last executing test programs: 13m7.757325174s ago: executing program 0 (id=57): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x0, &(0x7f0000000140)}, 0x8) 13m6.902540685s ago: executing program 0 (id=58): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x0, "f3c4920000000000000000a9bfa1b42c000004002231a110000000015900", 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 13m3.153244359s ago: executing program 0 (id=64): r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_DQEVENT(r3, 0x80885659, 0x0) 13m0.538950736s ago: executing program 0 (id=71): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x48, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000052}, 0x4008) 12m59.236462112s ago: executing program 0 (id=75): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000180), 0x0, 0x20000) ioctl$HIDIOCGNAME(r1, 0x80404806, 0x0) 12m57.629014081s ago: executing program 0 (id=82): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) syz_open_dev$sndpcmc(0x0, 0x1ff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) socket$nl_netfilter(0x10, 0x3, 0xc) 12m41.037540842s ago: executing program 32 (id=82): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) syz_open_dev$sndpcmc(0x0, 0x1ff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) socket$nl_netfilter(0x10, 0x3, 0xc) 4m51.890436516s ago: executing program 2 (id=2126): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0x78}, 0x1, 0x2000000}, 0x4050) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000090c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000f1ffffff010000000100000074e0e11bfafe664408b6a5b8cf662263c608c4dc2136fdff13281bc027549b2176f28d4da81a81a3b35443a61c13724629754cd613138aed9562e908ad5ca3c4d96b867f26bfb0eec3f0bf122d6c1484d190599df258d3d3c1bc907f89b88c101e92a995356a2c3c861b817608484db6dc6e4a2bbdad32a7b1ad04cd45e0c1731c08c0320041725fb7a314f9a2b5e2ba51c1656abfe91a", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x800}}], 0x1, 0x800) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r3, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000440)="91f8a9ff9519def28791bbc4173c3d6f357d0272b7319130feaab952ac4703ca", 0x20}, {&(0x7f0000000e80)="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", 0x112}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f00000006c0)="b341fb6dec9d6baff227ce715d28bba280448ea83b64e4ec946efaa25c427594c9a4", 0x22}], 0x2}}], 0x2, 0x2090) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000240)="e1", 0x1, 0x200080c1, &(0x7f0000000400)={0xa, 0x2, 0x3ff, @loopback, 0xffffff1f}, 0x1c) r4 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x30, 0x77, "", [{{0x9, 0x4, 0x0, 0x8, 0xd, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x8, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x1, 0x40}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0xf9, 0x82, 0x7}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000000)={0x2c, &(0x7f0000000140)={0x40, 0x2, 0x28, {0x28, 0x9, "f70ba381030000000000000000cb4fdca0560f920d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000200000000004, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000000c0)={0x13, 0x1, 0x4, "288c6dd856369149a95a2e167d2c7b8dcf4400", 0x494e4f4b}) sendto$inet6(r0, &(0x7f0000000180)='9', 0xfffffffffffffd46, 0x4820, 0x0, 0xffffffffffffff3e) 4m48.432198859s ago: executing program 2 (id=2136): r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) syslog(0xe, 0x0, 0x0) (async) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async, rerun: 64) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 4m47.335824017s ago: executing program 2 (id=2140): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000540)='\x00') r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setreuid(r1, r1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fcdbdf250b00000014000180080003000200000008000300020000001c00018008000100", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00'], 0x44}, 0x1, 0x0, 0x0, 0x4800}, 0x804) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) r5 = socket(0x2, 0x3, 0x6) bind$inet(r5, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x4, 0xc2, 0x4f, 0x40, 0x2, 0x90, 0x1, 0x4, 0x7, 0x8, 0x0, 0x7b9b}, {0xb, 0xa6f2, 0x16, 0x8, 0x9, 0xff, 0x4, 0x1, 0xa, 0x13, 0x5, 0x6, 0x109}, {0x1ff, 0x7, 0xd, 0x10, 0xf8, 0x9, 0x0, 0xfb, 0x4, 0x15, 0x0, 0x2, 0x4}], 0x9}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4], 0xeeee8000, 0x400}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000540)='\x00') (async) socket$alg(0x26, 0x5, 0x0) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) setreuid(r1, r1) (async) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', 0x0}) (async) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fcdbdf250b00000014000180080003000200000008000300020000001c00018008000100", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00'], 0x44}, 0x1, 0x0, 0x0, 0x4800}, 0x804) (async) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) (async) socket(0x2, 0x3, 0x6) (async) bind$inet(r5, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x4, 0xc2, 0x4f, 0x40, 0x2, 0x90, 0x1, 0x4, 0x7, 0x8, 0x0, 0x7b9b}, {0xb, 0xa6f2, 0x16, 0x8, 0x9, 0xff, 0x4, 0x1, 0xa, 0x13, 0x5, 0x6, 0x109}, {0x1ff, 0x7, 0xd, 0x10, 0xf8, 0x9, 0x0, 0xfb, 0x4, 0x15, 0x0, 0x2, 0x4}], 0x9}) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4], 0xeeee8000, 0x400}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) 4m46.411227185s ago: executing program 2 (id=2142): ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f0000000000)={0xf, 0x88}) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000080)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000008c0)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000900)=0x24) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000940)={r3, 0x8000, 0x7, 0x260}, 0x10) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000980)=@in6={0xa, 0x4e21, 0x14, @mcast2, 0x8}, 0x1c, &(0x7f0000000c00)=[{&(0x7f00000009c0)="eb82ea3eeaadd2e450ef5bf22d640e90", 0x10}, {&(0x7f0000000a00)="53530681d76ec1904e5c667e162657adc912a03d8c28432eb9b242b573444d9ca0aa77e70fc76835699d586fc0d67b64bfdd1b17e102893f162719d78eda0cd43e45a37c555fa6937dbf6573e7ff78d2cde142b7b6018fd64b4fd22c749298d6a089741bc62af4c5ec69d8b08482634bb720741185da1b76ce0645524ef014760000e6f7038dca2dd5d3b72500ae77159cca96b9d33c3516d5776e160d6fe6b9fb22fca2c26cc911f468fac48407362ca21efdc6aeb556204e1a2262443e251abdc06306e91645a95327cf63f5813e1041722f995824f8b13c526b012d811dbf376002980236a70a6008c171760937", 0xef}, {&(0x7f0000000b00)="3d32e5b1d9f4fe3d270b43f472be4c8ee44acdac8116bb601247a46111c437c6d1994f6d6d44b08822eed6c00da6d47e7c2aa907abbf51de3043ee7e7d307793cd935ceb5261b0a0cbbd1115ee39f2fe4dace1eee6c1421e7ebe9b3715f8c80d49e680d2d3e0345e38d7b03735e7baa51dbbbc029d72aa7750f15972373b12ce2c80dd36c81a1a5699", 0x89}, {&(0x7f0000000bc0)='d0', 0x2}], 0x4, &(0x7f0000000c40)=[@dstaddrv4={0x18, 0x84, 0x7, @private=0xa010100}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x2, 0x7, 0x8000, 0xfffffffa, 0x7, 0xffffffff, r2}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x552}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x1}}], 0x90, 0x4010}, 0x2) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000d40)={0x14, 0x11, 0x1, {0x2, 0x1, 0x2}}, 0x14) writev(r0, &(0x7f0000000e80)=[{&(0x7f0000000d80)="d577b1e81b471c2bb2544b323f2720bb9e091a2624217473fe", 0x19}, {&(0x7f0000000dc0)="de6cd277ce90dca993002c239fd032fcd049d9eea72c0fdf2d26684cce8f21554263213c9bdd4ffd07e5fff95be3a9e4ff315624ec2dc436a60ed8e58ab63b47456b32b772c659e07b67230e103ca36bed5b4a67abc14d738f183cce3d1f36fdf4546d9443d97798609cd650ca65b85ccae3b78d31edcc8aab468b8c56e2b52fd1bb19ddb54d591023b8afe19bd23e10c604f6b252d2c667b0f92b3aa83c", 0x9e}], 0x2) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000ec0)={0x6, 0xbda, 0xc55, 0x4080, 0xffffffffffffffff}) r6 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000f00)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe, 0x30, 0x80, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x7c, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x9, 0x5, 0xf9}}]}}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x310, 0x3, 0x4, 0x4, 0x10, 0xfc}, 0x19, &(0x7f0000000f80)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x13c550b, 0xf000, 0x6, [0xff00c0, 0xc030]}]}, 0x5, [{0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x425}}, {0x28, &(0x7f0000001000)=@string={0x28, 0x3, "0d2c1f7ac2a7581287027f1e91423793de56ea75e721fd15d57eb693f09997dbfc87900be117"}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0xf8ff}}]}) syz_usb_control_io$printer(r6, &(0x7f00000012c0)={0x14, &(0x7f0000001180)={0x20, 0x30, 0xeb, {0xeb, 0xf, "4a9a496df5e7a3689a28110f0887cb58b65785a7ffcb994994435d311ed834087beec2bac2a005cfec7d043df19c1a07439ce72081453d4737adcb738befdb24630ae405a62aa0a0e9211172cf5627d86cd2c2b7ccd8b079213d6f5640642749847214bcf1936c1fea6260d96b6ffbd8f8f18ebaeedb2b9c4596f5498aabf2d5b0d9387ae26bf11125a81c189194cd41b25f176a21ec4f617a5ca258ec4d9acde310f41d05572aa44836d0a0c9c49862bf11466f24b68f6f42a1be5fe524a107d1ed51437fec1ca5490585c47f1699f822783f5f4a0248cf6980aae196bb72ad53f88bad884f0a764d"}}, &(0x7f0000001280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x448}}}, &(0x7f00000014c0)={0x34, &(0x7f0000001300)={0x0, 0x11, 0x1c, "302ef9fda20a680aacecaea3fd0447f38ef57602838eac6e71ceb929"}, &(0x7f0000001340)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001380)={0x0, 0x8, 0x1, 0xf7}, &(0x7f00000013c0)={0x20, 0x0, 0x68, {0x66, "e24687e92e2ae2b28e889bb87dadeecf2fa8c72926d9204067de9d0dff2377cc16163556af3886013dce9b2004d125c0c74478a9d6a507b72844911660d9f632bc93b46b6f25fab65e2634c4fe7cbec33730f5bdbcb6e0e28f6e38d5e1659d3568663b7c0921"}}, &(0x7f0000001440)={0x20, 0x1, 0x1, 0x1c}, &(0x7f0000001480)={0x20, 0x0, 0x1, 0x8}}) r7 = syz_open_dev$vim2m(&(0x7f0000001500), 0x5, 0x2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000001540), &(0x7f0000001580)=0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000015c0)={0x3, 0x4, 0x100000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) syz_usb_ep_read(r6, 0x5, 0x58, &(0x7f0000001600)=""/88) r8 = fcntl$dupfd(r5, 0x406, r7) ioctl$TUNSETLINK(r8, 0x400454cd, 0x33f) ioctl$XFS_IOC_FSGROWFSLOG(r8, 0x4008586f, &(0x7f0000001680)={0x2, 0x4}) r9 = syz_pidfd_open(0x0, 0x0) readahead(r9, 0x1000, 0x5) ioctl$XFS_IOC_EXCHANGE_RANGE(r1, 0x40285881, &(0x7f00000016c0)={r1, 0x0, 0x6, 0xfc77, 0x2, 0x1}) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r1, 0x40106e8c, &(0x7f0000001700)=[0x100000000, 0x1]) r10 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) pwrite64(r0, &(0x7f0000001780)="14bc7020c73a93ebfac20129cd0fc5ff53c80310b3751c181268a8f45617a16d2cd81e5ff1de0a68bc81222c824b17bc1e79f0b9a0aa5a91c12501b949330d587995be15af23cc5d5f87527aaf6a5716ab4d361db3ed6f9b8f4bf588eeda42b5c4577070c605669a908f7d20c95f0720757c14bbe7a8e80bd44fe4b3363e4bf8dc5a47bdcecf186db1bead4077a56a3178e10246fff7200c676fa16b17037192b4692c14ebd6643ce036eea3d84f2e7100c9e558cd47836fcdb2fdf25e67fc74e413fccfd744dc9f0d1464a8b2b9976a31c6153ff05d67120cb5807f936f87c7ffd4755d19756873cf01a5", 0xeb, 0x2) r11 = accept$alg(r10, 0x0, 0x0) sendmsg$alg(r11, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001880)="59ff9aebc49a13559da3450cd945e881bb296ac952f4e9e540bba7a01eb29994e5297fdd4a064f276e6aa6b97ff5af2f2884c69bd559f01f7347bd81d0018450c37eb9b524b959070ed7bbf3d9ae9f8b2197b847386b2038f83abb6ef294530dd0f7b23105f8fc36ce7c1daeda45a0d74aedbba15f18abbf5862440e9c562c9eb64c35f0760945cbfaff75ff6b41cc40e6c0fd1cbf955e29ada7b9c41854f076b865b38a", 0xa4}], 0x1, &(0x7f0000001980)=[@assoc={0x18, 0x117, 0x4, 0x8b}], 0x18, 0x1}, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x110, r7, 0xa803e000) connect$tipc(r10, &(0x7f0000001a00)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x2}}, 0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r10, 0x84, 0x75, &(0x7f0000001a40)={r4, 0x3f5}, 0x8) 4m44.406861801s ago: executing program 2 (id=2145): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000002) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x20) copy_file_range(r0, 0x0, r0, &(0x7f0000000000)=0x100000001, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x6f5a775c, 0x7, {0xffffffffffffffff}, {0x0}, 0x4, 0x9}) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000680)=@loop={'/dev/loop', 0x0}, r1, 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x172f, 0x502, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x2d, {0x9, 0x21, 0x9, 0x5, 0x1, {0x22, 0x2d8}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x75, 0x1, 0x15}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x30, 0x1}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0xea, 0xc, 0x2, 0xff, 0x3}, 0x6e, &(0x7f0000000200)={0x5, 0xf, 0x6e, 0x4, [@wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0x7, 0x2, 0x2, 0x7}, @wireless={0xb, 0x10, 0x1, 0x8, 0x60, 0x2, 0x6, 0x2, 0xf8}, @generic={0x48, 0x10, 0x4, "e92d01f90e85a234c0b84fd101523d535468c27c551bc4819b691ad630e1afc64837601039c55134397cd79b5fe0db3c9b7a11b870e24987bd9bc89571ea61d3e2bab70e98"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x25, 0x6, 0xa0, 0x1, 0x8}]}, 0x1, [{0x7e, &(0x7f0000000280)=@string={0x7e, 0x3, "731e257ddcf6ba3680da1a4a5788245cd4c1763cbee61f644462932ca7017df9edb7af2dd3fcd14f921d341570d3088ae9c23677f82dcc33254beb63aa964403c884a42a367edf40a01af4791bd2a25a464915e29422bd0d988c127938fb105e364010e72436888b9698eaa25113938e8addf1f12b534e331d6835a2"}}]}) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000100)={0x4, 0x7b040179, 0x2, @stepwise={0x4, 0x7, 0xe, 0x2, 0x6, 0x641}}) 4m41.260306867s ago: executing program 2 (id=2155): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)={0x5c, 0x0, 0x1, 0x70bd28, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0x40, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}]}, 0x5c}}, 0x4000040) write$tun(r0, &(0x7f0000001280)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@tcp={0xe, 0x6, "9e76ec", 0x14, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {{0x4e22, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x4, 0x800, 0x0, 0x3}}}}}}, 0x4a) syz_usb_connect$uac2(0x3, 0x9d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x644, 0x800f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0x7, 0x60, 0xb, {0x8, 0xb, 0x1, 0x1, 0x1, 0xff, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0x3, 0x15, 0x7}, [@output_terminal={0xc, 0x24, 0x3, 0x5, 0x403, 0x5d, 0x2, 0x0, 0x87, 0x20}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x3e}, @as_header={0x10, 0x24, 0x1, 0x5, 0xc4, 0x3, 0x3, 0x3, 0x9, 0xcd}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0xc, 0xc, {0x8, 0x25, 0x1, 0x83, 0x33, 0x2, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x4, 0x1, 0xf3, {0x8, 0x25, 0x1, 0x3, 0xc, 0x0, 0x8001}}}}}}}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) 4m26.201714325s ago: executing program 33 (id=2155): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)={0x5c, 0x0, 0x1, 0x70bd28, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0x40, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}]}, 0x5c}}, 0x4000040) write$tun(r0, &(0x7f0000001280)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@tcp={0xe, 0x6, "9e76ec", 0x14, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {{0x4e22, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x4, 0x800, 0x0, 0x3}}}}}}, 0x4a) syz_usb_connect$uac2(0x3, 0x9d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x644, 0x800f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0x7, 0x60, 0xb, {0x8, 0xb, 0x1, 0x1, 0x1, 0xff, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0x3, 0x15, 0x7}, [@output_terminal={0xc, 0x24, 0x3, 0x5, 0x403, 0x5d, 0x2, 0x0, 0x87, 0x20}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x3e}, @as_header={0x10, 0x24, 0x1, 0x5, 0xc4, 0x3, 0x3, 0x3, 0x9, 0xcd}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0xc, 0xc, {0x8, 0x25, 0x1, 0x83, 0x33, 0x2, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x4, 0x1, 0xf3, {0x8, 0x25, 0x1, 0x3, 0xc, 0x0, 0x8001}}}}}}}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) 3m0.442254716s ago: executing program 4 (id=2483): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000002280)=0x6) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x2ac65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0x400, 0x6a, 0x10001, 0xffffffffffffffff, 0xffffdffffffffffd, 0x8000000007, 0x0, 0xfffffffffffffff8, 0x2, 0x5, 0x1}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 2m57.372505594s ago: executing program 4 (id=2499): r0 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0xc080) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="100029bd7000fc", @ANYRES32=r4, @ANYBLOB="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"], 0x2ac}, 0x1, 0x0, 0x0, 0x40}, 0x8af0a56d13e39705) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f406", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r5, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050505f00ff"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2m57.295716s ago: executing program 4 (id=2500): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="98030000", @ANYRESDEC=r0, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES16=r1, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) io_submit(0x0, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r4) ptrace$peeksig(0x4212, r4, &(0x7f0000000140)={0x0, 0x1}, &(0x7f0000000180)) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000420900010073797a31000000005c000480340001800c0001007061796c6f616400240002800800014000000009080003400000004f080004400000803b0800024000000002240001800a000100726564697200000014000280080002400000001608000140000000130900020073797a3200000000140000001100010000000000000000000500000a"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x10, 0x0, 0x0, 0x4, 0x4}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r6, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x3, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r5, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 2m56.402257992s ago: executing program 4 (id=2505): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) r1 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') readv(r1, &(0x7f0000000300)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2c0000000a0a050000000000000000000ae5ff080900010073797a310000000009000200"], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x6) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901) mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) umount2(&(0x7f0000001880)='./file0/../file0\x00', 0x9) r3 = socket(0x10, 0x803, 0x4) r4 = syz_open_dev$sg(&(0x7f0000000080), 0x403, 0x559140) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req3={0x8, 0xd, 0x7ff, 0x2, 0xc, 0x80, 0x40}, 0x1c) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="141bdf000010", @ANYRES64=r4], 0xb2) 2m55.968859988s ago: executing program 4 (id=2511): mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x6a) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000300)={0x20, r1, 0x831b97362602f4f3, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000841}, 0x4004000) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)={0x20, 0x23}, 0x0, 0x0}) renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) 2m54.530365881s ago: executing program 4 (id=2515): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) r2 = socket(0x21, 0x5, 0x0) r3 = socket(0x9, 0x1, 0x0) r4 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120c1bb067b2010002000000108c0d020140000102030109021200010105600109040015049e6a3ee7b58c8a0af4c5739f0f4a7e7ca2a2001c885bc641834a75"], 0x0) syz_usb_control_io$sierra_net(r4, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4001}}}, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'rti802\x00', [0x100, 0x2, 0x2, 0x4, 0xe, 0x6, 0xe3, 0x6, 0x80008, 0x6, 0x4, 0x1, 0x800208, 0x1, 0x100, 0x101, 0xfffffffb, 0x9, 0x7f, 0x80000007, 0x89, 0x7, 0x6, 0x20001e5b, 0xffffffff, 0xf39c, 0x3, 0x8, 0x26b5, 0xfffffffd, 0x1]}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$sierra_net(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io$uac3(r4, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x63f, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80}], 0x1c) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x2) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r10, 0x5000aea5, 0x0) getsockopt$inet_opts(r7, 0x0, 0x15, 0x0, &(0x7f0000000000)) sendto$inet6(r3, &(0x7f0000000040)='\x00', 0x1, 0x40084, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @local}], 0x10) sendto$inet6(r2, &(0x7f00000001c0)="3251ea260bab561c879700", 0xb, 0x10044000, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}, 0x81}, 