last executing test programs: 10m10.381699939s ago: executing program 0 (id=772): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffc, 0x4, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000180)="232b13f6", 0x0, 0xfffffffc, 0x0, 0x0, 0x0}) 10m7.072758096s ago: executing program 0 (id=781): syz_clone(0xb0000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)="68bc342f9cd8ccfd22ae9c") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000000000000000000000000000000000000086009078ff81000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 10m6.779947663s ago: executing program 0 (id=782): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) (async) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, &(0x7f0000000080)={"c4a969e76a5fdc6fd500fd8e26f5f153eaaf04ae8f9e3ee9709ed50836b4", 0x2, 0x8, 0x7, [0xffffffff, 0xffffffff, 0x6, 0x1, 0x80000000, 0x9, 0x804, 0x1, 0x8, 0x4, 0xe15, 0x7ff, 0x4000008, 0x1003, 0x8, 0x3, 0x3, 0xd407]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000040d90455a00000000000010902240001000010e008040000c4030002000921001000012201000905810300"], 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000040d90455a00000000000010902240001000010e008040000c4030002000921001000012201000905810300"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000380), 0x0, 0x0) (async) r2 = syz_open_dev$video4linux(&(0x7f0000000380), 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000040)={0x8000000, 0x204, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x8000000, 0x0, '\x00', @ptr}}) syz_usb_control_io$hid(r1, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000100)) 10m5.384008788s ago: executing program 0 (id=787): syz_usb_connect$hid(0x2, 0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406a05f8000000000000010902"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_usb_connect$uac1(0x1, 0xa4, 0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xab101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) umount2(&(0x7f00000006c0)='./file0/file0\x00', 0xb) 10m3.994579884s ago: executing program 0 (id=790): syz_clone(0xb0000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)="68bc342f9cd8ccfd22ae9c") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000010000000000000000000000000000000000000000000000008600907880ff000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 10m3.227564587s ago: executing program 0 (id=793): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x32314247, 0x0, 0x0, [{0x0, 0x5482}]}}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f00000020c0)={0x20, 0x140b, 0x303, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4095}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0xfffffffffffffefa, r1, 0x0}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) dup3(r6, r5, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r6, 0x641e) read$FUSE(0xffffffffffffffff, &(0x7f0000002180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r6, &(0x7f0000000040)={0x18, 0x0, r7}, 0x18) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r8, 0xc01c64ad, &(0x7f0000000080)={r4}) eventfd2(0x81, 0x180000) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000004, 0x13, r8, 0x100000000) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') 10m2.882793219s ago: executing program 32 (id=793): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x32314247, 0x0, 0x0, [{0x0, 0x5482}]}}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f00000020c0)={0x20, 0x140b, 0x303, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4095}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0xfffffffffffffefa, r1, 0x0}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) dup3(r6, r5, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r6, 0x641e) read$FUSE(0xffffffffffffffff, &(0x7f0000002180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r6, &(0x7f0000000040)={0x18, 0x0, r7}, 0x18) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r8, 0xc01c64ad, &(0x7f0000000080)={r4}) eventfd2(0x81, 0x180000) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000004, 0x13, r8, 0x100000000) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') 9m50.044146563s ago: executing program 1 (id=834): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x9}}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000780)=ANY=[@ANYBLOB="8ccba267c505cf728f5faff15df0ceae08cb96829ff50c2f0d056d237b21295e69ab16e891dd97d46e870dfc0375bf1466b86b93085f854d11f5578c4d258a32a93958103fddf5926a4c474f737885789893d110426181ee59cd6963f4b2df59f01b2a2374c6f3424561f6f0ac797f1f3e59320e07896f4c0ef375ec83fbf1904a660b4206406ac2e4d7ce41db431a6d5017f9f8e722df86131659732d28281b9da0c052254f728c199473c16c01ab81c04dbc5d8a5f3af1b46fdca6bf4c3484c391", @ANYRESHEX, @ANYRES16=r0, @ANYRES64=r0, @ANYBLOB="0038c566fe9f01042b3644a9e7f44d05e2917016da819b6297ae9088ae93afeec53649944c2209ee1c69b92a3840f38c69ef43a7aa60aa535813084b2cdd5d29c223f6153075631cae69b2b2fc4acadccab65eeca153c71e66d4dba8caca9fc0fec68cf7a6590f217ed9c3647dcdf8b7f8900c9176ba85d612923196a94e2761d2c151027347f90869ea32cb7767520d9cb702c15db1336362de97e17ec9fbb5502d4d20ae924c57ec7ce202eeada867dbf2c2d846ed98f81e2890700cc35139d2c7449c6f12317e9aefeb74279e479c80b309", @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRES64=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0}) 9m48.000087765s ago: executing program 1 (id=837): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x303) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/4046], 0xfce) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088800fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 9m47.814403783s ago: executing program 1 (id=839): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000002070101000000c8000000000a0000010c0007800700014000000001"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40448c2) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r3}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x1000, &(0x7f00000003c0)="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"}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r2, 0x3ba0, &(0x7f00000002c0)={0x48, 0x3, r4, 0x0, 0xf, 0xf2, &(0x7f00000013c0)="3b4cb34b05b38da88a907cd7328e1a37bd09de18966e9fb4d78018ac91b836ba2d4bc7a7004cf37f84b9be7ec4e55658e285f8b709dfdb2771e4f9ab099be449d9e91258a7059821eafe1c0199adb090741358bcc4929bad5f4eed909e6d80dde8f946c07cad4e1573c7c239c43c277439269251072658c33bf5a6416c2f641f30ac12de6763566e60838bbb0c85a37d8693b42ecfc4ab758c824c376cbab3ddcb52cde9e5e3610b0afeefd12ca7cfeb2cfdaf08aa09c7284663a7e6da15e92de6ef579abea4128d3f5d58a3cf661c0ef4c268e434fa3e5eec83d9f20b65eaee4b6313a77d08c30e2e085ffe164285386cdd"}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB='mpol=Bind=st`tic:7-N:N/']) pread64(r0, &(0x7f0000000000)=""/110, 0x6e, 0x7fff) 9m47.697334528s ago: executing program 1 (id=841): syz_clone(0xb0000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)="68bc342f9cd8ccfd22ae9c") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000300000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 9m47.475749296s ago: executing program 1 (id=843): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) r1 = fsopen(&(0x7f0000000280)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) fchdir(r2) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) (async) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5c00ffff", 0x4, 0x0, 0x0, 0x2}]) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) (async) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x80200, 0x482) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)) (async) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x102b82, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, 0x0) (async) r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r7, 0x0, 0x0) (async) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6) (async) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) r8 = syz_clone(0x0, &(0x7f0000000080)="a8eb0e1beab0a8f16d3befae418f58365a841147ad4721c18993b9ce73f5d21f230c6443c21250ca350612aae422858b0a94344a6f10a914", 0x38, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000002c0)="dcf169014f13050cf163116f6f00435c478e57371e27d2521125707f67afd5b9e934c5449ff861d9685710f304716228f2e83e03a783d979c4f17323c4a5f1288608d52f64dc2802fdba8c990dabfe42ca745914e58044d0b6fea4f68cd4b747c5c68603a0f40c4353e51d0ee97291cf105c33e6833d8eccacd24f26dc3d8042fd8a8c59af61e41685e82c229838df9b9a31b75cdd6222f3b2a8884c7e6fad69d8c906609284ba7d8bf40aded50903cfa26e918e0db4a2950ce664d167fdd3834a68c9e0d5ac8387") process_vm_readv(r8, &(0x7f0000000940)=[{&(0x7f0000000140)}, {&(0x7f00000003c0)=""/194, 0xc2}, {&(0x7f0000000180)=""/89, 0x59}, {&(0x7f00000004c0)=""/158, 0x9e}, {&(0x7f0000000580)=""/135, 0x87}, {&(0x7f0000000640)=""/205, 0xcd}, {&(0x7f0000000240)=""/7, 0x7}, {&(0x7f0000000740)=""/249, 0xf9}, {&(0x7f0000000840)=""/244, 0xf4}], 0x9, &(0x7f0000000e40)=[{&(0x7f0000000a00)=""/228, 0xe4}, {&(0x7f0000000b00)=""/244, 0xf4}, {&(0x7f0000000c00)=""/185, 0xb9}, {&(0x7f0000000cc0)=""/173, 0xad}, {&(0x7f0000000d80)=""/171, 0xab}], 0x5, 0x0) (async) creat(&(0x7f0000000200)='./file0\x00', 0x90) 9m47.467681191s ago: executing program 1 (id=844): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @scatter={0x13, 0x0, 0x0}, &(0x7f0000000180)="232b13f6b94d", 0x0, 0xfffffffc, 0x0, 0x0, 0x0}) 9m30.878511474s ago: executing program 33 (id=844): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @scatter={0x13, 0x0, 0x0}, &(0x7f0000000180)="232b13f6b94d", 0x0, 0xfffffffc, 0x0, 0x0, 0x0}) 9m15.061570833s ago: executing program 3 (id=995): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0xffffffffffffffff, 0xc80) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"8fd749c9c26ecbd5621fdcd759442d70", 0x0, r1, {0x338, 0x3ff}, {0x5, 0xfffffff7}, 0x2, [0x4, 0xdc50, 0x1, 0x40, 0x8, 0xc88, 0x5, 0x8, 0x5fc, 0xfffffffffffffffb, 0xd7, 0x2cf, 0x3, 0xa25, 0x7, 0xb]}) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000600)={0x0, &(0x7f0000000180)=[@code={0xa, 0x65, {"2e67660f38809322000000b805000000b9000000000f01c1f04783aa0000000036470f01d966baf80cb8b100a884ef66bafc0cec2642d8df460f01c466baf80cb851c04e82ef66bafc0cec0f01c9c4a32d48ff07"}}, @out_dx={0xaa, 0x28, {0xe758, 0x1}}, @wrmsr={0x1e, 0x20, {0x0, 0x9}}, @in_dx={0x82, 0x20, {0x1f8, 0x3}}, @cpuid={0x14, 0x18, {0x100, 0x4}}, @in_dx={0x82, 0x20, {0xa922, 0x3}}, @out_dx={0xaa, 0x28, {0x48f8, 0x0, 0xd40}}, @wr_drn={0x6e, 0x20, {0x4, 0x1}}, @code={0xa, 0x6d, {"3666450fd9f7c744240058000000c744240268000000ff2c24c44281af0589c3d6fa66430f6495a7000000c74424004b23b41ec7442402fe000000c7442406000000000f011c2466b87f008ec0650f090f0766b86a008ec8460f01c4"}}, @wr_crn={0x46, 0x20, {0x8, 0x80200000000}}, @in_dx={0x82, 0x20, {0x68ea, 0x7}}, @out_dx={0xaa, 0x28, {0x8750, 0x7, 0x7f}}, @uexit={0x0, 0x18, 0x8000}, @cpuid={0x14, 0x18, {0x7ff, 0x6}}, @cpuid={0x14, 0x18, {0x3, 0x1}}, @wr_drn={0x6e, 0x20, {0x1, 0xfffffffeffffffff}}, @uexit={0x0, 0x18, 0x7}, @uexit={0x0, 0x18, 0x5}, @wr_crn={0x46, 0x20, {0x0, 0x6}}, @wr_crn={0x46, 0x20}, @wrmsr={0x1e, 0x20, {0xb84, 0x6}}, @wrmsr={0x1e, 0x20, {0x389, 0x86c1}}, @cpuid={0x14, 0x18, {0x5, 0x71f}}, @code={0xa, 0x68, {"c744240000000000c744240225ad0000ff1c242667410fc7ba661200002e66410f12490d0f01cf66baf80cb876948b8fef66bafc0c66b8008066ef3e2e3666440f38801a36410f015a42c4627922183e0f794cb6f60f07"}}, @wr_crn={0x46, 0x20, {0x2, 0xfffffffffffeffff}}, @out_dx={0xaa, 0x28, {0xfb29, 0x1, 0xcd}}, @out_dx={0xaa, 0x28, {0x5983, 0x7, 0x7e6}}, @uexit={0x0, 0x18, 0x54d06312}, @out_dx={0xaa, 0x28, {0xce6a, 0x1, 0x5}}], 0x46a}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000640)={{0x1, 0x1, 0x18, r2, {0x1800000}}, './file0\x00'}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x29) r6 = socket$alg(0x26, 0x5, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r4, 0x40106410, &(0x7f0000000700)={0x55, &(0x7f0000000680)="c32d041018e421e98e60cbcc836c90dddeb9465491098b2abfc7a43fdf42162ff5ab8bde28c91845795ac5ceaccf2f420749052ac59c157f9c4027b4c08cab55a274f65daa6d35a3b06c30a7d3195ed8dc7e2ec0a9"}) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000740)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8c041c000ab27e1e, &(0x7f00000007c0)={0x4, &(0x7f0000000780)=[{0xf8ae, 0xb9, 0x3, 0x7}, {0x4, 0x3, 0x6, 0x1}, {0x400, 0x3, 0xa, 0xe1e}, {0xbb, 0x7f, 0x65, 0x800}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000c80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f0000000880)={0x3b8, 0x12, 0x100, 0x70bd2b, 0x25dfdbfc, {0x27, 0x7, 0x5, 0x1, {0x4e20, 0x4e20, [0x3a1c, 0x2, 0x0, 0x1], [0xfffffff7, 0x100, 0x0, 0x8], r7, [0x2]}, 0x0, 0x8}, [@INET_DIAG_REQ_BYTECODE={0xad, 0x1, "7dc1c5578c580f5931191a7e5fb46c86d608f13a05b5d687fc9ab0560f7bfb62e9ac8cba313ba47847f85a2ccf4a9051ea568e384fb91df69c7d76acb8f88e51df28b485158909aff9186fa0e9288201f63b57179cd9eeca2e15c72d4c2da3e5ad0df1622de0ad244cf7445c1ad7bea975faeb2a747745b99eaecf662521df32957a3cd1f8d35f2fff33d6e4b29f54e07f036cab85078922922f41136441b1430facf40005045c9931"}, @INET_DIAG_REQ_BYTECODE={0x24, 0x1, "be41b501ccae927e26aac60ec5ca45dae083747fadd79c16f433dcb16aa0fd0a"}, @INET_DIAG_REQ_BYTECODE={0x101, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "f775412e09a0a08ffdb2ef702bcfd6753d46b27306dffe337b70fbf3e3cb40afd42ae4293c510ee133a65ba0189917d858c182596b247a60d064f1704449c4904578679a446c675863ef9995d396e8f7e98af4c934415adccd7afec37cef607d1ec002f1761533234d18144bdb739603c1428b9b0f86"}, @INET_DIAG_REQ_BYTECODE={0x6a, 0x1, "d14b883c15fb358e6ea18e067d6119424f1837379c462bd3245462f3e20ff833fb9b162936fd2940c8f636adb04ed5a139949e3f4c7262e988b002477092482901d0f566a30d54c057f946feccf17057a715f2239502d34f7dfb45638057a13d4e568b9bb60a"}, @INET_DIAG_REQ_BYTECODE={0x65, 0x1, "02784d488b84b5a8a8d12a4a355fdbc174dc2dcc504bf1bcbfd11e8461d94e79cf8dc2ca1bb16962a9ce59f4cd5d811f936a5d7478b5f268a47e5a16b4b7220de0707101f73f65713c4693d7025d10509734720a3297c0c19f67874c9f4604fed5"}, @INET_DIAG_REQ_BYTECODE={0x41, 0x1, "f76cf7e308984f240da7fc8a97e0a306e0a9a1ac18f77bd659a79a1cc363fb73252eb9a68fbfb36b1c04f421437e62adab3882fa947ce60b520f87f17e"}]}, 0x3b8}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000cc0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x33, r7}) close_range(r2, r2, 0x2) ioctl$F2FS_IOC_COMPRESS_FILE(r5, 0xf518, 0x0) read$FUSE(r4, &(0x7f0000000d00)={0x2020}, 0x2020) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000002d40)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc02064b9, &(0x7f0000002e40)={&(0x7f0000002d80)=[0x0], &(0x7f0000002dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x0, 0xeeeeeeee}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000002ec0)={0x2, &(0x7f0000002e80)=[{0x5, 0x3, 0x0, 0x7}, {0x2, 0x0, 0x3, 0x800}]}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r5, 0x942e, 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000002f40), r3) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000003000)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f80)={0x30, r10, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40008d1}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000003100)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)={0x3c, 0x3, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x20000084) fcntl$dupfd(r0, 0x0, r6) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003180), r4) sendmsg$ETHTOOL_MSG_DEBUG_GET(r9, &(0x7f0000003300)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003240)={0x5c, r11, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40001) 9m14.950231098s ago: executing program 3 (id=996): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc52b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x2, 0x2, 0x8, 0x1f, 0xf3, 0x1}, {0x9, 0x5, 0x1, 0x2, 0x20, 0x80, 0x8, 0x10}, {0x9, 0x5, 0x2, 0x3, 0x3ff, 0x7f, 0x6, 0x1b}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r1, &(0x7f0000000080)={0x14, &(0x7f0000000100)={0x0, 0x3, 0x83, {0x83, 0x2, "d167deda6982b79842bf9658c05fe26239fe80933fb0e23324954b80cab794404ea20d2a5f560187c412d72f0167c96d4f6ca7254d46ddcdd426175e92c045f1945be2087b7f4f723be6929d87895ca917c7464d78389854077cbb7a9a7119b637d0bb099721714616ebc74339a0b41a5588ad4f004d9a1120efbbfe5d52d28fdf"}}, &(0x7f00000001c0)={0x0, 0x3, 0xfe, @string={0xfe, 0x3, "07ea7ee8fc846515df90bcccb8c678f417efe1a88d839aaa0987269d169c81a8380ac5cedff086ef163d70cb824a4e0f32e37205d56d5c4518a200cd0936c9a97b9d29f9ae27729af74ff5f372cf3cf98ab5f8aefc52ac3c0418ea56e9e43f6042674b887fb806e64164841cdeb089eaaa1e2dd73e636bbbfbd073f17c8dc9639a637551a423d1e2982aafc37fc74fd0a6bb4e5459b3a34689b7f76da12ddbffd7193b2a23ed217746484967fe9c27c70100392d349193eb57c5a5c371e8c6ff7e1e4a18d5754a8ddc847cf44e1ffd0dae60d5e5489078cc1d78bb2103c814e888405ff51d0672800b99cb6c8fdb564424425dcc3934f1f5d142287e"}}}, &(0x7f0000000840)={0x1c, &(0x7f0000000340)={0x0, 0xf, 0x75, "0ed4961569487118c682e56d9a4a01e3254f67c2195cbe9925dc0072cd3777207d68383918d4a05dca343d9022dbe14d631a836f47717f55b24dde41e6a4e5e32dd4b9027068ab1469ef6d37048c3facbb0eb0d5ea19fde6578460a9a793507ecfa46da91caf688aa3841efa26712e30a5c24aeea7"}, &(0x7f00000003c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000800)}) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "e3baf3ca"}]}}, 0x0}, 0x0) 9m13.063992818s ago: executing program 3 (id=1010): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x1}, 0x4) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)={0x14, 0x0, 0x1, 0x80, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2805}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x12, 0x0, 0x20050001, 0x40, 0x1, 0x0, 0x7}}) connect$netrom(r5, &(0x7f00000000c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000040)={0x1, 0x3, 0x4, 0x1}) shutdown(r4, 0x1) splice(r4, 0x0, r3, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000180)="232b13f6b94d", 0x0, 0xfffffffc, 0x0, 0x0, 0x0}) 9m12.930511644s ago: executing program 3 (id=1011): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x9, 0x12) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) 9m12.863223724s ago: executing program 3 (id=1012): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0x0, 0x104) getdents64(r1, 0x0, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x401622, 0x59) read$FUSE(r3, &(0x7f00000001c0)={0x2020}, 0x2020) setrlimit(0xb, &(0x7f0000000040)={0x0, 0x9df8}) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, &(0x7f0000002240)={0x7, 0x7, 0x1}, &(0x7f0000002280)=0x28) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000adae6c40fd0b1200c0cc01020301090224000100000000090447000269b562000905fc020004090d02090509"], 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r0, 0x0, 0x0, @ib={0x1b, 0x0, 0x7697b324, {}, 0x0, 0x1000000, 0x4}}}, 0x90) getuid() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) mount(&(0x7f0000000040)=@sg0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000000)='mqueue\x00', 0x30b0820, &(0x7f0000000140)='qUota\x00\x00\x00') write$P9_RLERRORu(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="1600000007010009002f646576300000000007000200"], 0x16) 9m11.467906564s ago: executing program 3 (id=1018): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xfffff010}, {0x6, 0xa5, 0x0, 0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001000), r2) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x30, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8004) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x5c}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89b0, &(0x7f0000000040)={'macvtap0\x00', 0x2}) sendto$inet6(r0, &(0x7f0000000340)='g', 0x11, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) 9m3.492140185s ago: executing program 5 (id=1060): syz_clone(0xb0000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)="68bc342f9cd8ccfd22ae9c") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000000000000000000000000000000000000086009078000000000000000e000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 9m3.23681679s ago: executing program 5 (id=1062): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r0) 9m2.972075258s ago: executing program 5 (id=1064): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)=0xffff0018) syz_usb_connect(0x0, 0x24, &(0x7f0000002300)={{0x12, 0x1, 0x310, 0xe1, 0xff, 0x64, 0x8, 0x10fd, 0xde00, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x0, 0x10, 0x7, [{{0x9, 0x4, 0x25, 0x6, 0x0, 0x7, 0xfc, 0x2b, 0x7}}]}}]}}, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r1, 0x0, 0x15, &(0x7f0000000080)=0x9, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f00000000c0)=0x6d83, 0x4) sendmsg$sock(r0, &(0x7f0000000000)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x41d, @remote, 0x6}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0xffffffff}}], 0x18}, 0x2004c0c1) socket$inet6(0xa, 0x80002, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)=0xffff0018) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000002300)={{0x12, 0x1, 0x310, 0xe1, 0xff, 0x64, 0x8, 0x10fd, 0xde00, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x0, 0x10, 0x7, [{{0x9, 0x4, 0x25, 0x6, 0x0, 0x7, 0xfc, 0x2b, 0x7}}]}}]}}, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) setsockopt$inet_int(r1, 0x0, 0x15, &(0x7f0000000080)=0x9, 0x4) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f00000000c0)=0x6d83, 0x4) (async) sendmsg$sock(r0, &(0x7f0000000000)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x41d, @remote, 0x6}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0xffffffff}}], 0x18}, 0x2004c0c1) (async) 9m1.979643679s ago: executing program 5 (id=1069): syz_open_dev$usbfs(&(0x7f0000000380), 0x2fb8, 0x1) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001200"], 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r1 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^\x84{\x00\x02\xb9~B\x9f\xacl\x1d3\xa6\xab\x81\x9d\x13\x89\x9b\x00\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\7\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~\x03\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x1) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000002c0)={0x8, r1}) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000340)={0x0, &(0x7f0000000980)=[@uexit={0x0, 0x18, 0x3}, @wr_crn={0x46, 0x20, {0x0, 0x4}}, @in_dx={0x82, 0x20, {0x780a, 0x3}}, @code={0xa, 0x79, {"260f00d7c442fd1c6620362ef30f1ecfc744240002000000c744240200000000c7442406000000000f011c24f3410f0948b800000080000000000f23c80f21f8350c00f0000f23f866baf80cb8862b0789ef66bafc0c66b8983066ef0f30f00fba7e0026640faef8"}}, @rdmsr={0x32, 0x18, {0x33c}}, @wrmsr={0x1e, 0x20, {0x840, 0x2}}, @out_dx={0xaa, 0x28, {0xefe3, 0x0, 0xb}}, @wrmsr={0x1e, 0x20, {0x303, 0x3}}, @uexit={0x0, 0x18, 0x5}, @rdmsr={0x32, 0x18, {0x8ba}}, @code={0xa, 0x3d, {"26260f076626f08708410f01c80f01c5c4c1fbf064312f460fc77080420f23a6410f015de38fc908010a4698"}}, @code={0xa, 0x64, {"66baf80cb84849dc88ef66bafc0cb803000000efc4a15d71e47966b8bb008ed00fc730662b7b0066baf80cb8c8bf108bef66bafc0ced66baf80cb8d82cda83ef66bafc0c66b8083566ef26440fea0ef40fbdd3"}}, @cpuid={0x14, 0x18, {0x9604, 0x7f}}, @wrmsr={0x1e, 0x20, {0xb77, 0x3}}, @cpuid={0x14, 0x18, {0xcc, 0x871}}, @code={0xa, 0x55, {"0f20e035000004000f22e066baf80cb84071f48bef66bafc0cb80a000000eff2400fbef366ba4200b03aee450f01df470f0d1166ba210066b8900066ef0f070f30400f09"}}, @cpuid={0x14, 0x18, {0x1, 0xae0}}, @uexit={0x0, 0x18, 0x9}, @code={0xa, 0x5f, {"36653e2e0f01c966b801018ee866ba430066b8000066efb805000000b96a37787a0f01c10f833cc3170cc422f9175839c441f1e56efb450f01c966baf80cb88459b980ef66bafc0c66ed640fc73a"}}, @uexit={0x0, 0x18, 0x4}, @uexit={0x0, 0x18, 0x5e}, @cpuid={0x14, 0x18, {0x40, 0x4}}, @in_dx={0x82, 0x20, {0xe2e8, 0x6}}, @wr_drn={0x6e, 0x20, {0x0, 0x1}}, @cpuid={0x14, 0x18, {0x63, 0x1}}, @out_dx={0xaa, 0x28, {0x5, 0x0, 0x2}}, @wr_drn={0x6e, 0x20, {0x7, 0xfffffffffffff800}}, @code={0xa, 0x77, {"440f20c03501000000440f22c0c74424000f000000c744240213000000c7442406000000000f011424b9aa090000b89545b363ba000000000f3066470f3882540337460f01cbf3440f220466b8da000f00d0c44191d170d50fb6b0b8f4000066ba2000b000ee"}}, @wr_crn={0x46, 0x20, {0x0, 0x66}}, @uexit={0x0, 0x18, 0x1}, @in_dx={0x82, 0x20, {0x1da9, 0x7}}, @wr_crn={0x46, 0x20, {0x8, 0x1}}], 0x52d}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f00000005c0)="66b8000000000f23c80f21f866350c0040000f23f86564def4b8cb098ec8660f73dc5ff30fb891db7e3ef30f1ef8f3f32e0f01b6224ebaf80c66b88bdcf28a66efbafc0cb000ee0fc79a26000fc76809", 0x50}], 0x1, 0x34, &(0x7f0000000680)=[@cr0={0x0, 0x1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x137) ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) timer_create(0x6, &(0x7f00000001c0)={0x0, 0x31, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000200)) bind$alg(r5, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x80800) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r7, &(0x7f0000000240), 0xfffffffffffffffa) setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x12) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f00000000c0)=""/146, &(0x7f0000000180)=0x92) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x7ff, @none, 0xa, 0x2}, 0xe) 9m1.618705492s ago: executing program 5 (id=1071): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001100)='/sys/power/pm_print_times', 0x200, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) (async) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) read$FUSE(r1, &(0x7f0000001140)={0x2020}, 0x2020) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000001c0)=@e={0xff, 0xa, 0xc, 0x2, @SEQ_NOTEON=@note=0x1c, 0x8, 0x7, 0x6e}) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000001c0)=@e={0xff, 0xa, 0xc, 0x2, @SEQ_NOTEON=@note=0x1c, 0x8, 0x7, 0x6e}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) poll(&(0x7f0000000000)=[{r0, 0x2000}, {r4, 0x4171}, {r0, 0x9}, {r0, 0xc0}], 0x4, 0x8001) (async) poll(&(0x7f0000000000)=[{r0, 0x2000}, {r4, 0x4171}, {r0, 0x9}, {r0, 0xc0}], 0x4, 0x8001) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r5, 0x80506409, &(0x7f0000000180)={0x0, 0x20, 0x2, 0x6dd, 0x4, 0x0, 0x2, 0x3, 0x20, 0x1, 0x1, 0x7, &(0x7f0000000240)=[0x4], 0x1, 0x0}) (async) ioctl$COMEDI_CMD(r5, 0x80506409, &(0x7f0000000180)={0x0, 0x20, 0x2, 0x6dd, 0x4, 0x0, 0x2, 0x3, 0x20, 0x1, 0x1, 0x7, &(0x7f0000000240)=[0x4], 0x1, 0x0}) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000003440)={'sit0\x00', &(0x7f00000033c0)={'syztnl1\x00', 0x0, 0x40, 0x8000, 0xf3, 0x7, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x28, 0x200, 0x6, 0x2f, 0x0, @multicast2, @loopback}}}}) r7 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r8 = dup2(r7, r7) shutdown(r7, 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r9) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000640)={0x44, r10, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x12}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc800}, 0x40) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000640)={0x44, r10, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x12}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc800}, 0x40) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000040)) write$tun(r8, 0x0, 0x46) (async) write$tun(r8, 0x0, 0x46) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r11}}) r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x43000, 0x0) socket(0xa, 0x2, 0x8) (async) socket(0xa, 0x2, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r12, 0x3ba0, &(0x7f00000002c0)={0x48, 0xc, 0x0, 0x0, 0x0, 0x5fffffffe}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r12, 0x3ba0, &(0x7f00000002c0)={0x48, 0xc, 0x0, 0x0, 0x0, 0x5fffffffe}) 9m1.310910808s ago: executing program 5 (id=1074): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000b00)={0x48, 0x7, r1, 0x0, 0x0, 0x0, 0x5, 0x376597, 0xd755c}) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109301) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f0000000000)) ioctl$USBDEVFS_RESET(r2, 0x5514) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000240)) 9m0.851078494s ago: executing program 34 (id=1074): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000b00)={0x48, 0x7, r1, 0x0, 0x0, 0x0, 0x5, 0x376597, 0xd755c}) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109301) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f0000000000)) ioctl$USBDEVFS_RESET(r2, 0x5514) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000240)) 8m55.048035703s ago: executing program 35 (id=1018): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xfffff010}, {0x6, 0xa5, 0x0, 0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001000), r2) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x30, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8004) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x5c}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89b0, &(0x7f0000000040)={'macvtap0\x00', 0x2}) sendto$inet6(r0, &(0x7f0000000340)='g', 0x11, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) 6m42.543179382s ago: executing program 4 (id=2065): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e23, @loopback}], 0x21) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="08000007a2f88fefde2f125279c94c98abbef857bff65664ac1897e9370e2bad95f3462940961443312b4d43ffcdfe3589798cfbb44c6995639157531f8afa8d525fed6d6b812a07d7d12b6a7230842ad33160e06cc01e2c6189c59b3eff1ab88c32e8b0c9382ffad255d7c3df57080fa0fdc8aa06576d4ed7", @ANYRES16=r2, @ANYBLOB="000225bd7000fddbdf25340000000c009900ff0f00006c00000008001f01ff0f0000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x801) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, 0x1, 0x9, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFCTH_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4028000) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000040)=0x13e) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000340), 0x9, 0x40440) ioctl$EVIOCGLED(r7, 0x80404519, &(0x7f0000000380)=""/59) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r8, 0xc048aeca, &(0x7f0000000080)) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2010002, &(0x7f0000000200)=ANY=[@ANYBLOB="30ea76dc65a3a29bd98fcdef5c14ff99bec7082ab91c", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 6m41.829803169s ago: executing program 4 (id=2073): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x2, 0x9, 0x0, 0x0, 0x0, 0xfd, 0x5}, 0xe) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000002300)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000440)=0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r5, &(0x7f0000002340)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000002380)="0ef9b7cf", 0x4, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={r4, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000340)={0x7fff, 0x40, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r7 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000000)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xfc, 0x3, 0xd83f}) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b90402", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000580)=ANY=[], 0xfe33) 6m41.65622669s ago: executing program 4 (id=2075): r0 = syz_usb_connect(0x0, 0x62, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601010302000100060006092403050503060581092403060103040505"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00036a0000006a03"]}, 0x0) r1 = add_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0xb, r1, &(0x7f00000010c0)=""/4096, 0x1000) 6m40.162415066s ago: executing program 4 (id=2090): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[]) lchown(&(0x7f00000002c0)='./file0/file0\x00', 0x0, 0xee00) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000034c0)={0x2020}, 0xcac) ioctl$SG_BLKTRACETEARDOWN(r0, 0x5385, 0x1000000000000) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000008bd28780000000000000109022400010000d000090400fd0103004200092100000f01220700090581034000000c00"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000280)={0x2c, &(0x7f0000000380)={0x40, 0x10, 0xb6, {0xb6, 0x7, "c03e6ed6f12dc2aa21268dc24f1dab1015af8b94dcfa83dd5ba706a22617224e5dcb8c6a7fed72744524b345ac16f24423528391c64586ad7137eefd8e725f3711d4a599a938eff8151e23f0f40d88b33fb6e355e3217e701ff4145911c450f1c34b34be53483ae52c8b872be913e597996ff01f91c30f0fb7fda9ea712e2eb848cc8da8e22cc7c5cac191c9a9fab02db8c4fb2333a75bd0dab1347d7fecfcd176c84077f5d6de4027c690b000e846cd5348997e"}}, &(0x7f0000000140)={0x0, 0x3, 0x6a, @string={0x6a, 0x3, "927a6184b3c7048dd58a25d7768a41627a29161caf7e567b97aae178e6cc5de0a177683e30412e8ac061c680912101618e15e0c91d630ded0e7fce55c9931e2e5e2ba86b4d5f899d2a4bc53516ac6d9ffd02fd795bb0240146d3d8a2edff42292c209580d599c3d3"}}, &(0x7f0000000440)={0x0, 0xf, 0x151, {0x5, 0xf, 0x151, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x4, 0x551b}, @generic={0x82, 0x10, 0x3, "2dd04c08e1945dcca23c8f04914cbd781a2c8fc816873e3505c72154639c90c14808a9dbd63debf528b89665118f72f90fbf4e362e7efe3cf694816a272ea96d5253d2025efff7b7cb1d925bf062c61d3952afb6ab91d1d13be87ad8dc6e25e2b74c206c6acca8843a53d417a6d6901793e56dff4d3284ea67965b2c0f6992"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "0d9703ec3373a45cabe899d0a6a70d0a"}, @generic={0xa1, 0x10, 0x1, "8ddde667b2360c58789c14fca7260ce37768e66bb909959a8e785908766fcaee59a95eaf7aece6bf0d56a1e7a0598950f45363363e386d71ef41a18fb3e6da3fb12148f753c198b8e0619c7b9af75558cef5500e8233eaba330e6beeee8aeb8bdb6e8039487f1860490589c7d9c1465027b44808e1a96e21a38f3550876fbeeb2438589b65b9434ae8572c54e3a38147a1d7f7943eb7d0c0c951d0bf388b"}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x0, 0x9, 0x8001}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0x5, 0x9}]}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6c, 0x8, 0x1, 0x37, "15224e2a", "b61ae032"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x4, 0x0, 0x0, 0x9, 0x4, 0x8}}}, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)={0x0, 0x30, 0xb1, "aee074dbb53fe9b8765811bcacf1f72dbf9749e659e81b48250c51558129ed5c16aff8b251bccba5d09559962db8f3d8cba86416c10213e4d927968658b5b2d403c40cbb949d80ceb8a84e98c87dff089d48ab7f7763b56f450ea6dac5de93cd16c01b8e438c384e00cb6e10257e2b7308a7438c12844cea64791b0b7409438acc51b003063ec351d088eba0656ef52193c852033cc0868a8c66d34ebeddadb8f8276f28e1b8089edca7dbdc2abed60ed0"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x4, 0xa}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x7f}, &(0x7f0000000800)={0x40, 0xb, 0x2, "7211"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x401}, &(0x7f0000000880)={0x40, 0x13, 0x6, @remote}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000900)={0x40, 0x19, 0x2, "9569"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x93}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0x1}}) r3 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r3, 0x0, &(0x7f0000000040)) syz_usb_control_io(r2, &(0x7f0000000300)={0x2c, &(0x7f0000000000)={0x40, 0x22, 0x7, {0x7, 0xe, "4b96640044"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 6m36.8280836s ago: executing program 4 (id=2119): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000280)={0x1f, @none}, 0x8) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x80240, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f046}) listen(r0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000002240)={0x1, 0x2, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100000}) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x13, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009407a820ac056202c36a01020301090202f721702891e22ea6fb8337284655e1ed9f2530ecec84aa483e7511c76200"/64], 0x0) 6m36.492624618s ago: executing program 4 (id=2122): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r3, 0xffff}, 0x8) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x1, 0xc9, "52e80b554465ca44"}}}, 0xe) 6m35.970971168s ago: executing program 36 (id=2122): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r3, 0xffff}, 0x8) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x1, 0xc9, "52e80b554465ca44"}}}, 0xe) 4m35.213191317s ago: executing program 2 (id=3180): sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x6801) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) (fail_nth: 3) 4m34.776204171s ago: executing program 2 (id=3183): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000008000740000000015c000000160a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626ff96430000000001700000000d5001400010076657468305f746f5f746561"], 0xec}, 0x1, 0x0, 0x0, 0x4840}, 0x4000) 4m34.71900908s ago: executing program 2 (id=3185): socket$inet6(0xa, 0x3, 0x3c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2, 0x0, 0x0, 0xfffd}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/tty/ldiscs\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 4m33.9038773s ago: executing program 2 (id=3190): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000240)="17000000020001000003be8c5ee17688a20032000203000a0292000098fc5a000a00bb6a880000d6c8db0000dba67e0602000043c59ed66b5571ca5f2ae0e28900000200df018002000000fc060f0000000000000061547a681f009cee4a5a2d8f89814bc6c252674f00c88ebb01005033bf79ac2dfc060115003901000000000000ea0000000000000800b59bd2b8e50ce5af649a702202ffff02dfccebf6ba000840024f0298e9e90554062a80e605197f71174aa951f3", 0xb8) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[]) lchown(&(0x7f00000002c0)='./file0/file0\x00', 0x0, 0xee00) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000180)={'ip6gretap0\x00', @ifru_data=&(0x7f0000000140)="6bdfe6075e46983fcbde5b99459fef2fc9a2f22c929a33f3de12e046817de4ff"}) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x30b381) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f0000000000)=0xffffffff) ioctl$USBDEVFS_RESET(r2, 0x5514) 4m33.903509823s ago: executing program 2 (id=3191): sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd27, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x6801) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x5411, &(0x7f0000000100)) 4m33.903097524s ago: executing program 2 (id=3193): syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r3, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) 4m33.870497011s ago: executing program 37 (id=3193): syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r3, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) 7.021149747s ago: executing program 8 (id=4667): r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x1d1f, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x2, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}}, 0x40004) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r3}, 0x14) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x20050800) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, r7, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x34}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r9 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000140)={0x0, &(0x7f00000001c0)=[@cpuid={0x14, 0x18, {0xb, 0xde}}], 0x18}) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="00001d7a13c208c7e76675a1b941aca51855b20d70c6ea5119b00fc76f8aac00"]) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f63047d2900ffffca88faca"], 0xdd12}, {&(0x7f0000004f40)=ANY=[], 0x2440}], 0x2}, 0x0) 6.765321065s ago: executing program 8 (id=4668): syz_open_dev$tty1(0xc, 0x4, 0x2) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000780)={0xc, {"a2e3ad214fc752f91b25470987f70e06d038e7ff7fc6e5539b3264078b089b3b08346c060890e0878f0e1ac6e70a9b3368959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31350d095d0636cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62239c6f30e065cd5b91cd0a03000000000018001b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd7878a37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b412435139000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a4cd13c257ac06c7d8ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190ba4d7909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810ba2e201007e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e8134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5011dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b000000807ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd776d443e8b40426db6fe2907ac0ca3d24145a2e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a0400000000000000f463661c953fcad6f37725c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2ca8378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa04006651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed004000000b53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f090056b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b5c7fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d050000002a308e15fc37d06aeac289c0523f652f2ef91d4f2b01987b0f463934c54edc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a3b89f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ed60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d3560aba573bd16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22005b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db239dfe785b54c34a0a5db4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbf4c807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9edbaaadaea56765404e0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901003a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007b01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d50b00", 0x1000}}, 0x1006) 6.660113967s ago: executing program 8 (id=4669): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0xe5, 0x5, 0x10, @local, @local, 0x8, 0x7, 0x8, 0x7}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x4) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x9c, r1, 0x100, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4040041}, 0x20000084) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x110) ioctl$KVM_CAP_DISABLE_QUIRKS2(r4, 0x4068aea3, &(0x7f0000000140)={0xd5, 0x0, 0x3a}) set_mempolicy(0x4004, 0x0, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f000014a000/0x4000)=nil, 0x4000, 0x597b2eb1961fbacb) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = socket(0x2, 0x80805, 0x0) r6 = socket(0x2, 0x80805, 0x0) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x2) sendmsg$NFNL_MSG_ACCT_GET(r7, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x1, 0x7, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x8000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) set_mempolicy_home_node(&(0x7f00005af000/0x1000)=nil, 0x1000, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000480)={r8, @in={{0x2, 0x4e21, @empty}}, 0x3, 0x5}, 0x90) munlockall() getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000300)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000340)=0x10) syz_usb_connect(0x3, 0x24, &(0x7f0000001a40)=ANY=[@ANYBLOB="12010003596cd80b0000000002060002b1bb05d50ccbcf8207fd000000000000000000"], &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0}) 4.844204738s ago: executing program 6 (id=4675): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'sit0\x00', @broadcast}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'sit0\x00', @broadcast}) write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="70000000bfffffffffffaaaaaaaaaabb08004500452c00004000002f9078ac1e0001e0000001000088be00189078040000000000000088a8ffff00000000"], 0xfdef) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) (async) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_PEC(r3, 0x708, 0x4) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0}) (async) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0}) preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1, 0x2, 0x1) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0xa3, 0x2, r5}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0xa3, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000440)={'pim6reg1\x00', 0x2}) r8 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010038558718104c0568020000000000010902240001000000007e3700040103000000092105000001220500090581030002000007"], 0x0) r9 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xfff, 0x401, 0x3c275344, 0x8, 0x2, 0x4, 0xc, 0x1a, 0x0, 0x2, 0x2, 0x7}}) syz_usb_control_io(r8, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dffff000000000000a0c70000000000000000000000000000000008000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) syz_usb_control_io(r8, &(0x7f00000001c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) (async) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000180)={0x28, 0x2, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r4, 0x3b8b, &(0x7f0000000400)={0x10, 0x0, r11}) (async) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r4, 0x3b8b, &(0x7f0000000400)={0x10, 0x0, r11}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f00000004c0)={0x48, 0x3, r11, 0x0, 0x3b, 0x54, &(0x7f0000000380)="d87fc5279700723de371cdaba5cdfd5e74eac3f4d0b8afd2d5858f630680a6b889e0f007551d0c28d5fa14be330118f7ff70e5b791cf06e80b92e110750a6ef5b1144a87e8813510b2d6447962ae77b8d653fc04"}) 4.540035269s ago: executing program 7 (id=4678): r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000000)) getsockopt$sock_int(r0, 0x1, 0x13, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000340)={0x3, &(0x7f00000002c0)=[{0x9, 0x12, &(0x7f00000000c0)="ddbd3c724c04c2c4974f22fe9bcd6475e59d", 0x0, 0x1}, {0xfffffffa, 0xde, &(0x7f0000000100)="7cb85c91c9e7c8b500974f97eecf0057a541125117d8ab7e0c8633b4e9c26e9dd5211a82a45bffbd260e128c0288b012f332b99b1875e52b640d5b7ccd13e0e40a49529a2d5d6d74f76b61474568e24d418fbc452c9c0f1da94e19261c60ffac9d503207ee00923b0d90ae8995cb948d68f85493bfefcdee4f18b617147fb01a7fa083bfeda09ac5046e93162043a714b07eb54f397afbaf5e87ca08bbaf7ef43306e46ef94cc69e5dcc5f569ce71c70e03202ebdfea67bc18befd97d283f12273ffc74619bc8b508bd49df457456085b3ac52152ba11a9b181bd059571a", 0x1, 0x1}, {0x3f, 0x8a, &(0x7f0000000200)="e3293036499a164a2f699ca2ee6c445e56314210aaebcf37553aed930b1ab6470f28d03e85e54b8d8bca38fd99c2df2051b774ab449f668ff12aaf08b17357f572c5885234fd44cd3c89cdd5cfb450f88790e3be126566eb81115df3b26e7dd71e8a7e45a1195dc31162ba9c621619fdb511eebe8137fbdd6e127bbe8b403c0008cd4ea439f720a9d93c", 0x1, 0x1}]}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000380)=[@in6={0xa, 0x4e21, 0x8, @local, 0x7}, @in6={0xa, 0x4e24, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, @in={0x2, 0x4e21, @multicast2}], 0x48) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000400)={'macsec0\x00', 0xa730}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000440)={0x8, 'syzkaller0\x00', {'wg2\x00'}, 0x8}) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x0, 0x408000) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000006c0)=@urb_type_iso={0x0, {0x6, 0x1}, 0x5, 0x80, &(0x7f00000004c0)="43d7e45063a38700d7cffbc13011011fed85d920293d846a56f2b67ed4cb8856455e62c486ea93e204d4059207d791a76a0c733980bc4d6db9e9b2230bae5b54d6e70f0e88e112c4a9b1518a321771a2f72440d659e379eaf5462fa74dafd9d529e8d04894f7ddd0e84fa1bb7628026e95084befe5a2ca1f9de317d20049877ce8c10330299b878a0f6a8d6082c8362f56bfa5fb531239120dc1a712565dd704c83d072749239a5c37056a1bb963f0348492778b103aa78f2ff306d6d8a534776ee3b8bdeaf0de691da036af8784219fbfb92a580687fb5e21c0a8051a38f4414e61ff43209b964b170117ebeb32", 0xee, 0x7, 0x7ff, 0x64, 0xe89, 0x9, &(0x7f00000005c0)="5a011587effb12069e239b96ed10f17e3f9f1ca82952db78a8a16449aa4015c9c446c4dcdff1585faeb1877ca8fddbd11afd7ea7c372d7662ec3e97bb65e08b812875b4cf5cdda52bd8325146cf559166dddfca64a146952682816a268e03ce9d4a49afdf7a3ff42229f5e7c1cce8d6234669ebd1e550b6eaf9352541ab055d123dc7c9196854fd86712fa2d631d8decade945abcca47a7f7e471d1441ddf630814b8dcb4ce84e5665a5526d76ff47f3fcd671f0f3e20b33c63fe45b02342acbca302934e06f784a45a3e171b0e5d0", [{0x9, 0x4, 0x2}, {0x9, 0xa8c, 0x5}, {0x30d, 0xffffffff, 0xb39}, {0xfffffff7, 0x76d, 0x6}, {0x4, 0x5, 0x8000}, {0x2, 0xfff, 0x1}, {0x0, 0x800, 0x10000}, {0x2, 0xd3, 0x7f}, {0x9, 0x100, 0x3}, {0x2, 0x9, 0x80000001}, {0x101, 0xe659, 0x5}, {0x7, 0x4, 0xa5a}, {0x7, 0x9, 0xb}, {0x6, 0xe5a, 0x3}, {0x8, 0x3, 0x2}, {0xc, 0x7ff, 0x9}, {0x1000, 0x4, 0x400}, {0x3, 0x1, 0xd}, {0x0, 0x80000000, 0x3}, {0x8, 0x80000000, 0x101}, {0x747, 0x10}, {0x7, 0x0, 0x9}, {0x3, 0x0, 0x2}, {0x49, 0x2, 0x400}, {0x0, 0x2, 0x1ff}, {0x7f, 0x7, 0x4}, {0xae5, 0x40e3, 0x2}, {0x9b9, 0x1, 0x7f}, {0xffffff91, 0x2, 0x83}, {0x34d7, 0x81, 0xde57}, {0x5, 0x7ff, 0x8480}, {0x3, 0x8, 0x9}, {0x2, 0x200, 0x8}, {0x8, 0x164}, {0x9, 0x1, 0x5}, {0xce, 0x8, 0x80000000}, {0xe8, 0x7, 0xe}, {0x80000000, 0x8, 0xb9}, {0xffff, 0x6, 0x1}, {0x7, 0x8000, 0x3}, {0xa75, 0x3, 0x2}, {0xd, 0x3, 0x2}, {0x0, 0x5, 0x3f1c}, {0xfffffffd, 0x80000000, 0x10001}, {0x87c8, 0x2, 0x8}, {0x3ff, 0xc7d, 0x7}, {0x7, 0xb2, 0x3}, {0x6, 0x9, 0x8001}, {0x10, 0x1, 0x3}, {0x5, 0x7, 0x4}, {0x3ff, 0xb, 0xffffff81}, {0x1, 0x890e}, {0x6, 0x4, 0x7}, {0x1, 0x2, 0xbedf}, {0xa, 0x0, 0x41}, {0x2, 0x3, 0xffff8001}, {0x8, 0xffff, 0x6}, {0x6, 0x2, 0xd3}, {0x0, 0x5, 0x7fffffff}, {0x1, 0xfa32, 0x10001}, {0x8, 0x81, 0x8c74}, {0x9, 0x8, 0x9}, {0x1, 0x8, 0x4}, {0x4, 0x6, 0x1}, {0x9, 