last executing test programs: 4m26.057498084s ago: executing program 3 (id=454): bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) sendmsg$netlink(r0, &(0x7f0000003800)={0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000740)={0x384, 0x30, 0x10, 0x70bd25, 0x25dfdbfd, "", [@typed={0x8, 0x7e, 0x0, 0x0, @fd}, @typed={0xc, 0x13e, 0x0, 0x0, @u64=0x5}, @typed={0x8, 0xb2, 0x0, 0x0, @u32=0x4}, @typed={0x4, 0x76}, @nested={0x10, 0x1d, 0x0, 0x1, [@typed={0x4, 0x103}, @nested={0x4, 0x106}, @nested={0x4, 0x145}]}, @typed={0x8, 0xa6, 0x0, 0x0, @fd=r0}, @generic="72fa2bcfb8b643593476a970d7ce8569bf5e285b429e89c9aec01d1fe2894e36df0ec5db0b4ca1db6dfec1630c550d25a2c9e0d1a9ab25ebd7bdaa5c2a3be02e3d0a137b9e48e06f6b0bf227924315c8c27f5fe13a54f8b39a3e441679298c3e535c5d72ce5da99e7fd7ed9989d9ab934e590ae8242efdc92a03834569867579b0535996a7120a8f30716a80406c5f888f66587993f3090363148806a1ed2b8f96162b7ee3a23238c8dc3da483a91584e7509d97832e88339dc31e3a95cc36df7cce99a03a9c5ac9232ebea73d17a233e3", @generic="6e888c12ae3b0f02da2328d04421157a564e6db8fb9924fd8f9e8e5c20aaffd14f8cd0636e82209e39bb6b7783cfaebfcfd7fc4776b23593121425538a3cf73b7abf33d51cc0ae499025c3219084884b1df273e015b2a4388166fc90010e7b475217124c9cea41803e7200ea1ebdb49138ff2bfa571eb29807e32adcbda73ecb7792bc953a64263cedaf2614b6409c4ddb81032e0b7f1774c956b73905d11dd42e3a5d3cf94ecad6a35d957412ca8e7b3540520d", @nested={0x1b1, 0x11d, 0x0, 0x1, [@generic="0607f178b02ef73bcc70ca281ad8dacf099239655b1c85bc45e08766571b6945a94a3a3b460f25466aa428c1c0da09cf613daa6ccb249ed4d0e331e7cb5cc854311a3424ee76942e55739a1ff607c3b77469257449ca6f3f09639b2f590981d6619cf65493efe0d13fbf748477a6deba8aad3eb646f561d040529a61a840117eb1661786390d40ca3b237204086c60ed4e80b05fb887879df3e37eb058b08ec4d56062ee25acb27f90991f413c435a6a962a724696d42422f1ac278266e089ee", @typed={0x8, 0xf7, 0x0, 0x0, @uid=0xee01}, @generic="72df9cdeec654ab2ef289ff9fe188c9748caad2920cf16cb3bbab1d72bb183383ef29c37275b2b2acb3a8508377b1628a1a426bd637a83755d4de9984b074172ae571d07c5c3dcb5161fe683bbc6a4ae78e22f133e3004d7f356df3324e5cf94682f2f8fd3258beade8c14cac320e57c78f76b78f63c76fccd33d4728694ac7eddeda8e866a423591c4bbe15575103dfe09abeed06cd6722e6be7ae5450cd87a3f7e69c3edfcb71469fcf420797595c2c4fb707aeff52bcb6fcf25ef7ebaba1c7ac081aaacff16b6a870ef29a4d830fca99c184a32eb685449b2c265fef14b4657b151e025"]}]}, 0x384}], 0x1, 0x0, 0x0, 0x40000}, 0x20000004) 4m26.056970987s ago: executing program 3 (id=455): sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e330000000c0017000201aa"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 4m25.980181768s ago: executing program 3 (id=457): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 4m25.931499911s ago: executing program 3 (id=458): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000780)={0x2c, &(0x7f00000004c0)={0x40, 0x7}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) r1 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) ioctl$LOOP_CONFIGURE(r1, 0x4c00, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000740)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) 4m23.501831419s ago: executing program 3 (id=468): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_usb_connect$uac1(0x3, 0xac, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0x0, 0xa0, 0xf6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x4}, [@processing_unit={0xd, 0x24, 0x7, 0x2, 0x4, 0x8, "b546d4035dde"}, @processing_unit={0x7, 0x24, 0x7, 0x2, 0x5, 0x6}, @mixer_unit={0x5, 0x24, 0x4, 0x5, 0x24}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x100, 0x4, 0x9, 0x7, 0x7f, 0x7f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0xb}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x9, 0x1, 0x3, {0x7, 0x25, 0x1, 0x80, 0x1, 0xb614}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x5c, 0x1002}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x45, 0x3, 0xea, 0x81}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x2, 0xfd, 0xb5, {0x7, 0x25, 0x1, 0x80, 0x87, 0x6}}}}}}}]}}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 4m22.254741133s ago: executing program 3 (id=478): creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x1deb13b9) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) listen(r0, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) creat(&(0x7f0000000280)='./file0\x00', 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x1deb13b9) (async) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) listen(r0, 0x3) (async) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) (async) 4m7.207547343s ago: executing program 32 (id=478): creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x1deb13b9) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) listen(r0, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) creat(&(0x7f0000000280)='./file0\x00', 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x1deb13b9) (async) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) listen(r0, 0x3) (async) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) (async) 2m40.031317657s ago: executing program 0 (id=1197): prctl$PR_SCHED_CORE(0x4d, 0x3, 0x0, 0x0, 0x0) 2m39.95710287s ago: executing program 0 (id=1198): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xfffffff6, @private0, 0x9}]}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000505ffe10000000000007770616e330000000c0017000201aa"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r4 = socket$can_bcm(0x1d, 0x2, 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x204c08, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0, @ANYRES8=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x46, 0xfffa}, 0x3a, [0xc001, 0x3, 0xf, 0xb1eb, 0x20080, 0x7, 0x3, 0x2, 0x2000000a, 0x20000000, 0x8, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1002, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x2, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x8e660, 0x4, 0x7, 0x3, 0x1000008, 0x4c74, 0x80000000, 0x242, 0x6, 0x10, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x3, 0xa8000000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10000005, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x7f6fdd94, 0x0, 0x8, 0x2e, 0xe, 0x4, 0x78, 0x5, 0xfff, 0x0, 0x7, 0x7fff, 0x5, 0x1, 0x401, 0x6, 0x1, 0xff, 0x5, 0x7cb, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x200, 0x9, 0x4, 0x40000d, 0xe1, 0x44, 0x8000, 0x1, 0xfe000000, 0xfffd, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x5, 0xfffffff8, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x7, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0xbc6f, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x3, 0x10800003, 0x200, 0xaf8, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x2000005, 0x6, 0xaca, 0xbe, 0x4002, 0x23, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb2f, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x12, 0xb9, 0xce7, 0x1ff, 0x2, 0xfffffffb, 0x5, 0x3, 0x101, 0x2010000, 0xc, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x401, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x8000003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x101, 0xa1f, 0xf44, 0x7, 0x1, 0x6c18, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x1ff, 0xfffffffb]}, 0x45c) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000140)={0x1d, r6}, 0x10) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e000000000000ea08000f0001000000", 0x24) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) 2m39.842602394s ago: executing program 0 (id=1200): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0xd, 0x1, 0x0, "d287202724ca4a48090000003323de4e0b33e71c059706050000ae035b0e363f", 0x34325258}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000500)={0xf127, 0x1, 0x4, 0xffff, r2}, 0x10) 2m39.440960073s ago: executing program 0 (id=1202): sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e330000000c0017000201aa"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (fail_nth: 6) 2m38.994393126s ago: executing program 0 (id=1204): pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580300001900010000000000fbdbdf251d010900500012804c00f8801400330000000000000000000000ffff640101013100fb80b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72000000f4020680f05e"], 0x358}, 0x1, 0x0, 0x0, 0x5}, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r5 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x8000}) r7 = fcntl$dupfd(r6, 0x406, r1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r7}) close_range(r0, 0xffffffffffffffff, 0x0) 2m38.929254916s ago: executing program 0 (id=1205): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$ndb(&(0x7f0000000500), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0x1278, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002cbd7000ffdbdf250100000000000100000000000018001700000004000000010100703a73797a3200000000"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x804) socket(0x0, 0x4, 0x2) r2 = socket(0x22, 0x2, 0x4) getpeername$packet(r2, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) rt_sigtimedwait(&(0x7f0000001200)={[0x3ff]}, 0x0, &(0x7f0000001240)={0x0, 0x3938700}, 0x8) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x802}, 0xe) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000400)=@req={0x28, &(0x7f00000003c0)={'veth1_virt_wifi\x00', @ifru_settings={0x8, 0x4, @cisco=&(0x7f0000000380)={0x7, 0x7}}}}) r5 = accept4$bt_l2cap(r3, &(0x7f0000000340)={0x1f, 0x0, @none}, &(0x7f00000001c0)=0xe, 0x80000) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000300)={0x4, 0x5, 0x80, 0x9, 0xe, 0x6, 0x200}, 0xc) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) ioctl$UI_SET_LEDBIT(r6, 0x40045569, 0x4) sendmmsg$inet(r3, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="37d2658c631d17f24aa17810c43112e984db1ecd2ee0de8baec8da37e18e340d474de5818c497548bcd6b487132a9a90b3aa6a60814569bf44b25b685989d84d49d10b974ced0fb22a49832afc", 0x4d}], 0x1}}], 0x40000000000010d, 0x800) 2m23.208084074s ago: executing program 33 (id=1205): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$ndb(&(0x7f0000000500), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0x1278, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002cbd7000ffdbdf250100000000000100000000000018001700000004000000010100703a73797a3200000000"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x804) socket(0x0, 0x4, 0x2) r2 = socket(0x22, 0x2, 0x4) getpeername$packet(r2, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) rt_sigtimedwait(&(0x7f0000001200)={[0x3ff]}, 0x0, &(0x7f0000001240)={0x0, 0x3938700}, 0x8) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x802}, 0xe) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000400)=@req={0x28, &(0x7f00000003c0)={'veth1_virt_wifi\x00', @ifru_settings={0x8, 0x4, @cisco=&(0x7f0000000380)={0x7, 0x7}}}}) r5 = accept4$bt_l2cap(r3, &(0x7f0000000340)={0x1f, 0x0, @none}, &(0x7f00000001c0)=0xe, 0x80000) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000300)={0x4, 0x5, 0x80, 0x9, 0xe, 0x6, 0x200}, 0xc) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) ioctl$UI_SET_LEDBIT(r6, 0x40045569, 0x4) sendmmsg$inet(r3, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="37d2658c631d17f24aa17810c43112e984db1ecd2ee0de8baec8da37e18e340d474de5818c497548bcd6b487132a9a90b3aa6a60814569bf44b25b685989d84d49d10b974ced0fb22a49832afc", 0x4d}], 0x1}}], 0x40000000000010d, 0x800) 44.671897995s ago: executing program 2 (id=1723): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x604400, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xe5) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/132, 0x84}], 0x1, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f0000003800)={0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000100)={0x120, 0x30, 0x10, 0x70bd25, 0x25dfdbfd, "", [@typed={0xc, 0x13e, 0x0, 0x0, @u64=0x5}, @generic="aa53def794a7cd146d4487ca94a74e63ad3b6509f02600004bb1cbd9ebe5f707aab8e5c4807620ecef81b9c50528c43e4fa0ef2a34c2ac0b56c1ec8a74bb01a99a66032afe2ad13c5b4094a63c537cebb404494a314f38325d2f840deb58e23d72579dd9af1db0ce5b38874f5fe1fb61285febcf1075f1d90b6262b5400fd6ded79e1a75b0abf3018da3e311d9e7ec254c4a28d929f3f1815eadcd905016cdc2f964a87ca5ef840d05e8f521e12b42944193d00db5171a627340efd6b7e74f1e5b937f0f8bb214fe4bab5f6fc1261fff486b4078a4f65927874430a773d55bc3a23a32a3b36ae5724722668352334b3a00"/252, @generic="6e888c12", @nested={0x4, 0x11d}]}, 0x120}], 0x1, 0x0, 0x0, 0x40000}, 0x20000004) 43.798377275s ago: executing program 2 (id=1728): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 43.769094249s ago: executing program 2 (id=1729): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1532, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x8, 0xfa}}}}}]}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$9p_fd(0x0, 0xfffffffffffffffe, &(0x7f00000002c0), 0xa400, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c63616368657461673d2d5c262c736563c4fbdaab5e1c6c6162656c2c736d61636b66736465663d6e6c3830323131002c646566636f6e746578743d756e636f6e66696e65645f752c736d61636b66737472616e736d7574653d2f2d2f9c2d2c"]) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000000)={0x10000, 0x4, 0x9, 0x0, 0x9}) open(&(0x7f0000000200)='./file0/file0\x00', 0x400, 0x6) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x3, 0x4000, 0x0, {0x3, 0x0, 0x1, 0x0, 0x3, 0x10000000000, 0x0, 0x1, 0x3ff, 0x6000, 0x9, 0x0, 0x0, 0x801, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r6, 0xc0984124, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000240)='wlan1\x00', &(0x7f0000000280)=@random="65c9", 0x2, 0x0) write$FUSE_INIT(r3, &(0x7f0000001240)={0x50, 0x0, r4, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x8, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50) gettid() r10 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) ioctl$VIDIOC_QUERYBUF(r10, 0xc0585609, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000003c0)={0x0, 0x3b, 0x5, {0x5, 0xd, "4d8188"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 40.521340014s ago: executing program 2 (id=1743): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0/../file0\x00', 0x100) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f00000001c0)='./file0\x00', 0x88901) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newspdinfo={0x1c, 0x24, 0x801, 0x70bd2d, 0x25dfdbfb, 0xc, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48881}, 0x40) 40.393746607s ago: executing program 2 (id=1745): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000440)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file1\x00', &(0x7f0000000380)='ntfs3\x00', 0x3008040, &(0x7f00000000c0)='\x9e\xccac\x00\x00\x00\x00\x00\x00') ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000240)={0xed, 0x0, 0x7}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x4, 0xa13ca8e5839881a3, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000800}, 0xc, &(0x7f0000000140)={&(0x7f0000002a80)=ANY=[@ANYBLOB="9c000000887c9bc86c146e79171a0000082cbd7000ffdbdf000000da14bf93252b686c28b92519fa3e92d8c9127d67ebcb0422fed6cae41b7b743908c312800fc826dcc47463b02d3567106ed3d821105dda067b292a2ec86af256e1927dd1d74d713f79cb408482314fcde9b6d340864c650a9ff33c427d7a1ba2c51800d38014002300fc020000000000000000000000000000842c1053d0d6d9243921c00768702b5af3ef5da91e36324d4831fcc3e59a3b31c97a2d5e983b366e50d499eb23f425ee1abf4226f18c7f4dcb4ca98f674592b96b1383b8e5ffa7ade0520b944ba38e4886a8fabb624436508ab5b0aae09a09bb00"/259], 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x8011) r6 = accept4(r2, 0x0, 0x0, 0x80000) r7 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f0000002a40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a00)={&(0x7f0000000480)={0x96, 0x1, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0x0, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x0, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x24, 0x6, "44a1897f9c357c9bb0c2373a355154ba4ef2aeaf98cb17995ed02aafbfaf757d"}, @NFTA_TABLE_USERDATA={0xfffffffffffffe0a, 0x6, "bfac944af53100a44182598f655476f8504cc686686d08423a7fb5e67491cf5a510cdc472780606d96ded93e4e5dda84839ed60004a7e1810c726960"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000815) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000002c0)={0x0, 0x10000, 0x1000, 0xffffffff, 0x1}, 0x20) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r6) r8 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) fstat(0xffffffffffffffff, 0x0) accept4(r8, 0x0, 0x0, 0x400000000000000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) 39.889073982s ago: executing program 2 (id=1749): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406d049cc200000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x48, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x8084) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@multicast1=0xe0000002, @in6=@remote, 0x0, 0xffff, 0x0, 0x0, 0xa, 0x80, 0x0, 0x32}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffb}, {0x0, 0x5, 0x0, 0x400000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r4, &(0x7f0000000000)='\a\x00\x00\x00', 0x4) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000000c0)={0x20, 0xc, 0x6, {0x6, 0x31, "330d44d8"}}, 0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000036000701ffff15ff6ed7602803"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x200088b0) syz_usb_control_io(r0, 0x0, 0x0) 39.533645666s ago: executing program 34 (id=1749): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406d049cc200000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x48, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x8084) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@multicast1=0xe0000002, @in6=@remote, 0x0, 0xffff, 0x0, 0x0, 0xa, 0x80, 0x0, 0x32}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffb}, {0x0, 0x5, 0x0, 0x400000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r4, &(0x7f0000000000)='\a\x00\x00\x00', 0x4) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000000c0)={0x20, 0xc, 0x6, {0x6, 0x31, "330d44d8"}}, 0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000036000701ffff15ff6ed7602803"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x200088b0) syz_usb_control_io(r0, 0x0, 0x0) 33.593098401s ago: executing program 4 (id=1768): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r0, r1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syz_tun\x00', @random="3dc8f51b6408"}) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000141200006c07010033d42ffffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r9, 0x1, 0x3f, 0x0, &(0x7f0000002140)) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={0x3c, r8, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x7ff2}, @device_b, @device_a, @from_mac=@broadcast, {0x8, 0x8}}, 0x39, @void}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9a0b7329", @ANYRES16=r3, @ANYBLOB="0100fefffffffbdbdf256700000008000100ffffffff08000300", @ANYRES32=r7, @ANYBLOB="0c00990001000000feffffff"], 0x30}, 0x1, 0x0, 0x0, 0x676a6d31351271e6}, 0xc800) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b48, &(0x7f0000000000)={0x0, 0xc5f9, 0x1, 0x1, 0xc3}, 0x0, 0x0) r12 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r12, &(0x7f0000000000)={&(0x7f0000000240)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) getsockopt$inet_int(r12, 0x0, 0xe, 0x0, &(0x7f0000000180)) ioctl$USBDEVFS_ALLOW_SUSPEND(r10, 0x5522) fcntl$setpipe(r11, 0x407, 0x0) r13 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r13, 0x4020565a, &(0x7f0000000100)={0x3, 0xe}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r13, 0x4020565b, &(0x7f00000000c0)={0x2}) write$FUSE_INIT(r11, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}}, 0x50) vmsplice(r11, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f00000006c0)=""/4096) 32.60115034s ago: executing program 4 (id=1772): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 32.432643074s ago: executing program 4 (id=1773): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00') fchdir(r1) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x37, @time={0xbf, 0x316575}}) 32.217249304s ago: executing program 4 (id=1775): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chmod(&(0x7f00000001c0)='./file0/file1\x00', 0x10) r0 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000280)={0x8000000000000001, 0x3, 0x5, 0xfffffffb}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) lseek(r1, 0x9, 0x2) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 32.001436s ago: executing program 4 (id=1776): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8, 0xf00) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000200)={0x15, 0x2000000}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a0000340102802e011480080018"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000d80)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f00000014c0)='*(\x00') r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000240)=""/93, &(0x7f0000000040)=0x5d) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="79e11d356ba19cd6c347f9e325d6ab7e60857e0b39308740321f8e9323000880c309045c0502080650030905ea2b648ee13b58e9364ada817a48160a672b44069016c4a69dffba7f18fff3ff24eb10994e2ebe60a5a7c3c468f368c06f85b5dfcbead9581534", @ANYRESOCT=r0], 