0x1c) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000380)={0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="4024da000000da0977aeb629a47a3e788e1e6a082687fee119c3fa6072a66aa3d698be887040552c3b8f38065c2c7ee5c7be5e0dcee0a6b40fdb9c371f32268f2cc88d239c50841d63bfd50e60485c92bad13b60efce1c82c66fe39e24cf68e7fca3e0e18e532301a519d451f0b2d99b1b36a3909c8feca7902df61e9f4c19e41748099a8763a1eeb43f9085bda8f7aa9892815e2400fb5f861d2c83a485d03b4d58d3060aeb3370695d49d746acf8f4dbe604503f4d336605a3ace3aa786aa2b99c495858ba903deaf54555a7a113b252569b6bb1d86ebf465219724ae8b8307ca300ec"], &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="4016f90000005247939de18bced773cdce2c2df2f7dbd0a27c820c770286ba812cdd811291bd3d98a6f32c7ae3b96ec9925affb7be251f7110621d69a5fcd80ebf800812730b77bd49bff26da18c191e07537be0abb3cb14da28eba88c3bfb32c0d0888c3658c00a27eecd55ba5ffa28eb99b0385909c75c4f84bc363fe140c38e01db5120504d2d5138b85d3dea08c98c2417bfdc30063e2a15b0731c64f5c6f3c2eee3f357214472b4438e795b0fe10244f07e2900005b4f6f2f8aecb8a4ed0c9235af9e727981289052186f7c4d1faf4aa6d51b901ca96009000ba4b11e559fa9cdc0e81c83f40b15ee28f37bc386f38c4368ad642b25fb89a7bab8a9d9"], &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x1}}) 2m54.20778179s ago: executing program 34 (id=2515): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) r2 = socket(0x21, 0x5, 0x0) r3 = socket(0x9, 0x1, 0x0) r4 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120c1bb067b2010002000000108c0d020140000102030109021200010105600109040015049e6a3ee7b58c8a0af4c5739f0f4a7e7ca2a2001c885bc641834a75"], 0x0) syz_usb_control_io$sierra_net(r4, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4001}}}, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'rti802\x00', [0x100, 0x2, 0x2, 0x4, 0xe, 0x6, 0xe3, 0x6, 0x80008, 0x6, 0x4, 0x1, 0x800208, 0x1, 0x100, 0x101, 0xfffffffb, 0x9, 0x7f, 0x80000007, 0x89, 0x7, 0x6, 0x20001e5b, 0xffffffff, 0xf39c, 0x3, 0x8, 0x26b5, 0xfffffffd, 0x1]}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$sierra_net(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io$uac3(r4, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x63f, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80}], 0x1c) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x2) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r10, 0x5000aea5, 0x0) getsockopt$inet_opts(r7, 0x0, 0x15, 0x0, &(0x7f0000000000)) sendto$inet6(r3, &(0x7f0000000040)='\x00', 0x1, 0x40084, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @local}], 0x10) sendto$inet6(r2, &(0x7f00000001c0)="3251ea260bab561c879700", 0xb, 0x10044000, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}, 0x81}, 0x1c) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000380)={0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="4024da000000da0977aeb629a47a3e788e1e6a082687fee119c3fa6072a66aa3d698be887040552c3b8f38065c2c7ee5c7be5e0dcee0a6b40fdb9c371f32268f2cc88d239c50841d63bfd50e60485c92bad13b60efce1c82c66fe39e24cf68e7fca3e0e18e532301a519d451f0b2d99b1b36a3909c8feca7902df61e9f4c19e41748099a8763a1eeb43f9085bda8f7aa9892815e2400fb5f861d2c83a485d03b4d58d3060aeb3370695d49d746acf8f4dbe604503f4d336605a3ace3aa786aa2b99c495858ba903deaf54555a7a113b252569b6bb1d86ebf465219724ae8b8307ca300ec"], &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x1}}) 8.198581363s ago: executing program 6 (id=3110): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000680)={@void, @val={0x1, 0x4, 0xff, 0x6, 0x4, 0x7}, @eth={@random="414f670bc70e", @random="1450914af06a", @val={@void, {0x8100, 0x5, 0x1}}, {@ipv6={0x86dd, @generic={0x1, 0x6, '\x00\a\x00', 0x8, 0x0, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], "b961880bb3e5de9e"}}}}}}, 0x4c) (async) write$tun(r0, &(0x7f0000000680)={@void, @val={0x1, 0x4, 0xff, 0x6, 0x4, 0x7}, @eth={@random="414f670bc70e", @random="1450914af06a", @val={@void, {0x8100, 0x5, 0x1}}, {@ipv6={0x86dd, @generic={0x1, 0x6, '\x00\a\x00', 0x8, 0x0, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], "b961880bb3e5de9e"}}}}}}, 0x4c) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="d80000002000811f4e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b00010001000b0904c80201030102030905d8"], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x10002, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x38, &(0x7f00000000c0)=0x5, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r5, &(0x7f0000005bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f00000005c0)={0x3, 0xa6ad, 0x5, 0x3}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000001180)='attr\x00') readv(r6, 0x0, 0x0) (async) readv(r6, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x7, @remote, 0x1}], 0x1c) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x7, @remote, 0x1}], 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmsg(r3, &(0x7f0000000580)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/209, 0xd1}, {&(0x7f0000000300)=""/245, 0xf5}, {&(0x7f0000000400)=""/185, 0xb9}], 0x3, &(0x7f0000000500)=""/68, 0x44}, 0x102) (async) recvmsg(r3, &(0x7f0000000580)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/209, 0xd1}, {&(0x7f0000000300)=""/245, 0xf5}, {&(0x7f0000000400)=""/185, 0xb9}], 0x3, &(0x7f0000000500)=""/68, 0x44}, 0x102) 7.692508077s ago: executing program 5 (id=3115): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000340)={r1}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f00000001c0)=0xfffffffffffffff8, 0x8) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) (async) r5 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x240000) ftruncate(r5, 0xd63) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r4, @ANYBLOB="05"], 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newsa={0x234, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf}, {@in=@broadcast, 0x0, 0x32}, @in=@empty, {0xfffffffffffffffe, 0x0, 0x0, 0x1ffffffe, 0x1, 0x2, 0x0, 0x4}, {0x2, 0x0, 0x80000000}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x144, 0x2, {{'cbc(serpent)\x00'}, 0x7e0, "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"}}]}, 0x234}, 0x1, 0x0, 0x0, 0x40}, 0x77c1816f4f559e4e) 6.707572262s ago: executing program 5 (id=3119): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x48000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x803, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) r5 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a050e0300000000000109022d0001000080120904000601030003000921060003012200000006022e"], 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040029bd7000fddbdf25190000003800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020065727375616e300000000000000000000800030002002000240001800800030001000000080000000000000800030000000000001900000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x45}, 0x40091) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = syz_open_dev$video(&(0x7f00000030c0), 0x1ec, 0x18003) ioctl$VIDIOC_CROPCAP(r6, 0xc02c563a, &(0x7f0000003100)={0x9, {0x4, 0x61e8, 0x4, 0x1000}, {0x9, 0x7}, {0x9, 0x2}}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40f43, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0x3, 0x2) r10 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r10, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x6}, 0x10) listen(r10, 0x0) r11 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)=0x0) timer_settime(r12, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) accept4$x25(r10, 0x0, 0x0, 0x80800) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) 4.717549088s ago: executing program 6 (id=3126): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) preadv2(r0, &(0x7f00000015c0)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, 0x101, 0x1, 0xe) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x5304, 0xe, 0x1, 0x20, 0xb, 0x1}, 0x30, 0x3) quotactl_fd$Q_SYNC(r1, 0xffffffff80000100, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9f2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) syz_usb_connect(0x1, 0x76, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x7, 0xb4, 0xc6, 0x8, 0x2955, 0x1001, 0xdab2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x1, 0xc3, 0x3, 0x0, 0xb0, "", [{{0x9, 0x4, 0x99, 0x2, 0x0, 0x72, 0x27, 0x52, 0x8, [@uac_as={[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x7f, 0xa, 0x0, "5c749c03c043a0"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xb, 0x4, 0xc}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x1000, 0x2, 0xff}]}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, '\n'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x2, 0xfff8}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@acm={0x4, 0x24, 0x2, 0xc}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xf}, @dmm={0x7, 0x24, 0x14, 0x101, 0x5}]}]}}]}}]}}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x5d, 0x0}, {0x0, 0x0}]}) 3.416054066s ago: executing program 6 (id=3131): r0 = syz_open_dev$radio(&(0x7f0000000140), 0x1, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000440)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='illinois', 0x8) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000c80)='./file0\x00', 0x141040, 0x6c) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)={[&(0x7f0000000280)='/dev/radio#\x00', &(0x7f00000002c0)='.\\\\\x00'], 0x20}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4040801) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) connect$tipc(r2, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e20, 0x3}}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r5, 0x3ba0, &(0x7f0000000200)={0x48, 0xa, r7, 0x0, r6}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000100)) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x17ea7000) 3.294129467s ago: executing program 5 (id=3132): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="d8000000150081044e81f782db44b9040a1d080206000000040000a118000200ff05000000003db577c29efc260f2ff0d2339dcf780e1208000f0100810401a80016eaa408080001005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d6806f94007134cf6ee0fbde73ece08000a0e408e8d8ef075c0100000000000000cb090000001fb79143a25e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730516a4853f52eb4edbb57a50258cca9e0000d50900ce81b341139fe3cd4032e8edacae", 0xcc}, {&(0x7f00000001c0)="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", 0xfd}, {&(0x7f0000000540)="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", 0x106}], 0x3, 0x0, 0x0, 0x7400}, 0x81) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="d8000000150081044e81f782db44b9040a1d080206000000040000a118000200ff05000000003db577c29efc260f2ff0d2339dcf780e1208000f0100810401a80016eaa408080001005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d6806f94007134cf6ee0fbde73ece08000a0e408e8d8ef075c0100000000000000cb090000001fb79143a25e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730516a4853f52eb4edbb57a50258cca9e0000d50900ce81b341139fe3cd4032e8edacae", 0xcc}, {&(0x7f00000001c0)="b7c185f6b23519a06510e36d2a43d1a3b661c85ba1765bbc6c1a7292116a16c8b0b0054f2d2f93a88128908f139ba7857e0965464366fb319bb234c6769a23cbbeee2a4ce49ef19bd7880223917b67768f926be97fb382caa69399acdec3719bd16ddd70b4156a38a23bc01a0769a8adfc1275789d16cacb402eb8544ffd6f105289ee926f45b280e4b53b5659012f189bc0a7d99729275d3aeb78d8f2668aa3ee9d12bd89dcc3caee775d63f6dd4157d7b2890f9617277340bd5252546d792da044d5f93b46f77016e009ec26fc41144eb04d5e6f37876453f79fd05bcdd4260e60b21cef1f5a00682ffa3398c758850b610541341f7d69e610b0b255", 0xfd}, {&(0x7f0000000540)="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", 0x106}], 0x3, 0x0, 0x0, 0x7400}, 0x81) (async) 3.212411832s ago: executing program 6 (id=3133): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x1, 0x8, 0x80, 0xd, 0x10, 0xfed8, 0x2, 0x0, 0x20, 0x1, 0x20, 0x5, &(0x7f0000000080)=[0x7], 0x1, 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c40), r1) r3 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000140)={0x1, 0x81, 0x80001, 0x0}) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000844}, 0x80) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) (async) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x1, 0x8, 0x80, 0xd, 0x10, 0xfed8, 0x2, 0x0, 0x20, 0x1, 0x20, 0x5, &(0x7f0000000080)=[0x7], 0x1, 0x0}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c40), r1) (async) syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) (async) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000140)={0x1, 0x81, 0x80001, 0x0}) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000844}, 0x80) (async) 3.175868688s ago: executing program 5 (id=3134): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000180)=@ethtool_rxnfc={0x2e, 0x6, 0x8, {0x2, @udp_ip6_spec={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x4e21, 0x4e21, 0xf7}, {0x0, @local, 0x6, 0x100, [0x4, 0xe]}, @esp_ip4_spec={@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xc}, 0x83, 0xff}, {0x0, @random="709ecf121258", 0x6, 0x2563, [0xdfc, 0xfff]}, 0x101, 0x3ff}}}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0xa0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, &(0x7f0000000080)={{@hyper, 0xf2}, 0x101, 0x6, 0x3, 0x8000000000000000, 0x9, 0x2, 0x10000, 0x8000}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2c, r3, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa5}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x1, 0x0, 0x0, r7}) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0xc091}, 0x404c085) 3.064582304s ago: executing program 6 (id=3135): r0 = syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030601010405050724040501009c"], 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000100)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0x2}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) (async) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000000000000200fffe240004802000018008000100666962001400028008000240d700000208000140000000090900010073797a30000000000900020073797a3200"], 0x78}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000000000000200fffe240004802000018008000100666962001400028008000240d700000208000140000000090900010073797a30000000000900020073797a3200"], 0x78}}, 0x0) getsockopt$inet_mptcp_buf(r1, 0x11c, 0xf4f422d5faf08caa, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0, 0x0}, 0x0) 2.882441206s ago: executing program 5 (id=3137): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000c40)=ANY=[@ANYBLOB='noswap,mpol=prefer']) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x5) ptrace$peekuser(0x3, r5, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/200, 0xc8}, 0x0, 0x10101, 0x0, {0x2}}) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000040)={0x8}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r8, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 2.787072089s ago: executing program 5 (id=3139): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="581400002d00010000000000ffdbdf25037c000008000180040004803c140280361402800c"], 0x1458}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="40000f000000012721dcfe14c639a500ba15162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="00020c0000000c0002", @ANYBLOB=';'], 0x0, 0x0, 0x0}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x200) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r3, 0x40086e81, &(0x7f0000000840)=0xbf9) r4 = gettid() timer_create(0x4, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = semget$private(0x0, 0x6, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000600)={0x0, 0x0, 0x6, 0x0, '\x00', [{0x8, 0x4498, 0x8000000000000000, 0xffffffffffffffff, 0x5, 0x9}, {0x7, 0x278a, 0x1ff, 0x5, 0x9, 0x1}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) semtimedop(r5, &(0x7f00000003c0)=[{0x4, 0x4, 0x1800}], 0x1, 0x0) semop(r5, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semctl$SETVAL(r5, 0x3, 0x10, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140)=r4, 0x12) r6 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r6, 0xc0945662, &(0x7f0000000280)={0x3, 0x0, '\x00', {0x0, @reserved}}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000480)={0x20, 0x14, 0x27, "6cf330e1e59a938f535f60b66f589b5194dec6bae70ccb2966d9b8a81030f43960a75e6fad7b3a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f00000005c0)='fd', 0x0, r7) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x2) fchdir(r9) open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r10, r10) 2.428214579s ago: executing program 3 (id=3142): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) syz_io_uring_setup(0xf03, &(0x7f0000000240)={0x0, 0x8097, 0x20, 0x0, 0x51}, &(0x7f0000000100), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40014}, 0x40084) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x3, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f08c40f009b27000000f2e10a8e690f3271008000c90f30b80e0000000f23d80f215035800000a0c9b9490300000f60b932c00a00b9730200000f32328fe8587db660602fb92dbf0002e6e6006880000000000000000f30", 0x64}], 0x4dd17ed7c0be0334, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f000043e000/0xa000)=nil, 0xa000, 0x5) 1.985253351s ago: executing program 1 (id=3145): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7fffffff}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x41}, 0x24040000) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086552108cd0c6900556e010203010902120001000000000904"], 0x0) 1.599217097s ago: executing program 3 (id=3146): r0 = socket$inet6(0x10, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) ftruncate(r1, 0x8800000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x2, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_MASK={0x10, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x2c}}, 0x61cd8401ed43905b) r4 = dup3(r3, r2, 0x0) sendfile(r4, r1, 0x0, 0x1000009) fspick(r4, &(0x7f0000000040)='./file0\x00', 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0xfc, 0xffefffff}, {0x16, 0x0, 0x40, 0xfffffffe}]}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) 1.440632631s ago: executing program 3 (id=3147): r0 = syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCNOTTY(r2, 0x5422) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000041000901feffe5fffddbdf25017c00000a0042800c00018006000600800a000004000280080009002d292900"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x20000080) 1.410779391s ago: executing program 3 (id=3148): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x48800) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000000)={0x8}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x1d) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x68, 0x0, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0xfd}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x68}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e22, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x4200003, 0x2, 0x2}) write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r6, 0x3ba0, &(0x7f0000000340)={0x48, 0xa, r8, 0x0, r10}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, r7, 0x0, &(0x7f00002ce000/0x4000)=nil, 0x4000, 0x1020800}) ioctl$IOMMU_HWPT_ALLOC$TEST(r6, 0x3b89, &(0x7f0000000440)={0x28, 0x2, r9, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000400)}) ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f00000000c0)='syz0\x00') sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000002d80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40020040}, 0xc, &(0x7f0000002d40)={&(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0x1710}, 0x1, 0x0, 0x0, 0x40}, 0x48000) 1.346070551s ago: executing program 1 (id=3149): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0xfffffe8b}], 0x1}, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a118001500060014b9c3600e1209000a0044000000a80016000a", 0x35}], 0x1}, 0x4) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x4000042, 0x1, 0x2}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 1.180442723s ago: executing program 6 (id=3150): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x9, 0x0, 0x81, 0xfffffff9, 0xa}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x101600) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004461bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09451c268811000096859fc57a0000000000e07f938a06b19c00000025", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2404c084) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/134, 0x86}, {&(0x7f0000002b80)=""/4085, 0xff5}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000000100)=""/214, 0xd6}, {&(0x7f0000000540)=""/212, 0xd4}], 0x5}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) connect$802154_dgram(r3, &(0x7f0000000200)={0x24, @none={0x0, 0x3}}, 0x14) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000000)={'dt282x\x00', [0x10, 0x1, 0x800, 0x8, 0x3, 0xb2c, 0xd04, 0x4, 0x8, 0x5, 0xf5, 0x0, 0x8, 0x5, 0x0, 0x0, 0x6, 0x7, 0xe8d, 0x7, 0x80000001, 0xaea6d5f, 0xfffff7f0, 0x6, 0x4, 0x6, 0xfffff800, 0x2, 0xff, 0x2, 0xfffffffd, 0x9]}) 1.178580285s ago: executing program 1 (id=3151): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000380)={0x8f, 0x0, 0xa}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f00000000c0)="66b8006800000f23c80f21f86635080000000f23f80f00d166b8519900000f23d00f21f86635000000000f23f80f20e06635400000000f22e02665f30f22e40f0f14a0b806018ed00f0fbd0070bf360f23892e650f32", 0x56}], 0x1, 0x0, 0x0, 0x0) r6 = signalfd4(r4, &(0x7f0000000080)={[0x3ff]}, 0x8, 0x80800) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) connect$can_bcm(r6, &(0x7f0000000480)={0x1d, r7}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000180)="660fb142fcf2ac66660f3801fb66b9550a000066b8a392a3f966ba65ad53240f30ba2100ec0f06baf80c66b8f6ddb38266efbafc0cb8b529ef360f01c2baf80c66b8804c778c66efbafc0c66ed2e0f79bbb900", 0x53}], 0x1, 0x21, 0x0, 0x0) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$printer(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, 0x0, 0x4000000) modify_ldt$write(0x1, &(0x7f0000000040)={0x0, 