0x8, 0xcb99}, {0xc72, 0xfff, 0x1}, {0x8000, 0x401, 0x1}, {0x21a, 0x5, 0x5}, {0x0, 0x3ff, 0x1}, {0x0, 0x6, 0x9}, {0x9, 0x3, 0x1000}, {0x5, 0x3d, 0x9d04}, {0x7, 0x0, 0x4}, {0x900, 0x5, 0x8840}, {0x0, 0xfff, 0x6}, {0xfff, 0x1, 0x100}, {0x0, 0x1000, 0x5}, {0x1, 0x0, 0x7fff}, {0x3, 0x7, 0x6852}, {0x2e9, 0x4, 0x8}, {0xff, 0x400, 0x7}, {0x5, 0x4}, {0x6, 0x9, 0x8}, {0x3, 0x2, 0x7}, {0x3, 0x400}, {0x2, 0x40, 0x3ff}, {0x1, 0x2, 0x1}, {0x1, 0x3, 0x3}, {0x2, 0x2, 0x10001}, {0x8001, 0x4, 0xd}, {0x1, 0x7, 0x3}, {0x2, 0x7fffffff, 0x6}, {0x4, 0x7fff, 0x4}, {0x8, 0x2, 0xffffffff}, {0x7, 0x3, 0x6}, {0x3, 0x5, 0x68ad}, {0xffff, 0x40, 0x3}, {0x7, 0x8, 0x4}, {0x4, 0x3, 0x3f}, {0x3, 0x4, 0x4}]}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000bc0)=0x4, 0x4) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000c00), 0x400, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f0000000c40)={0xc, 0x0}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000c80)) r5 = syz_open_dev$usbmon(&(0x7f0000000cc0), 0x8, 0x408100) ioctl$MON_IOCX_GETX(r5, 0x4018920a, &(0x7f0000000e40)={&(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000d40)=""/251, 0xfb}) pipe(&(0x7f0000000e80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCRSGL2CALL(r6, 0x89e5, &(0x7f0000000ec0)=@bcast) ioctl$VIDIOC_SUBDEV_S_CROP(r7, 0xc038563c, &(0x7f0000000f00)={0x1, 0x0, {0x100, 0x9, 0x1, 0x23}}) setsockopt$inet6_int(r6, 0x29, 0xd1, &(0x7f0000000f40)=0x7f, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r8, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x20, 0xc, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc004}, 0x20000001) statx(r7, &(0x7f0000001080)='./file0\x00', 0x400, 0x8, &(0x7f00000010c0)) copy_file_range(r8, &(0x7f00000011c0)=0x1, r7, &(0x7f0000001200)=0x9, 0x7, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000001240)={0x0, 0x1, 0x6, @remote}, 0x10) ioctl$IOMMU_DESTROY$ioas(r6, 0x3b80, &(0x7f0000001280)={0x8, r4}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x5, 0x9, 0xffffffff, 0x3, 0x20, 0x4, 0x4}, &(0x7f0000001380)=0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f00000013c0)={r10, @in={{0x2, 0x4e20, @multicast2}}, 0xfff, 0x3, 0x6, 0x7, 0xc3, 0xfff, 0x5}, 0x9c) socket$unix(0x1, 0x0, 0x0) 4.525913095s ago: executing program 7 (id=4679): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000200)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fremovexattr(r2, &(0x7f0000000000)=@known='system.posix_acl_default\x00') r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000140)={@l2tp6={0xa, 0x0, 0x5, @mcast1, 0x3e, 0x1}, {&(0x7f0000000380)=""/199, 0xc7}, &(0x7f0000000080), 0x8}, 0xa0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x8, 0x6, 0x2000000008000, 0x0, 0x2000003, 0x3, 0x6, 0x5, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') (async) chdir(&(0x7f0000000200)='./file1\x00') (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) fremovexattr(r2, &(0x7f0000000000)=@known='system.posix_acl_default\x00') (async) socket$rds(0x15, 0x5, 0x0) (async) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000140)={@l2tp6={0xa, 0x0, 0x5, @mcast1, 0x3e, 0x1}, {&(0x7f0000000380)=""/199, 0xc7}, &(0x7f0000000080), 0x8}, 0xa0) (async) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x8, 0x6, 0x2000000008000, 0x0, 0x2000003, 0x3, 0x6, 0x5, 0x7}) (async) 4.376143432s ago: executing program 7 (id=4681): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x183081, 0x0) write$vga_arbiter(r4, &(0x7f0000000080)=ANY=[@ANYRES64=r2], 0xa) setsockopt$sock_linger(r3, 0x1, 0x45, &(0x7f0000000000)={0x0, 0x4}, 0x8) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)={0x38, 0x1412, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) 3.701076911s ago: executing program 6 (id=4683): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "7526aeb5a32c7b9ca1fa07550500000000000000e04200"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0xf, "0219b2ba6812aa90f9ef8d370d2c48e5a7d601c142f562222aee83d86c8e585a"}) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000280)={r3, 0x1, 0x6}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f00000004c0)={0x20, 0x16, 0x4, "fe211774"}, 0x0, 0x0}) syz_usb_ep_write(r0, 0x4, 0x71, &(0x7f0000000000)="9b2d98c61c2b7efb27a9266592e2b0afc2bd191d078090c4dc4af42ccc53c26cf778232cf07c408f8003454bcc037eae7a28b11764cb3c52f5ff756945b2f1717dc6a2395de361a45dc2dfab39e681aab883d4c2189d3b280dbab0b428c378ebe63b617c39357a6e5381d1095e687235b4") syz_usb_control_io(r0, 0x0, 0x0) 3.328416955s ago: executing program 8 (id=4684): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x1, 0xfffffffc, 0x40000000, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x0, 0x6472333b}}}}, 0x30}, 0x42, 0x0, 0x0, 0x20000000}, 0x20000040) 3.319339902s ago: executing program 8 (id=4685): r0 = syz_usb_connect(0x0, 0x1b, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0x82, 0x93, 0x3f, 0x20, 0x54c, 0x87d, 0xa2f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0x0, 0x10}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='@\t\f'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000500)={0x40, 0x6, 0x29, "5fb0fab967ec41df1aade53f902466abe88363bfa8d322cd04b625d20ae74277cefc366d9326fa4147"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4) sendfile(r1, r1, &(0x7f0000000000)=0x80000002, 0x4) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRESHEX=r1, @ANYRES16=0x0, @ANYRES8=r1, @ANYRES16=r0, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.932868713s ago: executing program 9 (id=4689): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006b", 0x7}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x1}, &(0x7f0000000180)=0x8) (async) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a201020301090224"], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000200)={r2, 0x8}, &(0x7f0000000240)=0x8) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f0000000000)={0x8}) sendmmsg$inet_sctp(r1, 0x0, 0x0, 0x0) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000000)={r7, 0xb}, 0x8) (async) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=r7, &(0x7f00000000c0)=0x4) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b28, &(0x7f0000000000)={'wlan0\x00'}) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r8) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xe4, r9, 0x400, 0x70bd29, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20040041}, 0x2000050) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000016"], 0x34c}}, 0x44) 2.084302081s ago: executing program 9 (id=4690): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ppoll(&(0x7f0000000100)=[{r1, 0x1004}], 0x1, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000600)=0x14) close(r1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x2c, r2, 0x1, 0xf0bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x9881) 1.973875122s ago: executing program 9 (id=4691): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0}) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000200)={0x2, 0x5, {r0}, {r1}, 0x2, 0x7}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x2, 0x2) write$FUSE_NOTIFY_STORE(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='-', @ANYRESDEC, @ANYRESOCT=r2], 0x28) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noxattr}]}}) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x1000, &(0x7f00000003c0)={'trans=virtio,', {[{@mmap}, {@version_9p2000}, {@cache_readahead}, {@cache_readahead}, {@version_L}, {@noxattr}], [{@permit_directio}, {@euid_gt={'euid>', r3}}]}}) 1.915140063s ago: executing program 9 (id=4692): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x4f27, 0x4, 0x10000, 0x4, 0x5, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e58, 0x3, 0xe66, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="5c00000011006b906fdfe1ef704ad931c605876c1d0000007ea60864160af365040012000a802e00000000009ee5179da5a02b9e9171452bc520ae8cc4044ed34445bc24eaba56a705251e6182949afc422e41ebfc50b887934fcbd3b2deb541c475b0f5ccd490244f36c5b6b704a346fc5d1e81e805592e32dceea3358a10bc58bebf501d93af1e35e600920f9d38338b43d636da4d48e2b6ba3ae11b771ca40889e867d8cc4f7e2218982fb5ab73ea88f2319ab8d0755beb62e91613f018cf50bea1392f14247f8e223131386308928844b2659eeeb9fe6cff53df03f3dac034533e9bf0a5e4c05fbef889e45c66c6952f0d43f81a9cf03d5e8c031c1f12d5d11299e85f29ab017ad0175a5935b440461505c3b1994dabddb474322917273a6dec8ba17b6ff32fd98e67a9f87e5c0e0bcee57e1d61c78ef214e6a1d96d341bc39db824bd976974baab0a386890b545a1e8d9881d981f08", 0x158}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000044) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x91, 0x1ff, 0x801, 0x1}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYRES32=r1], 0x20}}, 0x84) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r1, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000300)=""/65, 0x41}], 0x1}, 0x40010000) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x0, 0x0) syz_usb_connect(0x6, 0x2d, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0, @ANYRES16, @ANYRESOCT=r0], 0x0) 1.064262438s ago: executing program 7 (id=4693): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001c00599c6d0e0000ded650492d"], 0xfe33) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000026000000080007000000000018000180140002007465616d5f736c6176655f30"], 0x34}}, 0x4004080) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000280)={r2, r0, 0xc, 0x0, 0x0, 0x9, 0xfa, 0x15c2, 0x1008, 0x9, 0x1, 0xfffffffd, 'syz1\x00'}) shutdown(r0, 0x1) 1.062808381s ago: executing program 9 (id=4694): mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000640)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRESHEX=0x0]) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000d00)=0x2b56, 0x4) (async, rerun: 32) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x20000080, &(0x7f0000000080)={0x11, 0xf8, 0x0, 0x1, 0x1f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, 0x14) (async, rerun: 32) r1 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) sendmmsg$sock(r1, &(0x7f0000000840)=[{{&(0x7f0000000640)=@tipc=@name={0x1e, 0x2, 0x2, {{0x42}}}, 0x80, 0x0, 0x0, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}}], 0x1, 0x4) (async, rerun: 32) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 32) r3 = dup(r2) ioctl$KVM_SET_SREGS2(r3, 0x4140aecd, &(0x7f00000006c0)={{0xeeef0000, 0xdddd1000, 0x0, 0x4, 0x6, 0xc, 0x40, 0x24, 0x3, 0x5, 0x1, 0x30}, {0xeeee0000, 0x10000, 0xc, 0x9, 0x75, 0x3, 0x81, 0x8, 0x5a, 0x6, 0x2, 0x7}, {0x2000, 0x4000, 0x3, 0x4, 0x5, 0x0, 0x6, 0x7, 0x3, 0x3, 0x3a, 0xb8}, {0xeeee0000, 0x0, 0xb, 0x2, 0x9, 0x9, 0x8, 0x5, 0x2, 0x9, 0x8, 0x8}, {0xeeef0000, 0xeeef0000, 0x0, 0x62, 0x3, 0x8, 0x7b, 0x4, 0xb, 0xdb, 0x5, 0x9}, {0xeeef0000, 0x6000, 0x8, 0x7, 0x6, 0x4, 0xf0, 0x8, 0x9, 0x6, 0x9, 0x1}, {0x4, 0x1000, 0x3, 0x1, 0xff, 0x0, 0xf, 0x9, 0x5b, 0xda, 0x4, 0xf1}, {0xd000, 0x4, 0xa, 0x7, 0x2, 0x0, 0x7, 0xfa, 0x2, 0x3, 0xc8, 0xf3}, {}, {0x11189004, 0x9}, 0x40000, 0x0, 0xdddd0000, 0x200000, 0xb, 0xe000, 0x5000, 0x1, [0x7, 0xf, 0xc9a, 0x7]}) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d", 0x7) (async) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async, rerun: 64) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async, rerun: 64) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r8 = semget$private(0x0, 0x20000000102, 0x0) semop(r8, &(0x7f0000000240)=[{0x1, 0xe65b}], 0x1) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000001440)={'vxcan1\x00', 0x0}) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000040)=r10) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4001}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.017098996s ago: executing program 6 (id=4695): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x9302d000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x50}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ptrace(0x10, r0) ptrace$setregs(0x1a, r0, 0xc, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x7, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7ff}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4004000) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12015002d2cfa00863110001badc010203010902240001050590010904"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 996.250982ms ago: executing program 9 (id=4696): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209001b0000000401a80016000a0004", 0x37}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_usb_connect$uac1(0x6, 0x9f, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x5, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xe3, 0x6}, [@extension_unit={0xa, 0x24, 0x8, 0x3, 0xff, 0x4, "6e75d4"}, @extension_unit={0xa, 0x24, 0x8, 0x2, 0x9, 0x6f, "a54b92"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x9, 0x2, 0x5, 0xfc, "7281", "9b9d"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x4, 0x5, 0x4, {0x7, 0x25, 0x1, 0x1, 0x66, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x8, 0x1, 0x0, 0x5, "844592", "183990"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xc8, 0x4, 0xfd, {0x7, 0x25, 0x1, 0x1, 0xd5, 0x5a}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x9, 0x3, 0x6, 0x20, 0x5f}, 0xe6, &(0x7f0000000340)={0x5, 0xf, 0xe6, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x0, 0x1, 0xb, 0xdb}, @ptm_cap={0x3}, @generic={0xb7, 0x10, 0x2, "ec069725dfce7c7735940eb100146965b13b3a469d6e11b6fd440d3aa05a7b265f71534acd463468785ede280f853179b0ca31c89c165457c85f24de85a3347d408b6d5e377b373ee2cf9e3cbe510fa06ed2def8403c4913b321b183d3cf2d0a6fc6f7b29a42691946dda4022bbd9074affc418c8d95afc3cd4e602d67e7442be450e7313a0d88f80855cfbb355a60e38f058bddeda43f373faaabc6a84322e26104a0372934559b71084a1d151bfd136ed892ce"}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x2, 0xf00, 0x7, [0xc0, 0xc0cf, 0x180, 0xc000]}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x3801}}, {0x61, &(0x7f00000004c0)=@string={0x61, 0x3, "aeafd2f70d365f259bbc2cc2caa638fd06dbd2900b12c07025687a581d068efd82dd8d1de7e78dbb9b9073fe39ea27ca2a9912e76492b8e3c45b39e1b34de9605dab5b2ef4e2266afef37269b301b181860c913781b9916a615cd21388a196"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x445}}]}) syz_usb_control_io$uac1(r1, &(0x7f0000000640)={0x14, &(0x7f00000005c0)={0x40, 0x10, 0x4, {0x4, 0x4, "0a0e"}}, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c09}}}, &(0x7f0000000980)={0x44, &(0x7f0000000680)={0x0, 0xe, 0xb6, "dc6cb044f7a5ed5417de050feb2adcf1da71a7db86db51a029233269f784df946eacf1b2f219899e6c38394c7ec76adfce4c836aedb75222a775823555c9b326f06616f4b2b5d3bd4e9f69cfd690bf3f78f69cf4eba48cadb31da950e3f0eff660e8e608e1d6dcf437acbd58c87c0b92caef3c2546d37fca3d8af53728eaf7e17a972a6a8c15b94d460ec638808cc0d9cb73b467375cfe73adcc3f57b02b0416ed0246c4f27a32cb8bf2d5dab5457899123375f88128"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000007c0)={0x20, 0x81, 0x2, "00f5"}, &(0x7f0000000800)={0x20, 0x82, 0x3, "83c689"}, 0xfffffffffffffffd, &(0x7f0000000840)={0x20, 0x84, 0x1, 'H'}, &(0x7f0000000880)={0x20, 0x85, 0x3, "9960e7"}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a1180015000600149b000000120800030043000040a8002b", 0x33}], 0x1}, 0x20000880) futex(&(0x7f0000000000), 0x10b, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf", @ANYRES8], 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) read(r3, &(0x7f0000002340)=""/4096, 0x1002) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) pwritev2(r4, &(0x7f0000000d80)=[{&(0x7f0000000900)="7f", 0x1}], 0x1, 0xf09, 0x0, 0x0) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f0000000140)) openat$cgroup_freezer_state(r3, &(0x7f0000000100), 0x2, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) 356.146211ms ago: executing program 6 (id=4697): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x4c, r1, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x8000004d}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8050}, 0x240048c0) 302.581366ms ago: executing program 6 (id=4698): sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x6801) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/time_for_children\x00') r3 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000400)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, r3) arch_prctl$ARCH_GET_CPUID(0x1011) keyctl$chown(0x4, r4, 0xffffffffffffffff, 0xee00) add_key$keyring(&(0x7f0000000000), &(0x7f00000020c0)={'syz', 0x0}, 0x0, 0x0, r4) setns(r2, 0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x24040894) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x10b902, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0x12) ioctl$SIOCAX25DELUID(r7, 0x89e2, &(0x7f0000002100)={0x3, @null, r0}) ioctl$VIDIOC_ENUMAUDIO(r6, 0xc0345641, 0x0) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c9, &(0x7f0000000100)) 142.111175ms ago: executing program 6 (id=4699): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x5) setsockopt(r3, 0x7, 0x7f, &(0x7f0000001cc0)="c5e6a4d3", 0x4) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x14, r1, 0xc8036ab6d6cbef07, 0x0, 0x25dfd3fe}, 0x14}}, 0x800) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) 138.544137ms ago: executing program 7 (id=4700): syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="2021c500004532bf521e546cc10a90365f78a760c25afbdade56152dd3264d3d28980ddb415c47b53da4d01cf7d79dc8e65189a1cf8795c13b67bee6817807a669e35031714150062c7c03b02b3fdee7ce4c053245e5723aa975878f05020a855d86f45be99f2bc7a7acea9b31184b63fd9d5bf379f7c2bf33e06966efd0007891b76f755d730da1deb24d62bd5475e2075287c665981ebc0b806809ad0d7d1c1164036750e64e2c4c1907c27e9f12ffa410b6be11fe513872180000"], &(0x7f0000000140)={0x0, 0x3, 0xb1, @string={0xb1, 0x3, "402cead453e1bf5d7ece70cfd5ca5a36ab5ae6d5c3f2e8ed46520f90e1ea551a10d6cbcf8291b53bb3baa62e23b83511d3aba47a4c0bc9a6ee7a34f51549499b02dbd63620054dadebfc751a3995be23b903ee5f4e4b57f31f6a5c85fdd238dbbee0d9a4d2a0e82c38bc80733c4e72d0b2508bb4230e93c7dadfccf2f6d817b590e9f9ca858a4732eb655b5f97cf7e065db4e77b2bed8b8648b243db576aa1e3030194a8c3ccf5018e28fded489e70"}}}, &(0x7f0000000400)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="40104b0000042c7496931db6c2f049cfb155f9f5df15173968a88798c545fe719a3bad23477bd5f647701e419f9f78b995a3456cf854ab3a0469e63d3e8786d4aa0275901b6e0f26602ec70ec1d9486b02"], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xfb}, &(0x7f0000000340)={0x20, 0x0, 0x20, {0x1e, "cd4645df32d3a6541c0e99bff2231370c0b8e5557f55ce1fb37501bcc31f"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0x5}, &(0x7f00000003c0)={0x20, 0x0, 0x1, 0x6}}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000034c0)={0x2020}, 0xcac) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000680)={0x9, {"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", 0x1000}}, 0x1006) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000440)={'\x00', 0x5, 0x8, 0x7, 0x4, 0x3}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="2021c500004532bf521e546cc10a90365f78a760c25afbdade56152dd3264d3d28980ddb415c47b53da4d01cf7d79dc8e65189a1cf8795c13b67bee6817807a669e35031714150062c7c03b02b3fdee7ce4c053245e5723aa975878f05020a855d86f45be99f2bc7a7acea9b31184b63fd9d5bf379f7c2bf33e06966efd0007891b76f755d730da1deb24d62bd5475e2075287c665981ebc0b806809ad0d7d1c1164036750e64e2c4c1907c27e9f12ffa410b6be11fe513872180000"], &(0x7f0000000140)={0x0, 0x3, 0xb1, @string={0xb1, 0x3, "402cead453e1bf5d7ece70cfd5ca5a36ab5ae6d5c3f2e8ed46520f90e1ea551a10d6cbcf8291b53bb3baa62e23b83511d3aba47a4c0bc9a6ee7a34f51549499b02dbd63620054dadebfc751a3995be23b903ee5f4e4b57f31f6a5c85fdd238dbbee0d9a4d2a0e82c38bc80733c4e72d0b2508bb4230e93c7dadfccf2f6d817b590e9f9ca858a4732eb655b5f97cf7e065db4e77b2bed8b8648b243db576aa1e3030194a8c3ccf5018e28fded489e70"}}}, &(0x7f0000000400)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="40104b0000042c7496931db6c2f049cfb155f9f5df15173968a88798c545fe719a3bad23477bd5f647701e419f9f78b995a3456cf854ab3a0469e63d3e8786d4aa0275901b6e0f26602ec70ec1d9486b02"], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xfb}, &(0x7f0000000340)={0x20, 0x0, 0x20, {0x1e, "cd4645df32d3a6541c0e99bff2231370c0b8e5557f55ce1fb37501bcc31f"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0x5}, &(0x7f00000003c0)={0x20, 0x0, 0x1, 0x6}}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) read$FUSE(r0, &(0x7f00000034c0)={0x2020}, 0xcac) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) dup(r1) (async) write$UHID_INPUT(r2, &(0x7f0000000680)={0x9, {"a2e3ad214fc752f91b29090942f70e0dd038e7ff7fc6e5539b324c078b089b34313b6d300890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd736d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25987969a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e89198f595dc4d470e01002a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d0db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) (async) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000440)={'\x00', 0x5, 0x8, 0x7, 0x4, 0x3}) (async) 61.513591ms ago: executing program 7 (id=4701): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003d0007010000000000000000047c000049ff08800c00018006000600800a0000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0xc000) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc0010141, 0x0, 0x10003}]}) syz_usb_control_io$printer(r3, 0x0, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x402) write$tun(0xffffffffffffffff, &(0x7f0000000340)={@void, @val={0x1, 0x3, 0xe69, 0x5, 0x561, 0x5}, @mpls={[{0x8e, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x4}], @ipv4=@generic={{0x37, 0x4, 0x1, 0x2, 0x190, 0x68, 0x0, 0x2, 0x73, 0x0, @loopback, @multicast2, {[@noop, @timestamp_addr={0x44, 0x3c, 0xfa, 0x1, 0x5, [{@broadcast, 0x8}, {@private=0xa010100, 0x8}, {@private=0xa010101, 0x8}, {@broadcast, 0x8}, {@local, 0x7ca5}, {@multicast1, 0x3}, {@private=0xa010100, 0x9}]}, @rr={0x7, 0x23, 0x1c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x22}, @dev={0xac, 0x14, 0x14, 0xa}, @rand_addr=0x64010100, @rand_addr=0x64010100]}, @rr={0x7, 0x23, 0x4c, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @broadcast, @loopback, @loopback, @remote]}, @generic={0x82, 0x11, "7e3ee7dc0657334f207b821d2c2813"}, @timestamp_prespec={0x44, 0x4, 0x76, 0x3, 0x8}, @generic={0x0, 0x10, "83c9b643ee2e7adcca6a1463ecb2"}, @ssrr={0x89, 0x1f, 0xb2, [@rand_addr=0x64010101, @loopback, @multicast2, @local, @loopback, @multicast1, @empty]}]}}, "c39e40dd8ea59f0b85c83fca2a4e51181fc62139ae718e561cb0927c9b8a654b34d9b4a43aeb8c385fd7a7280fdbe344161b4bd069a2a21c9632fd91c4238f547a6103c19632c20d4caa4878dc3b1d6b1b3261be88105e0d7ce97a199659175a950fc73fff6a51392f27a424167756c7fa6cb7c4b480817065804d253d81805324448053729b1e32845fafdc5f277ec120744c9c17b6d119ecc27e3c4ff2db4e3eaf97080b894cf0dbe80a1c14d2528165297baf"}}}, 0x1aa) read(r7, &(0x7f0000000180)=""/143, 0x8f) 0s ago: executing program 8 (id=4702): r0 = syz_open_dev$sg(&(0x7f0000001600), 0xfffffffffe, 0x4027c1) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x0, 0x8, 0xa4e}) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x0, 0x8, 0xa4e}) kernel console output (not intermixed with test programs): 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 64 [ 770.907343][T15595] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 770.917216][T15595] usb 10-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 770.932559][T15595] usb 10-1: New USB device found, idVendor=104f, idProduct=0006, bcdDevice=c6.de [ 770.941826][T15595] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.949980][T15595] usb 10-1: Product: syz [ 770.954322][T15595] usb 10-1: Manufacturer: syz [ 770.959052][T15595] usb 10-1: SerialNumber: syz [ 770.966455][T15595] usb 10-1: config 0 descriptor?? [ 770.972532][T27683] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 771.040057][ T24] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 771.198043][T15595] usb 10-1: USB disconnect, device number 93 [ 771.212322][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 771.230737][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 771.247012][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 771.260218][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 771.271546][ T24] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 771.281287][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 771.294556][ T24] usb 9-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 771.303746][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.314617][ T24] usb 9-1: config 0 descriptor?? [ 771.541800][T27706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.552240][T27706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.564389][T15572] usb 