last executing test programs: 8m28.684071735s ago: executing program 3 (id=201): iopl(0x3) process_mrelease(0xffffffffffffffff, 0x700000000000013) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f0000001080)={0x18, 0x2, {0x2, @broadcast}}, 0x1e) r6 = fsmount(r4, 0x0, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) write$6lowpan_enable(r1, &(0x7f0000000080)='1', 0x1) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) read$FUSE(r8, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r8, &(0x7f0000001280)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)={0x130, 0x0, 0x979, {0x1, 0x3, 0x0, '\x00', {0x10001, 0x4, 0x200000000003, 0xc558, r9, r10, 0x1000, '\x00', 0x400000210, 0x4000000003, 0x5, 0x9, {0xfffffffffffffffd, 0xd}, {0x8, 0x2}, {0x9, 0xffff9d04}, {0x7}, 0x2d, 0xfffffeff, 0xa, 0x7ff}}}}) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(r12, r12) statx(r6, &(0x7f0000000200)='./file0\x00', 0x6000, 0x40, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r6, &(0x7f0000000340)='./file0\x00', 0x100, 0x100, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r1, &(0x7f00000010c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fstat(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r3, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0xc}, [{0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1, r9}, {0x2, 0x1, r12}, {0x2, 0x1, r13}, {0x2, 0x2, r14}], {0x4, 0x1}, [{0x8, 0x4, 0xee00}, {0x8, 0x1, r15}, {0x8, 0x1, r16}], {0x10, 0x1}, {0x20, 0x5}}, 0x6c, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 8m28.463567299s ago: executing program 3 (id=203): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4048aec9, &(0x7f0000000200)={0x2, 0x0, @ioapic={0x8000, 0x4, 0x4, 0x5, 0x0, [{0x86, 0x7f, 0x9, '\x00', 0x6}, {0x9, 0x11, 0x97, '\x00', 0x3}, {0x3, 0x31, 0x8, '\x00', 0x6}, {0x8, 0x3, 0x2, '\x00', 0x8}, {0x2, 0x2, 0x1, '\x00', 0xd}, {0x4, 0xfd, 0x3, '\x00', 0x2}, {0x6, 0x4, 0xe, '\x00', 0xf}, {0xfa, 0x8, 0xc1, '\x00', 0x8}, {0x6, 0x8, 0xe, '\x00', 0x8}, {0x6, 0x6, 0x9, '\x00', 0xf}, {0x81, 0x22, 0x4, '\x00', 0xe}, {0xe0, 0x1, 0x0, '\x00', 0xa5}, {0x6, 0x7, 0x3d, '\x00', 0xfe}, {0x9, 0x7, 0x7, '\x00', 0x1a}, {0x7, 0x5e, 0x7, '\x00', 0x92}, {0x10, 0x8, 0x0, '\x00', 0x81}, {0x8, 0x58, 0x0, '\x00', 0x2}, {0x1, 0x6, 0x7, '\x00', 0x6}, {0x0, 0x7, 0x5e}, {0x81, 0x66, 0x1, '\x00', 0x1}, {0x3, 0x4, 0xc0, '\x00', 0x7}, {0x68, 0x2, 0x7, '\x00', 0xfa}, {0x7f, 0xfb, 0x9}, {0x8, 0x5, 0x2, '\x00', 0xe0}]}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c000280050001000000000008000840000095030400108008001540"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) 8m28.266445452s ago: executing program 3 (id=204): r0 = socket$inet6(0xa, 0x2, 0x10) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r2 = syz_open_dev$media(&(0x7f00000002c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r3 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f00000001c0)="b700001806005abeef4ba0d5984462732834d1", 0x13}, {&(0x7f0000000100)="37a8a6c51ef711513a5554633f", 0xd}, {&(0x7f0000000400)="4d6704c75c259ab0fe6c040c07d538b89e5c00ec1cf6fabca1a3", 0x1a}], 0x4) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x97, 0x0) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000040)={0x11}) (async) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400018000000009040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "d2903a4e"}]}}, 0x0}, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000980)={0x0, 0x71, 0x5, &(0x7f0000000940)={0x9b, "79b8142115db2c05f171f5306c0c14f1e37ef9335b6e140c0afd2077a025abe98e"}}) (async) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x1, 0x7800, 0xf, 0x7, {{0x17, 0x4, 0x3, 0x3, 0x5c, 0x66, 0x0, 0xa, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @loopback, {[@cipso={0x86, 0x1f, 0x3, [{0x6, 0xd, "8f1f718f223879d54f4f5d"}, {0x5, 0xc, "cbd29d1282fc9f959f86"}]}, @timestamp={0x44, 0x10, 0xf6, 0x0, 0x9, [0x27b, 0xbf, 0x1000]}, @lsrr={0x83, 0x17, 0xa9, [@multicast1, @private=0xa010101, @loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x1f}]}]}}}}}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r8, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r9}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x15}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x20000804) (async) listen(r7, 0x0) (async) syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, '\x00\x00'}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x206, 0x6, 0x4, 0xe80, 0x5, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6f, 