-1: config 0 descriptor?? [ 377.005542][T10515] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1274'. [ 377.169871][ T5950] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 377.324641][T10504] evm: overlay not supported [ 377.347144][ T5950] usb 1-1: unable to get BOS descriptor or descriptor too short [ 377.369367][ T5950] usb 1-1: not running at top speed; connect to a high speed hub [ 377.388403][T10504] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 377.397911][T10504] overlayfs: missing 'lowerdir' [ 377.403643][ T5950] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.419201][ T5950] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 377.437853][ T5953] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 377.452938][ T5950] usb 1-1: string descriptor 0 read error: -22 [ 377.458769][ T5953] asix 6-1:0.0: probe with driver asix failed with error -71 [ 377.466762][ T5950] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 377.476767][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.477753][ T5953] usb 6-1: USB disconnect, device number 72 [ 377.494709][T10524] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 377.520494][ T5950] usb 1-1: 0:2 : does not exist [ 377.901373][T10531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.912724][T10531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.922978][T10531] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1280'. [ 378.028955][T10531] team0: Port device team_slave_0 removed [ 378.503371][T10545] trusted_key: encrypted_key: insufficient parameters specified [ 378.517776][T10548] 9pnet_fd: Insufficient options for proto=fd [ 378.768170][T10557] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1289'. [ 378.867098][T10563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.898597][T10563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.951653][T10557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.983047][T10557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.000924][T10557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.021103][T10557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.034661][T10561] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1289'. [ 379.186896][T10569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1291'. [ 379.210035][T10569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1291'. [ 379.231394][ T5950] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 379.259056][ T5950] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 379.314310][ T5950] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 379.345055][ T5950] usb 1-1: USB disconnect, device number 13 [ 379.495635][T10576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.511304][T10576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.719529][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 379.742512][T10579] netlink: 'syz.5.1294': attribute type 1 has an invalid length. [ 379.869471][ T9] usb 4-1: device descriptor read/64, error -71 [ 379.898293][ T5870] Bluetooth: hci2: unexpected event for opcode 0x0002 [ 379.933600][T10589] netlink: zone id is out of range [ 379.939004][T10589] netlink: zone id is out of range [ 379.996821][T10589] netlink: set zone limit has 4 unknown bytes [ 380.119374][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 380.176814][T10598] syz.4.1301 (10598): drop_caches: 4 [ 380.259430][ T9] usb 4-1: device descriptor read/64, error -71 [ 380.381568][ T9] usb usb4-port1: attempt power cycle [ 380.599470][ T5953] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 380.719429][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 380.740355][ T9] usb 4-1: device descriptor read/8, error -71 [ 380.751828][ T5953] usb 6-1: unable to get BOS descriptor or descriptor too short [ 380.760567][ T5953] usb 6-1: not running at top speed; connect to a high speed hub [ 380.770072][ T5953] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.780448][ T5953] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 380.793015][ T5953] usb 6-1: string descriptor 0 read error: -22 [ 380.799568][ T5953] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 380.809054][ T5953] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.824572][ T5953] usb 6-1: 0:2 : does not exist [ 