last executing test programs: 4m47.630229216s ago: executing program 3 (id=926): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff03007e000c4441f75e4cd8da893c2e0b33b14651fe555b890f5003dc16b086840aba225f7de5b4e26f1244c77785bc50aef1490ecfc1d54fd7bfdc0e1cfc17793de54ece460434492bd76b6f57f4fd538348d487a098cdff916b06f496371fc9870ea708aeb2400290bd3c4fdb259c2fac21a39a1953a7a8805ddf0d19c3bfc9a2"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xa2) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000080)=0x3) (async) ioctl$EVIOCGRAB(r3, 0x40044590, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) syz_usb_connect$cdc_ncm(0x5, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011001020000202505a1a4400001020301090293000201fe10070904000001020d00000a24060001d4dc59c9af0524001c040d240f0100000000070008008106241a0200310a2407090800ff0101801524120200a317a88b045e4f01a607c0ffcb7e392a072400030007240aec219be8d2010e0105240103010905810320000908640904010000020d00000904010102020d00000905820208000706010905030208"], &(0x7f0000000540)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x25, 0x0, 0x5, 0x10, 0x9}, 0x72, &(0x7f0000000380)={0x5, 0xf, 0x72, 0x5, [@ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x10001, 0xf, 0x1, [0x18000, 0x3f00, 0xf0, 0x4100]}, @generic={0x2b, 0x10, 0x4, "15187833e5be4490e00335ca6280a383d6ae5db16b183e718752a47d8968239e30ef67827e984cc7"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "f3e2bcd2c2da0707a4b4de8f31ed07a0"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0x8, 0x5}, @wireless={0xb, 0x10, 0x1, 0x4, 0x23, 0xb, 0xf2, 0x10, 0xae}]}, 0x4, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xc07}}, {0x2b, &(0x7f0000000440)=@string={0x2b, 0x3, "d472a95c3cfb839a501e5d15745c2f7bd544425ab8f044445455be57ffa63c644ff6a16726ec2e9c80"}}, {0x64, &(0x7f0000000480)=@string={0x64, 0x3, "de2e8bd110005c690abab9a2b810cc939e349fd91869519340c37e9025787cc46d968123f99e961fdfa5a5449dd712e9ec82f530a3efe5dab22a8392c458a3dabd5276d76e703f6e0bd32a6c35b4c104a7c9093ce53f87c3a89113a8f9566805088a"}}]}) (async) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) writev(r2, &(0x7f0000000500)=[{&(0x7f0000000080)="2e9b690c07e03dd6446ce8880300000000", 0x11}, {&(0x7f0000000280)="8ac3", 0x2}], 0x2) 4m46.415828696s ago: executing program 3 (id=936): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000440)="9eb1d91a92dc7c8fff658bb539e2ffb332c9", 0x12}], 0x2}, 0x8000) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x5) fsmount(r1, 0x1, 0x91) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000680)={&(0x7f0000000100), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/88, 0x58}, {&(0x7f0000000200)=""/133, 0x85}, {&(0x7f0000000080)=""/58, 0x3a}, {&(0x7f00000002c0)=""/43, 0x2b}, {&(0x7f0000000340)=""/105, 0x69}, {&(0x7f0000000480)=""/201, 0xc9}, {&(0x7f0000000580)=""/203, 0xcb}], 0x7}, 0x80000040) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x5) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x887, 0x0, 0x1af}]}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) bind$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x2710}, 0x10) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000440)="9eb1d91a92dc7c8fff658bb539e2ffb332c9", 0x12}], 0x2}, 0x8000) (async) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r1, 0x0, 0x5) (async) fsmount(r1, 0x1, 0x91) (async) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) recvmsg$unix(r3, &(0x7f0000000680)={&(0x7f0000000100), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/88, 0x58}, {&(0x7f0000000200)=""/133, 0x85}, {&(0x7f0000000080)=""/58, 0x3a}, {&(0x7f00000002c0)=""/43, 0x2b}, {&(0x7f0000000340)=""/105, 0x69}, {&(0x7f0000000480)=""/201, 0xc9}, {&(0x7f0000000580)=""/203, 0xcb}], 0x7}, 0x80000040) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x5) (async) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x887, 0x0, 0x1af}]}) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) bind$vsock_stream(r7, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) (async) bind$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x2710}, 0x10) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) (async) 4m46.245268652s ago: executing program 3 (id=938): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) unshare(0x22020600) r1 = socket$tipc(0x1e, 0x2, 0x0) fremovexattr(r1, &(0x7f00000000c0)=@known='system.posix_acl_access\x00') capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) r2 = gettid() r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000500)="46dd93573829", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="2e0000002a00818a04fb7fec598f866b29924a6f130000005e14060800000000000000000f0000000280a71802dd", 0x2e}], 0x1}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) unshare(0x22020600) (async) socket$tipc(0x1e, 0x2, 0x0) (async) fremovexattr(r1, &(0x7f00000000c0)=@known='system.posix_acl_access\x00') (async) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) (async) gettid() (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000500)="46dd93573829", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$kcm(0x10, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="2e0000002a00818a04fb7fec598f866b29924a6f130000005e14060800000000000000000f0000000280a71802dd", 0x2e}], 0x1}, 0x0) (async) 4m46.217045141s ago: executing program 3 (id=939): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000001c0)=0x2001) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e000839a59434d90a2742a24e000000000000000000deef14b40028e27ebdfd74dafc20380003"], 0xfebe) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = fcntl$dupfd(r1, 0x0, r1) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00') bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000017d80)=0xf, 0x4) syz_open_dev$dri(&(0x7f0000000240), 0x1, 0x280000) mbind(&(0x7f000033f000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000017cc0)=0xd9, 0xcff, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) read$FUSE(r3, &(0x7f0000003800)={0x2020}, 0x2020) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x2c, 0x17, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 4m46.135637416s ago: executing program 3 (id=940): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 4m45.631414616s ago: executing program 3 (id=941): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="000000000000b09652a0b250eaf1019ee2f4a7cbb7ec7f8d39eb1cf8c86304f6beb67171f1f7c469457b09d5aff9c33e05742e8d018a2c57921f15c34bebfce590b24ddf9098931e3fb2847d807c458b509bbc1eb91cc256912dc7c2812eaf92fd4fb2e5915c9cf68c400c990c1851c61ceab1da3f1065522243f9196d79091c33941a2843"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003f000701feffffff00000000037c000004004280100001"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r3, 0x2285, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r4, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xc4) read$FUSE(r4, 0x0, 0x0) write$sndseq(r4, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x38) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x60, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x1e, {0x3, 0xd, 0x7, 0x1}}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x300, 0x2, 0x3, 0x0, {0x8000000000000000, 0xc, 0x0, 0xf, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x1, 0x10001, 0x9}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x6}]}, 0x60}}, 0x4000080) 4m45.499079204s ago: executing program 32 (id=941): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="000000000000b09652a0b250eaf1019ee2f4a7cbb7ec7f8d39eb1cf8c86304f6beb67171f1f7c469457b09d5aff9c33e05742e8d018a2c57921f15c34bebfce590b24ddf9098931e3fb2847d807c458b509bbc1eb91cc256912dc7c2812eaf92fd4fb2e5915c9cf68c400c990c1851c61ceab1da3f1065522243f9196d79091c33941a2843"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003f000701feffffff00000000037c000004004280100001"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r3, 0x2285, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r4, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xc4) read$FUSE(r4, 0x0, 0x0) write$sndseq(r4, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x38) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x60, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x1e, {0x3, 0xd, 0x7, 0x1}}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x300, 0x2, 0x3, 0x0, {0x8000000000000000, 0xc, 0x0, 0xf, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x1, 0x10001, 0x9}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x6}]}, 0x60}}, 0x4000080) 2m45.024025218s ago: executing program 0 (id=1778): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0xffff0000, 0x6, 0x9, 0x4, 0x7, "0000fd000000000009e49200", 0x802046, 0x200068e}) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="0f2673d6b6d6b2b7cfc0a8cbe63d7dc5e9e93699244a7d3a4932612bf85f422f20ced78c6a4c7d6cbd4fe2720ce30089a5c73215ceacababae7fb92457ff2abf6237b11d868e6a407aa0ce43a764b88677790e3198ec573089b32abfe445e9ade6ca589b4335a7a6b99d6ca1e2f1cea686e04a85fd10cebec98f735ff4d6a6490d4cb5c7cec9802abf98a106f0350ec1097fc490", 0x94}, {&(0x7f0000000400)="62da92c8902ecc0c71b8f20196ef10283fe07cf9f51a91f900b762158366d0ed7507951d2c3e81c63c168f0746b2e4b7227c81a409dff2c8e6bd7cec50b2595445deb5f435cde764ff156cd4ab6d5c3cb5e45e87a93bd7951d90e3bf5f7a4766816b3e47d9251424f78b0a483c78ea805ab0c9c1f8e7e4ba4bc1c06f6ad11da8099e4ccf70a64970843586f48df43a5a5ac09315f5bcb85805ad0056743a499ffbfd650974bc14db8c0609ad7569e6689c6e64cea9be8d1eb22bd2f11f35a8988136ab04f2f46d09d6329dee04f7cf43b64e21fd3be4ef6599c30e59198377248e430a380bf0e69f03e9b9da", 0xec}, {&(0x7f0000000300)="ba2386fa7f602027e79990a87967f74ef3c5eb368cefb1c2125a2dfc371a25d7eea12abe0797e82edc71850e7593048a1333efa36bcad2522273a8d0a88f8da745f051b97c998c06f1966e3cb7d86410ea196bab3825c51d04cfa6e94ffea234c4409f740394acd2e2ae650b20547355280e1b7ba912475de9058cc938a718b7101d1c", 0x83}], 0x3) (async) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000003c0)={0x4, 0x3}, 0x2) (async) mkdir(0x0, 0x80) (async) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) (async) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac0080002000f001a00050004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) 2m44.933244788s ago: executing program 0 (id=1779): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001d002106000000000000000007d5"], 0x34}}, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x1d2) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfd, 0x200}, 0xc) open_tree(r1, &(0x7f0000000180)='./file0\x00', 0x180100) syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000d3ccb510b113420029000009040f0001e711e10009058300ff0303070400"/45], 0x0) r2 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 2m41.892763502s ago: executing program 0 (id=1802): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000980), 0x80040, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$sock(r1, &(0x7f0000000380)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, 0x4}, 0x80, 0x0}, 0x4000000) (async) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006300)={0x14, 0x14, 0x1, 0x70bd2a, 0x25dfdbfe, {0x2b, 0x28}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x840) (async) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x1) 2m41.814313926s ago: executing program 0 (id=1803): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000840)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_read_def_link_policy={{0x6}, {0x0, 0x4}}}}, 0x9) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000f40)=[@wrmsr={0x65, 0x20, {0x40000106, 0x8}}], 0x20}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 2m41.649550091s ago: executing program 0 (id=1805): fanotify_init(0xf00, 0x1) (async) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) (async) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) (async) msgrcv(0x0, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831373f00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x20000090) 2m40.864662843s ago: executing program 0 (id=1810): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x2a, 0x9, 0xfffffffe, 0x25dfdbfd, {0x2}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="a6e6c8fd"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1400, 0xe000, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0x3e) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x125042, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth1\x00', &(0x7f0000000100)=@ethtool_cmd={0xa, 0xc, 0x8, 0x7, 0x2, 0xc, 0x3e, 0x9, 0x10, 0x7, 0x9, 0xfffffff9, 0x401, 0x4e, 0xe5, 0x1, [0x9, 0xfffffda0]}}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0x4c7, 0x8, 0x7, 0xa, 0x100, 0x75, 0x1, 0x1, 0x6a, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x8, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file3\x00', &(0x7f0000000000)='ocfs2\x00', 0x0, &(0x7f0000000380)='acl') socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x2a, 0x9, 0xfffffffe, 0x25dfdbfd, {0x2}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="a6e6c8fd"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000040)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1400, 0xe000, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0x3e) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x125042, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth1\x00', &(0x7f0000000100)=@ethtool_cmd={0xa, 0xc, 0x8, 0x7, 0x2, 0xc, 0x3e, 0x9, 0x10, 0x7, 0x9, 0xfffffff9, 0x401, 0x4e, 0xe5, 0x1, [0x9, 0xfffffda0]}}) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0x4c7, 0x8, 0x7, 0xa, 0x100, 0x75, 0x1, 0x1, 0x6a, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x8, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) (async) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file3\x00', &(0x7f0000000000)='ocfs2\x00', 0x0, &(0x7f0000000380)='acl') (async) 2m25.837633382s ago: executing program 33 (id=1810): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x2a, 0x9, 0xfffffffe, 0x25dfdbfd, {0x2}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="a6e6c8fd"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1400, 0xe000, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0x3e) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x125042, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth1\x00', &(0x7f0000000100)=@ethtool_cmd={0xa, 0xc, 0x8, 0x7, 0x2, 0xc, 0x3e, 0x9, 0x10, 0x7, 0x9, 0xfffffff9, 0x401, 0x4e, 0xe5, 0x1, [0x9, 0xfffffda0]}}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0x4c7, 0x8, 0x7, 0xa, 0x100, 0x75, 0x1, 0x1, 0x6a, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x8, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file3\x00', &(0x7f0000000000)='ocfs2\x00', 0x0, &(0x7f0000000380)='acl') socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x2a, 0x9, 0xfffffffe, 0x25dfdbfd, {0x2}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="a6e6c8fd"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000040)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1400, 0xe000, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0x3e) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x125042, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth1\x00', &(0x7f0000000100)=@ethtool_cmd={0xa, 0xc, 0x8, 0x7, 0x2, 0xc, 0x3e, 0x9, 0x10, 0x7, 0x9, 0xfffffff9, 0x401, 0x4e, 0xe5, 0x1, [0x9, 0xfffffda0]}}) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0x4c7, 0x8, 0x7, 0xa, 0x100, 0x75, 0x1, 0x1, 0x6a, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x8, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) (async) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file3\x00', &(0x7f0000000000)='ocfs2\x00', 0x0, &(0x7f0000000380)='acl') (async) 2m6.8534058s ago: executing program 4 (id=1989): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fallocate(r2, 0x41, 0x9, 0xc81c) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x7) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x42) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x80) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000380), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') poll(&(0x7f0000000240)=[{r6, 0x2000}], 0x1, 0xffffffffffbffff8) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x56, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000c}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 2m6.559828188s ago: executing program 4 (id=1992): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000002c0)={0xfffffffc, {{0xa, 0x4e21, 0x3, @private2, 0x4}}, {{0xa, 0x4e23, 0x10001, @loopback, 0x7}}}, 0x108) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x182dc2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000100)={r1, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "3384020bbe82b398000000000000000000001d0ec0c1b4e9b1c4369d03740100ceaac594b1d6d741dd17c1c50d38ef2a565ef1e80000000058966500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f00", [0x9, 0x400]}}) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x4, 0x420000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@empty, @in6}}, {{@in6=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000240)=0xe8) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, r6}, 0x14) ioctl$USBDEVFS_DISCARDURB(r3, 0x550b, &(0x7f00000000c0)=0x7) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000002c0)={0xfffffffc, {{0xa, 0x4e21, 0x3, @private2, 0x4}}, {{0xa, 0x4e23, 0x10001, @loopback, 0x7}}}, 0x108) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x182dc2) (async) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (async) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000100)={r1, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "3384020bbe82b398000000000000000000001d0ec0c1b4e9b1c4369d03740100ceaac594b1d6d741dd17c1c50d38ef2a565ef1e80000000058966500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f00", [0x9, 0x400]}}) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0x4, 0x420000) (async) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@empty, @in6}}, {{@in6=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000240)=0xe8) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00'}) (async) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, r6}, 0x14) (async) ioctl$USBDEVFS_DISCARDURB(r3, 0x550b, &(0x7f00000000c0)=0x7) (async) 2m6.405672472s ago: executing program 4 (id=1995): mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000002100)=0x9, 0x4, 0x1) (async) r0 = socket(0x1e, 0x4, 0x0) (async) r1 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x200) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f00000002c0)={0xc, @capture={0x1000, 0x1, {0x100, 0xfffffffc}, 0x9, 0xc}}) (async) recvmmsg(r0, &(0x7f0000012e00)=[{{0x0, 0x0, &(0x7f00000119c0)=[{&(0x7f0000010940)=""/4096, 0xffffff5c}], 0x1, &(0x7f0000011a00)=""/9, 0x9}, 0x1}], 0x1, 0x40012122, 0x0) 2m5.516382793s ago: executing program 4 (id=1999): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040)={0x3, 0x4}, 0x2) (async, rerun: 32) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, &(0x7f0000000400)) (async, rerun: 32) r2 = openat$cgroup_freezer_state(r0, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f00000000c0)='FROZEN\x00', 0x7) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000001010102000056070000000000000000100002800c000280050001003a0000000c0019"], 0x30}}, 0x0) (async, rerun: 64) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) (rerun: 64) setresuid(0xee01, r4, r4) r5 = getuid() mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_off}], [{@smackfshat={'smackfshat', 0x3d, 'overlay\x00'}}, {@subj_type={'subj_type', 0x3d, './cgroup.net/syz0\x00'}}, {@fowner_gt={'fowner>', r4}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@subj_user}, {@appraise_type}, {@audit}, {@hash}, {@uid_lt={'uid<', r5}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 2m5.317027903s ago: executing program 4 (id=2000): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x3, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000a8, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYRES16=r2, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='wlan1\x00', 0xfffffffffffffc62) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x40) close_range(r1, r3, 0x2) sendmmsg$inet(r0, &(0x7f0000000280), 0x0, 0x0) 2m5.171466489s ago: executing program 4 (id=2001): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000003940)=[{{&(0x7f0000001080)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001200)="daf8", 0x2}], 0x1}}], 0x2, 0x48040) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x56, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000c}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r6, 0x0, 0x31) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0xd0013286b7aca58, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f0000000340)={0x12, 0x10, 0xfa00, {&(0x7f0000000380), r8, r4}}, 0x6a) 1m50.097111485s ago: executing program 34 (id=2001): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000003940)=[{{&(0x7f0000001080)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001200)="daf8", 0x2}], 0x1}}], 0x2, 0x48040) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x56, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000c}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r6, 0x0, 0x31) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0xd0013286b7aca58, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f0000000340)={0x12, 0x10, 0xfa00, {&(0x7f0000000380), r8, r4}}, 0x6a) 1m9.231869196s ago: executing program 6 (id=2314): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x33455aed6cbf4c1b) (async) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000280)={0x400, 0x300, 0x752a8b8ac6c640be, 0x4b0, 0xbbba, 0x0, 0x4, 0x0, {}, {0x2, 0x6}, {0x4, 0x3, 0x20}, {0x1, 0x8}, 0x0, 0x3f0, 0x8, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0x8}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000700)={0x24, &(0x7f0000000500)=ANY=[@ANYBLOB='@\r\t\x00'], 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000140)=ANY=[], 0x0) 1m7.826085125s ago: executing program 6 (id=2321): setitimer(0x2, &(0x7f0000000580)={{}, {0x0, 0xea60}}, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0xed, 0xfc, 0x16, 0x8, 0x14aa, 0x226, 0xdcba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xa3, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0xf7, 0x1, 0x2, 0xd6, 0xbc, 0x60, 0x3, [], [{{0x9, 0x5, 0xe, 0x0, 0x200, 