0x2, 0x0, 0x1, "8b7e", "8e"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, 0x0) r10 = socket$tipc(0x1e, 0x5, 0x0) (async) r11 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r11, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) sendmsg$tipc(r10, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41}}, 0x10, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8m28.040531457s ago: executing program 3 (id=206): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x7000000) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x5e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000010000107a7170000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) (async) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/189, 0xbd}, {&(0x7f00000003c0)=""/138, 0x8a}, {&(0x7f0000000480)=""/4080, 0xff0}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x4}, 0x7fff}], 0x1, 0x40000041, 0x0) (async) mount(&(0x7f0000000240)=@nullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000280)='udf\x00', 0x218483, 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000040)=0x0) setuid(r5) 8m25.444432554s ago: executing program 3 (id=214): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x498e80, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x101280, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000700), 0x1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x40204706, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, "3eccd8f9d20000000000001000000200000500"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4040, 0xd) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='hpfs\x00', 0x0, 0x0) setpgid(r2, 0x0) setpgid(0x0, r2) open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)=@ethtool_eeprom={0xc, 0xc, 0x72, 0x140, "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"}}) socket$inet_mptcp(0x2, 0x1, 0x106) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x498e80, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x101280, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000700), 0x1, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSETS(r1, 0x40204706, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, "3eccd8f9d20000000000001000000200000500"}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4040, 0xd) (async) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='hpfs\x00', 0x0, 0x0) (async) setpgid(r2, 0x0) (async) setpgid(0x0, r2) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)=@ethtool_eeprom={0xc, 0xc, 0x72, 0x140, "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"}}) (async) 8m25.304719702s ago: executing program 3 (id=216): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x2011, r0, 0x1fc6a000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) openat$ttynull(0xffffffffffffff9c, &(0x7f0000001080), 0x428002, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000001040)={0x801, 0x407b, 0xfffe, 0x7ffe, 0x97, "58991eb376e3fbe3"}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000010c0), 0x802, 0x0) write$UHID_INPUT(r2, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) 8m11.261088254s ago: executing program 2 (id=272): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0xfe0d) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e24, @loopback}]}, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x5c10c1, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500c00108005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000189"], 0xfdef) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) (async) r7 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000240)='uid', &(0x7f0000000100)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) (async) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000400)={r6, 0xc331}, 0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={r6, 0x1000}, &(0x7f00000000c0)=0x8) (async) r8 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000f80)=ANY=[@ANYBLOB="120110010004000000000000dec90102030109021200012f0b000000041e57000e010109"], &(0x7f0000000280)={0x0, 0x0, 0xd4, 0x0, 0x1, [{0x0, 0x0}]}) (async) write$binfmt_register(r8, &(0x7f0000000080)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x3, 0x3a, '.^', 0x3a, '&]!