9-1: USB disconnect, device number 58 [ 772.138019][T27756] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4323'. [ 772.911744][T16248] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 772.919115][ T5849] Bluetooth: hci0: command 0x1003 tx timeout [ 773.099131][T27786] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4327'. [ 773.108684][T27786] netlink: 43 bytes leftover after parsing attributes in process `syz.8.4327'. [ 773.118579][T27786] netlink: 'syz.8.4327': attribute type 5 has an invalid length. [ 773.127413][T27786] netlink: 43 bytes leftover after parsing attributes in process `syz.8.4327'. [ 773.285998][T15572] usb 10-1: new high-speed USB device number 94 using dummy_hcd [ 773.296781][T15595] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 773.317583][T27792] netlink: 256 bytes leftover after parsing attributes in process `syz.8.4328'. [ 773.446583][T15572] usb 10-1: Using ep0 maxpacket: 16 [ 773.453687][T15572] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.464950][T15572] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 773.473487][T15595] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 773.475021][T15572] usb 10-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 773.487295][T15595] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.494598][T15572] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.501511][T15595] usb 7-1: Product: syz [ 773.513711][T15572] usb 10-1: config 0 descriptor?? [ 773.529727][T15595] usb 7-1: Manufacturer: syz [ 773.535023][T15595] usb 7-1: SerialNumber: syz [ 773.585601][ T24] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 773.750648][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 773.760599][ T24] usb 9-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 773.766181][T15572] usbhid 10-1:0.0: can't add hid device: -71 [ 773.776612][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.804606][T15572] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 773.805688][ T24] usb 9-1: config 0 descriptor?? [ 773.834511][T15572] usb 10-1: USB disconnect, device number 94 [ 773.914529][T27810] netlink: 774 bytes leftover after parsing attributes in process `syz.9.4329'. [ 773.929929][T27810] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4329'. [ 773.999907][T15595] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 774.017278][T15595] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 774.036094][T15595] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 774.055254][T15595] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -32 [ 774.267752][T27792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 774.277755][T27792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 774.430369][T15572] usb 10-1: new high-speed USB device number 95 using dummy_hcd [ 774.502444][ T24] video4linux radio48: keene_cmd_set failed (-71) [ 774.511996][ T24] radio-keene 9-1:0.0: V4L2 device registered as radio48 [ 774.523949][ T24] usb 9-1: USB disconnect, device number 59 [ 774.594510][T15572] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.608616][T15572] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 774.626022][T15572] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.639039][T15572] usb 10-1: config 0 descriptor?? [ 774.883330][T27827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 774.893016][T27827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.123732][T15572] keytouch 0003:0926:3333.004D: fixing up Keytouch IEC report descriptor [ 775.149718][T15572] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.004D/input/input75 [ 775.259255][T15572] keytouch 0003:0926:3333.004D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 775.457100][ T7242] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 775.549697][T27883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.559135][T27883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.573895][T15572] usb 10-1: USB disconnect, device number 95 [ 775.620236][ T7242] usb 9-1: Using ep0 maxpacket: 16 [ 775.638210][ T7242] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.650715][ T7242] usb 9-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 775.659819][ T7242] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.676831][ T7242] usb 9-1: config 0 descriptor?? [ 776.114506][ T7242] usbhid 9-1:0.0: can't add hid device: -71 [ 776.122867][ T7242] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 776.143033][ T7242] usb 9-1: USB disconnect, device number 60 [ 776.590722][ T24] usb 10-1: new low-speed USB device number 96 using dummy_hcd [ 776.776444][ T24] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 776.785255][ T24] usb 10-1: config 0 has no interface number 0 [ 776.791506][ T24] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 776.803253][ T24] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 776.820712][ T24] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 776.830596][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.843625][ T24] usb 10-1: config 0 descriptor?? [ 776.863844][ T24] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 776.965064][T15572] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 777.076693][T27921] iowarrior 10-1:0.1: Error -90 while submitting URB [ 777.102601][ T24] usb 10-1: USB disconnect, device number 96 [ 777.106776][T15573] usb 7-1: USB disconnect, device number 9 [ 777.130049][T15572] usb 9-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 777.163142][T15572] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.182349][T15572] usb 9-1: config 0 descriptor?? [ 777.214542][T15572] pwc: Creative Labs Webcam Pro Ex detected. [ 777.564094][T15573] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 777.594180][T15572] pwc: Failed to set LED on/off time (-71) [ 777.607262][T15572] pwc: send_video_command error -71 [ 777.613040][T15572] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 777.638455][T15572] Philips webcam 9-1:0.0: probe with driver Philips webcam failed with error -71 [ 777.656631][T15572] usb 9-1: USB disconnect, device number 61 [ 777.743140][T15573] usb 7-1: config 8 has an invalid interface number: 80 but max is 0 [ 777.765825][T15573] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 777.777699][T15573] usb 7-1: config 8 has no interface number 0 [ 777.786045][T15573] usb 7-1: config 8 interface 80 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 777.802668][T15573] usb 7-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 777.816934][T15573] usb 7-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 777.827301][T15573] usb 7-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 777.841721][T15573] usb 7-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 777.851027][T15573] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.911656][T15573] usb 7-1: NFC: intf ffff888027790000 id ffffffff8eb141a0 [ 778.107337][T27967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.120397][T27967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.135301][ T5910] usb 7-1: USB disconnect, device number 10 [ 778.312997][ T7242] usb 10-1: new full-speed USB device number 97 using dummy_hcd [ 778.508091][ T7242] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 778.549237][ T7242] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 778.582914][ T7242] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 778.595943][ T7242] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.615678][ T7242] usb 10-1: Product: syz [ 778.624819][ T7242] usb 10-1: Manufacturer: syz [ 778.640854][ T7242] usb 10-1: SerialNumber: syz [ 779.050973][T28065] netlink: 'syz.6.4349': attribute type 12 has an invalid length. [ 779.066697][T28065] netlink: 'syz.6.4349': attribute type 6 has an invalid length. [ 779.119426][ T7242] usb 10-1: 0:2 : does not exist [ 779.438711][T28077] nbd1: detected capacity change from 0 to 127 [ 779.449427][T14137] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 779.468887][ T5849] block nbd1: Receive control failed (result -32) [ 779.468992][T16248] block nbd1: Receive control failed (result -32) [ 779.484099][ T5841] block nbd1: Send control failed (result -32) [ 779.497823][ T5841] block nbd1: Request send failed, requeueing [ 779.534591][ T56] block nbd1: Dead connection, failed to find a fallback [ 779.548744][ T56] block nbd1: shutting down sockets [ 779.557279][ T56] blk_print_req_error: 5 callbacks suppressed [ 779.557299][ T56] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 779.564131][ T5841] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 779.566515][ T56] buffer_io_error: 23 callbacks suppressed [ 779.566534][ T56] Buffer I/O error on dev nbd1, logical block 0, async page read [ 779.585675][ T5841] Buffer I/O error on dev nbd1, logical block 1, async page read [ 779.607255][T15595] usb 10-1: USB disconnect, device number 97 [ 779.639906][ T5841] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 779.668929][ T5841] Buffer I/O error on dev nbd1, logical block 2, async page read [ 779.671530][T14137] usb 7-1: Using ep0 maxpacket: 16 [ 779.682887][ T5841] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 779.693648][ T5841] Buffer I/O error on dev nbd1, logical block 3, async page read [ 779.702187][ T5841] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 779.712094][ T5841] Buffer I/O error on dev nbd1, logical block 0, async page read [ 779.712292][T14137] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 779.723383][ T5841] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 779.741926][ T5841] Buffer I/O error on dev nbd1, logical block 1, async page read [ 779.750430][ T5841] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 779.762467][ T5841] Buffer I/O error on dev nbd1, logical block 2, async page read [ 779.772081][ T5841] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 779.773788][T14137] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 779.796733][ T5841] Buffer I/O error on dev nbd1, logical block 3, async page read [ 779.806771][ T5841] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 779.817103][T14137] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 779.826570][T14137] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.835486][ T5841] Buffer I/O error on dev nbd1, logical block 0, async page read [ 779.845990][T14137] usb 7-1: Product: syz [ 779.851070][T14137] usb 7-1: Manufacturer: syz [ 779.860303][ T5841] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 779.873329][T14137] usb 7-1: SerialNumber: syz [ 779.881441][ T5841] Buffer I/O error on dev nbd1, logical block 1, async page read [ 779.891347][T14137] usb 7-1: config 0 descriptor?? [ 779.902197][T14137] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 779.915240][ T5841] ldm_validate_partition_table(): Disk read failed. [ 779.922044][T14137] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 779.932032][ T5841] Dev nbd1: unable to read RDB block 0 [ 779.938672][ T7242] usb 9-1: new full-speed USB device number 62 using dummy_hcd [ 779.941444][ T5841] nbd1: unable to read partition table [ 779.991300][ T5841] ldm_validate_partition_table(): Disk read failed. [ 780.001205][ T5841] Dev nbd1: unable to read RDB block 0 [ 780.010759][ T5841] nbd1: unable to read partition table [ 780.112620][ T7242] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 780.122870][ T7242] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 780.143996][ T7242] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 780.153153][ T7242] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 780.161190][ T7242] usb 9-1: SerialNumber: syz [ 780.177008][ T7242] usb 9-1: 0:2 : does not exist [ 780.269608][T28127] netlink: 'syz.9.4354': attribute type 4 has an invalid length. [ 780.543200][T14137] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 780.551275][T14137] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 780.662519][ T7242] usb 9-1: USB disconnect, device number 62 [ 780.718122][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 780.777923][T14137] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 780.788348][T14137] em28xx 7-1:0.0: No AC97 audio processor [ 780.848260][T14137] usb 7-1: USB disconnect, device number 11 [ 780.857155][T14137] em28xx 7-1:0.0: Disconnecting em28xx [ 780.877229][T14137] em28xx 7-1:0.0: Freeing device [ 781.329367][T28214] overlayfs: conflicting lowerdir path [ 781.606751][ T7242] usb 10-1: new high-speed USB device number 98 using dummy_hcd [ 781.675411][T28230] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4361'. [ 781.789008][ T7242] usb 10-1: Using ep0 maxpacket: 16 [ 781.797055][ T7242] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.808964][ T7242] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 781.824072][ T7242] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 781.835304][ T7242] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 781.847498][ T7242] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 781.862949][ T7242] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 781.872802][ T7242] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 781.881403][ T7242] usb 10-1: Manufacturer: syz [ 781.890994][ T7242] usb 10-1: config 0 descriptor?? [ 782.288466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 782.661024][T15595] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 782.744144][T28276] wlan0 speed is unknown, defaulting to 1000 [ 782.753889][T28276] wlan0 speed is unknown, defaulting to 1000 [ 782.767445][T28276] wlan0 speed is unknown, defaulting to 1000 [ 782.780913][T28276] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 782.799338][T28276] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 782.851652][T28276] wlan0 speed is unknown, defaulting to 1000 [ 782.858912][T15595] usb 9-1: config 1 has an invalid interface number: 7 but max is 0 [ 782.861912][T28276] wlan0 speed is unknown, defaulting to 1000 [ 782.875958][T15595] usb 9-1: config 1 has no interface number 0 [ 782.883105][T15595] usb 9-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 782.883800][T28276] wlan0 speed is unknown, defaulting to 1000 [ 782.895222][T15595] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 782.904770][T28276] wlan0 speed is unknown, defaulting to 1000 [ 782.911336][T15595] usb 9-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.924807][T28276] wlan0 speed is unknown, defaulting to 1000 [ 782.935006][T15595] usb 9-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 782.938701][T28276] wlan0 speed is unknown, defaulting to 1000 [ 782.953043][T15595] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.961506][T15595] usb 9-1: Product: syz [ 782.966448][T15595] usb 9-1: Manufacturer: syz [ 782.971230][T15595] usb 9-1: SerialNumber: syz [ 782.982653][T28255] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 783.184688][T28289] program syz.6.4370 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 783.211455][T28255] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 783.343371][T28295] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4371'. [ 783.435070][T15595] usb 9-1: Incompatible driver and firmware versions [ 784.603032][T15595] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 784.633090][T28312] sctp: [Deprecated]: syz.9.4374 (pid 28312) Use of int in maxseg socket option. [ 784.633090][T28312] Use struct sctp_assoc_value instead [ 784.647663][ T7242] rc_core: IR keymap rc-hauppauge not found [ 784.653601][ T7242] Registered IR keymap rc-empty [ 784.660765][ T7242] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 784.687260][ T7242] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 784.710109][ T7242] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 784.724321][ T7242] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input76 [ 784.740639][ T7242] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 784.763156][ T7242] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 784.772491][T15595] usb 7-1: Using ep0 maxpacket: 8 [ 784.779542][T15595] usb 7-1: config 1 interface 0 altsetting 98 endpoint 0x81 has an invalid bInterval 85, changing to 10 [ 784.791233][ T7242] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 784.798523][T15595] usb 7-1: config 1 interface 0 altsetting 98 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 784.812832][T15595] usb 7-1: config 1 interface 0 has no altsetting 0 [ 784.822068][T15595] usb 7-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.40 [ 784.831388][ T7242] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 784.838828][T15595] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.846837][T15595] usb 7-1: Product: syz [ 784.851241][T15595] usb 7-1: Manufacturer: syz [ 784.855879][T15595] usb 7-1: SerialNumber: syz [ 784.860678][ T7242] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 784.879675][ T7242] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 784.912745][ T7242] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 784.933098][ T7242] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 784.965259][ T7242] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 784.988047][ T7242] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 785.010853][ T7242] mceusb 10-1:0.0: Registered with mce emulator interface version 1 [ 785.019544][ T7242] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 785.039149][ T7242] usb 10-1: USB disconnect, device number 98 [ 785.111524][T15595] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input77 [ 785.128845][ T5195] bcm5974 7-1:1.0: could not read from device [ 785.141798][ T5195] bcm5974 7-1:1.0: could not read from device [ 785.159028][ T5195] bcm5974 7-1:1.0: could not read from device [ 785.166032][T15595] usb 7-1: USB disconnect, device number 12 [ 785.173187][ T5195] bcm5974 7-1:1.0: could not read from device [ 785.435661][ T7242] usb 10-1: new high-speed USB device number 99 using dummy_hcd [ 785.598493][ T7242] usb 10-1: unable to get BOS descriptor or descriptor too short [ 785.622853][ T7242] usb 10-1: config 114 has an invalid interface number: 227 but max is 0 [ 785.630741][T14137] usb 9-1: USB disconnect, device number 63 [ 785.631793][ T7242] usb 10-1: config 114 has no interface number 0 [ 785.663295][ T7242] usb 10-1: config 114 interface 227 altsetting 4 endpoint 0x1 has an invalid bInterval 126, changing to 10 [ 785.719323][ T7242] usb 10-1: config 114 interface 227 has no altsetting 0 [ 785.744908][ T7242] usb 10-1: New USB device found, idVendor=0499, idProduct=1051, bcdDevice=69.2d [ 785.755774][ T7242] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.764297][ T7242] usb 10-1: Product: syz [ 785.769169][ T7242] usb 10-1: Manufacturer: syz [ 785.773884][ T7242] usb 10-1: SerialNumber: syz [ 785.847991][T28366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 785.857199][T28366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.021368][ T7242] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 786.029213][ T7242] usb 10-1: invalid MIDI in EP 0 [ 786.076526][ T7242] snd-usb-audio 10-1:114.227: probe with driver snd-usb-audio failed with error -22 [ 786.091351][ T7242] usb 10-1: USB disconnect, device number 99 [ 786.112277][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:114.227/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 786.175253][T14137] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 786.339650][T14137] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 786.351612][T14137] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 786.362677][T14137] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 786.380426][T14137] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 786.389918][T14137] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.398726][T14137] usb 9-1: Product: syz [ 786.411430][T14137] usb 9-1: Manufacturer: syz [ 786.422285][T14137] usb 9-1: SerialNumber: syz [ 786.673590][T14137] usb 9-1: 0:2 : does not exist [ 786.761769][T14137] usb 9-1: USB disconnect, device number 64 [ 786.866328][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 787.311790][T28463] Invalid ELF header magic: != ELF [ 787.318239][T14137] usb 10-1: new high-speed USB device number 100 using dummy_hcd [ 787.499787][T14137] usb 10-1: Using ep0 maxpacket: 32 [ 787.511481][T15595] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 787.527421][T14137] usb 10-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 787.538207][T14137] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.575437][T14137] usb 10-1: config 0 descriptor?? [ 787.591929][T14137] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 787.684117][T15595] usb 7-1: unable to get BOS descriptor or descriptor too short [ 787.691972][T15595] usb 7-1: too many configurations: 128, using maximum allowed: 8 [ 787.702205][T15595] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 787.709945][T15595] usb 7-1: can't read configurations, error -61 [ 787.809932][T15563] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 787.853968][T15595] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 787.970413][T15563] usb 9-1: Using ep0 maxpacket: 8 [ 787.979306][T15563] usb 9-1: config 7 has an invalid interface number: 112 but max is 0 [ 787.988220][T15563] usb 9-1: config 7 has no interface number 0 [ 787.998763][T15563] usb 9-1: New USB device found, idVendor=19d2, idProduct=1136, bcdDevice=25.87 [ 788.007977][T15563] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.016311][T15563] usb 9-1: Product: syz [ 788.020592][T15563] usb 9-1: Manufacturer: syz [ 788.025535][T15563] usb 9-1: SerialNumber: syz [ 788.031879][T15595] usb 7-1: unable to get BOS descriptor or descriptor too short [ 788.044490][T15595] usb 7-1: too many configurations: 128, using maximum allowed: 8 [ 788.054366][T15595] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 788.062150][T15595] usb 7-1: can't read configurations, error -61 [ 788.068959][T15595] usb usb7-port1: attempt power cycle [ 788.230953][T14137] gspca_vc032x: reg_w err -71 [ 788.241816][T14137] gspca_vc032x: I2c Bus Busy Wait 00 [ 788.247341][T14137] gspca_vc032x: I2c Bus Busy Wait 00 [ 788.252804][T14137] gspca_vc032x: I2c Bus Busy Wait 00 [ 788.258225][T14137] gspca_vc032x: I2c Bus Busy Wait 00 [ 788.263687][T14137] gspca_vc032x: I2c Bus Busy Wait 00 [ 788.269025][T14137] gspca_vc032x: I2c Bus Busy Wait 00 [ 788.275655][T14137] gspca_vc032x: I2c Bus Busy Wait 00 [ 788.281179][T14137] gspca_vc032x: I2c Bus Busy Wait 00 [ 788.286498][T14137] gspca_vc032x: I2c Bus Busy Wait 00 [ 788.293665][T14137] gspca_vc032x: I2c Bus Busy Wait 00 [ 788.299003][T14137] gspca_vc032x: I2c Bus Busy Wait 00 [ 788.306128][T14137] gspca_vc032x: I2c Bus Busy Wait 00 [ 788.313756][T14137] gspca_vc032x: I2c Bus Busy Wait 00 [ 788.319101][T14137] gspca_vc032x: I2c Bus Busy Wait 00 [ 788.324573][T14137] gspca_vc032x: I2c Bus Busy Wait 00 [ 788.329891][T14137] gspca_vc032x: I2c Bus Busy Wait 00 [ 788.338239][T14137] gspca_vc032x: I2c Bus Busy Wait 00 [ 788.343621][T14137] gspca_vc032x: I2c Bus Busy Wait 00 [ 788.350325][T15563] usb 9-1: bad CDC descriptors [ 788.358505][T14137] gspca_vc032x: Unknown sensor... [ 788.363660][T14137] vc032x 10-1:0.0: probe with driver vc032x failed with error -22 [ 788.367897][T15563] usb 9-1: USB disconnect, device number 65 [ 788.389857][T14137] usb 10-1: USB disconnect, device number 100 [ 788.441840][T15595] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 788.477268][T15595] usb 7-1: unable to get BOS descriptor or descriptor too short [ 788.485755][T15595] usb 7-1: too many configurations: 128, using maximum allowed: 8 [ 788.495391][T15595] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 788.503017][T15595] usb 7-1: can't read configurations, error -61 [ 788.655470][T15595] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 788.678753][T15595] usb 7-1: unable to get BOS descriptor or descriptor too short [ 788.686643][T15595] usb 7-1: too many configurations: 128, using maximum allowed: 8 [ 788.696648][T15595] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 788.704454][T15595] usb 7-1: can't read configurations, error -61 [ 788.711300][T15595] usb usb7-port1: unable to enumerate USB device [ 789.037322][T28518] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 789.317994][T15574] usb 