0x0, 0x4000}, 0x10) ioctl$BTRFS_IOC_ENCODED_WRITE(r3, 0x40809440, &(0x7f0000000200)={&(0x7f00000001c0)=[{&(0x7f0000000140)="9acad90dfd1746dad05f219c3594781c057d820ea29c24d261d9520e0d9b7b6938e616a417967d5457a5fecf20ccb40b9378f6d7130b94513b625c7ecbf02101b32db08cd1b3121f755d702a", 0x4c}], 0x1, 0x0, 0x0, 0x2, 0x0, 0x5, 0x4, 0x2}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 794.926964ms ago: executing program 3 (id=3152): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x40) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0x0) socket(0x1e, 0x5, 0x0) (async) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x1, 0x7, 0x8, 0x4}, 0x10) (async) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x1, 0x7, 0x8, 0x4}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x2) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmmsg$inet6(r3, &(0x7f00000011c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x5, @mcast2, 0x3}, 0x1c, &(0x7f0000001140)=[{&(0x7f0000000080)="ce3b0f4542b3212b35f65b4de9d73453eb6aee1b109f10f6a40a4c827a334963b28ac144b802b7e6091bad9d4e07094e36d778a97b5eaa7adab7f8904f7b110cad01c37d265156faaf8d3e5bfdd6a0d082f3abe87af20a9baa15d40296a19143ca95cb8fd8637b608e82915b5c2998d4f01e8e918f8856332c5e2f9d12d846f3a7289cb91d93c78638c960850909f8669ebf5a97d75004fabd17f48812698af7c5d0afe8c09bd025ff", 0xa9}, {&(0x7f0000000140)="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", 0x1000}], 0x2, &(0x7f0000001180)=[@dstopts={{0x20, 0x29, 0x37, {0x3a, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}, @enc_lim]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}], 0x38}}], 0x1, 0xc4) 732.311397ms ago: executing program 3 (id=3153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="53001000000014"], 0x0, 0x0, 0x0, 0x0}) keyctl$setperm(0x5, r2, 0x151b242d) syz_usb_connect(0x5, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xff4a, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080026bd7000ffdbdf250600000008000100", @ANYRES32=r5, @ANYBLOB="080003004c000000eed169048f71503e5a99e8a8c75639691a566cb7d9374f77146b0d2dbf2587a4851dfce91c7562dd9a568e512281760155c4598906ba0a260c9987f34d43ffb29e3d5a5ffeb631d5b78407e6d3b05ec68364c3d71a5bd17c1c1af2"], 0x24}, 0x1, 0x0, 0x0, 0x44010}, 0x800) read$FUSE(r4, 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x9, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$cgroup2(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000580), 0x1, 0x0) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYRES32=0x0]) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x494100, 0x0) pivot_root(0x0, 0x0) r8 = syz_clone(0x100000, &(0x7f00000008c0)="78917e50496cae1b4ea697b2adafcf83c51b24aa6ad5d6e8d0ed15829042ad6b2dc83530c33e452cc8da2079726ebe4b5e7f63359882d9a91c088589ba2063dad0c2c468e0feb909fb47937d6f9ed69ae18902ccc108a8415df64d95a537f454b2e7b46da19ee8febc8cbda1a5ccbbfaaed3ce61636cc18fd2c0d51bf863ef660316810ca3de401c3ce6bb575e479a24a6b9c56a452742501e792248746b35de5122deb9ef0576a4b539945b4a3a23a61dcf68ef2f0000000000000000", 0xbd, 0x0, 0x0, 0x0) sched_setaffinity(r8, 0x0, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x64000084}, 0xc, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="8c0100002a0000042dbd7000fbdbdf2508000000e000038008002c00", @ANYRES32=r0, @ANYBLOB="b5007600c43cde5e975ec8542240e6093b8c8075ae2c38338d6c73ce329fbaa6ccefd199b2dfa794bcef46674ba67fd270218bacb9312016ea94ed2e987b87ee340e5f2ddec8c1f75eb4fed8d2ce7e1bc90718bfb8803c208ae1b0662bcf95fe10d5823a53f414f1eeb825f3296242767b30e2fc83a6a0b82df3c864315aa0553707e9cb307efe60702d4a46e9277034c6b6ea0223453c547b9de07f7c631a311d4e251307ede087d12d605c6226b75c696a7ba6f6bc18466544fdb0e79000000014005b00fe80000000000000000000", @ANYRESDEC=r0, @ANYBLOB="81c65b4dd9321ecb7d20dfbc1581aae1a207a841ced9a7425dc0227cc222a0c30dcc917aef936ae827a44545e01de4ba58ab4d260bb377a6d302ae4857e204d7971c9f4d8ddff9c2098b755c2fa562421645ad2e2b239cbc4ea2ea0be19c17d72e8ee243ad8d8a4fd8a90facd3dbedaf66990ca7049fd78a9bacac80063bec23553992eb7b3510edaf2a257a18f0dd7bf171ff5236000000"], 0x18c}, 0x1, 0x0, 0x0, 0x40094}, 0x4000000) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) ioctl$KVM_CREATE_VM(r7, 0xae01, 0xd) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRES64, @ANYRES64=r1], 0x6c}}, 0x48090) getsockopt(r7, 0x2, 0x8, &(0x7f0000000600)=""/7, &(0x7f0000000640)=0x7) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4a20, 0x8000, @empty, 0x40}, 0x1c) 600.947074ms ago: executing program 1 (id=3154): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000180)={0x0, 0x0, 0x98, &(0x7f00000001c0)={0xfffffffffffffffc, 0x4000000, 0xb}}) syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000083ef0840e07d6e67db77000000a40902120001000000000904000000ef0101"], 0x0) 93.287176ms ago: executing program 1 (id=3155): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000100)="1c0000005e001f3814584707f9f4ffffff0000000d000000f3f80000", 0x1c) setsockopt$MRT_PIM(r2, 0x0, 0xcf, &(0x7f0000000080), 0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0xff8a, 0x200, 0x6, 0x800}, 0x10) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x162682, 0x0) r4 = dup(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x2441, 0x83) unshare(0x24020400) fdatasync(r5) fallocate(r4, 0x10, 0x0, 0x1062200) 0s ago: executing program 1 (id=3156): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYRES64=r2, @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf252100000008000300", @ANYRES32=r2, @ANYRES8=0x0], 0x30}, 0x1, 0x0, 0x0, 0x14001}, 0x9590f6cc3ea35512) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYRES64=r2, @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf252100000008000300", @ANYRES32=r2, @ANYRES8=0x0], 0x30}, 0x1, 0x0, 0x0, 0x14001}, 0x9590f6cc3ea35512) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0xffffffffffffff5f, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/69, 0x45}], 0x2}, 0x41) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000040000703fcffffff00000100037c"], 0x18}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4, 0x3a04130193785859}, 0xe) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000200a28000200000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x10000) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x10000) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r8, 0xc0bc5310, &(0x7f00000006c0)) setsockopt$inet_int(r4, 0x0, 0x6, &(0x7f0000000440)=0x7, 0x4) socket$packet(0x11, 0x3, 0x300) (async) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f0000000100)="0000000000000000000000008100", 0x12, 0x8040, &(0x7f0000000200)={0x11, 0x17, r10, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) r12 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r12, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqsrc(r12, 0x0, 0x27, &(0x7f00000000c0)={@multicast2, @dev={0xac, 0x14, 0x14, 0xc}, @local}, 0xc) setsockopt$inet_msfilter(r12, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa"], 0x18) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c0006"], 0x70}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000080)={0x9, 0x5, 0x204, 0x670f5bdb, 0x9, 0xd42, 0x200, 0xfae, r13}, 0x20) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c000000a5288f49f5b222296f9cd151ad27a7478150b29c47b14f72be8da4f8e8c112af8979bd43a9bfc02d25b1343475a160dfaf97f6ddf83314a331b956a6e4005c1eab80f813345e46acbdc5fa1fd447961db813bc473823eb41a7b9b3b3542a3d0e41b693b43baacee168c36c2c1a4c6f4484a05eda467fafa880c1058f4e3b6e485c39ee66ea8133a7f53af63671fdd18eb6745432e46552cf6754d028dc3c83383ee2a45b7b3ca76b410f74d5a7d70ca9836c4837376a630dcf8e90466a26079560d70d845b", @ANYRES16=0x0, @ANYBLOB="00032abd7000ffdbdf250100000008002c00b6020000080032000300000008003a0089060000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r13, 0x263}, 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r13, 0x263}, 0x8) kernel console output (not intermixed with test programs): read/8, error -71 [ 806.839638][ T5747] usb usb4-port1: unable to enumerate USB device [ 806.998269][T15373] input: syz1 as /devices/virtual/input/input37 [ 807.444366][ T49] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 807.631104][ T49] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 807.631140][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.631163][ T49] usb 2-1: Product: syz [ 807.631187][ T49] usb 2-1: Manufacturer: syz [ 807.631203][ T49] usb 2-1: SerialNumber: syz [ 807.679823][ T49] usb 2-1: config 0 descriptor?? [ 807.762590][ T49] hub 2-1:0.0: bad descriptor, ignoring hub [ 807.762635][ T49] hub 2-1:0.0: probe with driver hub failed with error -5 [ 807.808572][ T5693] usb 7-1: new low-speed USB device number 18 using dummy_hcd [ 807.989489][ T49] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 807.999120][ T5693] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 807.999156][ T5693] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 807.999181][ T5693] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 807.999213][ T5693] usb 7-1: config 0 interface 0 has no altsetting 0 [ 807.999246][ T5693] usb 7-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 807.999269][ T5693] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.162530][ T49] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 808.163641][ T49] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 808.163709][ T49] usb 2-1: media controller created [ 808.201466][ T5693] usb 7-1: config 0 descriptor?? [ 808.203007][T15384] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 808.280065][ T49] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 808.367813][ T32] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 808.401931][T15393] 9pnet_fd: p9_fd_create_unix (15393): problem connecting socket: ./file0: -111 [ 808.583641][ T32] usb 6-1: config 1 has an invalid interface number: 69 but max is 0 [ 808.583682][ T32] usb 6-1: config 1 has no interface number 0 [ 808.583717][ T32] usb 6-1: config 1 interface 69 has no altsetting 0 [ 808.623430][ T32] usb 6-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=ac.d9 [ 808.623466][ T32] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.623487][ T32] usb 6-1: Product: syz [ 808.623503][ T32] usb 6-1: Manufacturer: syz [ 808.623519][ T32] usb 6-1: SerialNumber: syz [ 808.682946][ T5693] kye 0003:0458:5017.004A: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 808.683532][ T5693] kye 0003:0458:5017.004A: item 0 1 0 8 parsing failed [ 808.707362][ T5693] kye 0003:0458:5017.004A: parse failed [ 808.707446][ T5693] kye 0003:0458:5017.004A: probe with driver kye failed with error -22 [ 808.837860][T15393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.850482][T15393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.896376][ T49] DVB: Unable to find symbol dib7000p_attach() [ 808.896395][ T49] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 808.953052][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.953172][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.023291][ T32] usb 6-1: selecting invalid altsetting 1 [ 809.023319][ T32] comedi comedi5: could not switch to alternate setting 1 [ 809.023336][ T32] usbduxfast 6-1:1.69: driver 'usbduxfast' failed to auto-configure device. [ 809.048585][ T49] rc_core: IR keymap rc-dib0700-rc5 not found [ 809.048606][ T49] Registered IR keymap rc-empty [ 809.049002][ T49] dvb-usb: could not initialize remote control. [ 809.049015][ T49] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 809.112391][ T199] usb 7-1: USB disconnect, device number 18 [ 809.147750][ T32] usb 6-1: USB disconnect, device number 54 [ 809.553480][T15401] IPv6: NLM_F_CREATE should be specified when creating new route [ 810.088429][T15413] binder: 15412:15413 ioctl c0306201 200000000480 returned -14 [ 810.144290][ T5693] usb 7-1: new low-speed USB device number 19 using dummy_hcd [ 810.190021][ T49] usb 2-1: USB disconnect, device number 39 [ 810.325718][ T5693] usb 7-1: Invalid ep0 maxpacket: 16 [ 810.353875][ T49] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 810.472179][ T5693] usb 7-1: new low-speed USB device number 20 using dummy_hcd [ 810.644463][ T5693] usb 7-1: Invalid ep0 maxpacket: 16 [ 810.645131][ T5693] usb usb7-port1: attempt power cycle [ 810.674272][ T4909] Bluetooth: hci3: command 0x0c1a tx timeout [ 810.747667][T12832] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 810.747698][T12832] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 810.984282][ T5693] usb 7-1: new low-speed USB device number 21 using dummy_hcd [ 811.005976][ T5693] usb 7-1: Invalid ep0 maxpacket: 16 [ 811.144275][ T5693] usb 7-1: new low-speed USB device number 22 using dummy_hcd [ 811.166722][ T5693] usb 7-1: Invalid ep0 maxpacket: 16 [ 811.167345][ T5693] usb usb7-port1: unable to enumerate USB device [ 812.105021][T15446] syzkaller1: entered promiscuous mode [ 812.105050][T15446] syzkaller1: entered allmulticast mode [ 812.964329][ T32] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 813.116902][ T32] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 813.116957][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 813.117002][ T32] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 813.117049][ T32] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 813.117074][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.195722][ T32] usb 4-1: config 0 descriptor?? [ 813.196664][T15479] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 813.379887][ T5693] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 813.554009][ T5693] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 813.554061][ T5693] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 813.554091][ T5693] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18277, setting to 1024 [ 813.554121][ T5693] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 813.618319][ T5693] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 813.618355][ T5693] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 813.618378][ T5693] usb 7-1: Manufacturer: syz [ 813.657785][ T32] hid-multitouch 0003:1FD2:6007.004B: unknown main item tag 0x0 [ 813.657826][ T32] hid-multitouch 0003:1FD2:6007.004B: ignoring exceeding usage max [ 813.659197][ T32] hid-multitouch 0003:1FD2:6007.004B: unknown main item tag 0x2 [ 813.693145][ T5693] usb 7-1: config 0 descriptor?? [ 813.699754][T15492] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 813.720879][ T32] hid-multitouch 0003:1FD2:6007.004B: hidraw0: USB HID v0.05 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 813.877158][ T5701] usb 4-1: USB disconnect, device number 11 [ 813.925220][T15501] fido_id[15501]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 814.024324][ T32] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 814.174294][ T32] usb 6-1: Using ep0 maxpacket: 16 [ 814.176896][ T32] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 814.176932][ T32] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 814.176956][ T32] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 814.176999][ T32] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 814.177023][ T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.186906][ T5693] appleir 0003:05AC:8243.004C: unknown main item tag 0x0 [ 814.288879][ T32] usb 6-1: config 0 descriptor?? [ 814.317891][ T5693] appleir 0003:05AC:8243.004C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 814.355737][T12832] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 814.355770][T12832] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 814.374309][ T4909] Bluetooth: hci0: command 0x0c1a tx timeout [ 814.745294][ T32] microsoft 0003:045E:07DA.004D: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 814.745334][ T32] microsoft 0003:045E:07DA.004D: no inputs found [ 814.745349][ T32] microsoft 0003:045E:07DA.004D: could not initialize ff, continuing anyway [ 814.967753][ T5693] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 814.968149][ T5701] usb 6-1: USB disconnect, device number 55 [ 815.091131][T15516] fido_id[15516]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 815.126208][ T5693] usb 4-1: Using ep0 maxpacket: 32 [ 815.129825][ T5693] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 815.129860][ T5693] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.169026][ T5693] usb 4-1: config 0 descriptor?? [ 815.192420][ T5693] gspca_main: sunplus-2.14.0 probing 041e:400b [ 815.566624][ T49] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 815.759984][ T49] usb 2-1: Using ep0 maxpacket: 16 [ 815.779557][ T49] usb 2-1: config 127 has an invalid interface number: 124 but max is 0 [ 815.779589][ T49] usb 2-1: config 127 has no interface number 0 [ 815.779620][ T49] usb 2-1: config 127 interface 124 has no altsetting 0 [ 815.813593][ T49] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 815.813627][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.813657][ T49] usb 2-1: Product: syz [ 815.813674][ T49] usb 2-1: Manufacturer: syz [ 815.813689][ T49] usb 2-1: SerialNumber: syz [ 815.911466][ T5693] gspca_sunplus: reg_w_riv err -110 [ 815.911578][ T5693] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 816.344726][T15529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2742'. [ 816.611910][T15553] netlink: 'syz.6.2745': attribute type 2 has an invalid length. [ 816.626346][ T5701] usb 7-1: USB disconnect, device number 23 [ 816.774317][ T5747] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 816.869193][ T49] usb 2-1: reset high-speed USB device number 40 using dummy_hcd [ 816.960975][ T5747] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 816.961014][ T5747] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 816.961043][ T5747] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 816.961068][ T5747] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 817.016929][ T5747] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 817.016962][ T5747] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.016983][ T5747] usb 6-1: Product: syz [ 817.016997][ T5747] usb 6-1: Manufacturer: syz [ 817.017012][ T5747] usb 6-1: SerialNumber: syz [ 817.081081][ T5747] usb 6-1: config 0 descriptor?? [ 817.236076][ T49] usb 2-1: device descriptor read/64, error -71 [ 817.298844][ T5747] usb 6-1: USB disconnect, device number 56 [ 817.320315][T12832] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 817.320342][T12832] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 817.325263][ T4909] Bluetooth: hci2: command 0x041b tx timeout [ 817.556021][ T49] usb 2-1: reset high-speed USB device number 40 using dummy_hcd [ 817.705303][ T49] usb 2-1: device descriptor read/64, error -71 [ 817.764315][ T5693] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 817.895674][ T5693] usb 7-1: device descriptor read/64, error -71 [ 817.912915][T11538] usb 4-1: USB disconnect, device number 12 [ 817.955856][ T49] usb 2-1: reset high-speed USB device number 40 using dummy_hcd [ 818.015799][ T49] usb 2-1: device descriptor read/8, error -71 [ 818.154539][ T5693] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 818.260340][ T49] usb 2-1: reset high-speed USB device number 40 using dummy_hcd [ 818.286258][ T49] usb 2-1: device descriptor read/8, error -71 [ 818.304372][ T5693] usb 7-1: device descriptor read/64, error -71 [ 818.304490][ T199] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 818.428261][ T5693] usb usb7-port1: attempt power cycle [ 818.456748][ T49] usb 2-1: USB disconnect, device number 40 [ 818.474668][ T199] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 818.474698][ T199] usb 6-1: config 0 has no interface number 0 [ 818.474746][ T199] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 818.474773][ T199] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 818.478642][ T199] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 818.478673][ T199] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 818.478692][ T199] usb 6-1: Manufacturer: syz [ 818.478701][ T199] usb 6-1: SerialNumber: syz [ 818.503895][ T199] usb 6-1: config 0 descriptor?? [ 818.648656][T15570] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 818.693478][T15572] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2749'. [ 818.815408][ T5693] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 818.842376][ T5693] usb 7-1: device descriptor read/8, error -71 [ 818.921703][T15582] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2752'. [ 818.963670][ T199] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 818.980309][ T199] usb 6-1: USB disconnect, device number 57 [ 819.084586][ T5693] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 819.117305][ T5693] usb 7-1: device descriptor read/8, error -71 [ 819.225182][ T5693] usb usb7-port1: unable to enumerate USB device [ 819.584385][ T5693] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 819.714698][ T49] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 819.744270][ T5693] usb 4-1: Using ep0 maxpacket: 8 [ 819.746118][ T5693] usb 4-1: config 5 has an invalid interface number: 161 but max is 0 [ 819.746147][ T5693] usb 4-1: config 5 has no interface number 0 [ 819.746180][ T5693] usb 4-1: config 5 interface 161 has no altsetting 0 [ 819.748436][ T5693] usb 4-1: New USB device found, idVendor=0e8d, idProduct=3329, bcdDevice=ea.30 [ 