/', 0x3a, './cgroup', 0x3a, [0x46]}, 0x2f) 8m9.904263013s ago: executing program 32 (id=216): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x2011, r0, 0x1fc6a000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) openat$ttynull(0xffffffffffffff9c, &(0x7f0000001080), 0x428002, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000001040)={0x801, 0x407b, 0xfffe, 0x7ffe, 0x97, "58991eb376e3fbe3"}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000010c0), 0x802, 0x0) write$UHID_INPUT(r2, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) 8m8.23294425s ago: executing program 2 (id=284): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4c0a00, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r2 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r3 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xc0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) close(r4) mknodat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x11c0, 0x101) syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000404c05a00b00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000400)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) bind$unix(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) madvise(&(0x7f0000036000/0x2000)=nil, 0x2000, 0x14) renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) r6 = syz_usb_connect$cdc_ecm(0x6, 0x4d, &(0x7f0000000240)=ANY=[@ANYRES8=r5, @ANYRESHEX=r1], 0x0) mmap(&(0x7f0000528000/0x2000)=nil, 0x2000, 0x6, 0x4000010, 0xffffffffffffffff, 0x7e41b000) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_ep_read(r6, 0x3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 8m6.473217816s ago: executing program 2 (id=289): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) r1 = syz_open_dev$vim2m(&(0x7f0000000e40), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x29, 0x2, 0x0, "a677c17a5ac1f393f65906a68dd1f8822c8800", 0x31324d59}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r3 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$llc_int(r3, 0x10c, 0x2, &(0x7f0000002000)=0x3, 0x4) read(r0, &(0x7f0000000080)=""/38, 0x26) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004300)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x0, 0x433, 0x0, 0x84, 0x1, 0x0, 0x0, 0x100, 0x3}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0x6, {0x3, 0x0, 0x20, 0xfffffffffffffff9, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x127, 0xdab5, 0xa000, 0x0, r6, r7, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) readlinkat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', &(0x7f00000021c0)=""/122, 0x7a) close(0x3) 8m5.417276102s ago: executing program 2 (id=291): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) 8m5.133030299s ago: executing program 2 (id=292): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmmsg$inet6(r1, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1414aa", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00)'], 0x50}}], 0x1, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r4 = dup3(r3, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0xc000, 0x0) (async) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r8, &(0x7f0000000500)="36ea", 0x2) syz_usb_disconnect(r7) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$uinput_user_dev(r6, &(0x7f0000000440)={'syz1\x00', {0x8, 0x2, 0x7, 0x2}, 0x3c, [0xfffffff0, 0x4, 0xc, 0x1, 0x0, 0x5, 0xdf8a, 0x0, 0xd170, 0x80000000, 0x6, 0x0, 0x6, 0xfff, 0x7, 0x7, 0x5, 0x8, 0x7, 0x3, 0x92, 0x6, 0x69c12e71, 0x80000000, 0x2, 0x7, 0x10, 0x1, 0x6, 0x2, 0x1, 0x0, 0xffff467f, 0xfffff7f2, 0x9, 0x800, 0x0, 0x10000, 0x4, 0x7, 0x70, 0x54, 0x0, 0x80000001, 0xd361, 0xffff, 0x5, 0x2, 0x1ff, 0x32f8, 0x40, 0x10, 0x4, 0x6, 0x0, 0x5, 0x4, 0xfffff5bf, 0x17ad, 0x3, 0x6, 0x3ff, 0xff, 0xed6], [0x3000, 0x81, 0xfffffffe, 0x1, 0x2, 0x0, 0x7, 0x4a5, 0xe, 0x7ff, 0x7ff, 0x7, 0x400, 0x7f, 0x97, 0xfa, 0x81, 0x0, 0x9, 0x0, 0x9, 0xfffffffd, 0x0, 0xf8, 0x6, 0x5, 0x6, 0x435c, 0x5, 0x0, 0x7, 0x2, 0x0, 0x32, 0x7, 0x10001, 0x40000000, 0x3ff, 0x6, 0x7, 0x7, 0x3, 0x0, 0x9, 0x4, 0x7df, 0x9, 0x1f3c, 0x400, 0xf, 0x7ff, 0x7, 0x5, 0x2, 0x5, 0x8000, 0x4, 0x198eeb8f, 0x5, 0x8, 0x1, 0x623f, 0x5, 0x8], [0x1ff, 0x63, 0x1, 0x101, 0xc, 0x1, 0x9, 0x0, 0x4, 0xffffffff, 0xcc, 0xbfab, 0xfffffffc, 0x80000000, 0x3, 0xfffffffa, 0xa, 0x0, 0x4, 0x6, 0xca, 0x130e08c6, 0x8001, 0x80000000, 0x7, 0x5, 0x1000, 0x7289, 0xe9, 0x100, 0x312c, 0x7, 0x9, 0xa, 0xfffffffb, 0x3, 0x6b0d, 0xdcb, 0x0, 0x5, 0x0, 0x2, 0x3, 0x101, 0x6, 0x1, 0x3d2, 0x1, 0xb, 0x8, 0x7ff, 0x1, 0xfffffff9, 0x4, 0x9, 0x3, 0x1, 0xd, 0x3, 0xffffc960, 0x401, 0x2, 0x10000, 0x2], [0x9f33, 0x40, 0x4, 0x4, 0x7, 0x6fb2, 0x47d6, 0x5, 0x10000, 0x4, 0x8, 0x8001, 0x0, 0x5, 0xfffffffe, 0x3, 0x7, 0xca3, 0xe3d6, 0x7, 0x0, 0xffffffff, 0x5, 0x4ac, 0x8, 0xff, 0xe, 0x154e, 0x1, 0xd7, 0x7, 0xc, 0x2, 