10-1: new full-speed USB device number 101 using dummy_hcd [ 789.393834][T14137] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 789.480893][T15574] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 789.491375][T15574] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 789.502673][T15574] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 789.512970][T15574] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.521197][T15574] usb 10-1: Product: syz [ 789.525694][T15574] usb 10-1: Manufacturer: syz [ 789.530403][T15574] usb 10-1: SerialNumber: syz [ 789.563917][T14137] usb 9-1: Using ep0 maxpacket: 32 [ 789.571176][T14137] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 789.582863][T14137] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 789.592997][T14137] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 789.602384][T14137] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.613829][T14137] usb 9-1: config 0 descriptor?? [ 789.624403][T14137] hub 9-1:0.0: USB hub found [ 789.761080][T15574] usb 10-1: 0:2 : does not exist [ 789.790160][T15574] usb 10-1: USB disconnect, device number 101 [ 789.814602][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 789.841370][T14137] hub 9-1:0.0: 1 port detected [ 790.462517][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 790.500573][T14137] hub 9-1:0.0: activate --> -90 [ 790.924664][T15574] usb 10-1: new high-speed USB device number 102 using dummy_hcd [ 791.104088][T15574] usb 10-1: Using ep0 maxpacket: 16 [ 791.111751][T15574] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 791.124083][T15574] usb 10-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 791.133854][T15574] usb 10-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 791.142551][T15574] usb 10-1: Product: syz [ 791.151152][T15574] usb 10-1: config 0 descriptor?? [ 791.166875][T15574] gspca_main: spca501-2.14.0 probing 0000:0000 [ 791.179019][T15595] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 791.328701][T15595] usb 7-1: device descriptor read/64, error -71 [ 791.383666][T28624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.392580][T28624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.419842][T15574] gspca_spca501: reg write: error -71 [ 791.442081][T15574] spca501 10-1:0.0: Reg write failed for 0x02,0x0f,0x05 [ 791.463135][T15574] spca501 10-1:0.0: probe with driver spca501 failed with error -22 [ 791.476253][T15574] usb 10-1: USB disconnect, device number 102 [ 791.585365][T15595] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 791.745747][T15595] usb 7-1: device descriptor read/64, error -71 [ 791.863853][T15595] usb usb7-port1: attempt power cycle [ 791.897100][T14137] hub 9-1:0.0: hub_ext_port_status failed (err = -71) [ 791.911319][T15574] usb 9-1: USB disconnect, device number 66 [ 791.922537][T14137] usb 9-1-port1: connect-debounce failed [ 792.237811][T15595] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 792.259992][T15595] usb 7-1: device descriptor read/8, error -71 [ 792.398222][T15574] usb 10-1: new high-speed USB device number 103 using dummy_hcd [ 792.526569][T15595] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 792.561255][T15595] usb 7-1: device descriptor read/8, error -71 [ 792.570863][T15574] usb 10-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 792.582258][T15574] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.596488][T15574] usb 10-1: config 0 descriptor?? [ 792.658469][T28672] delete_channel: no stack [ 792.663187][T28672] delete_channel: no stack [ 792.680311][T15595] usb usb7-port1: unable to enumerate USB device [ 792.726309][T28675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 792.738305][T28675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.845382][T15574] kaweth 10-1:0.0: Firmware present in device. [ 793.019969][T15563] usb 9-1: new full-speed USB device number 67 using dummy_hcd [ 793.051311][T15574] kaweth 10-1:0.0: Statistics collection: 0 [ 793.057284][T15574] kaweth 10-1:0.0: Multicast filter limit: 0 [ 793.063658][T15574] kaweth 10-1:0.0: MTU: 0 [ 793.068051][T15574] kaweth 10-1:0.0: Read MAC address 00:00:00:00:00:00 [ 793.192400][T15563] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 793.202789][T15563] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 793.217766][T15563] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 793.227228][T15563] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.236087][T15563] usb 9-1: Product: syz [ 793.240758][T15563] usb 9-1: Manufacturer: syz [ 793.245438][T15563] usb 9-1: SerialNumber: syz [ 793.470768][T15563] usb 9-1: 0:2 : does not exist [ 793.697987][T28664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 793.706919][T28664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 793.715831][T15574] kaweth 10-1:0.0: Error setting receive filter [ 793.724824][T15574] kaweth 10-1:0.0: probe with driver kaweth failed with error -5 [ 793.737172][T15574] usb 10-1: USB disconnect, device number 103 [ 794.559626][T14137] usb 10-1: new full-speed USB device number 104 using dummy_hcd [ 794.569305][T15574] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 794.730250][T15574] usb 7-1: Using ep0 maxpacket: 32 [ 794.738337][T14137] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 794.749678][T15574] usb 7-1: config 0 has an invalid interface number: 235 but max is 0 [ 794.758155][T14137] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 794.767649][T15574] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 794.778472][T14137] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.789087][T15574] usb 7-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 794.799304][T14137] usb 10-1: config 0 descriptor?? [ 794.804768][T15574] usb 7-1: config 0 has no interface number 1 [ 794.811007][T15574] usb 7-1: config 0 interface 235 altsetting 0 endpoint 0x1 has invalid maxpacket 9216, setting to 64 [ 794.811402][T28711] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 794.822447][T15574] usb 7-1: config 0 interface 235 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 794.849295][T15574] usb 7-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 794.858885][T15574] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.866925][T15574] usb 7-1: Product: syz [ 794.871233][T15574] usb 7-1: Manufacturer: syz [ 794.875875][T15574] usb 7-1: SerialNumber: syz [ 794.884802][T15574] usb 7-1: config 0 descriptor?? [ 795.118700][T15574] kaweth 7-1:0.235: Firmware present in device. [ 795.322953][T15574] kaweth 7-1:0.235: Statistics collection: ae9e8aca [ 795.330246][T15574] kaweth 7-1:0.235: Multicast filter limit: 504c [ 795.336688][T15574] kaweth 7-1:0.235: MTU: 27700 [ 795.341690][T15574] kaweth 7-1:0.235: Read MAC address c8:d3:94:f0:7b:9f [ 795.490926][T28709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.500174][T28709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.509776][T14137] usbhid 10-1:0.0: can't add hid device: -71 [ 795.519995][T14137] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 795.537768][T14137] usb 10-1: USB disconnect, device number 104 [ 795.545496][T15574] kaweth 7-1:0.235: probe with driver kaweth failed with error -5 [ 795.577158][T15574] kaweth 7-1:0.0: Firmware present in device. [ 795.583705][T15574] kaweth 7-1:0.0: Error reading configuration (-71), no net device created [ 795.593087][T15574] kaweth 7-1:0.0: probe with driver kaweth failed with error -5 [ 795.611698][T15574] usb 7-1: USB disconnect, device number 21 [ 795.947712][T15574] usb 9-1: USB disconnect, device number 67 [ 796.320929][T28778] netlink: 'syz.6.4425': attribute type 1 has an invalid length. [ 796.329190][T28778] nbd: error processing sock list [ 796.334116][T15574] usb 9-1: new full-speed USB device number 68 using dummy_hcd [ 796.528637][T15574] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 796.545001][T15574] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 796.561916][T15574] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.576169][T15574] usb 9-1: Product: syz [ 796.581564][T15574] usb 9-1: Manufacturer: syz [ 796.586230][T15574] usb 9-1: SerialNumber: syz [ 796.599677][T15574] usb 9-1: config 0 descriptor?? [ 796.677967][T28804] overlayfs: invalid origin (00000000d1d3e81a820eee8a94416592a5356da96db48150eae08457fbc30ece5e7e7e318cb2b4b22122226fe65c239a) [ 796.813349][T28814] netlink: 'syz.6.4433': attribute type 1 has an invalid length. [ 796.876221][T15574] usb 9-1: USB disconnect, device number 68 [ 796.961307][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 797.253824][T15563] usb 10-1: new high-speed USB device number 105 using dummy_hcd [ 797.382350][T15572] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 797.425978][T15563] usb 10-1: Using ep0 maxpacket: 16 [ 797.433246][T15563] usb 10-1: config index 0 descriptor too short (expected 58660, got 36) [ 797.442280][T15563] usb 10-1: config 0 has an invalid interface number: 146 but max is -1 [ 797.453187][T15563] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 797.478390][T15563] usb 10-1: config 0 has no interface number 0 [ 797.484660][T15563] usb 10-1: config 0 interface 146 altsetting 188 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 797.496703][T15563] usb 10-1: config 0 interface 146 altsetting 188 endpoint 0x81 has invalid wMaxPacketSize 0 [ 797.510056][T15563] usb 10-1: config 0 interface 146 has no altsetting 0 [ 797.519665][T15563] usb 10-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 797.528919][T15563] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.543414][T15563] usb 10-1: config 0 descriptor?? [ 797.555751][T15572] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 797.568387][T15572] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 797.578989][T15572] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.591300][T15572] usb 7-1: config 0 descriptor?? [ 797.636171][T28861] bond0: entered promiscuous mode [ 797.641539][T28861] rose0: entered promiscuous mode [ 797.734330][T28864] Bluetooth: MGMT ver 1.23 [ 798.056992][T15572] keytouch 0003:0926:3333.004E: fixing up Keytouch IEC report descriptor [ 798.088500][T15572] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.004E/input/input78 [ 798.184279][T15576] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 798.250931][T15563] usbhid 10-1:0.146: can't add hid device: -71 [ 798.274881][T15572] keytouch 0003:0926:3333.004E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 798.319792][T15563] usbhid 10-1:0.146: probe with driver usbhid failed with error -71 [ 798.367710][T15563] usb 10-1: USB disconnect, device number 105 [ 798.376992][T15576] usb 9-1: Using ep0 maxpacket: 32 [ 798.405580][T15576] usb 9-1: config 0 has an invalid interface number: 153 but max is 0 [ 798.422556][T15576] usb 9-1: config 0 has no interface number 0 [ 798.430701][T15576] usb 9-1: New USB device found, idVendor=13b1, idProduct=0023, bcdDevice= 3.69 [ 798.461872][T15576] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.495566][T15576] usb 9-1: config 0 descriptor?? [ 798.537896][T15576] usb 7-1: USB disconnect, device number 22 [ 799.243516][T15563] usb 10-1: new full-speed USB device number 106 using dummy_hcd [ 799.428890][T15563] usb 10-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 799.439162][T15563] usb 10-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 799.452104][T15563] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.596170][T15595] usb 7-1: new low-speed USB device number 23 using dummy_hcd [ 799.694754][T15563] usb 10-1: string descriptor 0 read error: -71 [ 799.719546][T15563] hub 10-1:32.0: bad descriptor, ignoring hub [ 799.728609][T15563] hub 10-1:32.0: probe with driver hub failed with error -5 [ 799.745736][T15595] usb 7-1: device descriptor read/64, error -71 [ 799.801001][T15563] usb 10-1: USB disconnect, device number 106 [ 800.034817][T15595] usb 7-1: new low-speed USB device number 24 using dummy_hcd [ 800.173550][T15595] usb 7-1: device descriptor read/64, error -71 [ 800.291638][T15595] usb usb7-port1: attempt power cycle [ 800.654877][T15595] usb 7-1: new low-speed USB device number 25 using dummy_hcd [ 800.676298][T15576] usb 10-1: new high-speed USB device number 107 using dummy_hcd [ 800.686048][T15595] usb 7-1: device descriptor read/8, error -71 [ 800.840909][T15576] usb 10-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 800.850365][T15576] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.858846][T15576] usb 10-1: Product: syz [ 800.863278][T15576] usb 10-1: Manufacturer: syz [ 800.868017][T15576] usb 10-1: SerialNumber: syz [ 800.875387][T15576] usb 10-1: config 0 descriptor?? [ 800.884953][T15576] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 800.954421][T15595] usb 7-1: new low-speed USB device number 26 using dummy_hcd [ 800.979131][T15595] usb 7-1: device descriptor read/8, error -71 [ 801.096729][T15563] usb 9-1: USB disconnect, device number 69 [ 801.106859][T15595] usb usb7-port1: unable to enumerate USB device [ 801.326660][T15576] sonixb 10-1:0.0: Error writing register 01: -71 [ 801.344838][T15576] sonixb 10-1:0.0: probe with driver sonixb failed with error -71 [ 801.362567][T15576] usb 10-1: USB disconnect, device number 107 [ 801.875508][T15563] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 802.037495][T15563] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.048830][T15563] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.058676][T15563] usb 9-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 802.067897][T15563] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.079186][T15563] usb 9-1: config 0 descriptor?? [ 802.227087][T15573] usb 10-1: new full-speed USB device number 108 using dummy_hcd [ 802.305521][T29058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.315919][T29058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.335856][T29058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.345955][T29058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.375828][T15573] usb 10-1: device descriptor read/64, error -71 [ 802.578276][T15563] hid-steam 0003:28DE:1142.004F: unknown main item tag 0x0 [ 802.586454][T15563] hid-steam 0003:28DE:1142.004F: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.8-1/input0 [ 802.633616][T15573] usb 10-1: new full-speed USB device number 109 using dummy_hcd [ 802.655489][T15563] hid-steam 0003:28DE:1142.004F: Steam wireless receiver connected [ 802.663569][T15563] hid-steam 0003:28DE:1142.004F: No HID_FEATURE_REPORT submitted - nothing to read [ 802.679865][T15563] hid-steam 0003:28DE:1142.0050: unknown main item tag 0x0 [ 802.694102][T15563] hid-steam 0003:28DE:1142.0050: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.8-1/input0 [ 802.772826][T15573] usb 10-1: device descriptor read/64, error -71 [ 802.789565][T15563] usb 9-1: USB disconnect, device number 70 [ 802.804134][T15563] hid-steam 0003:28DE:1142.004F: Steam wireless receiver disconnected [ 802.826224][ T24] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 802.890749][T15573] usb usb10-port1: attempt power cycle [ 802.998973][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 803.005595][ T24] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 803.014113][ T24] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 803.024050][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 803.034443][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 803.044433][ T24] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 803.057661][ T24] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 803.066899][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.253873][T15573] usb 10-1: new full-speed USB device number 110 using dummy_hcd [ 803.276025][T15573] usb 10-1: device descriptor read/8, error -71 [ 803.525772][T15576] usb 7-1: USB disconnect, device number 27 [ 803.533809][T15573] usb 10-1: new full-speed USB device number 111 using dummy_hcd [ 803.567142][T15573] usb 10-1: device descriptor read/8, error -71 [ 803.681900][T15573] usb usb10-port1: unable to enumerate USB device [ 803.809987][ T24] usb 9-1: new low-speed USB device number 71 using dummy_hcd [ 803.986760][ T24] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 803.994941][ T24] usb 9-1: config 0 has no interface number 0 [ 804.001117][ T24] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 804.012174][ T24] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 804.021988][ T24] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 804.033307][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.043889][ T24] usb 9-1: config 0 descriptor?? [ 804.056818][ T24] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 804.124427][T29146] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4462'. [ 804.267072][T15573] usb 9-1: USB disconnect, device number 71 [ 804.699471][T29179] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4464'. [ 805.019557][T15576] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 805.182802][T15576] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 805.204142][T15576] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 805.240209][T15576] usb 7-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 805.257309][T15576] usb 7-1: New USB device strings: Mfr=137, Product=2, SerialNumber=3 [ 805.266018][T15576] usb 7-1: Product: syz [ 805.270220][T15576] usb 7-1: Manufacturer: syz [ 805.274850][T15576] usb 7-1: SerialNumber: syz [ 805.283873][T16248] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 805.294742][T15576] usb 7-1: config 0 descriptor?? [ 805.307424][T15576] radioshark 7-1:0.0: Invalid radioSHARK device [ 805.309530][ T24] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 805.316396][T15576] radioshark 7-1:0.0: probe with driver radioshark failed with error -22 [ 805.330880][T15576] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 805.510601][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 805.518257][ T24] usb 9-1: unable to get BOS descriptor or descriptor too short [ 805.534206][ T24] usb 9-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid maxpacket 28118, setting to 1024 [ 805.536547][T15576] usb 7-1: USB disconnect, device number 28 [ 805.556161][T15563] usb 10-1: new high-speed USB device number 112 using dummy_hcd [ 805.565397][ T24] usb 9-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 1024 [ 805.586189][ T24] usb 9-1: config 8 interface 0 has no altsetting 0 [ 805.599669][ T24] usb 9-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 805.609912][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.618844][ T24] usb 9-1: Product: syz [ 805.623188][ T24] usb 9-1: Manufacturer: syz [ 805.627792][ T24] usb 9-1: SerialNumber: syz [ 805.636182][T29196] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 805.756457][T15563] usb 10-1: Using ep0 maxpacket: 8 [ 805.763934][T15563] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 805.774262][T15563] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 805.783434][T15563] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 805.792637][T15563] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.870402][ T24] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 805.883846][ T24] usb 9-1: selecting invalid altsetting 0 [ 805.913805][ T24] usb 9-1: USB disconnect, device number 72 [ 806.046153][T15563] usb 10-1: USB disconnect, device number 112 [ 806.473051][ T24] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 806.612139][ T24] usb 7-1: device descriptor read/64, error -71 [ 806.757312][T29290] program syz.9.4477 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 806.783186][T15573] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 806.868776][ T24] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 806.956782][T15573] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 806.968083][T15573] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 806.979716][T15573] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 806.989962][T15573] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 806.999161][T15573] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.007890][ T24] usb 7-1: device descriptor read/64, error -71 [ 807.016008][T29281] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 807.027374][T15573] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 807.137479][ T24] usb usb7-port1: attempt power cycle [ 807.333051][T15573] usb 9-1: USB disconnect, device number 73 [ 807.512110][ T24] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 807.554982][ T24] usb 7-1: device descriptor read/8, error -71 [ 807.777842][T15573] usb 9-1: new full-speed USB device number 74 using dummy_hcd [ 807.831436][ T24] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 807.865514][ T24] usb 7-1: device descriptor read/8, error -71 [ 807.983399][ T24] usb usb7-port1: unable to enumerate USB device [ 809.812753][T29353] [U]  [ 809.816325][T29353] [U] K{ [ 809.819533][T29353] [U] T 1ŠFFˊ`GJǘGO/MC [ 809.827449][T29353] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 809.844274][T29353] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 809.858135][T29353] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 809.896979][T29353] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 809.921320][T15572] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 809.923976][T29353] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 809.933948][T29355] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4481'. [ 809.944995][T29353] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 809.951981][T29355] tmpfs: Bad value for 'mpol' [ 809.964869][T29353] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 810.060269][T29353] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 810.069351][T29353] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 810.084281][T29353] [U] 22Ʃ۩X?0;3U [ 810.089435][T29353] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 810.112030][T15572] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 810.118048][T29353] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 810.133679][T29353] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 810.145104][T15572] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 810.153943][T15572] usb 7-1: Product: syz [ 810.158329][T15572] usb 7-1: SerialNumber: syz [ 810.167374][T15572] usb 7-1: config 0 descriptor?? [ 810.178466][T29353] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 810.190752][T29353] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 810.206429][T29353] [U] EC [ 810.210528][T29353] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 810.238639][T29352] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 810.462397][ T7242] usb 10-1: new full-speed USB device number 113 using dummy_hcd [ 810.612858][T29343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.621753][T29343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.632066][ T7242] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 810.632152][T15572] usb 7-1: USB disconnect, device number 33 [ 810.669595][ T7242] usb 10-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=94.47 [ 810.679897][ T7242] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.688555][ T7242] usb 10-1: Product: syz [ 810.693131][ T7242] usb 10-1: Manufacturer: syz [ 810.699197][ T7242] usb 10-1: SerialNumber: syz [ 810.712179][ T7242] usb 10-1: config 0 descriptor?? [ 810.937320][T15572] usb 10-1: USB disconnect, device number 113 [ 811.029553][T15573] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 811.189614][T15573] usb 9-1: Using ep0 maxpacket: 8 [ 811.201291][T15573] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 811.209752][T15573] usb 9-1: config 179 has no interface number 0 [ 811.216199][T15573] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 811.227520][T15573] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 811.239343][T15573] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 811.250776][T15573] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 811.262396][T15573] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 811.275865][T15573] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 811.284950][T15573] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.298598][T29379] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 811.583450][T29379] netlink: 256 bytes leftover