380.979470][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 381.000050][ T9] usb 4-1: device descriptor read/8, error -71 [ 381.110061][ T9] usb usb4-port1: unable to enumerate USB device [ 381.559447][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 381.711243][ T9] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 381.720554][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.732427][ T9] usb 1-1: config 0 descriptor?? [ 381.744197][ T9] gspca_main: spca508-2.14.0 probing 8086:0110 [ 382.143339][ T9] gspca_spca508: reg_read err -71 [ 382.152068][ T9] gspca_spca508: reg_read err -71 [ 382.157840][ T9] gspca_spca508: reg_read err -71 [ 382.164950][ T9] gspca_spca508: reg_read err -71 [ 382.171269][ T9] gspca_spca508: reg write: error -71 [ 382.177015][ T9] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 382.194253][ T9] usb 1-1: USB disconnect, device number 14 [ 382.212779][T10628] can: request_module (can-proto-0) failed. [ 382.244820][ T5953] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 382.259142][ T5953] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 382.292510][ T5953] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 382.315999][ T5953] usb 6-1: USB disconnect, device number 73 [ 382.411363][T10632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.422504][T10632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.575153][ T30] audit: type=1800 audit(1759054361.284:82): pid=10639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1313" name="bus" dev="overlay" ino=1615 res=0 errno=0 [ 382.955167][T10654] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0) [ 383.030201][ T5953] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 383.201513][ T5953] usb 4-1: config 0 has no interfaces? [ 383.222847][ T5953] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 383.232235][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=28, SerialNumber=0 [ 383.249392][ T5953] usb 4-1: Product: syz [ 383.259416][ T5953] usb 4-1: config 0 descriptor?? [ 383.476034][ T5953] usb 4-1: USB disconnect, device number 34 [ 383.650176][T10676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.678127][T10676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.019707][ T5964] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 384.154825][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.161444][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.191374][ T5964] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.201872][ T5964] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 384.216814][ T5964] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 384.226250][ T5964] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 384.234313][ T5964] usb 6-1: Manufacturer: syz [ 384.243478][ T5964] usb 6-1: config 0 descriptor?? [ 384.299678][ T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 384.416575][T10688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.425545][T10688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.456899][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.474017][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.484878][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 384.499591][T10680] overlay: Unknown parameter 'dont_appraise' [ 384.506022][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 384.516096][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.527862][ T9] usb 4-1: config 0 descriptor?? [ 384.542170][ T5953] usb 6-1: USB disconnect, device number 74 [ 384.568725][T10692] XFS (nbd0): SB validate failed with error -5. [ 384.637357][ T124] block nbd0: Dead connection, failed to find a fallback [ 384.646469][ T124] block nbd0: shutting down sockets [ 384.654377][ T124] blk_print_req_error: 11 callbacks suppressed [ 384.654394][ T124] I/O error, dev nbd0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 384.959383][ T5964] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 384.996409][ T9] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 385.090783][ T5964] usb 1-1: device descriptor read/64, error -71 [ 385.278709][T10719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.287905][T10719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.329480][ T5964] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 