0x1, 0x3, 0x7, 0x81, 0x8, 0x7, 0x7, 0x7fffffff, 0xe, 0x8d, 0x4, 0xc, 0x3ff, 0x3, 0xc761, 0x4, 0x8, 0xff, 0x200, 0xc, 0x7, 0x10, 0x7ff, 0x1, 0x0, 0x7, 0x3, 0x4, 0x0, 0x3ff, 0xfffffffa]}, 0x45c) splice(r3, &(0x7f0000000100)=0xc000000000, 0xffffffffffffffff, &(0x7f0000000140), 0x7, 0x6) 8m3.023105219s ago: executing program 2 (id=300): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r1, 0x6) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) r3 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r3, 0x80184153, &(0x7f00000005c0)={0x0, &(0x7f0000000940)}) 7m47.602009913s ago: executing program 33 (id=300): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r1, 0x6) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) r3 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r3, 0x80184153, &(0x7f00000005c0)={0x0, &(0x7f0000000940)}) 4m20.984992969s ago: executing program 4 (id=1258): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xc8db, 0x3c00, 0x2, 0xbfdffffc}, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0)={0x60000, 0x9}, 0x8) shutdown(r1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)=0x40) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x7e) close(0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pselect6(0xffffffffffffff9c, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x1, 0x1, 0x7ffffffe}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x1001, 0xffffffffffffffff, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x32314258}}) 4m20.074041888s ago: executing program 4 (id=1266): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, 0x0, &(0x7f0000000080)=""/37, &(0x7f0000000240)=""/215, 0xdddd0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x15c, r3, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x55}}}}, [@NL80211_ATTR_FRAME_MATCH={0xf4, 0x5b, "bf3e658ce2a3a7f68b6c073f20f611cfcb346b7d23af1de964a80a2d6ae4bb62790584f60179d327f0a2556787f37e1d1cbfbfab4f8c71226d84f76c29c5ffd2aca5a6c8d0fe06b76a1c9a81a1458ac622302687f8ab826622e0cc4d2083888077e81ca015a457d343b73d74e058087490863eefe20755f952d147bc08f65acc744221d817d68a083307acb833ad7bf85de30343c6ef9506cd18b5d68ed662f3cecb03bcce7a8046e9a69e0ea119f409ff12cbca7911bd5e1d5021445a7006ce98c0df008479df871f50fea2ff5ed59ec5c4e9b6ade18dabf8ada43a2331404fb7f2b3aa8c511c14aaf1830a0cf66c8d"}, @NL80211_ATTR_FRAME_MATCH={0x40, 0x5b, "03111bb62eb2fc062dbe34b4d316940c1714d7f4afc6c7e18f2cdab1bae7e8a52425a78395be773e9a6d9144e6fef65117e89eae8726fb5a5669d525"}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4}, 0x24000000) r5 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r5}) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r7, 0x400caed0, &(0x7f0000000040)={[{0x3, 0x81, 0xff, 0x0, 0x0, 0xc5, 0x70, 0x8, 0x7, 0xc, 0xa, 0x19}, {0xfffffffc, 0xf3f, 0xfe, 0x7d, 0x8, 0x4, 0x2, 0x4, 0x2, 0x2, 0x10, 0x42, 0xf000000000000000}, {0x4, 0x4, 0x13, 0xfc, 0x5, 0x7, 0x8, 0xd, 0x2, 0xf4, 0x3, 0xe, 0x7ffffffffffffffc}]}) (async) ioctl$KVM_SET_PIT2(r7, 0x400caed0, &(0x7f0000000040)={[{0x3, 0x81, 0xff, 0x0, 0x0, 0xc5, 0x70, 0x8, 0x7, 0xc, 0xa, 0x19}, {0xfffffffc, 0xf3f, 0xfe, 0x7d, 0x8, 0x4, 0x2, 0x4, 0x2, 0x2, 0x10, 0x42, 0xf000000000000000}, {0x4, 0x4, 0x13, 0xfc, 0x5, 0x7, 0x8, 0xd, 0x2, 0xf4, 0x3, 0xe, 0x7ffffffffffffffc}]}) 4m19.682286817s ago: executing program 4 (id=1269): r0 = syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000080)={0x0, 0x21, 0x63, {0x63, 0xb, "02e16130f182b11e9aef6223cb556301ae0c221b57e2a4ac4f2ecb22e47123987b1d3325e0ec4d5601e3e6c8126a0598f31667e158292b74b6a5ea16c76aae41370b037969ab92b515844c4d8bf5400ed9a2f589eb01acabc35e4e142038e4894f"}}, &(0x7f0000000100)={0x0, 0x3, 0x27, @string={0x27, 0x3, "2211b267ce5dff3b568d6ab55155caa12edeeae390bfb9f5fdc165bc8521e7d82ea968f121"}}, &(0x7f0000000140)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0x9, 0xb}, @ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0x800, 0xf, 0x8000, [0x0, 0x30, 0xff0000]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "75e7a30d2cb5b6830a2499efcf06fff4"}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x9, 0x6, 0x2, "1c11bd13", "7dc2f524"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x32dce52ac9f74eff, 0xa, 0x4, 0x5, 0x1ff, 0x5}}}, &(0x7f0000000680)={0x84, &(0x7f0000000240)={0x0, 0x0, 0x40, "77e5fc9faef7f443e7e33f3fa9ee320eb6df2ce19ede5ee53123e9762ba671a1b1bbdbceb18641939aab5355e23c85f9f5fcf9d062a6aeebc53f689a3f4c3870"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x1d24, 