0x0) 30.535435322s ago: executing program 4 (id=1780): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x10008095, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) 30.283111746s ago: executing program 35 (id=1780): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x10008095, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) 6.511904456s ago: executing program 5 (id=1917): r0 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x28, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x9, 0xb2, 0x9f, 0x40, 0x157e, 0x3204, 0xea6f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb0, 0x0, 0x0, 0x3c, 0x21, 0x29, 0x0, [@generic={0x4, 0x9, "8b40"}]}}]}}]}}, 0x0) 5.287472906s ago: executing program 5 (id=1918): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r1) sendmsg$netlink(r1, &(0x7f0000003800)={0x0, 0x0, &(0x7f0000003380)=[{0x0}], 0x1, 0x0, 0x0, 0x40000}, 0x20000004) 4.528846083s ago: executing program 1 (id=1923): sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e330000000c0017000201aa"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1, 0x0, 0x0, 0x3000000}, 0x0) 4.488193995s ago: executing program 1 (id=1924): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904f50e803fb833486894fa209ec85ff63a8627b0984a55dde7fe91730d48413a3322d6ca1f1618a28d74fe1ab709832d72", @ANYRESDEC], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="a01302"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000140)=@keyring) (async) keyctl$KEYCTL_MOVE(0x1e, 0x0, r1, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @host, 0x8, 0x0, 0x5b, 0x6, 0x100000000000006}) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x880080, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r2, 0x7a4, &(0x7f0000000040)={{@my=0x0, 0x2}, 0x5, 0x5, 0x3, 0x6}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x800, 0x2) (async) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000140)={0x0, 0x60, 0x4, {0x0, @sdr={0x32314d54, 0x101}}}) (async) add_key(&(0x7f0000000300)='ceph\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f0000000640)="baa4c35963cb12a1f1f6b5612a6e16ddc9328fbc8b6303012925dcd2cc48475dcfd2f28f2338b5bc00be85b9cfe62abb72ec47db830b2c7e543b3a32560f80e0951182b29f1b1b61c99b145d647569110c22c7564688150fac34fcc9afb7b37480d9ffefbe9cb129802a", 0x6a, 0xfffffffffffffff9) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000540)={0x3ff, 0x9, 0x2, {0x2, @win={{0x80000000, 0x5, 0xfffff7a4, 0xffffffff}, 0x0, 0x47, 0x0, 0x8, 0x0}}, 0x8}) socket$l2tp(0x2, 0x2, 0x73) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0100001000130427bd7000fbdbdf25fe800000000000000000000000000000ac1414bb000088000000000000000000000000000000000000000000005a3e00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="0258a7b81bfd"], 0x15c}}, 0x4000080) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r2, 0x7a4, &(0x7f0000000200)={{@my=0x1, 0x9}, 0x0, 0x2c7, 0xfffffffb}) (async) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006, 0x3}) poll(&(0x7f0000000280)=[{r2, 0x2000}, {r7, 0x1030}, {r5}], 0x3, 0x3) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r7, 0x7a4, &(0x7f00000002c0)={{@host, 0x2}, 0x0, 0x20000009, 0x2, 0x40}) (async) sendmsg$802154_dgram(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000180)={0x0}}, 0x10) 4.399383511s ago: executing program 5 (id=1926): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)={0x4c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x6}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f00000003c0)={0x2, &(0x7f0000000340)=[{0xffff6a58, 0xae, &(0x7f0000000200)="b254e560742ad943fc89136fd927da114e60cdf0f7218e26b18346247284ecf05c54f8b4b02b621c7c1fdce46ac4e9cec9cf474e6244a3739d09310a0a83814bd8b96456c5421ecf6d8ec3a82d77a10ec010eb17a2a055944400b2f00110674ed8b8bf8e4d33ffac1d4dfeabd5aa2e2dd74bb3ec47281b6f50bc5e73c73a836a3e5c4fbc65fbb4acf4bd9f9dca7de9c42e3bbe57c3965a6ad32fea4d0e017a0a30fa1c746382ea275c4764c02968", 0x1}, {0x8000, 0x19, &(0x7f0000000300)="b784e58eb6eb8dc6a86325b5ebb73bbe338e890b9744056f0f", 0x0, 0x1}]}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r2) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48050}, 0x40) syz_usb_connect(0x2, 0x371, &(0x7f0000000280)=ANY=[], 0x0) 2.923505067s ago: executing program 1 (id=1935): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x1, 0x1d, 0xd, 0x200, &(0x7f0000000000)="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"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) (async) r2 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) syz_usb_disconnect(r2) ptrace$poke(0x4, r1, &(0x7f0000000080), 0x0) getpgid(r1) r3 = fsopen(&(0x7f0000000440)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x4, 0x6, @link_local}, 0x14) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x5, {{0xa, 0x4e21, 0x10, @mcast2, 0xff}}}, 0x88) setsockopt$inet6_group_source_req(r5, 0x29, 0x2d, &(0x7f0000000340)={0x2000001, {{0xa, 0x4e24, 0xfffffffc, @mcast2, 0xfffffffb}}, {{0xa, 0x0, 0x82, @local, 0x5}}}, 0x158) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x74, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x24048000}, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ppoll(&(0x7f00000000c0)=[{r0, 0x1010}], 0x1, &(0x7f0000000040)={0x77359400}, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r7 = syz_open_dev$vcsu(&(0x7f0000000000), 0xfff, 0x1) mount_setattr(r6, &(0x7f0000000080)='./file0\x00', 0x8000, &(0x7f00000000c0)={0x1, 0x3, 0x100000, {r7}}, 0x20) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r9, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfe, 0xe1, 0xc, 0x16, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x8, 0x40, 0x1, 0x5}}) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000fb"], 0x830200) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000000)={[0x71, 0x3, 0x0, 0x20, 0xc09, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0xc, 0xffffffffffffffff, 0x800000004, 0x0, 0x8001], 0x2, 0x202}) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a240100000002010213240600000600000000000000dfff000000000924030000000000000924050000f8431cfd09240300000300040206240504"], 0x0) syz_usb_control_io$uac1(r11, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00030400000204030204"]}, 0x0) 2.386180571s ago: executing program 6 (id=1939): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f0000000000)=0x1000000, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ddbd7310820505000000000000010902120001000000000904"], 0x0) 1.293215225s ago: executing program 5 (id=1940): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000520000000000000000000a38000000060a01f5e7ffff00000000000200000009000200010dea45891547b60900010073797a30000000000c0006"], 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040810}, 0x10080810) (async) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) r5 = syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="3101000009005e08cb06030000e8160000010902240001000064000904340102d469e70009058a"], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) (async) r7 = dup(r6) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r9, 0x84, 0x17, &(0x7f0000000140)={r11, 0x9778, 0x3, '8Z.'}, 0xb) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f0000000240)={r11, 0x8, 0xc3dcd790642c4d32, 0x80000001, 0x4}, &(0x7f0000000280)=0x18) (async) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f00000002c0)=0x10000) syz_kvm_setup_cpu$x86(r7, r6, &(0x7f0000715000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x66, 0x0, 0x0) r12 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$IOC_PR_RESERVE(r7, 0x401070c9, &(0x7f00000001c0)={0x99, 0x14c00000, 0x1}) read(r12, &(0x7f0000000080)=""/201, 0xc9) (async) socket$nl_generic(0x10, 0x3, 0x10) 1.250894851s ago: executing program 7 (id=1941): sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e330000000c0017000201aa"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1, 0x0, 0x0, 0x10000000}, 0x0) 1.18646962s ago: executing program 6 (id=1942): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 1.100957673s ago: executing program 7 (id=1943): ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000440)={0x0, 0x5, 0x0, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000200)=[{}], 0x3, 0x0, &(0x7f0000000280)=[{}, {}, {}], 0x8, 0x0, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000440)={0x0, 0x5, 0x0, &(0x7f0000000000)=[{}, {0x80000000}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000200)=[{}], 0x3, 0x0, &(0x7f0000000280)=[{}, {0x0, 0x80000000, 0x0, {0x0}}, {0x0, 0x80000000, 0x0, {0x0}}], 0x8, 0x0, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000580)={0x80000000, &(0x7f00000004c0), &(0x7f0000000500)=[{{0x80000000}}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x1, 0x0, &(0x7f00000005c0)=[{}], 0x7, 0x0, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000980)=[{0x0, 0x80000000, 0x0, {0x0}}, {}], 0x3, 0x0, &(0x7f00000009c0)=[{}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000ac0)={{r1, 0x0, 0x4, [0xa, 0x9]}, {r4, r7, 0x0, [0xbce, 0x5]}, 0x1, [0x650d]}) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000b00), 0x101000, 0x0) bind$bt_hci(r8, &(0x7f0000000b40)={0x1f, 0x4, 0x5}, 0x6) ioctl$PPPIOCBRIDGECHAN(r8, 0x40047435, &(0x7f0000000b80)=0x5) r9 = socket$alg(0x26, 0x5, 0x0) fcntl$getownex(r9, 0x10, &(0x7f0000000bc0)) io_setup(0x6, &(0x7f0000000c00)) (async) io_setup(0x6, &(0x7f0000000c00)=0x0) io_cancel(r10, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x1, 0xaaa, r9, &(0x7f0000000c40)="313c5ffe579ac1d59a685ae24dc827b8860c4b25b6376a036d48b1c4c8c24c7816f509c9fc4c49ba048004bd0cbaff046cc8e66d8dcdcc32897de74bc37e70b9e64158cc590d8b782dbde2a4095528caaeb104b0e6f5647d26e4c76b61aa1b6633d3d1ae01a0005c", 0x68, 0x7fff, 0x0, 0x0, r8}, &(0x7f0000000d00)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r8, {0xee01, 0xee00}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r9) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r9) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r11, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x38, r12, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}]}, 0x38}}, 0x800) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000ec0)={0x6, 0x0, [{0x7, 0x6, 0x2, 0x3, 0x4, 0xfffffffa, 0x9}, {0x80000001, 0x10001, 0x1, 0x2, 0xb, 0x3e26c0a5, 0xa4d2}, {0xc0000000, 0x7, 0x1, 0x7, 0x9, 0x1, 0x3}, {0xb, 0xb8, 0x3, 0x0, 0xbe7, 0xffff, 0x54a9}, {0xc0000000, 0x6, 0x8004622f76c2c3f8, 0x2, 0x5, 0x0, 0xade}, {0x80000019, 0x9, 0x5, 0xa6, 0x9, 0x52e, 0x5}]}) (async) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000ec0)={0x6, 0x0, [{0x7, 0x6, 0x2, 0x3, 0x4, 0xfffffffa, 0x9}, {0x80000001, 0x10001, 0x1, 0x2, 0xb, 0x3e26c0a5, 0xa4d2}, {0xc0000000, 0x7, 0x1, 0x7, 0x9, 0x1, 0x3}, {0xb, 0xb8, 0x3, 0x0, 0xbe7, 0xffff, 0x54a9}, {0xc0000000, 0x6, 0x8004622f76c2c3f8, 0x2, 0x5, 0x0, 0xade}, {0x80000019, 0x9, 0x5, 0xa6, 0x9, 0x52e, 0x5}]}) ioctl$MEDIA_IOC_SETUP_LINK(r8, 0xc0347c03, &(0x7f0000000fc0)={{r6, r2, 0x7, [0x2b50, 0xfffffffe]}, {r5, r3, 0x0, [0x5, 0xe66a]}, 0x4, [0x6b, 0x8]}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r8, 0xc0347c03, &(0x7f0000000fc0)={{r6, r2, 0x7, [0x2b50, 0xfffffffe]}, {r5, r3, 0x0, [0x5, 0xe66a]}, 0x4, [0x6b, 0x8]}) r13 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$VIDIOC_DQBUF(r11, 0xc0585611, &(0x7f0000001000)=@overlay={0x2, 0xa, 0x4, 0x10, 0x532, {0x0, 0x2710}, {0x3, 0x1, 0x2, 0x4, 0xdd, 0x9, "f5bc1850"}, 0x10001, 0x3, {}, 0x1000, 0x0, 0xffffffffffffffff}) setsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f0000001080)={0x0, 0x4}, 0x8) ioctl$BLKIOOPT(r11, 0x1279, &(0x7f00000010c0)) (async) ioctl$BLKIOOPT(r11, 0x1279, &(0x7f00000010c0)) ioctl$MEDIA_IOC_G_TOPOLOGY(r8, 0xc0487c04, &(0x7f0000001740)={0x0, 0x3, 0x0, &(0x7f0000001100)=[{0x80000000}, {}, {}], 0x8, 0x0, &(0x7f0000001240)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000015c0)=[{}, {}, {}, {}], 0x5, 0x0, &(0x7f0000001640)=[{}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r8, 0xc0347c03, &(0x7f00000017c0)={{r0, r7, 0x6, [0x3, 0xf]}, {r15, r2, 0x2, [0x24, 0x2be5]}, 0x1, [0x2]}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r8, 0xc0347c03, &(0x7f00000017c0)={{r0, r7, 0x6, [0x3, 0xf]}, {r15, r2, 0x2, [0x24, 0x2be5]}, 0x1, [0x2]}) ioctl$F2FS_IOC_RESIZE_FS(r14, 0x4008f510, &(0x7f0000001800)=0x5) (async) ioctl$F2FS_IOC_RESIZE_FS(r14, 0x4008f510, &(0x7f0000001800)=0x5) ioctl$VHOST_VDPA_GET_VRING_GROUP(r8, 0xc008af7b, &(0x7f0000001840)={0x0, 0x8}) ioctl$KVM_SET_TSC_KHZ_cpu(r11, 0xaea2, 0x5) fallocate(r13, 0x44, 0x5, 0x1) ioctl$sock_ifreq(r11, 0x89b1, &(0x7f0000001880)={'veth0_vlan\x00', @ifru_map={0x7, 0xc, 0x4, 0x6, 0x1, 0x20}}) (async) ioctl$sock_ifreq(r11, 0x89b1, &(0x7f0000001880)={'veth0_vlan\x00', @ifru_map={0x7, 0xc, 0x4, 0x6, 0x1, 0x20}}) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000001cc0)={0x0, 0x0, 0x2, 0x9, 0x20, &(0x7f00000018c0)="1c1a5d16c78de9782ba7dc5d2315e79ee6def561ea97f8e7ae1b888856fa195f8f15a8683ec11a09334f1b65de6f5f6d4296029bd51b249315828df5e648983fb6c20190a7af75a2b757e1713a306c1439be4256a527937c3bc2b26a55e46d4ebda4c5e8c28a984f3bcec04b075e174910d887a81e053d56b6ade919532bd4b28e3bd13025c6e2eeab7721dd18261410acf4fc49f82fb47b4af59ef947dcae7d747e4c3069f00189aef561abe1653734cbe3f9e779242a0f7f624751e53a1231187c7c45306c655b6389faa51b630d4501418d1f88af2d5e81515e34b38bf2c6e1809e151557dd01c24a41e6a35dec00981af15875d74e4caa484dc47c57252cc52d9863224ed9afae7838ea5c9e5e12ac615bdbaf60af1e363ca5157d2c7f9949fecbe0d2252dde0be1a34ccad4049c2a8698d4726dcd43aa273a59ecc56ec45db8e5e5aea0e3cf0aa53efc6a71ce45e60d79d7e317d6ef7631873ea25b0e5fd5685bd68b09bdd0263718ae4d33a92c18d7b38a574ced14f410375e88daf9d3f45666564ace2840911874072c7fd832b32619687d76a1b2a89b0deda4ef68be963319cb7d1d94eff3a6ef3165e9f9d8143f53f858642d5570959e14ac6b805bf3a27207dd99951a1200d2d4df4e6d330220e537248ca3804d39994a579626d34c8e226ca355f09d7ab9d764273ddb5c887a9f45e769b8d9a981b199b77ea7aaff0a3e8aa34e06f0d3e362ad2fdb35acd9f59d0e77069324e3c266422c910588a45b912d5939be99c191eedb9d93f63d842b2d50c65b7ccf1739a055f731c152c344410ff2824f1167c0b02053fd91723859e066ebcfc944857a8e0feb554deb6043244064cc900297538eab5489faf53dcbc9466d84f06cecafc06ea867923841c03ff14c71552163107616cde7473c69f6f23b716e623ec21e0e5b50c5bf8ef4b4b7c118f318590a8a0d481e1004a17cd989bff21099d0b1a5114515d337b77cd9271582f0b4692330e1a572c4b490347b4a900c1af04cc8fb192500b300fc6fd4500afe077a4ef86f16b2716ba7d2c848d71a9b57d13a9219b31f40d6bb50dad4ab0935e9f267ce0b2d93ffeeb3738df9f1b8aecd5e85521a3547e8420c4d29563acd7bdc62f6adde6782a63ad707ca327b19dd87973feb1fc5a167905ad8be234043a7a45d3f1a581f44b2e4315a6cb59db7e640cffa5ab4842d777829579fd0bd03b4c57e77bdbe65ebae4968f94dbb1fd3a014ebc63f3c680cd8d32344f309ac9c6b9b62fb4e8ffb8a43ac03bcbeda95b15f19b500499e6963db3caba5f44edba0dc543e6ce3011b78cc1e0ba59c6d8c9ad9efe38f8a92c9b0a42c6fd90ad8af15c9b0e0bf07ca545e79bfff4f8e2f637f617005a8795b8f697f6c97a8e79ad1955f345b81643d0346a5d8e6b322883cce80a0ba23ea055cbaa1d92a3e"}) (async) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000001cc0)={0x0, 0x0, 0x2, 0x9, 0x20, &(0x7f00000018c0)="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"}) ioctl$DRM_IOCTL_SWITCH_CTX(r11, 0x40086424, &(0x7f0000001d00)={0x0, 0x2}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000001e00)={0x14, &(0x7f0000001d40)={0x0, 0xd, 0x46, {0x46, 0x21, "ad607e07c0cbf2d6c35a8e3164ab3f4106ec30a2ddbc62b309ad25034c3ddf340a48e9623a2400927db4d20d55dee9780c5eaead582d1806a0ce11a76f215973f8e86a79"}}, &(0x7f0000001dc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001f00)={0x1c, &(0x7f0000001e40)={0x40, 0xe, 0xd, "2b1dc0f9bebd606daee3fed5b5"}, &(0x7f0000001e80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001ec0)={0x0, 0x8, 0x1, 0x4}}) 1.097567232s ago: executing program 6 (id=1944): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f00000003c0)={0x1, 0x0, 0xe}, 0x0) 1.036239946s ago: executing program 6 (id=1945): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi5\x00', 0x400400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'aio_aio12_8\x00', [0x4f2b, 0x3, 0xffff, 0x400, 0x5, 0xcc7, 0x40c, 0x7, 0xa, 0x38, 0xc, 0x8, 0x1, 0x1, 0x6, 0x141, 0xffffffff, 0x1a449, 0x83, 0x40000401, 0x89, 0xcaa7, 0x1, 0x20001e58, 0x9, 0xe69, 0x2, 0x8, 0x6, 0x400, 0xfffff7f8]}) r1 = socket$tipc(0x1e, 0x5, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x3, 0x0, @empty, 0xfffffffe}, 0x1c) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0xfffffffffffffffe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x77359400}}, 0x0) ioctl$COMEDI_RANGEINFO(r0, 0x80106408, &(0x7f0000000180)={0x7, &(0x7f0000000040)}) landlock_restrict_self(0xffffffffffffffff, 0x0) bind$tipc(r1, 0x0, 0x0) ioctl$COMEDI_BUFINFO(r0, 0xc02c640e, &(0x7f0000000000)={0x6, 0x1, 0x80, 0x0, 0x10000, 0x2, 0x80000001}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000080), 0x0, &(0x7f00000025c0)={0x77359400}, &(0x7f0000002600)={[0x7]}, 0x8) openat$cgroup_subtree(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x6) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r6 = dup2(r5, r5) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x5) r7 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r7, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000005c0)="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", 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r7, 0xc01064ac, &(0x7f0000000040)={r8, 0xcf4, &(0x7f00000015c0)=""/4096}) fallocate(r7, 0x62, 0x200004, 0xd) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0xfffffffe, 0x6, 0x200}) read$FUSE(r6, &(0x7f0000002640)={0x2020}, 0x2020) 445.324379ms ago: executing program 7 (id=1946): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 420.660611ms ago: executing program 7 (id=1947): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000100)=ANY=[@ANYBLOB="56965d3b9d06285ae3299d9c8b4cf94732c48495386c5e403c923b03783bba97507ac4a8465e01a8283b95", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_fuse_handle_req(r0, &(0x7f0000009b40)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x0, 0xdcf, 0x4005, 0xb, 0x800, 0x0, 0x0, 0x10, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x4, {0x3, 0x4, 0x0, {0x4, 0xfffffffffffffe01, 0x6, 0x1000000000000002, 0x4000000006, 0x7, 0x6, 0xfffffff7, 0x3, 0xc000, 0x7, 0xee00, 0x0, 0x9, 0x1000408}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000700)='./file0\x00', 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl(r2, 0xfffff000, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x248}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) 338.609472ms ago: executing program 7 (id=1948): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendto$inet(r0, &(0x7f0000000140)="ee827fff138c03a017d5c3121aa5b19caafcc08b2edb46e13278ed5759a6082e983409d141af00a5308a4bd13b9f3a130aade9c1c1caaa9a940828d980947d4a4c61db5c2e121c1fd39ea4c0eb27dbcf3f2ba97ddf07fb06727be519c7dfc7d9d13481ffe0a6a0759625c26cfbd48e760b9cc7aa79bfb2266df21c040682a6335ca2384335a166bbef1eb92ea966c198b992ac62e7c3d354acd29f0b98cecaa875c9ef36c9e375049904574c86161befaeff2c1326e50e13e1f7373f5ba7667cdb29af8c14669e7430b0c1b59941eb66863d63f4cffa27b4ab628424e7fdaf35d35fb3b25faa6087", 0xe8, 0x20004014, &(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) 281.206346ms ago: executing program 5 (id=1949): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000040)={0x0, {0x7c1bd8b1, 0x2}}) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @bt={0x8, 0xffffffff, 0x1, 0x9, 0x20000000000000, 0xc5, 0x2, 0x4}}) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x12, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f00000001c0)={0x2, 0xc, "cfda847310e140dbbcbb8520"}) r2 = syz_open_dev$vivid(&(0x7f0000000200), 0x3, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000240)={0x0, @reserved}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000300)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0x0, 0x1, [@multicast1]}, 0x14) recvmsg$can_raw(r0, &(0x7f0000000640)={&(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/2, 0x2}, {&(0x7f0000000400)=""/71, 0x47}, {&(0x7f0000000480)=""/103, 0x67}, {&(0x7f0000000500)=""/91, 0x5b}], 0x4, &(0x7f00000005c0)=""/107, 0x6b}, 0x40010021) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000680)=0x1) write$proc_mixer(r0, &(0x7f00000006c0)=[{'RADIO', @val={' \'', 'Master Playback Switch'}}], 0x34) r3 = dup(r0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000840)={&(0x7f0000000700), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, r4, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x80000001, 0x23}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000011}, 0xc004) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, &(0x7f00000008c0)={0x0, 0x39d7a5f, 0x1001, 0x1}) fsetxattr$security_ima(r1, &(0x7f0000000900), &(0x7f0000000940)=@ng={0x4, 0xa, "653d793ddaf7fd86196312c0"}, 0xe, 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000980)) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd) r7 = syz_create_resource$binfmt(&(0x7f00000009c0)='./file0\x00') execveat$binfmt(r3, r7, &(0x7f0000000b40)={[&(0x7f0000000a00)=' \'', &(0x7f0000000a40)='\xfc\x00', &(0x7f0000000a80)='\' ', &(0x7f0000000ac0)='(\\:-}^{/\x00', &(0x7f0000000b00)='$(%\xd4\t*}#{\\!