0xf7, 0x81, 0x6}}, {{0x9, 0x5, 0xc, 0x3, 0x3ff, 0x7, 0x40, 0x4}}]}}]}}]}}, 0x0) 1m6.446781535s ago: executing program 6 (id=2328): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, 0x0, 0x29) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x46, 0xfffa}, 0x3a, [0xc001, 0x3, 0xf, 0xb1eb, 0x20080, 0x7, 0x3, 0x2, 0x2000000a, 0x20000000, 0x8, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1002, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x2, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x8e660, 0x4, 0x7, 0x3, 0x1000008, 0x4c74, 0x80000000, 0x242, 0x6, 0x10, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x3, 0xa8000000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10000005, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x7f6fdd94, 0x0, 0x8, 0x2e, 0xe, 0x4, 0x78, 0x5, 0xfff, 0x4, 0x7, 0x7fff, 0x5, 0x1, 0x401, 0x6, 0x1, 0xff, 0x5, 0x7cb, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x200, 0x9, 0x4, 0x40000d, 0xe1, 0x44, 0x8000, 0x1, 0xfe000000, 0xfffd, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x5, 0xfffffff8, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x7, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x3, 0x10800003, 0x200, 0xaf8, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x2000005, 0x6, 0xaca, 0xbe, 0x4002, 0x23, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb2f, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x12, 0xb9, 0xce7, 0x1ff, 0x2, 0xfffffffb, 0x5, 0x3, 0x101, 0x2010000, 0xc, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x8000003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x101, 0xa1f, 0xf44, 0x7, 0x1, 0x6c18, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x1ff, 0xfffffffb]}, 0x45c) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x401, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, &(0x7f00000001c0)={{0x3, @addr=0x8}, "073bde9c1c17386e3f2c3920a74b224409d46f9447276efb175b539aac6d981e", 0x2}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0xfffffffffffffffe, 0x40080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x30, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYRESHEX=r0], 0xfc}, 0x1, 0x0, 0x0, 0x48800}, 0x20048040) r5 = socket$kcm(0x10, 0x0, 0x10) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000002c0)={'netdevsim0\x00', 0x1200000}) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a886ddb96648e582003b9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) 1m6.323131247s ago: executing program 6 (id=2332): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000140)={0xffffffff, 0x4000008, 0x1, 0x800000}) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) 1m4.627483049s ago: executing program 6 (id=2338): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x450000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x800}}, './file0\x00'}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000180)={0x3, 0x2, 0x2, 0x0, 0x3}) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000000c0)=""/158) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) sendmmsg$inet(r0, &(0x7f0000003500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8044) r3 = syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009b27a81099112168ad59010203010902240001000000000904cd0a0238cf6b0009050101400040fa00090582024000000000"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) 1m1.547651365s ago: executing program 6 (id=2361): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') r1 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000140)=""/178, 0xb2}], 0x1, 0xf44, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000004300)={0x2020}, 0x2020) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r3 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x1008000, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@uuid_off}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@redirect_dir_nofollow}]}) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f00000022c0)={0x2020}, 0x2020) setresuid(0xee00, 0x0, 0xee00) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000000340)={0x2020}, 0x2020) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000400)={[&(0x7f0000000080)='\x00\xf1\x11<\x91\xb5\xf4b\x95d\xe9r\xd9J\x7f)\xc8%\x1b\xe0\xcb(u\xf8\xf8mX\xfbN\xf0\xa7\x89\xf9\xd9\xf0\x1f\'\xe1R\rZjS$\x18\xc4\x03\x16]\xe5\xec\xc6\x03\xd0\xd8\xf2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00T\xa1\x144exT\xf2Z\xe0\x02/\x89\xc6\xb3\xbf\xe3\x86\x034\x86s\x10\x84:\xachB\x06b\xcalG\xa5\xf7\xf4j\xe1\xd27\x015\x8fu3\xb9{\xb7~\x8cao\xb6\x98\x9d\xf8a\xa9ca\xb9\x85?\xc9\x04\\\xbd\xb3\xfe\xe6g\x8f\xfe\xaaL\x01/\xfaN\xce\xf5\xef\x84\xf7\xb2\x00\xa0\xa4\f\xe6I\x03S\xfe\xa9\xb2*qR', &(0x7f00000003c0)='#-}*[&-^!#-\x00']}, 0x0, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) statfs(&(0x7f0000000240)='./file0\x00', &(0x7f0000006340)=""/181) 56.152000941s ago: executing program 1 (id=2403): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000709c3120e80401669b81010203010902120001010000000904"], 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008002e00"], 0x1c}], 0x1}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) setuid(0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0}) 55.629698984s ago: executing program 1 (id=2405): open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) (async) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x30b600, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x26, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xbd) fcntl$setlease(r0, 0x400, 0x1) (async) fcntl$setlease(r0, 0x400, 0x1) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_OUTPUT(r5, 0xc00456bf, &(0x7f0000001040)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x1, 0x0, 0x0, {0xb}, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) ioctl$TUNSETQUEUE(r6, 0x5452, &(0x7f0000001580)={'veth1_to_bond\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000140)='./bus\x00', 0x42b42, 0x1c0) open(&(0x7f0000000080)='./bus\x00', 0x143242, 0xc0) (async) open(&(0x7f0000000080)='./bus\x00', 0x143242, 0xc0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) accept4(r8, 0x0, 0x0, 0x800) socket$igmp(0x2, 0x3, 0x2) creat(&(0x7f00000000c0)='./file0\x00', 0x1a9) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) 55.53602083s ago: executing program 1 (id=2406): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) clock_adjtime(0xffffffd3, &(0x7f00000004c0)={0x7, 0x5, 0x38000000000, 0x100000000000009, 0x8, 0x1000000b, 0x64d, 0x8, 0x9657, 0x5, 0x2, 0xe7d4, 0x8, 0x7fffffffffffffff, 0x5, 0x10ccb, 0x2efa, 0x0, 0x94d8, 0x4, 0x457, 0x1, 0xa, 0x7, 0x1, 0x2000008800000}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001440)=ANY=[@ANYBLOB="bc080000", @ANYRES16=r1, @ANYBLOB="050207000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x8bc}}, 0x24000080) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000002980)={0x4c, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200009010203010902120001000000000904"], 0x0) 55.025919241s ago: executing program 1 (id=2407): r0 = fsopen(&(0x7f0000000040)='9p\x00', 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000340), 0x64a82) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c000000000b0101000000000000000003000008080003400000000105000100000000000800024000000005080003"], 0x4c}, 0x1, 0x0, 0x0, 0x60004000}, 0x40010) openat(r1, &(0x7f0000000380)='./mnt\x00', 0x0, 0x1ab) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r5, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000080)=ANY=[], 0x0, 0x400) mount$9p_xen(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x140014, &(0x7f00000001c0)={'trans=xen,', {[{@privport}, {@version_9p2000}, {@version_u}], [{@obj_user={'obj_user', 0x3d, '&'}}, {@obj_user={'obj_user', 0x3d, '\\}+:+:(!-{\x7f!\xa1\xbb&!'}}, {@euid_eq={'euid', 0x3d, r4}}, {@dont_measure}]}}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x9, 0x11, 0x0, 0x100000, 0x0, [@sadb_x_policy={0x8, 0x12, 0x4, 0x2, 0x0, 0x0, 0xfffff4cb, {0x6, 0x33, 0x10, 0x7, 0x0, 0x9ec7, 0x0, @in=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @sadb_sa={0x2, 0x1, 0xffffffff, 0x0, 0x6, 0x4, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x53, @mcast1, 0x3}}]}, 0x88}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) 54.966828689s ago: executing program 1 (id=2408): r0 = socket$inet(0x2, 0x6, 0x13) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) accept(r4, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x54, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) socket$inet(0x2, 0x2, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc) socket(0x1a, 0x800, 0x3) mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, &(0x7f00000002c0)={0x33, 0xb49d, 0x4, 0x6, 0x3}) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r8 = socket(0x2, 0x2, 0x1) bind$unix(r8, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) r9 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r9, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="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", 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r9, 0xc01064ac, &(0x7f0000000000)={r10, 0x1000, &(0x7f0000002a80)=""/4096}) r11 = userfaultfd(0x80001) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f00000000c0)) move_pages(0x0, 0x2, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 54.844160285s ago: executing program 1 (id=2409): mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) setreuid(0x0, 0xee00) setrlimit(0x40000000000008, &(0x7f00000002c0)={0x4, 0x9}) r0 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) r1 = syz_open_dev$vim2m(&(0x7f0000000240), 0x7, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r3 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x82a80) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000040)=0xf0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x4c) r4 = accept4(r2, 0x0, 0x0, 0x0) recvmsg$qrtr(r4, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x38, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0xb5315241}}) shmctl$SHM_LOCK(r0, 0xb) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) write$P9_RLINK(r6, &(0x7f0000000140)={0x7, 0x47, 0x1}, 0x7) 46.2493227s ago: executing program 35 (id=2361): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') r1 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000140)=""/178, 0xb2}], 0x1, 0xf44, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000004300)={0x2020}, 0x2020) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r3 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x1008000, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@uuid_off}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@redirect_dir_nofollow}]}) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f00000022c0)={0x2020}, 0x2020) setresuid(0xee00, 0x0, 0xee00) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000000340)={0x2020}, 0x2020) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000400)={[&(0x7f0000000080)='\x00\xf1\x11<\x91\xb5\xf4b\x95d\xe9r\xd9J\x7f)\xc8%\x1b\xe0\xcb(u\xf8\xf8mX\xfbN\xf0\xa7\x89\xf9\xd9\xf0\x1f\'\xe1R\rZjS$\x18\xc4\x03\x16]\xe5\xec\xc6\x03\xd0\xd8\xf2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00T\xa1\x144exT\xf2Z\xe0\x02/\x89\xc6\xb3\xbf\xe3\x86\x034\x86s\x10\x84:\xachB\x06b\xcalG\xa5\xf7\xf4j\xe1\xd27\x015\x8fu3\xb9{\xb7~\x8cao\xb6\x98\x9d\xf8a\xa9ca\xb9\x85?\xc9\x04\\\xbd\xb3\xfe\xe6g\x8f\xfe\xaaL\x01/\xfaN\xce\xf5\xef\x84\xf7\xb2\x00\xa0\xa4\f\xe6I\x03S\xfe\xa9\xb2*qR', &(0x7f00000003c0)='#-}*[&-^!#-\x00']}, 0x0, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) statfs(&(0x7f0000000240)='./file0\x00', &(0x7f0000006340)=""/181) 39.378884671s ago: executing program 36 (id=2409): mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) setreuid(0x0, 0xee00) setrlimit(0x40000000000008, &(0x7f00000002c0)={0x4, 0x9}) r0 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) r1 = syz_open_dev$vim2m(&(0x7f0000000240), 0x7, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r3 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x82a80) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000040)=0xf0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x4c) r4 = accept4(r2, 0x0, 0x0, 0x0) recvmsg$qrtr(r4, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x38, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0xb5315241}}) shmctl$SHM_LOCK(r0, 0xb) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) write$P9_RLINK(r6, &(0x7f0000000140)={0x7, 0x47, 0x1}, 0x7) 4.12219971s ago: executing program 8 (id=2661): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000400), 0x294, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') lseek(r5, 0x4, 0x4) read$FUSE(r5, &(0x7f0000002b40)={0x2020}, 0x2020) syz_usb_control_io$hid(r0, 0x0, 0x0) r6 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r6, &(0x7f0000000240)={0x14, &(0x7f00000000c0)={0x20, 0x6, 0x6d, {0x6d, 0x9, "c75103c9b8fea9454669e0217b090b0ab9aa0155822d2a92b996ce7b8b80092c1bf58e0a3be72f63eecfa7f1a8b0ab445c0abc1ebd77d856a60bb8f1ebcbef577c13d3b668615c72a0510a29a090a48ec638b38ee12d3985fac8638436f36432060855e64a36668e6d47d9"}}, &(0x7f0000000140)={0x0, 0x3, 0xfa, @string={0xfa, 0x3, "4135f87ceed13b0b1d6ce80fb3a601a454e541e92c330f933d22af4525a31eeb3480554ca5089f16206da449ea5d2540d6442d215526588270fbfefed922cf4b89553dd6c9cfe39f36331daeb07cfaa63562e99d4ea5d1b4bb354bfa700a835d0e37c7094d00504aebe43802e3eb128391c10652072fb741bc04856850822840093b89f36ff247628eac92677dd78b5b475db02002acc28cbfbb3757928e94c3a6811b5692853b615fd45e649e4f5d521eb257a8ef725cbbe6eb0270bacbb707376e8ab0a3ecb58d708901750337f013cb2734b665b06c489416ecb5536dcf82dd900045d80f9633428781b7601b0b039c6c6b80ec390ca4"}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000280)={0x0, 0x11, 0x3, "7c1392"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000340)={0xc0, 0x5, 0x4, "905b4693"}, &(0x7f0000000380)={0x40, 0x5, 0x2, "1f6f"}}) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 3.994255142s ago: executing program 2 (id=2663): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0445624, &(0x7f0000000080)={0x980914}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x200200) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000003c0)={0x37, 0x8000, 0x1, 'queue0\x00', 0x1}) r2 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f0000000000)={0x15, &(0x7f0000000280)=[{0x20, '\x00', @data=0x21a8e079, 0x5}]}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f00000013c0)=ANY=[@ANYBLOB="1400000002080102000000001a00000005000001"], 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x48010) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$RTC_PIE_OFF(r5, 0x7006) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0xa, 0x58}}}}}, 0x28}}, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r6, 0x891c) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000080)=@assoc_value, 0x8) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r9, &(0x7f0000000500)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000300)={0x0, 0x6, 0x17, 0x1ff, 0x10, 0xea6a, 0xfff9, 0x1000, {0x0, @in6={{0xa, 0x4e22, 0x5, @private2, 0x8001}}, 0xfffffffc, 0x3, 0x1cd, 0x1, 0xa}}, &(0x7f0000000000)=0xb0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r10, 0x40}, &(0x7f0000000040)=0x8) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_trace', 0x4002, 0x102) ioctl$IMGETVERSION(r11, 0x80044942, &(0x7f0000000200)) 3.908565931s ago: executing program 2 (id=2664): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf2530000000080006000000000018000180140002006272696467655f736c6176655f31"], 0x34}, 0x1, 0x0, 0x0, 0x40814}, 0x800) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$char_usb(r3, &(0x7f0000000000)="2d3020da", 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)={0x38, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0x4, 0xf}, @typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r5, 0x208, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xa81, 0x2c}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1400200800001f0300000000f300ea5b3cff8e80"], 0x14}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) 3.832782865s ago: executing program 2 (id=2666): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, 0x8) sendmmsg$inet(r0, &(0x7f0000001980)=[{{&(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000001500)='8', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000001880)=[{&(0x7f0000001540)="e9", 0x1}], 0x1}}], 0x2, 0x44042) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000980)={0x24, 0x0, 0x0, &(0x7f0000000c00)={0x0, 0x22, 0x1, {[@local=@item_012={0x0, 0x2, 0xa}]}}, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000c80)={0x2c, &(0x7f0000000ac0)={0x20, 0x11, 0x81, {0x81, 0x7, "48858768dd72c370f0d709b3d601724c7220675516b85f93f05c2d0aff1049d355e35f64f8a0b0664537fed2f8d167d997bc22550892e515799108793bdf703ff73d49c10c73d8eb610944856f11c73c49670fc56824b592776719148b2c95bb28085a14c16d1a5df022a5df621d525142e4cc706e48bb000205771468b44e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x6}, 0x8) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0xed, 0xfc, 0x16, 0x8, 0x14aa, 0x226, 0xdcba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa3, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0xf7, 0x1, 0x0, 0xd6, 0xbc, 0x60, 0x3}}]}}]}}, 0x0) 3.774835436s ago: executing program 7 (id=2667): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) close(r0) socket$packet(0x11, 0x2, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) (async) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r1, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, 0x0}}], 0x1, 0x2000c000) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x25, &(0x7f0000000140)=@gcm_128={{0xcf05a145b37f58f3}, "2034b251822b3a46", "fa6b72def4acb1a6c86918c638857983", "34b3adec", "6745ac421772258f"}, 0x28) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x800) (async) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x800) mknod$loop(&(0x7f0000000000)='./file1\x00', 0xc000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="3c0000000200"}) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$nl_rdma(0x10, 0x3, 0x14) 3.649706654s ago: executing program 5 (id=2668): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001440)=""/123, 0x7b, 0x841) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x8) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4200) 3.649364993s ago: executing program 7 (id=2669): shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x1000)=nil, 0x7000) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0xc1, 0x66, 0xa0, 0x10, 0x483, 0x1234, 0xff76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7b, 0xe4, 0xa8}}]}}]}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) fstat(r1, &(0x7f0000000180)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x9c, 0x0, 0x1, 0x801, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2804}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x9c}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x6, @string={0x6, 0x3, "8e7d85e6"}}}, 0x0) 3.608630213s ago: executing program 5 (id=2670): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000200)=@multiplanar_mmap={0xc, 0xa, 0x4, 0x2, 0xfc, {0x77359400}, {0x1, 0x2, 0xb, 0x6a, 0x2, 0x4, "13b7a904"}, 0x8, 0x1, {&(0x7f00000000c0)=[{0xca800, 0x3, {0x4}, 0x3}, {0x7, 0x39, {0x4}, 0x80ffd}]}, 0x7}) 3.447306639s ago: executing program 5 (id=2671): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x234}}, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f93b2938f8d2a9000070900be00830000000057a90da1f68a0f000400"], 0x0}, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000100)=""/94) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@phonet={0x23, 0x6, 0x0, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}}], 0x1, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x4) sendmmsg$sock(r3, &(0x7f0000003300)=[{{&(0x7f0000000180)=@l2tp={0x2, 0x0, @empty, 0x1}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)="7ebb0ef4baa781621a6369087dc861cbaf4c9dfdea34d8932e648a3baefb599d3b9daf9789626d77d187018433ff2e3f6b097d456931e19ad2f5c909eb8777dc6cbc02d36b8cb5a66b6ce9894cf6b632a837e8de5aa252beb4ff", 0x5a}, {&(0x7f0000000280)="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", 0xff}, {&(0x7f0000000000)="6bf5bb793ca5c48a64c897c5efddb3d7991429b52f", 0x15}, {&(0x7f0000000100)="973797e2ab201798e5a4", 0xa}, {&(0x7f0000000380)="73c3c207b15df20838f93efd71f5023f975696d23457ae6c74bfac7c15992978b66ba1d471dbcc11ecca9480302563ffedb34ecfb93333253b40d347d366cc005ba7f5663c8f2b3dc53a0fc965ed46d8c2afc03c89946d64022387da8a95bda60fd61b3afeebb4faf56166ecff5df76c50334b7da0be5ca11f75c4065d68adf426f4344a80294b9bb8536eccbe2139edb8c1db5776e08692aaaf871da5348cebcffbce9a8bac5d3869ac1183f2420e2c691b1b4735cb8daeac0284f67c5863670f6c0085f1", 0xc5}, {&(0x7f0000000480)="ed11129f84aefa7c2810c9373d3b2617a912386a3ee8c85f994c4b4caed43679c5df95c4b892b864707e57b8c852d373ea36501336c3c13f92cf99db1f391b15ab4f5604ef214ef3f6545e94fd7b66dd90b0d6abb974c86dcc4cfd013f1de1fa622bf155b3fd78841a082a56d4f2c4ccfa03d2be1bf6a64d92f4963c42ef337278356d659120a1a9106089780fbbbd547a8a4898e1e324b2220d32af7892e3ba82eaf1ce68d52f9416409364becd61a1b45c18963e5e575929cfd21509e8b6964d95993967b15dbe7b6051047788aca3aad4c03e5b4819ccdb803e1f241820aead54f7b05b5dcb2d39c1b62ce9a99f1ca7c79614602f", 0xf6}], 0x6, &(0x7f0000000600)=[@timestamping={{0x14, 0x1, 0x25, 0xa0d0}}, @mark={{0x14, 0x1, 0x24, 0x480000}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)="c3cfc64204c665d0e0d2a2aa88a7fba4aeb5cc32fe6138cdf6590e74888ecaf51f4ae5dbae34ad72387cbca3c664d0be2c36ae6fa4ea47a73070d859c113ef60356be2c895198878f0b2e99ec0a9e0d3b0bb7c33af7f5e669355ff9868303b1a5ec47797e6102d3a1e48a56df3ed9ae2a17fd29ce7e8d125086f9c8cced3259b5489", 0x82}, {&(0x7f0000000700)="6e1ce5146dd2673bd501c4f64eb987ba8e", 0x11}], 0x2}}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f00000007c0)="0726fe577a2f660768924de500b714043f8adf4e6c49dd49bba25e450c779f8b483d0df1d621dc6c9f34b1b86670c78d94a2c672deb99e262ca120dc7c9bbcc8b3917d22d2352f82451903da0355fbb5179da3957e0eb39671579b5a67a1ff6f613858fd7a0eaf", 0x67}, {&(0x7f0000000840)="60d15ca796ed2c45463b163e920026005289a2aefa20692d8e4e5e3ce9d832ed249df127a80034ec035fcb5c68cdf143dadb549703d991f27e6b2ebaa5ebfc4daeb69d705e4b6ca2e54d467e824c441405a1007c21dbfcd0f87dc3f4e6729748be00dfa14b463d67b5df3d593c4f79c891ab9d9f5e3645c00dcdd8d0e5d2aba910b8d80877ab07ef3b47a3e0150933bc0fdc69cb6765b63cde54a62464412e5751f00905ba1f85e82161836b841a05e11668ee", 