819.748465][ T5693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.748485][ T5693] usb 4-1: Product: syz [ 819.748498][ T5693] usb 4-1: Manufacturer: syz [ 819.748507][ T5693] usb 4-1: SerialNumber: syz [ 819.795140][ T4909] Bluetooth: hci4: command 0x0c1a tx timeout [ 819.828935][T12832] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 819.828962][T12832] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 819.904402][ T49] usb 2-1: Using ep0 maxpacket: 8 [ 819.910022][ T49] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 819.910055][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.910076][ T49] usb 2-1: Product: syz [ 819.910092][ T49] usb 2-1: Manufacturer: syz [ 819.910107][ T49] usb 2-1: SerialNumber: syz [ 819.967062][ T49] usb 2-1: config 0 descriptor?? [ 819.974499][ T5701] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 820.146811][ T5701] usb 6-1: Using ep0 maxpacket: 32 [ 820.155678][ T5701] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 66, changing to 7 [ 820.155787][ T5701] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 820.170040][ T5701] usb 6-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 820.170072][ T5701] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.170092][ T5701] usb 6-1: Product: syz [ 820.170106][ T5701] usb 6-1: Manufacturer: syz [ 820.170120][ T5701] usb 6-1: SerialNumber: syz [ 820.198541][ T49] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 820.738927][ T5701] usb 6-1: BAAD HEADSET c_chmask mismatch [ 821.488099][ T5701] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 821.535159][ T5701] usb 6-1: USB disconnect, device number 58 [ 821.644424][ T1737] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 821.706216][T12251] udevd[12251]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 821.814325][ T1737] usb 7-1: Using ep0 maxpacket: 32 [ 821.819320][ T1737] usb 7-1: config 0 has an invalid descriptor of length 223, skipping remainder of the config [ 821.819368][ T1737] usb 7-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 821.819494][ T1737] usb 7-1: config 0 interface 0 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 223 [ 821.819525][ T1737] usb 7-1: config 0 interface 0 has no altsetting 0 [ 821.819561][ T1737] usb 7-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 821.819649][ T1737] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.828115][ T49] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 821.905806][ T49] usb 2-1: USB disconnect, device number 41 [ 821.983015][ T1737] usb 7-1: config 0 descriptor?? [ 822.020274][ T1737] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 822.208540][T15612] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2762'. [ 822.652596][ T5693] usb 4-1: USB disconnect, device number 13 [ 822.854546][ T5701] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 822.915168][T15624] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2767'. [ 823.030309][ T5701] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 823.030343][ T5701] usb 2-1: config 0 has no interface number 0 [ 823.030396][ T5701] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 12336, setting to 64 [ 823.033269][ T5701] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 823.033303][ T5701] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 823.033326][ T5701] usb 2-1: Product: syz [ 823.033352][ T5701] usb 2-1: Manufacturer: syz [ 823.033368][ T5701] usb 2-1: SerialNumber: syz [ 823.106319][ T5701] usb 2-1: config 0 descriptor?? [ 823.107262][T15616] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 823.279236][T15629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2768'. [ 823.311176][T15616] netlink: 'syz.1.2764': attribute type 23 has an invalid length. [ 823.789839][ T5701] keyspan 2-1:0.107: Keyspan 4 port adapter converter detected [ 823.790376][ T5701] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 81 [ 823.815143][ T5701] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 1 [ 823.835900][ T5701] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 823.842593][ T5701] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 2 [ 823.880582][ T5701] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 823.883522][ T5701] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 4 [ 823.902854][ T5701] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 823.916315][ T5701] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 6 [ 823.918654][ T5701] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 823.952804][ T5701] usb 2-1: USB disconnect, device number 42 [ 823.990521][ T5701] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 824.015288][ T5701] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 824.022645][ T5701] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 824.053427][ T5701] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 824.066625][ T5701] keyspan 2-1:0.107: device disconnected [ 824.239807][T15643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 824.245441][T15646] fuse: Unknown parameter '' [ 824.395053][ T49] usb 7-1: USB disconnect, device number 28 [ 824.574419][ T5701] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 824.734995][ T5701] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 824.735030][ T5701] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.735054][ T5701] usb 6-1: Product: syz [ 824.735070][ T5701] usb 6-1: Manufacturer: syz [ 824.735086][ T5701] usb 6-1: SerialNumber: syz [ 824.874272][ T49] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 825.036233][ T49] usb 7-1: Using ep0 maxpacket: 32 [ 825.039895][ T49] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 825.039930][ T49] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.082025][ T49] usb 7-1: config 0 descriptor?? [ 825.101932][ T49] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 825.189234][ T5701] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 825.189295][ T5701] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 825.252589][ T5701] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 825.252650][ T5701] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 825.296567][ T5701] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 825.321889][ T5701] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 825.345317][ T5701] usb 6-1: USB disconnect, device number 59 [ 825.429019][ T199] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 825.586416][ T199] usb 2-1: Using ep0 maxpacket: 16 [ 825.589114][ T199] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 825.589145][ T199] usb 2-1: config 0 has no interface number 0 [ 825.589194][ T199] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 825.589227][ T199] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 825.593629][ T199] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 825.593660][ T199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.593682][ T199] usb 2-1: Product: syz [ 825.593697][ T199] usb 2-1: Manufacturer: syz [ 825.593713][ T199] usb 2-1: SerialNumber: syz [ 825.685805][ T199] usb 2-1: config 0 descriptor?? [ 825.687738][T15659] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 825.688839][T15659] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 825.899005][T15659] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 825.900117][T15659] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 826.113005][ T199] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 826.194860][ T10] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 826.240186][ T49] gspca_vc032x: reg_w err -110 [ 826.240279][ T49] gspca_vc032x: I2c Bus Busy Wait 00 [ 826.240294][ T49] gspca_vc032x: I2c Bus Busy Wait 00 [ 826.240304][ T49] gspca_vc032x: I2c Bus Busy Wait 00 [ 826.240315][ T49] gspca_vc032x: I2c Bus Busy Wait 00 [ 826.240324][ T49] gspca_vc032x: I2c Bus Busy Wait 00 [ 826.240335][ T49] gspca_vc032x: I2c Bus Busy Wait 00 [ 826.240345][ T49] gspca_vc032x: I2c Bus Busy Wait 00 [ 826.240355][ T49] gspca_vc032x: I2c Bus Busy Wait 00 [ 826.240365][ T49] gspca_vc032x: I2c Bus Busy Wait 00 [ 826.240375][ T49] gspca_vc032x: I2c Bus Busy Wait 00 [ 826.240386][ T49] gspca_vc032x: I2c Bus Busy Wait 00 [ 826.240395][ T49] gspca_vc032x: I2c Bus Busy Wait 00 [ 826.240405][ T49] gspca_vc032x: I2c Bus Busy Wait 00 [ 826.240414][ T49] gspca_vc032x: I2c Bus Busy Wait 00 [ 826.240424][ T49] gspca_vc032x: I2c Bus Busy Wait 00 [ 826.240434][ T49] gspca_vc032x: I2c Bus Busy Wait 00 [ 826.240443][ T49] gspca_vc032x: I2c Bus Busy Wait 00 [ 826.240452][ T49] gspca_vc032x: I2c Bus Busy Wait 00 [ 826.240489][ T49] gspca_vc032x: Unknown sensor... [ 826.240589][ T49] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 826.386079][T15653] input: syz0 as /devices/virtual/input/input44 [ 826.458770][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 826.458902][ T10] usb 6-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=e4.df [ 826.458930][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.566435][ T10] usb 6-1: config 0 descriptor?? [ 826.584666][ T10] pwc: Philips PCVC690K (Vesta Pro Scan) USB webcam detected. [ 826.665005][ T49] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 826.815283][ T49] usb 4-1: Using ep0 maxpacket: 8 [ 826.835839][ T49] usb 4-1: config 0 has an invalid interface number: 14 but max is 12 [ 826.835871][ T49] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 826.835896][ T49] usb 4-1: config 0 has no interface number 0 [ 826.842086][ T49] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 826.842120][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.842141][ T49] usb 4-1: Product: syz [ 826.842155][ T49] usb 4-1: Manufacturer: syz [ 826.842170][ T49] usb 4-1: SerialNumber: syz [ 826.871299][ T49] usb 4-1: config 0 descriptor?? [ 826.971030][T11802] usb 7-1: USB disconnect, device number 29 [ 826.993375][ T10] pwc: recv_control_msg error -71 req 02 val 2b00 [ 826.994366][ T10] pwc: recv_control_msg error -71 req 02 val 2700 [ 827.008153][ T10] pwc: recv_control_msg error -71 req 04 val 1700 [ 827.008836][ T10] pwc: recv_control_msg error -71 req 02 val 2c00 [ 827.009450][ T10] pwc: recv_control_msg error -71 req 04 val 1000 [ 827.010045][ T10] pwc: recv_control_msg error -71 req 04 val 1300 [ 827.032006][ T10] pwc: recv_control_msg error -71 req 04 val 1400 [ 827.043543][ T10] pwc: recv_control_msg error -71 req 02 val 2000 [ 827.056006][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 827.056927][ T10] pwc: recv_control_msg error -71 req 02 val 2200 [ 827.057945][ T10] pwc: recv_control_msg error -71 req 06 val 0600 [ 827.058707][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 827.059394][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 827.060048][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 827.060716][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 827.061370][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 827.062198][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 827.064674][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 827.113843][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 827.150439][T15679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.161860][T15679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.242172][T15679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.243427][ T10] pwc: Registered as video103. [ 827.268922][T15679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.272967][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input45 [ 827.303769][ T49] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 827.330374][ T10] usb 6-1: USB disconnect, device number 60 [ 827.717347][T15683] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2785'. [ 827.717374][T15683] ksmbd: Unknown IPC event: 0, ignore. [ 827.747380][T15683] fuse: Bad value for 'fd' [ 827.876683][T15687] input: syz0 as /devices/virtual/input/input46 [ 827.976118][T15686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2785'. [ 828.001972][T15686] tipc: Enabling not permitted [ 828.002013][T15686] tipc: Enabling of bearer rejected, failed to enable media [ 828.034335][ T49] gspca_zc3xx: reg_w_i err -71 [ 828.428807][T11802] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 828.606508][T11802] usb 7-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 828.606540][T11802] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.606560][T11802] usb 7-1: Product: syz [ 828.606574][T11802] usb 7-1: Manufacturer: syz [ 828.606588][T11802] usb 7-1: SerialNumber: syz [ 828.624236][ T49] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 828.624350][ T49] gspca_zc3xx 4-1:0.14: probe with driver gspca_zc3xx failed with error -71 [ 828.634057][ T49] usb 4-1: USB disconnect, device number 14 [ 828.650724][T11802] usb 7-1: config 0 descriptor?? [ 828.681755][T11802] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 828.874401][T11802] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 828.874500][T11802] sq905c 7-1:0.0: Get version command failed [ 828.874596][T11802] sq905c 7-1:0.0: probe with driver sq905c failed with error -71 [ 828.888273][T11802] usb 7-1: USB disconnect, device number 30 [ 829.435092][ T199] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 829.435425][ T199] asix 2-1:0.34: probe with driver asix failed with error -71 [ 829.509101][ T199] usb 2-1: USB disconnect, device number 43 [ 829.769497][T15711] openvswitch: netlink: IP tunnel dst address not specified [ 829.797142][T15711] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2791'. [ 830.004883][ T10] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 830.159236][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.162812][ T10] usb 7-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 830.162846][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.162867][ T10] usb 7-1: Product: syz [ 830.162883][ T10] usb 7-1: Manufacturer: syz [ 830.162899][ T10] usb 7-1: SerialNumber: syz [ 830.226424][ T10] usb 7-1: config 0 descriptor?? [ 830.244651][ T10] uvcvideo 7-1:0.0: Found UVC 0.00 device syz (18ec:3288) [ 830.244688][ T10] uvcvideo 7-1:0.0: No valid video chain found. [ 830.307469][ T49] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 830.442011][ T1737] usb 7-1: USB disconnect, device number 31 [ 830.446196][ T49] usb 2-1: device descriptor read/64, error -71 [ 830.489147][T15729] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 830.489165][T15729] IPv6: NLM_F_CREATE should be set when creating new route [ 830.489242][T15729] IPv6: NLM_F_CREATE should be set when creating new route [ 830.489276][T15729] IPv6: NLM_F_CREATE should be set when creating new route [ 830.584439][ T5761] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 830.684464][ T49] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 830.736957][ T5761] usb 6-1: config 0 has an invalid interface number: 127 but max is 1 [ 830.736991][ T5761] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 830.737015][ T5761] usb 6-1: config 0 has no interface number 1 [ 830.737077][ T5761] usb 6-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 830.737121][ T5761] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 830.740167][ T5761] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 830.740197][ T5761] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.740217][ T5761] usb 6-1: Product: syz [ 830.740232][ T5761] usb 6-1: Manufacturer: syz [ 830.740248][ T5761] usb 6-1: SerialNumber: syz [ 830.814525][ T49] usb 2-1: device descriptor read/64, error -71 [ 830.851000][ T5761] usb 6-1: config 0 descriptor?? [ 830.879177][ T5761] usb-storage 6-1:0.127: USB Mass Storage device detected [ 830.896920][ T5761] usb-storage 6-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 830.925164][ T49] usb usb2-port1: attempt power cycle [ 831.030776][ T5761] usb-storage 6-1:0.0: USB Mass Storage device detected [ 831.053384][ T5761] usb-storage 6-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 831.115940][ T5761] usb 6-1: USB disconnect, device number 61 [ 831.294311][ T49] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 831.315391][ T49] usb 2-1: device descriptor read/8, error -71 [ 831.554447][ T49] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 831.575053][ T49] usb 2-1: device descriptor read/8, error -71 [ 831.684838][ T49] usb usb2-port1: unable to enumerate USB device [ 832.308623][ T5761] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 832.464369][ T5761] usb 6-1: Using ep0 maxpacket: 16 [ 832.466242][ T5761] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 832.466274][ T5761] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 832.466289][ T5761] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 832.466315][ T5761] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 832.466330][ T5761] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.471259][ T5761] usb 6-1: config 0 descriptor?? [ 832.686513][T15767] netlink: 'syz.3.2806': attribute type 3 has an invalid length. [ 832.899706][ T5761] usbhid 6-1:0.0: can't add hid device: -71 [ 832.899854][ T5761] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 832.924478][T12832] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 832.946101][ T5761] usb 6-1: USB disconnect, device number 62 [ 833.106761][T12832] usb 4-1: unable to get BOS descriptor or descriptor too short [ 833.107986][T12832] usb 4-1: config 4 has an invalid interface number: 176 but max is 0 [ 833.108013][T12832] usb 4-1: config 4 has no interface number 0 [ 833.108046][T12832] usb 4-1: config 4 interface 176 has no altsetting 0 [ 833.110324][T12832] usb 4-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=59.64 [ 833.110352][T12832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.110372][T12832] usb 4-1: Product: syz [ 833.110384][T12832] usb 4-1: Manufacturer: syz [ 833.110394][T12832] usb 4-1: SerialNumber: syz [ 833.154514][ T49] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 833.304423][ T49] usb 2-1: device descriptor read/64, error -71 [ 833.522093][T12832] mvusb_mdio 4-1:4.176: probe with driver mvusb_mdio failed with error -5 [ 833.534903][T12832] usb 4-1: USB disconnect, device number 15 [ 833.547682][ T49] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 833.563404][ T37] audit: type=1326 audit(1784589979.075:404): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15775 comm="syz.5.2809" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4b58de99 code=0x7ff00000 [ 833.568265][ T37] audit: type=1326 audit(1784589979.075:405): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15775 comm="syz.5.2809" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4b58de99 code=0x7ff00000 [ 833.568569][ T37] audit: type=1326 audit(1784589979.085:406): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15775 comm="syz.5.2809" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4b58de99 code=0x7ff00000 [ 833.568827][ T37] audit: type=1326 audit(1784589979.085:407): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15775 comm="syz.5.2809" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4b58de99 code=0x7ff00000 [ 833.569066][ T37] audit: type=1326 audit(1784589979.085:408): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15775 comm="syz.5.2809" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4b58de99 code=0x7ff00000 [ 833.569315][ T37] audit: type=1326 audit(1784589979.085:409): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15775 comm="syz.5.2809" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4b58de99 code=0x7ff00000 [ 833.569547][ T37] audit: type=1326 audit(1784589979.085:410): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15775 comm="syz.5.2809" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4b58de99 code=0x7ff00000 [ 833.569809][ T37] audit: type=1326 audit(1784589979.085:411): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15775 comm="syz.5.2809" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4b58de99 code=0x7ff00000 [ 833.570045][ T37] audit: type=1326 audit(1784589979.085:412): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15775 comm="syz.5.2809" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4b58de99 code=0x7ff00000 [ 833.570285][ T37] audit: type=1326 audit(1784589979.085:413): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15775 comm="syz.5.2809" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4b58de99 code=0x7ff00000 [ 833.674792][ T49] usb 2-1: device descriptor read/64, error -71 [ 833.785394][ T49] usb usb2-port1: attempt power cycle [ 834.126359][ T49] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 834.149891][ T49] usb 2-1: device descriptor read/8, error -71 [ 834.394515][ T199] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 834.434393][T12832] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 834.434563][ T49] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 834.434936][ T1737] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 834.455073][ T49] usb 2-1: device descriptor read/8, error -71 [ 834.524869][ T199] usb 7-1: device descriptor read/64, error -71 [ 834.564903][ T49] usb usb2-port1: unable to enumerate USB device [ 834.587469][T12832] usb 4-1: unable to get BOS descriptor or descriptor too short [ 834.587816][ T1737] usb 6-1: unable to get