\xca$@\'D)\x00']}, &(0x7f0000000c80)={[&(0x7f0000000b80)='\x00', &(0x7f0000000bc0)='\xf6\x00', &(0x7f0000000c00)='/dev/video#\x00', &(0x7f0000000c40)='[[].{--++$^\x00']}, 0x400) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x61, &(0x7f0000000cc0)={'filter\x00', 0x4}, 0x68) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000d40)) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r6, 0x4018f50b, &(0x7f0000000d80)={0x0, 0x8, 0x3ff}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000dc0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_GET_HW_INFO(r3, 0x3b8a, &(0x7f0000000ec0)={0x28, 0x0, r9, 0x6b, &(0x7f0000000e40)=""/107}) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000f00)={0x3, 0xfffffdff, 0xc, 0x6, 0x7, 0x8}) accept$unix(r0, &(0x7f0000000f40)=@abs, &(0x7f0000000fc0)=0x6e) 277.218731ms ago: executing program 7 (id=1950): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x400}) ioctl$UFFDIO_CONTINUE(r1, 0xc028aa05, &(0x7f0000000140)={{&(0x7f0000032000/0x4000)=nil, 0x4000}, 0x1000000}) r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="017ef49b"]) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x29, 0x86, 0x0, 0x2, 0x2e, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x7800, 0x80, 0x40005, 0x9}}) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCPNGETOBJECT(r4, 0x89e0, &(0x7f0000003180)=0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r5) r6 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r7, &(0x7f0000000140)='./file0\x00') r8 = openat2(r7, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000380)={0x100, 0x0, 0x8}, 0x18) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r5) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000240)={0x34c, 0x3, 0x820a, 0x31, 0xf, 0x10001, 0xa4, 0xd, 0x0}, &(0x7f0000000280)=0x20) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000340)={r11, 0x1}, &(0x7f0000000400)=0x8) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r13 = accept4(r12, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r13, &(0x7f0000010280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) accept4(r13, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, r10, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x20040010) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r7, 0xc0105303, &(0x7f0000000440)={0xf9, 0x5}) 177.237563ms ago: executing program 5 (id=1951): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/comedi2\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'rti800\x00', [0x4f27, 0x0, 0xc139, 0x2, 0x5, 0xaf, 0xe, 0x7, 0x54c6cff3, 0xf1c00000, 0x2, 0xfffffffd, 0x1, 0x2, 0x6, 0x8a73, 0xfffffffe, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x1000, 0x7fff, 0x3, 0x479, 0x0, 0x8, 0x4086, 0x0, 0x5]}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getpeername(r1, 0x0, &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) sendmmsg$inet(r2, &(0x7f00000001c0)=[{{&(0x7f0000000140)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}], 0x18}}], 0x1, 0x44008004) write$binfmt_misc(r2, &(0x7f0000000300), 0xfdef) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009f187620ef170372362e0102030109029a92d70fec84240001000010000904bc00029e883300090502020002020000090582022000000003"], 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f0000000000)={0x90, &(0x7f0000002840)={0x20, 0x3, 0x2, "8b15"}, 0x0, 0x0, 0x0, 0x0}) 57.344951ms ago: executing program 6 (id=1952): sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e330000000c0017000201aa"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1, 0x0, 0x0, 0x40000000}, 0x0) 0s ago: executing program 6 (id=1953): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000540)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n, priority 0 [ 310.286287][T10451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.295095][T10451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.337792][T10448] syzkaller0: entered promiscuous mode [ 310.346126][T10448] syzkaller0: entered allmulticast mode [ 310.353201][T10448] tipc: Resetting bearer [ 310.411514][T10447] tipc: Resetting bearer [ 311.021499][ T5871] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 311.178697][ T5871] usb 2-1: Using ep0 maxpacket: 16 [ 311.186149][ T5871] usb 2-1: config 152 has too many interfaces: 172, using maximum allowed: 32 [ 311.196231][ T5871] usb 2-1: config 152 has an invalid descriptor of length 186, skipping remainder of the config [ 311.207946][ T5871] usb 2-1: config 152 has 0 interfaces, different from the descriptor's value: 172 [ 311.217450][ T5871] usb 2-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 311.232623][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.393004][ T5871] tipc: Node number set to 48430790 [ 311.491638][ T5893] usb 2-1: USB disconnect, device number 83 [ 311.744393][T10447] tipc: Disabling bearer [ 311.784657][T10468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.796137][T10468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.868559][ T5893] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 312.021029][ T5893] usb 2-1: unable to get BOS descriptor or descriptor too short [ 312.030432][ T5893] usb 2-1: config 14 has an invalid interface number: 21 but max is 0 [ 312.038654][ T5893] usb 2-1: config 14 contains an unexpected descriptor of type 0x2, skipping [ 312.048112][ T5893] usb 2-1: config 14 descriptor has 1 excess byte, ignoring [ 312.055538][ T5893] usb 2-1: config 14 has no interface number 0 [ 312.061799][ T5893] usb 2-1: config 14 interface 21 altsetting 251 bulk endpoint 0xA has invalid maxpacket 32 [ 312.071921][ T5893] usb 2-1: config 14 interface 21 has no altsetting 0 [ 312.081218][ T5893] usb 2-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc [ 312.090298][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.098267][ T5893] usb 2-1: Product: syz [ 312.102487][ T5893] usb 2-1: Manufacturer: syz [ 312.107089][ T5893] usb 2-1: SerialNumber: syz [ 312.114871][T10466] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 312.327461][T10466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.340317][T10466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.363747][ T5893] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 312.374726][ T5893] usb 2-1: MIDIStreaming interface descriptor not found [ 312.411152][ T5893] usb 2-1: USB disconnect, device number 84 [ 312.469998][ T7713] udevd[7713]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:14.21/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 312.528253][T10480] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1496'. [ 312.818514][ T43] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 312.858357][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 312.866438][ C1] lec:lec_tx_timeout: lec0 [ 312.871036][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 312.909813][T10484] netlink: 'syz.1.1498': attribute type 21 has an invalid length. [ 312.917710][T10484] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1498'. [ 312.927006][T10484] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1498'. [ 312.970864][ T43] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 312.972070][T10484] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.981933][ T43] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 313.005899][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12336, setting to 64 [ 313.019030][ T43] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 313.034153][ T43] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 313.044717][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.052913][ T43] usb 6-1: Product: syz [ 313.057156][ T43] usb 6-1: Manufacturer: syz [ 313.061831][ T43] usb 6-1: SerialNumber: syz [ 313.076026][ T43] usb 6-1: config 0 descriptor?? [ 313.085303][ T43] input: KB Gear Tablet as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input36 [ 313.100538][ C1] kbtab 6-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 313.299881][T10493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1499'. [ 313.311096][T10493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1499'. [ 313.322475][T10494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1500'. [ 313.323068][ T5878] usb 6-1: USB disconnect, device number 16 [ 313.392920][T10497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1501'. [ 313.405085][T10497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1501'. [ 313.458808][T10497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.469819][T10497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.560684][T10500] openvswitch: netlink: nsh attribute has 65288 unknown bytes. [ 313.569638][T10500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.858461][ T5878] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 314.026657][T10506] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1505'. [ 314.040473][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.058950][ T5878] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 314.074244][ T5878] usb 3-1: New USB device found, idVendor=2dbd, idProduct=1b66, bcdDevice=41.3f [ 314.087166][ T5878] usb 3-1: New USB device strings: Mfr=41, Product=94, SerialNumber=124 [ 314.097266][ T5878] usb 3-1: Product: syz [ 314.102675][ T5878] usb 3-1: Manufacturer: syz [ 314.107281][ T5878] usb 3-1: SerialNumber: syz [ 314.118261][ T5893] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 314.131585][ T5878] usb 3-1: config 0 descriptor?? [ 314.279905][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.291081][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.302842][ T5893] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 314.311965][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.325851][ T5893] usb 6-1: config 0 descriptor?? [ 314.438230][ T794] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 314.555383][T10522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.556939][ T5878] usbhid 3-1:0.0: can't add hid device: -71 [ 314.564256][T10522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.579546][ T5878] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 314.593908][ T5878] usb 3-1: USB disconnect, device number 91 [ 314.608191][ T794] usb 2-1: Using ep0 maxpacket: 8 [ 314.617215][ T794] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.628610][ T794] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.639214][ T794] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 314.653091][ T794] usb 2-1: config 0 interface 0 has no altsetting 0 [ 314.659951][ T794] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 314.669118][ T794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.680815][ T794] usb 2-1: config 0 descriptor?? [ 314.757179][ T5893] usbhid 6-1:0.0: can't add hid device: -71 [ 314.765723][ T5893] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 314.776330][ T5893] usb 6-1: USB disconnect, device number 17 [ 315.110461][T10513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.120922][T10513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.138269][ T794] usbhid 2-1:0.0: can't add hid device: -71 [ 315.154212][ T794] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 315.171264][ T794] usb 2-1: USB disconnect, device number 85 [ 315.255281][T10530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.265125][T10530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.282563][T10530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.298580][T10530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.365038][T10533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1512'. [ 315.609079][ T5893] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 315.623461][T10543] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 315.630596][T10543] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 315.637182][T10543] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 315.643971][T10543] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 315.651513][T10543] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 315.658235][T10543] comedi comedi3: 8255: I/O port conflict (0x12,4) [ 315.664917][T10543] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 315.671881][T10543] comedi comedi3: 8255: I/O port conflict (0xd,4) [ 315.679723][T10543] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 315.687897][T10543] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 315.695599][T10543] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 315.702763][T10543] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 315.712476][T10543] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 315.719269][T10543] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 315.726210][T10543] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 315.737485][T10543] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 315.744950][T10543] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 315.752984][T10543] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 315.763933][T10543] comedi comedi3: 8255: I/O port conflict (0x20001e58,4) [ 315.771897][T10543] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 315.778931][T10543] comedi comedi3: 8255: I/O port conflict (0x2000e67,4) [ 315.786106][T10543] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 315.788890][ T5893] usb 6-1: Using ep0 maxpacket: 32 [ 315.793085][T10543] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 315.823004][ T5893] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 315.842761][ T5893] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 315.861057][ T5893] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 315.870633][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 315.882177][ T5893] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 315.891990][ T5893] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 315.905598][ T5893] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 315.917711][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.963241][ T5893] usb 6-1: config 0 descriptor?? [ 316.008391][ T30] audit: type=1326 audit(1762922274.675:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.4.1521" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f61a618f6c9 code=0x0 [ 316.178039][ T43] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 316.189807][ T5893] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 316.194992][T10534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.209821][T10534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.232772][ T5893] usb 6-1: USB disconnect, device number 18 [ 316.245254][ T5893] usblp0: removed [ 316.327995][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 316.336819][ T43] usb 2-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d [ 316.346628][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.355381][ T43] usb 2-1: Product: syz [ 316.359667][ T43] usb 2-1: Manufacturer: syz [ 316.364262][ T43] usb 2-1: SerialNumber: syz [ 316.371144][ T43] usb 2-1: config 0 descriptor?? [ 316.379232][ T43] gspca_main: sonixj-2.14.0 probing 0c45:6128 [ 316.783301][ T43] gspca_sonixj: reg_r err -32 [ 316.789508][ T43] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 316.822626][ T5893] usb 2-1: USB disconnect, device number 86 [ 316.839224][T10566] binder: 10562:10566 ioctl c0306201 200000000080 returned -14 [ 317.132674][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.139302][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.198129][ T5893] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 317.308968][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 317.360739][ T5893] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 317.370163][ T5893] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 317.380607][ T5893] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 317.390061][ T5893] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 317.401064][ T5893] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 317.414091][ T5893] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 317.423457][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 317.431509][ T5893] usb 2-1: Product: syz [ 317.435676][ T5893] usb 2-1: Manufacturer: syz [ 317.445813][ T5893] cdc_wdm 2-1:1.0: skipping garbage [ 317.451246][ T5893] cdc_wdm 2-1:1.0: skipping garbage [ 317.458098][ T5893] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 317.464021][ T5893] cdc_wdm 2-1:1.0: Unknown control protocol [ 317.470754][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 317.477962][ T10] usb 6-1: config 1 interface 0 altsetting 164 bulk endpoint 0x82 has invalid maxpacket 8 [ 317.490464][ T10] usb 6-1: config 1 interface 0 altsetting 164 bulk endpoint 0x3 has invalid maxpacket 64 [ 317.501289][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 317.510775][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 317.520088][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.528307][ T10] usb 6-1: Product: syz [ 317.532525][ T10] usb 6-1: Manufacturer: syz [ 317.537336][ T10] usb 6-1: SerialNumber: syz [ 317.544995][T10578] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 317.552441][T10578] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 317.699497][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 317.700405][ T43] usb 2-1: USB disconnect, device number 87 [ 317.706379][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 317.718150][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 317.766802][ T10] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 317.783639][ T10] usb 6-1: USB disconnect, device number 19 [ 317.859061][T10589] ======================================================= [ 317.859061][T10589] WARNING: The mand mount option has been deprecated and [ 317.859061][T10589] and is ignored by this kernel. Remove the mand [ 317.859061][T10589] option from the mount to silence this warning. [ 317.859061][T10589] ======================================================= [ 317.878186][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 317.900231][T10589] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 317.901941][ C1] lec:lec_tx_timeout: lec0 [ 317.912609][T10589] overlayfs: overlapping lowerdir path [ 317.917947][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 317.938172][T10589] overlayfs: overlapping lowerdir path [ 318.006613][T10591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.020277][T10591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.257953][ T43] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 318.417783][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 318.424529][ T43] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 318.436078][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 318.467786][ T43] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 318.476857][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.489833][ T43] usb 3-1: Product: syz [ 318.496108][ T43] usb 3-1: Manufacturer: syz [ 318.501533][ T43] usb 3-1: SerialNumber: syz [ 318.518373][ T43] usb 3-1: config 0 descriptor?? [ 318.532370][ T43] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 318.542120][ T43] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 318.555581][T10602] __nla_validate_parse: 3 callbacks suppressed [ 318.555598][T10602] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1535'. [ 318.692388][ T30] audit: type=1800 audit(1762922277.366:26): pid=10608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1538" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 318.860382][ T10] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 319.018318][ T10] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 319.027781][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 319.035355][ T10] usb 2-1: can't read configurations, error -61 [ 319.146146][ T43] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 319.153262][ T43] em28xx 3-1:0.0: Config register raw data: 0xc7 [ 319.170934][ T10] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 319.338232][ T10] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 319.349091][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 319.357034][ T10] usb 2-1: can't read configurations, error -61 [ 319.364000][ T10] usb usb2-port1: attempt power cycle [ 319.373305][T10593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1532'. [ 319.387240][ T5911] usb 3-1: USB disconnect, device number 92 [ 319.401470][ T5911] em28xx 3-1:0.0: Disconnecting em28xx [ 319.403172][T10619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.421260][T10619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.428192][ T5911] em28xx 3-1:0.0: Freeing device [ 319.477785][ T5878] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 