385.449481][ T9] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 385.459413][ T5964] usb 1-1: device descriptor read/64, error -71 [ 385.569923][ T5964] usb usb1-port1: attempt power cycle [ 385.601925][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.613066][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.623594][ T9] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 385.632784][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.641044][ C1] plantronics 0003:047F:FFFF.0024: hid_field_extract() called with n (132) > 32! (syz.3.1329) [ 385.645043][ T9] usb 6-1: config 0 descriptor?? [ 385.654533][T10720] kernel read not supported for file /file1 (pid: 10720 comm: syz.3.1329) [ 385.668468][ T30] audit: type=1800 audit(1759054364.374:83): pid=10720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1329" name="file1" dev="mqueue" ino=40271 res=0 errno=0 [ 385.886655][ T5953] usb 4-1: USB disconnect, device number 35 [ 385.931491][ T5964] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 385.970028][ T5964] usb 1-1: device descriptor read/8, error -71 [ 386.081836][ T9] cm6533_jd 0003:0D8C:0022.0025: unknown main item tag 0x0 [ 386.089180][ T9] cm6533_jd 0003:0D8C:0022.0025: item fetching failed at offset 4/5 [ 386.100766][ T9] cm6533_jd 0003:0D8C:0022.0025: parse failed [ 386.107079][ T9] cm6533_jd 0003:0D8C:0022.0025: probe with driver cm6533_jd failed with error -22 [ 386.209407][ T5964] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 386.230002][ T5964] usb 1-1: device descriptor read/8, error -71 [ 386.288551][T10712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.297556][T10712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.339621][ T5964] usb usb1-port1: unable to enumerate USB device [ 386.352712][T10724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.364249][T10724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.374255][ T5964] usb 6-1: USB disconnect, device number 75 [ 386.679396][ T24] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 386.841546][ T24] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.852967][ T24] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.862793][ T24] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 386.875717][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 386.882682][ T24] usb 4-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 386.891841][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.908138][ T24] usb 4-1: config 0 descriptor?? [ 387.091643][T10734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.106385][T10733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.118254][T10733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.134095][T10734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.160868][T10738] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1344'. [ 387.227770][T10740] binder: BC_ACQUIRE_RESULT not supported [ 387.237403][T10740] binder: 10739:10740 ioctl c0306201 200000000580 returned -22 [ 387.306250][T10742] netlink: 'syz.4.1346': attribute type 3 has an invalid length. [ 387.314332][T10742] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1346'. [ 387.325630][T10742] new mount options do not match the existing superblock, will be ignored [ 387.400163][T10745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.414869][T10745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.538411][T10728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.547506][T10728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.561786][T10728] binder: 10727:10728 unknown command 0 [ 387.567943][T10728] binder: 10727:10728 ioctl c0306201 200000000080 returned -22 [ 387.584324][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 387.595793][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 387.606439][ T24] usb 4-1: USB disconnect, device number 36 [ 387.649684][ T10] usb 6-1: new full-speed USB device number 76 using dummy_hcd [ 387.815244][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 387.823783][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 387.833264][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 387.844215][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 387.856076][ T10] usb 6-1: New USB device found, idVendor=0e6b, idProduct=0101, bcdDevice= 