0xb3}, {&(0x7f0000000900)="f70357d9513f08f93f62f0f03aa3b3e17a7caf852643866e8c41ddc218f0e9d64951f740fc2652800a505442eaaf4b355a964c000dc404975774ad191a97b9ba83793f58f197a4f2f5c9b0c52a3ab7085717cea5931348178d5772db31adac0d75d8e8f010d77dee4840cc2e09e1cd1e388adb3ca355ec4535fd1a5e5fa85492a9d309ab266271c8fdfb77305d2239de8f6ff6c814ae4cac57a8b522020a7358f5ef65b513888248b115f5d844aa05c8d7a07fad49f5f247ab653e170e5329da11328700c4190871fdeb010d674066c30604ed447b4874cf1a52da819031ca8b9a6724a7296b762e92", 0xe9}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001a00)="479a19fa2e515252160381b02bc457d0cfe46fe482bfe72cc8bcd5d8dc9b60b4a86952a045577ab991dc1830db0f976a779ee77527a8c815b3fbb8fd35bcf7080e96f65f0ec3ebc12375fecbfcc704b09cee41a0b5e68366bca5e06a5f45158641eaabcdfaa6b32e94585cd21b5f211fcfd4db30c065113bc39fc7acfa9369b4ef662021fc7db467ecd630e7eec3c3b50f20e1a04d4cfa9ae55645edf8187511002964fe62869d6d40560788efbffee4e40c39322db985efbc4c659377c42163f748d718d182ab593c6d26c04e35ebdb71", 0xd1}, {&(0x7f0000001b00)="f100c7696cab5fa771665aae7f335edd1cb1899c3fc37b3518452d96ca075c44aed627f381b2e64336bf3855ce6faedeb85fdb95ca236ddc4ca8dc3c012c7d611c1962e2aeeb", 0x46}, {&(0x7f0000001b80)="65dcf5462be8b9cbb6609704952c0828441c2d6ae2ec9edfad8790ddbd45d24f5e19bd57f446ddac4524dd10c299dfb7dbe77b41604db74398d1acbc0c0010914e157e42b47a6c2310884025bd7a476aa01de0ca720252952e84e1592f0ef78eafce58e1eca35aa78f5516a31a6593e425d8421d3155ee35a79f77763b33e9069865fccaeb25dfd477b7c703", 0x8c}, {&(0x7f0000001c40)="306a2d752a5744f515c440140996ae26caaa", 0x12}, {&(0x7f0000001c80)="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", 0x1000}, {&(0x7f0000002c80)="53eb824b", 0x4}], 0xa, &(0x7f0000002d80)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x31d6b3f8}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x243}}], 0xc0}}, {{&(0x7f0000002e40)=@x25, 0x80, &(0x7f0000003240)=[{&(0x7f0000002ec0)="ec958b0101cba3bce4ffd572df31794a6e25a3913a82685394235175547a847796decd1ae0ef8c080d5b25b94ed58dbfaec03be42f8cb85fc9b397d57d61862565b3c729b970de02dbd061e79456507af8e6bc0a025d8b5a4dc89cc6504151ca4a6b46a9e0aa60e029a414c5bb5c6326289908d8c13d4d8725dde87ff3a8189a29f98e876faf9dc93c47b2159704c6cadad5a2ee", 0x94}, {&(0x7f0000002f80)="f95ed85d0a340499fabf800b7bff42e07f961ecaeb1cb1c0b1cce0055d2aa475ccdc350d1623", 0x26}, {&(0x7f0000002fc0)="286e5431908311d7b142dfbad7e6c2f925012bc4750c24fc3f782487d7f6e12322ec047cfc4c4da5ee9315e1b3d20593d0848aee14e302b72394b614080b9376c467a29df042422b6e98c54b1473f358479ca6add4bb3920319a3db3ef0522952a00c6860ac19bfa8f01c09bd0d2b1b143d4e77338407efec4ca27d6924cf205dfa8d8dc013a7d8e8601d9e07809230303456c38f82c890c792719291377dc9e135c", 0xa2}, {&(0x7f0000003080)="a24e64dc0b99f4794f0e9d5e5de41b0770827d87f5b834059c12c88719f49e3750909b9af0e8d574e660cb7408f5a9c57e476c03da07aba8b19d006f4b26cf9c2dd60ec824f76fd7e56abc9e091bca5df0735747e5da0fbb5fe201bc427dfdc856b88ff8113ea8c597894cc5d2d0e7f7819b821e3e930f340f2fa692253dd0bc18805db81321460575ecfaff7aaeae58198ee66246e7618cd105af51e8c8f9eebdf2c9", 0xa3}, {&(0x7f0000003140)='r', 0x1}, {&(0x7f0000003180)="e5b5b2b3a000857bde3e9afd644f675f75a3000758ca07c2cd5c32fc4b4d12212245626912a11bf4409aaf8855d293218463e673a9d99a80a7f4110b32695aec93d2ab064d102f33fd01c6f339b2749d10988f476e049ce86d0b4e99f85b8dc14ac3b7ed1a980cf6e3872d81ee6ffdc7a47b2b78c50b93798fd8acae0709925bc088c3fe242bf0af594f32c66537fa0cc57e3b32ae1aa381233d64c29b02f92c95e62b55292c278824d664ea48b129b0b428e4b3fb74", 0xb6}], 0x6, &(0x7f00000032c0)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x30}}], 0x4, 0x40) 2.21148927s ago: executing program 8 (id=2672): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) r1 = syz_clone(0x2280, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0), r2) sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fcdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008011}, 0x10) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c) getsockname$packet(r4, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000180)={0x1, 'virt_wifi0\x00', {}, 0x101}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000206010100000000e7ffffff0100ffff0c00078008000b000000cd200500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x58}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) rt_sigqueueinfo(r1, 0x13, &(0x7f0000000000)={0x24, 0xfe81, 0xffffffff}) ptrace$poke(0x4, r1, &(0x7f0000000080), 0x9) tkill(r1, 0x12) waitid(0x0, 0x0, 0x0, 0x8100000e, &(0x7f00000000c0)) syz_usb_connect(0x0, 0xc2, &(0x7f0000000300)=ANY=[@ANYBLOB="1201410163a93820790927020932010203010902b00001000010000904"], 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="1f000000030000000d"]) 2.155294522s ago: executing program 7 (id=2673): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$dsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0x0) (async, rerun: 32) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) copy_file_range(r1, 0x0, r1, &(0x7f0000001200)=0xffffffffffff6f95, 0xa00, 0x0) (async) r2 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r2, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @local}}}, 0x24) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a44000000060a0b0400000000000000000200000018000480140001800b0001006f626a7265660000040002800900010073797a30000000000900020073797a3200010001000000001100010000000000000000000000000a"], 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 64) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) (rerun: 64) 2.079992061s ago: executing program 7 (id=2674): socket$kcm(0x10, 0x2, 0x10) openat$panthor(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x4, 0x0, 0x0, 0x8, 0x2, 0x1}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="440f20c0350b000000440f22c0360f09c4217d700c9d0000000028b8010000000f01c166b82e000f00d80f20d835080000000f22d82e0f019885000000b9b1060000b86f8d0000ba0000000066b8b5008ec036363ef3420f51a600000000b9e30b0000b8f233278fba000000000f30", 0x6f}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000080)=0x4000) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050500080080fddbdf254400000008000300", @ANYRES32=r8, @ANYBLOB="0a001800464633fd000000000325292430434e030303030303000091c57f6fddc2b92f"], 0x30}}, 0x4000004) futimesat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000040)=0x5, 0x4) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d) sendto$inet(r9, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r9, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) 1.779469831s ago: executing program 2 (id=2675): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000200)=@multiplanar_mmap={0xc, 0xa, 0x4, 0x2, 0xfc, {0x77359400}, {0x1, 0x2, 0xb, 0x6a, 0x2, 0x4, "13b7a904"}, 0x8, 0x1, {&(0x7f00000000c0)=[{0x700, 0x3, {0x4}, 0x3}, {0x7, 0x39, {0x4}, 0x80ffd}]}, 0x7}) (fail_nth: 5) 1.763956334s ago: executing program 5 (id=2676): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x14, 0x0, &(0x7f0000000400)) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r2, 0x4068aea3, &(0x7f0000000080)={0x80, 0x0, 0xb963}) (async, rerun: 32) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000005667d1040206402d14e0102030109021b000100000000090400000190f19c0009058459", @ANYRES8], 0x0) (async, rerun: 32) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x29, 0x35, 0x0, 0x0) (async, rerun: 32) socket$key(0xf, 0x3, 0x2) (rerun: 32) 1.518297878s ago: executing program 8 (id=2677): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000200)={0x2, 0x0, [{0x0, 0x0, 0x8}, {0x73, 0x0, 0x8}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x6c}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x60}}, 0x44) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000003c0)={"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"}) 1.363904239s ago: executing program 2 (id=2678): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001440)=""/123, 0x7b, 0x841) 1.342968806s ago: executing program 8 (id=2679): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000200)=@multiplanar_mmap={0xc, 0xa, 0x4, 0x2, 0xfc, {0x77359400}, {0x1, 0x2, 0xb, 0x6a, 0x2, 0x4, "13b7a904"}, 0x8, 0x1, {&(0x7f00000000c0)=[{0xca803, 0x3, {0x4}, 0x3}, {0x7, 0x39, {0x4}, 0x80ffd}]}, 0x7}) 1.341146551s ago: executing program 2 (id=2680): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a4000a400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6", 0x6b}, {&(0x7f00000004c0)="846d2ad6d4ef6560542286af609ff6ca49c12d9b19e1843ce4c332e6f0932bc521d0bdcd40638430b5dbdb1a26009aaba510eb36442d9c3fb54c6b14c0e5c2867c43e8a75801149e1613c3fc8a5fd8470359795f85d3741efcbe77df1b9bfad527863f7684842cce7eeb775eda", 0x6d}], 0x2}, 0x200000d4) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x28bd, 0x933, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7f, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x1, 0x1, 0x9, {0x9, 0x21, 0x401, 0x0, 0x1, {0x22, 0x1c7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0xd, 0x6}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x92, 0x5, 0x2, 0x8, 0x11}, 0xc, &(0x7f00000000c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x7, 0x7, 0xdc}]}, 0x5, [{0xa0, &(0x7f0000000100)=ANY=[@ANYBLOB="a003f079d7ac3f854052c5e84033c627c9cfc7bc3efce5c24d2f56dc2a186d58a8f10b02cc09fa4fda9a6a836439343cc679110b02897d8795785fc2415f7711eefc7e2a40171294fffdd961a4f200a1dd3b1cd221a7ce51911a91daece67f853a2f924f0d8e015733d6c40b442daeabf7f824041fa64d976038e325a70072e56d20a89f31e56da54b10b46f47ef9dcaf93fcf9db4bff27f08a1c51953992207"]}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x4f8}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2001}}, {0x19, &(0x7f0000000340)=ANY=[@ANYBLOB="1903c6a06c04a0085206075dc3fd77e5e3abb6c02e349566edb447620cfcece2f0"]}]}) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) 1.312781422s ago: executing program 5 (id=2681): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x800) accept4$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10, 0x800) syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002413b88400819151300000000000109022d0000000000000904000002"], 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 1.103580778s ago: executing program 8 (id=2682): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4098, 0x1002}, {&(0x7f00000024c0)=""/230, 0xe6}], 0x2}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 1.102501714s ago: executing program 7 (id=2683): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(0xffffffffffffffff, &(0x7f0000003580)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r1 = dup3(r0, r0, 0x0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000180)={0xe, {0xa, 0x1, 0x6, 0x84, "cc23fc0fa212a3998199a87fd21c0a0c384b246bc5d5bf1c4786765ac4d47918408190df809d2c7ac1b1110708a9956ee6c2032093741f45e6f10bca3a1733b335be83a2fcd03e9111d2453e64edc996bc525b647d06af4204a612b98d038f94b8e8aae30738a7b216e588edb7b06ac125d2ae1c4bb4383d5a6ac5da4fc8764a259fe3bd"}}, 0x90) accept4(r0, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80, 0x80000) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) (async) connect$inet(0xffffffffffffffff, &(0x7f0000003580)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async) dup3(r0, r0, 0x0) (async) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000180)={0xe, {0xa, 0x1, 0x6, 0x84, "cc23fc0fa212a3998199a87fd21c0a0c384b246bc5d5bf1c4786765ac4d47918408190df809d2c7ac1b1110708a9956ee6c2032093741f45e6f10bca3a1733b335be83a2fcd03e9111d2453e64edc996bc525b647d06af4204a612b98d038f94b8e8aae30738a7b216e588edb7b06ac125d2ae1c4bb4383d5a6ac5da4fc8764a259fe3bd"}}, 0x90) (async) accept4(r0, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80, 0x80000) (async) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) (async) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) (async) 1.058295069s ago: executing program 7 (id=2684): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000080)={0x3, 0x5}) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0xed, 0xfc, 0x16, 0x8, 0x14aa, 0x226, 0xdcba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa3, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0xf7, 0x1, 0x0, 0xd6, 0xbc, 0x60, 0x3}}]}}]}}, 0x0) 984.217893ms ago: executing program 8 (id=2685): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ec189020560830acf9da01020301090212000100001000090477"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000740)={0x0, 0x16, 0x5, "18bbebffd6"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x840, 0x0) ioctl$PTP_EXTTS_REQUEST(r1, 0xc0403d15, 0x0) 0s ago: executing program 5 (id=2686): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000200)=@multiplanar_mmap={0xc, 0xa, 0x4, 0x2, 0xfc, {0x77359400}, {0x1, 0x2, 0xb, 0x6a, 0x2, 0x4, "13b7a904"}, 0x8, 0x1, {&(0x7f00000000c0)=[{0x700, 0x3, {0x4}, 0x3}, {0x7, 0x39, {0x4}, 0x80ffd}]}, 0x7}) (fail_nth: 6) kernel console output (not intermixed with test programs): 6-1: config 0 interface 184 has no altsetting 0 [ 461.165840][ T5890] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 461.174920][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.184039][ T5890] usb 6-1: Product: syz [ 461.188280][ T5890] usb 6-1: Manufacturer: syz [ 461.192883][ T5890] usb 6-1: SerialNumber: syz [ 461.199889][ T5890] usb 6-1: config 0 descriptor?? [ 461.208799][ T5890] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 461.220789][ T5890] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 461.411138][ T805] usb 6-1: USB disconnect, device number 51 [ 461.935156][ C0] syz_tun: tun_net_xmit 118 [ 462.405606][ T5876] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 462.575472][ T5876] usb 6-1: Using ep0 maxpacket: 32 [ 462.584061][ T5876] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 462.593253][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.601319][ T5876] usb 6-1: Product: syz [ 462.605571][ T5876] usb 6-1: Manufacturer: syz [ 462.610182][ T5876] usb 6-1: SerialNumber: syz [ 462.616985][ T5876] usb 6-1: config 0 descriptor?? [ 462.829268][T14140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.838095][T14140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.849880][T14140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.858684][T14140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.867944][ T5876] snd-usb-6fire 6-1:0.0: unknown device firmware state received from device: [ 462.876959][ T5876] eb aa 3b 80 9b e4 7a f0 [ 462.881473][ T5876] snd-usb-6fire 6-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 462.975182][ C0] syz_tun: tun_net_xmit 118 [ 463.071316][ T5876] usb 6-1: USB disconnect, device number 52 [ 463.338133][ T5955] ums-sddr09 3-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 463.350735][ T5955] usb 3-1: USB disconnect, device number 90 [ 463.656285][ T5955] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 463.675204][T14146] netlink: 'syz.5.2419': attribute type 32 has an invalid length. [ 463.770762][T14150] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2421'. [ 463.827454][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.837419][ T5955] usb 3-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 463.846858][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.857535][ T5955] usb 3-1: config 0 descriptor?? [ 464.015157][ C0] syz_tun: tun_net_xmit 118 [ 464.275218][ T5876] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 464.349866][ T5955] waltop 0003:172F:0502.002F: hidraw0: USB HID v0.00 Device [HID 172f:0502] on usb-dummy_hcd.2-1/input0 [ 464.435184][ T5876] usb 6-1: Using ep0 maxpacket: 16 [ 464.441556][ T5876] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 464.451818][ T5876] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 464.462425][ T5876] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 464.471531][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.479584][ T5876] usb 6-1: Product: syz [ 464.483729][ T5876] usb 6-1: Manufacturer: syz [ 464.488567][ T5876] usb 6-1: SerialNumber: syz [ 464.600495][ T5890] usb 3-1: USB disconnect, device number 91 [ 464.703060][ T5876] usb 6-1: 0:2 : does not exist [ 464.711169][ T5876] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 464.741910][ T5876] usb 6-1: USB disconnect, device number 53 [ 464.762238][T10069] udevd[10069]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 465.055154][ C0] syz_tun: tun_net_xmit 118 [ 465.309619][T14174] overlay: Unknown parameter 'obj_role' [ 465.505194][ T5876] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 465.575200][ T5890] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 465.655118][ T5876] usb 6-1: Using ep0 maxpacket: 16 [ 465.661459][ T5876] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 465.670041][ T5876] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.680233][ T5876] usb 6-1: config 0 has no interface number 0 [ 465.686355][ T5876] usb 6-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 465.698638][ T5876] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 465.710111][ T5876] usb 6-1: config 0 interface 126 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 465.720381][ T5876] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 465.731360][ T5876] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 465.741290][ T5876] usb 6-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 465.754420][ T5876] usb 6-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 465.755238][ T5890] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 465.763514][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.780208][ T5890] usb 3-1: can't read configurations, error -61 [ 465.787711][ T5876] usb 6-1: config 0 descriptor?? [ 465.793359][T14170] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 465.804469][ T5876] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 465.918552][ T5890] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 466.009977][T14170] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2427'. [ 466.020173][ T5876] usb 6-1: USB disconnect, device number 54 [ 466.077323][ T5890] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 466.085099][ T5890] usb 3-1: can't read configurations, error -61 [ 466.091603][ T5890] usb usb3-port1: attempt power cycle [ 466.097158][ C0] syz_tun: tun_net_xmit 118 [ 466.445125][ T5890] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 466.467259][ T5890] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 466.475215][ T5890] usb 3-1: can't read configurations, error -61 [ 466.605223][ T5890] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 466.627928][ T5890] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 466.635576][ T5890] usb 3-1: can't read configurations, error -61 [ 466.642049][ T5890] usb usb3-port1: unable to enumerate USB device [ 466.795131][ T5876] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 466.957972][ T5876] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 466.968264][ T5876] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 466.978111][ T5876] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 466.987242][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 466.995279][ T5876] usb 6-1: SerialNumber: syz [ 467.135197][ C0] syz_tun: tun_net_xmit 118 [ 467.216747][T14180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.227150][T14180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.284652][T14184] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2431'. [ 467.401443][ T5876] usb 6-1: 0:2 : does not exist [ 467.432460][ T5876] usb 6-1: USB disconnect, device number 55 [ 467.452416][T10069] udevd[10069]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 467.496155][ T2182] block nbd0: Possible stuck request ffff888027d60000: control (read@0,1024B). Runtime 330 seconds [ 467.507363][ T2182] block nbd0: Possible stuck request ffff888027d60200: control (read@1024,1024B). Runtime 330 seconds [ 467.518668][ T2182] block nbd0: Possible stuck request ffff888027d60400: control (read@2048,1024B). Runtime 330 seconds [ 467.529845][ T2182] block nbd0: Possible stuck request ffff888027d60600: control (read@3072,1024B). Runtime 330 seconds [ 467.745105][ T5876] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 467.895160][ T5876] usb 6-1: Using ep0 maxpacket: 32 [ 467.901827][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.912756][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.922549][ T5876] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 467.931679][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.941609][ T5876] usb 6-1: config 0 descriptor?? [ 467.949467][ T5876] hub 6-1:0.0: USB hub found [ 468.152709][ T5876] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 468.175208][ C0] syz_tun: tun_net_xmit 118 [ 468.508389][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 468.518980][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 468.529226][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 468.537655][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 468.546304][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 468.573381][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 468.584284][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 468.598932][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 468.611411][ T5876] hid_parser_main: 4086 callbacks suppressed [ 468.611434][ T5876] hid-generic 0003:046D:C31C.0030: unknown main item tag 0x0 [ 468.628630][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 468.637786][ T5876] hid-generic 0003:046D:C31C.0030: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 468.638741][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 468.785172][ T805] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 468.845236][T14192] chnl_net:caif_netlink_parms(): no params data found [ 468.882942][T14198] syzkaller1: entered allmulticast mode [ 468.940575][T14192] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.948947][T14192] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.956306][T14192] bridge_slave_0: entered allmulticast mode [ 468.964899][T14192] bridge_slave_0: entered promiscuous mode [ 468.971282][ T805] usb 3-1: Using ep0 maxpacket: 32 [ 468.983132][ T805] usb 3-1: config 0 has an invalid interface number: 138 but max is 0 [ 468.991946][T14192] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.999546][ T805] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.010015][T14192] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.017361][ T805] usb 3-1: config 0 has no interface number 0 [ 469.017580][T14192] bridge_slave_1: entered allmulticast mode [ 469.023487][ T805] usb 3-1: config 0 interface 138 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 469.033018][T14192] bridge_slave_1: entered promiscuous mode [ 469.045581][ T805] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 469.064100][ T805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.072464][ T805] usb 3-1: Product: syz [ 469.076755][ T805] usb 3-1: Manufacturer: syz [ 469.081390][ T805] usb 3-1: SerialNumber: syz [ 469.101753][ T805] usb 3-1: config 0 descriptor?? [ 469.127095][T14192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.140830][T14192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.186517][T14192] team0: Port device team_slave_0 added [ 469.196192][T14192] team0: Port device team_slave_1 added [ 469.215121][ C0] syz_tun: tun_net_xmit 118 [ 469.233740][T14192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.240893][T14192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.265360][ T5890] usb 6-1: USB disconnect, device number 56 [ 469.266989][T14192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.288121][T14192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.295324][T14192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.322300][T14192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.369952][T14192] hsr_slave_0: entered promiscuous mode [ 469.380466][T14192] hsr_slave_1: entered promiscuous mode [ 469.387859][T14192] debugfs: 'hsr0' already exists in 'hsr' [ 469.393620][T14192] Cannot create hsr debugfs directory [ 469.591887][T14192] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 469.605550][T14192] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 469.618394][T14192] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 469.636449][T14192] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 469.640621][ T805] usb 3-1: USB disconnect, device number 96 [ 469.645661][T10069] udevd[10069]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.138/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 469.714093][T14192] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.721315][T14192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.728840][T14192] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.736068][T14192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.836207][T14192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.853852][T11956] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.862714][T11956] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.898872][T14192] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.922807][T11953] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.929966][T11953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.944945][ T84] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.952188][ T84] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.139174][T14192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.225249][ T805] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 470.255128][ C0] syz_tun: tun_net_xmit 118 [ 470.344952][T14192] veth0_vlan: entered promiscuous mode [ 470.358638][T14192] veth1_vlan: entered promiscuous mode [ 470.392712][T14192] veth0_macvtap: entered promiscuous mode [ 470.398616][ T805] usb 6-1: Using ep0 maxpacket: 16 [ 470.411354][T14192] veth1_macvtap: entered promiscuous mode [ 470.420551][ T805] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 470.430579][ T805] usb 6-1: config 0 has an invalid descriptor of length 157, skipping remainder of the config [ 470.454249][T14192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.461694][ T805] usb 6-1: config 0 has no interface number 0 [ 470.468352][ T805] usb 6-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 470.478171][T14192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.480791][ T805] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 470.502167][ T805] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 470.505743][ T8856] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.513464][ T805] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 4918, setting to 1024 [ 470.537386][ T805] usb 6-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 470.547795][ T805] usb 6-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 470.568526][ T805] usb 6-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 470.574365][ T8856] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.578828][ T805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.602869][ T805] usb 6-1: config 0 descriptor?? [ 470.621209][ T8856] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.621778][T14214] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 470.644834][ T8856] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.645093][T14214] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 470.675144][ T805] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 470.687691][T11962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.697697][T11962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.736824][ T51] Bluetooth: hci3: command tx timeout [ 470.782324][T11953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.792143][T11953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.889135][ T5890] usb 6-1: USB disconnect, device number 57 [ 471.054490][T14235] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2440'. [ 471.107427][T14237] sctp: [Deprecated]: syz.7.2441 (pid 14237) Use of struct sctp_assoc_value in delayed_ack socket option. [ 471.107427][T14237] Use struct sctp_sack_info instead [ 471.174182][T14239] netlink: 'syz.7.2442': attribute type 15 has an invalid length. [ 471.182319][T14239] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2442'. [ 471.275167][ T5890] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 471.295623][ C0] syz_tun: tun_net_xmit 118 [ 471.425089][ T5890] usb 3-1: Using ep0 maxpacket: 16 [ 471.442483][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.452318][T14246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.454865][ T5890] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 471.470839][T14246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.478218][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.480291][ T805] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 471.496595][ T5890] usb 3-1: config 0 descriptor?? [ 471.585076][ T5890] rc_core: IR keymap rc-xbox-dvd not found [ 471.590966][ T5890] Registered IR keymap rc-empty [ 471.598458][ T5890] rc rc0: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 471.631663][ T5890] input: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input98 [ 471.645559][ T805] usb 8-1: Using ep0 maxpacket: 16 [ 471.666206][ T805] usb 8-1: config 0 has an invalid interface number: 166 but max is 0 [ 471.679639][ T805] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.687548][ T804] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 471.690804][ T805] usb 8-1: config 0 has no interface number 0 [ 471.718566][ T5829] usb 3-1: USB disconnect, device number 97 [ 471.718590][ C0] xbox_remote 3-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 471.769467][ T805] usb 8-1: New USB device found, idVendor=0fe9, idProduct=db98, bcdDevice=d2.be [ 471.783405][ T805] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.796572][ T805] usb 8-1: Product: syz [ 471.800890][ T805] usb 8-1: Manufacturer: syz [ 471.808073][ T805] usb 8-1: SerialNumber: syz [ 471.822187][ T805] usb 8-1: config 0 descriptor?? [ 471.843876][ T805] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' in warm state. [ 471.854386][ T805] dvb-usb: bulk message failed: -22 (2/0) [ 471.873552][ T805] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 471.889323][ T805] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)) [ 471.899552][ T805] usb 8-1: media controller created [ 471.927435][ T805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 471.951323][ T805] cxusb: set interface failed [ 471.956737][ T805] dvb-usb: bulk message failed: -22 (1/0) [ 471.962496][ T805] dvb-usb: bulk message failed: -22 (3/0) [ 471.968347][ T805] usb 8-1: bluebird_gpio_write failed. [ 471.985577][ T805] dvb-usb: bulk message failed: -22 (3/0) [ 471.991345][ T805] usb 8-1: bluebird_gpio_write failed. [ 472.017768][ T805] DVB: Unable to find symbol dib7000p_attach() [ 472.024640][ T805] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' [ 472.095863][ T805] rc_core: IR keymap rc-dvico-mce not found [ 472.101806][ T805] Registered IR keymap rc-empty [ 472.108142][ T805] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 472.120999][ T805] input: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input99 [ 472.134328][ T805] dvb-usb: schedule remote query interval to 100 msecs. [ 472.141707][ T805] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) successfully initialized and connected. [ 472.156242][ T805] usb 8-1: USB disconnect, device number 2 [ 472.205958][ T804] usb 6-1: device descriptor read/64, error -71 [ 472.209398][ T805] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 ( successfully deinitialized and disconnected. [ 472.335132][ C0] syz_tun: tun_net_xmit 118 [ 472.382206][T14265] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2449'. [ 472.445134][ T804] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 472.610006][T14270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.618411][ T804] usb 6-1: Using ep0 maxpacket: 32 [ 472.626838][ T804] usb 6-1: config index 0 descriptor too short (expected 18, got 10) [ 472.628671][T14270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.637809][ T804] usb 6-1: config 163 descriptor has 1 excess byte, ignoring [ 472.651459][ T804] usb 6-1: config 163 has 0 interfaces, different from the descriptor's value: 1 [ 472.672677][ T804] usb 6-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=69.91 [ 472.683850][ T804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.685169][ T5955] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 472.692362][ T804] usb 6-1: Product: syz [ 472.704493][ T804] usb 6-1: Manufacturer: syz [ 472.709715][ T804] usb 6-1: SerialNumber: syz [ 472.719177][T14271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.729559][T14271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.815347][ T51] Bluetooth: hci3: command tx timeout [ 472.836362][T14274] netlink: 'syz.7.2452': attribute type 21 has an invalid length. [ 472.844337][T14274] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2452'. [ 472.887052][ T5955] usb 3-1: config 0 has an invalid interface number: 75 but max is 0 [ 472.896067][ T5955] usb 3-1: config 0 has no interface number 0 [ 472.904874][ T5955] usb 3-1: New USB device found, idVendor=04dd, idProduct=8001, bcdDevice=63.33 [ 472.916144][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.924253][ T5955] usb 3-1: Product: syz [ 472.928802][ T5955] usb 3-1: Manufacturer: syz [ 472.933417][ T5955] usb 3-1: SerialNumber: syz [ 472.942017][ T5955] usb 3-1: config 0 descriptor?? [ 472.985809][ T804] usb 6-1: USB disconnect, device number 59 [ 473.164767][ T5955] safe_serial 3-1:0.75: safe_serial converter detected [ 473.173295][ T5955] safe_serial 3-1:0.75: probe with driver safe_serial failed with error -22 [ 473.188608][ T5955] usb 3-1: USB disconnect, device number 98 [ 473.375187][ C0] syz_tun: tun_net_xmit 118 [ 473.382973][ T5889] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 473.519557][T14280] (syz.5.2454,14280,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 473.528581][T14280] (syz.5.2454,14280,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 473.536676][T14280] (syz.5.2454,14280,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 473.546001][T14280] (syz.5.2454,14280,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 473.558009][T14280] (syz.5.2454,14280,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 473.566944][ T5889] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 473.576255][ T5889] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.576824][T14280] (syz.5.2454,14280,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 473.584243][ T5889] usb 8-1: Product: syz [ 473.584262][ T5889] usb 8-1: Manufacturer: syz [ 473.584275][ T5889] usb 8-1: SerialNumber: syz [ 473.605191][T14280] (syz.5.2454,14280,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 473.605959][ T5889] usb 8-1: config 0 descriptor?? [ 473.613870][T14280] (syz.5.2454,14280,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 473.645979][T14280] (syz.5.2454,14280,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 473.653749][T14280] (syz.5.2454,14280,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 473.661308][T14280] (syz.5.2454,14280,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 473.670286][T14280] (syz.5.2454,14280,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 473.705966][T14280] (syz.5.2454,14280,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 473.713651][T14280] (syz.5.2454,14280,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 473.721492][T14280] (syz.5.2454,14280,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 473.732860][T14280] (syz.5.2454,14280,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 473.777031][T14280] (syz.5.2454,14280,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 473.784697][T14280] (syz.5.2454,14280,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 473.793242][T14280] (syz.5.2454,14280,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 473.802898][T14280] (syz.5.2454,14280,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 473.814120][T14280] (syz.5.2454,14280,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 473.822160][T14280] (syz.5.2454,14280,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 473.829598][T14280] (syz.5.2454,14280,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 473.838503][T14280] (syz.5.2454,14280,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 473.848280][T14280] (syz.5.2454,14280,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 473.858773][T14280] (syz.5.2454,14280,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 473.866502][T14280] (syz.5.2454,14280,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 473.875558][T14280] (syz.5.2454,14280,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 473.910888][T14280] (syz.5.2454,14280,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 473.919555][T14280] (syz.5.2454,14280,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 473.928574][T14280] (syz.5.2454,14280,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 473.937933][T14280] (syz.5.2454,14280,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 473.962911][T14280] (syz.5.2454,14280,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 473.971516][T14280] (syz.5.2454,14280,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 473.979060][T14280] (syz.5.2454,14280,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 473.987835][T14280] (syz.5.2454,14280,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 474.026431][T14280] (syz.5.2454,14280,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 474.034140][T14280] (syz.5.2454,14280,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 474.041779][T14280] (syz.5.2454,14280,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 474.050634][T14280] (syz.5.2454,14280,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 474.085884][T14280] (syz.5.2454,14280,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 474.093575][T14280] (syz.5.2454,14280,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 474.101430][T14280] (syz.5.2454,14280,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 474.110313][T14280] (syz.5.2454,14280,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 474.145892][T14280] (syz.5.2454,14280,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 474.153566][T14280] (syz.5.2454,14280,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 474.161189][T14280] (syz.5.2454,14280,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 474.169938][T14280] (syz.5.2454,14280,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 474.186098][T14280] (syz.5.2454,14280,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 474.193796][T14280] (syz.5.2454,14280,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 474.201300][T14280] (syz.5.2454,14280,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 474.205091][ T5876] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 474.210129][T14280] (syz.5.2454,14280,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 474.257182][T14280] (syz.5.2454,14280,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 474.266491][T14280] (syz.5.2454,14280,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 474.276396][T14280] (syz.5.2454,14280,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 474.285914][T14280] (syz.5.2454,14280,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 474.297290][T14280] (syz.5.2454,14280,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 474.304973][T14280] (syz.5.2454,14280,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 474.312522][T14280] (syz.5.2454,14280,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 474.321271][T14280] (syz.5.2454,14280,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 474.376944][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.395310][ T5876] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 474.404450][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.415150][ C0] syz_tun: tun_net_xmit 118 [ 474.424300][ T5876] usb 3-1: config 0 descriptor?? [ 474.432658][T14294] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2458'. [ 474.494050][T14297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.507388][T14297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.651203][ T5876] usbhid 3-1:0.0: can't add hid device: -71 [ 474.663671][ T5876] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 474.684185][ T5889] usb 8-1: Firmware version (0.0) predates our first public release. [ 474.684866][ T5876] usb 3-1: USB disconnect, device number 99 [ 474.708807][ T5889] usb 8-1: Please update to version 0.2 or newer [ 474.765383][ T5889] usb 8-1: USB disconnect, device number 3 [ 474.895445][ T51] Bluetooth: hci3: command tx timeout [ 475.075163][ T5955] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 475.157560][ T5876] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 475.249975][ T5955] usb 6-1: Using ep0 maxpacket: 16 [ 475.279070][ T5955] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 475.296776][ T5876] usb 3-1: device descriptor read/64, error -71 [ 475.305153][ T5955] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.326618][ T5955] usb 6-1: config 0 descriptor?? [ 475.336484][ T5889] usb 2-1: USB disconnect, device number 106 [ 475.353964][ T5955] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 475.455117][ C0] syz_tun: tun_net_xmit 118 [ 475.507186][ T5831] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 475.523935][ T5831] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 475.536751][ T5831] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 475.545385][ T5831] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 475.554165][ T5831] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 475.566702][ T5876] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 475.595154][ T5829] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 475.659716][ T5955] usb 6-1: Detected FT232B [ 475.728009][ T5876] usb 3-1: device descriptor read/64, error -71 [ 475.863013][ T5955] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 475.874190][ T5876] usb usb3-port1: attempt power cycle [ 475.894832][ T5955] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 475.915126][ T5955] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 475.948290][ T5955] usb 6-1: USB disconnect, device number 60 [ 475.985105][ T5955] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 476.021274][ T5955] ftdi_sio 6-1:0.0: device disconnected [ 476.065304][ T5829] usb 8-1: device descriptor read/64, error -71 [ 476.082160][T14319] chnl_net:caif_netlink_parms(): no params data found [ 476.153852][T14319] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.161281][T14319] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.168674][T14319] bridge_slave_0: entered allmulticast mode [ 476.178509][T14319] bridge_slave_0: entered promiscuous mode [ 476.186956][T14319] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.194170][T14319] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.201785][T14319] bridge_slave_1: entered allmulticast mode [ 476.209182][T14319] bridge_slave_1: entered promiscuous mode [ 476.235242][ T5876] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 476.241661][T14319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.256153][ T5876] usb 3-1: device descriptor read/8, error -71 [ 476.259024][T14319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.295770][T14319] team0: Port device team_slave_0 added [ 476.304179][T14319] team0: Port device team_slave_1 added [ 476.315186][ T5829] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 476.336370][T14319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.343341][T14319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.369308][T14319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.382039][T14319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.389051][T14319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.415991][T14319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.495903][ C0] syz_tun: tun_net_xmit 118 [ 476.496662][ T5876] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 476.513070][ T5829] usb 8-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 476.519815][T14319] hsr_slave_0: entered promiscuous mode [ 476.529579][ T5829] usb 8-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 476.537106][T14319] hsr_slave_1: entered promiscuous mode [ 476.546176][T14319] debugfs: 'hsr0' already exists in 'hsr' [ 476.551923][T14319] Cannot create hsr debugfs directory [ 476.561734][ T5829] usb 8-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 476.575186][ T5829] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.583790][ T5876] usb 3-1: device descriptor read/8, error -71 [ 476.612021][ T5829] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 476.695596][ T5876] usb usb3-port1: unable to enumerate USB device [ 476.817017][ T5829] gspca_sn9c2028: read1 error 0 [ 476.976806][ T51] Bluetooth: hci3: command tx timeout [ 477.018903][T14323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.030082][T14323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.059191][ T5829] gspca_sn9c2028: read1 error -71 [ 477.066805][ T5829] gspca_sn9c2028: read1 error -71 [ 477.071935][ T5829] sn9c2028 8-1:220.0: probe with driver sn9c2028 failed with error -71 [ 477.112800][T14319] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 477.114873][ T5829] usb 8-1: USB disconnect, device number 5 [ 477.147708][T14319] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 477.259248][T14319] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 477.273907][T14319] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 477.285170][T14340] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2467'. [ 477.401952][T14349] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2468'. [ 477.523667][T14319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.535180][ C0] syz_tun: tun_net_xmit 118 [ 477.568459][T14319] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.584876][ T84] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.592152][ T84] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.619700][ T51] Bluetooth: hci6: command tx timeout [ 477.624177][ T84] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.633212][ T84] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.665454][ T5829] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 477.714893][T14359] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 477.830755][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 477.856247][ T5829] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 477.873979][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 477.889721][ T5829] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 477.920382][ T5829] usb 3-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 477.946276][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.954936][ T5829] usb 3-1: Product: syz [ 477.964679][ T5829] usb 3-1: Manufacturer: syz [ 477.969631][ T5829] usb 3-1: SerialNumber: syz [ 477.990058][ T5829] usb 3-1: config 0 descriptor?? [ 478.006287][ T5829] ti_usb_3410_5052 3-1:0.0: TI USB 3410 1 port adapter converter detected [ 478.022798][ T5829] usb 3-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 478.042012][T14319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.116878][ T5890] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 478.212226][ T10] usb 3-1: USB disconnect, device number 104 [ 478.234177][ T10] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 478.266207][ T5889] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 478.271971][T14319] veth0_vlan: entered promiscuous mode [ 478.276152][ T10] ti_usb_3410_5052 3-1:0.0: device disconnected [ 478.287818][ T5890] usb 8-1: Using ep0 maxpacket: 16 [ 478.292722][T14319] veth1_vlan: entered promiscuous mode [ 478.298516][ T5890] usb 8-1: config 0 has an invalid interface number: 166 but max is 0 [ 478.308936][ T5890] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.333717][ T5890] usb 8-1: config 0 has no interface number 0 [ 478.353152][ T5890] usb 8-1: New USB device found, idVendor=0fe9, idProduct=db98, bcdDevice=d2.be [ 478.364381][ T5890] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.374041][T14319] veth0_macvtap: entered promiscuous mode [ 478.375889][ T5890] usb 8-1: Product: syz [ 478.383993][ T5890] usb 8-1: Manufacturer: syz [ 478.389803][ T5890] usb 8-1: SerialNumber: syz [ 478.399754][T14319] veth1_macvtap: entered promiscuous mode [ 478.406291][ T5890] usb 8-1: config 0 descriptor?? [ 478.424250][ T5890] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' in warm state. [ 478.433497][T14319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.441119][ T5889] usb 6-1: Using ep0 maxpacket: 16 [ 478.444770][T14319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.456857][ T5890] dvb-usb: bulk message failed: -22 (2/0) [ 478.462832][ T5889] usb 6-1: too many configurations: 14, using maximum allowed: 8 [ 478.468307][ T8856] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.476838][ T5890] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 478.491916][ T5890] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)) [ 478.505206][ T5890] usb 8-1: media controller created [ 478.510662][ T36] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.519724][ T36] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.539811][ T36] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.553164][ T5889] usb 6-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 478.562400][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.585321][ C0] syz_tun: tun_net_xmit 118 [ 478.593675][ T5889] usb 6-1: Product: syz [ 478.599543][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 478.609826][ T5889] usb 6-1: Manufacturer: syz [ 478.623510][ T5889] usb 6-1: SerialNumber: syz [ 478.652596][ T5889] usb 6-1: config 0 descriptor?? [ 478.665677][ T5890] cxusb: set interface failed [ 478.670422][ T5890] dvb-usb: bulk message failed: -22 (1/0) [ 478.674630][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.679265][ T5890] dvb-usb: bulk message failed: -22 (3/0) [ 478.692882][ T5890] usb 8-1: bluebird_gpio_write failed. [ 478.692931][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.725948][ T5890] dvb-usb: bulk message failed: -22 (3/0) [ 478.731859][ T8856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.740716][ T5890] usb 8-1: bluebird_gpio_write failed. [ 478.746909][ T8856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.792075][ T5890] DVB: Unable to find symbol dib7000p_attach() [ 478.798912][ T5890] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' [ 478.876756][ T5889] usb 6-1: USB disconnect, device number 61 [ 478.965308][ T5890] rc_core: IR keymap rc-dvico-mce not found [ 478.971248][ T5890] Registered IR keymap rc-empty [ 478.982073][ T5890] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 478.995673][ T5890] input: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input100 [ 479.010016][ T5890] dvb-usb: schedule remote query interval to 100 msecs. [ 479.017042][ T5890] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) successfully initialized and connected. [ 479.034309][ T5890] usb 8-1: USB disconnect, device number 6 [ 479.069690][ T5890] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 ( successfully deinitialized and disconnected. [ 479.155262][ T5955] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 479.234167][T14387] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2477'. [ 479.315249][ T5955] usb 9-1: Using ep0 maxpacket: 8 [ 479.326434][T14391] binder: 14390:14391 unknown command 0 [ 479.326905][ T5955] usb 9-1: config 163 has an invalid interface number: 247 but max is 0 [ 479.332208][T14391] binder: 14390:14391 ioctl c0306201 200000000080 returned -22 [ 479.344657][ T5955] usb 9-1: config 163 has no interface number 0 [ 479.354591][ T5955] usb 9-1: config 163 interface 247 has no altsetting 0 [ 479.366488][ T5955] usb 9-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=dc.ba [ 479.376977][ T5955] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.385612][ T5955] usb 9-1: Product: syz [ 479.389857][ T5955] usb 9-1: Manufacturer: syz [ 479.394460][ T5955] usb 9-1: SerialNumber: syz [ 479.595477][ T5890] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 479.615124][ C0] syz_tun: tun_net_xmit 118 [ 479.695116][ T51] Bluetooth: hci6: command tx timeout [ 479.705208][ T5889] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 479.715240][ T5876] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 479.746790][ T5890] usb 8-1: config index 0 descriptor too short (expected 1392, got 880) [ 479.755497][ T5890] usb 8-1: config 0 has an invalid interface number: 137 but max is 0 [ 479.763674][ T5890] usb 8-1: config 0 has an invalid descriptor of length 152, skipping remainder of the config [ 479.774250][ T5890] usb 8-1: config 0 has no interface number 0 [ 479.781447][ T5890] usb 8-1: config 0 interface 137 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 479.792861][ T5890] usb 8-1: config 0 interface 137 altsetting 0 endpoint 0x4 has invalid maxpacket 528, setting to 64 [ 479.803883][ T5890] usb 8-1: config 0 interface 137 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 479.815542][ T5890] usb 8-1: config 0 interface 137 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 479.826876][ T5890] usb 8-1: config 0 interface 137 altsetting 0 endpoint 0x8 has invalid maxpacket 383, setting to 64 [ 479.828452][T14381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.837938][ T5890] usb 8-1: config 0 interface 137 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 479.857570][ T5890] usb 8-1: config 0 interface 137 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 16 [ 479.860125][T14381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.873658][ T5890] usb 8-1: New USB device found, idVendor=045e, idProduct=045d, bcdDevice=e8.28 [ 479.887810][ T5889] usb 6-1: Using ep0 maxpacket: 8 [ 479.888178][ T5876] usb 3-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x43, changing to 0x3 [ 479.893566][ T5890] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.905596][ T5876] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x3 has invalid maxpacket 65, setting to 64 [ 479.914772][ T5890] usb 8-1: Product: syz [ 479.929161][ T5890] usb 8-1: Manufacturer: syz [ 479.933172][ T5876] usb 3-1: config 0 interface 0 has no altsetting 0 [ 479.933903][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.953048][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.964230][ T5890] usb 8-1: SerialNumber: syz [ 479.969519][ T5889] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 479.973236][ T5955] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 479.985556][ T5890] usb 8-1: config 0 descriptor?? [ 479.998502][ T5889] usb 6-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 479.998530][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.001700][T14391] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 480.015671][ T5955] dvb-usb: bulk message failed: -22 (2/0) [ 480.034899][ T5876] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 480.035532][ T5889] usb 6-1: config 0 descriptor?? [ 480.045856][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 480.058796][ T5876] usb 3-1: Product: syz [ 480.062984][ T5876] usb 3-1: Manufacturer: syz [ 480.075473][ T5955] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 480.083981][ T5876] usb 3-1: SerialNumber: syz [ 480.089691][ T5955] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 480.103607][ T5955] usb 9-1: media controller created [ 480.114298][ T5876] usb 3-1: config 0 descriptor?? [ 480.120124][T14394] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 480.121725][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 480.140126][ T5876] usb 3-1: selecting invalid altsetting 0 [ 480.159622][ T5955] usb 9-1: DVB: registering adapter 2 frontend 0 (WideView USB DVB-T)... [ 480.185592][ T5955] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 480.285082][ T5955] rc_core: IR keymap rc-dtt200u not found [ 480.290842][ T5955] Registered IR keymap rc-empty [ 480.297424][ T5955] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0 [ 480.299411][ T5890] usb 8-1: USB disconnect, device number 7 [ 480.312036][ T5955] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input101 [ 480.341865][ T5955] dvb-usb: schedule remote query interval to 300 msecs. [ 480.360341][ T5955] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 480.367660][T14394] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 480.379797][T14394] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 480.386033][ T5955] usb 9-1: USB disconnect, device number 2 [ 480.394728][T14394] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 480.411341][T14394] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 480.437085][T14397] overlayfs: invalid origin (000000ca67081e5f112bed8ab4416592a5356da96db48150eae0040000006fe65c239a40022f00000000000000000000) [ 480.464676][ T5955] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 480.480213][ T5889] thrustmaster 0003:044F:B324.0031: item fetching failed at offset 10/12 [ 480.498411][ T5889] thrustmaster 0003:044F:B324.0031: parse failed [ 480.507041][ T5889] thrustmaster 0003:044F:B324.0031: probe with driver thrustmaster failed with error -22 [ 480.655162][ C0] syz_tun: tun_net_xmit 118 [ 480.955629][ T5955] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 481.071871][T14408] program syz.7.2485 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 481.138313][ T5955] usb 9-1: config 0 has an invalid interface number: 93 but max is 0 [ 481.146740][ T5955] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.157642][ T5955] usb 9-1: config 0 has no interface number 0 [ 481.163758][ T5955] usb 9-1: config 0 interface 93 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 481.177050][ T5955] usb 9-1: config 0 interface 93 has no altsetting 0 [ 481.183773][ T5955] usb 9-1: New USB device found, idVendor=07ff, idProduct=4e09, bcdDevice=37.aa [ 481.192950][ T5955] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.203466][ T5955] usb 9-1: config 0 descriptor?? [ 481.413862][ T804] usb 9-1: USB disconnect, device number 3 [ 481.634554][T14410] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2486'. [ 481.695105][ C0] syz_tun: tun_net_xmit 118 [ 481.775837][ T51] Bluetooth: hci6: command tx timeout [ 482.028091][T14415] tmpfs: Unknown parameter 'usrquotaNö—:4ðõT5¨ªWÏ'ZËpíÜ¥R"AVãÞ€}(”æ¨ ]3°b' [ 482.037395][ T5876] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 482.099316][T14393] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 482.195159][ T5876] usb 8-1: Using ep0 maxpacket: 16 [ 482.207262][ T5876] usb 8-1: config 0 has an invalid interface number: 137 but max is 0 [ 482.225212][ T5876] usb 8-1: config 0 has no interface number 0 [ 482.234244][ T5876] usb 8-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=ac.48 [ 482.244028][ T5876] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.264374][ T5876] usb 8-1: Product: syz [ 482.268709][ T5876] usb 8-1: Manufacturer: syz [ 482.273463][ T5876] usb 8-1: SerialNumber: syz [ 482.286317][ T5876] usb 8-1: config 0 descriptor?? [ 482.294273][ T5876] appledisplay 8-1:0.137: Could not find int-in endpoint [ 482.303375][ T5876] usbhid 8-1:0.137: couldn't find an input interrupt endpoint [ 482.479025][ T5876] usb 6-1: USB disconnect, device number 62 [ 482.498103][T14412] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2487'. [ 482.542728][ T804] usb 8-1: USB disconnect, device number 8 [ 482.737715][ C0] syz_tun: tun_net_xmit 118 [ 482.918766][ T5876] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 483.111272][ T5876] usb 6-1: Using ep0 maxpacket: 8 [ 483.116867][ T5890] usb 3-1: USB disconnect, device number 105 [ 483.123557][ T5876] usb 6-1: config 163 has an invalid interface number: 247 but max is 0 [ 483.133822][ T5876] usb 6-1: config 163 has no interface number 0 [ 483.153019][ T5876] usb 6-1: config 163 interface 247 has no altsetting 0 [ 483.162602][ T5876] usb 6-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=dc.ba [ 483.190412][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.200354][ T5876] usb 6-1: Product: syz [ 483.204552][ T5876] usb 6-1: Manufacturer: syz [ 483.246581][ T5876] usb 6-1: SerialNumber: syz [ 483.475384][ T5876] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 483.485478][ T5876] dvb-usb: bulk message failed: -22 (2/0) [ 483.493704][ T5876] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 483.504668][ T5876] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 483.515574][ T5876] usb 6-1: media controller created [ 483.522341][ T5876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 483.531002][ T5955] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 483.544797][ T5876] usb 6-1: DVB: registering adapter 2 frontend 0 (WideView USB DVB-T)... [ 483.554168][ T5876] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 483.637935][ T5876] rc_core: IR keymap rc-dtt200u not found [ 483.644064][ T5876] Registered IR keymap rc-empty [ 483.650670][ T5876] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 483.665179][ T5876] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input102 [ 483.681962][ T5876] dvb-usb: schedule remote query interval to 300 msecs. [ 483.689866][ T5876] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 483.706199][ T5955] usb 8-1: config 0 has an invalid interface number: 96 but max is 0 [ 483.714726][ T5955] usb 8-1: config 0 has no interface number 0 [ 483.723807][ T5955] usb 8-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 483.735409][ T5876] usb 6-1: USB disconnect, device number 63 [ 483.741657][ T5955] usb 8-1: config 0 interface 96 altsetting 3 endpoint 0x88 has invalid wMaxPacketSize 0 [ 483.751800][ T5955] usb 8-1: config 0 interface 96 has no altsetting 0 [ 483.762648][ T5955] usb 8-1: New USB device found, idVendor=0b57, idProduct=6a8d, bcdDevice=33.74 [ 483.773002][ T5955] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.781400][ T5955] usb 8-1: Product: syz [ 483.783501][ C0] syz_tun: tun_net_xmit 118 [ 483.787422][ T5955] usb 8-1: Manufacturer: syz [ 483.802785][ T5955] usb 8-1: SerialNumber: syz [ 483.831824][ T5955] usb 8-1: config 0 descriptor?? [ 483.857825][ T51] Bluetooth: hci6: command tx timeout [ 483.874692][ T5876] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 484.088386][T14438] ieee802154 phy1 wpan1: encryption failed: -22 [ 484.179020][ T5955] usb 8-1: USB disconnect, device number 9 [ 484.292990][T14452] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2496'. [ 484.303164][T14449] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2496'. [ 484.371708][T14451] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2497'. [ 484.504701][T14457] gfs2: not a GFS2 filesystem [ 484.820501][ C0] syz_tun: tun_net_xmit 118 [ 484.906886][ T5876] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 485.069961][T14450] bridge0: entered allmulticast mode [ 485.075600][T14451] bridge_slave_1: left allmulticast mode [ 485.081688][T14451] bridge_slave_1: left promiscuous mode [ 485.087912][T14451] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.098600][ T5876] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.133510][ T5876] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.147114][ T5876] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 485.149018][T14451] bridge_slave_0: left allmulticast mode [ 485.158761][ T5876] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 485.170945][ T5876] usb 8-1: Manufacturer: syz [ 485.179358][T14461] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2501'. [ 485.188496][T14451] bridge_slave_0: left promiscuous mode [ 485.195378][T14451] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.205860][ T5876] usb 8-1: config 0 descriptor?? [ 485.233805][T14451] bridge0 (unregistering): left allmulticast mode [ 485.506522][ T5955] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 485.514352][ T24] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 485.645142][ T5955] usb 3-1: device descriptor read/64, error -71 [ 485.665170][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 485.671974][ T24] usb 9-1: config 163 has an invalid interface number: 247 but max is 0 [ 485.680692][ T24] usb 9-1: config 163 has no interface number 0 [ 485.687773][ T24] usb 9-1: config 163 interface 247 has no altsetting 0 [ 485.697762][ T24] usb 9-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=dc.ba [ 485.707402][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.715856][ T24] usb 9-1: Product: syz [ 485.720047][ T24] usb 9-1: Manufacturer: syz [ 485.724648][ T24] usb 9-1: SerialNumber: syz [ 485.823747][T14459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.832592][T14459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.845262][ T5937] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 485.855132][ C0] syz_tun: tun_net_xmit 118 [ 485.885164][ T5955] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 485.940267][ T24] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 485.950588][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 485.956774][ T24] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 485.966429][ T24] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 485.977292][ T24] usb 9-1: media controller created [ 485.983500][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 485.996045][ T24] usb 9-1: DVB: registering adapter 2 frontend 0 (WideView USB DVB-T)... [ 486.004607][ T24] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 486.013897][ T5937] usb 6-1: Using ep0 maxpacket: 32 [ 486.025129][ T5955] usb 3-1: device descriptor read/64, error -71 [ 486.034123][ T5937] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 486.042770][ T5937] usb 6-1: config 0 has no interface number 0 [ 486.049951][ T5876] uclogic 0003:256C:006D.0032: failed retrieving Huion firmware version: -71 [ 486.059288][ T5937] usb 6-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 486.072569][ T5876] uclogic 0003:256C:006D.0032: failed probing parameters: -71 [ 486.080362][ T5876] uclogic 0003:256C:006D.0032: probe with driver uclogic failed with error -71 [ 486.091818][ T5937] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 486.102164][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.111887][ T5876] usb 8-1: USB disconnect, device number 10 [ 486.117972][ T24] rc_core: IR keymap rc-dtt200u not found [ 486.123703][ T24] Registered IR keymap rc-empty [ 486.132096][ T5937] usb 6-1: Product: syz [ 486.137476][ T5955] usb usb3-port1: attempt power cycle [ 486.144486][ T5937] usb 6-1: Manufacturer: syz [ 486.150639][ T24] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0 [ 486.163647][ T5937] usb 6-1: SerialNumber: syz [ 486.170275][ T5937] usb 6-1: config 0 descriptor?? [ 486.179145][ T24] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input104 [ 486.193698][ T5937] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 486.204403][ T5937] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -22 [ 486.214088][ T24] dvb-usb: schedule remote query interval to 300 msecs. [ 486.223540][ T24] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 486.241171][ T24] usb 9-1: USB disconnect, device number 4 [ 486.280638][ T24] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 486.395684][ T5876] usb 6-1: USB disconnect, device number 64 [ 486.487847][T14478] netlink: 'syz.8.2507': attribute type 39 has an invalid length. [ 486.505586][ T5955] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 486.525720][ T5955] usb 3-1: device descriptor read/8, error -71 [ 486.766602][T14489] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2511'. [ 486.775176][ T5955] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 486.817422][ T5955] usb 3-1: device descriptor read/8, error -71 [ 486.905190][ C0] syz_tun: tun_net_xmit 118 [ 486.926943][ T5955] usb usb3-port1: unable to enumerate USB device [ 487.095232][ T5889] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 487.236160][ T24] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 487.245275][ T5889] usb 8-1: Using ep0 maxpacket: 8 [ 487.250475][ T804] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 487.259968][ T5889] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 487.268554][ T5889] usb 8-1: config 179 has no interface number 0 [ 487.274846][ T5889] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 487.286572][ T5889] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 487.298337][ T5889] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 487.308469][ T5889] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 487.321802][ T5889] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 487.331380][ T5889] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.342577][T14492] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 487.395933][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 487.402492][ T24] usb 9-1: config 0 has an invalid interface number: 145 but max is 0 [ 487.406606][ T804] usb 6-1: config 0 has an invalid interface number: 121 but max is 0 [ 487.410981][ T24] usb 9-1: config 0 has no interface number 0 [ 487.419077][ T804] usb 6-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 487.427613][ T24] usb 9-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 487.433861][ T804] usb 6-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 487.443301][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.454029][ T804] usb 6-1: config 0 has no interface number 0 [ 487.461700][ T24] usb 9-1: Product: syz [ 487.472616][ T24] usb 9-1: Manufacturer: syz [ 487.475373][ T804] usb 6-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=2f.46 [ 487.477651][ T24] usb 9-1: SerialNumber: syz [ 487.488966][ T804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.499152][ T804] usb 6-1: Product: syz [ 487.500047][ T24] usb 9-1: config 0 descriptor?? [ 487.503317][ T804] usb 6-1: Manufacturer: syz [ 487.503332][ T804] usb 6-1: SerialNumber: syz [ 487.505943][ T804] usb 6-1: config 0 descriptor?? [ 487.669790][T14492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.680535][T14492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.692637][ T5955] usb 8-1: USB disconnect, device number 11 [ 487.744030][ T24] hub 9-1:0.145: bad descriptor, ignoring hub [ 487.755129][ T24] hub 9-1:0.145: probe with driver hub failed with error -5 [ 487.766960][ T24] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.145/input/input105 [ 487.815093][ T24] usb 9-1: USB disconnect, device number 5 [ 487.888182][ T804] rndis_host 6-1:0.121: skipping garbage [ 487.893871][ T804] usb 6-1: bad CDC descriptors [ 487.900484][ T804] cdc_acm 6-1:0.121: skipping garbage [ 487.911149][ T804] usb 6-1: USB disconnect, device number 65 [ 487.935148][ C0] syz_tun: tun_net_xmit 118 [ 488.383255][T14514] usb usb7: usbfs: process 14514 (syz.2.2518) did not claim interface 0 before use [ 488.465528][T14519] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2520'. [ 488.485443][ T5955] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 488.499000][T14521] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2521'. [ 488.646765][ T5955] usb 8-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 488.667411][ T5955] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 488.687636][ T5831] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 488.707761][ T5831] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 488.720109][ T5831] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 488.728119][ T5831] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 488.739956][ T5831] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 488.756397][ T5955] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 30768, setting to 64 [ 488.768983][ T5955] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 488.792585][ T5955] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 488.803717][ T5955] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 488.811959][ T5955] usb 8-1: Product: syz [ 488.816376][ T5955] usb 8-1: Manufacturer: syz [ 488.821059][ T5955] usb 8-1: SerialNumber: syz [ 488.850217][ T5955] usb 8-1: config 0 descriptor?? [ 488.975118][ C0] syz_tun: tun_net_xmit 118 [ 489.021304][ T84] Bluetooth: hci8: Frame reassembly failed (-84) [ 489.066909][ T5955] radio-si470x 8-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 489.073734][ T5955] radio-si470x 8-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 489.188868][T14525] chnl_net:caif_netlink_parms(): no params data found [ 489.268546][T14534] netlink: 328 bytes leftover after parsing attributes in process `syz.7.2517'. [ 489.275977][ T5955] radio-si470x 8-1:0.0: software version 0, hardware version 0 [ 489.295508][ T5955] radio-si470x 8-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 489.307958][ T5955] radio-si470x 8-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 489.319427][T14534] netlink: 328 bytes leftover after parsing attributes in process `syz.7.2517'. [ 489.367653][T14534] netlink: 328 bytes leftover after parsing attributes in process `syz.7.2517'. [ 489.383587][T14538] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2526'. [ 489.399716][T14534] netlink: 328 bytes leftover after parsing attributes in process `syz.7.2517'. [ 489.433029][T14534] netlink: 328 bytes leftover after parsing attributes in process `syz.7.2517'. [ 489.468445][T14534] netlink: 328 bytes leftover after parsing attributes in process `syz.7.2517'. [ 489.478176][T14534] netlink: 328 bytes leftover after parsing attributes in process `syz.7.2517'. [ 489.522669][ T5955] radio-si470x 8-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 489.532659][ C1] radio-si470x 8-1:0.0: non-zero urb status (-71) [ 489.536728][T14525] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.539525][ C1] radio-si470x 8-1:0.0: non-zero urb status (-71) [ 489.553448][ C1] radio-si470x 8-1:0.0: non-zero urb status (-71) [ 489.560200][ C1] radio-si470x 8-1:0.0: non-zero urb status (-71) [ 489.567110][ C1] radio-si470x 8-1:0.0: non-zero urb status (-71) [ 489.573768][ C1] radio-si470x 8-1:0.0: non-zero urb status (-71) [ 489.580557][ C1] radio-si470x 8-1:0.0: non-zero urb status (-71) [ 489.582810][T14525] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.587350][ C1] radio-si470x 8-1:0.0: non-zero urb status (-71) [ 489.600116][T14525] bridge_slave_0: entered allmulticast mode [ 489.601161][ C1] radio-si470x 8-1:0.0: non-zero urb status (-71) [ 489.613468][ C1] radio-si470x 8-1:0.0: non-zero urb status (-71) [ 489.620623][ C1] radio-si470x 8-1:0.0: non-zero urb status (-71) [ 489.627562][ C1] radio-si470x 8-1:0.0: non-zero urb status (-71) [ 489.634273][ C1] radio-si470x 8-1:0.0: non-zero urb status (-71) [ 489.641673][ T5955] radio-si470x 8-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 489.643687][T14525] bridge_slave_0: entered promiscuous mode [ 489.650164][ C1] radio-si470x 8-1:0.0: non-zero urb status (-71) [ 489.663425][ C1] radio-si470x 8-1:0.0: non-zero urb status (-71) [ 489.670784][ T5955] radio-si470x 8-1:0.0: probe with driver radio-si470x failed with error -22 [ 489.684643][ T5955] usb 8-1: USB disconnect, device number 12 [ 489.709437][T14525] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.717709][T14525] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.724945][T14525] bridge_slave_1: entered allmulticast mode [ 489.735827][T14525] bridge_slave_1: entered promiscuous mode [ 489.774273][T14525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.790807][T14525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.832511][T14525] team0: Port device team_slave_0 added [ 489.842141][T14525] team0: Port device team_slave_1 added [ 489.866216][ T24] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 489.878768][T14525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.885872][T14525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.912889][T14525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.927090][T14525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.934117][T14525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.962746][T14525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.005358][T14525] hsr_slave_0: entered promiscuous mode [ 490.012098][T14525] hsr_slave_1: entered promiscuous mode [ 490.017815][ C0] syz_tun: tun_net_xmit 118 [ 490.026661][T14525] debugfs: 'hsr0' already exists in 'hsr' [ 490.032382][T14525] Cannot create hsr debugfs directory [ 490.045402][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 490.056677][ T24] usb 9-1: unable to get BOS descriptor or descriptor too short [ 490.069874][ T24] usb 9-1: config 128 has an invalid interface number: 127 but max is 3 [ 490.083651][ T24] usb 9-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 490.096405][ T24] usb 9-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 490.120210][ T24] usb 9-1: config 128 has no interface number 0 [ 490.127293][ T24] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 490.138940][ T24] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 490.154092][ T24] usb 9-1: config 128 interface 127 has no altsetting 0 [ 490.164959][ T24] usb 9-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 490.174679][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.187086][ T24] usb 9-1: Product: syz [ 490.191319][ T24] usb 9-1: Manufacturer: syz [ 490.199394][ T24] usb 9-1: SerialNumber: syz [ 490.358819][T14525] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.483597][ T24] usb 9-1: USB disconnect, device number 6 [ 490.485927][T14525] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.523806][T10069] udevd[10069]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 490.525184][ T5890] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 490.589351][T14525] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.631046][T14525] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.699265][ T5890] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 490.707108][ T5890] usb 8-1: can't read configurations, error -61 [ 490.744714][T14525] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 490.757153][T14525] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 490.769333][T14525] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 490.780730][T14525] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 490.815574][ T51] Bluetooth: hci7: command tx timeout [ 490.837083][ T5890] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 490.880201][T14525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.902884][T14525] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.917208][T11959] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.924426][T11959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.945039][T11959] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.952218][T11959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.012783][ T5890] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 491.025102][ T5890] usb 8-1: can't read configurations, error -61 [ 491.036708][ T5890] usb usb8-port1: attempt power cycle [ 491.055150][ C0] syz_tun: tun_net_xmit 118 [ 491.055899][ T5831] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 491.064350][ T51] Bluetooth: hci8: command 0x1003 tx timeout [ 491.225365][ T24] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 491.311856][T14525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.375451][ T5890] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 491.395755][T14525] veth0_vlan: entered promiscuous mode [ 491.407658][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 491.416519][ T5890] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 491.424721][T14525] veth1_vlan: entered promiscuous mode [ 491.424810][ T24] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 491.430858][ T5890] usb 8-1: can't read configurations, error -61 [ 491.463113][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 491.482976][ T24] usb 9-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 491.492520][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.494304][T14525] veth0_macvtap: entered promiscuous mode [ 491.506595][ T24] usb 9-1: Product: syz [ 491.512286][ T24] usb 9-1: Manufacturer: syz [ 491.518501][T14525] veth1_macvtap: entered promiscuous mode [ 491.535277][ T24] usb 9-1: SerialNumber: syz [ 491.544351][ T24] usb 9-1: config 0 descriptor?? [ 491.558808][T14525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.578608][T14525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.595637][ T5890] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 491.607229][ T84] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.625634][ T84] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.641929][ T5890] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 491.661295][ T84] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.668646][ T5890] usb 8-1: can't read configurations, error -61 [ 491.677982][ T5890] usb usb8-port1: unable to enumerate USB device [ 491.684898][T14565] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 491.694716][ T84] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.780556][ C1] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 491.798675][ T24] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input106 [ 491.819850][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.832565][ T24] imon:send_packet: packet tx failed (-71) [ 491.839095][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.856279][ T24] imon 9-1:0.0: panel buttons/knobs setup failed [ 491.905713][T11959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.913767][T11959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.927470][ T24] rc_core: IR keymap rc-imon-pad not found [ 491.933721][ T24] Registered IR keymap rc-empty [ 491.941761][ T24] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 491.956272][ T24] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 491.966950][ T24] imon:send_packet: packet tx failed (-71) [ 491.987156][ T24] imon 9-1:0.0: remote input dev register failed [ 491.994439][ T24] imon 9-1:0.0: imon_init_intf0: rc device setup failed [ 492.067394][ T24] imon 9-1:0.0: unable to initialize intf0, err 0 [ 492.074111][ T24] imon:imon_probe: failed to initialize context! [ 492.095097][ C0] syz_tun: tun_net_xmit 118 [ 492.107031][ T24] imon 9-1:0.0: unable to register, err -19 [ 492.124395][ T24] usb 9-1: USB disconnect, device number 7 [ 492.154756][T14577] netlink: 'syz.5.2533': attribute type 21 has an invalid length. [ 492.179872][T14577] netlink: 'syz.5.2533': attribute type 4 has an invalid length. [ 492.289033][T14584] random: crng reseeded on system resumption [ 492.446198][ T24] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 492.605046][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 492.624549][ T24] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 492.651928][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 492.663753][ T24] usb 9-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 492.674064][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.682386][ T24] usb 9-1: Product: syz [ 492.687941][T14599] netlink: 'syz.5.2540': attribute type 1 has an invalid length. [ 492.696179][ T24] usb 9-1: Manufacturer: syz [ 492.701213][ T24] usb 9-1: SerialNumber: syz [ 492.715818][ T24] usb 9-1: config 0 descriptor?? [ 492.897255][ T5831] Bluetooth: hci7: command tx timeout [ 492.953881][ T24] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input108 [ 493.005124][ T5889] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 493.135141][ C0] syz_tun: tun_net_xmit 118 [ 493.178222][ T5889] usb 3-1: config 0 has an invalid interface number: 87 but max is 0 [ 493.188969][ T5889] usb 3-1: config 0 has no interface number 0 [ 493.195523][ T5889] usb 3-1: config 0 interface 87 has no altsetting 0 [ 493.204568][ T5889] usb 3-1: New USB device found, idVendor=0424, idProduct=cf18, bcdDevice=7d.82 [ 493.221421][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.229558][ T5889] usb 3-1: Product: syz [ 493.233781][ T5889] usb 3-1: Manufacturer: syz [ 493.239041][ T5889] usb 3-1: SerialNumber: syz [ 493.245262][ T24] rc_core: IR keymap rc-imon-pad not found [ 493.246517][ T5889] usb 3-1: config 0 descriptor?? [ 493.251923][ T24] Registered IR keymap rc-empty [ 493.261947][ T24] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 493.272924][ T24] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 493.381150][ T24] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 493.391622][T12873] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 493.409726][ T24] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input109 [ 493.424279][ T24] imon 9-1:0.0: iMON device (15c2:0041, intf0) on usb<9:8> initialized [ 493.545321][T12873] usb 6-1: Using ep0 maxpacket: 32 [ 493.561363][T12873] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 493.577204][T12873] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 493.588316][T12873] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 493.597474][T12873] usb 6-1: config 1 has no interface number 0 [ 493.603593][T12873] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 172, changing to 11 [ 493.614810][T12873] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 50855, setting to 1024 [ 493.627586][T12873] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 493.641385][T12873] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 493.650756][T12873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.662612][T14610] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 493.673343][T12873] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 494.105045][T14621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.113853][T14621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.136862][T14621] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 494.147820][T12873] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 494.175260][ C0] syz_tun: tun_net_xmit 118 [ 494.729746][T14626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.741578][T14626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.975436][ T5831] Bluetooth: hci7: command tx timeout [ 495.170288][ C1] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 495.170879][T12873] usb 9-1: USB disconnect, device number 8 [ 495.215149][ C0] syz_tun: tun_net_xmit 118 [ 495.223465][ T5890] snd_usb_pod 6-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 495.293683][T14630] __nla_validate_parse: 63 callbacks suppressed [ 495.293701][T14630] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2549'. [ 495.330822][T14630] netlink: 'syz.7.2549': attribute type 2 has an invalid length. [ 495.695273][T12873] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 495.822680][ T5955] usb 3-1: USB disconnect, device number 110 [ 495.865157][T12873] usb 9-1: Using ep0 maxpacket: 8 [ 495.913629][T12873] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 495.935181][T12873] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.950346][T12873] usb 9-1: config 0 has no interface number 0 [ 495.956699][T12873] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 495.967753][T12873] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 495.978789][T12873] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 495.989179][T12873] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 495.998837][T12873] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.012346][T12873] usb 9-1: config 0 descriptor?? [ 496.025737][T12873] ldusb 9-1:0.55: Interrupt in endpoint not found [ 496.230260][T12873] usb 9-1: USB disconnect, device number 9 [ 496.257791][ C0] syz_tun: tun_net_xmit 118 [ 496.315337][ T804] usb 6-1: USB disconnect, device number 66 [ 496.331088][ T804] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 496.428133][ T5955] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 496.602084][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.627445][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.638587][ T5955] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 496.664373][T14659] netlink: 'syz.7.2561': attribute type 61 has an invalid length. [ 496.670656][ T5955] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 496.682414][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.703481][ T5955] usb 3-1: config 0 descriptor?? [ 497.065139][ T5831] Bluetooth: hci7: command tx timeout [ 497.111971][T14681] netlink: 148 bytes leftover after parsing attributes in process `syz.8.2569'. [ 497.133584][ T5955] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 497.151544][ T5955] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 497.165080][ T5955] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 497.182903][ T5955] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 497.193113][ T5955] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 497.218951][T14681] netlink: 148 bytes leftover after parsing attributes in process `syz.8.2569'. [ 497.221193][ T5955] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 497.255089][ T5955] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 497.262636][ T5955] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 