319.552076][T10628] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1544'. [ 319.627578][ T5878] usb 6-1: Using ep0 maxpacket: 32 [ 319.634238][ T5878] usb 6-1: config 0 has an invalid interface number: 231 but max is 0 [ 319.642496][ T5878] usb 6-1: config 0 has no interface number 0 [ 319.649297][ T5878] usb 6-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 319.659464][ T5878] usb 6-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 319.671910][ T5878] usb 6-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 319.681124][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.689227][ T5878] usb 6-1: Product: syz [ 319.693365][ T5878] usb 6-1: Manufacturer: syz [ 319.698037][ T5878] usb 6-1: SerialNumber: syz [ 319.704540][ T5878] usb 6-1: config 0 descriptor?? [ 319.709626][ T10] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 319.718145][T10617] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 319.726420][T10617] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 319.738991][ T10] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 319.749765][ T5878] plusb 6-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.5-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, e6:e9:a3:3b:c7:9e [ 319.763806][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 319.771475][ T10] usb 2-1: can't read configurations, error -61 [ 319.917775][ T10] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 319.944554][T10617] program syz.5.1541 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 319.954627][ T10] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 319.961567][ T5911] usb 6-1: USB disconnect, device number 20 [ 319.964341][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 319.975065][ T5911] plusb 6-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.5-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 319.987048][ T10] usb 2-1: can't read configurations, error -61 [ 319.994131][ T10] usb usb2-port1: unable to enumerate USB device [ 322.937204][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 322.945205][ C1] lec:lec_tx_timeout: lec0 [ 324.638092][ T5195] udevd[5195]: worker [5833] /devices/virtual/block/nbd0 is taking a long time [ 338.236480][ T25] block nbd0: Possible stuck request ffff888026400000: control (read@0,1024B). Runtime 120 seconds [ 338.247395][ T25] block nbd0: Possible stuck request ffff888026400200: control (read@1024,1024B). Runtime 120 seconds [ 338.260089][ T25] block nbd0: Possible stuck request ffff888026400400: control (read@2048,1024B). Runtime 120 seconds [ 338.271196][ T25] block nbd0: Possible stuck request ffff888026400600: control (read@3072,1024B). Runtime 120 seconds [ 340.850280][ T6054] lec:lec_start_xmit: lec0:No lecd attached [ 345.864419][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 345.872423][ C1] lec:lec_tx_timeout: lec0 [ 352.621443][T10670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1549'. [ 353.043574][ T43] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 353.209564][ T43] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 353.234629][ T43] usb 2-1: config 5 has no interface number 0 [ 353.240880][ T43] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 353.264236][ T43] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 255, setting to 64 [ 353.297505][ T43] usb 2-1: config 5 interface 123 has no altsetting 0 [ 353.317619][ T43] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 353.330703][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.340202][ T43] usb 2-1: Product: syz [ 353.383091][ T43] usb 2-1: Manufacturer: syz [ 353.398381][ T43] usb 2-1: SerialNumber: syz [ 353.446901][T10674] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 353.723354][T10674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.763842][T10674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.781247][T10674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.797009][T10674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.829513][ T43] ni6501 2-1:5.123: driver 'ni6501' failed to auto-configure device. [ 353.860324][ T43] usb 2-1: USB disconnect, device number 92 [ 353.932232][T10686] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1554'. [ 353.984800][T10689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1555'. [ 354.159711][T10693] pim6reg1: entered promiscuous mode [ 354.165168][T10693] pim6reg1: entered allmulticast mode [ 354.408512][T10715] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1563'. [ 354.518636][T10721] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1566'. [ 354.531780][T10723] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1566'. [ 354.614108][ T5893] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 354.775759][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 354.786798][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.796902][ T5893] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 354.806086][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.815968][ T5893] usb 2-1: config 0 descriptor?? [ 355.054389][ T5893] usbhid 2-1:0.0: can't add hid device: -71 [ 355.078014][ T5893] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 355.107000][ T5893] usb 2-1: USB disconnect, device number 93 [ 355.194736][T10741] netlink: 'syz.2.1571': attribute type 10 has an invalid length. [ 355.202571][T10741] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1571'. [ 355.424117][ T5893] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 355.460875][T10748] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1573'. [ 355.520443][T10750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.539054][T10750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.561826][T10752] netlink: 'syz.2.1575': attribute type 8 has an invalid length. [ 355.603606][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 355.610996][ T5893] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.625091][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 355.637487][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 355.647827][ T5893] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 355.657556][ T5893] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.672511][ T5893] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 355.681662][ T5893] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 355.689717][ T5893] usb 2-1: Manufacturer: syz [ 355.697206][ T5893] usb 2-1: config 0 descriptor?? [ 355.795133][ T53] Bluetooth: hci4: Malformed LE Event: 0x0d [ 355.953265][ T5893] rc_core: IR keymap rc-hauppauge not found [ 355.959285][ T5893] Registered IR keymap rc-empty [ 355.967867][ T5893] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 355.993314][ T5893] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 356.024436][ T5893] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 356.037655][ T5893] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input37 [ 356.051810][ T5893] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 356.083345][ T5893] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 356.113386][ T5893] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 356.143358][ T5893] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 356.163356][ T5893] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 356.175781][T10764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.185590][T10764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.193374][ T5893] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 356.195352][T10764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.209302][T10764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.223621][ T5893] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 356.244581][ T5893] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 356.273884][ T5893] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 356.293293][ T5893] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 356.316418][ T5893] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 356.326767][ T5893] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 356.373622][T10738] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1570'. [ 356.405806][T10738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.423873][T10738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.446277][ T794] usb 2-1: USB disconnect, device number 94 [ 356.623182][ T5893] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 356.759144][T10771] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1580'. [ 356.797309][ T5893] usb 6-1: config 0 interface 0 has no altsetting 0 [ 356.805047][ T5893] usb 6-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 356.816380][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.827248][ T5893] usb 6-1: config 0 descriptor?? [ 357.269925][ T5893] logitech-hidpp-device 0003:046D:C262.0014: hidraw0: USB HID v0.00 Device [HID 046d:c262] on usb-dummy_hcd.5-1/input0 [ 357.613063][ T794] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 357.783199][ T794] usb 3-1: Using ep0 maxpacket: 8 [ 357.794454][ T794] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 357.807311][ T794] usb 3-1: config 179 has no interface number 0 [ 357.817336][ T794] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 357.833691][ T794] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 357.852736][ T794] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 357.876524][T10788] __nla_validate_parse: 1 callbacks suppressed [ 357.876542][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1586'. [ 357.892340][ T794] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 357.902846][ T794] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 357.923446][ T794] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 357.933070][ T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.949491][T10786] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 357.975289][ T794] xpad 3-1:179.65: probe with driver xpad failed with error -5 [ 358.190556][T10786] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.1585'. [ 358.216480][ T5871] usb 3-1: USB disconnect, device number 93 [ 358.299441][T10799] netlink: 'syz.1.1590': attribute type 58 has an invalid length. [ 358.332210][T10800] netlink: 'syz.1.1590': attribute type 58 has an invalid length. [ 358.565475][T10809] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1592'. [ 358.769706][T10819] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1595'. [ 358.797809][ T30] audit: type=1326 audit(1762922317.471:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10820 comm="syz.2.1596" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7018f8f6c9 code=0x0 [ 358.926555][T10829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1598'. [ 359.272910][ T5871] usb 3-1: new low-speed USB device number 94 using dummy_hcd [ 359.374694][ T10] usb 6-1: USB disconnect, device number 21 [ 359.422811][ T5871] usb 3-1: Invalid ep0 maxpacket: 16 [ 359.508688][T10836] netlink: 14478 bytes leftover after parsing attributes in process `syz.5.1601'. [ 359.536181][T10838] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1602'. [ 359.552806][ T5871] usb 3-1: new low-speed USB device number 95 using dummy_hcd [ 359.648246][T10842] syzkaller1: entered promiscuous mode [ 359.656649][T10842] syzkaller1: entered allmulticast mode [ 359.712793][ T5871] usb 3-1: Invalid ep0 maxpacket: 16 [ 359.718367][ T5871] usb usb3-port1: attempt power cycle [ 359.882731][ T10] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 360.042769][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 360.049445][ T10] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 360.057855][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.068647][ T10] usb 6-1: config 0 has no interface number 0 [ 360.075122][ T10] usb 6-1: config 0 interface 120 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 360.076084][ T5871] usb 3-1: new low-speed USB device number 96 using dummy_hcd [ 360.088380][ T10] usb 6-1: config 0 interface 120 has no altsetting 0 [ 360.090961][ T10] usb 6-1: New USB device found, idVendor=0421, idProduct=0475, bcdDevice=41.76 [ 360.111792][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.119851][ T10] usb 6-1: Product: syz [ 360.123477][ T5871] usb 3-1: Invalid ep0 maxpacket: 16 [ 360.124060][ T10] usb 6-1: Manufacturer: syz [ 360.133951][ T10] usb 6-1: SerialNumber: syz [ 360.140264][ T10] usb 6-1: config 0 descriptor?? [ 360.148618][ T10] rndis_host 6-1:0.120: skipping garbage [ 360.154299][ T10] usb 6-1: bad CDC descriptors [ 360.159605][ T10] cdc_acm 6-1:0.120: Zero length descriptor references [ 360.167574][ T10] cdc_acm 6-1:0.120: probe with driver cdc_acm failed with error -22 [ 360.252729][ T5871] usb 3-1: new low-speed USB device number 97 using dummy_hcd [ 360.273383][ T5871] usb 3-1: Invalid ep0 maxpacket: 16 [ 360.279018][ T5871] usb usb3-port1: unable to enumerate USB device [ 360.348203][T10848] netlink: 14478 bytes leftover after parsing attributes in process `syz.5.1601'. [ 360.376682][ T5871] usb 6-1: USB disconnect, device number 22 [ 360.462323][T10854] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1607'. [ 360.542675][ T30] audit: type=1326 audit(1762922319.201:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10855 comm="syz.4.1608" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f61a618f6c9 code=0x0 [ 360.588498][T10861] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 360.590083][T10861] @0: renamed from bond_slave_1 (while UP) [ 360.736355][T10866] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1611'. [ 360.886565][T10872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.895422][T10872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.536324][T10882] comedi comedi1: multiq3: I/O port conflict (0x7,16) [ 361.659743][T10889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.669859][T10889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.683788][T10889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.232526][ T5878] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 362.362476][ T5878] usb 6-1: device descriptor read/64, error -71 [ 362.520429][T10921] netlink: 'syz.4.1630': attribute type 58 has an invalid length. [ 362.563163][ T5871] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 362.622627][ T5878] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 362.714536][ T5871] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 362.727511][ T5871] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 362.739347][ T5871] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 362.753798][ T5871] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 362.763367][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.771379][ T5871] usb 2-1: Product: syz [ 362.772406][ T5878] usb 6-1: device descriptor read/64, error -71 [ 362.775815][ T5871] usb 2-1: Manufacturer: syz [ 362.788094][ T5871] usb 2-1: SerialNumber: syz [ 362.796950][ T5871] usb 2-1: config 0 descriptor?? [ 362.807112][T10913] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 362.818732][T10913] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 362.831279][ T5871] usb 2-1: ucan: probing device on interface #0 [ 362.859666][T10941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.869090][T10941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.893308][ T5878] usb usb6-port1: attempt power cycle [ 362.996728][T10944] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 363.008239][T10944] overlayfs: maximum fs stacking depth exceeded [ 363.140884][T10948] __nla_validate_parse: 4 callbacks suppressed [ 363.140904][T10948] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1639'. [ 363.232365][ T5878] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 363.242423][ T5871] usb 2-1: ucan: failed to retrieve device info [ 363.246877][T10952] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1640'. [ 363.262926][ T5871] usb 2-1: ucan: probe failed; try to update the device firmware [ 363.273057][ T5878] usb 6-1: device descriptor read/8, error -71 [ 363.287747][ T5871] usb 2-1: USB disconnect, device number 95 [ 363.522524][ T5878] usb 6-1: new low-speed USB device number 26 using dummy_hcd [ 363.556633][ T5878] usb 6-1: device descriptor read/8, error -71 [ 363.682772][ T5878] usb usb6-port1: unable to enumerate USB device [ 363.791052][T10967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.813098][T10967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.833293][T10967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.842091][T10967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.909755][T10972] binder: 10971:10972 ioctl c018620c 200000000140 returned -22 [ 364.942164][ T5911] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 365.053253][ T10] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 365.092412][ T5911] usb 3-1: Using ep0 maxpacket: 32 [ 365.214004][ T10] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 365.222471][ T10] usb 2-1: config 0 has no interface number 0 [ 365.231349][ T10] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 365.240974][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.255487][ T10] usb 2-1: Product: syz [ 365.259675][ T10] usb 2-1: Manufacturer: syz [ 365.264463][ T10] usb 2-1: SerialNumber: syz [ 365.271575][ T10] usb 2-1: config 0 descriptor?? [ 365.316868][ T5911] usb 3-1: unable to get BOS descriptor or descriptor too short [ 365.325783][ T5911] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 365.333843][ T5911] usb 3-1: can't read configurations, error -71 [ 365.690622][ T10] usb 2-1: Firmware: major: 121, minor: 196, hardware type: UNKNOWN (188) [ 365.956239][ T10] usb 2-1: no permanent extended address found, random address set [ 365.964571][ T10] usb 2-1: atusb_probe: initialization failed, error = -524 [ 365.972355][ T10] atusb 2-1:0.128: probe with driver atusb failed with error -524 [ 366.207775][ T794] usb 2-1: USB disconnect, device number 96 [ 366.372181][ T5911] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 366.523977][ T5911] usb 3-1: unable to get BOS descriptor or descriptor too short [ 366.532168][ T5911] usb 3-1: not running at top speed; connect to a high speed hub [ 366.540866][ T5911] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.551100][ T5911] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 366.562114][ T5911] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 366.576211][ T5911] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 366.585436][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.593485][ T5911] usb 3-1: Product: syz [ 366.597646][ T5911] usb 3-1: Manufacturer: syz [ 366.602343][ T5911] usb 3-1: SerialNumber: syz [ 366.769349][T10967] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 366.840721][ T5911] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 366.870107][ T5911] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 366.903623][ T5911] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 366.961508][ T5911] usb 3-1: USB disconnect, device number 99 [ 366.981918][ T10] usb 2-1: new low-speed USB device number 97 using dummy_hcd [ 367.111948][ T10] usb 2-1: device descriptor read/64, error -71 [ 367.160892][T11008] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 367.167680][T11008] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 367.177614][T11008] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 367.194658][T11008] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 367.211354][T11008] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 367.218178][T11008] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 367.231198][T11008] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 367.241325][T11008] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 367.250060][T11008] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 367.261753][T11008] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 367.371926][ T10] usb 2-1: new low-speed USB device number 98 using dummy_hcd [ 367.390268][T11015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1661'. [ 367.502020][ T10] usb 2-1: device descriptor read/64, error -71 [ 367.591932][ T5911] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 367.622264][ T10] usb usb2-port1: attempt power cycle [ 367.743537][ T5911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 367.754664][ T5911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.764482][ T5911] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 367.773572][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.792767][ T5911] usb 6-1: config 0 descriptor?? [ 367.970732][T11038] capability: warning: `syz.4.1667' uses 32-bit capabilities (legacy support in use) [ 367.980391][ T10] usb 2-1: new low-speed USB device number 99 using dummy_hcd [ 368.001291][T11013] tipc: Trying to set illegal importance in message [ 368.014707][ T10] usb 2-1: device descriptor read/8, error -71 [ 368.019481][T11013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.043012][T11013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.140607][T11037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.149290][T11038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.149596][T11037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.163227][T11038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.259764][ T5911] isku 0003:1E7D:319C.0015: unknown main item tag 0x0 [ 368.266740][ T5911] isku 0003:1E7D:319C.0015: unknown main item tag 0x0 [ 368.273697][ T10] usb 2-1: new low-speed USB device number 100 using dummy_hcd [ 368.273844][ T5911] isku 0003:1E7D:319C.0015: unknown main item tag 0x0 [ 368.289994][ T5911] isku 0003:1E7D:319C.0015: unknown main item tag 0x0 [ 368.296933][ T5911] isku 0003:1E7D:319C.0015: unknown main item tag 0x0 [ 368.303879][ T5911] isku 0003:1E7D:319C.0015: unknown main item tag 0x0 [ 368.310663][ T5911] isku 0003:1E7D:319C.0015: unknown main item tag 0x0 [ 368.312377][ T10] usb 2-1: device descriptor read/8, error -71 [ 368.325195][ T25] block nbd0: Possible stuck request ffff888026400000: control (read@0,1024B). Runtime 150 seconds [ 368.336030][ T25] block nbd0: Possible stuck request ffff888026400200: control (read@1024,1024B). Runtime 150 seconds [ 368.348218][ T25] block nbd0: Possible stuck request ffff888026400400: control (read@2048,1024B). Runtime 150 seconds [ 368.361089][ T25] block nbd0: Possible stuck request ffff888026400600: control (read@3072,1024B). Runtime 150 seconds [ 368.372730][ T5911] isku 0003:1E7D:319C.