0.40 [ 387.865359][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.873947][ T10] usb 6-1: Product: syz [ 387.878238][ T10] usb 6-1: Manufacturer: М [ 387.883118][ T10] usb 6-1: SerialNumber: syz [ 388.115091][ T10] usb 6-1: 0:2 : does not exist [ 388.129396][ T5953] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 388.170112][ T10] usb 6-1: USB disconnect, device number 76 [ 388.191965][T10755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.212586][T10755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.216273][T10759] netlink: 'syz.3.1353': attribute type 1 has an invalid length. [ 388.228522][ T5866] udevd[5866]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 388.230457][T10759] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1353'. [ 388.324191][ T5953] usb 1-1: config 1 has an invalid interface number: 132 but max is 0 [ 388.333066][ T5953] usb 1-1: config 1 has no interface number 0 [ 388.333806][T10764] overlay: filesystem on ./bus is read-only [ 388.340689][ T5953] usb 1-1: config 1 interface 132 has no altsetting 0 [ 388.364366][ T5953] usb 1-1: New USB device found, idVendor=0c45, idProduct=6248, bcdDevice=3d.34 [ 388.375247][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.383922][ T5953] usb 1-1: Product: syz [ 388.389117][ T5953] usb 1-1: Manufacturer: syz [ 388.394954][ T5953] usb 1-1: SerialNumber: syz [ 388.640266][ T5953] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6248 [ 388.647468][ T5953] gspca_sn9c20x: Write register 1000 failed -71 [ 388.654268][ T5953] gspca_sn9c20x: Device initialization failed [ 388.660676][ T5953] gspca_sn9c20x 1-1:1.132: probe with driver gspca_sn9c20x failed with error -71 [ 388.670825][ T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 388.685281][ T5953] usb 1-1: USB disconnect, device number 19 [ 388.705023][T10768] netlink: 'syz.5.1356': attribute type 6 has an invalid length. [ 388.718747][T10768] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1356'. [ 388.809435][ T10] usb 4-1: device descriptor read/64, error -71 [ 388.865451][T10773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.886478][T10773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.049154][T10769] [ 389.049577][ T10] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 389.051525][T10769] ====================================================== [ 389.066100][T10769] WARNING: possible circular locking dependency detected [ 389.073229][T10769] syzkaller #0 Not tainted [ 389.077656][T10769] ------------------------------------------------------ [ 389.084694][T10769] syz.5.1357/10769 is trying to acquire lock: [ 389.090765][T10769] ffff88801bea7a20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 389.101315][T10769] [ 389.101315][T10769] but task is already holding lock: [ 389.108769][T10769] ffff88801bea7988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 389.119169][T10769] [ 389.119169][T10769] which lock already depends on the new lock. [ 389.119169][T10769] [ 389.129662][T10769] [ 389.129662][T10769] the existing dependency chain (in reverse order) is: [ 389.138705][T10769] [ 389.138705][T10769] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 389.146931][T10769] lock_acquire+0x120/0x360 [ 389.151972][T10769] down_write+0x96/0x1f0 [ 389.156839][T10769] kernfs_add_one+0x41/0x520 [ 389.161958][T10769] kernfs_create_dir_ns+0xde/0x130 [ 389.167598][T10769] internal_create_group+0x419/0x1110 [ 389.173501][T10769] cpuhp_invoke_callback+0x445/0x860 [ 389.179503][T10769] cpuhp_issue_call+0x430/0x7a0 [ 389.184884][T10769] __cpuhp_setup_state_cpuslocked+0x3df/0x6c0 [ 389.191568][T10769] __cpuhp_setup_state+0x3f/0x60 [ 389.197054][T10769] do_one_initcall+0x236/0x820 [ 389.202349][T10769] do_initcall_level+0x104/0x190 [ 389.207871][T10769] do_initcalls+0x59/0xa0 [ 389.212726][T10769] kernel_init_freeable+0x334/0x4b0 [ 389.218491][T10769] kernel_init+0x1d/0x1d0 [ 389.223355][T10769] ret_from_fork+0x4bc/0x870 [ 389.228653][T10769] ret_from_fork_asm+0x1a/0x30 [ 389.233944][T10769] [ 389.233944][T10769] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 389.241769][T10769] [ 389.241769][T10769] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 389.249546][T10769] lock_acquire+0x120/0x360 [ 389.254696][T10769] cpus_read_lock+0x42/0x160 [ 389.259910][T10769] static_key_slow_inc+0x12/0x30 [ 389.265399][T10769] tcp_md5_do_add+0x21f/0x3a0 [ 389.270742][T10769] tcp_v4_parse_md5_keys+0x412/0x600 [ 389.276643][T10769] do_tcp_setsockopt+0x11dc/0x1f20 [ 389.282397][T10769] do_sock_setsockopt+0x17c/0x1b0 [ 389.287988][T10769] __x64_sys_setsockopt+0x13f/0x1b0 [ 389.293859][T10769] do_syscall_64+0xfa/0xfa0 [ 389.298976][T10769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.305405][T10769] [ 389.305405][T10769] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 389.313068][T10769] lock_acquire+0x120/0x360 [ 389.318132][T10769] lock_sock_nested+0x48/0x100 [ 389.323521][T10769] inet_shutdown+0x6a/0x390 [ 389.328652][T10769] nbd_mark_nsock_dead+0x2e9/0x560 [ 389.334380][T10769] sock_shutdown+0x15e/0x260 [ 389.339799][T10769] nbd_config_put+0x342/0x790 [ 389.345059][T10769] nbd_release+0xfe/0x140 [ 389.349928][T10769] bdev_release+0x536/0x650 [ 389.354979][T10769] blkdev_release+0x15/0x20 [ 389.360038][T10769] __fput+0x44c/0xa70 [ 389.364569][T10769] task_work_run+0x1d4/0x260 [ 389.369695][T10769] do_exit+0x6b5/0x2300 [ 389.374382][T10769] do_group_exit+0x21c/0x2d0 [ 389.379498][T10769] get_signal+0x1285/0x1340 [ 389.384539][T10769] arch_do_signal_or_restart+0xa0/0x790 [ 389.390613][T10769] exit_to_user_mode_loop+0x72/0x130 [ 389.396427][T10769] do_syscall_64+0x2bd/0xfa0 [ 389.401549][T10769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.407975][T10769] [ 389.407975][T10769] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 389.415645][T10769] lock_acquire+0x120/0x360 [ 389.420690][T10769] __mutex_lock+0x187/0x1350 [ 389.425826][T10769] nbd_queue_rq+0x257/0xf10 [ 389.430869][T10769] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 389.436948][T10769] __blk_mq_sched_dispatch_requests+0x350/0x1570 [ 389.443805][T10769] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 389.450316][T10769] blk_mq_run_work_fn+0x16c/0x300 [ 389.455874][T10769] process_scheduled_works+0xae1/0x17b0 [ 389.461951][T10769] worker_thread+0x8a0/0xda0 [ 389.467073][T10769] kthread+0x711/0x8a0 [ 389.471700][T10769] ret_from_fork+0x4bc/0x870 [ 389.476820][T10769] ret_from_fork_asm+0x1a/0x30 [ 389.482115][T10769] [ 389.482115][T10769] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 389.489334][T10769] lock_acquire+0x120/0x360 [ 389.494367][T10769] __mutex_lock+0x187/0x1350 [ 389.499488][T10769] nbd_queue_rq+0xc8/0xf10 [ 389.504463][T10769] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 389.510534][T10769] __blk_mq_sched_dispatch_requests+0x350/0x1570 [ 389.517390][T10769] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 389.523918][T10769] blk_mq_run_work_fn+0x16c/0x300 [ 389.529584][T10769] process_scheduled_works+0xae1/0x17b0 [ 389.535681][T10769] worker_thread+0x8a0/0xda0 [ 389.540811][T10769] kthread+0x711/0x8a0 [ 389.545430][T10769] ret_from_fork+0x4bc/0x870 [ 389.550562][T10769] ret_from_fork_asm+0x1a/0x30 [ 389.555874][T10769] [ 389.555874][T10769] -> #4 (set->srcu){.+.+}-{0:0}: [ 389.563017][T10769] lock_sync+0xba/0x160 [ 389.567715][T10769] __synchronize_srcu+0x96/0x3a0 [ 389.573200][T10769] elevator_switch+0x12b/0x640 [ 389.578600][T10769] elevator_change+0x315/0x4c0 [ 389.583906][T10769] elevator_set_default+0x186/0x260 [ 389.589640][T10769] blk_register_queue+0x34e/0x3f0 [ 389.595199][T10769] __add_disk+0x677/0xd50 [ 389.600058][T10769] add_disk_fwnode+0xfc/0x480 [ 389.605279][T10769] nbd_dev_add+0x717/0xae0 [ 389.610232][T10769] nbd_init+0x168/0x1f0 [ 389.614924][T10769] do_one_initcall+0x236/0x820 [ 389.620214][T10769] do_initcall_level+0x104/0x190 [ 389.625692][T10769] do_initcalls+0x59/0xa0 [ 389.630546][T10769] kernel_init_freeable+0x334/0x4b0 [ 389.636306][T10769] kernel_init+0x1d/0x1d0 [ 389.641192][T10769] ret_from_fork+0x4bc/0x870 [ 389.646312][T10769] ret_from_fork_asm+0x1a/0x30 [ 389.651607][T10769] [ 389.651607][T10769] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 389.659433][T10769] lock_acquire+0x120/0x360 [ 389.664482][T10769] __mutex_lock+0x187/0x1350 [ 389.669605][T10769] elevator_change+0x1e5/0x4c0 [ 389.674900][T10769] elevator_set_none+0x42/0xb0 [ 389.680201][T10769] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 389.686560][T10769] nbd_start_device+0x17f/0xb10 [ 389.691986][T10769] nbd_genl_connect+0x135b/0x18f0 [ 389.697607][T10769] genl_family_rcv_msg_doit+0x215/0x300 [ 389.703720][T10769] genl_rcv_msg+0x60e/0x790 [ 389.708771][T10769] netlink_rcv_skb+0x208/0x470 [ 389.714071][T10769] genl_rcv+0x28/0x40 [ 389.718796][T10769] netlink_unicast+0x82f/0x9e0 [ 389.724099][T10769] netlink_sendmsg+0x805/0xb30 [ 389.729396][T10769] __sock_sendmsg+0x21c/0x270 [ 389.734636][T10769] ____sys_sendmsg+0x505/0x830 [ 389.739935][T10769] ___sys_sendmsg+0x21f/0x2a0 [ 389.745229][T10769] __x64_sys_sendmsg+0x19b/0x260 [ 389.750876][T10769] do_syscall_64+0xfa/0xfa0 [ 389.755904][T10769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.762322][T10769] [ 389.762322][T10769] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 389.771295][T10769] lock_acquire+0x120/0x360 [ 389.776343][T10769] blk_alloc_queue+0x538/0x620 [ 389.781731][T10769] __blk_mq_alloc_disk+0x15c/0x340 [ 389.787381][T10769] nbd_dev_add+0x46c/0xae0 [ 389.792375][T10769] nbd_init+0x168/0x1f0 [ 389.797076][T10769] do_one_initcall+0x236/0x820 [ 389.802393][T10769] do_initcall_level+0x104/0x190 [ 389.807880][T10769] do_initcalls+0x59/0xa0 [ 389.812740][T10769] kernel_init_freeable+0x334/0x4b0 [ 389.818468][T10769] kernel_init+0x1d/0x1d0 [ 389.823345][T10769] ret_from_fork+0x4bc/0x870 [ 389.828482][T10769] ret_from_fork_asm+0x1a/0x30 [ 389.833782][T10769] [ 389.833782][T10769] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 389.841012][T10769] lock_acquire+0x120/0x360 [ 389.846137][T10769] fs_reclaim_acquire+0x72/0x100 [ 389.851601][T10769] kmem_cache_alloc_noprof+0x45/0x6e0 [ 389.857504][T10769] __kernfs_iattrs+0xd9/0x320 [ 389.862713][T10769] kernfs_iop_setattr+0xea/0x3f0 [ 389.868193][T10769] notify_change+0xc1a/0xf40 [ 389.873310][T10769] do_truncate+0x1a4/0x220 [ 389.878256][T10769] path_openat+0x306c/0x3830 [ 389.883458][T10769] do_filp_open+0x1fa/0x410 [ 389.888526][T10769] do_sys_openat2+0x121/0x1c0 [ 389.893737][T10769] __x64_sys_openat+0x138/0x170 [ 389.899135][T10769] do_syscall_64+0xfa/0xfa0 [ 389.904174][T10769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.910592][T10769] [ 389.910592][T10769] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 389.919118][T10769] validate_chain+0xb9b/0x2140 [ 389.924413][T10769] __lock_acquire+0xab9/0xd20 [ 389.929643][T10769] lock_acquire+0x120/0x360 [ 389.934773][T10769] down_write+0x96/0x1f0 [ 389.939582][T10769] kernfs_unlink_sibling+0x71/0x180 [ 389.945480][T10769] __kernfs_remove+0x353/0x570 [ 389.950784][T10769] kernfs_remove_by_name_ns+0xaf/0x130 [ 389.957027][T10769] sysfs_unmerge_group+0xd4/0x140 [ 389.962593][T10769] dpm_sysfs_remove+0x76/0xd0 [ 389.967918][T10769] device_del+0x251/0x8e0 [ 389.972966][T10769] device_destroy+0xa6/0x160 [ 389.978183][T10769] tty_unregister_device+0x69/0x170 [ 389.983935][T10769] gsm_cleanup_mux+0x48b/0x980 [ 389.989256][T10769] gsmld_close+0x48/0x120 [ 389.994121][T10769] tty_ldisc_kill+0xa3/0x1a0 [ 389.999247][T10769] tty_ldisc_release+0x1a4/0x200 [ 390.004747][T10769] tty_release_struct+0x2a/0xd0 [ 390.010130][T10769] tty_release+0xcb0/0x1640 [ 390.015161][T10769] __fput+0x44c/0xa70 [ 390.019753][T10769] task_work_run+0x1d4/0x260 [ 390.024958][T10769] exit_to_user_mode_loop+0xe9/0x130 [ 390.030862][T10769] do_syscall_64+0x2bd/0xfa0 [ 390.036096][T10769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.042517][T10769] [ 390.042517][T10769] other info that might help us debug this: [ 390.042517][T10769] [ 390.052927][T10769] Chain exists of: [ 390.052927][T10769] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 390.052927][T10769] [ 390.067478][T10769] Possible unsafe locking scenario: [ 390.067478][T10769] [ 390.075127][T10769] CPU0 CPU1 [ 390.080507][T10769] ---- ---- [ 390.085883][T10769] lock(&root->kernfs_rwsem); [ 390.090710][T10769] lock(cpuhp_state_mutex); [ 390.097921][T10769] lock(&root->kernfs_rwsem); [ 390.105227][T10769] lock(&root->kernfs_iattr_rwsem); [ 390.110526][T10769] [ 390.110526][T10769] *** DEADLOCK *** [ 390.110526][T10769] [ 390.118688][T10769] 4 locks held by syz.5.1357/10769: [ 390.123894][T10769] #0: ffff8880308920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_release+0x5c/0x200 [ 390.133762][T10769] #1: ffff8880308930a0 (&tty->ldisc_sem/1){+.+.}-{0:0}, at: tty_ldisc_release+0x80/0x200 [ 390.143725][T10769] #2: ffff888058a7f0b0 (&gsm->mutex){+.