0x8, [0xf]}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0x101}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000440)={0x40, 0xb, 0x2, 'Je'}, &(0x7f0000000480)={0x40, 0xf, 0x2, 0x401}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000500)={0x40, 0x17, 0x6}, &(0x7f0000000540)={0x40, 0x19, 0x2, "eb99"}, &(0x7f0000000580)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000005c0)={0x40, 0x1c, 0x1, 0xb}, &(0x7f0000000600)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x21, 0x1, 0x40}}) 4m18.05774799s ago: executing program 4 (id=1276): r0 = socket$inet_sctp(0x2, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER(0x3, 0x2, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x4c, &(0x7f0000000100)=[@in={0x2, 0x4e22, @local}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e23, 0x7, @loopback, 0x1}]}, &(0x7f00000000c0)=0x10) fsopen(0x0, 0x700) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000380)={r2, @in6={{0xa, 0x4e23, 0xfff, @empty, 0xdd}}, 0xb, 0x9748, 0x3ff, 0x0, 0x0, 0x2, 0x6}, &(0x7f0000000080)=0x9c) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x4b3, 0x3103, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xa0, 0x90, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0x0, 0x14, 0x1, {0x22, 0xc9}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xf, 0x7, 0x1}}}}}]}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x4b, &(0x7f0000000380)={0x5, 0xf, 0x4b, 0x1, [@generic={0x46, 0x10, 0xa, "994df1ea1018f1c5aef25adf70f88ef5532d43ebfbd4e001c3b9dc97141ecf28418f21ebfed058345b2b7351f19426e5300ff985e5a2d7fa6465979fe460eb43e42a65"}]}}) socket$inet_sctp(0x2, 0x5, 0x84) (async) seccomp$SECCOMP_SET_MODE_FILTER(0x3, 0x2, 0xffffffffffffffff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) (async) chroot(&(0x7f0000000100)='./file0\x00') (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') (async) socket(0x2, 0x80805, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x4c, &(0x7f0000000100)=[@in={0x2, 0x4e22, @local}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e23, 0x7, @loopback, 0x1}]}, &(0x7f00000000c0)=0x10) (async) fsopen(0x0, 0x700) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000380)={r2, @in6={{0xa, 0x4e23, 0xfff, @empty, 0xdd}}, 0xb, 0x9748, 0x3ff, 0x0, 0x0, 0x2, 0x6}, &(0x7f0000000080)=0x9c) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x4b3, 0x3103, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xa0, 0x90, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0x0, 0x14, 0x1, {0x22, 0xc9}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xf, 0x7, 0x1}}}}}]}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x4b, &(0x7f0000000380)={0x5, 0xf, 0x4b, 0x1, [@generic={0x46, 0x10, 0xa, "994df1ea1018f1c5aef25adf70f88ef5532d43ebfbd4e001c3b9dc97141ecf28418f21ebfed058345b2b7351f19426e5300ff985e5a2d7fa6465979fe460eb43e42a65"}]}}) (async) 4m17.953139836s ago: executing program 4 (id=1277): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100dc3f12000100000000090400fb338d42decf77504ec4e7a9c7ea3bf90ebbcfa802006ad5dd55a30c3f97009e7c146dd34f3aec3995e4f419ff1d3e5656ea118838c4cdd57a0b3c0743dffd01d1cef815389c60270c09fcfb0a79d915a743333c1a775b0021d1fb9e4db72fe17b87574ab4979b527ac8d757faa5e5ee130529db8d8c279a7d0a90032b2aca0c9ead2ba3b701c789e1cfbdc7a0c71f149685e598fbf0c0427eebbfddbd79962a05f52b8561d60889321e870a2da6e8175cd6578e6de410949d16e4915b2659c9467ee48e3c420f0627d6909d02dc28fcdd944baae07ee8950525835841c49821b14cd217260000000000000000000000000000ac9009c0a03ad9eaf29173087c8caca66715f472662c3ce3129ab805322184fe790e19f0c19ab9e89872cf61cc11d84d1d87c3efb9de99c6d5125a2c8ecffadcec0ba4e94dfe8779f338eb21d90423ab5d39140d6cd2ba71f180e380ad3186ff80c6e5fce1a2e70e6d6e96"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000440)=ANY=[@ANYBLOB="41310100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m15.83956493s ago: executing program 4 (id=1288): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x4229c2, 0x1) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000001f) openat(r2, &(0x7f0000000000)='./bus\x00', 0x123080, 0x80) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) fremovexattr(r1, &(0x7f0000000040)=@known='system.posix_acl_default\x00') syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000006c0)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="000ff40000003f794ad4d4bff813532d0be45988a94fbc19e84722f50d4fb5f9a9c932dbd05b3a871c05319ad6acdfb3491debe61bf3905d067013396034ba7a06e2b604cf600cedeac1c69c3bf0e19eb1b92bd77139976fca"], 0x0, 0x0}) 4m15.31536218s ago: executing program 34 (id=1288): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x4229c2, 0x1) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000001f) openat(r2, &(0x7f0000000000)='./bus\x00', 0x123080, 0x80) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) fremovexattr(r1, &(0x7f0000000040)=@known='system.posix_acl_default\x00') syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000006c0)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="000ff40000003f794ad4d4bff813532d0be45988a94fbc19e84722f50d4fb5f9a9c932dbd05b3a871c05319ad6acdfb3491debe61bf3905d067013396034ba7a06e2b604cf600cedeac1c69c3bf0e19eb1b92bd77139976fca"], 0x0, 0x0}) 3m53.731533488s ago: executing program 6 (id=1481): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4000c085}, 0x4000000) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) syz_io_uring_setup(0x46ed, &(0x7f0000000200)={0x0, 0x879e, 0x2000, 0x2, 0x2ac}, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000000c0), 0x0, r1) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r3, 0x40044591, 0x0) write$evdev(r3, 0x0, 0x0) r4 = add_key$user(&(0x7f0000006400), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000840)="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", 0x1e1, 0xfffffffffffffffe) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0}) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r2, r4}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) keyctl$assume_authority(0x10, r0) 3m53.591107243s ago: executing program 6 (id=1483): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103381, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x292040, 0x100) openat(r3, &(0x7f00000001c0)='./file0\x00', 0x200400, 0x144) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$unix(r4, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000001701000002"], 0x28, 0x2000c000}}], 0x1, 0x88) write(r1, &(0x7f0000001240)="d642bdbebb4c93d4d0b705f3a90317d359b369155ae11b8c62730d1e963a5237dfdf8789292914ffcd54a807d48391657725cc078e311c2087e0742d38834a572aab5355ac8359c34a172dfa922bd6ded329feaa95bdc2f55a3de03e1c5cc61114a634d03597febc31119639b16915b6bb2538fc05371e41c452418c280be474114d1cc453a28eef0f21223ed71a357c", 0x90) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) 3m53.449609393s ago: executing program 6 (id=1484): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x258a, 0x33, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x28, 0x0, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x28}, 0x2, 0x34005}, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) stat(0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000540)={0x20, 0x5, 0x10, {0x10, 0x5, "c08c3d815450990a1385db85f493"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3m51.758474005s ago: executing program 6 (id=1506): r0 = gettid() capset(&(0x7f0000000280)={0x19980330, r0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) chdir(&(0x7f0000000080)='./file1\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) ptrace$setsig(0x4203, r3, 0x8000, &(0x7f0000000180)={0x1f, 0x9, 0x7}) mount$tmpfs(0x0, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000810, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00Z', @ANYRES16=r2, @ANYBLOB="010027bd7000000000000c0000002c00018014000200627269646765300000000000000000001400020064766d727030000000000000000000001800018014000200767863616e3100"/82], 0x58}}, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00Z', @ANYRES16=r2, @ANYBLOB="010027bd7000000000000c0000002c00018014000200627269646765300000000000000000001400020064766d727030000000000000000000001800018014000200767863616e3100"/82], 0x58}}, 0x0) syz_io_uring_setup(0x200682e, &(0x7f0000000080)={0x0, 0x23ee, 0x40, 0x0, 0x132}, 0x0, 0x0) 3m51.530439178s ago: executing program 6 (id=1507): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000001f) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) fcntl$notify(r1, 0x402, 0x80000024) r3 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x148) fcntl$notify(r3, 0x402, 0x36) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000072874b407d077a6210000000000109021256ba000060000904a502000324ba00c9760022b556e375dcc89bcbbf3a7315e27deaba205698c4529fa02d046a30e02dce763723e25bb761d1d71719ca37c7a0e36694ed9229079038cba17cc7220d69608d3c810e934a82afed78ddbf0d6230000744dfd348b387adca456d5966979787ebcc62b303932706a6cd57c2145b8ffd86a444c192be3e348ab1a1604aaf436b18a251106162e3129f374d063784f3ef8126214c9eb7b7c09aa7c9"], 0x0) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400018000000009040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "d2903a4e"}]}}, 