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0 [ 368.432098][ T10] usb usb2-port1: unable to enumerate USB device [ 368.460488][ T5911] isku 0003:1E7D:319C.0015: couldn't init struct isku_device [ 368.471210][ T5911] isku 0003:1E7D:319C.0015: couldn't install keyboard [ 368.480338][ T5911] isku 0003:1E7D:319C.0015: probe with driver isku failed with error -71 [ 368.492840][ T5911] usb 6-1: USB disconnect, device number 27 [ 368.671797][ T10] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 368.831967][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 368.852721][ T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 368.862290][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.874401][ T10] usb 3-1: Product: syz [ 368.878588][ T10] usb 3-1: Manufacturer: syz [ 368.883435][ T10] usb 3-1: SerialNumber: syz [ 368.890992][ T10] usb 3-1: config 0 descriptor?? [ 368.907106][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 368.933310][T11050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.942792][T11050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.944045][T11051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.963979][T11051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.977004][T11050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.991502][T11050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.191760][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 369.191774][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 369.191823][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 369.271669][ T5835] Bluetooth: hci4: command 0x0c1a tx timeout [ 369.271742][ T5145] Bluetooth: hci5: command 0x0c1a tx timeout [ 369.552358][T11063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.561126][T11063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.575374][ T5893] IPVS: starting estimator thread 0... [ 369.661639][T11064] IPVS: using max 48 ests per chain, 115200 per kthread [ 369.922142][ T10] gspca_sonixj: reg_w1 err -71 [ 370.011826][ T10] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 370.034311][ T10] usb 3-1: USB disconnect, device number 100 [ 370.188265][T11083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.197047][T11083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.207186][ T5893] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 370.282562][ T5878] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 370.361508][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 370.368334][ T5893] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.379301][ T5893] usb 2-1: config 0 interface 0 has no altsetting 0 [ 370.385965][ T5893] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 370.395075][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.406182][ T5893] usb 2-1: config 0 descriptor?? [ 370.441495][ T5878] usb 6-1: Using ep0 maxpacket: 8 [ 370.451582][ T5878] usb 6-1: unable to get BOS descriptor or descriptor too short [ 370.461190][ T5878] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 370.474894][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 370.487902][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 370.497832][ T5878] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 370.508508][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 370.518274][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 370.530088][ T5878] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 370.539739][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.548157][ T5878] usb 6-1: Product: syz [ 370.552368][ T5878] usb 6-1: Manufacturer: syz [ 370.556956][ T5878] usb 6-1: SerialNumber: syz [ 370.564125][ T5878] usb 6-1: config 0 descriptor?? [ 370.569935][T11075] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 370.580145][ T5878] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 370.614520][T11073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.630345][T11073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.660555][T11073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.674307][T11073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.675095][ T7713] udevd[7713]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 370.684153][T11073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.707358][T11073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.717397][T11073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.726327][T11073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.736682][T11073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.744584][ T794] usb 3-1: new low-speed USB device number 101 using dummy_hcd [ 370.747643][T11073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.785556][ T5911] usb 6-1: USB disconnect, device number 28 [ 370.824580][T11087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.833453][T11087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.847275][T11087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.856253][T11087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.923192][ T794] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 370.930734][ T794] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 370.941716][ T794] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 370.953628][ T794] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 370.964989][ T794] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 370.978819][ T794] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 370.983139][ T5893] nzxt-smart2 0003:1E71:2009.0016: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 370.987959][ T794] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 371.020282][ T794] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 371.032150][ T794] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 371.043596][ T794] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 371.056293][ T794] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 371.065730][ T794] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 371.078407][ T794] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 371.090192][ T794] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 371.101521][ T794] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 371.129562][ T794] usb 3-1: string descriptor 0 read error: -22 [ 371.136047][ T794] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 371.145265][ T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.164472][ T794] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 371.271411][ T5145] Bluetooth: hci3: command 0x0c1a tx timeout [ 371.351429][ T5145] Bluetooth: hci5: command 0x0c1a tx timeout [ 371.357514][ T5145] Bluetooth: hci4: command 0x0c1a tx timeout [ 371.375954][ T794] usb 2-1: USB disconnect, device number 101 [ 371.484206][T11097] dvmrp5: entered allmulticast mode [ 371.548522][ T5911] usb 3-1: USB disconnect, device number 101 [ 371.971320][ T5911] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 372.001360][ T794] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 372.121362][ T5911] usb 6-1: Using ep0 maxpacket: 32 [ 372.128200][ T5911] usb 6-1: config 0 has an invalid descriptor of length 106, skipping remainder of the config [ 372.138770][ T5911] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 372.151599][ T5911] usb 6-1: New USB device found, idVendor=14aa, idProduct=0301, bcdDevice=b2.13 [ 372.160810][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.168974][ T794] usb 3-1: Using ep0 maxpacket: 32 [ 372.174288][ T5911] usb 6-1: Product: syz [ 372.178457][ T5911] usb 6-1: Manufacturer: syz [ 372.183122][ T5893] usb 2-1: new low-speed USB device number 102 using dummy_hcd [ 372.191548][ T5911] usb 6-1: SerialNumber: syz [ 372.196771][ T794] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 372.205125][ T794] usb 3-1: config 2 has no interface number 0 [ 372.212417][ T794] usb 3-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 372.224031][ T5911] usb 6-1: config 0 descriptor?? [ 372.229119][ T794] usb 3-1: config 2 interface 88 has no altsetting 0 [ 372.240806][ T794] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 372.251557][ T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.259563][ T794] usb 3-1: Product: syz [ 372.263783][ T794] usb 3-1: Manufacturer: syz [ 372.268377][ T794] usb 3-1: SerialNumber: syz [ 372.275845][T11110] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 372.329654][T11114] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1693'. [ 372.351323][T11114] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1693'. [ 372.361540][ T5893] usb 2-1: Invalid ep0 maxpacket: 32 [ 372.460921][ T5878] usb 6-1: USB disconnect, device number 29 [ 372.469722][T11115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.483441][T11115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.489583][T11110] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 372.511856][ T5893] usb 2-1: new low-speed USB device number 103 using dummy_hcd [ 372.661450][ T5893] usb 2-1: Invalid ep0 maxpacket: 32 [ 372.667275][ T5893] usb usb2-port1: attempt power cycle [ 373.011331][ T5893] usb 2-1: new low-speed USB device number 104 using dummy_hcd [ 373.042671][ T5893] usb 2-1: Invalid ep0 maxpacket: 32 [ 373.130626][ T794] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 373.143379][ T794] asix 3-1:2.88: probe with driver asix failed with error -71 [ 373.159218][ T794] usb 3-1: USB disconnect, device number 102 [ 373.183643][ T5893] usb 2-1: new low-speed USB device number 105 using dummy_hcd [ 373.232685][ T5893] usb 2-1: Invalid ep0 maxpacket: 32 [ 373.238774][ T5893] usb usb2-port1: unable to enumerate USB device [ 373.247473][T11123] netlink: 'syz.4.1696': attribute type 4 has an invalid length. [ 373.367830][T11127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.376856][ T5878] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 373.379064][T11127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.397709][T11127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.406853][T11127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.433581][ T5145] Bluetooth: hci4: command 0x0c1a tx timeout [ 373.433640][ T5835] Bluetooth: hci5: command 0x0c1a tx timeout [ 373.531224][ T5878] usb 6-1: Using ep0 maxpacket: 8 [ 373.538085][ T5878] usb 6-1: unable to get BOS descriptor or descriptor too short [ 373.546818][ T5878] usb 6-1: config 7 has an invalid interface number: 60 but max is 0 [ 373.555530][ T5878] usb 6-1: config 7 has no interface number 0 [ 373.561726][ T5878] usb 6-1: config 7 interface 60 has no altsetting 0 [ 373.570567][ T5878] usb 6-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice=75.54 [ 373.580728][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.588792][ T5878] usb 6-1: Product: syz [ 373.593096][ T5878] usb 6-1: Manufacturer: syz [ 373.597699][ T5878] usb 6-1: SerialNumber: syz [ 373.825053][ T5878] appletouch 6-1:7.60: Could not find int-in endpoint [ 373.833585][ T5878] appletouch 6-1:7.60: probe with driver appletouch failed with error -5 [ 373.843916][ T5878] usbhid 6-1:7.60: couldn't find an input interrupt endpoint [ 373.859150][ T5878] usb 6-1: USB disconnect, device number 30 [ 373.876512][T11135] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1700'. [ 373.952897][T11139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.962519][T11139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.723094][T11151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.732097][T11151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.743538][T11151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.755785][T11151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.771308][ T794] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 374.950017][ T794] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.961693][ T794] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.981156][ T794] usb 6-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba [ 374.999183][ T794] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.018413][ T794] usb 6-1: config 0 descriptor?? [ 375.155734][T11172] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1709'. [ 375.277992][T11180] overlayfs: failed to resolve 'appraise_type=imasig': -2 [ 375.439675][T11187] gfs2: error -5 reading superblock [ 375.449080][ T794] usbhid 6-1:0.0: can't add hid device: -71 [ 375.456406][ T794] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 375.477189][ T794] usb 6-1: USB disconnect, device number 31 [ 375.752137][ T5911] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 375.916874][ T5911] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 375.928032][ T5911] usb 3-1: config 1 interface 0 has no altsetting 0 [ 375.938170][ T5911] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 375.948028][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.956622][ T5911] usb 3-1: Product: syz [ 375.971821][ T5911] usb 3-1: Manufacturer: syz [ 375.976907][ T5911] usb 3-1: SerialNumber: syz [ 376.221249][ T5911] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input39 [ 376.253031][ T5911] usb 3-1: USB disconnect, device number 103 [ 376.339239][T11204] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1719'. [ 376.379131][T11206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.388084][T11206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.830772][ T5911] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 376.936975][T11219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.946201][T11219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.980818][ T5911] usb 6-1: Using ep0 maxpacket: 8 [ 376.989797][ T5911] usb 6-1: config 7 has an invalid interface number: 112 but max is 0 [ 376.999418][ T5911] usb 6-1: config 7 has no interface number 0 [ 377.009613][ T5911] usb 6-1: New USB device found, idVendor=19d2, idProduct=1136, bcdDevice=25.87 [ 377.019504][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.040771][ T5911] usb 6-1: Product: syz [ 377.045037][ T5911] usb 6-1: Manufacturer: syz [ 377.049639][ T5911] usb 6-1: SerialNumber: syz [ 377.084741][T11223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.093922][T11223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.250789][ T5878] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 377.267677][T11208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.276806][T11208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.289259][ T5835] Bluetooth: hci4: connection err: -111 [ 377.292559][T11208] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1721'. [ 377.307226][T11208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.317155][T11208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.330041][ T5911] usb 6-1: bad CDC descriptors [ 377.342025][ T5911] usb 6-1: USB disconnect, device number 32 [ 377.420701][ T5878] usb 2-1: Using ep0 maxpacket: 8 [ 377.427318][ T5878] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 377.437095][ T5878] usb 2-1: config 0 has no interface number 0 [ 377.443753][ T5878] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 377.454809][ T5878] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 377.466466][ T5878] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 377.478448][ T5878] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 377.491470][ T5878] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 377.500507][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.510782][ T5878] usb 2-1: config 0 descriptor?? [ 377.521911][ T5878] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 377.721406][T11221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.730092][T11221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.799142][ T794] usb 2-1: USB disconnect, device number 106 [ 377.808217][ T794] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 377.882923][ T5911] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 378.040565][ T5911] usb 3-1: Using ep0 maxpacket: 8 [ 378.047214][ T5911] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.058381][ T5911] usb 3-1: config 0 interface 0 has no altsetting 0 [ 378.065092][ T5911] usb 3-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 378.074316][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.089053][ T5911] usb 3-1: config 0 descriptor?? [ 378.170589][ T5878] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 378.300837][ T5878] usb 6-1: device descriptor read/64, error -71 [ 378.426861][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.435294][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.553218][ T5878] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 378.556093][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.568815][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.579395][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 378.690503][ T5878] usb 6-1: device descriptor read/64, error -71 [ 378.800859][ T5878] usb usb6-port1: attempt power cycle [ 378.860623][ T794] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 379.010484][ T794] usb 2-1: Using ep0 maxpacket: 32 [ 379.017373][ T794] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 379.025590][ T794] usb 2-1: config 0 has no interface number 0 [ 379.033993][ T794] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 379.043168][ T794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.051271][ T794] usb 2-1: Product: syz [ 379.055501][ T794] usb 2-1: Manufacturer: syz [ 379.060158][ T794] usb 2-1: SerialNumber: syz [ 379.067345][ T794] usb 2-1: config 0 descriptor?? [ 379.075970][ T794] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 379.150476][ T5878] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 379.171177][ T5878] usb 6-1: device descriptor read/8, error -71 [ 379.278100][ T794] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 379.292639][ T794] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 379.410555][ T5878] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 379.435488][ T5878] usb 6-1: device descriptor read/8, error -71 [ 379.477857][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 379.551155][ T5878] usb usb6-port1: unable to enumerate USB device [ 379.679594][T11245] fuse: Bad value for 'rootmode' [ 379.689125][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 379.689738][ T5878] usb 2-1: USB disconnect, device number 107 [ 379.709473][ T5878] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 379.727301][ T5878] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 379.739831][ T5878] quatech2 2-1:0.51: device disconnected [ 379.913677][T11256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.923269][T11256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.510287][ T794] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 380.672071][ T794] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.682340][ T794] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 380.691498][ T794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.701910][ T794] usb 2-1: config 0 descriptor?? [ 380.713956][ T794] pwc: Askey VC010 type 2 USB webcam detected. [ 380.835461][ T5911] razer 0003:1532:010D.0017: failed to enable macro keys: -71 [ 380.853320][ T5911] razer 0003:1532:010D.0017: hidraw0: USB HID v0.00 Device [HID 1532:010d] on usb-dummy_hcd.2-1/input0 [ 380.893699][ T5911] usb 3-1: USB disconnect, device number 104 [ 380.920127][ T794] pwc: recv_control_msg error -32 req 02 val 2b00 [ 380.925227][T11262] fido_id[11262]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 380.976187][ T794] pwc: recv_control_msg error -71 req 02 val 2700 [ 381.010090][ T794] pwc: recv_control_msg error -71 req 02 val 2c00 [ 381.034252][ T794] pwc: recv_control_msg error -71 req 04 val 1000 [ 381.053578][ T794] pwc: recv_control_msg error -71 req 04 val 1300 [ 381.076446][ T794] pwc: recv_control_msg error -71 req 04 val 1400 [ 381.110481][ T794] pwc: recv_control_msg error -71 req 02 val 2000 [ 381.120066][ T794] pwc: recv_control_msg error -71 req 02 val 2100 [ 381.138426][ T794] pwc: recv_control_msg error -71 req 04 val 1500 [ 381.149191][ T794] pwc: recv_control_msg error -71 req 02 val 2500 [ 381.162468][ T794] pwc: recv_control_msg error -71 req 02 val 2400 [ 381.172255][T11272] netlink: 'syz.5.1746': attribute type 11 has an invalid length. [ 381.180813][ T794] pwc: recv_control_msg error -71 req 02 val 2600 [ 381.206114][T11272] netlink: 'syz.5.1746': attribute type 11 has an invalid length. [ 381.208135][ T794] pwc: recv_control_msg error -71 req 02 val 2900 [ 381.214985][T11272] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1746'. [ 381.232761][ T794] pwc: recv_control_msg error -71 req 02 val 2800 [ 381.248063][ T794] pwc: recv_control_msg error -71 req 04 val 1100 [ 381.259253][ T794] pwc: recv_control_msg error -71 req 04 val 1200 [ 381.277536][ T794] pwc: Registered as video103. [ 381.299531][ T794] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input40 [ 381.339688][ T794] usb 2-1: USB disconnect, device number 108 [ 381.598912][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.724747][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.832377][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.964132][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.291871][ T50] bridge_slave_1: left allmulticast mode [ 382.300111][ T5878] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 382.310994][ T50] bridge_slave_1: left promiscuous mode [ 382.319387][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.333144][ T5145] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 382.340060][ T10] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 382.347478][ T5145] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 382.356375][ T5145] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 382.356519][ T50] bridge_slave_0: left allmulticast mode [ 382.364557][ T5145] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 382.370178][ T50] bridge_slave_0: left promiscuous mode [ 382.377278][ T5145] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 382.383528][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.450910][ T5878] usb 2-1: device descriptor read/64, error -71 [ 382.492635][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 382.501184][ T10] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 382.509596][ T10] usb 6-1: can't read configurations, error -22 [ 382.597312][ T50] dvmrp6 (unregistering): left allmulticast mode [ 382.614843][ T50] dvmrp5 (unregistering): left allmulticast mode [ 382.651344][ T10] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 382.710037][ T5878] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 382.768005][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.779087][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.790325][ T50] bond0 (unregistering): Released all slaves [ 382.819993][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 382.839083][ T10] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 382.847309][ T5878] usb 2-1: device descriptor read/64, error -71 [ 382.866171][ T10] usb 6-1: can't read configurations, error -22 [ 382.888719][ T10] usb usb6-port1: attempt power cycle [ 382.971774][ T5878] usb usb2-port1: attempt power cycle [ 383.050400][T11309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.077898][T11309] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1755'. [ 383.111695][T11309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.240032][ T10] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 383.271641][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 383.279244][ T10] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 383.301970][ T10] usb 6-1: can't read configurations, error -22 [ 383.321873][ T5878] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 383.350694][ T5878] usb 2-1: device descriptor read/8, error -71 [ 383.451626][ T10] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 383.484081][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 383.501615][ T10] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 383.520128][ T10] usb 6-1: can't read configurations, error -22 [ 383.540584][ T10] usb usb6-port1: unable to enumerate USB device [ 383.610000][ T5878] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 383.627595][ T50] hsr_slave_0: left promiscuous mode [ 383.634572][ T5878] usb 2-1: device descriptor read/8, error -71 [ 383.643055][ T50] hsr_slave_1: left promiscuous mode [ 383.649620][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.657520][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.667024][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.678862][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.721040][ T50] veth1_macvtap: left promiscuous mode [ 383.727122][ T50] veth0_macvtap: left promiscuous mode [ 383.750539][ T5878] usb usb2-port1: unable to enumerate USB device [ 383.830099][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5250 ms [ 383.838170][ C1] lec:lec_tx_timeout: lec0 [ 384.050226][ T50] team0 (unregistering): Port device team_slave_1 removed [ 384.094287][ T50] team0 (unregistering): Port device team_slave_0 removed [ 384.470768][ T5835] Bluetooth: hci3: command tx timeout [ 384.499003][T11303] chnl_net:caif_netlink_parms(): no params data found [ 384.571288][T11331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1758'. [ 384.609131][T11331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.626364][T11331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.809509][T11303] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.826201][T11303] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.843934][T11303] bridge_slave_0: entered allmulticast mode [ 384.860278][T11303] bridge_slave_0: entered promiscuous mode [ 384.887047][T11303] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.902540][ T50] IPVS: stop unused estimator thread 0... [ 384.919785][T11303] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.929449][T11303] bridge_slave_1: entered allmulticast mode [ 384.951235][T11303] bridge_slave_1: entered promiscuous mode [ 385.047893][T11303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.105513][T11303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.301965][T11303] team0: Port device team_slave_0 added [ 385.342504][T11303] team0: Port device team_slave_1 added [ 385.344333][T11354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.379768][T11354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.458619][T11303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.473789][T11303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.518261][T11303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.531069][ T5871] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 385.533464][T11303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.554844][T11303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.587346][T11303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.680876][T11303] hsr_slave_0: entered promiscuous mode [ 385.689059][T11303] hsr_slave_1: entered promiscuous mode [ 385.695203][ T10] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 385.699882][ T5871] usb 6-1: Using ep0 maxpacket: 16 [ 385.708287][T11303] debugfs: 'hsr0' already exists in 'hsr' [ 385.714291][T11303] Cannot create hsr debugfs directory [ 385.721490][ T5871] usb 6-1: config 0 has an invalid interface number: 154 but max is 0 [ 385.736258][ T5871] usb 6-1: config 0 has no interface number 0 [ 385.751184][ T5871] usb 6-1: config 0 interface 154 altsetting 141 endpoint 0xA has an invalid bInterval 127, changing to 7 [ 385.779426][ T5871] usb 6-1: config 0 interface 154 altsetting 141 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 385.804185][ T5871] usb 6-1: config 0 interface 154 altsetting 141 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 385.825544][ T5871] usb 6-1: config 0 interface 154 altsetting 141 endpoint 0x7 has an invalid bInterval 148, changing to 7 [ 385.852365][ T5871] usb 6-1: config 0 interface 154 altsetting 141 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 385.871560][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 2: 255, using maximum allowed: 30 [ 385.879747][ T5871] usb 6-1: config 0 interface 154 altsetting 141 has a duplicate endpoint with address 0x4, skipping [ 385.894342][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.908443][ T5871] usb 6-1: config 0 interface 154 has no altsetting 0 [ 385.928197][ T5871] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=3a.4e [ 385.928811][ T10] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 385.944192][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.973949][ T5871] usb 6-1: Product: Є [ 385.984324][ T5871] usb 6-1: Manufacturer: ᰉ [ 385.997215][ T5871] usb 6-1: SerialNumber: ᷰ抖ὒ걍뉏⍳뤳̋獺㧖췰㱥姥⭆∻ᓻ緐ⱐ蕟窩벸ᶲ楳욳俋映鷳ꏀⷍ뗛粿㎺䉰﷦ⷦ剨⤌᝺ꑱ᪃㻯㖚᜜戋彔⿘ﵨ⦶ꌸ [ 386.007953][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 386.039619][ T10] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 386.048345][ T5871] usb 6-1: config 0 descriptor?? [ 386.048678][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.120628][ T10] usb 2-1: config 0 descriptor?? [ 386.329974][ T5871] cp210x 6-1:0.154: cp210x converter detected [ 386.354234][ T5871] cp210x 6-1:0.154: failed to get vendor val 0x370b size 1: -71 [ 386.379268][T11303] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 386.386966][ T5871] cp210x 6-1:0.154: querying part number failed [ 386.401619][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 386.409024][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 386.435931][ T5871] usb 6-1: cp210x converter now attached to ttyUSB0 [ 386.451935][T11303] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 386.472641][ T10] usb 2-1: USB disconnect, device number 113 [ 386.507728][ T5871] usb 6-1: USB disconnect, device number 41 [ 386.512323][T11303] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 386.550309][ T5835] Bluetooth: hci3: command tx timeout [ 386.574506][ T5871] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 386.596069][ T5871] cp210x 6-1:0.154: device disconnected [ 386.604369][T11303] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 386.616721][T11371] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1763'. [ 387.186345][T11303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.229137][T11303] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.261062][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.268284][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.383136][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.390375][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.410126][ T5878] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 387.592818][ T5878] usb 2-1: unable to get BOS descriptor or descriptor too short [ 387.632298][ T5878] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 387.669725][ T5878] usb 2-1: config 1 has no interface number 1 [ 387.698081][ T5878] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 387.762356][ T5878] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 387.798254][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.839152][ T5878] usb 2-1: Product: syz [ 387.867141][ T5878] usb 2-1: Manufacturer: syz [ 387.874486][ T5878] usb 2-1: SerialNumber: syz [ 388.137407][ T5878] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 388.171204][ T5878] usb 2-1: found format II with max.bitrate = 26774, frame size=2 [ 388.191472][ T5878] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 388.208709][ T5878] usb 2-1: found format II with max.bitrate = 26774, frame size=2 [ 388.255104][T11303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.306921][ T5878] usb 2-1: USB disconnect, device number 114 [ 388.408672][T10479] udevd[10479]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 388.630521][ T5835] Bluetooth: hci3: command tx timeout [ 389.118559][T11303] veth0_vlan: entered promiscuous mode [ 389.134431][T11303] veth1_vlan: entered promiscuous mode [ 389.188133][T11303] veth0_macvtap: entered promiscuous mode [ 389.218971][T11303] veth1_macvtap: entered promiscuous mode [ 389.304774][T11303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.334663][T11303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.375913][ T4320] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.402699][ T7730] overlayfs: failed lookup in lower (newroot/385, name='file0', err=-40): overlapping layers [ 389.435000][ T4320] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.445132][ T7730] overlayfs: failed lookup in lower (newroot/385, name='file0', err=-40): overlapping layers [ 389.459819][ T4320] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.495563][ T4320] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.686237][ T43] usb 5-1: USB disconnect, device number 20 [ 389.706668][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.737866][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.872304][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.880681][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.182476][T11467] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1778'. [ 390.280123][ T5831] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 390.439332][ T5831] usb 6-1: Using ep0 maxpacket: 8 [ 390.456682][ T5831] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 390.479815][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.498048][ T5831] usb 6-1: Product: syz [ 390.518717][ T5831] usb 6-1: Manufacturer: syz [ 390.524329][ T5831] usb 6-1: SerialNumber: syz [ 390.556857][ T5831] usb 6-1: config 0 descriptor?? [ 390.595297][ T5831] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 390.709198][ T5835] Bluetooth: hci3: command tx timeout [ 390.901009][T11481] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1781'. [ 391.269756][ T5145] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 391.278473][ T5145] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 391.287312][ T5145] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 391.297764][ T5145] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 391.307992][ T5145] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 391.389014][ T5871] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 391.548993][ T5871] usb 7-1: Using ep0 maxpacket: 16 [ 391.556156][ T5871] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 391.564945][ T5871] usb 7-1: config 0 has no interface number 0 [ 391.573983][ T5871] usb 7-1: New USB device found, idVendor=0545, idProduct=7f80, bcdDevice= 0.01 [ 391.584128][ T5871] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.593319][ T5871] usb 7-1: Product: syz [ 391.601996][ T5871] usb 7-1: Manufacturer: syz [ 391.609568][ T794] usb 6-1: USB disconnect, device number 42 [ 391.615788][ T5871] usb 7-1: SerialNumber: syz [ 391.647147][ T5871] usb 7-1: config 0 descriptor?? [ 391.678770][T11485] chnl_net:caif_netlink_parms(): no params data found [ 391.753315][T11485] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.760848][T11485] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.768300][T11485] bridge_slave_0: entered allmulticast mode [ 391.775590][T11485] bridge_slave_0: entered promiscuous mode [ 391.785286][T11485] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.792885][T11485] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.800302][T11485] bridge_slave_1: entered allmulticast mode [ 391.810650][T11485] bridge_slave_1: entered promiscuous mode [ 391.868892][T11485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.885846][T11485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.934866][T11485] team0: Port device team_slave_0 added [ 391.943249][T11485] team0: Port device team_slave_1 added [ 391.972220][T11485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.979278][T11485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.005638][T11485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.018911][T11485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.025877][T11485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.052596][T11485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.098400][T11485] hsr_slave_0: entered promiscuous mode [ 392.104977][T11485] hsr_slave_1: entered promiscuous mode [ 392.112534][T11485] debugfs: 'hsr0' already exists in 'hsr' [ 392.118276][T11485] Cannot create hsr debugfs directory [ 392.420678][T11485] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 392.433067][T11485] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 392.446084][T11485] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 392.456743][T11485] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 392.484543][T11485] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.491748][T11485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.499258][T11485] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.506393][T11485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.567045][T11485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.575189][ T794] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 392.601994][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.610271][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.631820][T11485] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.645518][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.652718][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.668549][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.675719][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.728942][ T794] usb 6-1: Using ep0 maxpacket: 32 [ 392.741211][ T794] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 392.760353][ T794] usb 6-1: config 0 has no interface number 0 [ 392.779217][ T794] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 392.811001][ T794] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 392.837912][ T794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.851663][ T794] usb 6-1: Product: syz [ 392.855866][ T794] usb 6-1: Manufacturer: syz [ 392.862500][ T794] usb 6-1: SerialNumber: syz [ 392.872497][ T794] usb 6-1: config 0 descriptor?? [ 392.878535][T11503] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 392.884808][T11518] x_tables: duplicate underflow at hook 1 [ 392.887067][ T5145] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 392.892486][ T5145] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 392.983153][T11522] cgroup: Need name or subsystem set [ 392.984741][T11485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.061930][T11526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1790'. [ 393.113464][T11503] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 393.217482][T11533] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1792'. [ 393.349293][ T5145] Bluetooth: hci5: command tx timeout [ 393.409613][T11485] veth0_vlan: entered promiscuous mode [ 393.425716][T11485] veth1_vlan: entered promiscuous mode [ 393.472395][T11485] veth0_macvtap: entered promiscuous mode [ 393.484397][T11485] veth1_macvtap: entered promiscuous mode [ 393.514386][T11485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.534481][T11485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.556758][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.572088][ T50] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.582853][ T50] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.601900][ T50] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.715313][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.733867][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.745936][ T794] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 393.775625][ T794] asix 6-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 393.778516][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.796126][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.804123][ T794] asix 6-1:0.188: probe with driver asix failed with error -32 [ 394.098736][ T5893] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 394.231510][ T5893] usb 2-1: device descriptor read/64, error -71 [ 394.462234][ T794] usb 6-1: USB disconnect, device number 43 [ 394.470619][ T5893] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 394.592078][ T10] usb 7-1: USB disconnect, device number 2 [ 394.618880][ T5893] usb 2-1: device descriptor read/64, error -71 [ 394.749904][ T5893] usb usb2-port1: attempt power cycle [ 395.090005][ T5893] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 395.113020][ T5893] usb 2-1: device descriptor read/8, error -71 [ 395.243802][T11558] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1798'. [ 395.353092][T11563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.358625][ T5893] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 395.373693][T11563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.389301][T11563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.399422][ T5893] usb 2-1: device descriptor read/8, error -71 [ 395.410374][T11563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.420890][T11563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.429703][ T5145] Bluetooth: hci5: command tx timeout [ 395.442824][T11563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.452312][T11563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.461452][T11563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.470853][T11563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.479869][T11563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.520519][ T5893] usb usb2-port1: unable to enumerate USB device [ 395.599793][ T43] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 395.768611][ T43] usb 7-1: Using ep0 maxpacket: 32 [ 395.777839][ T43] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 395.787255][ T43] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.802320][ T43] usb 7-1: config 0 has no interface number 0 [ 395.810043][ T43] usb 7-1: config 0 interface 196 has no altsetting 0 [ 395.820299][ T43] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 395.832666][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.840926][ T43] usb 7-1: Product: syz [ 395.845094][ T43] usb 7-1: Manufacturer: syz [ 395.849838][ T43] usb 7-1: SerialNumber: syz [ 395.856297][ T43] usb 7-1: config 0 descriptor?? [ 395.864017][ T43] ipheth 7-1:0.196: Unable to find alternate settings interface [ 396.064399][ T43] usb 7-1: USB disconnect, device number 3 [ 396.568513][ T5893] usb 6-1: new low-speed USB device number 44 using dummy_hcd [ 396.698429][ T5893] usb 6-1: device descriptor read/64, error -71 [ 396.908825][ T5871] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 396.950686][ T5893] usb 6-1: new low-speed USB device number 45 using dummy_hcd [ 397.088409][ T5871] usb 7-1: Using ep0 maxpacket: 8 [ 397.099687][ T5893] usb 6-1: device descriptor read/64, error -71 [ 397.104458][ T5871] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 397.120255][ T5871] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.130949][ T5871] usb 7-1: Product: syz [ 397.135139][ T5871] usb 7-1: Manufacturer: syz [ 397.139885][ T5871] usb 7-1: SerialNumber: syz [ 397.146817][ T5871] usb 7-1: config 0 descriptor?? [ 397.156363][ T5871] gspca_main: se401-2.14.0 probing 047d:5003 [ 397.218724][ T5893] usb usb6-port1: attempt power cycle [ 397.268492][ T10] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 397.420122][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.431316][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.443150][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 397.456120][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 397.465322][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.476938][ T10] usb 2-1: config 0 descriptor?? [ 397.508731][ T5145] Bluetooth: hci5: command tx timeout [ 397.557042][ T5871] gspca_se401: Bayer format not supported! [ 397.570225][ T5893] usb 6-1: new low-speed USB device number 46 using dummy_hcd [ 397.619750][ T5893] usb 6-1: device descriptor read/8, error -71 [ 397.774703][T11574] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1803'. [ 397.868266][ T5893] usb 6-1: new low-speed USB device number 47 using dummy_hcd [ 397.888809][ T5893] usb 6-1: device descriptor read/8, error -71 [ 397.933519][ T5878] usb 7-1: USB disconnect, device number 4 [ 397.998591][ T5893] usb usb6-port1: unable to enumerate USB device [ 398.094628][T11579] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1805'. [ 398.115795][T11579] xt_policy: neither incoming nor outgoing policy selected [ 398.213602][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 398.221414][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 398.251347][ T10] usb 2-1: USB disconnect, device number 119 [ 398.400080][ T25] block nbd0: Possible stuck request ffff888026400000: control (read@0,1024B). Runtime 180 seconds [ 398.411084][ T25] block nbd0: Possible stuck request ffff888026400200: control (read@1024,1024B). Runtime 180 seconds [ 398.422210][ T25] block nbd0: Possible stuck request ffff888026400400: control (read@2048,1024B). Runtime 180 seconds [ 398.433216][ T25] block nbd0: Possible stuck request ffff888026400600: control (read@3072,1024B). Runtime 180 seconds [ 398.588194][ T10] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 398.738159][ T10] usb 7-1: Invalid ep0 maxpacket: 16 [ 398.870089][ T10] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 398.998180][ T5871] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 399.042012][ T10] usb 7-1: Invalid ep0 maxpacket: 16 [ 399.048305][ T10] usb usb7-port1: attempt power cycle [ 399.148237][ T5871] usb 2-1: Using ep0 maxpacket: 16 [ 399.155061][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.166100][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.177140][ T5871] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 399.190691][ T5871] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 399.199816][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.211206][ T5871] usb 2-1: config 0 descriptor?? [ 399.388058][ T10] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 399.429985][ T10] usb 7-1: Invalid ep0 maxpacket: 16 [ 399.455091][ T5871] usbhid 2-1:0.0: can't add hid device: -71 [ 399.465292][ T5871] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 399.483030][ T5871] usb 2-1: USB disconnect, device number 120 [ 399.558089][ T10] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 399.579280][ T10] usb 7-1: Invalid ep0 maxpacket: 16 [ 399.586862][ T10] usb usb7-port1: unable to enumerate USB device [ 399.598162][ T5145] Bluetooth: hci5: command tx timeout [ 400.542827][T11651] program syz.1.1826 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 400.820303][T11668] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1832'. [ 401.027033][T11683] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1836'. [ 401.045034][T11683] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1836'. [ 401.358090][ T43] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 401.501467][T11706] netlink: 'syz.7.1838': attribute type 21 has an invalid length. [ 401.511737][T11706] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1838'. [ 401.581620][ T43] usb 6-1: unable to get BOS descriptor or descriptor too short [ 401.610782][ T43] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.611034][T11711] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.1840'. [ 401.657841][ T43] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 20, changing to 7 [ 401.684643][ T43] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 401.699934][ T43] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 401.709321][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.734777][ T43] usb 6-1: Product: syz [ 401.744962][ T43] usb 6-1: Manufacturer: syz [ 401.767942][ T43] usb 6-1: SerialNumber: syz [ 402.028115][T11688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.068147][T11688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.136025][ T43] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 402.157441][ T43] usb 6-1: 2:1: invalid format type 0x1000 is detected, processed as PCM [ 402.289635][ T43] usb 6-1: USB disconnect, device number 48 [ 402.383808][ T6364] udevd[6364]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 402.430295][ T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 402.577724][ T5878] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 402.598042][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 402.604982][ T10] usb 7-1: config 1 has an invalid interface number: 20 but max is 0 [ 402.617443][ T10] usb 7-1: config 1 has no interface number 0 [ 402.625713][ T10] usb 7-1: config 1 interface 20 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 402.636157][ T10] usb 7-1: config 1 interface 20 has no altsetting 0 [ 402.647204][ T10] usb 7-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=8d.d6 [ 402.667433][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.682914][ T10] usb 7-1: Product: syz [ 402.693876][ T10] usb 7-1: Manufacturer: syz [ 402.699853][ T10] usb 7-1: SerialNumber: syz [ 402.717732][ T5878] usb 2-1: device descriptor read/64, error -71 [ 402.725753][T11733] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 402.753849][T11753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.766315][T11753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.955280][ T10] em28xx 7-1:1.20: New device syz syz @ 480 Mbps (2040:8268, interface 20, class 20) [ 402.973920][ T10] em28xx 7-1:1.20: Video interface 20 found: bulk [ 402.980526][ T5831] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 402.988588][ T5878] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 403.050652][ T10] em28xx 7-1:1.20: unknown em28xx chip ID (0) [ 403.136237][ T5878] usb 2-1: device descriptor read/64, error -71 [ 403.143597][ T10] em28xx 7-1:1.20: reading from i2c device at 0xa0 failed (error=-5) [ 403.153048][ T10] em28xx 7-1:1.20: board has no eeprom [ 403.169573][ T5831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.183989][ T5831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.194012][ T5831] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 403.203282][ T5831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.215382][ T5831] usb 6-1: config 0 descriptor?? [ 403.227703][ T10] em28xx 7-1:1.20: Identified as PCTV tripleStick (292e) (card=94) [ 403.235634][ T10] em28xx 7-1:1.20: Currently, V4L2 is not supported on this model [ 403.244392][T11758] em28xx 7-1:1.20: Binding DVB extension [ 403.250966][T11758] em28xx 7-1:1.20: no endpoint for DVB mode and transfer type 0 [ 403.259602][ T5878] usb usb2-port1: attempt power cycle [ 403.278256][T11758] em28xx 7-1:1.20: failed to pre-allocate USB transfer buffers for DVB. [ 403.290412][ T10] usb 7-1: USB disconnect, device number 9 [ 403.296382][T11758] em28xx 7-1:1.20: Registering input extension [ 403.304684][ T10] em28xx 7-1:1.20: Disconnecting em28xx [ 403.310886][ T10] em28xx 7-1:1.20: Closing input extension [ 403.345274][ T10] em28xx 7-1:1.20: Freeing device [ 403.424155][ T5831] usbhid 6-1:0.0: can't add hid device: -71 [ 403.434534][ T5831] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 403.458648][ T5831] usb 6-1: USB disconnect, device number 49 [ 403.570044][T11780] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.1849'. [ 403.607568][ T5878] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 403.659210][ T5878] usb 2-1: device descriptor read/8, error -71 [ 403.897575][ T5878] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 403.918178][ T5878] usb 2-1: device descriptor read/8, error -71 [ 404.029493][ T5878] usb usb2-port1: unable to enumerate USB device [ 404.034078][T11795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.306532][T11809] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1857'. [ 404.320403][ T6054] lec:lec_start_xmit: lec0:No lecd attached [ 404.372343][T11814] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1858'. [ 404.847496][ T5871] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 404.867525][ T43] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 404.997427][ T5871] usb 7-1: Using ep0 maxpacket: 8 [ 405.004935][ T5871] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 405.015926][ T5871] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 405.025829][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 405.031038][ T5871] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 405.041178][ T5871] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 405.054332][ T5871] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 405.063664][ T5871] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.073381][ T43] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 41 [ 405.083422][ T43] usb 6-1: can't read configurations, error -22 [ 405.217402][ T43] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 405.301687][ T5871] usb 7-1: GET_CAPABILITIES returned 0 [ 405.307516][ T5871] usbtmc 7-1:16.0: can't read capabilities [ 405.366041][T11829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.367424][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 405.375271][T11829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.389940][ T43] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 41 [ 405.403866][ T43] usb 6-1: can't read configurations, error -22 [ 405.410842][ T43] usb usb6-port1: attempt power cycle [ 405.524204][ T5878] usb 7-1: USB disconnect, device number 10 [ 405.747489][ T43] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 405.757443][ T5912] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 405.768499][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 405.775080][ T43] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 41 [ 405.783968][ T43] usb 6-1: can't read configurations, error -22 [ 405.909535][ T5912] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.919765][ T5912] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 405.927307][ T43] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 405.933663][ T5912] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 405.945343][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.953546][ T5912] usb 2-1: Product: syz [ 405.958032][ T5912] usb 2-1: Manufacturer: syz [ 405.959372][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 405.962697][ T5912] usb 2-1: SerialNumber: syz [ 405.978344][ T43] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 41 [ 405.987042][ T43] usb 6-1: can't read configurations, error -22 [ 405.994500][ T43] usb usb6-port1: unable to enumerate USB device [ 406.176522][ T5912] usb 2-1: 0:2 : does not exist [ 406.193207][ T5912] usb 2-1: USB disconnect, device number 125 [ 406.215358][ T6070] udevd[6070]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 406.289802][T11840] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.1867'. [ 406.343828][T11842] fuse: Bad value for 'fd' [ 407.137171][ T5912] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 407.288036][ T5912] usb 2-1: Using ep0 maxpacket: 8 [ 407.296557][ T5912] usb 2-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d [ 407.306398][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.315191][ T5912] usb 2-1: Product: syz [ 407.319433][ T5912] usb 2-1: Manufacturer: syz [ 407.324037][ T5912] usb 2-1: SerialNumber: syz [ 407.330875][ T5912] usb 2-1: config 0 descriptor?? [ 407.339928][ T5912] gspca_main: sonixj-2.14.0 probing 0c45:6128 [ 407.609078][T11866] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1876'. [ 407.977111][ T5911] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 408.145053][ T5911] usb 6-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 408.159923][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.166125][ T5912] input: sonixj as /devices/platform/dummy_hcd.1/usb2/2-1/input/input43 [ 408.172929][ T5911] usb 6-1: Product: syz [ 408.188252][ T5911] usb 6-1: Manufacturer: syz [ 408.194277][ T5911] usb 6-1: SerialNumber: syz [ 408.205841][ T5911] usb 6-1: config 0 descriptor?? [ 408.228714][ T5911] go7007 6-1:0.0: probe with driver go7007 failed with error -12 [ 408.407126][ T5911] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 408.428363][ T5912] usb 2-1: USB disconnect, device number 126 [ 408.444229][ T794] usb 6-1: USB disconnect, device number 54 [ 408.578076][ T5911] usb 7-1: Invalid ep0 maxpacket: 16 [ 408.707144][ T5911] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 408.763110][T11890] mkiss: ax0: crc mode is auto. [ 408.808791][ T794] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 408.867988][ T5911] usb 7-1: Invalid ep0 maxpacket: 16 [ 408.873984][ T5911] usb usb7-port1: attempt power cycle [ 408.914942][T11898] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.1885'. [ 408.976967][ T794] usb 6-1: Using ep0 maxpacket: 16 [ 408.984488][ T794] usb 6-1: config 0 has an invalid interface number: 227 but max is 0 [ 408.993130][ T794] usb 6-1: config 0 has no interface number 0 [ 408.996926][ T5912] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 408.999301][ T794] usb 6-1: config 0 interface 227 has no altsetting 0 [ 409.017689][ T794] usb 6-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice=28.6b [ 409.026776][ T794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.034992][ T794] usb 6-1: Product: syz [ 409.039345][ T794] usb 6-1: Manufacturer: syz [ 409.043970][ T794] usb 6-1: SerialNumber: syz [ 409.051359][ T794] usb 6-1: config 0 descriptor?? [ 409.064825][ T794] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.227/input/input44 [ 409.159305][ T5912] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 409.168541][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.184824][ T5912] usb 2-1: config 0 descriptor?? [ 409.192137][ T5912] cp210x 2-1:0.0: cp210x converter detected [ 409.216925][ T5911] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 409.237686][ T5911] usb 7-1: Invalid ep0 maxpacket: 16 [ 409.264052][ T5180] bcm5974 6-1:0.227: could not read from device [ 409.275490][ T5180] bcm5974 6-1:0.227: could not read from device [ 409.280054][ T794] usb 6-1: USB disconnect, device number 55 [ 409.366957][ T5911] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 409.387607][ T5911] usb 7-1: Invalid ep0 maxpacket: 16 [ 409.393314][ T5911] usb usb7-port1: unable to enumerate USB device [ 409.396224][T11887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.408838][T11887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.419568][ T5912] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 409.428280][ T5912] cp210x 2-1:0.0: querying part number failed [ 409.439106][ T5912] usb 2-1: cp210x converter now attached to ttyUSB0 [ 409.826797][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5510 ms [ 409.834866][ C1] lec:lec_tx_timeout: lec0 [ 409.902550][T11905] binder: 11904:11905 ioctl c018620c 200000000280 returned -1 [ 410.100522][T11920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.110310][T11920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.781558][T11925] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1894'. [ 410.831788][T11927] 9pnet_fd: p9_fd_create_tcp (11927): problem connecting socket to 127.0.0.1 [ 411.676703][ T794] usb 2-1: USB disconnect, device number 127 [ 411.695592][ T794] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 411.706400][ T794] cp210x 2-1:0.0: device disconnected [ 411.903692][T11945] netlink: 4092 bytes leftover after parsing attributes in process `syz.5.1901'. [ 411.913621][T11945] unsupported nlmsg_type 40 [ 412.097637][ T794] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 412.226576][ T794] usb 2-1: device descriptor read/64, error -71 [ 412.366547][ T10] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 412.469475][ T794] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 412.521847][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 412.531192][ T10] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 412.538872][ T10] usb 7-1: can't read configurations, error -71 [ 412.608464][ T794] usb 2-1: device descriptor read/64, error -71 [ 412.723461][ T794] usb usb2-port1: attempt power cycle [ 412.731270][T11951] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1904'. [ 413.067101][ T794] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 413.076404][T11955] netlink: 'syz.6.1906': attribute type 4 has an invalid length. [ 413.084148][T11955] netlink: 'syz.6.1906': attribute type 2 has an invalid length. [ 413.094064][ T794] usb 2-1: device descriptor read/8, error -71 [ 413.339256][ T794] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 413.349498][T11967] fuse: Bad value for 'rootmode' [ 413.366994][ T794] usb 2-1: device descriptor read/8, error -71 [ 413.476723][ T794] usb usb2-port1: unable to enumerate USB device [ 413.776475][T11973] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1911'. [ 413.785407][T11973] netlink: 480 bytes leftover after parsing attributes in process `syz.7.1911'. [ 413.795072][T11973] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1911'. [ 414.576293][ T794] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 414.729113][ T794] usb 7-1: unable to get BOS descriptor or descriptor too short [ 414.739234][ T794] usb 7-1: not running at top