after parsing attributes in process `syz.8.4486'. [ 811.617559][T15573] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 811.756578][T15573] usb 7-1: device descriptor read/64, error -71 [ 811.813184][T29379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 811.822980][T29379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.836586][T29379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 811.847972][T29379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.861201][ T24] usb 10-1: new full-speed USB device number 114 using dummy_hcd [ 812.023875][T15573] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 812.027533][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 812.043607][ T24] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 812.056805][ T24] usb 10-1: New USB device found, idVendor=0eef, idProduct=72aa, bcdDevice= 0.00 [ 812.066006][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.080830][ T24] usb 10-1: config 0 descriptor?? [ 812.087317][T29424] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 812.095574][T29424] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 812.163056][T15573] usb 7-1: device descriptor read/64, error -71 [ 812.281392][T15573] usb usb7-port1: attempt power cycle [ 812.320856][T29424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.336224][T29424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.440522][ T24] usbhid 10-1:0.0: can't add hid device: -71 [ 812.455230][ T24] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 812.492777][ T24] usb 10-1: USB disconnect, device number 114 [ 812.654967][T15573] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 812.677608][T15573] usb 7-1: device descriptor read/8, error -71 [ 812.858026][ T24] usb 10-1: new high-speed USB device number 115 using dummy_hcd [ 812.933028][T15573] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 812.955260][T15573] usb 7-1: device descriptor read/8, error -71 [ 813.018494][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 813.026421][ T24] usb 10-1: unable to get BOS descriptor or descriptor too short [ 813.038014][ T24] usb 10-1: config index 0 descriptor too short (expected 9, got 0) [ 813.046516][ T24] usb 10-1: can't read configurations, error -22 [ 813.072372][T15573] usb usb7-port1: unable to enumerate USB device [ 813.200344][ T24] usb 10-1: new high-speed USB device number 116 using dummy_hcd [ 813.371381][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 813.379716][ T24] usb 10-1: unable to get BOS descriptor or descriptor too short [ 813.391038][ T24] usb 10-1: config index 0 descriptor too short (expected 9, got 0) [ 813.399342][ T24] usb 10-1: can't read configurations, error -22 [ 813.407286][ T24] usb usb10-port1: attempt power cycle [ 813.777878][ T24] usb 10-1: new high-speed USB device number 117 using dummy_hcd [ 813.796748][T15563] usb 9-1: USB disconnect, device number 75 [ 813.796763][ C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 813.816078][ C0] dummy_hcd dummy_hcd.8: timer fired with no URBs pending? [ 813.827076][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 813.862639][ T24] usb 10-1: unable to get BOS descriptor or descriptor too short [ 813.875617][T29462] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4493'. [ 813.884973][T29462] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4493'. [ 813.897502][ T24] usb 10-1: config index 0 descriptor too short (expected 9, got 0) [ 813.905669][ T24] usb 10-1: can't read configurations, error -22 [ 814.045974][ T24] usb 10-1: new high-speed USB device number 118 using dummy_hcd [ 814.078237][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 814.091677][ T24] usb 10-1: unable to get BOS descriptor or descriptor too short [ 814.099832][T29476] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 814.106402][T29476] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 814.116922][ T24] usb 10-1: config index 0 descriptor too short (expected 9, got 0) [ 814.118931][T29476] vhci_hcd vhci_hcd.0: Device attached [ 814.133164][ T24] usb 10-1: can't read configurations, error -22 [ 814.144186][T29477] vhci_hcd: connection closed [ 814.144593][ T7471] vhci_hcd: stop threads [ 814.147239][ T24] usb usb10-port1: unable to enumerate USB device [ 814.149823][ T7471] vhci_hcd: release socket [ 814.168336][ T7471] vhci_hcd: disconnect device [ 814.633435][ T24] usb 9-1: new full-speed USB device number 76 using dummy_hcd [ 814.796967][ T24] usb 9-1: unable to get BOS descriptor or descriptor too short [ 814.808564][ T24] usb 9-1: not running at top speed; connect to a high speed hub [ 814.819925][ T24] usb 9-1: config 10 has an invalid interface number: 12 but max is 0 [ 814.829701][ T24] usb 9-1: config 10 has no interface number 0 [ 814.836034][ T24] usb 9-1: config 10 interface 12 has no altsetting 0 [ 814.854552][ T24] usb 9-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=59.5c [ 814.864155][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.872529][ T24] usb 9-1: Product: syz [ 814.876860][ T24] usb 9-1: Manufacturer: syz [ 814.881979][ T24] usb 9-1: SerialNumber: syz [ 815.125690][ T24] kl5kusb105 9-1:10.12: KL5KUSB105D / PalmConnect converter detected [ 815.145131][ T24] usb 9-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 815.164975][ T24] usb 9-1: USB disconnect, device number 76 [ 815.185248][ T24] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 815.199281][ T24] kl5kusb105 9-1:10.12: device disconnected [ 815.226420][T29534] Bluetooth: MGMT ver 1.23 [ 815.510536][T15575] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 815.670848][T15575] usb 7-1: Using ep0 maxpacket: 16 [ 815.678093][T15575] usb 7-1: config 1 has an invalid interface number: 4 but max is 2 [ 815.688851][T15575] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 815.699761][T15575] usb 7-1: config 1 has no interface number 1 [ 815.706355][T15575] usb 7-1: too many endpoints for config 1 interface 4 altsetting 0: 102, using maximum allowed: 30 [ 815.719291][T15575] usb 7-1: config 1 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 102 [ 815.745768][T15575] usb 7-1: too many endpoints for config 1 interface 2 altsetting 255: 255, using maximum allowed: 30 [ 815.771049][T15575] usb 7-1: config 1 interface 2 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 815.787429][T15575] usb 7-1: config 1 interface 2 has no altsetting 0 [ 815.812776][T15575] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.53 [ 815.830556][T15575] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.841018][T15575] usb 7-1: Product: syz [ 815.859248][T15575] usb 7-1: Manufacturer: syz [ 815.864452][T15575] usb 7-1: SerialNumber: syz [ 816.131813][ T24] usb 9-1: new full-speed USB device number 77 using dummy_hcd [ 816.153839][T15575] usb 7-1: USB disconnect, device number 38 [ 816.184780][ T7242] usb 10-1: new high-speed USB device number 119 using dummy_hcd [ 816.314793][ T24] usb 9-1: config 9 has an invalid interface number: 88 but max is 1 [ 816.323034][ T24] usb 9-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 816.331996][ T24] usb 9-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 816.342263][ T7242] usb 10-1: device descriptor read/64, error -71 [ 816.349329][ T24] usb 9-1: config 9 has no interface number 1 [ 816.356017][ T24] usb 9-1: config 9 interface 88 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 816.367025][ T24] usb 9-1: config 9 interface 88 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 816.378543][ T24] usb 9-1: config 9 interface 88 altsetting 9 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 816.390306][ T24] usb 9-1: config 9 interface 88 has no altsetting 0 [ 816.399818][ T24] usb 9-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=50.80 [ 816.409060][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.417056][ T24] usb 9-1: Product: syz [ 816.421396][ T24] usb 9-1: Manufacturer: syz [ 816.426037][ T24] usb 9-1: SerialNumber: syz [ 816.622807][ T7242] usb 10-1: new high-speed USB device number 120 using dummy_hcd [ 816.657853][T29563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.669824][T29563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.761797][ T7242] usb 10-1: device descriptor read/64, error -71 [ 816.810403][ T24] qmi_wwan 9-1:9.88: skipping garbage [ 816.819867][ T24] qmi_wwan 9-1:9.88: probe with driver qmi_wwan failed with error -22 [ 816.846222][ T24] usb 9-1: USB disconnect, device number 77 [ 816.904330][ T7242] usb usb10-port1: attempt power cycle [ 817.264676][ T7242] usb 10-1: new high-speed USB device number 121 using dummy_hcd [ 817.285911][T15563] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 817.294166][ T7242] usb 10-1: device descriptor read/8, error -71 [ 817.391257][T29622] netlink: 'syz.8.4512': attribute type 58 has an invalid length. [ 817.412578][T29622] netlink: 'syz.8.4512': attribute type 58 has an invalid length. [ 817.481252][T15563] usb 7-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 817.491449][T15563] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.507140][T15563] usb 7-1: config 0 descriptor?? [ 817.564758][ T7242] usb 10-1: new high-speed USB device number 122 using dummy_hcd [ 817.596894][ T7242] usb 10-1: device descriptor read/8, error -71 [ 817.724807][ T7242] usb usb10-port1: unable to enumerate USB device [ 817.874116][T15572] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 817.956880][T15563] kye 0003:0458:5005.0051: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 817.968237][T15563] kye 0003:0458:5005.0051: unknown main item tag 0x0 [ 817.975172][T15563] kye 0003:0458:5005.0051: unknown main item tag 0x0 [ 817.983451][T15563] kye 0003:0458:5005.0051: unknown main item tag 0x0 [ 817.992692][T15563] kye 0003:0458:5005.0051: unknown main item tag 0x0 [ 817.999480][T15563] kye 0003:0458:5005.0051: unknown main item tag 0x0 [ 818.009567][T15563] kye 0003:0458:5005.0051: hidraw0: USB HID v0.00 Device [HID 0458:5005] on usb-dummy_hcd.6-1/input0 [ 818.021896][T15563] kye 0003:0458:5005.0051: tablet-enabling feature report not found [ 818.032569][T15563] kye 0003:0458:5005.0051: tablet enabling failed [ 818.047572][T15572] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.059032][T15572] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.072686][T15572] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 818.086178][T15572] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 818.100270][T15572] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.113947][T15572] usb 9-1: config 0 descriptor?? [ 818.558374][T29633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.568723][T29633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.591006][T15572] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 818.598640][T15572] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 818.623126][T15572] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 818.630999][T15572] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 818.638573][T15572] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 818.664077][T29652] 9pnet_fd: Insufficient options for proto=fd [ 818.672859][T15572] plantronics 0003:047F:FFFF.0052: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 818.896233][T15563] usb 9-1: USB disconnect, device number 78 [ 819.205079][T15572] usb 7-1: USB disconnect, device number 39 [ 819.502411][T15595] usb 10-1: new high-speed USB device number 123 using dummy_hcd [ 819.681776][T15595] usb 10-1: Using ep0 maxpacket: 32 [ 819.688882][T15595] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.700143][T15595] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 819.710183][T15595] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 819.719652][T15595] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.730613][T15595] usb 10-1: config 0 descriptor?? [ 819.737495][T15572] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 819.743391][T15595] hub 10-1:0.0: USB hub found [ 819.919339][T15572] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 819.929899][T15572] usb 9-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 819.943790][T15572] usb 9-1: config 2 interface 0 has no altsetting 0 [ 819.958965][T15572] usb 9-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 819.968485][T15572] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.977862][T15595] hub 10-1:0.0: 1 port detected [ 819.978273][T15572] usb 9-1: Product: syz [ 819.989476][T15572] usb 9-1: Manufacturer: syz [ 819.995331][T15572] usb 9-1: SerialNumber: syz [ 820.235826][T15572] ims_pcu 9-1:2.0: probe with driver ims_pcu failed with error -22 [ 820.250606][T15572] usb 9-1: USB disconnect, device number 79 [ 820.334265][T15573] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 820.494395][T15573] usb 7-1: Using ep0 maxpacket: 16 [ 820.501360][T15573] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 820.510576][T15573] usb 7-1: config 0 has no interface number 0 [ 820.521595][T15573] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 820.530816][T15573] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.538949][T15573] usb 7-1: Product: syz [ 820.543148][T15573] usb 7-1: Manufacturer: syz [ 820.547859][T15573] usb 7-1: SerialNumber: syz [ 820.555339][T15573] usb 7-1: config 0 descriptor?? [ 820.564712][T15573] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 820.624885][T15595] hub 10-1:0.0: activate --> -90 [ 821.220141][T29713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 821.230260][T29713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 821.243368][T15572] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 821.251307][T29713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 821.261798][T29713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 821.273896][T15595] hub 10-1:0.0: hub_ext_port_status failed (err = -71) [ 821.277397][T15573] gspca_spca1528: reg_w err -71 [ 821.292296][ T7242] usb 10-1: USB disconnect, device number 123 [ 821.298649][T15595] usb 10-1-port1: cannot reset (err = -71) [ 821.305669][T15595] usb 10-1-port1: Cannot enable. Maybe the USB cable is bad? [ 821.314226][T15595] usb 10-1-port1: attempt power cycle [ 821.318372][T15573] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71 [ 821.332436][T15573] usb 7-1: USB disconnect, device number 40 [ 821.416755][T15572] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.428464][T15572] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 821.438349][T15572] usb 9-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 821.447541][T15572] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.458095][T15572] usb 9-1: config 0 descriptor?? [ 821.469413][T15572] usbhid 9-1:0.0: can't add hid device: -22 [ 821.475586][T15572] usbhid 9-1:0.0: probe with driver usbhid failed with error -22 [ 821.685576][T15572] usb 9-1: USB disconnect, device number 80 [ 822.141459][ T7242] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 822.302006][ T7242] usb 10-1: Using ep0 maxpacket: 16 [ 822.316895][ T7242] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.328482][ T7242] usb 10-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 822.338008][ T7242] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.376799][ T7242] usb 10-1: config 0 descriptor?? [ 822.697671][T15595] usb 9-1: new high-speed USB device number 81 using dummy_hcd [ 822.828937][ T7242] hid-steam 0003:28DE:1102.0053: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.9-1/input0 [ 822.862769][T15595] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 822.873657][T29815] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 822.890463][T15595] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.904637][ T7242] hid-steam 0003:28DE:1102.0053: Steam Controller 'XXXXXXXXXX' connected [ 822.914559][T15595] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.930237][ T7242] input: Steam Controller as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:28DE:1102.0053/input/input82 [ 822.942746][T15595] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 822.972072][T15595] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 822.982565][T15595] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 822.998288][T15595] usb 9-1: Manufacturer: syz [ 823.018213][ T7242] hid-steam 0003:28DE:1102.0054: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.9-1/input0 [ 823.046605][T29771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.063311][T15595] usb 9-1: config 0 descriptor?? [ 823.093339][T29771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.117752][T16248] Bluetooth: hci4: unexpected event for opcode 0x1405 [ 823.232153][T15575] usb 10-1: USB disconnect, device number 2 [ 823.277140][T15575] hid-steam 0003:28DE:1102.0053: Steam Controller 'XXXXXXXXXX' disconnected [ 823.414316][ T7242] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 823.548089][T15595] hid_parser_main: 37 callbacks suppressed [ 823.548109][T15595] appleir 0003:05AC:8243.0055: unknown main item tag 0x0 [ 823.568417][T15595] appleir 0003:05AC:8243.0055: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 823.580748][ T7242] usb 7-1: Using ep0 maxpacket: 8 [ 823.588303][ T7242] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 823.600885][ T7242] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 823.610015][ T7242] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 823.619237][ T7242] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.828356][T29801] loop2: detected capacity change from 0 to 7 [ 823.839230][ T7242] usb 9-1: USB disconnect, device number 81 [ 823.859629][ C1] blk_print_req_error: 138 callbacks suppressed [ 823.859649][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 823.868912][T29870] afs: Unknown parameter 'dyn' [ 823.882479][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 823.890757][T15575] usb 7-1: USB disconnect, device number 41 [ 823.891734][ C1] buffer_io_error: 138 callbacks suppressed [ 823.891756][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 823.916570][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 823.925889][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 823.938916][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 823.948171][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 823.959372][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 823.968681][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 823.987128][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 823.996505][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 825.331970][T29888] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 825.339539][T29888] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 825.345739][T29888] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 825.354597][T29888] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 825.361957][T29888] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 825.404969][T29888] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 825.681870][T15595] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 825.822660][T29947] netlink: 328 bytes leftover after parsing attributes in process `syz.7.4544'. [ 825.907702][T15595] usb 7-1: Using ep0 maxpacket: 32 [ 825.914852][T15595] usb 7-1: descriptor type invalid, skip [ 825.921498][T15595] usb 7-1: descriptor type invalid, skip [ 825.928736][T15595] usb 7-1: config 0 has an invalid interface number: 163 but max is 0 [ 825.936954][T15595] usb 7-1: config 0 has no interface number 0 [ 825.943198][T15595] usb 7-1: config 0 interface 163 has no altsetting 0 [ 825.953675][T15595] usb 7-1: New USB device found, idVendor=1b3d, idProduct=0133, bcdDevice=d4.b8 [ 825.963047][T15595] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.971423][T15595] usb 7-1: Product: syz [ 825.975649][T15595] usb 7-1: Manufacturer: syz [ 825.980266][T15595] usb 7-1: SerialNumber: syz [ 825.989430][T15595] usb 7-1: config 0 descriptor?? [ 826.045502][ T7242] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 826.223216][ T7242] usb 9-1: Using ep0 maxpacket: 32 [ 826.230421][T15595] ftdi_sio 7-1:0.163: FTDI USB Serial Device converter detected [ 826.239569][ T7242] usb 9-1: config 0 has an invalid interface number: 201 but max is 0 [ 826.247789][ T7242] usb 9-1: config 0 has no interface number 0 [ 826.254875][T15595] ftdi_sio ttyUSB0: unknown device type: 0xd4b8 [ 826.261793][ T7242] usb 9-1: config 0 interface 201 has no altsetting 0 [ 826.272155][T15595] usb 7-1: USB disconnect, device number 42 [ 826.279730][T15595] ftdi_sio 7-1:0.163: device disconnected [ 826.290219][ T7242] usb 9-1: New USB device found, idVendor=06e1, idProduct=0709, bcdDevice= 2.04 [ 826.299480][ T7242] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.313582][ T7242] usb 9-1: Product: syz [ 826.317864][ T7242] usb 9-1: Manufacturer: syz [ 826.322508][ T7242] usb 9-1: SerialNumber: syz [ 826.336470][ T7242] usb 9-1: config 0 descriptor?? [ 826.350842][ T7242] go7007 9-1:0.201: probe with driver go7007 failed with error -12 [ 826.573349][T15595] usb 9-1: USB disconnect, device number 82 [ 826.729889][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 826.919920][T30008] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 826.992417][T30009] vxcan1: tx drop: invalid da for name 0xfffffffffffffffc [ 827.029340][ T7242] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 827.194075][ T7242] usb 10-1: Invalid ep0 maxpacket: 64 [ 827.393697][ T7242] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 827.467657][T15575] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 827.499863][T16248] Bluetooth: hci3: command 0x0c1a tx timeout [ 827.501724][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 827.506269][T16248] Bluetooth: hci4: command 0x0c1a tx timeout [ 827.587527][ T7242] usb 10-1: Invalid ep0 maxpacket: 64 [ 827.593376][ T7242] usb usb10-port1: attempt power cycle [ 827.631358][T15575] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 827.641384][T15575] usb 9-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 827.651049][T15575] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.661718][T15575] usb 9-1: config 0 descriptor?? [ 827.970981][ T7242] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 827.997675][ T7242] usb 10-1: Invalid ep0 maxpacket: 64 [ 828.119457][T15575] lenovo 0003:17EF:6047.0056: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.8-1/input0 [ 828.142336][ T7242] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 828.180127][ T7242] usb 10-1: Invalid ep0 maxpacket: 64 [ 828.199180][ T7242] usb usb10-port1: unable to enumerate USB device [ 828.430255][T15573] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 828.535461][T30011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.544981][T30011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.580217][T15573] usb 7-1: device descriptor read/64, error -71 [ 828.769034][T15575] lenovo 0003:17EF:6047.0056: Fn-lock setting failed: -71 [ 828.781090][T15575] lenovo 0003:17EF:6047.0056: Sensitivity setting failed: -71 [ 828.799317][T15575] usb 9-1: USB disconnect, device number 83 [ 828.851767][T15573] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 829.018565][T15573] usb 7-1: device descriptor read/64, error -71 [ 829.137649][T15573] usb usb7-port1: attempt power cycle [ 829.500188][T15573] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 829.522714][T15573] usb 7-1: device descriptor read/8, error -71 [ 829.596538][T15572] usb 9-1: new high-speed USB device number 84 using dummy_hcd [ 829.724477][T16248] Bluetooth: hci1: command 0x0c1a tx timeout [ 829.758419][T15572] usb 9-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 829.767680][T15572] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.778512][T15572] usb 9-1: config 0 descriptor?? [ 829.789249][T15572] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 829.795758][T15573] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 829.821391][T15573] usb 7-1: device descriptor read/8, error -71 [ 829.939206][T15573] usb usb7-port1: unable to enumerate USB device [ 830.055096][T30067] tmpfs: Group quota inode hardlimit too large. [ 830.495036][ T7242] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 830.647408][T30056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.659398][T30056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.666987][ T7242] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 830.681999][ T7242] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.700686][ T7242] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 830.709765][T15572] gspca_sunplus: reg_w_riv err -71 [ 830.711240][ T7242] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 830.716931][T15572] sunplus 9-1:0.0: probe with driver sunplus failed with error -71 [ 830.747366][T15572] usb 9-1: USB disconnect, device number 84 [ 830.752320][ T7242] usb 10-1: Manufacturer: syz [ 830.774296][ T7242] usb 10-1: config 0 descriptor?? [ 830.858172][ T7242] rc_core: IR keymap rc-hauppauge not found [ 830.866340][ T7242] Registered IR keymap rc-empty [ 830.873569][ T7242] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 830.887324][ T7242] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input83 [ 831.023851][T30073] syzkaller1: entered promiscuous mode [ 831.030490][T30073] syzkaller1: entered allmulticast mode [ 831.125043][T15595] usb 10-1: USB disconnect, device number 7 [ 831.339419][ T7242] usb 9-1: new high-speed USB device number 85 using dummy_hcd [ 831.463541][T30148] random: crng reseeded on system resumption [ 831.502922][ T7242] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 831.513770][ T7242] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 831.526521][ T7242] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 831.535897][ T7242] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 831.544238][ T7242] usb 9-1: SerialNumber: syz [ 831.768521][T30128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.784392][T30128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.797172][T30128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.808678][T30128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.817866][T15572] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 831.824178][T30128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.834752][T30128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.844967][T30128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.854997][T30128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.866118][T30128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.875324][T30128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.903068][ T7242] usb 9-1: 0:2 : does not exist [ 831.910732][ T7242] usb 9-1: unit 5 not found! [ 831.929238][ T7242] usb 9-1: USB disconnect, device number 85 [ 831.950407][T16248] Bluetooth: hci1: command 0x0c1a tx timeout [ 831.955006][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 831.959725][T15572] usb 7-1: device descriptor read/64, error -71 [ 832.034979][T15575] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 832.208084][T15575] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.222025][T15575] usb 10-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 832.232353][T15572] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 832.240124][T15575] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.248240][T15575] usb 10-1: Product: syz [ 832.252743][T15575] usb 10-1: Manufacturer: syz [ 832.257546][T15575] usb 10-1: SerialNumber: syz [ 832.265804][T15575] usb 10-1: config 0 descriptor?? [ 832.273650][T15575] usb 10-1: ucan: probing device on interface #0 [ 832.280043][T15575] usb 10-1: ucan: invalid EP count (0) [ 832.286036][T15575] usb 10-1: ucan: probe failed; try to update the device firmware [ 832.398744][T15572] usb 7-1: device descriptor read/64, error -71 [ 832.511659][T30156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.517512][T15572] usb usb7-port1: attempt power cycle [ 832.525793][T30156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.641565][T15563] usb 10-1: USB disconnect, device number 8 [ 832.721124][T15575] usb 9-1: new high-speed USB device number 86 using dummy_hcd [ 832.744297][T30220] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4568'. [ 832.758439][T30220] loop2: detected capacity change from 0 to 7 [ 832.768042][T30220] Dev loop2: unable to read RDB block 7 [ 832.775243][T30220] loop2: unable to read partition table [ 832.781400][T30220] loop2: partition table beyond EOD, truncated [ 832.788151][T30220] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 832.800048][T30220] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4568'. [ 832.870087][T15575] usb 9-1: device descriptor read/64, error -71 [ 832.894775][T15572] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 832.932178][T15572] usb 7-1: device descriptor read/8, error -71 [ 833.125514][T15575] usb 9-1: new high-speed USB device number 87 using dummy_hcd [ 833.200284][T15572] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 833.223251][T15572] usb 7-1: device descriptor read/8, error -71 [ 833.264481][T15575] usb 9-1: device descriptor read/64, error -71 [ 833.340378][T15572] usb usb7-port1: unable to enumerate USB device [ 833.379553][T30244] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 833.390542][T15575] usb usb9-port1: attempt power cycle [ 833.395883][T30244] input: syz1 as /devices/virtual/input/input84 [ 833.767164][T15575] usb 9-1: new high-speed USB device number 88 using dummy_hcd [ 833.789400][T15575] usb 9-1: device descriptor read/8, error -71 [ 834.056681][T15575] usb 9-1: new high-speed USB device number 89 using dummy_hcd [ 834.089796][T15575] usb 9-1: device descriptor read/8, error -71 [ 834.210513][T15575] usb usb9-port1: unable to enumerate USB device [ 834.302387][ T7481] bridge_slave_1: left allmulticast mode [ 834.309196][ T7481] bridge_slave_1: left promiscuous mode [ 834.340247][ T7481] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.351781][ T7481] bridge_slave_0: left allmulticast mode [ 834.357941][ T7481] bridge_slave_0: left promiscuous mode [ 834.363922][ T7481] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.373663][T16248] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 834.580798][ T7481] dvmrp0 (unregistering): left allmulticast mode [ 834.644141][T15563] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 834.826937][T15563] usb 10-1: Using ep0 maxpacket: 8 [ 834.834379][T15563] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 834.845280][T15563] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 834.855946][T15563] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 834.865510][T15563] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.942587][ T7481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 834.953394][ T7481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 834.967812][ T7481] bond0 (unregistering): Released all slaves [ 835.114242][T15563] usb 10-1: USB disconnect, device number 9 [ 835.301254][ T7481] hsr_slave_1: left promiscuous mode [ 835.484804][T15575] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 835.640628][T15575] usb 7-1: device descriptor read/64, error -71 [ 835.870366][ T7481] team0 (unregistering): Port device team_slave_1 removed [ 835.882895][T30335] input: syz0 as /devices/virtual/input/input85 [ 835.895859][T15575] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 836.012452][ T7481] team0 (unregistering): Port device team_slave_0 removed [ 836.066596][T15575] usb 7-1: device descriptor read/64, error -71 [ 836.109397][T15572] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 836.204711][T15575] usb usb7-port1: attempt power cycle [ 836.280542][T15572] usb 10-1: device descriptor read/64, error -71 [ 836.434567][T15563] usb 9-1: new high-speed USB device number 90 using dummy_hcd [ 836.540649][T15572] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 836.584518][T15575] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 836.612855][T15575] usb 7-1: device descriptor read/8, error -71 [ 836.618352][T15563] usb 9-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 836.630756][T15563] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.638917][T15563] usb 9-1: Product: syz [ 836.643118][T15563] usb 9-1: Manufacturer: syz [ 836.652218][T15563] usb 9-1: SerialNumber: syz [ 836.678668][T15563] r8152-cfgselector 9-1: Unknown version 0x0000 [ 836.685019][T15563] r8152-cfgselector 9-1: config 0 descriptor?? [ 836.688919][T15572] usb 10-1: device descriptor read/64, error -71 [ 836.816998][T15572] usb usb10-port1: attempt power cycle [ 836.869734][T15575] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 836.914197][T15575] usb 7-1: device descriptor read/8, error -71 [ 837.049936][T15575] usb usb7-port1: unable to enumerate USB device [ 837.169904][T30341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.187373][T30341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.189657][T15572] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 837.219798][T15563] r8152-cfgselector 9-1: Unknown version 0x0000 [ 837.229705][T15572] usb 10-1: device descriptor read/8, error -71 [ 837.230238][T15563] r8152-cfgselector 9-1: bad CDC descriptors [ 837.255564][T15563] r8152-cfgselector 9-1: USB disconnect, device number 90 [ 837.499923][T15572] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 837.524676][T15572] usb 10-1: device descriptor read/8, error -71 [ 837.649916][T15572] usb usb10-port1: unable to enumerate USB device [ 838.536834][ T7481] IPVS: stop unused estimator thread 0... [ 838.666709][T16248] Bluetooth: hci1: unexpected event for opcode 0x0c46 [ 838.847321][T15563] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 838.922289][T15572] usb 9-1: new full-speed USB device number 91 using dummy_hcd [ 838.998357][T15563] usb 7-1: device descriptor read/64, error -71 [ 839.093344][T15572] usb 9-1: not running at top speed; connect to a high speed hub [ 839.106930][T15572] usb 9-1: config 95 has an invalid interface number: 1 but max is 0 [ 839.116670][T15572] usb 9-1: config 95 has no interface number 0 [ 839.122903][T15572] usb 9-1: config 95 interface 1 has no altsetting 0 [ 839.143592][T15572] usb 9-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 839.153091][T15572] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.161923][T15572] usb 9-1: Product: syz [ 839.166187][T15572] usb 9-1: Manufacturer: syz [ 839.171495][T15572] usb 9-1: SerialNumber: syz [ 839.264439][T15563] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 839.407831][T15563] usb 7-1: device descriptor read/64, error -71 [ 839.463153][T15572] usb 9-1: USB disconnect, device number 91 [ 839.518702][ T7242] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 839.535678][T15563] usb usb7-port1: attempt power cycle [ 839.556307][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 839.681532][ T7242] usb 10-1: Using ep0 maxpacket: 32 [ 839.688510][ T7242] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.699695][ T7242] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 839.709776][ T7242] usb 10-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 839.719052][ T7242] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.729612][ T7242] usb 10-1: config 0 descriptor?? [ 839.739552][ T7242] usbhid 10-1:0.0: can't add hid device: -22 [ 839.746463][ T7242] usbhid 10-1:0.0: probe with driver usbhid failed with error -22 [ 839.895524][T15563] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 839.917537][T15563] usb 7-1: device descriptor read/8, error -71 [ 840.091644][T30490] random: crng reseeded on system resumption [ 840.106442][T30490] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4594'. [ 840.175430][T15563] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 840.195950][T15563] usb 7-1: device descriptor read/8, error -71 [ 840.268668][T30498] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 840.324215][T15563] usb usb7-port1: unable to enumerate USB device [ 840.783287][T15563] usb 9-1: new high-speed USB device number 92 using dummy_hcd [ 840.943546][T15563] usb 9-1: Using ep0 maxpacket: 32 [ 840.950426][T15563] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 840.958944][T15563] usb 9-1: config 0 has no interface number 0 [ 840.965124][T15563] usb 9-1: config 0 interface 184 has no altsetting 0 [ 840.974454][T15563] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 840.983766][T15563] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.992558][T15563] usb 9-1: Product: syz [ 840.996791][T15563] usb 9-1: Manufacturer: syz [ 841.001496][T15563] usb 9-1: SerialNumber: syz [ 841.009169][T15563] usb 9-1: config 0 descriptor?? [ 841.017683][T15563] smsc75xx v1.0.0 [ 841.666918][T15563] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 841.678065][T15563] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 842.216452][T15575] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 842.361042][T15595] usb 10-1: USB disconnect, device number 14 [ 842.376864][T15575] usb 7-1: Using ep0 maxpacket: 8 [ 842.392154][T15575] usb 7-1: config 8 has an invalid interface number: 176 but max is 3 [ 842.400798][T15575] usb 7-1: config 8 has an invalid interface number: 186 but max is 3 [ 842.415707][T15575] usb 7-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 842.424664][T15575] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 842.434978][T15575] usb 7-1: config 8 has 2 interfaces, different from the descriptor's value: 4 [ 842.444193][T15575] usb 7-1: config 8 has no interface number 0 [ 842.450307][T15575] usb 7-1: config 8 has no interface number 1 [ 842.456864][T15575] usb 7-1: config 8 interface 176 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 842.468006][T15575] usb 7-1: config 8 interface 176 altsetting 4 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 842.479309][T15575] usb 7-1: config 8 interface 176 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 842.490451][T15575] usb 7-1: config 8 interface 176 altsetting 4 has an endpoint descriptor with address 0x3F, changing to 0xF [ 842.502184][T15575] usb 7-1: config 8 interface 176 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 842.513195][T15575] usb 7-1: config 8 interface 176 altsetting 4 bulk endpoint 0x5 has invalid maxpacket 1023 [ 842.524377][T15575] usb 7-1: config 8 interface 176 altsetting 4 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 842.537996][T15575] usb 7-1: config 8 interface 186 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 842.548970][T15575] usb 7-1: config 8 interface 186 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 842.560516][T15563] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 842.561531][T15575] usb 7-1: config 8 interface 186 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 842.589190][T15563] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 842.602157][T15563] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 842.614427][T15563] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 842.615580][T15575] usb 7-1: config 8 interface 186 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 842.633080][T15563] usb 9-1: USB disconnect, device number 92 [ 842.643149][T15575] usb 7-1: config 8 interface 186 altsetting 5 endpoint 0xB has invalid maxpacket 1344, setting to 64 [ 842.655243][T15575] usb 7-1: config 8 interface 186 altsetting 5 has 7 endpoint descriptors, different from the interface descriptor's value: 10 [ 842.673462][T15575] usb 7-1: config 8 interface 176 has no altsetting 0 [ 842.681217][T15575] usb 7-1: config 8 interface 186 has no altsetting 0 [ 842.692826][T15575] usb 7-1: New USB device found, idVendor=0e8d, idProduct=00a5, bcdDevice=e2.dd [ 842.703764][T15575] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.712334][T15575] usb 7-1: Product: င [ 842.717216][T15575] usb 7-1: Manufacturer: 孕傖왬彩莶謆蔉⺔ڙ顁ﾡ뛿㍆ᡎ빕ꇴ疯鄐䨩壔玾免ফ돑퟊汯駲廠姰哇佇轻簪龙ꎢ鍟䬎읝ｮᄫ铹㦛仃懲ᧄ祈桬]쫐ꔜᱫ墱ἇ鑉⎃（켦螦៶剩㓍饦翁蕟⍭钦戬노⼈⥸쌪鹣﮿ꝔϞࢳぽ엢䌘瘬䲁帢紭銴俑䖷뙁봷ꏙឦ囗䢾챔艹칚嗳锌矪鐠韓囌쀬鱮๕낋眵覆ﺇ쳝 [ 842.754316][T15575] usb 7-1: SerialNumber: ⠉ [ 842.781322][T30536] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 842.843832][ T30] audit: type=1326 audit(1759784114.263:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30559 comm="syz.9.4603" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2a54f8eec9 code=0x0 [ 843.016124][T15575] option 7-1:8.176: GSM modem (1-port) converter detected [ 843.038194][T15575] usb 7-1: USB disconnect, device number 59 [ 843.056200][T15575] option 7-1:8.176: device disconnected [ 843.542487][T15563] usb 9-1: new high-speed USB device number 93 using dummy_hcd [ 843.714568][T15563] usb 9-1: Using ep0 maxpacket: 16 [ 843.722402][T15563] usb 9-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 843.737080][T15563] usb 9-1: config 1 interface 0 has no altsetting 0 [ 843.746339][T15563] usb 9-1: New USB device found, idVendor=045e, idProduct=076c, bcdDevice= 0.40 [ 843.755463][T15563] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.763795][T15563] usb 9-1: Product: syz [ 843.768258][T15563] usb 9-1: Manufacturer: 砂 [ 843.772929][T15563] usb 9-1: SerialNumber: syz [ 843.852647][T15595] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 844.013250][T15595] usb 7-1: device descriptor read/64, error -71 [ 844.205707][ T7242] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 844.240692][T30609] batadv_slave_1: entered promiscuous mode [ 844.275905][T30609] netlink: 92 bytes leftover after parsing attributes in process `syz.7.4610'. [ 844.293082][T15595] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 844.389859][ T7242] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.416472][ T7242] usb 10-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 844.434262][ T7242] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.459585][ T7242] usb 10-1: config 0 descriptor?? [ 844.465733][T15595] usb 7-1: device descriptor read/64, error -71 [ 844.487942][T30608] batadv_slave_1: left promiscuous mode [ 844.505128][T15563] usbhid 9-1:1.0: can't add hid device: -71 [ 844.511465][T15563] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 844.525002][T15563] usb 9-1: USB disconnect, device number 93 [ 844.602327][T15595] usb usb7-port1: attempt power cycle [ 844.925668][T30603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.935211][T30603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.976339][T15595] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 844.997953][T15595] usb 7-1: device descriptor read/8, error -71 [ 845.161183][T15575] usb 10-1: USB disconnect, device number 15 [ 845.254035][T15595] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 845.286927][T15595] usb 7-1: device descriptor read/8, error -71 [ 845.318019][T15574] usb 9-1: new high-speed USB device number 94 using dummy_hcd [ 845.414496][T15595] usb usb7-port1: unable to enumerate USB device [ 845.478294][T15574] usb 9-1: Using ep0 maxpacket: 32 [ 845.485541][T15574] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 845.494794][T15574] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.506411][T15574] usb 9-1: config 0 descriptor?? [ 845.729398][T15574] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 845.750917][T15574] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 845.765950][T15574] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 845.774454][T15574] usb 9-1: media controller created [ 845.802446][T15574] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 846.184218][T15575] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 846.344645][T15575] usb 10-1: Using ep0 maxpacket: 8 [ 846.354764][T15575] usb 10-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 846.364083][T15575] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.372520][T15575] usb 10-1: Product: syz [ 846.377045][T15575] usb 10-1: Manufacturer: syz [ 846.381828][T15575] usb 10-1: SerialNumber: syz [ 846.391423][T15575] usb 10-1: config 0 descriptor?? [ 846.400495][T15574] az6027: usb out operation failed. (-71) [ 846.406449][T15574] stb0899_attach: Driver disabled by Kconfig [ 846.416326][T15575] gspca_main: se401-2.14.0 probing 047d:5003 [ 846.422402][T15574] az6027: no front-end attached [ 846.422402][T15574] [ 846.429973][T15574] az6027: usb out operation failed. (-71) [ 846.435881][T15574] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 846.446531][T15574] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input87 [ 846.462549][T15574] dvb-usb: schedule remote query interval to 400 msecs. [ 846.472369][T15574] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 846.485427][T15574] usb 9-1: USB disconnect, device number 94 [ 846.542378][T15574] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 846.846149][T15575] gspca_se401: Wrong descriptor type [ 847.194455][T30713] overlayfs: failed to resolve './file1': -2 [ 847.204351][T30713] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 847.243211][ T7242] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 847.403595][ T7242] usb 7-1: Using ep0 maxpacket: 16 [ 847.410505][ T7242] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.421594][ T7242] usb 7-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 847.430735][ T7242] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.440112][T30722] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.4615' sets config #-235 [ 847.443290][ T7242] usb 7-1: config 0 descriptor?? [ 847.521265][ T5910] usb 9-1: new high-speed USB device number 95 using dummy_hcd [ 847.688619][ T7242] usbhid 7-1:0.0: can't add hid device: -71 [ 847.696247][ T7242] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 847.704123][ T5910] usb 9-1: Using ep0 maxpacket: 16 [ 847.712081][ T7242] usb 7-1: USB disconnect, device number 64 [ 847.720652][ T5910] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 847.736995][ T5910] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.748828][ T5910] usb 9-1: config 0 descriptor?? [ 847.757908][ T5910] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 847.766914][ T5910] usb 9-1: Detected FT4232H [ 847.970389][ T5910] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 847.979240][ T5910] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 847.988982][ T5910] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 848.009034][ T5910] usb 9-1: USB disconnect, device number 95 [ 848.020882][ T5910] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 848.034097][ T5910] ftdi_sio 9-1:0.0: device disconnected [ 848.366336][T30763] Invalid logical block size (6) [ 848.697698][ T5910] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 848.815351][T15574] usb 9-1: new high-speed USB device number 96 using dummy_hcd [ 848.879509][ T5910] usb 7-1: Using ep0 maxpacket: 8 [ 848.889045][ T5910] usb 7-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 848.898300][ T5910] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.909284][ T5910] usb 7-1: config 0 descriptor?? [ 848.955058][T15574] usb 9-1: device descriptor read/64, error -71 [ 849.146814][T16248] Bluetooth: hci1: command 0x0c1a tx timeout [ 849.151132][T15575] usb 10-1: USB disconnect, device number 16 [ 849.204138][T30790] batadv_slave_1: entered promiscuous mode [ 849.213950][T15574] usb 9-1: new high-speed USB device number 97 using dummy_hcd [ 849.241950][T30790] netlink: 92 bytes leftover after parsing attributes in process `syz.9.4630'. [ 849.371437][T15574] usb 9-1: device descriptor read/64, error -71 [ 849.378541][ T5910] magicmouse 0003:05AC:0269.0058: hidraw0: USB HID v0.05 Device [HID 05ac:0269] on usb-dummy_hcd.6-1/input0 [ 849.411523][T30789] batadv_slave_1: left promiscuous mode [ 849.501620][T15574] usb usb9-port1: attempt power cycle [ 849.591624][T15575] usb 7-1: USB disconnect, device number 65 [ 849.820687][ T5910] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 849.863401][T15574] usb 9-1: new high-speed USB device number 98 using dummy_hcd [ 849.885433][T15574] usb 9-1: device descriptor read/8, error -71 [ 850.013246][ T5910] usb 10-1: Using ep0 maxpacket: 16 [ 850.020373][ T5910] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 850.031581][ T5910] usb 10-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 850.044685][ T5910] usb 10-1: config 0 interface 0 has no altsetting 0 [ 850.051479][ T5910] usb 10-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 850.060805][ T5910] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.073677][ T5910] usb 10-1: config 0 descriptor?? [ 850.142542][T15574] usb 9-1: new high-speed USB device number 99 using dummy_hcd [ 850.164766][T15574] usb 9-1: device descriptor read/8, error -71 [ 850.280908][T15574] usb usb9-port1: unable to enumerate USB device [ 850.520462][ T5910] waltop 