0x0}, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000980)={0x2, 0x71, 0x5, &(0x7f0000000940)={0x9b, "79b8142115db2c359b71f5306c0c14f1e37ef9335b6e140c0afd2077a025abe98e"}}) sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002900)={0x110, 0x5f, 0x101, 0x0, 0x25dfdbff, "", [@nested={0x100, 0x50, 0x0, 0x1, [@nested={0x75, 0x87, 0x0, 0x1, [@generic="9909b9a3556a23ac132da78ad50ddbaa9297c73d4757c1a8d8f277b2329eebef8b0dca3c3a876e267a7343a855eb06e2d9d4588b14839b21a9172f9906bbbc78a6b3d01b1fc87230a0cd617814b9949b235ab272f4f54b9cb3df0d9dd526002f5cd158f87c65ed129fc6f70729a527015c"]}, @generic="47e3b9708db25322e01bdc6b7f694fe1beb0ebfeaeb8aba7698c5de50637fbdb7cd6ce33317694ca210f9e118ce2cc7bc8ab42b979233442dcb2ebfa85274d92617080ae72d77583845f590c3c72084a6d930695c3fbd26fdd89ae827d55240034e97f185635d504e7ec283dd9bda165aaac4aaacc4e2f456e458f8ea3dd746bdb1b0e0e"]}]}, 0x110}], 0x1}, 0x0) 3m51.244670282s ago: executing program 6 (id=1510): syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x1c0, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x808, 0x500000000, 0x80000000000000c, 0x10, 0x0, 0x10000, 0x7, 0x34bd80000000, 0x9, 0x8, 0x31, 0x5, 0x8, 0x3ff, 0x5, 0x2, 0x1, 0x8, 0x7, 0xc1, 0x100000000000001, 0xffffffffbffffffb, 0x2, 0x6, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x1, 0x5, 0x479, 0x4, 0x6, 0x9, 0xc0, 0x1, 0x6, 0x46, 0x40, 0x3, 0xa3de, 0x20000000006, 0x8, 0x7, 0x400, 0x3, 0xffffffffffffffb7, 0xfffffffffffffffb, 0x2, 0xe, 0x6, 0x4, 0x40000000e6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0xffffffff, 0xbbd9, 0x1, 0xfffffffffffffc00, 0x2, 0x9, 0x8, 0x3, 0x4000000007, 0x2, 0x3, 0x7fffffff, 0x2, 0xfff, 0x6, 0x8, 0x1, 0xaba, 0x0, 0x3, 0x0, 0xffffffffffff1218, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x8061d, 0x3, 0x7, 0xe5a, 0x4, 0x6, 0x204, 0x7, 0xe53e, 0x4, 0x8, 0x22933331, 0x6, 0x5, 0x1e, 0xd, 0x2, 0x5, 0x8, 0x80000001, 0x3, 0xdfd3, 0xfff9, 0xef3, 0x5, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x1000003]}) syz_usb_connect(0x0, 0x36, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) creat(&(0x7f0000001380)='./file0\x00', 0x4) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000a80)=0x1, 0x8) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000000)={0x0, 0x9, 0x6, 0x0, 0x0, 0x8000}) r1 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2d, 0x0, 0x20, 0x100}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0xc0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x3) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x34, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mount(&(0x7f0000000240)=@filename='./file0\x00', &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='udf\x00', 0x218483, 0x0) 3m50.890557171s ago: executing program 35 (id=1510): syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x1c0, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x808, 0x500000000, 0x80000000000000c, 0x10, 0x0, 0x10000, 0x7, 0x34bd80000000, 0x9, 0x8, 0x31, 0x5, 0x8, 0x3ff, 0x5, 0x2, 0x1, 0x8, 0x7, 0xc1, 0x100000000000001, 0xffffffffbffffffb, 0x2, 0x6, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x1, 0x5, 0x479, 0x4, 0x6, 0x9, 0xc0, 0x1, 0x6, 0x46, 0x40, 0x3, 0xa3de, 0x20000000006, 0x8, 0x7, 0x400, 0x3, 0xffffffffffffffb7, 0xfffffffffffffffb, 0x2, 0xe, 0x6, 0x4, 0x40000000e6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0xffffffff, 0xbbd9, 0x1, 0xfffffffffffffc00, 0x2, 0x9, 0x8, 0x3, 0x4000000007, 0x2, 0x3, 0x7fffffff, 0x2, 0xfff, 0x6, 0x8, 0x1, 0xaba, 0x0, 0x3, 0x0, 0xffffffffffff1218, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x8061d, 0x3, 0x7, 0xe5a, 0x4, 0x6, 0x204, 0x7, 0xe53e, 0x4, 0x8, 0x22933331, 0x6, 0x5, 0x1e, 0xd, 0x2, 0x5, 0x8, 0x80000001, 0x3, 0xdfd3, 0xfff9, 0xef3, 0x5, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x1000003]}) syz_usb_connect(0x0, 0x36, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) creat(&(0x7f0000001380)='./file0\x00', 0x4) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000a80)=0x1, 0x8) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000000)={0x0, 0x9, 0x6, 0x0, 0x0, 0x8000}) r1 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2d, 0x0, 0x20, 0x100}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0xc0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x3) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x34, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mount(&(0x7f0000000240)=@filename='./file0\x00', &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='udf\x00', 