BOS descriptor or descriptor too short [ 834.589259][ T1737] usb 6-1: config 137 has an invalid interface number: 9 but max is 0 [ 834.589286][ T1737] usb 6-1: config 137 has no interface number 0 [ 834.589322][ T1737] usb 6-1: config 137 interface 9 has no altsetting 0 [ 834.589511][T12832] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 834.592272][ T1737] usb 6-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=c4.d3 [ 834.592302][ T1737] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.592324][ T1737] usb 6-1: Product: syz [ 834.592339][ T1737] usb 6-1: Manufacturer: syz [ 834.592355][ T1737] usb 6-1: SerialNumber: syz [ 834.593231][T12832] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 834.593254][T12832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.593268][T12832] usb 4-1: Product: syz [ 834.593282][T12832] usb 4-1: Manufacturer: syz [ 834.593296][T12832] usb 4-1: SerialNumber: syz [ 834.767915][ T199] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 834.897605][ T199] usb 7-1: device descriptor read/64, error -71 [ 834.918541][T15787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.919342][T15787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.922563][T15787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.936370][T15787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.970692][ T1737] kl5kusb105 6-1:137.9: KL5KUSB105D / PalmConnect converter detected [ 834.972721][T12832] usb 4-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 835.009526][ T1737] usb 6-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 835.014590][ T1737] usb 6-1: USB disconnect, device number 63 [ 835.015678][ T199] usb usb7-port1: attempt power cycle [ 835.042198][ T1737] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 835.054598][ T1737] kl5kusb105 6-1:137.9: device disconnected [ 835.141178][T12832] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 835.162340][T12832] usb 4-1: USB disconnect, device number 16 [ 835.191057][T11551] udevd[11551]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 835.384491][ T199] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 835.415166][ T199] usb 7-1: device descriptor read/8, error -71 [ 835.654852][ T199] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 835.676348][ T199] usb 7-1: device descriptor read/8, error -71 [ 835.786246][ T199] usb usb7-port1: unable to enumerate USB device [ 835.944372][ T5761] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 835.984411][ T5701] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 836.094651][ T5761] usb 4-1: Using ep0 maxpacket: 16 [ 836.096460][ T5761] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 836.096489][ T5761] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 836.096509][ T5761] usb 4-1: config 0 has no interface number 0 [ 836.098771][ T5761] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 836.098799][ T5761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.098812][ T5761] usb 4-1: Product: syz [ 836.098821][ T5761] usb 4-1: Manufacturer: syz [ 836.098830][ T5761] usb 4-1: SerialNumber: syz [ 836.105003][ T5761] usb 4-1: config 0 descriptor?? [ 836.126004][ T5761] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 836.126039][ T5761] uvcvideo 4-1:0.105: No valid video chain found. [ 836.152958][ T5701] usb 6-1: unable to get BOS descriptor or descriptor too short [ 836.167303][ T5701] usb 6-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 836.167385][ T5701] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.167405][ T5701] usb 6-1: Product: syz [ 836.167420][ T5701] usb 6-1: Manufacturer: syz [ 836.167434][ T5701] usb 6-1: SerialNumber: syz [ 836.352108][ T10] usb 4-1: USB disconnect, device number 17 [ 836.354441][ T1737] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 836.432085][ T5701] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 836.432133][ T5701] usb 6-1: MIDIStreaming interface descriptor not found [ 836.514522][ T1737] usb 2-1: Using ep0 maxpacket: 32 [ 836.518473][ T1737] usb 2-1: config 7 has an invalid interface number: 6 but max is 3 [ 836.518504][ T1737] usb 2-1: config 7 has an invalid interface number: 57 but max is 3 [ 836.518528][ T1737] usb 2-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 836.518549][ T1737] usb 2-1: config 7 has an invalid interface number: 103 but max is 3 [ 836.518570][ T1737] usb 2-1: config 7 has an invalid interface number: 242 but max is 3 [ 836.518594][ T1737] usb 2-1: config 7 has no interface number 0 [ 836.518611][ T1737] usb 2-1: config 7 has no interface number 1 [ 836.518629][ T1737] usb 2-1: config 7 has no interface number 2 [ 836.518646][ T1737] usb 2-1: config 7 has no interface number 3 [ 836.518750][ T1737] usb 2-1: config 7 interface 6 altsetting 250 endpoint 0xC has invalid wMaxPacketSize 0 [ 836.518776][ T1737] usb 2-1: config 7 interface 6 altsetting 250 endpoint 0x8 has invalid maxpacket 447, setting to 64 [ 836.518805][ T1737] usb 2-1: config 7 interface 6 altsetting 250 endpoint 0x2 has an invalid bInterval 174, changing to 11 [ 836.518833][ T1737] usb 2-1: config 7 interface 6 altsetting 250 has a duplicate endpoint with address 0x2, skipping [ 836.518858][ T1737] usb 2-1: config 7 interface 6 altsetting 250 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 836.518886][ T1737] usb 2-1: config 7 interface 6 altsetting 250 has a duplicate endpoint with address 0x8, skipping [ 836.518911][ T1737] usb 2-1: config 7 interface 6 altsetting 250 endpoint 0xA has an invalid bInterval 178, changing to 7 [ 836.518938][ T1737] usb 2-1: config 7 interface 6 altsetting 250 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 836.518967][ T1737] usb 2-1: config 7 interface 6 altsetting 250 has a duplicate endpoint with address 0xF, skipping [ 836.518991][ T1737] usb 2-1: config 7 interface 6 altsetting 250 has a duplicate endpoint with address 0x2, skipping [ 836.519017][ T1737] usb 2-1: config 7 interface 6 altsetting 250 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 836.519046][ T1737] usb 2-1: config 7 interface 6 altsetting 250 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 836.519090][ T1737] usb 2-1: config 7 interface 57 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 836.519115][ T1737] usb 2-1: config 7 interface 57 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 836.519139][ T1737] usb 2-1: config 7 interface 57 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 836.519162][ T1737] usb 2-1: config 7 interface 57 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 836.519186][ T1737] usb 2-1: config 7 interface 57 altsetting 3 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 836.519223][ T1737] usb 2-1: config 7 interface 57 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 836.519248][ T1737] usb 2-1: config 7 interface 57 altsetting 3 bulk endpoint 0x6 has invalid maxpacket 64 [ 836.519290][ T1737] usb 2-1: config 7 interface 103 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 836.519330][ T1737] usb 2-1: config 7 interface 242 altsetting 114 has a duplicate endpoint with address 0x2, skipping [ 836.519354][ T1737] usb 2-1: config 7 interface 242 altsetting 114 has a duplicate endpoint with address 0x4, skipping [ 836.519378][ T1737] usb 2-1: config 7 interface 242 altsetting 114 has an invalid descriptor for endpoint zero, skipping [ 836.519401][ T1737] usb 2-1: config 7 interface 242 altsetting 114 has an invalid descriptor for endpoint zero, skipping [ 836.519424][ T1737] usb 2-1: config 7 interface 242 altsetting 114 has an invalid descriptor for endpoint zero, skipping [ 836.519448][ T1737] usb 2-1: config 7 interface 242 altsetting 114 has a duplicate endpoint with address 0x9, skipping [ 836.519473][ T1737] usb 2-1: config 7 interface 242 altsetting 114 has a duplicate endpoint with address 0xB, skipping [ 836.519496][ T1737] usb 2-1: config 7 interface 6 has no altsetting 0 [ 836.519516][ T1737] usb 2-1: config 7 interface 57 has no altsetting 0 [ 836.519552][ T1737] usb 2-1: config 7 interface 103 has no altsetting 0 [ 836.519571][ T1737] usb 2-1: config 7 interface 242 has no altsetting 0 [ 836.548306][ T5701] usb 6-1: USB disconnect, device number 64 [ 836.778572][T12250] udevd[12250]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 837.265331][ T5701] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 837.414457][ T5701] usb 4-1: Using ep0 maxpacket: 16 [ 837.416940][ T5701] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 837.416971][ T5701] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 837.416993][ T5701] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 837.417013][ T5701] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 837.417033][ T5701] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 837.417054][ T5701] usb 4-1: config 0 has no interface number 0 [ 837.417114][ T5701] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 837.417142][ T5701] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 837.417155][ T5701] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 837.417180][ T5701] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 837.417208][ T5701] usb 4-1: config 0 interface 125 has no altsetting 0 [ 837.417228][ T5701] usb 4-1: config 0 interface 125 has no altsetting 2 [ 837.419684][ T5701] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 837.419713][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.419734][ T5701] usb 4-1: Product: syz [ 837.419750][ T5701] usb 4-1: Manufacturer: syz [ 837.419765][ T5701] usb 4-1: SerialNumber: syz [ 837.430123][ T5701] usb 4-1: config 0 descriptor?? [ 837.480374][ T5701] usb 4-1: selecting invalid altsetting 2 [ 837.624799][ T10] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 837.709399][T15814] netlink: 'syz.5.2823': attribute type 1 has an invalid length. [ 837.764564][ T10] usb 7-1: device descriptor read/64, error -71 [ 838.006829][ T10] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 838.135963][ T10] usb 7-1: device descriptor read/64, error -71 [ 838.247670][ T10] usb usb7-port1: attempt power cycle [ 838.380583][ C0] usb 4-1: async_complete: urb error -71 [ 838.380701][ C0] usb 4-1: async_complete: urb error -71 [ 838.387628][ T5701] get_1284_register: usb error -71 [ 838.499183][ T5701] usb 4-1: USB disconnect, device number 18 [ 838.625287][ T10] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 838.645693][ T10] usb 7-1: device descriptor read/8, error -71 [ 838.875297][ T5701] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 838.885804][ T10] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 838.910443][ T10] usb 7-1: device descriptor read/8, error -71 [ 839.017896][ T10] usb usb7-port1: unable to enumerate USB device [ 839.043701][ T5701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.043741][ T5701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 839.043766][ T5701] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 839.043812][ T5701] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 839.043838][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.095484][ T5701] usb 4-1: config 0 descriptor?? [ 839.114500][ T1737] usb 2-1: Dual-Role OTG device on HNP port [ 839.114876][ T1737] usb 2-1: can't set HNP mode: -71 [ 839.183995][T15848] tmpfs: Unknown parameter 'indo64' [ 839.294365][ T10] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 839.452600][ T10] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 839.452634][ T10] usb 6-1: config 1 has no interface number 0 [ 839.452744][ T10] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 839.452770][ T10] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 839.452786][ T10] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.506121][ T10] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 839.506235][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.506260][ T10] usb 6-1: Product: syz [ 839.506275][ T10] usb 6-1: Manufacturer: syz [ 839.506291][ T10] usb 6-1: SerialNumber: syz [ 839.521828][T15846] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 839.551821][ T5701] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 839.551845][ T5701] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 839.551861][ T5701] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 839.551876][ T5701] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 839.551891][ T5701] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 839.551906][ T5701] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 839.551921][ T5701] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 839.551936][ T5701] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 839.551951][ T5701] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 839.551966][ T5701] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 839.687344][ T5701] plantronics 0003:047F:FFFF.004E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 839.789664][ T1737] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 839.792499][T15846] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 839.936488][ T1737] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 75, changing to 10 [ 839.936529][ T1737] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 839.936557][ T1737] usb 2-1: config 0 interface 0 has no altsetting 0 [ 839.936600][ T1737] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 839.936625][ T1737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.943187][ T1737] usb 2-1: config 0 descriptor?? [ 840.010615][ T10] usb 6-1: Incompatible driver and firmware versions [ 840.389092][T15863] IPv6: Can't replace route, no match found [ 840.594899][T15862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.596476][T15862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.621717][ T1737] usbhid 2-1:0.0: can't add hid device: -71 [ 840.621854][ T1737] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 840.641000][ T1737] usb 2-1: USB disconnect, device number 53 [ 840.644600][ T10] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 840.762310][T15868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.762956][T15868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.783166][T15868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.783644][T15868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.788730][T15868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.789376][T15868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.810149][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 840.811495][ T10] usb 7-1: config 1 has an invalid interface number: 255 but max is 1 [ 840.811519][ T10] usb 7-1: config 1 has no interface number 1 [ 840.811562][ T10] usb 7-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 840.811590][ T10] usb 7-1: config 1 interface 0 has no altsetting 0 [ 840.815833][ T10] usb 7-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 840.815862][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.815882][ T10] usb 7-1: Product: syz [ 840.815896][ T10] usb 7-1: Manufacturer: syz [ 840.815910][ T10] usb 7-1: SerialNumber: syz [ 841.040545][ T10] smsusb:smsusb_probe: board id=8, interface number 0 [ 841.043838][ T10] smsusb:smsusb_probe: board id=8, interface number 255 [ 841.052560][ T10] usb 7-1: USB disconnect, device number 40 [ 841.154460][ T5761] usb 4-1: reset high-speed USB device number 19 using dummy_hcd [ 842.173612][T15884] netlink: 'syz.6.2837': attribute type 2 has an invalid length. [ 842.190093][T15884] netlink: 'syz.6.2837': attribute type 2 has an invalid length. [ 842.384547][T15893] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2842'. [ 842.424345][ T49] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 842.574530][ T49] usb 7-1: device descriptor read/64, error -71 [ 842.697951][T15898] usb usb8: usbfs: process 15898 (syz.1.2839) did not claim interface 0 before use [ 843.193391][T15894] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2842'. [ 843.308968][ T5701] usb 4-1: USB disconnect, device number 19 [ 843.393743][ T49] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 843.526092][ T49] usb 7-1: device descriptor read/64, error -71 [ 843.635038][ T49] usb usb7-port1: attempt power cycle [ 843.982602][ T49] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 843.995284][ T49] usb 7-1: device descriptor read/8, error -71 [ 844.005981][T15920] netlink: 'syz.1.2847': attribute type 29 has an invalid length. [ 844.006541][T15919] netlink: 'syz.1.2847': attribute type 29 has an invalid length. [ 844.006922][T15919] netlink: 'syz.1.2847': attribute type 29 has an invalid length. [ 844.007261][T15919] netlink: 'syz.1.2847': attribute type 29 has an invalid length. [ 844.007720][T15919] netlink: 'syz.1.2847': attribute type 29 has an invalid length. [ 844.202747][T15923] netdevsim netdevsim1: Direct firmware load for . [ 844.202747][T15923] failed with error -2 [ 844.202788][T15923] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 844.202788][T15923] [ 844.208894][ T5686] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 844.236081][ T49] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 844.261324][ T49] usb 7-1: device descriptor read/8, error -71 [ 844.364658][ T49] usb usb7-port1: unable to enumerate USB device [ 844.384333][ T5686] usb 4-1: device descriptor read/64, error -71 [ 844.463241][T15938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.466325][T15938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.634390][ T5686] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 844.711486][T15938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.712185][T15938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.764368][ T5686] usb 4-1: device descriptor read/64, error -71 [ 844.886711][ T5686] usb usb4-port1: attempt power cycle [ 845.179195][ T37] kauditd_printk_skb: 948 callbacks suppressed [ 845.179218][ T37] audit: type=1326 audit(1784589990.695:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15940 comm="syz.6.2853" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f315e48de99 code=0x0 [ 845.244525][ T5686] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 845.265045][ T5686] usb 4-1: device descriptor read/8, error -71 [ 845.358969][T15945] netlink: 'syz.5.2854': attribute type 21 has an invalid length. [ 845.359039][T15945] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2854'. [ 845.504591][ T5686] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 845.524919][ T5686] usb 4-1: device descriptor read/8, error -71 [ 845.636478][ T5686] usb usb4-port1: unable to enumerate USB device [ 846.836859][T15961] netlink: 495 bytes leftover after parsing attributes in process `syz.6.2858'. [ 846.856846][T15962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.859716][T15962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 847.074342][ T5761] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 847.119308][T15924] netdevsim netdevsim1: Direct firmware load for . [ 847.119308][T15924] failed with error -2 [ 847.119328][T15924] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 847.119328][T15924] [ 847.224401][ T5761] usb 7-1: Using ep0 maxpacket: 8 [ 847.227769][ T5761] usb 7-1: config 2 has an invalid interface number: 241 but max is 0 [ 847.227800][ T5761] usb 7-1: config 2 has no interface number 0 [ 847.227853][ T5761] usb 7-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid maxpacket 56961, setting to 1024 [ 847.227883][ T5761] usb 7-1: config 2 interface 241 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 847.227908][ T5761] usb 7-1: config 2 interface 241 has no altsetting 0 [ 847.231537][ T5761] usb 7-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3 [ 847.231569][ T5761] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.231592][ T5761] usb 7-1: Product: syz [ 847.231608][ T5761] usb 7-1: Manufacturer: syz [ 847.231623][ T5761] usb 7-1: SerialNumber: syz [ 847.249641][T15961] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 847.259490][ T5761] ti_usb_3410_5052 7-1:2.241: TI USB 3410 1 port adapter converter detected [ 847.268635][ T5761] usb 7-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 847.304327][ T5701] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 847.453711][ T5761] usb 7-1: USB disconnect, device number 45 [ 847.467500][ T5701] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 847.467535][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.497291][ T5761] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 847.503964][ T5761] ti_usb_3410_5052 7-1:2.241: device disconnected [ 847.506724][ T5701] usb 4-1: config 0 descriptor?? [ 847.531145][ T5701] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 847.727459][T15978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.728150][T15978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 847.756841][T15978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.757526][T15978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.078704][ T5701] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 848.229582][T15986] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2864'. [ 848.491290][ T5701] cpia1 4-1:0.0: only firmware version 1 is supported (got: 221) [ 