0003:172F:0034.0059: unknown main item tag 0x0 [ 850.528799][ T5910] waltop 0003:172F:0034.0059: unknown main item tag 0x0 [ 850.535815][ T5910] waltop 0003:172F:0034.0059: unknown main item tag 0x0 [ 850.543163][ T5910] waltop 0003:172F:0034.0059: unknown main item tag 0x0 [ 850.550242][ T5910] waltop 0003:172F:0034.0059: unknown main item tag 0x0 [ 850.560446][ T5910] waltop 0003:172F:0034.0059: hidraw0: USB HID v0.05 Device [HID 172f:0034] on usb-dummy_hcd.9-1/input0 [ 850.622791][T15574] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 850.734722][T15575] usb 10-1: USB disconnect, device number 17 [ 850.789881][T15574] usb 7-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 850.799469][T15574] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.807751][T15574] usb 7-1: Product: syz [ 850.811952][T15574] usb 7-1: Manufacturer: syz [ 850.817056][T15574] usb 7-1: SerialNumber: syz [ 851.393995][T16248] Bluetooth: hci2: unexpected event for opcode 0x0c46 [ 851.804938][T15563] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 851.836893][T30881] batadv_slave_1: entered promiscuous mode [ 851.856992][T30880] batadv_slave_1: left promiscuous mode [ 851.994500][T15563] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 852.004048][T15563] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.012646][T15563] usb 10-1: Product: syz [ 852.024248][T15563] usb 10-1: Manufacturer: syz [ 852.029003][T15563] usb 10-1: SerialNumber: syz [ 852.058517][T15563] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 852.096318][ T5910] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 852.312740][T15575] usb 9-1: new high-speed USB device number 100 using dummy_hcd [ 852.472974][T15575] usb 9-1: Using ep0 maxpacket: 8 [ 852.480551][T15575] usb 9-1: config 0 has an invalid interface number: 96 but max is 0 [ 852.489707][T15575] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 852.499950][T15575] usb 9-1: config 0 has no interface number 0 [ 852.506255][T15575] usb 9-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 852.517422][T15575] usb 9-1: config 0 interface 96 altsetting 3 endpoint 0x88 has invalid wMaxPacketSize 0 [ 852.527484][T15575] usb 9-1: config 0 interface 96 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 852.540614][T15575] usb 9-1: config 0 interface 96 has no altsetting 0 [ 852.555290][T15575] usb 9-1: New USB device found, idVendor=0b57, idProduct=76aa, bcdDevice=46.5f [ 852.565843][T15575] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.574180][T15575] usb 9-1: Product: syz [ 852.578433][T15575] usb 9-1: Manufacturer: syz [ 852.583609][T15575] usb 9-1: SerialNumber: syz [ 852.592072][T15575] usb 9-1: config 0 descriptor?? [ 852.742971][T15576] usb 10-1: USB disconnect, device number 18 [ 852.832321][T15575] usb 9-1: USB disconnect, device number 100 [ 853.253836][ T5910] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 853.261353][ T5910] ath9k_htc: Failed to initialize the device [ 853.269948][T15576] usb 10-1: ath9k_htc: USB layer deinitialized [ 853.441756][T30921] netlink: 'syz.8.4644': attribute type 11 has an invalid length. [ 853.539052][T15574] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 853.557642][T15574] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 853.597638][T16248] Bluetooth: hci1: unexpected event for opcode 0x0c46 [ 853.630199][T15574] usb 7-1: USB disconnect, device number 66 [ 853.768502][ T5910] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 853.806047][T30957] kvm: user requested TSC rate below hardware speed [ 853.917742][ T5910] usb 10-1: device descriptor read/64, error -71 [ 853.930847][T30966] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4652'. [ 854.185190][ T5910] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 854.325558][ T5910] usb 10-1: device descriptor read/64, error -71 [ 854.409259][T15595] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 854.434249][T16248] Bluetooth: hci3: unexpected event for opcode 0x0c46 [ 854.444654][ T5910] usb usb10-port1: attempt power cycle [ 854.614901][T15595] usb 7-1: Using ep0 maxpacket: 16 [ 854.655953][T15595] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 854.664204][T15595] usb 7-1: config 0 has no interface number 0 [ 854.680923][T15595] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 854.695234][T15595] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 854.710290][T15595] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 854.720096][T15595] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.728143][T15595] usb 7-1: Product: syz [ 854.733110][T15595] usb 7-1: Manufacturer: syz [ 854.737745][T15595] usb 7-1: SerialNumber: syz [ 854.751794][T15595] usb 7-1: config 0 descriptor?? [ 854.757850][T30977] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 854.768178][T30977] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 854.832649][ T5910] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 854.880251][ T5910] usb 10-1: device descriptor read/8, error -71 [ 854.997805][T30977] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 855.007037][T30977] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 855.157654][ T5910] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 855.180131][ T5910] usb 10-1: device descriptor read/8, error -71 [ 855.299010][ T5910] usb usb10-port1: unable to enumerate USB device [ 855.762687][T31022] usb usb8: usbfs: process 31022 (syz.8.4664) did not claim interface 0 before use [ 855.838288][T16248] Bluetooth: hci1: unexpected event for opcode 0x0c46 [ 856.183157][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 856.665861][T15575] usb 9-1: new high-speed USB device number 101 using dummy_hcd [ 856.804571][T15575] usb 9-1: device descriptor read/64, error -71 [ 857.061281][T15575] usb 9-1: new high-speed USB device number 102 using dummy_hcd [ 857.200305][T15575] usb 9-1: device descriptor read/64, error -71 [ 857.264435][T15574] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 857.318256][T15575] usb usb9-port1: attempt power cycle [ 857.382959][T15595] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 857.409935][T15595] asix 7-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 857.422224][T15595] asix 7-1:0.251: probe with driver asix failed with error -71 [ 857.431708][T15574] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 857.441953][T15595] usb 7-1: USB disconnect, device number 67 [ 857.458850][T15574] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 857.470496][T15574] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 857.485428][T15574] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 857.496294][T15574] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 857.517621][T15574] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 857.530647][T15574] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 857.541409][T15574] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 857.549693][T15574] usb 10-1: SerialNumber: syz [ 857.681598][T15575] usb 9-1: new high-speed USB device number 103 using dummy_hcd [ 857.704506][T15575] usb 9-1: device descriptor read/8, error -71 [ 857.781318][T31076] input: syz1 as /devices/virtual/input/input90 [ 857.798883][T31076] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4673'. [ 857.814605][T31096] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0 [ 857.835791][T31076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.845026][T31076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.927359][T15595] usb 10-1: USB disconnect, device number 23 [ 857.973607][T15575] usb 9-1: new high-speed USB device number 104 using dummy_hcd [ 858.004010][T15575] usb 9-1: device descriptor read/8, error -71 [ 858.120365][T15575] usb usb9-port1: unable to enumerate USB device [ 858.383619][T31124] trusted_key: encrypted_key: insufficient parameters specified [ 858.409793][T15575] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 858.574404][T15575] usb 7-1: Using ep0 maxpacket: 16 [ 858.621560][T15575] usb 7-1: unable to get BOS descriptor or descriptor too short [ 858.631759][T15575] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 858.651778][T15575] usb 7-1: can't read configurations, error -71 [ 859.769385][T16248] Bluetooth: hci2: unexpected event for opcode 0x0c46 [ 859.778410][T15575] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 859.948944][T15575] usb 7-1: Using ep0 maxpacket: 32 [ 859.957607][T15575] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 859.967385][T15575] usb 7-1: config 0 has no interface number 0 [ 859.974794][T15575] usb 7-1: config 0 interface 184 has no altsetting 0 [ 859.998830][T15575] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 860.009621][T15574] usb 9-1: new high-speed USB device number 105 using dummy_hcd [ 860.019333][T15575] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.031678][T15575] usb 7-1: Product: syz [ 860.037845][T15575] usb 7-1: Manufacturer: syz [ 860.044006][T15575] usb 7-1: SerialNumber: syz [ 860.058403][T15575] usb 7-1: config 0 descriptor?? [ 860.076266][T15575] smsc75xx v1.0.0 [ 860.195041][T15574] usb 9-1: Using ep0 maxpacket: 32 [ 860.202241][T15574] usb 9-1: config 0 has no interfaces? [ 860.210272][T15574] usb 9-1: New USB device found, idVendor=054c, idProduct=087d, bcdDevice= a.2f [ 860.219629][T15574] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.227804][T15574] usb 9-1: Product: syz [ 860.232020][T15574] usb 9-1: Manufacturer: syz [ 860.236644][T15574] usb 9-1: SerialNumber: syz [ 860.245105][T15574] usb 9-1: config 0 descriptor?? [ 860.366090][T15595] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 860.530121][T15595] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 860.540487][T15595] usb 10-1: config 0 has no interfaces? [ 860.549020][T15595] usb 10-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 860.558244][T15595] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.567560][T15595] usb 10-1: Product: syz [ 860.572927][T15595] usb 10-1: Manufacturer: syz [ 860.577668][T15595] usb 10-1: SerialNumber: syz [ 860.585353][T15595] usb 10-1: config 0 descriptor?? [ 860.714777][T15575] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 860.725886][T15575] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 860.815183][T31194] sctp: [Deprecated]: syz.9.4689 (pid 31194) Use of int in maxseg socket option. [ 860.815183][T31194] Use struct sctp_assoc_value instead [ 860.870446][T15574] usb 10-1: USB disconnect, device number 24 [ 861.123300][T31222] netlink: 56 bytes leftover after parsing attributes in process `syz.9.4692'. [ 861.140849][T31222] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.178882][T31222] bridge_slave_0 (unregistering): left allmulticast mode [ 861.185987][T31222] bridge_slave_0 (unregistering): left promiscuous mode [ 861.195280][T31222] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.420010][T15575] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 861.433378][T15575] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 861.443948][T15575] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 861.453932][T15575] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 861.468718][T15575] usb 7-1: USB disconnect, device number 69 [ 862.333982][T15575] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 862.494423][T15575] usb 10-1: Using ep0 maxpacket: 16 [ 862.502877][T15575] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 862.511404][T15575] usb 10-1: config 0 has no interface number 0 [ 862.517734][T15575] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 862.531071][T15575] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 862.540536][T15575] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 862.548795][T15575] usb 10-1: Product: syz [ 862.553240][T15575] usb 10-1: SerialNumber: syz [ 862.563416][T15575] usb 10-1: config 0 descriptor?? [ 862.573597][T15575] cm109 10-1:0.8: invalid payload size 255, expected 4 [ 862.583861][T15575] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.8/input/input91 [ 862.906568][T31275] overlayfs: workdir and upperdir must be separate subtrees [ 862.978939][T31280] openvswitch: netlink: Actions may not be safe on all matching packets [ 862.991200][T15575] usb 9-1: USB disconnect, device number 105 [ 863.010296][ C0] cm109 10-1:0.8: cm109_urb_irq_callback: urb status -71 [ 863.010415][ T7242] usb 10-1: USB disconnect, device number 25 [ 863.017417][ C0] ------------[ cut here ]------------ [ 863.028945][ C0] URB ffff8880611f7200 submitted while active [ 863.036302][ C0] WARNING: drivers/usb/core/urb.c:380 at usb_submit_urb+0xf8c/0x18b0, CPU#0: syz-executor/23789 [ 863.046861][ C0] Modules linked in: [ 863.051688][ C0] CPU: 0 UID: 0 PID: 23789 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 863.061259][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 863.071326][ C0] RIP: 0010:usb_submit_urb+0xf8c/0x18b0 [ 863.076918][ C0] Code: 00 00 00 e8 f6 fe c6 fa e9 25 f1 ff ff e8 ec fe c6 fa c6 05 d7 86 8f 08 01 90 48 c7 c7 e0 12 12 8c 48 89 de e8 d5 6c 8a fa 90 <0f> 0b 90 90 e9 ec f0 ff ff e8 c6 fe c6 fa c6 05 07 d2 a5 08 01 41 [ 863.096580][ C0] RSP: 0018:ffffc90000007878 EFLAGS: 00010046 [ 863.102676][ C0] RAX: 07bb836e000d3600 RBX: ffff8880611f7200 RCX: 0000000000040000 [ 863.110671][ C0] RDX: ffffc90002171000 RSI: 0000000000016039 RDI: 000000000001603a [ 863.118693][ C0] RBP: 000000000000000f R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 863.126693][ C0] R10: dffffc0000000000 R11: ffffed10170c4853 R12: 0000000000000820 [ 863.134688][ C0] R13: ffff88807398c030 R14: ffff8880611f7208 R15: dffffc0000000000 [ 863.142939][ C0] FS: 0000555584502500(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000 [ 863.151883][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 863.158498][ C0] CR2: 000055558451d5c8 CR3: 00000000456fe000 CR4: 00000000003526f0 [ 863.166598][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 863.174607][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 863.182640][ C0] Call Trace: [ 863.185942][ C0] [ 863.188804][ C0] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 863.194209][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 863.200135][ C0] ? kcov_remote_start+0x97/0x7f0 [ 863.205188][ C0] cm109_urb_irq_callback+0x709/0xca0 [ 863.210590][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 863.215990][ C0] dummy_timer+0x85f/0x44c0 [ 863.220548][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 863.225972][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 863.230935][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 863.235916][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 863.240879][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 863.246128][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 863.251871][ C0] ? read_tsc+0x9/0x20 [ 863.255961][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 863.261799][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 863.266941][ C0] handle_softirqs+0x286/0x870 [ 863.271733][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 863.276650][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 863.281969][ C0] __irq_exit_rcu+0xca/0x1f0 [ 863.286583][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 863.291808][ C0] irq_exit_rcu+0x9/0x30 [ 863.296068][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 863.301721][ C0] [ 863.304672][ C0] [ 863.307615][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 863.313698][ C0] RIP: 0010:memset_orig+0x46/0xb0 [ 863.318744][ C0] Code: 75 74 48 89 d1 48 c1 e9 06 74 39 66 0f 1f 84 00 00 00 00 00 48 ff c9 48 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 <48> 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d8 0f 1f 84 00 [ 863.338389][ C0] RSP: 0018:ffffc9000de3f990 EFLAGS: 00000206 [ 863.344480][ C0] RAX: 0000000000000000 RBX: ffff88801b728000 RCX: 0000000000000005 [ 863.352466][ C0] RDX: 0000000000001000 RSI: 0000000000000000 RDI: ffff88801b728e80 [ 863.360586][ C0] RBP: 0000000000000c40 R08: ffffffff8f9e6377 R09: 0000000000000000 [ 863.368755][ C0] R10: ffff88801b728000 R11: fffffbfff1f3cc6f R12: ffff88813fe27140 [ 863.376754][ C0] R13: 0000000000001000 R14: 0000000000001000 R15: 00000000008e5e00 [ 863.384779][ C0] __kmalloc_noprof+0x3e7/0x7f0 [ 863.389667][ C0] ? kfree+0x4d/0x6d0 [ 863.393688][ C0] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 863.399440][ C0] tomoyo_realpath_from_path+0xe3/0x5d0 [ 863.405011][ C0] ? tomoyo_domain+0xd9/0x130 [ 863.409713][ C0] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 863.415379][ C0] tomoyo_path_number_perm+0x1e8/0x5a0 [ 863.420867][ C0] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 863.426877][ C0] ? __lock_acquire+0xab9/0xd20 [ 863.431817][ C0] ? __pfx_current_check_access_path+0x10/0x10 [ 863.437997][ C0] ? lookup_one_qstr_excl+0x1d8/0x360 [ 863.443402][ C0] tomoyo_path_mkdir+0xa8/0xe0 [ 863.448203][ C0] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 863.453705][ C0] ? __pfx_filename_create+0x10/0x10 [ 863.459032][ C0] security_path_mkdir+0x171/0x380 [ 863.464214][ C0] do_mkdirat+0x1bd/0x590 [ 863.468572][ C0] ? __pfx_do_mkdirat+0x10/0x10 [ 863.473446][ C0] ? getname_flags+0x1e5/0x540 [ 863.478245][ C0] __x64_sys_mkdirat+0x87/0xa0 [ 863.483032][ C0] do_syscall_64+0xfa/0xfa0 [ 863.487556][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 863.492778][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.498888][ C0] ? clear_bhb_loop+0x60/0xb0 [ 863.503588][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.509502][ C0] RIP: 0033:0x7ffb1338d617 [ 863.514039][ C0] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 863.533664][ C0] RSP: 002b:00007ffda50e8228 EFLAGS: 00000206 ORIG_RAX: 0000000000000102 [ 863.542099][ C0] RAX: ffffffffffffffda RBX: 00007ffda50e8280 RCX: 00007ffb1338d617 [ 863.550092][ C0] RDX: 00000000000001ff RSI: 00007ffda50e8280 RDI: 00000000ffffff9c [ 863.558086][ C0] RBP: 00007ffda50e826c R08: 0000000000000005 R09: 00007ffda50e7fc5 [ 863.566081][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000000000f7 [ 863.574068][ C0] R13: 0000000000000043 R14: 00000000000c7fad R15: 00007ffda50e82c0 [ 863.582104][ C0] [ 863.585173][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 863.592475][ C0] CPU: 0 UID: 0 PID: 23789 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 863.602039][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 863.612112][ C0] Call Trace: [ 863.615411][ C0] [ 863.618274][ C0] dump_stack_lvl+0x99/0x250 [ 863.622888][ C0] ? __asan_memcpy+0x40/0x70 [ 863.627598][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 863.632902][ C0] ? __pfx__printk+0x10/0x10 [ 863.637528][ C0] vpanic+0x237/0x6d0 [ 863.641538][ C0] ? __pfx_vpanic+0x10/0x10 [ 863.646081][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 863.651312][ C0] panic+0xb9/0xc0 [ 863.655054][ C0] ? __pfx_panic+0x10/0x10 [ 863.659510][ C0] __warn+0x334/0x4c0 [ 863.663524][ C0] ? usb_submit_urb+0xf8c/0x18b0 [ 863.668500][ C0] ? usb_submit_urb+0xf8c/0x18b0 [ 863.673482][ C0] report_bug+0x2be/0x4f0 [ 863.677928][ C0] ? usb_submit_urb+0xf8c/0x18b0 [ 863.682894][ C0] ? usb_submit_urb+0xf8c/0x18b0 [ 863.687854][ C0] ? usb_submit_urb+0xf8e/0x18b0 [ 863.692816][ C0] handle_bug+0x84/0x160 [ 863.697082][ C0] exc_invalid_op+0x1a/0x50 [ 863.701606][ C0] asm_exc_invalid_op+0x1a/0x20 [ 863.706476][ C0] RIP: 0010:usb_submit_urb+0xf8c/0x18b0 [ 863.712053][ C0] Code: 00 00 00 e8 f6 fe c6 fa e9 25 f1 ff ff e8 ec fe c6 fa c6 05 d7 86 8f 08 01 90 48 c7 c7 e0 12 12 8c 48 89 de e8 d5 6c 8a fa 90 <0f> 0b 90 90 e9 ec f0 ff ff e8 c6 fe c6 fa c6 05 07 d2 a5 08 01 41 [ 863.731774][ C0] RSP: 0018:ffffc90000007878 EFLAGS: 00010046 [ 863.737864][ C0] RAX: 07bb836e000d3600 RBX: ffff8880611f7200 RCX: 0000000000040000 [ 863.745853][ C0] RDX: ffffc90002171000 RSI: 0000000000016039 RDI: 000000000001603a [ 863.753846][ C0] RBP: 000000000000000f R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 863.761879][ C0] R10: dffffc0000000000 R11: ffffed10170c4853 R12: 0000000000000820 [ 863.769868][ C0] R13: ffff88807398c030 R14: ffff8880611f7208 R15: dffffc0000000000 [ 863.777878][ C0] ? usb_submit_urb+0xf8b/0x18b0 [ 863.782843][ C0] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 863.788236][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 863.794149][ C0] ? kcov_remote_start+0x97/0x7f0 [ 863.799199][ C0] cm109_urb_irq_callback+0x709/0xca0 [ 863.804607][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 863.810006][ C0] dummy_timer+0x85f/0x44c0 [ 863.814559][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 863.819973][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 863.824935][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 863.829894][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 863.834935][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 863.840172][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 863.845914][ C0] ? read_tsc+0x9/0x20 [ 863.850010][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 863.855887][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 863.861046][ C0] handle_softirqs+0x286/0x870 [ 863.865960][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 863.870777][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 863.876189][ C0] __irq_exit_rcu+0xca/0x1f0 [ 863.880810][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 863.886049][ C0] irq_exit_rcu+0x9/0x30 [ 863.890323][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 863.895985][ C0] [ 863.898928][ C0] [ 863.901880][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 863.907883][ C0] RIP: 0010:memset_orig+0x46/0xb0 [ 863.912937][ C0] Code: 75 74 48 89 d1 48 c1 e9 06 74 39 66 0f 1f 84 00 00 00 00 00 48 ff c9 48 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 <48> 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d8 0f 1f 84 00 [ 863.932663][ C0] RSP: 0018:ffffc9000de3f990 EFLAGS: 00000206 [ 863.938766][ C0] RAX: 0000000000000000 RBX: ffff88801b728000 RCX: 0000000000000005 [ 863.946842][ C0] RDX: 0000000000001000 RSI: 0000000000000000 RDI: ffff88801b728e80 [ 863.954830][ C0] RBP: 0000000000000c40 R08: ffffffff8f9e6377 R09: 0000000000000000 [ 863.962821][ C0] R10: ffff88801b728000 R11: fffffbfff1f3cc6f R12: ffff88813fe27140 [ 863.970811][ C0] R13: 0000000000001000 R14: 0000000000001000 R15: 00000000008e5e00 [ 863.978822][ C0] __kmalloc_noprof+0x3e7/0x7f0 [ 863.983699][ C0] ? kfree+0x4d/0x6d0 [ 863.987713][ C0] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 863.993469][ C0] tomoyo_realpath_from_path+0xe3/0x5d0 [ 863.999067][ C0] ? tomoyo_domain+0xd9/0x130 [ 864.003795][ C0] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 864.009457][ C0] tomoyo_path_number_perm+0x1e8/0x5a0 [ 864.014954][ C0] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 864.020971][ C0] ? __lock_acquire+0xab9/0xd20 [ 864.027910][ C0] ? __pfx_current_check_access_path+0x10/0x10 [ 864.034109][ C0] ? lookup_one_qstr_excl+0x1d8/0x360 [ 864.040050][ C0] tomoyo_path_mkdir+0xa8/0xe0 [ 864.044877][ C0] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 864.050441][ C0] ? __pfx_filename_create+0x10/0x10 [ 864.055851][ C0] security_path_mkdir+0x171/0x380 [ 864.061276][ C0] do_mkdirat+0x1bd/0x590 [ 864.065760][ C0] ? __pfx_do_mkdirat+0x10/0x10 [ 864.070649][ C0] ? getname_flags+0x1e5/0x540 [ 864.075535][ C0] __x64_sys_mkdirat+0x87/0xa0 [ 864.080472][ C0] do_syscall_64+0xfa/0xfa0 [ 864.085002][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 864.090246][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.096498][ C0] ? clear_bhb_loop+0x60/0xb0 [ 864.101374][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.107296][ C0] RIP: 0033:0x7ffb1338d617 [ 864.111744][ C0] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 864.131382][ C0] RSP: 002b:00007ffda50e8228 EFLAGS: 00000206 ORIG_RAX: 0000000000000102 [ 864.139824][ C0] RAX: ffffffffffffffda RBX: 00007ffda50e8280 RCX: 00007ffb1338d617 [ 864.147839][ C0] RDX: 00000000000001ff RSI: 00007ffda50e8280 RDI: 00000000ffffff9c [ 864.155841][ C0] RBP: 00007ffda50e826c R08: 0000000000000005 R09: 00007ffda50e7fc5 [ 864.163925][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000000000f7 [ 864.172002][ C0] R13: 0000000000000043 R14: 00000000000c7fad R15: 00007ffda50e82c0 [ 864.180010][ C0] [ 864.183400][ C0] Kernel Offset: disabled [ 864.187733][ C0] Rebooting in 86400 seconds..