+.}-{4:4}, at: gsm_cleanup_mux+0xbf/0x980 [ 390.152982][T10769] #3: ffff88801bea7988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 390.163715][T10769] [ 390.163715][T10769] stack backtrace: [ 390.169663][T10769] CPU: 1 UID: 0 PID: 10769 Comm: syz.5.1357 Not tainted syzkaller #0 PREEMPT(full) [ 390.169683][T10769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 390.169695][T10769] Call Trace: [ 390.169702][T10769] [ 390.169709][T10769] dump_stack_lvl+0x189/0x250 [ 390.169739][T10769] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.169771][T10769] ? __pfx__printk+0x10/0x10 [ 390.169793][T10769] ? print_lock_name+0xde/0x100 [ 390.169816][T10769] print_circular_bug+0x2ee/0x310 [ 390.169841][T10769] check_noncircular+0x134/0x160 [ 390.169865][T10769] validate_chain+0xb9b/0x2140 [ 390.169896][T10769] __lock_acquire+0xab9/0xd20 [ 390.169917][T10769] ? kernfs_unlink_sibling+0x71/0x180 [ 390.169934][T10769] lock_acquire+0x120/0x360 [ 390.169952][T10769] ? kernfs_unlink_sibling+0x71/0x180 [ 390.169975][T10769] down_write+0x96/0x1f0 [ 390.169997][T10769] ? kernfs_unlink_sibling+0x71/0x180 [ 390.170015][T10769] ? __pfx_down_write+0x10/0x10 [ 390.170035][T10769] ? kernfs_root+0x1c/0x230 [ 390.170059][T10769] ? kernfs_root+0x1c/0x230 [ 390.170083][T10769] ? kernfs_root+0x1ea/0x230 [ 390.170107][T10769] kernfs_unlink_sibling+0x71/0x180 [ 390.170127][T10769] __kernfs_remove+0x353/0x570 [ 390.170145][T10769] kernfs_remove_by_name_ns+0xaf/0x130 [ 390.170164][T10769] sysfs_unmerge_group+0xd4/0x140 [ 390.170181][T10769] dpm_sysfs_remove+0x76/0xd0 [ 390.170201][T10769] device_del+0x251/0x8e0 [ 390.170220][T10769] ? __pfx_device_match_devt+0x10/0x10 [ 390.170241][T10769] ? __pfx_device_del+0x10/0x10 [ 390.170261][T10769] device_destroy+0xa6/0x160 [ 390.170278][T10769] ? __pfx_device_destroy+0x10/0x10 [ 390.170295][T10769] ? __pfx___timer_delete_sync+0x10/0x10 [ 390.170311][T10769] ? tty_ldisc_release+0x80/0x200 [ 390.170333][T10769] tty_unregister_device+0x69/0x170 [ 390.170356][T10769] gsm_cleanup_mux+0x48b/0x980 [ 390.170381][T10769] ? __pfx_gsm_cleanup_mux+0x10/0x10 [ 390.170403][T10769] ? tty_ldisc_release+0x80/0x200 [ 390.170427][T10769] gsmld_close+0x48/0x120 [ 390.170448][T10769] tty_ldisc_kill+0xa3/0x1a0 [ 390.170468][T10769] tty_ldisc_release+0x1a4/0x200 [ 390.170488][T10769] tty_release_struct+0x2a/0xd0 [ 390.170509][T10769] tty_release+0xcb0/0x1640 [ 390.170531][T10769] ? evm_file_release+0x108/0x1e0 [ 390.170556][T10769] ? __pfx_tty_release+0x10/0x10 [ 390.170574][T10769] __fput+0x44c/0xa70 [ 390.170601][T10769] task_work_run+0x1d4/0x260 [ 390.170619][T10769] ? __pfx_task_work_run+0x10/0x10 [ 390.170642][T10769] ? exit_to_user_mode_loop+0x40/0x130 [ 390.170662][T10769] exit_to_user_mode_loop+0xe9/0x130 [ 390.170680][T10769] do_syscall_64+0x2bd/0xfa0 [ 390.170699][T10769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.170715][T10769] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 390.170731][T10769] ? clear_bhb_loop+0x60/0xb0 [ 390.170843][T10769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.170868][T10769] RIP: 0033:0x7f93a438eec9 [ 390.170888][T10769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.170905][T10769] RSP: 002b:00007ffd52b8bd18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 390.170925][T10769] RAX: 0000000000000000 RBX: 00007f93a45e7da0 RCX: 00007f93a438eec9 [ 390.170939][T10769] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 390.170951][T10769] RBP: 00007f93a45e7da0 R08: 0000000000000080 R09: 0000000752b8c00f [ 390.170963][T10769] R10: 00000000003ffd5c R11: 0000000000000246 R12: 000000000005f1aa [ 390.170975][T10769] R13: 00007f93a45e6090 R14: ffffffffffffffff R15: 00007ffd52b8be30 [ 390.170997][T10769] [ 390.579962][ T10] usb 4-1: device descriptor read/64, error -71 [ 390.690919][ T10] usb usb4-port1: attempt power cycle [ 391.029452][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 391.049774][ T10] usb 4-1: device descriptor read/8, error -71 [ 391.289494][ T10] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 391.310380][ T10] usb 4-1: device descriptor read/8, error -71 [ 391.419721][ T10] usb usb4-port1: unable to enumerate USB device [ 394.393755][ T1211] usb 1-1: [UEAGLE-ATM] firmware is not available