848.506376][T15997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.507826][T15997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.695855][T15967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.696502][T15967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.717608][ T5761] usb 4-1: USB disconnect, device number 24 [ 848.811372][T16003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2870'. [ 848.826625][ T5701] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 848.974399][ T5701] usb 7-1: Using ep0 maxpacket: 16 [ 848.978565][ T5701] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 848.978601][ T5701] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 848.981167][ T5701] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 848.981198][ T5701] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.981220][ T5701] usb 7-1: Product: syz [ 848.981236][ T5701] usb 7-1: Manufacturer: syz [ 848.981252][ T5701] usb 7-1: SerialNumber: syz [ 849.038918][ T5701] usb 7-1: config 0 descriptor?? [ 849.057933][ T5701] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 849.057959][ T5701] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 849.107423][T16008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 849.155921][ T5761] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 849.169729][T16013] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 849.171924][T16013] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 849.171940][T16013] overlayfs: missing 'lowerdir' [ 849.240261][T16015] fuse: fd is not a fuse device [ 849.306434][ T5761] usb 4-1: Using ep0 maxpacket: 16 [ 849.321173][ T5761] usb 4-1: unable to get BOS descriptor or descriptor too short [ 849.322722][ T5761] usb 4-1: config 127 has an invalid interface number: 16 but max is 0 [ 849.322750][ T5761] usb 4-1: config 127 has no interface number 0 [ 849.322858][ T5761] usb 4-1: config 127 interface 16 has no altsetting 0 [ 849.332646][ T5761] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=70.8a [ 849.332677][ T5761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.332697][ T5761] usb 4-1: Product: syz [ 849.332711][ T5761] usb 4-1: Manufacturer: syz [ 849.332725][ T5761] usb 4-1: SerialNumber: syz [ 849.522744][T15998] cgroup: fork rejected by pids controller in /syz6 [ 849.667762][ T5761] usb_ehset_test 4-1:127.16: probe with driver usb_ehset_test failed with error -32 [ 849.775032][ T5761] usb 4-1: USB disconnect, device number 25 [ 850.237378][T16130] tipc: Failed to remove unknown binding: 66,0,0/0:1146017471/1146017472 [ 850.253342][T16130] tipc: Failed to remove unknown binding: 66,0,0/0:1146017471/1146017472 [ 850.260171][ T5701] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 850.264541][ T5701] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 850.266373][ T5701] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 850.266391][ T5701] em28xx 7-1:0.0: No AC97 audio processor [ 850.429660][ T5701] usb 7-1: USB disconnect, device number 46 [ 850.451636][ T5701] em28xx 7-1:0.0: Disconnecting em28xx [ 850.465849][T16135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 850.466479][T16135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 850.607616][T16142] overlayfs: failed to resolve './file1/file0': -2 [ 850.607793][T16136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 850.608436][T16136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 850.609373][ T5701] em28xx: Freeing device [ 850.877714][T16159] netlink: 'syz.3.2882': attribute type 83 has an invalid length. [ 851.292118][T16163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 851.292788][T16163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 851.324342][ T5686] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 851.490777][ T5686] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 851.490811][ T5686] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.490831][ T5686] usb 4-1: Product: syz [ 851.490843][ T5686] usb 4-1: Manufacturer: syz [ 851.490852][ T5686] usb 4-1: SerialNumber: syz [ 851.944092][ T5686] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 851.944314][ T5686] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 851.945864][ T5686] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 851.945905][ T5686] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 851.949928][ T5686] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 852.030108][ T5686] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 852.468107][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 852.543744][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 852.558832][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 852.560139][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 852.614713][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 852.832893][ T4909] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 852.833306][ T4909] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 852.833748][ T4909] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 852.871991][ T4909] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 852.928348][ T4909] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 853.318079][ T1387] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.855868][ T1387] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.077607][ T1737] usb 4-1: USB disconnect, device number 26 [ 854.238745][T16214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.239486][T16214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.320676][T16214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.321354][T16214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.351789][T16212] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 854.452078][T16223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.453254][T16223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.497894][ T1387] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.637726][T16227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.642904][T16227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 855.159046][ T1387] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.234431][ T4909] Bluetooth: hci1: command tx timeout [ 855.264275][ T199] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 855.415248][T16245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 855.418044][ T199] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 855.418098][ T199] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 855.418144][ T199] usb 4-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.00 [ 855.418170][ T199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.420177][T16243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 855.427203][T16243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 855.427474][T16245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 855.433887][T16242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 855.441634][T16242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 855.443213][ T199] usb 4-1: config 0 descriptor?? [ 855.921178][ T199] hid_parser_main: 5 callbacks suppressed [ 855.921207][ T199] magicmouse 0003:05AC:0323.004F: unknown main item tag 0x0 [ 855.921246][ T199] magicmouse 0003:05AC:0323.004F: unknown main item tag 0x2 [ 855.921272][ T199] magicmouse 0003:05AC:0323.004F: unknown main item tag 0x7 [ 855.921297][ T199] magicmouse 0003:05AC:0323.004F: item fetching failed at offset 39/40 [ 855.921929][ T199] magicmouse 0003:05AC:0323.004F: magicmouse hid parse failed [ 855.921999][ T199] magicmouse 0003:05AC:0323.004F: probe with driver magicmouse failed with error -22 [ 856.008407][T16257] netlink: 'syz.5.2905': attribute type 33 has an invalid length. [ 856.008434][T16257] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2905'. [ 856.085588][ T1737] usb 4-1: USB disconnect, device number 27 [ 856.250818][T16170] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.251188][T16170] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.253087][T16170] bridge_slave_0: entered allmulticast mode [ 856.277680][T16170] bridge_slave_0: entered promiscuous mode [ 856.301004][T16170] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.301390][T16170] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.301719][T16170] bridge_slave_1: entered allmulticast mode [ 856.344872][T16170] bridge_slave_1: entered promiscuous mode [ 856.570294][T16267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.570872][T16267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 856.649231][T16170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.711597][T16170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.802667][ T37] audit: type=1326 audit(1784590002.315:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16268 comm="syz.3.2909" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f90dc097c17 code=0x0 [ 857.043837][T16170] team0: Port device team_slave_0 added [ 857.087871][T16170] team0: Port device team_slave_1 added [ 857.311542][T16273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.312130][T16273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.330886][ T4909] Bluetooth: hci1: command tx timeout [ 857.366087][T16273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.366726][T16273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.609159][T16279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.611576][T16279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.666676][ T1387] bridge_slave_1: left allmulticast mode [ 857.666719][ T1387] bridge_slave_1: left promiscuous mode [ 857.667042][ T1387] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.862110][ T1387] bridge_slave_0: left allmulticast mode [ 857.862139][ T1387] bridge_slave_0: left promiscuous mode [ 857.862327][ T1387] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.404424][ T4909] Bluetooth: hci1: command tx timeout [ 859.448370][ T1387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 859.524365][ T199] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 859.525133][ T1387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 859.585475][ T1387] bond0 (unregistering): Released all slaves [ 859.637227][T16170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 859.637241][T16170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.637258][T16170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 859.674300][ T199] usb 4-1: device descriptor read/64, error -71 [ 859.785374][T16170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.785394][T16170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.785425][T16170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 859.934399][ T199] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 860.044854][T16308] netlink: zone id is out of range [ 860.044870][T16308] netlink: zone id is out of range [ 860.044880][T16308] netlink: zone id is out of range [ 860.044889][T16308] netlink: zone id is out of range [ 860.044898][T16308] netlink: zone id is out of range [ 860.044907][T16308] netlink: zone id is out of range [ 860.044916][T16308] netlink: zone id is out of range [ 860.044925][T16308] netlink: zone id is out of range [ 860.044935][T16308] netlink: zone id is out of range [ 860.044945][T16308] netlink: zone id is out of range [ 860.064312][ T199] usb 4-1: device descriptor read/64, error -71 [ 860.176074][ T199] usb usb4-port1: attempt power cycle [ 860.443596][T16170] hsr_slave_0: entered promiscuous mode [ 860.449574][T16170] hsr_slave_1: entered promiscuous mode [ 860.462194][T16170] debugfs: 'hsr0' already exists in 'hsr' [ 860.462226][T16170] Cannot create hsr debugfs directory [ 860.510879][T16311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.523509][T16311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.654349][ T199] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 860.675045][ T199] usb 4-1: device descriptor read/8, error -71 [ 860.924364][ T199] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 860.944997][ T199] usb 4-1: device descriptor read/8, error -71 [ 860.958027][T16321] netlink: 'syz.1.2923': attribute type 19 has an invalid length. [ 861.055568][ T199] usb usb4-port1: unable to enumerate USB device [ 861.383562][T16321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 861.473779][ T5256] 8021q: adding VLAN 0 to HW filter on device eth13 [ 861.488111][ T4909] Bluetooth: hci1: command tx timeout [ 861.694356][ T1387] hsr_slave_0: left promiscuous mode [ 861.734261][ T1387] hsr_slave_1: left promiscuous mode [ 861.735497][ T1387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 861.735522][ T1387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 861.776812][ T1387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 861.776848][ T1387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 861.887402][ T1387] veth1_macvtap: left promiscuous mode [ 861.887521][ T1387] veth0_macvtap: left promiscuous mode [ 861.887807][ T1387] veth1_vlan: left promiscuous mode [ 861.888004][ T1387] veth0_vlan: left promiscuous mode [ 862.230540][T16339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.233128][T16339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.126973][ T1387] team0 (unregistering): Port device team_slave_1 removed [ 863.185251][ T1387] team0 (unregistering): Port device team_slave_0 removed [ 863.860898][T16367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.861553][T16367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 864.454447][ T199] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 864.652685][ T199] usb 4-1: Using ep0 maxpacket: 8 [ 864.698273][ T199] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 864.698307][ T199] usb 4-1: config 0 has no interface number 0 [ 864.698375][ T199] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 864.698402][ T199] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 864.698437][ T199] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 864.698467][ T199] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 864.698514][ T199] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 864.698539][ T199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.747840][ T199] usb 4-1: config 0 descriptor?? [ 864.823997][ T199] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 865.120735][ T1737] usb 4-1: USB disconnect, device number 32 [ 865.120848][ C1] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 865.160479][ T1737] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 865.300889][ T5256] 8021q: adding VLAN 0 to HW filter on device eth14 [ 866.145271][ T1737] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 866.295657][ T1737] usb 4-1: Using ep0 maxpacket: 16 [ 866.301809][ T1737] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.301846][ T1737] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.301870][ T1737] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 866.301917][ T1737] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 866.301943][ T1737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.365659][ T1737] usb 4-1: config 0 descriptor?? [ 866.889680][ T1737] microsoft 0003:045E:07DA.0050: ignoring exceeding usage max [ 866.892638][ T1737] microsoft 0003:045E:07DA.0050: ignoring exceeding usage max [ 867.172420][ T1737] microsoft 0003:045E:07DA.0050: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 867.172462][ T1737] microsoft 0003:045E:07DA.0050: no inputs found [ 867.172477][ T1737] microsoft 0003:045E:07DA.0050: could not initialize ff, continuing anyway [ 867.189838][ T1737] usb 4-1: USB disconnect, device number 33 [ 867.418392][T16420] fido_id[16420]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 867.451232][T16418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.451913][T16418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.725561][T16430] 9p: Bad value for 'source' [ 868.292737][T16445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.293441][T16445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 868.660239][T16170] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 868.706089][T16170] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 868.708286][T16170] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 868.759450][T16170] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 868.786845][T16170] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 868.851370][T16170] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 868.859910][T16170] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 868.919430][T16170] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 869.421979][T16170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 869.629007][T16170] 8021q: adding VLAN 0 to HW filter on device team0 [ 869.810601][T16484] TCP: TCP_TX_DELAY enabled [ 869.851866][ T1387] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.852168][ T1387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 869.895701][ T6897] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.895957][ T6897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 870.365518][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.365638][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.385429][ T1737] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 870.594476][ T1737] usb 4-1: Using ep0 maxpacket: 8 [ 870.609541][ T1737] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 870.609580][ T1737] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 870.609636][ T1737] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 870.609663][ T1737] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10 [ 870.609692][ T1737] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024 [ 870.609736][ T1737] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 870.609750][ T1737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.705773][ T1737] hub 4-1:1.0: bad descriptor, ignoring hub [ 870.705819][ T1737] hub 4-1:1.0: probe with driver hub failed with error -5 [ 870.715531][ T1737] cdc_wdm 4-1:1.0: skipping garbage [ 870.715551][ T1737] cdc_wdm 4-1:1.0: skipping garbage [ 870.715564][ T1737] cdc_wdm 4-1:1.0: skipping garbage [ 870.715697][ T1737] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 870.945047][T16493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2949'. [ 871.267642][ T5686] usb 4-1: USB disconnect, device number 34 [ 872.141809][T16170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 873.193723][T16170] veth0_vlan: entered promiscuous mode [ 873.248683][T16170] veth1_vlan: entered promiscuous mode [ 873.343894][T16170] veth0_macvtap: entered promiscuous mode [ 873.362869][T16170] veth1_macvtap: entered promiscuous mode [ 873.466123][T16170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 873.540544][T16170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 873.573111][ T157] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.573543][ T157] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.573589][ T157] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.573629][ T157] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.659140][T16564] xt_limit: Overflow, try lower: 324382443/0 [ 875.096511][T16575] netlink: 'syz.1.2963': attribute type 4 has an invalid length. [ 875.162649][T16576] netlink: 'syz.1.2963': attribute type 4 has an invalid length. [ 875.292888][ T6897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 875.292912][ T6897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 875.404323][ T6897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 875.404348][ T6897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 875.590343][T16578] netlink: 393 bytes leftover after parsing attributes in process `syz.1.2965'. [ 875.609481][T16580] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 875.710628][T16582] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 875.717644][T16582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2966'. [ 875.747253][T16580] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2964'. [ 876.517018][ T49] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 876.630296][T16601] sg_write: data in/out 483292/136 bytes for SCSI command 0x0-- guessing data in; [ 876.630296][T16601] program syz.3.2970 not setting count and/or reply_len properly [ 876.677473][ T49] usb 7-1: Using ep0 maxpacket: 32 [ 876.682567][ T49] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 876.682639][ T49] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 876.682668][ T49] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 876.682695][ T49] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 876.688596][ T49] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 876.688626][ T49] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.688646][ T49] usb 7-1: Product: syz [ 876.688660][ T49] usb 7-1: Manufacturer: syz [ 876.688674][ T49] usb 7-1: SerialNumber: syz [ 876.938945][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 877.142973][ T49] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input48 [ 877.281514][ T49] imon:send_packet: packet tx failed (-71) [ 877.305427][ T49] imon 7-1:155.0: panel buttons/knobs setup failed [ 877.305452][ T49] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 877.305466][ T49] (id 0x00) [ 877.325914][ T199] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 877.476582][ T49] rc_core: IR keymap rc-imon-pad not found [ 877.476606][ T49] Registered IR keymap rc-empty [ 877.476695][ T49] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 877.476715][ T49] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 877.480416][ T49] imon:send_packet: packet tx failed (-71) [ 877.494437][ T49] imon 7-1:155.0: remote input dev register failed [ 877.494626][ T49] imon 7-1:155.0: imon_init_intf0: rc device setup failed [ 877.546780][ T199] usb 4-1: unable to get BOS descriptor or descriptor too short [ 877.581535][ T199] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 877.581568][ T199] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 877.581586][ T199] usb 4-1: config 63 has no interface number 0 [ 877.581621][ T199] usb 4-1: config 63 interface 66 has no altsetting 0 [ 877.631363][ T199] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 877.631397][ T199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.631420][ T199] usb 4-1: Product: syz [ 877.631436][ T199] usb 4-1: Manufacturer: syz [ 877.631451][ T199] usb 4-1: SerialNumber: syz [ 878.104614][T16625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 878.128498][T16625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.439651][ T49] imon 7-1:155.0: unable to initialize intf0, err 0 [ 878.439677][ T49] imon:imon_probe: failed to initialize context! [ 878.439690][ T49] imon 7-1:155.0: unable to register, err -19 [ 878.450114][ T49] usb 7-1: USB disconnect, device number 47 [ 878.741382][ T199] uvcvideo 4-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 878.741499][ T199] uvcvideo 4-1:63.66: No valid video chain found. [ 878.785265][ T49] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 878.837847][ T199] usb 4-1: USB disconnect, device number 35 [ 878.936572][T16629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 878.937217][T16629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.975555][ T49] usb 7-1: Using ep0 maxpacket: 8 [ 878.978605][ T49] usb 7-1: unable to get BOS descriptor or descriptor too short [ 878.980211][ T49] usb 7-1: config 1 interface 0 has no altsetting 0 [ 878.986896][ T49] usb 7-1: string descriptor 0 read error: -22 [ 878.987054][ T49] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.40 [ 878.987077][ T49] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.182510][T16635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 879.189172][T16635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 879.254326][ T199] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 879.380673][T16631] netlink: 'syz.1.2979': attribute type 16 has an invalid length. [ 879.380698][T16631] netlink: 'syz.1.2979': attribute type 3 has an invalid length. [ 879.380710][T16631] netlink: 'syz.1.2979': attribute type 1 has an invalid length. [ 879.380718][T16631] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2979'. [ 879.424179][ T199] usb 4-1: Using ep0 maxpacket: 32 [ 879.460125][ T49] kone 0003:1E7D:2CED.0051: unknown main item tag 0x0 [ 879.460162][ T49] kone 0003:1E7D:2CED.0051: unknown main item tag 0x0 [ 879.460189][ T49] kone 0003:1E7D:2CED.0051: unknown main item tag 0x0 [ 879.460215][ T49] kone 0003:1E7D:2CED.0051: unknown main item tag 0x0 [ 879.460241][ T49] kone 0003:1E7D:2CED.0051: unknown main item tag 0x0 [ 879.460268][ T49] kone 0003:1E7D:2CED.0051: unknown main item tag 0x0 [ 879.460293][ T49] kone 0003:1E7D:2CED.0051: unknown main item tag 0x0 [ 879.460320][ T49] kone 0003:1E7D:2CED.0051: unknown main item tag 0x0 [ 879.460346][ T49] kone 0003:1E7D:2CED.0051: unknown main item tag 0x0 [ 879.461665][ T49] kone 0003:1E7D:2CED.0051: unknown main item tag 0x0 [ 879.469083][ T199] usb 4-1: unable to get BOS descriptor or descriptor too short [ 879.471029][ T199] usb 4-1: config 16 has an invalid interface number: 225 but max is 0 [ 879.471059][ T199] usb 4-1: config 16 has no interface number 0 [ 879.471094][ T199] usb 4-1: config 16 interface 225 has no altsetting 0 [ 879.499229][ T199] usb 4-1: string descriptor 0 read error: -22 [ 879.499403][ T199] usb 4-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=ad.62 [ 879.499430][ T199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.576863][ T49] kone 0003:1E7D:2CED.0051: hidraw0: USB HID v0.ff Device [HID 1e7d:2ced] on usb-dummy_hcd.6-1/input0 [ 879.645326][ T199] gl620a 4-1:16.225: probe with driver gl620a failed with error -22 [ 879.840167][ T199] usb 4-1: USB disconnect, device number 36 [ 880.146763][ T49] kone 0003:1E7D:2CED.0051: couldn't init struct kone_device [ 880.146828][ T49] kone 0003:1E7D:2CED.0051: couldn't install mouse [ 880.166641][ T49] kone 0003:1E7D:2CED.0051: probe with driver kone failed with error -5 [ 880.354963][ T49] usb 7-1: USB disconnect, device number 48 [ 880.377013][T16642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 880.377582][T16642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 880.510710][T16643] netlink: 'syz.5.2982': attribute type 5 has an invalid length. [ 880.975617][ T5761] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 881.022622][T16649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 881.032325][T16649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 881.126598][ T5761] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.126635][ T5761] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.126668][ T5761] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 881.126683][ T5761] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.135323][ T5761] usb 4-1: config 0 descriptor?? [ 881.185098][ T5693] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 881.339203][ T5693] usb 7-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 881.339226][ T5693] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.339239][ T5693] usb 7-1: Product: syz [ 881.339333][ T5693] usb 7-1: Manufacturer: syz [ 881.339343][ T5693] usb 7-1: SerialNumber: syz [ 881.351186][ T5693] usb 7-1: config 0 descriptor?? [ 881.396428][ T5693] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 881.676725][ T5761] playstation 0003:054C:0DF2.0052: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 881.679822][T16656] netlink: 'syz.1.2988': attribute type 10 has an invalid length. [ 881.679946][T16656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 881.736845][T16656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 881.820038][T16656] bond0: (slave batadv_slave_1): Enslaving as an active interface with an up link [ 881.908479][ T5761] playstation 0003:054C:0DF2.0052: Invalid byte count transferred, expected 20 got 0 [ 881.908912][ T5761] playstation 0003:054C:0DF2.0052: Failed to retrieve DualSense pairing info: -22 [ 881.908953][ T5761] playstation 0003:054C:0DF2.0052: Failed to get MAC address from DualSense [ 881.908962][ T5761] playstation 0003:054C:0DF2.0052: Failed to create dualsense. [ 881.967833][ T5761] playstation 0003:054C:0DF2.0052: probe with driver playstation failed with error -22 [ 882.075993][T16659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2989'. [ 882.231518][T16665] netlink: 'syz.5.2990': attribute type 10 has an invalid length. [ 882.280446][T16665] bond0: (slave bond_slave_0): Releasing backup interface [ 882.367216][ T5693] gspca_sunplus: reg_r err -110 [ 882.367337][ T5693] sunplus 7-1:0.0: probe with driver sunplus failed with error -110 [ 882.532277][ T5761] usb 7-1: USB disconnect, device number 49 [ 882.625006][T16672] tipc: Started in network mode [ 882.625040][T16672] tipc: Node identity ac1414aa, cluster identity 4711 [ 882.651728][T16672] tipc: Enabled bearer , priority 10 [ 882.652827][T16672] netlink: 'syz.1.2992': attribute type 1 has an invalid length. [ 883.092044][T16686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.093144][T16686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.343159][T16698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.343933][T16698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.357714][T16698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.360378][T16698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.514377][T12832] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 883.654385][T12832] usb 7-1: device descriptor read/64, error -71 [ 883.765940][ T5761] tipc: Node number set to 2886997162 [ 883.870242][ T5701] usb 4-1: USB disconnect, device number 37 [ 883.916791][T12832] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 884.074628][T12832] usb 7-1: device descriptor read/64, error -71 [ 884.176257][T16716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.176930][T16716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.202606][T12832] usb usb7-port1: attempt power cycle [ 884.384369][ T5701] usb 4-1: new low-speed USB device number 38 using dummy_hcd [ 884.539923][ T5701] usb 4-1: too many endpoints for config 0 interface 0 altsetting 251: 223, using maximum allowed: 30 [ 884.539956][ T5701] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 884.539974][ T5701] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x2 has invalid maxpacket 1024, setting to 8 [ 884.539990][ T5701] usb 4-1: config 0 interface 0 altsetting 251 has 2 endpoint descriptors, different from the interface descriptor's value: 223 [ 884.540006][ T5701] usb 4-1: config 0 interface 0 has no altsetting 0 [ 884.540026][ T5701] usb 4-1: New USB device found, idVendor=03eb, idProduct=2118, bcdDevice= 0.00 [ 884.540041][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.552859][ T5701] usb 4-1: config 0 descriptor?? [ 884.565792][T12832] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 884.595196][T16709] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 884.595482][T16709] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 884.647752][T12832] usb 7-1: device descriptor read/8, error -71 [ 884.811876][ T5701] hid (null): report_id 1771537487 is invalid [ 884.826436][ T5701] hid_parser_main: 3359 callbacks suppressed [ 884.826462][ T5701] hid-generic 0003:03EB:2118.0053: unknown main item tag 0x5 [ 884.826501][ T5701] hid-generic 0003:03EB:2118.0053: report_id 1771537487 is invalid [ 884.826520][ T5701] hid-generic 0003:03EB:2118.0053: item 0 4 1 8 parsing failed [ 884.833290][ T5701] hid-generic 0003:03EB:2118.0053: probe with driver hid-generic failed with error -22 [ 884.883353][T16736] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3009'. [ 884.883399][T16740] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3009'. [ 884.904270][T12832] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 884.906356][ T5701] usb 4-1: USB disconnect, device number 38 [ 884.981141][T12832] usb 7-1: device descriptor read/8, error -71 [ 885.048069][T16744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 885.048726][T16744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.081164][T16744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 885.083545][T16744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.101317][T12832] usb usb7-port1: unable to enumerate USB device [ 885.594439][T12832] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 885.682490][T16762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 885.683153][T16762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.777975][T12832] usb 4-1: Using ep0 maxpacket: 32 [ 885.795927][T12832] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.795964][T12832] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 885.795991][T12832] usb 4-1: config 0 interface 0 has no altsetting 0 [ 885.796028][T12832] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 885.796052][T12832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.800068][T12832] usb 4-1: config 0 descriptor?? [ 886.028184][T16748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.028849][T16748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.247824][T12832] hid (null): unknown global tag 0xa3 [ 886.247861][T12832] hid (null): unknown global tag 0xc [ 886.247878][T12832] hid (null): unknown global tag 0xd [ 886.456709][T12832] usb 4-1: string descriptor 0 read error: -71 [ 886.457293][T12832] uclogic 0003:5543:006E.0054: failed retrieving string descriptor #200: -71 [ 886.457361][T12832] uclogic 0003:5543:006E.0054: failed retrieving pen parameters: -71 [ 886.457379][T12832] uclogic 0003:5543:006E.0054: failed probing pen v2 parameters: -71 [ 886.457440][T12832] uclogic 0003:5543:006E.0054: failed probing parameters: -71 [ 886.457573][T12832] uclogic 0003:5543:006E.0054: probe with driver uclogic failed with error -71 [ 886.527038][T12832] usb 4-1: USB disconnect, device number 39 [ 887.187736][T16802] netlink: 'syz.5.3027': attribute type 10 has an invalid length. [ 887.187875][T16802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 887.226368][T16802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 887.265126][T16802] bond0: (slave batadv_slave_1): Enslaving as an active interface with an up link [ 887.410518][T16806] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3029'. [ 887.529598][ T5701] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 887.557857][T16809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.558493][T16809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 887.584044][T16809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.593517][T16809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 887.603796][T16809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.613893][T16809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 887.693382][ T5701] usb 7-1: config 2 has an invalid interface number: 79 but max is 0 [ 887.693415][ T5701] usb 7-1: config 2 has no interface number 0 [ 887.693448][ T5701] usb 7-1: config 2 interface 79 has no altsetting 0 [ 887.726991][ T5701] usb 7-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 887.727027][ T5701] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.727048][ T5701] usb 7-1: Product: syz [ 887.727065][ T5701] usb 7-1: Manufacturer: syz [ 887.727081][ T5701] usb 7-1: SerialNumber: syz [ 887.974522][ T1737] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 888.127935][ T1737] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 888.156629][ T1737] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 888.156665][ T1737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.156688][ T1737] usb 4-1: Product: syz [ 888.156704][ T1737] usb 4-1: Manufacturer: syz [ 888.156720][ T1737] usb 4-1: SerialNumber: syz [ 888.220102][ T1737] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 888.223876][ T5701] usb 7-1: USB disconnect, device number 54 [ 888.299437][T16819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.300204][T16819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.426143][T16811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.427463][T16811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.916139][ T1737] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 888.962029][ T1737] usb 4-1: USB disconnect, device number 40 [ 889.301670][T16836] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3039'. [ 889.348579][ T6901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.348604][ T6901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.396807][T16840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 889.566768][ T1737] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 889.741797][ T1737] usb 7-1: Using ep0 maxpacket: 32 [ 889.773919][ T1737] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 889.773952][ T1737] usb 7-1: config 0 has no interface number 0 [ 889.803067][ T1737] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 889.803101][ T1737] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.803123][ T1737] usb 7-1: Product: syz [ 889.803139][ T1737] usb 7-1: Manufacturer: syz [ 889.803155][ T1737] usb 7-1: SerialNumber: syz [ 889.879100][ T1737] usb 7-1: config 0 descriptor?? [ 889.901699][ T1737] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 889.944240][ T49] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 890.107576][ T1737] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 890.114301][ T49] usb 4-1: Using ep0 maxpacket: 8 [ 890.124837][ T49] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 890.124973][ T49] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x36, changing to 0x6 [ 890.125003][ T49] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 890.169275][ T49] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 890.169373][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.169394][ T49] usb 4-1: Product: syz [ 890.169410][ T49] usb 4-1: Manufacturer: syz [ 890.169426][ T49] usb 4-1: SerialNumber: syz [ 890.242355][ T1737] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 890.272048][ T49] usb 4-1: config 0 descriptor?? [ 890.295776][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 8 [ 890.324645][ T49] powermate 4-1:0.0: probe with driver powermate failed with error -5 [ 890.925209][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 890.926282][ T49] usb 7-1: USB disconnect, device number 55 [ 890.953855][ T49] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 890.970252][ T49] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 890.971236][ T49] quatech2 7-1:0.51: device disconnected [ 891.890824][T16873] netlink: 'syz.1.3051': attribute type 28 has an invalid length. [ 891.890850][T16873] netlink: 'syz.1.3051': attribute type 3 has an invalid length. [ 891.890864][T16873] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3051'. [ 892.074272][T11802] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 892.143319][ T5761] usb 4-1: USB disconnect, device number 41 [ 892.345096][T11802] usb 7-1: Using ep0 maxpacket: 32 [ 892.357731][T11802] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 892.357764][T11802] usb 7-1: config 0 has no interface number 0 [ 892.362365][T11802] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 892.362400][T11802] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.362422][T11802] usb 7-1: Product: syz [ 892.362438][T11802] usb 7-1: Manufacturer: syz [ 892.362453][T11802] usb 7-1: SerialNumber: syz [ 892.375058][T11802] usb 7-1: config 0 descriptor?? [ 892.501313][T16877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.503254][T16877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.335448][T16887] IPVS: set_ctl: invalid protocol: 47 100.1.1.0:20004 [ 893.335908][ T5761] IPVS: starting estimator thread 0... [ 893.338909][T16886] net_ratelimit: 13 callbacks suppressed [ 893.338994][T16886] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 893.419564][ T37] audit: type=1326 audit(2000000035.690:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16885 comm="syz.5.3056" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffb4b58de99 code=0x0 [ 893.444414][T16888] IPVS: using max 8 ests per chain, 19200 per kthread [ 893.662124][T16872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.664791][T16872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.776023][T11802] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 893.776059][T11802] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 893.776633][T11802] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 893.776970][T11802] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 893.826660][T11802] usb 7-1: USB disconnect, device number 56 [ 894.162106][T16898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 894.173435][T16898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 894.631147][T16909] Mount JFS Failure: -5 [ 894.631169][T16909] jfs_mount failed w/return code = -5 [ 894.694435][T11802] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 894.848605][T11802] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 894.848643][T11802] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 894.848686][T11802] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 894.848804][T11802] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.859888][T11802] usb 7-1: config 0 descriptor?? [ 895.207358][T16915] create_pit_timer: 6 callbacks suppressed [ 895.207379][T16915] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 895.484605][T11802] usb 7-1: language id specifier not provided by device, defaulting to English [ 895.550579][T11802] uclogic 0003:256C:006D.0055: failed retrieving Huion firmware version: -71 [ 895.550649][T11802] uclogic 0003:256C:006D.0055: failed probing parameters: -71 [ 895.550849][T11802] uclogic 0003:256C:006D.0055: probe with driver uclogic failed with error -71 [ 895.567332][T11802] usb 7-1: USB disconnect, device number 57 [ 895.696618][T16935] fuse: fd is not a fuse device [ 895.698046][T16935] fuse: fd is not a fuse device [ 895.700407][T16935] 9pnet_virtio: no channels available for device syz [ 895.830541][T16941] openvswitch: netlink: IP tunnel dst address not specified [ 895.966359][T11802] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 895.994476][ T5693] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 896.136822][T11802] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.136863][T11802] usb 7-1: config 0 interface 0 has no altsetting 0 [ 896.136894][T11802] usb 7-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 896.136909][T11802] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.141248][T11802] usb 