497.279370][ T5955] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 497.287553][ T5955] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 497.295106][ C0] syz_tun: tun_net_xmit 118 [ 497.313783][ T5955] plantronics 0003:047F:FFFF.0033: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 497.457080][ T24] usb 3-1: USB disconnect, device number 111 [ 497.536708][ T2182] block nbd0: Possible stuck request ffff888027d60000: control (read@0,1024B). Runtime 360 seconds [ 497.549327][ T2182] block nbd0: Possible stuck request ffff888027d60200: control (read@1024,1024B). Runtime 360 seconds [ 497.561310][ T2182] block nbd0: Possible stuck request ffff888027d60400: control (read@2048,1024B). Runtime 360 seconds [ 497.572744][ T2182] block nbd0: Possible stuck request ffff888027d60600: control (read@3072,1024B). Runtime 360 seconds [ 497.665109][ T5937] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 497.741647][T14695] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2573'. [ 497.751015][T14699] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2573'. [ 497.846714][ T5937] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 497.857909][ T5937] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 497.868356][ T5937] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 497.877667][ T5937] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.888201][T14687] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 497.900425][ T5937] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 498.045100][T12873] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 498.104045][ T804] usb 8-1: USB disconnect, device number 17 [ 498.205121][T12873] usb 6-1: Using ep0 maxpacket: 32 [ 498.212072][T12873] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 498.221551][T12873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.234186][T12873] usb 6-1: config 0 descriptor?? [ 498.259984][T12873] gspca_main: sq930x-2.14.0 probing 041e:403c [ 498.325106][ T991] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 498.345103][ C0] syz_tun: tun_net_xmit 118 [ 498.453182][T14701] netlink: 'syz.5.2574': attribute type 10 has an invalid length. [ 498.461185][ T991] usb 3-1: device descriptor read/64, error -71 [ 498.471431][T14701] team0: Device ipvlan1 failed to register rx_handler [ 498.488387][T14701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.498265][T14701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.715112][ T991] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 498.775267][T12873] gspca_sq930x: reg_r 001f failed -110 [ 498.780856][T12873] sq930x 6-1:0.0: probe with driver sq930x failed with error -110 [ 498.845267][ T991] usb 3-1: device descriptor read/64, error -71 [ 498.955917][ T991] usb usb3-port1: attempt power cycle [ 499.295297][ T991] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 499.315140][ T804] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 499.325588][ T991] usb 3-1: device descriptor read/8, error -71 [ 499.375129][ C0] syz_tun: tun_net_xmit 118 [ 499.465072][ T804] usb 8-1: Using ep0 maxpacket: 32 [ 499.474733][T14716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.488588][T14716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.510764][ T804] usb 8-1: unable to get BOS descriptor or descriptor too short [ 499.530815][ T804] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 499.541992][ T804] usb 8-1: can't read configurations, error -71 [ 499.565759][ T991] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 499.585733][ T991] usb 3-1: device descriptor read/8, error -71 [ 499.695424][ T991] usb usb3-port1: unable to enumerate USB device [ 500.165944][ T804] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 500.295098][ T804] usb 8-1: device descriptor read/64, error -71 [ 500.406280][ T804] usb usb8-port1: attempt power cycle [ 500.415127][ C0] syz_tun: tun_net_xmit 118 [ 500.745163][ T804] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 500.765526][ T804] usb 8-1: device descriptor read/8, error -71 [ 500.816569][T12873] usb 6-1: USB disconnect, device number 67 [ 500.918905][T14728] netlink: 'syz.5.2583': attribute type 10 has an invalid length. [ 500.932915][T14728] team0: Device ipvlan1 failed to register rx_handler [ 501.005421][ T804] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 501.025904][ T804] usb 8-1: device descriptor read/8, error -71 [ 501.028492][T14732] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2585'. [ 501.052919][T14732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.069280][T14732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.080050][T14732] bond0 (unregistering): Released all slaves [ 501.139137][ T804] usb usb8-port1: unable to enumerate USB device [ 501.162528][T14738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2587'. [ 501.275686][T14740] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2588'. [ 501.391906][ C1] syz_tun: tun_net_xmit 42 [ 501.393933][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.455174][ C0] syz_tun: tun_net_xmit 118 [ 501.495177][ T804] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 501.551437][T14749] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 501.656369][ T804] usb 3-1: config index 0 descriptor too short (expected 2843, got 27) [ 501.664682][ T804] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 501.674950][ T804] usb 3-1: config 17 has 1 interface, different from the descriptor's value: 9 [ 501.683947][ T804] usb 3-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice= 0.00 [ 501.693037][ T804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.706322][ T804] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 501.835176][ T24] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 501.987439][ T804] gspca_sn9c2028: read1 error -71 [ 501.993177][ T804] gspca_sn9c2028: read1 error -71 [ 501.995141][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 501.998896][ T804] gspca_sn9c2028: read1 error -71 [ 502.005847][ T24] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 502.009456][ T804] sn9c2028 3-1:17.0: probe with driver sn9c2028 failed with error -71 [ 502.019435][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 502.038066][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 502.041873][ T804] usb 3-1: USB disconnect, device number 116 [ 502.058413][ T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 502.070028][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.078156][ T24] usb 6-1: Product: syz [ 502.083039][ T24] usb 6-1: Manufacturer: syz [ 502.087971][ T24] usb 6-1: SerialNumber: syz [ 502.415188][ C1] syz_tun: tun_net_xmit 42 [ 502.465092][ T5889] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 502.495200][ C0] syz_tun: tun_net_xmit 118 [ 502.515343][ T24] usb 6-1: 0:2 : does not exist [ 502.588668][T14758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.599434][T14758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.616403][ T5889] usb 9-1: Using ep0 maxpacket: 16 [ 502.630154][ T5889] usb 9-1: config index 0 descriptor too short (expected 16456, got 72) [ 502.638650][ T5889] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 502.647885][ T5889] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 502.657335][ T5889] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 502.665783][ T5889] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 502.674937][ T5889] usb 9-1: config 0 has no interface number 0 [ 502.681405][ T5889] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 502.692569][ T5889] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 502.702490][ T5889] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 502.721979][ T5889] usb 9-1: config 0 interface 125 has no altsetting 0 [ 502.728986][ T5889] usb 9-1: config 0 interface 125 has no altsetting 1 [ 502.754831][ T5889] usb 9-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 502.771733][ T5889] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.780423][ T5889] usb 9-1: Product: syz [ 502.784611][ T5889] usb 9-1: Manufacturer: syz [ 502.789312][ T5889] usb 9-1: SerialNumber: syz [ 502.799623][ T5889] usb 9-1: config 0 descriptor?? [ 502.834542][ T5955] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 502.872316][T14768] overlayfs: overlapping lowerdir path [ 502.939038][T14773] afs: Unknown parameter 'd¯nzy' [ 503.005883][ T5955] usb 3-1: Using ep0 maxpacket: 16 [ 503.013836][ T5955] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 503.028234][ T5955] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 503.037968][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.048284][ T5955] usb 3-1: Product: syz [ 503.053271][ T5955] usb 3-1: Manufacturer: syz [ 503.059660][ T5955] usb 3-1: SerialNumber: syz [ 503.072362][T14755] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2594'. [ 503.089934][T14755] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 503.107141][ C0] usb 9-1: async_complete: urb error -71 [ 503.113003][ C0] usb 9-1: async_complete: urb error -71 [ 503.121013][ C0] usb 9-1: async_complete: urb error -71 [ 503.126822][ C0] usb 9-1: async_complete: urb error -71 [ 503.134839][ T5889] get_1284_register: usb error -71 [ 503.142504][ T5889] uss720 9-1:0.125: probe with driver uss720 failed with error -71 [ 503.170308][ T5889] usb 9-1: USB disconnect, device number 10 [ 503.185120][ T804] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 503.285559][ T5955] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 503.325382][ T5955] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 503.340687][ T24] usb 6-1: USB disconnect, device number 68 [ 503.360499][ T5955] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 503.369463][ T804] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.372898][ T5955] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 503.385943][ T804] usb 8-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 503.399076][ T804] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.405500][ T5955] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 503.407227][ T804] usb 8-1: Product: syz [ 503.419660][ T804] usb 8-1: Manufacturer: syz [ 503.424258][ T804] usb 8-1: SerialNumber: syz [ 503.438568][ T804] usb 8-1: config 0 descriptor?? [ 503.455266][ C1] syz_tun: tun_net_xmit 42 [ 503.475308][ T5955] usb 3-1: USB disconnect, device number 117 [ 503.535220][ C0] syz_tun: tun_net_xmit 118 [ 503.657287][ T804] usb 8-1: USB disconnect, device number 22 [ 503.724481][T14776] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2598'. [ 504.076888][T14792] netlink: 'syz.2.2603': attribute type 4 has an invalid length. [ 504.084694][T14792] netlink: 'syz.2.2603': attribute type 1 has an invalid length. [ 504.095064][T14792] netlink: 15314 bytes leftover after parsing attributes in process `syz.2.2603'. [ 504.115464][T14796] infiniband: Added to hash: ib_dev=ffff888044bb8000 (0)() ndev=ffff888079d3a000 (214)(lo) [ 504.128963][T14796] siw: device registration error -23 [ 504.134350][T14796] infiniband: Removed from hash: ib_dev=ffff888044bb8000 (0)() ndev=ffff888079d3a000 (214)(lo) [ 504.262169][T14806] kAFS: unable to lookup cell '.,c¾ûL' [ 504.320919][T14805] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 504.495571][ C1] syz_tun: tun_net_xmit 42 [ 504.506454][ T5937] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 504.576420][ C0] syz_tun: tun_net_xmit 118 [ 504.595076][ T5955] usb 8-1: new low-speed USB device number 23 using dummy_hcd [ 504.667880][ T5937] usb 6-1: Using ep0 maxpacket: 32 [ 504.684859][ T5937] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 504.702330][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.719309][ T5937] usb 6-1: config 0 descriptor?? [ 504.738818][ T5937] as10x_usb: device has been detected [ 504.747780][ T5955] usb 8-1: unable to get BOS descriptor or descriptor too short [ 504.761761][ T5937] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 504.773137][ T5955] usb 8-1: config 7 has an invalid interface number: 199 but max is 0 [ 504.789591][ T5955] usb 8-1: config 7 has no interface number 0 [ 504.809034][ T5937] usb 6-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 504.823288][ T5955] usb 8-1: config 7 interface 199 has no altsetting 0 [ 504.854414][ T5955] usb 8-1: string descriptor 0 read error: -22 [ 504.865157][ T5955] usb 8-1: New USB device found, idVendor=0c45, idProduct=6282, bcdDevice=cb.15 [ 504.890440][ T5955] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.901205][ T5937] as10x_usb: error during firmware upload part1 [ 504.913136][ T5937] Registered device nBox DVB-T Dongle [ 505.015279][T14834] netlink: 108 bytes leftover after parsing attributes in process `syz.8.2617'. [ 505.076192][T14833] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2616'. [ 505.107836][ T5955] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6282 [ 505.131484][ T804] usb 6-1: USB disconnect, device number 69 [ 505.159454][T14838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2616'. [ 505.168740][T14838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2616'. [ 505.535190][ C1] syz_tun: tun_net_xmit 42 [ 505.615189][ C0] syz_tun: tun_net_xmit 118 [ 505.770678][ T5955] gspca_sn9c20x: Write register 1001 failed -71 [ 505.782681][ T5955] gspca_sn9c20x: Device initialization failed [ 505.804386][ T804] Unregistered device nBox DVB-T Dongle [ 505.841220][ T804] as10x_usb: device has been disconnected [ 506.146971][ T5955] gspca_sn9c20x 8-1:7.199: probe with driver gspca_sn9c20x failed with error -71 [ 506.158369][ T5955] usb 8-1: USB disconnect, device number 23 [ 506.244161][T14865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.288263][T14865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.515885][T14869] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3257180865 (6514361730 ns) > initial count (3848377560 ns). Using initial count to start timer. [ 506.538798][ T5955] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 506.575133][ C1] syz_tun: tun_net_xmit 42 [ 506.655230][ C0] syz_tun: tun_net_xmit 118 [ 506.705134][ T5955] usb 8-1: Using ep0 maxpacket: 32 [ 506.716787][ T5955] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 506.734934][ T5955] usb 8-1: config 0 has no interface number 0 [ 506.742644][ T5955] usb 8-1: config 0 interface 184 has no altsetting 0 [ 506.763057][ T5955] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 506.795056][ T5955] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.803092][ T5955] usb 8-1: Product: syz [ 506.817769][ T5955] usb 8-1: Manufacturer: syz [ 506.822414][ T5955] usb 8-1: SerialNumber: syz [ 506.842392][T14876] binder: BINDER_SET_CONTEXT_MGR already set [ 506.853333][ T5955] usb 8-1: config 0 descriptor?? [ 506.875426][T14877] binder: 14875:14877 ioctl c0306201 2000000003c0 returned -14 [ 506.889245][T14876] binder: 14875:14876 ioctl 4018620d 200000000040 returned -16 [ 507.023152][T14887] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2629'. [ 507.034477][T14887] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2629'. [ 507.118085][T14892] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.2630'. [ 507.130663][T14892] bridge_slave_1: default FDB implementation only supports local addresses [ 507.285177][T12873] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 507.285330][ T5955] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 507.317126][ T5955] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 507.335854][ T5955] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 507.356564][ T5955] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 507.381134][ T5955] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 507.405175][ T5955] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 507.419140][ T5955] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -32 [ 507.445388][T12873] usb 9-1: Using ep0 maxpacket: 32 [ 507.475583][T12873] usb 9-1: config 0 has an invalid interface number: 188 but max is 0 [ 507.494121][T12873] usb 9-1: config 0 has no interface number 0 [ 507.514763][T12873] usb 9-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 507.540596][T12873] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 507.551407][T12873] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.565200][T12873] usb 9-1: Product: syz [ 507.569409][T12873] usb 9-1: Manufacturer: syz [ 507.577574][T12873] usb 9-1: SerialNumber: syz [ 507.587883][T14899] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 507.599401][T12873] usb 9-1: config 0 descriptor?? [ 507.605737][T14887] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 507.625405][T14899] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 507.647788][T14899] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 507.659946][T14899] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 507.672149][T14899] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 507.682024][T14899] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 507.695222][ C0] syz_tun: tun_net_xmit 118 [ 507.715794][T14899] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 507.735251][T14899] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 507.768257][T14899] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 507.815600][T14887] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 507.825074][ T5955] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 507.958676][T14906] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2635'. [ 507.974715][T14906] netlink: 'syz.2.2635': attribute type 3 has an invalid length. [ 507.985500][ T5955] usb 6-1: Using ep0 maxpacket: 32 [ 508.004888][ T5955] usb 6-1: unable to get BOS descriptor or descriptor too short [ 508.006455][ T5889] usb 8-1: USB disconnect, device number 24 [ 508.046534][ T5955] usb 6-1: config 1 interface 0 altsetting 164 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.098823][ T5955] usb 6-1: config 1 interface 0 has no altsetting 0 [ 508.118978][ T5955] usb 6-1: New USB device found, idVendor=0306, idProduct=ff3f, bcdDevice= 0.40 [ 508.146442][ T5955] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.154477][ T5955] usb 6-1: Product: syz [ 508.165388][ T5955] usb 6-1: Manufacturer: syz [ 508.170046][ T5955] usb 6-1: SerialNumber: syz [ 508.250638][T12873] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 508.275837][T12873] asix 9-1:0.188: probe with driver asix failed with error -61 [ 508.312046][T14915] Unsupported ieee802154 address type: 0 [ 508.404077][T14901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.418079][T14901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.427495][ T24] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 508.453275][ T5955] usbhid 6-1:1.0: fixing wrong optional hid class descriptors count [ 508.463381][ T5955] usbhid 6-1:1.0: can't add hid device: -71 [ 508.470742][ T5955] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 508.489241][ T5955] usb 6-1: USB disconnect, device number 70 [ 508.576663][ T5937] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 508.605126][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 508.611747][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 508.621506][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 508.633185][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 508.646288][ T24] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 508.659426][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.667997][ T24] usb 3-1: Product: syz [ 508.672165][ T24] usb 3-1: Manufacturer: syz [ 508.676963][ T24] usb 3-1: SerialNumber: syz [ 508.684376][ T24] usb 3-1: config 0 descriptor?? [ 508.692072][ T24] radioshark 3-1:0.0: Invalid radioSHARK device [ 508.698405][ T24] radioshark 3-1:0.0: probe with driver radioshark failed with error -22 [ 508.707228][ T24] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 508.735253][ T5937] usb 8-1: Using ep0 maxpacket: 8 [ 508.735251][ C0] syz_tun: tun_net_xmit 118 [ 508.746188][ T5937] usb 8-1: config 163 has an invalid interface number: 247 but max is 0 [ 508.754545][ T5937] usb 8-1: config 163 has no interface number 0 [ 508.761199][ T5937] usb 8-1: config 163 interface 247 has no altsetting 0 [ 508.770914][ T5937] usb 8-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=dc.ba [ 508.780104][ T5937] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.788588][ T5937] usb 8-1: Product: syz [ 508.792762][ T5937] usb 8-1: Manufacturer: syz [ 508.797406][ T5937] usb 8-1: SerialNumber: syz [ 508.894687][T12873] usb 3-1: USB disconnect, device number 118 [ 509.013930][ T5937] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 509.024274][ T5937] dvb-usb: bulk message failed: -22 (2/0) [ 509.030954][ T5937] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 509.044586][ T5937] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 509.057418][ T5937] usb 8-1: media controller created [ 509.063647][ T5937] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 509.076389][ T5937] usb 8-1: DVB: registering adapter 2 frontend 0 (WideView USB DVB-T)... [ 509.085788][ T5937] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 509.175190][ T5937] rc_core: IR keymap rc-dtt200u not found [ 509.181324][ T5937] Registered IR keymap rc-empty [ 509.187667][ T5937] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 509.201715][ T5937] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input111 [ 509.220065][ T5937] dvb-usb: schedule remote query interval to 300 msecs. [ 509.234253][ T5937] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 509.250459][ T5937] usb 8-1: USB disconnect, device number 25 [ 509.292134][ T5937] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 509.722609][T14941] sp0: Synchronizing with TNC [ 509.761987][T14941] [U] è [ 509.775244][ C0] syz_tun: tun_net_xmit 118 [ 509.832282][T14948] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2649'. [ 509.893885][T14954] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2651'. [ 509.929467][T14951] pim6reg: left allmulticast mode [ 510.059589][ T5955] usb 9-1: USB disconnect, device number 11 [ 510.173568][T14972] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2655'. [ 510.215936][T14974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.650116][T14994] sctp: [Deprecated]: syz.2.2663 (pid 14994) Use of struct sctp_assoc_value in delayed_ack socket option. [ 