speed; connect to a high speed hub [ 414.748450][ T794] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.758609][ T794] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 414.776473][ T794] usb 7-1: string descriptor 0 read error: -22 [ 414.782972][ T794] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 414.794302][ T794] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.809863][ T794] usb 7-1: 0:2 : does not exist [ 414.844328][T11986] ieee802154 phy0 wpan0: encryption failed: -22 [ 415.156199][ T5911] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 415.176231][ T43] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 415.209826][T11983] netlink: 1372 bytes leftover after parsing attributes in process `syz.6.1915'. [ 415.307760][ T5911] usb 6-1: config 0 has an invalid interface number: 176 but max is 0 [ 415.316012][ T5911] usb 6-1: config 0 has no interface number 0 [ 415.322706][ T5911] usb 6-1: Dual-Role OTG device on HNP port [ 415.328756][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 415.334201][ T5911] usb 6-1: New USB device found, idVendor=157e, idProduct=3204, bcdDevice=ea.6f [ 415.343648][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.354147][ T43] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.365778][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 415.373508][ T5911] usb 6-1: config 0 descriptor?? [ 415.378967][ T43] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 415.389266][ T5911] hub 6-1:0.176: bad descriptor, ignoring hub [ 415.395414][ T5911] hub 6-1:0.176: probe with driver hub failed with error -5 [ 415.402840][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.413689][ T43] usb 2-1: config 0 descriptor?? [ 415.633168][ T794] usb 7-1: 5:0: cannot get min/max values for control 2 (id 5) [ 415.644172][ T794] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 415.655523][ T794] usb 7-1: 5:0: failed to get current value for ch 1 (-22) [ 415.684212][ T794] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 415.696520][ T10] usb 6-1: USB disconnect, device number 56 [ 415.697889][ T794] usb 7-1: 5:0: cannot get min/max values for control 2 (id 5) [ 415.719592][ T794] usb 7-1: USB disconnect, device number 17 [ 415.831818][T11986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.841195][T11986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.253689][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 416.259897][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 416.275481][ T43] usb 2-1: USB disconnect, device number 6 [ 416.878027][T12001] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1923'. [ 417.037781][T12007] kvm: user requested TSC rate below hardware speed [ 417.188786][ T794] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 417.286074][ T10] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 417.415936][ T10] usb 6-1: device descriptor read/64, error -71 [ 417.476581][ T794] usb 2-1: config 0 has an invalid interface number: 245 but max is 0 [ 417.485062][ T794] usb 2-1: config 0 has no interface number 0 [ 417.491613][ T794] usb 2-1: too many endpoints for config 0 interface 245 altsetting 14: 128, using maximum allowed: 30 [ 417.570196][ T794] usb 2-1: config 0 interface 245 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 417.584076][ T794] usb 2-1: config 0 interface 245 has no altsetting 0 [ 417.619731][ T794] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 417.628879][ T794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.696557][ T794] usb 2-1: config 0 descriptor?? [ 417.845569][T12028] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.1932'. [ 417.946783][ T794] usb 2-1: string descriptor 0 read error: -71 [ 417.974748][ T794] cp210x 2-1:0.245: cp210x converter detected [ 418.011460][ T794] cp210x 2-1:0.245: failed to get vendor val 0x370b size 1: -71 [ 418.032984][ T794] cp210x 2-1:0.245: querying part number failed [ 418.057765][ T794] usb 2-1: cp210x converter now attached to ttyUSB0 [ 418.105986][ T794] usb 2-1: USB disconnect, device number 7 [ 418.155656][ T794] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 418.186524][ T794] cp210x 2-1:0.245: device disconnected [ 418.586930][ T10] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 418.726177][ T10] usb 6-1: device descriptor read/64, error -71 [ 418.836182][ T10] usb usb6-port1: attempt power cycle [ 419.042755][T12053] TCP: TCP_TX_DELAY enabled [ 419.215853][ T5912] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 419.236434][ T10] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 419.256229][ T10] usb 6-1: device descriptor read/8, error -71 [ 419.295744][ T794] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 419.367896][ T5912] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 419.378151][ T5912] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 419.389167][ T5912] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 419.398246][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.406456][ T5912] usb 2-1: Product: syz [ 419.410620][ T5912] usb 2-1: Manufacturer: syz [ 419.415190][ T5912] usb 2-1: SerialNumber: syz [ 419.445803][ T794] usb 7-1: Using ep0 maxpacket: 16 [ 419.455103][ T794] usb 7-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.00 [ 419.464310][ T794] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.474645][ T794] usb 7-1: config 0 descriptor?? [ 419.510267][ T10] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 419.537114][ T10] usb 6-1: device descriptor read/8, error -71 [ 419.657032][ T10] usb usb6-port1: unable to enumerate USB device [ 420.200242][T12059] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.1941'. [ 420.475654][T11758] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 420.640540][T11758] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 420.648868][T11758] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.659166][T11758] usb 6-1: config 0 has no interface number 0 [ 420.665523][T11758] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 420.676910][T11758] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 420.690216][T11758] usb 6-1: config 0 interface 52 has no altsetting 0 [ 420.698252][T11758] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 420.707487][T11758] usb 6-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 420.715646][T11758] usb 6-1: Manufacturer: syz [ 420.722675][T11758] usb 6-1: config 0 descriptor?? [ 420.730098][T11758] hub 6-1:0.52: bad descriptor, ignoring hub [ 420.736169][T11758] hub 6-1:0.52: probe with driver hub failed with error -5 [ 421.019437][T12077] fuse: Unknown parameter 'V];(Z)LG2Ą8l^@<;x;PzĨF^(;0x0000000000000003' [ 421.139899][ T10] usb 6-1: USB disconnect, device number 61 [ 421.224575][ T30] audit: type=1326 audit(1762922379.898:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.6.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c498f6c9 code=0x7fc00000 [ 421.330669][T12085] comedi comedi2: rti800: I/O port conflict (0x4f27,16) [ 421.363865][T12087] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.1952'. [ 421.429653][ T31] INFO: task syz.0.1205:9555 blocked for more than 143 seconds. [ 421.447794][ T31] Not tainted syzkaller #0 [ 421.453521][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 421.465668][ T31] task:syz.0.1205 state:D stack:26792 pid:9555 tgid:9554 ppid:5820 task_flags:0x400040 flags:0x00080002 [ 421.479079][ T31] Call Trace: [ 421.482387][ T31] [ 421.485327][ T31] __schedule+0x1836/0x4ed0 [ 421.492541][ T31] ? kasan_save_free_info+0x46/0x50 [ 421.500181][ T31] ? do_sys_openat2+0x121/0x1c0 [ 421.505208][ T31] ? __lock_acquire+0xab9/0xd20 [ 421.510492][ T31] ? __lock_acquire+0xab9/0xd20 [ 421.515749][ T31] ? __pfx___schedule+0x10/0x10 [ 421.520641][ T31] ? schedule+0x91/0x360 [ 421.524909][ T31] schedule+0x165/0x360 [ 421.530270][ T31] schedule_preempt_disabled+0x13/0x30 [ 421.537751][ T31] __mutex_lock+0x7e6/0x1350 [ 421.542520][ T31] ? __mutex_lock+0x5bb/0x1350 [ 421.548662][ T31] ? bdev_open+0xe0/0xd30 [ 421.553247][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 421.560464][ T31] ? disk_block_events+0xab/0x120 [ 421.565776][ T31] ? bdev_open+0xaf/0xd30 [ 421.570137][ T31] bdev_open+0xe0/0xd30 [ 421.574312][ T31] blkdev_open+0x457/0x600 [ 421.579214][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 421.584175][ T31] do_dentry_open+0x953/0x13f0 [ 421.589170][ T24] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 421.599990][ T31] vfs_open+0x3b/0x340 [ 421.604531][ T31] ? path_openat+0x2ede/0x3860 [ 421.609625][ T31] path_openat+0x2efb/0x3860 [ 421.614270][ T31] ? __pfx_path_openat+0x10/0x10 [ 421.619323][ T31] do_filp_open+0x1fa/0x410 [ 421.623963][ T31] ? __lock_acquire+0xab9/0xd20 [ 421.628928][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 421.634069][ T31] ? _raw_spin_unlock+0x28/0x50 [ 421.638985][ T31] ? alloc_fd+0x64c/0x6c0 [ 421.643343][ T31] do_sys_openat2+0x121/0x1c0 [ 421.648207][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 421.653438][ T31] ? exc_page_fault+0x82/0x100 [ 421.658342][ T31] __x64_sys_openat+0x138/0x170 [ 421.663236][ T31] do_syscall_64+0xfa/0xfa0 [ 421.668547][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.674648][ T31] ? clear_bhb_loop+0x60/0xb0 [ 421.679868][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.685964][ T31] RIP: 0033:0x7f8a61b8df10 [ 421.690402][ T31] RSP: 002b:00007f8a62af1b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 421.700313][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8a61b8df10 [ 421.708464][ T31] RDX: 0000000000000000 RSI: 00007f8a62af1c10 RDI: 00000000ffffff9c [ 421.716489][ T31] RBP: 00007f8a62af1c10 R08: 0000000000000000 R09: 002364626e2f7665 [ 421.724473][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 421.732518][ T31] R13: 00007f8a61de6038 R14: 00007f8a61de5fa0 R15: 00007ffd85174268 [ 421.740734][ T31] [ 421.743989][ T31] [ 421.743989][ T31] Showing all locks held in the system: [ 421.752594][ T31] 5 locks held by kworker/1:0/24: [ 421.757817][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 421.763053][ T31] #0: ffff88801e6aad48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x841/0x15e0 [ 421.774311][ T31] #1: ffffc900001e7b80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x868/0x15e0 [ 421.786464][ T31] #2: ffff888143fe6198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 421.795575][ T24] usb 6-1: config index 0 descriptor too short (expected 37530, got 36) [ 421.805168][ T24] usb 6-1: config 15 has too many interfaces: 215, using maximum allowed: 32 [ 421.806862][ T31] #3: ffff8880b873a1d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 421.817353][ T24] usb 6-1: config 15 has an invalid descriptor of length 0, skipping remainder of the config [ 421.826124][ T31] #4: ffff8880b8724048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 421.839192][ T24] usb 6-1: config 15 has 0 interfaces, different from the descriptor's value: 215 [ 421.844977][ T31] 1 lock held by khungtaskd/31: [ 421.856474][ T24] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 421.868815][ T31] #0: ffffffff8e33d820 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 421.869355][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.888926][ T31] 6 locks held by kworker/1:2/794: [ 421.889450][ T24] usb 6-1: Product: syz [ 421.898576][ T31] #0: ffff88801e6aad48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x841/0x15e0 [ 421.898861][ T24] usb 6-1: Manufacturer: syz [ 421.918650][ T24] usb 6-1: SerialNumber: syz [ 421.926810][ T31] #1: ffffc90003817b80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x868/0x15e0 [ 421.939437][ T31] #2: ffff888029226198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 421.940190][ T5912] usb 2-1: 0:2 : does not exist [ 421.949011][ T31] #3: ffff88807a05e198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 421.968166][ T31] #4: ffff88805fe2d160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 421.977727][ T31] #5: ffffffff8f65fca8 (register_mutex#6){+.+.}-{4:4}, at: usb_audio_probe+0x7f8/0x2320 [ 421.989426][ T31] 2 locks held by getty/5581: [ 421.994258][ T31] #0: ffff88814e0d00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 422.004835][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 422.017361][ T5912] usb 2-1: USB disconnect, device number 8 [ 422.034271][ T31] 1 lock held by udevd/5822: [ 422.039355][ T31] 1 lock held by udevd/5833: [ 422.044276][ T31] #0: ffff888025ef6358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 422.054806][ T31] 4 locks held by udevd/5836: [ 422.059822][ T31] #0: ffff88805c012d58 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe20 [ 422.073355][ T31] #1: ffff888048099088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 422.091256][ T31] #2: ffff88807cd521e8 (kn->active#19){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 422.093298][ T794] usb 7-1: USB disconnect, device number 18 [ 422.107111][ T31] #3: ffff88805b349198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 422.119565][ T31] 7 locks held by kworker/0:6/5912: [ 422.124925][ T31] #0: ffff88801e6aad48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x841/0x15e0 [ 422.135825][ T31] #1: ffffc90005027b80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x868/0x15e0 [ 422.149320][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 422.157017][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 422.162225][ T31] #2: ffff888143bed198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 422.167179][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 422.180883][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 422.183413][ T31] #3: ffff8880b863a1d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 422.203783][ T31] #4: ffff8880b8624048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 422.221891][ T31] #5: ffff8880b8724048 (psi_seq){-.-.}-{0:0}, at: psi_task_change+0xd9/0x340 [ 422.225810][ T5831] usb 6-1: USB disconnect, device number 62 [ 422.243819][ T31] #6: ffffffff8e33d820 (rcu_read_lock){....}-{1:3}, at: kernfs_root+0x1c/0x230 [ 422.254447][ T31] 1 lock held by udevd/6070: [ 422.261277][ T31] #0: ffff888140450188 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_dop_revalidate+0x9e/0x5d0 [ 422.276538][ T31] 1 lock held by syz.0.1205/9555: [ 422.281664][ T31] #0: ffff888025ef6358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 422.291629][ T31] 1 lock held by syz.1.1938/12050: [ 422.297110][ T31] #0: ffffffff8e3431c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 422.307862][ T31] [ 422.310205][ T31] ============================================= [ 422.310205][ T31] [ 422.320471][ T31] NMI backtrace for cpu 0 [ 422.320492][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 422.320513][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 422.320526][ T31] Call Trace: [ 422.320534][ T31] [ 422.320542][ T31] dump_stack_lvl+0x189/0x250 [ 422.320574][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.320597][ T31] ? __pfx__printk+0x10/0x10 [ 422.320629][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 422.320657][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 422.320683][ T31] ? __pfx__printk+0x10/0x10 [ 422.320707][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 422.320737][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 422.320765][ T31] watchdog+0xfa8/0xff0 [ 422.320794][ T31] ? watchdog+0x1f4/0xff0 [ 422.320824][ T31] kthread+0x711/0x8a0 [ 422.320852][ T31] ? __pfx_watchdog+0x10/0x10 [ 422.320874][ T31] ? __pfx_kthread+0x10/0x10 [ 422.320901][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 422.320928][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 422.320942][ T31] ? __pfx_kthread+0x10/0x10 [ 422.320964][ T31] ret_from_fork+0x599/0xb30 [ 422.320982][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 422.320997][ T31] ? __switch_to_asm+0x39/0x70 [ 422.321011][ T31] ? __switch_to_asm+0x33/0x70 [ 422.321031][ T31] ? __pfx_kthread+0x10/0x10 [ 422.321045][ T31] ret_from_fork_asm+0x1a/0x30 [ 422.321068][ T31] [ 422.321072][ T31] Sending NMI from CPU 0 to CPUs 1: [ 422.467732][ C1] NMI backtrace for cpu 1 [ 422.467750][ C1] CPU: 1 UID: 0 PID: 794 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 422.467770][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 422.467789][ C1] Workqueue: usb_hub_wq hub_event [ 422.467811][ C1] RIP: 0010:__kasan_check_write+0xa/0x20 [ 422.467834][ C1] Code: ff 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 89 f6 48 8b 0c 24 01 00 00 00 e9 bc e4 ff ff 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 422.467849][ C1] RSP: 0018:ffffc90003817578 EFLAGS: 00000246 [ 422.467864][ C1] RAX: 0000000000000004 RBX: 1ffffffff1f7f4f2 RCX: ffffffff8b640b74 [ 422.467877][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888143fe8030 [ 422.467889][ C1] RBP: ffffc90003817688 R08: ffff888143fe8037 R09: 1ffff110287fd006 [ 422.467902][ C1] R10: dffffc0000000000 R11: ffffed10287fd007 R12: ffffc90003817620 [ 422.467916][ C1] R13: 0000000000000000 R14: 1ffffffff338a47c R15: ffff888143fe8030 [ 422.467935][ C1] FS: 0000000000000000(0000) GS:ffff888125b82000(0000) knlGS:0000000000000000 [ 422.467949][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 422.467962][ C1] CR2: 0000200000002840 CR3: 0000000079168000 CR4: 00000000003526f0 [ 422.467978][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 422.467990][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 422.468003][ C1] Call Trace: [ 422.468009][ C1] [ 422.468016][ C1] __mutex_unlock_slowpath+0x194/0x740 [ 422.468041][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 422.468069][ C1] ? usb_control_msg+0x2bf/0x3e0 [ 422.468089][ C1] hub_ext_port_status+0x4a8/0x820 [ 422.468119][ C1] hub_port_debounce+0x220/0x340 [ 422.468140][ C1] hub_event+0x1d2e/0x4ef0 [ 422.468157][ C1] ? __set_next_task_fair+0x135/0x390 [ 422.468193][ C1] ? register_lock_class+0x51/0x320 [ 422.468219][ C1] ? __pfx_hub_event+0x10/0x10 [ 422.468236][ C1] ? process_one_work+0x868/0x15e0 [ 422.468257][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 422.468282][ C1] ? process_one_work+0x868/0x15e0 [ 422.468299][ C1] process_one_work+0x93a/0x15e0 [ 422.468316][ C1] ? __lock_acquire+0xab9/0xd20 [ 422.468343][ C1] ? __pfx_process_one_work+0x10/0x10 [ 422.468364][ C1] ? assign_work+0x3a1/0x410 [ 422.468384][ C1] worker_thread+0x9f5/0xee0 [ 422.468414][ C1] kthread+0x711/0x8a0 [ 422.468437][ C1] ? __pfx_worker_thread+0x10/0x10 [ 422.468455][ C1] ? __pfx_kthread+0x10/0x10 [ 422.468477][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 422.468501][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 422.468515][ C1] ? __pfx_kthread+0x10/0x10 [ 422.468537][ C1] ret_from_fork+0x599/0xb30 [ 422.468555][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 422.468577][ C1] ? __switch_to_asm+0x39/0x70 [ 422.468600][ C1] ? __switch_to_asm+0x33/0x70 [ 422.468621][ C1] ? __pfx_kthread+0x10/0x10 [ 422.468665][ C1] ret_from_fork_asm+0x1a/0x30 [ 422.468697][ C1] [ 422.835312][ T794] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 422.992089][ T794] usb 7-1: unable to get BOS descriptor or descriptor too short [ 423.002448][ T794] usb 7-1: not running at top speed; connect to a high speed hub [ 423.011442][ T794] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 423.023803][ T794] usb 7-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=af.16 [ 423.034667][ T794] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.042786][ T794] usb 7-1: Product: syz [ 423.047044][ T794] usb 7-1: Manufacturer: syz [ 423.051626][ T794] usb 7-1: SerialNumber: syz [ 423.263318][T12089] loop7: detected capacity change from 0 to 16384 [ 423.506815][T12091] loop7: detected capacity change from 16384 to 0 [ 423.515226][ C0] blk_print_req_error: 25 callbacks suppressed [ 423.515241][ C0] I/O error, dev loop7, sector 13312 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 2 [ 423.550966][ T794] pwc: Visionite VCS-UC300 USB webcam detected. [ 423.561479][ T794] pwc: Failed to set LED on/off time (-71) [ 423.568401][ T794] pwc: send_video_command error -71 [ 423.573676][ T794] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 423.581435][ T794] Philips webcam 7-1:1.0: probe with driver Philips webcam failed with error -71 [ 423.593788][ T794] usb 7-1: USB disconnect, device number 19 [ 427.267950][ T5195] udevd[5195]: worker [5833] /devices/virtual/block/nbd0 timeout; kill it [ 427.278433][ T5195] udevd[5195]: seq 14968 '/devices/virtual/block/nbd0' killed [ 428.465560][ T25] block nbd0: Possible stuck request ffff888026400000: control (read@0,1024B). Runtime 210 seconds [ 428.476883][ T25] block nbd0: Possible stuck request ffff888026400200: control (read@1024,1024B). Runtime 210 seconds [ 428.487916][ T25] block nbd0: Possible stuck request ffff888026400400: control (read@2048,1024B). Runtime 210 seconds [ 428.498932][ T25] block nbd0: Possible stuck request ffff888026400600: control (read@3072,1024B). Runtime 210 seconds