7-1: config 0 descriptor?? [ 896.162229][ T5693] usb 4-1: Using ep0 maxpacket: 8 [ 896.189783][ T5693] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 896.189826][ T5693] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 896.189841][ T5693] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.230427][ T5693] usb 4-1: config 0 descriptor?? [ 896.255187][ T5693] rndis_host 4-1:0.0: rndis: master #0/ffff8880226f8000 slave #1/0000000000000000 [ 896.576211][T16948] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3073'. [ 896.814959][T11802] usbhid 7-1:0.0: can't add hid device: -71 [ 896.815097][T11802] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 896.831537][T11802] usb 7-1: USB disconnect, device number 58 [ 897.163783][ T5761] usb 4-1: USB disconnect, device number 42 [ 897.524883][T16973] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3079'. [ 898.142404][T16998] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3087'. [ 898.207399][T16999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 898.213645][T16999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.420093][T11802] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 898.420712][T17001] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3088'. [ 898.607497][T11802] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 898.607601][T11802] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 898.607649][T11802] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 898.610903][T11802] usb 7-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 898.610935][T11802] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.610958][T11802] usb 7-1: Product: syz [ 898.610974][T11802] usb 7-1: Manufacturer: syz [ 898.610989][T11802] usb 7-1: SerialNumber: syz [ 899.400518][ T60] Bluetooth: hci1: command 0x0405 tx timeout [ 899.739487][T11802] usb 7-1: USB disconnect, device number 59 [ 899.934332][T12450] udevd[12450]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 900.055428][T17030] fuse: fd is not a fuse device [ 900.065976][T17032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.072835][T17032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.142555][T17032] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3098'. [ 900.442211][ T1737] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 900.502061][T17043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.513116][T17043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.614357][ T1737] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 900.614396][ T1737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.614418][ T1737] usb 4-1: Product: syz [ 900.614434][ T1737] usb 4-1: Manufacturer: syz [ 900.614448][ T1737] usb 4-1: SerialNumber: syz [ 900.997073][T17058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.998396][T17058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 901.042929][ T1737] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 901.043000][ T1737] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 901.043515][ T1737] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 901.043585][ T1737] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 901.125275][ T1737] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 901.156074][ T1737] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 901.168496][ T1737] usb 4-1: USB disconnect, device number 43 [ 901.264065][T17066] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3106'. [ 901.276407][T17066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 901.277018][T17066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 901.279504][T17066] netlink: 'syz.5.3106': attribute type 2 has an invalid length. [ 901.470384][T17072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3107'. [ 901.917128][T17089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 901.920399][T17089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 901.922181][T17085] netlink: 'syz.6.3110': attribute type 10 has an invalid length. [ 901.922204][T17085] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3110'. [ 901.925128][T17089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 901.979356][T17089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 901.999934][T17089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.000627][T17089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.004612][T17089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.005403][T17089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.040682][T17089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.041430][T17089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.043139][T17089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.043782][T17089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.211601][T11802] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 902.301366][T17102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.302035][T17102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.373958][T11802] usb 7-1: Using ep0 maxpacket: 8 [ 902.376059][T11802] usb 7-1: config 0 has an invalid interface number: 200 but max is 0 [ 902.376089][T11802] usb 7-1: config 0 has no interface number 0 [ 902.376128][T11802] usb 7-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 902.376145][T11802] usb 7-1: config 0 interface 200 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0 [ 902.376160][T11802] usb 7-1: config 0 interface 200 has no altsetting 0 [ 902.378475][T11802] usb 7-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 902.378504][T11802] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.378526][T11802] usb 7-1: Product: syz [ 902.378542][T11802] usb 7-1: Manufacturer: syz [ 902.378558][T11802] usb 7-1: SerialNumber: syz [ 902.394698][T11802] usb 7-1: config 0 descriptor?? [ 902.472171][ T5761] usb 4-1: new low-speed USB device number 44 using dummy_hcd [ 902.632567][ T5761] usb 4-1: Invalid ep0 maxpacket: 64 [ 902.761325][ T5761] usb 4-1: new low-speed USB device number 45 using dummy_hcd [ 902.909924][ T5761] usb 4-1: Invalid ep0 maxpacket: 64 [ 902.911854][ T5761] usb usb4-port1: attempt power cycle [ 903.257393][ T5761] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 903.278262][ T5761] usb 4-1: Invalid ep0 maxpacket: 64 [ 903.319432][T17121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.320127][T17121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.416174][ T5761] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 903.436711][ T5761] usb 4-1: Invalid ep0 maxpacket: 64 [ 903.437403][ T5761] usb usb4-port1: unable to enumerate USB device [ 903.452519][T17122] syzkaller1: entered promiscuous mode [ 903.452544][T17122] syzkaller1: entered allmulticast mode [ 904.740244][T17138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3123'. [ 904.889658][T11802] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.200/input/input52 [ 904.910259][T11802] usb 7-1: USB disconnect, device number 60 [ 905.245688][T17142] syzkaller1: entered promiscuous mode [ 905.245708][T17142] syzkaller1: entered allmulticast mode [ 905.570354][ T5701] usb 7-1: new low-speed USB device number 61 using dummy_hcd [ 905.771272][ T5701] usb 7-1: unable to get BOS descriptor or descriptor too short [ 905.772623][ T5701] usb 7-1: config 195 has an invalid interface number: 153 but max is 0 [ 905.772718][ T5701] usb 7-1: config 195 has no interface number 0 [ 905.772740][ T5701] usb 7-1: config 195 interface 153 has no altsetting 0 [ 905.776731][ T5701] usb 7-1: string descriptor 0 read error: -22 [ 905.776822][ T5701] usb 7-1: New USB device found, idVendor=2955, idProduct=1001, bcdDevice=da.b2 [ 905.776837][ T5701] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.038831][ T49] usb 7-1: USB disconnect, device number 61 [ 906.176096][T12832] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 906.336209][T12832] usb 4-1: Using ep0 maxpacket: 32 [ 906.341249][T12832] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 906.341270][T12832] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 906.341284][T12832] usb 4-1: config 0 interface 0 has no altsetting 0 [ 906.344194][T12832] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 906.344216][T12832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.344228][T12832] usb 4-1: Product: syz [ 906.344237][T12832] usb 4-1: Manufacturer: syz [ 906.344246][T12832] usb 4-1: SerialNumber: syz [ 906.418329][T12832] usb 4-1: config 0 descriptor?? [ 906.662031][T17159] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 906.888114][T17155] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3129'. [ 906.997464][T12832] gs_usb 4-1:0.0: Couldn't get device config: (err=-71) [ 906.997569][T12832] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 907.030828][T12832] usb 4-1: USB disconnect, device number 48 [ 907.202800][T17178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3138'. [ 907.218722][ T49] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 907.261225][T17178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3138'. [ 907.280533][T17182] netlink: 'syz.5.3139': attribute type 2 has an invalid length. [ 907.286674][T17182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.308819][T17182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 907.315680][T17182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.333825][T17182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 907.387413][ T49] usb 7-1: Using ep0 maxpacket: 8 [ 907.394416][ T49] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 907.394449][ T49] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.394472][ T49] usb 7-1: config 0 has no interface number 0 [ 907.399722][ T49] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 907.399751][ T49] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.399771][ T49] usb 7-1: Product: syz [ 907.399785][ T49] usb 7-1: Manufacturer: syz [ 907.399800][ T49] usb 7-1: SerialNumber: syz [ 907.414268][ T49] usb 7-1: config 0 descriptor?? [ 907.507849][T17190] tipc: Enabling of bearer rejected, failed to enable media [ 907.830736][ T49] uvcvideo 7-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 907.830779][ T49] uvcvideo 7-1:0.31: No valid video chain found. [ 908.154470][ T5761] usb 7-1: USB disconnect, device number 62 [ 908.539223][T17209] vivid-001: disconnect [ 908.553442][T17208] vivid-001: reconnect [ 908.663720][T17211] syzkaller1: entered promiscuous mode [ 908.663753][T17211] syzkaller1: entered allmulticast mode [ 908.706013][T17213] netlink: 'syz.1.3149': attribute type 10 has an invalid length. [ 908.706037][T17213] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3149'. [ 908.734096][T17211] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 908.816271][T17211] netlink: 1084 bytes leftover after parsing attributes in process `syz.3.3148'. [ 908.816287][T17211] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3148'. [ 908.870103][T17218] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3150'. [ 909.118157][T17219] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3150'. [ 909.552646][T11802] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 909.721625][T11802] usb 4-1: Using ep0 maxpacket: 16 [ 909.726285][T11802] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 909.726317][T11802] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.726330][T11802] usb 4-1: Product: syz [ 909.726339][T11802] usb 4-1: Manufacturer: syz [ 909.726347][T11802] usb 4-1: SerialNumber: syz [ 909.974377][T11802] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 909.977617][T11802] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 909.977903][T11802] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 909.977935][T11802] usb 4-1: media controller created [ 910.035443][T11802] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 910.144526][T17232] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 910.154956][T17232] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 910.183841][T11802] usb 4-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 910.202071][T11802] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 910.328984][T11802] DVB: Unable to find symbol qt1010_attach() [ 910.414106][T17226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 910.416112][T17226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 910.419813][T17226] ------------[ cut here ]------------ [ 910.419827][T17226] usb 4-1: BOGUS control dir, pipe 80003180 doesn't match bRequestType c0 [ 910.419845][T17226] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#1: syz.3.3153/17226 [ 910.419935][T17226] Modules linked in: [ 910.419957][T17226] CPU: 1 UID: 0 PID: 17226 Comm: syz.3.3153 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 910.419986][T17226] Tainted: [L]=SOFTLOCKUP [ 910.419994][T17226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 910.420006][T17226] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 910.420029][T17226] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 910.420048][T17226] RSP: 0018:ffffc90004547718 EFLAGS: 00010246 [ 910.420066][T17226] RAX: 0000000000000000 RBX: ffff888032124900 RCX: 0000000080003180 [ 910.420081][T17226] RDX: ffff8880226a36c0 RSI: ffffffff8c133260 RDI: ffffffff8fdd5950 [ 910.420096][T17226] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 910.420110][T17226] R10: ffffc90004547800 R11: fffff520008a8f0c R12: 1ffff110066e7eb8 [ 910.420125][T17226] R13: ffff88803373f5c0 R14: ffff8880226a36c0 R15: 0000000080003180 [ 910.420140][T17226] FS: 00007f90da2f66c0(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000 [ 910.420157][T17226] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 910.420172][T17226] CR2: 00007ffb4c3456b8 CR3: 0000000025884000 CR4: 00000000003526f0 [ 910.423634][T17226] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000086 [ 910.423655][T17226] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 910.423670][T17226] Call Trace: [ 910.423679][T17226] [ 910.423701][T17226] usb_start_wait_urb+0x13f/0x5b0 [ 910.423735][T17226] ? rcu_is_watching+0x15/0xb0 [ 910.423762][T17226] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 910.423807][T17226] usb_control_msg+0x234/0x3e0 [ 910.423838][T17226] gl861_ctrl_msg+0x207/0x420 [ 910.423957][T17226] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 910.423986][T17226] ? futex_unqueue+0x22/0x240 [ 910.424033][T17226] ? get_futex_key+0x4a0/0x1580 [ 910.424055][T17226] ? futex_unqueue+0x22/0x240 [ 910.424086][T17226] gl861_i2c_master_xfer+0x439/0x6a0 [ 910.424126][T17226] __i2c_transfer+0x7be/0x1fe0 [ 910.424180][T17226] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 910.424206][T17226] ? lockdep_hardirqs_on+0x7a/0x110 [ 910.424229][T17226] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 910.424253][T17226] ? rt_mutex_lock_nested+0x156/0x1c0 [ 910.424305][T17226] ? i2c_transfer+0xc8/0x2d0 [ 910.424333][T17226] i2c_transfer+0x1cc/0x2d0 [ 910.424359][T17226] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 910.424392][T17226] ? __lock_acquire+0x6df/0x2e40 [ 910.424416][T17226] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 910.424442][T17226] ? i2cdev_read+0xeb/0x250 [ 910.424501][T17226] i2cdev_read+0x110/0x250 [ 910.424527][T17226] ? __pfx_i2cdev_read+0x10/0x10 [ 910.424549][T17226] vfs_read+0x219/0xa90 [ 910.424583][T17226] ? __pfx_vfs_read+0x10/0x10 [ 910.424610][T17226] ? __fget_files+0x2a/0x420 [ 910.424635][T17226] ? __fget_files+0x2a/0x420 [ 910.424655][T17226] ? __fget_files+0x3a8/0x420 [ 910.424675][T17226] ? __fget_files+0x2a/0x420 [ 910.424706][T17226] ksys_read+0x156/0x270 [ 910.424733][T17226] ? __pfx_ksys_read+0x10/0x10 [ 910.424766][T17226] do_syscall_64+0x17b/0x530 [ 910.424787][T17226] ? irqentry_exit+0x10f/0x8f0 [ 910.424808][T17226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.424832][T17226] ? clear_bhb_loop+0x40/0x90 [ 910.424859][T17226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.424879][T17226] RIP: 0033:0x7f90dc09de99 [ 910.424900][T17226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 910.424919][T17226] RSP: 002b:00007f90da2f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 910.424943][T17226] RAX: ffffffffffffffda RBX: 00007f90dc325fa0 RCX: 00007f90dc09de99 [ 910.424958][T17226] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 910.424970][T17226] RBP: 00007f90dc133eaf R08: 0000000000000000 R09: 0000000000000000 [ 910.424983][T17226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 910.424996][T17226] R13: 00007f90dc326038 R14: 00007f90dc325fa0 R15: 00007fffc9a93f58 [ 910.425030][T17226] [ 910.425041][T17226] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 910.425059][T17226] CPU: 1 UID: 0 PID: 17226 Comm: syz.3.3153 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 910.425088][T17226] Tainted: [L]=SOFTLOCKUP [ 910.425097][T17226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 910.425109][T17226] Call Trace: [ 910.425117][T17226] [ 910.425126][T17226] vpanic+0x56c/0xa60 [ 910.425168][T17226] ? __pfx__printk+0x10/0x10 [ 910.425194][T17226] ? __pfx_vpanic+0x10/0x10 [ 910.425213][T17226] ? is_bpf_text_address+0x292/0x2b0 [ 910.425244][T17226] ? is_bpf_text_address+0x26/0x2b0 [ 910.425277][T17226] panic+0xc5/0xd0 [ 910.425298][T17226] ? __pfx_panic+0x10/0x10 [ 910.425336][T17226] __warn+0x315/0x4c0 [ 910.425357][T17226] ? usb_submit_urb+0x1057/0x18b0 [ 910.425392][T17226] ? usb_submit_urb+0x1057/0x18b0 [ 910.425414][T17226] __report_bug+0x276/0x570 [ 910.425442][T17226] ? usb_submit_urb+0x1057/0x18b0 [ 910.425468][T17226] ? __pfx___report_bug+0x10/0x10 [ 910.425495][T17226] ? stack_depot_save_flags+0x3ec/0x800 [ 910.425570][T17226] report_bug_entry+0x19a/0x290 [ 910.425596][T17226] ? usb_submit_urb+0x1100/0x18b0 [ 910.425616][T17226] ? usb_submit_urb+0x1105/0x18b0 [ 910.425637][T17226] handle_bug+0xce/0x200 [ 910.425662][T17226] exc_invalid_op+0x1a/0x50 [ 910.425688][T17226] asm_exc_invalid_op+0x1a/0x20 [ 910.425711][T17226] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 910.425734][T17226] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 910.425754][T17226] RSP: 0018:ffffc90004547718 EFLAGS: 00010246 [ 910.425773][T17226] RAX: 0000000000000000 RBX: ffff888032124900 RCX: 0000000080003180 [ 910.425788][T17226] RDX: ffff8880226a36c0 RSI: ffffffff8c133260 RDI: ffffffff8fdd5950 [ 910.425804][T17226] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 910.425819][T17226] R10: ffffc90004547800 R11: fffff520008a8f0c R12: 1ffff110066e7eb8 [ 910.425833][T17226] R13: ffff88803373f5c0 R14: ffff8880226a36c0 R15: 0000000080003180 [ 910.425856][T17226] ? usb_submit_urb+0x1091/0x18b0 [ 910.425875][T17226] usb_start_wait_urb+0x13f/0x5b0 [ 910.425895][T17226] ? rcu_is_watching+0x15/0xb0 [ 910.425911][T17226] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 910.425936][T17226] usb_control_msg+0x234/0x3e0 [ 910.425953][T17226] gl861_ctrl_msg+0x207/0x420 [ 910.425976][T17226] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 910.425994][T17226] ? futex_unqueue+0x22/0x240 [ 910.426008][T17226] ? get_futex_key+0x4a0/0x1580 [ 910.426019][T17226] ? futex_unqueue+0x22/0x240 [ 910.426037][T17226] gl861_i2c_master_xfer+0x439/0x6a0 [ 910.426059][T17226] __i2c_transfer+0x7be/0x1fe0 [ 910.426074][T17226] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 910.426087][T17226] ? lockdep_hardirqs_on+0x7a/0x110 [ 910.426099][T17226] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 910.426112][T17226] ? rt_mutex_lock_nested+0x156/0x1c0 [ 910.426126][T17226] ? i2c_transfer+0xc8/0x2d0 [ 910.426140][T17226] i2c_transfer+0x1cc/0x2d0 [ 910.426155][T17226] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 910.426169][T17226] ? __lock_acquire+0x6df/0x2e40 [ 910.426182][T17226] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 910.426196][T17226] ? i2cdev_read+0xeb/0x250 [ 910.426213][T17226] i2cdev_read+0x110/0x250 [ 910.426226][T17226] ? __pfx_i2cdev_read+0x10/0x10 [ 910.426239][T17226] vfs_read+0x219/0xa90 [ 910.426258][T17226] ? __pfx_vfs_read+0x10/0x10 [ 910.426274][T17226] ? __fget_files+0x2a/0x420 [ 910.426288][T17226] ? __fget_files+0x2a/0x420 [ 910.426300][T17226] ? __fget_files+0x3a8/0x420 [ 910.426312][T17226] ? __fget_files+0x2a/0x420 [ 910.426329][T17226] ksys_read+0x156/0x270 [ 910.426346][T17226] ? __pfx_ksys_read+0x10/0x10 [ 910.426365][T17226] do_syscall_64+0x17b/0x530 [ 910.426378][T17226] ? irqentry_exit+0x10f/0x8f0 [ 910.426398][T17226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.426411][T17226] ? clear_bhb_loop+0x40/0x90 [ 910.426426][T17226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.426439][T17226] RIP: 0033:0x7f90dc09de99 [ 910.426451][T17226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 910.426461][T17226] RSP: 002b:00007f90da2f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 910.426474][T17226] RAX: ffffffffffffffda RBX: 00007f90dc325fa0 RCX: 00007f90dc09de99 [ 910.426484][T17226] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 910.426492][T17226] RBP: 00007f90dc133eaf R08: 0000000000000000 R09: 0000000000000000 [ 910.426500][T17226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 910.426508][T17226] R13: 00007f90dc326038 R14: 00007f90dc325fa0 R15: 00007fffc9a93f58 [ 910.426526][T17226] [ 910.426699][T17226] Kernel Offset: disabled