510.650116][T14994] Use struct sctp_sack_info instead [ 510.672004][T14994] sctp: [Deprecated]: syz.2.2663 (pid 14994) Use of struct sctp_assoc_value in delayed_ack socket option. [ 510.672004][T14994] Use struct sctp_sack_info instead [ 510.682607][T14995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.757939][T14998] openvswitch: netlink: Multiple metadata blocks provided [ 510.758967][T15000] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2665'. [ 510.786696][T15000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.795275][ T991] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 510.807896][T15000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.815200][ C0] syz_tun: tun_net_xmit 118 [ 510.823927][T15000] bond0 (unregistering): Released all slaves [ 510.878805][T15005] TCP: TCP_TX_DELAY enabled [ 510.947601][ T991] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.964283][ T991] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.979265][ T991] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 510.988945][ T991] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 511.002922][ T991] usb 9-1: Manufacturer: syz [ 511.029853][ T991] usb 9-1: config 0 descriptor?? [ 511.075106][ T804] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 511.230379][ T804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.241435][ T804] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 511.251145][ T804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.263932][ T804] usb 3-1: config 0 descriptor?? [ 511.269191][T12873] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 511.435064][T12873] usb 8-1: Using ep0 maxpacket: 16 [ 511.435077][ T5937] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 511.451087][T12873] usb 8-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 511.461357][T12873] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.469465][T12873] usb 8-1: Product: syz [ 511.473748][T12873] usb 8-1: Manufacturer: syz [ 511.478416][T12873] usb 8-1: SerialNumber: syz [ 511.486296][T12873] usb 8-1: config 0 descriptor?? [ 511.519588][T14989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.528580][T14989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.585108][ T5937] usb 6-1: Using ep0 maxpacket: 16 [ 511.591845][ T5937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.603024][ T5937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.613236][ T5937] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 511.635066][ T5937] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 511.644140][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.678837][ T5937] usb 6-1: config 0 descriptor?? [ 511.705899][ T804] keytouch 0003:0926:3333.0035: fixing up Keytouch IEC report descriptor [ 511.724614][T12873] usb 8-1: ignoring: not an USB2CAN converter [ 511.739038][ T804] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0035/input/input112 [ 511.838002][ T991] uclogic 0003:256C:006D.0034: failed retrieving Huion firmware version: -71 [ 511.855239][ C0] syz_tun: tun_net_xmit 118 [ 511.866029][ T804] keytouch 0003:0926:3333.0035: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 511.889612][ T991] uclogic 0003:256C:006D.0034: failed probing parameters: -71 [ 511.913913][ T991] uclogic 0003:256C:006D.0034: probe with driver uclogic failed with error -71 [ 511.958023][ T804] usb 8-1: USB disconnect, device number 26 [ 511.969805][ T991] usb 9-1: USB disconnect, device number 12 [ 512.112866][ T5937] hid_parser_main: 5 callbacks suppressed [ 512.112889][ T5937] microsoft 0003:045E:07DA.0036: unknown main item tag 0x0 [ 512.146280][ T5937] HID 045e:07da: Invalid code 65791 type 1 [ 512.163307][ T5937] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0036/input/input113 [ 512.185180][ T5937] microsoft 0003:045E:07DA.0036: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 512.247356][T15002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.267986][T15002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.277891][ T5955] usb 3-1: USB disconnect, device number 119 [ 512.319287][ T804] usb 6-1: USB disconnect, device number 71 [ 512.420639][T15019] program syz.8.2672 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 512.619741][T15026] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2674'. [ 512.847079][T15031] FAULT_INJECTION: forcing a failure. [ 512.847079][T15031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.861170][T15031] CPU: 0 UID: 0 PID: 15031 Comm: syz.2.2675 Tainted: G L syzkaller #0 PREEMPT(full) [ 512.861198][T15031] Tainted: [L]=SOFTLOCKUP [ 512.861206][T15031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 512.861221][T15031] Call Trace: [ 512.861232][T15031] [ 512.861240][T15031] dump_stack_lvl+0xe8/0x150 [ 512.861270][T15031] should_fail_ex+0x412/0x560 [ 512.861301][T15031] _copy_from_user+0x2d/0xb0 [ 512.861322][T15031] video_usercopy+0xac7/0x14b0 [ 512.861346][T15031] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 512.861373][T15031] ? __pfx___video_do_ioctl+0x10/0x10 [ 512.861395][T15031] ? __pfx_video_usercopy+0x10/0x10 [ 512.861423][T15031] ? __fget_files+0x2a/0x420 [ 512.861448][T15031] ? __fget_files+0x2a/0x420 [ 512.861471][T15031] ? __fget_files+0x3a0/0x420 [ 512.861496][T15031] v4l2_ioctl+0x18d/0x1e0 [ 512.861515][T15031] ? __pfx_v4l2_ioctl+0x10/0x10 [ 512.861534][T15031] __se_sys_ioctl+0xfc/0x170 [ 512.861556][T15031] do_syscall_64+0x14d/0xf80 [ 512.861572][T15031] ? trace_irq_disable+0x3b/0x150 [ 512.861596][T15031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.861615][T15031] ? clear_bhb_loop+0x40/0x90 [ 512.861640][T15031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.861658][T15031] RIP: 0033:0x7f457319c629 [ 512.861675][T15031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.861690][T15031] RSP: 002b:00007f4573f79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 512.861711][T15031] RAX: ffffffffffffffda RBX: 00007f4573415fa0 RCX: 00007f457319c629 [ 512.861724][T15031] RDX: 0000200000000200 RSI: 00000000c058565d RDI: 0000000000000003 [ 512.861736][T15031] RBP: 00007f4573f79090 R08: 0000000000000000 R09: 0000000000000000 [ 512.861748][T15031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.861759][T15031] R13: 00007f4573416038 R14: 00007f4573415fa0 R15: 00007ffdbfd84ab8 [ 512.861787][T15031] [ 513.059997][ C0] syz_tun: tun_net_xmit 118 [ 513.323703][T15043] netlink: 'syz.2.2680': attribute type 21 has an invalid length. [ 513.571595][T15054] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.2682'. [ 513.592125][ T991] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 513.603405][T12873] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 513.613263][T15048] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.2682'. [ 513.745673][T12873] usb 3-1: device descriptor read/64, error -71 [ 513.766535][ T991] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 513.779117][ T991] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.789499][ T991] usb 6-1: config 0 has no interfaces? [ 513.795051][ T991] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 513.804185][ T991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.813929][ T991] usb 6-1: config 0 descriptor?? [ 513.835203][ T5937] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 513.895091][ T24] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 513.985063][ T5937] usb 8-1: Using ep0 maxpacket: 8 [ 513.985143][T12873] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 513.991661][ T5937] usb 8-1: config 163 has an invalid interface number: 247 but max is 0 [ 514.006260][ T5937] usb 8-1: config 163 has no interface number 0 [ 514.012897][ T5937] usb 8-1: config 163 interface 247 has no altsetting 0 [ 514.024057][ T5955] usb 6-1: USB disconnect, device number 72 [ 514.030154][ T5937] usb 8-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=dc.ba [ 514.040165][ T5937] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.050138][ T5937] usb 8-1: Product: syz [ 514.054335][ T5937] usb 8-1: Manufacturer: syz [ 514.059324][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 514.064575][ T5937] usb 8-1: SerialNumber: syz [ 514.072345][ T24] usb 9-1: config 0 has an invalid interface number: 119 but max is 0 [ 514.080791][ T24] usb 9-1: config 0 has no interface number 0 [ 514.091389][ T24] usb 9-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=da.f9 [ 514.095297][ C0] syz_tun: tun_net_xmit 118 [ 514.102487][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.114214][ T24] usb 9-1: Product: syz [ 514.118618][ T24] usb 9-1: Manufacturer: syz [ 514.123238][ T24] usb 9-1: SerialNumber: syz [ 514.125179][T12873] usb 3-1: device descriptor read/64, error -71 [ 514.135617][ T24] usb 9-1: config 0 descriptor?? [ 514.235467][T12873] usb usb3-port1: attempt power cycle [ 514.320500][ T5937] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 514.331484][ T5937] dvb-usb: bulk message failed: -22 (2/0) [ 514.337727][ T5937] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 514.348751][ T5937] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 514.359451][ T5937] usb 8-1: media controller created [ 514.366654][ T5937] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 514.378141][ T5937] usb 8-1: DVB: registering adapter 2 frontend 0 (WideView USB DVB-T)... [ 514.386855][ T5937] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 514.455102][ T5937] rc_core: IR keymap rc-dtt200u not found [ 514.460890][ T5937] Registered IR keymap rc-empty [ 514.469716][ T5937] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 514.483295][ T5937] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input114 [ 514.498370][ T5937] dvb-usb: schedule remote query interval to 300 msecs. [ 514.505534][ T5937] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 514.520304][ T5937] usb 8-1: USB disconnect, device number 27 [ 514.576118][T12873] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 514.592535][ T5937] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 514.607832][T12873] usb 3-1: device descriptor read/8, error -71 [ 514.651692][T15061] FAULT_INJECTION: forcing a failure. [ 514.651692][T15061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.666290][T15061] CPU: 1 UID: 0 PID: 15061 Comm: syz.5.2686 Tainted: G L syzkaller #0 PREEMPT(full) [ 514.666307][T15061] Tainted: [L]=SOFTLOCKUP [ 514.666311][T15061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 514.666318][T15061] Call Trace: [ 514.666323][T15061] [ 514.666327][T15061] dump_stack_lvl+0xe8/0x150 [ 514.666348][T15061] should_fail_ex+0x412/0x560 [ 514.666365][T15061] _copy_to_user+0x31/0xb0 [ 514.666380][T15061] simple_read_from_buffer+0xe1/0x170 [ 514.666398][T15061] proc_fail_nth_read+0x1bb/0x230 [ 514.666413][T15061] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 514.666428][T15061] ? rw_verify_area+0x2a6/0x4d0 [ 514.666438][T15061] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 514.666452][T15061] vfs_read+0x20c/0xa70 [ 514.666461][T15061] ? fdget_pos+0x246/0x320 [ 514.666478][T15061] ? __pfx___mutex_lock+0x10/0x10 [ 514.666490][T15061] ? __pfx_vfs_read+0x10/0x10 [ 514.666500][T15061] ? __fget_files+0x2a/0x420 [ 514.666516][T15061] ? __fget_files+0x3a0/0x420 [ 514.666529][T15061] ? __fget_files+0x2a/0x420 [ 514.666547][T15061] ksys_read+0x150/0x270 [ 514.666558][T15061] ? __pfx_ksys_read+0x10/0x10 [ 514.666567][T15061] ? __pfx_v4l2_ioctl+0x10/0x10 [ 514.666583][T15061] do_syscall_64+0x14d/0xf80 [ 514.666592][T15061] ? trace_irq_disable+0x3b/0x150 [ 514.666606][T15061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.666616][T15061] ? clear_bhb_loop+0x40/0x90 [ 514.666628][T15061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.666638][T15061] RIP: 0033:0x7f0b60b5cece [ 514.666649][T15061] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 514.666658][T15061] RSP: 002b:00007f0b61a59fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 514.666669][T15061] RAX: ffffffffffffffda RBX: 00007f0b61a5a6c0 RCX: 00007f0b60b5cece [ 514.666676][T15061] RDX: 000000000000000f RSI: 00007f0b61a5a0a0 RDI: 0000000000000004 [ 514.666683][T15061] RBP: 00007f0b61a5a090 R08: 0000000000000000 R09: 0000000000000000 [ 514.666689][T15061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.666695][T15061] R13: 00007f0b60e16038 R14: 00007f0b60e15fa0 R15: 00007ffe12a2b048 [ 514.666710][T15061] [ 514.901132][ T31] INFO: task syz.0.1810:11901 blocked for more than 143 seconds. [ 514.908985][ T31] Tainted: G L syzkaller #0 [ 514.915567][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 514.924268][ T31] task:syz.0.1810 state:D stack:28704 pid:11901 tgid:11899 ppid:5828 task_flags:0x400140 flags:0x00080002 [ 514.937140][ T24] mos7840 9-1:0.119: required endpoints missing [ 514.946703][ T24] usb 9-1: USB disconnect, device number 13 [ 514.955105][ T31] Call Trace: [ 514.962164][ T31] [ 514.969940][ T31] __schedule+0x1585/0x5340 [ 514.980784][ T31] ? __pfx___schedule+0x10/0x10 [ 514.986507][ T31] ? schedule+0x90/0x360 [ 514.990915][ T31] schedule+0x164/0x360 [ 514.995536][ T31] schedule_preempt_disabled+0x13/0x30 [ 515.001208][ T31] __mutex_lock+0x7fe/0x1300 [ 515.011089][ T31] ? __mutex_lock+0x5ac/0x1300 [ 515.025091][T12873] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 515.047553][ T31] ? bdev_open+0xe0/0xd30 [ 515.055793][T12873] usb 3-1: device descriptor read/8, error -71 [ 515.060845][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 515.067091][ T31] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 515.072799][ T31] ? alloc_file_pseudo_noaccount+0x234/0x300 [ 515.079137][ T31] ? disk_block_events+0xab/0x120 [ 515.084198][ T31] ? bdev_open+0xbe/0xd30 [ 515.088642][ T31] bdev_open+0xe0/0xd30 [ 515.092841][ T31] bdev_file_open_by_dev+0x1be/0x240 [ 515.098467][ T31] setup_bdev_super+0x5a/0x5b0 [ 515.103237][ T31] get_tree_bdev_flags+0x389/0x4f0 [ 515.108655][ T31] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 515.114052][ T31] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 515.122023][ T31] vfs_get_tree+0x92/0x2a0 [ 515.126612][ T31] do_new_mount+0x341/0xd30 [ 515.131319][ T31] ? apparmor_capable+0x126/0x170 [ 515.136677][ C0] syz_tun: tun_net_xmit 118 [ 515.147798][ T31] ? __pfx_do_new_mount+0x10/0x10 [ 515.152843][ T31] ? ns_capable+0x89/0xe0 [ 515.157268][ T31] ? user_path_at+0xd4/0x160 [ 515.161869][ T31] __se_sys_mount+0x31d/0x420 [ 515.166621][ T31] ? __pfx___se_sys_mount+0x10/0x10 [ 515.171848][ T31] ? __x64_sys_mount+0x20/0xc0 [ 515.176934][T12873] usb usb3-port1: unable to enumerate USB device [ 515.183471][ T31] do_syscall_64+0x14d/0xf80 [ 515.188949][ T31] ? trace_irq_disable+0x3b/0x150 [ 515.194001][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.200160][ T31] ? clear_bhb_loop+0x40/0x90 [ 515.204868][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.211136][ T31] RIP: 0033:0x7fce07b9c629 [ 515.215842][ T31] RSP: 002b:00007fce089b4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 515.224378][ T31] RAX: ffffffffffffffda RBX: 00007fce07e16090 RCX: 00007fce07b9c629 [ 515.232486][ T31] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 0000200000000040 [ 515.240670][ T31] RBP: 00007fce07c32b39 R08: 0000200000000380 R09: 0000000000000000 [ 515.249171][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.257308][ T31] R13: 00007fce07e16128 R14: 00007fce07e16090 R15: 00007fff20b50818 [ 515.265376][ T31] [ 515.268522][ T31] [ 515.268522][ T31] Showing all locks held in the system: [ 515.276354][ T31] 1 lock held by khungtaskd/31: [ 515.281203][ T31] #0: ffffffff8e9602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 515.294263][ T31] 2 locks held by getty/5583: [ 515.299883][ T31] #0: ffff8880378590a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 515.310179][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 515.320373][ T31] 1 lock held by udevd/5837: [ 515.325090][ T31] #0: ffff888027c3d358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 515.334315][ T31] 2 locks held by syz.0.1810/11901: [ 515.339664][ T31] #0: ffff88807bf4e0e0 (&type->s_umount_key#72/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xab0 [ 515.349878][ T31] #1: ffff888027c3d358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 515.359219][ T31] 4 locks held by kworker/u8:24/11962: [ 515.364677][ T31] #0: ffff8880b853ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 515.374688][ T31] #1: ffff8880b8524588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 515.383702][ T31] #2: ffff8880b8526118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 515.392798][ T31] #3: ffffffff8ea2de68 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xcb/0x240 [ 515.403693][ T31] [ 515.406268][ T31] ============================================= [ 515.406268][ T31] [ 515.414693][ T31] NMI backtrace for cpu 0 [ 515.414708][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 515.414733][ T31] Tainted: [L]=SOFTLOCKUP [ 515.414739][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 515.414750][ T31] Call Trace: [ 515.414757][ T31] [ 515.414763][ T31] dump_stack_lvl+0xe8/0x150 [ 515.414793][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 515.414816][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 515.414837][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 515.414857][ T31] sys_info+0x135/0x170 [ 515.414871][ T31] watchdog+0xfd9/0x1030 [ 515.414893][ T31] ? watchdog+0x21a/0x1030 [ 515.414916][ T31] kthread+0x388/0x470 [ 515.414930][ T31] ? __pfx_watchdog+0x10/0x10 [ 515.414947][ T31] ? __pfx_kthread+0x10/0x10 [ 515.414972][ T31] ret_from_fork+0x51e/0xb90 [ 515.414995][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 515.415014][ T31] ? __switch_to+0xc7d/0x1450 [ 515.415035][ T31] ? __pfx_kthread+0x10/0x10 [ 515.415051][ T31] ret_from_fork_asm+0x1a/0x30 [ 515.415079][ T31] [ 515.524847][ T31] Sending NMI from CPU 0 to CPUs 1: [ 515.530090][ C1] NMI backtrace for cpu 1 [ 515.530109][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 515.530129][ C1] Tainted: [L]=SOFTLOCKUP [ 515.530135][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 515.530145][ C1] RIP: 0010:lock_is_held_type+0x0/0x150 [ 515.530172][ C1] Code: 3d a5 36 7c 04 48 c7 c6 78 59 20 8e 67 48 0f b9 3a 90 eb ce 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 41 57 41 56 41 55 41 54 53 bb ff ff ff ff 83 3d e6 [ 515.530185][ C1] RSP: 0018:ffffc90000a08c50 EFLAGS: 00000082 [ 515.530204][ C1] RAX: 0000000000000000 RBX: ffff8880b853ad80 RCX: 0000000080010001 [ 515.530215][ C1] RDX: 0000000000010000 RSI: 00000000ffffffff RDI: ffff8880b853ade0 [ 515.530225][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 515.530235][ C1] R10: dffffc0000000000 R11: fffff5200014117c R12: ffff8880b853ad80 [ 515.530246][ C1] R13: 1ffff110170a7778 R14: ffff8880b853bbc0 R15: ffff8880b853bbc0 [ 515.530258][ C1] FS: 0000000000000000(0000) GS:ffff8881250ff000(0000) knlGS:0000000000000000 [ 515.530270][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 515.530281][ C1] CR2: 00007f25015e82f8 CR3: 000000002d6c6000 CR4: 00000000003526f0 [ 515.530294][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 515.530305][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 515.530315][ C1] Call Trace: [ 515.530322][ C1] [ 515.530328][ C1] update_rq_clock+0x8f/0x570 [ 515.530352][ C1] try_to_wake_up+0x710/0x1390 [ 515.530372][ C1] hrtimer_wakeup+0x4e/0x60 [ 515.530393][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 515.530412][ C1] __hrtimer_run_queues+0x53a/0xcc0 [ 515.530439][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 515.530458][ C1] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 515.530480][ C1] hrtimer_interrupt+0x42b/0x1010 [ 515.530505][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 515.530529][ C1] __sysvec_apic_timer_interrupt+0x102/0x460 [ 515.530552][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 515.530572][ C1] [ 515.530577][ C1] [ 515.530583][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 515.530599][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 515.530619][ C1] Code: 2e 72 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 7d 0e 00 fb f4 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 515.530631][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 515.530643][ C1] RAX: 0000000000872eeb RBX: ffffffff819ae27d RCX: 0000000080000001 [ 515.530653][ C1] RDX: 0000000000000001 RSI: ffffffff8e01559f RDI: ffffffff8c2a0e00 [ 515.530664][ C1] RBP: ffffc90000197f10 R08: ffff8880b853395b R09: 1ffff110170a672b [ 515.530675][ C1] R10: dffffc0000000000 R11: ffffed10170a672c R12: ffffffff9033c9b0 [ 515.530686][ C1] R13: 1ffff11003bd3000 R14: 0000000000000001 R15: 0000000000000001 [ 515.530697][ C1] ? do_idle+0x1bd/0x500 [ 515.530720][ C1] default_idle+0x9/0x20 [ 515.530734][ C1] default_idle_call+0x72/0xb0 [ 515.530749][ C1] do_idle+0x1bd/0x500 [ 515.530766][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 515.530783][ C1] ? __pfx_do_idle+0x10/0x10 [ 515.530805][ C1] cpu_startup_entry+0x43/0x60 [ 515.530824][ C1] start_secondary+0x101/0x110 [ 515.530841][ C1] common_startup_64+0x13e/0x147 [ 515.530863][ C1] [ 515.865186][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 515.872048][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 515.882701][ T31] Tainted: [L]=SOFTLOCKUP [ 515.887004][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 515.897036][ T31] Call Trace: [ 515.900299][ T31] [ 515.903207][ T31] vpanic+0x56c/0xa60 [ 515.907179][ T31] ? __pfx___schedule+0x10/0x10 [ 515.912207][ T31] ? __pfx_vpanic+0x10/0x10 [ 515.916715][ T31] ? __pfx_console_unlock+0x10/0x10 [ 515.921907][ T31] panic+0xc5/0xd0 [ 515.925619][ T31] ? __pfx_panic+0x10/0x10 [ 515.930064][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 515.935425][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 515.941568][ T31] watchdog+0x1023/0x1030 [ 515.945888][ T31] ? watchdog+0x21a/0x1030 [ 515.950291][ T31] kthread+0x388/0x470 [ 515.954343][ T31] ? __pfx_watchdog+0x10/0x10 [ 515.959005][ T31] ? __pfx_kthread+0x10/0x10 [ 515.963573][ T31] ret_from_fork+0x51e/0xb90 [ 515.968145][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 515.973237][ T31] ? __switch_to+0xc7d/0x1450 [ 515.977898][ T31] ? __pfx_kthread+0x10/0x10 [ 515.982468][ T31] ret_from_fork_asm+0x1a/0x30 [ 515.987222][ T31] [ 515.990578][ T31] Kernel Offset: disabled [ 515.994886][ T31] Rebooting in 86400 seconds..