0x218483, 0x0) 1m51.562080561s ago: executing program 0 (id=2311): syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000319021508fd070100e56a010203010902240001080a40040904000702b95fc30309058803200006020409058302000aa0a9d3541a6cb180248cebfd09bcfd76cfea81ace5"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x44200) syz_usb_connect(0x3, 0x84b, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xde, 0x49, 0x92, 0x10, 0xf11, 0x2050, 0xf446, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x839, 0x3, 0x1, 0x3, 0x1a0, 0x9, [{{0x9, 0x4, 0x67, 0x1, 0xa, 0x73, 0x3d, 0x34, 0x1, [], [{{0x9, 0x5, 0x3, 0x0, 0x400, 0xb, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x4}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x6, 0xa, 0x8, [@generic={0x4b, 0x10, "af674e9e1f9da270174c50acaa2747c6720b46b42c47442592fed5745298186da29776427770814942d1cfcfa9ccffed45fa9a650af1d17891126f6c357c7f8ee18b488e1c757f0e81"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0xd8, 0x3, 0x34, [@generic={0x31, 0x1, "cf9d0d0ee6463f36819e648717f0d2314d39cdc313ef02034734ca29fa72f089624dd46b6266206052c6400bbaab84"}, @generic={0x2c, 0x5, "28aa45b613333906f494af252402b17b15781fd69d60046e99ae0ec3fab03713f615d0104429bf8bfdd0"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x10, 0x6, 0x2, 0xe}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x9, 0x0, 0xa8, [@generic={0xbf, 0x23, "56d530261741a126197d4c822d32b22bfdbf7c08bf40713684d08573293a1075de804c0f66ff89ba29ef2677cb74191c672c1c074b9c6a8fadb5f521645c5c51d5e8c6d77b6c39f654edf2fd8da70ad660f7ee2be0cdd890d5ba427e4ec0b092af8aac8c3b9b004569caf847e921ff7245441e503bda886ef89cefeb6e0d1df9e46c317a5b196f21acc86db2dd8cc018dbb98ff82321284c7673fe4f6ef3503782301ad2fcfc5a2cd757b62cfd96d4941550d2760c4c674475325b1b7e"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1}]}}, {{0x9, 0x5, 0x2, 0x4, 0x0, 0x0, 0x2, 0xef, [@generic={0x9b, 0x23, "d0d2968ecbe51394faf261f00665a5e30ce7aaa7a348443d486b46fb82ee8418e05518659b3c63ba2735456d18dab3cd883cae059f852dcf43da747af2bdde903fcbb83648396ba88ae302b31138d0b3947491a7e8418a42c513b62dff22a80cb82487e6751edc5043a59a9c24d46e7de1a7ac1b7325f26a8faa2f9416672e522925cc23fcbde542163899a114e80f446ddfaa28420d531a80"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x0, 0x3, 0xb1, 0x0, [@generic={0x22, 0x6, "c4f4cf201e76f7d922bbf4f4a432235fb9bd4b83e9e3daba720b5065fde70df1"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x95, 0xa14}]}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x8, 0x22, 0xae, [@generic={0xd, 0x6, "acee81eae87e4d8e905621"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x10, 0x1, 0xb8, 0x2c, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x4}]}}, {{0x9, 0x5, 0x80, 0xe, 0x3ff, 0xf7, 0x6, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfa, 0x1}]}}]}}, {{0x9, 0x4, 0x20, 0x3, 0x9, 0x1a, 0x60, 0xb, 0x6, [], [{{0x9, 0x5, 0xe, 0x2, 0x20, 0x5, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x7, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xa4, 0x3d}]}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0xa, 0x7, 0xc}}, {{0x9, 0x5, 0x48b56ba6fe93fcbb, 0x8, 0x3ff, 0x9d, 0x7f, 0x6e, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0xd}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x4, 0xff, 0x66, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc, 0x1720}, @generic={0x34, 0x3c, "1bd88bac7d6c8e2e02f234f0c29ee6e099ea0230cf364ff0621386a3898f2bcff89670327994977a15217a85b10f44054577"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x400, 0x2, 0x0, 0x4b, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x6c}]}}, {{0x9, 0x5, 0x80, 0x239f0d90c4898049, 0x40, 0x71, 0x1, 0x1, [@generic={0xaf, 0x23, "dda8376e7e11fa12bd2a4f68906f4a7981f75f5ba30b4b736dc77fc3de0534bf4ecb468b3978aecf49e05569caee470136b1d84ff7dd3a95b57ff5d478214bf5b1e52e3f7c1a5b45aec8e679c81bb3d409a699428ff7eaf19edff4d1a533cf7766ff7909f7d5e0d5e436652a1a61c24c787c2bc1c0247f3d054aad6f06d2b3f260dc77aa2a3817ad24d45153de15c2101386e3ac0e79f2854b38b663aca1acfbb4c199a22ab1e1e1105a8fd98d"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x8, 0x80, 0xd, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x52, 0x5}]}}, {{0x9, 0x5, 0x0, 0x8, 0x10, 0x7, 0x3, 0xd, [@generic={0xeb, 0x8, "a2baff13416b5c7f9122639ea766626ead516f09e416430fa30120a9a50d24d3c0cdabf0a54a334765f87f213ae2637265ea351c4f5789332eda05ac9c7a744fc44ce26b1c6ddc38382bc00d162f1fc949936f72e9872a9fe3fe4cbc80111e3e212c1b37a59d64a8f91f4795ec549f94b0dee7b8d55de77187fe228cba233ff6e86824caf8b5a093d7ddf6600e794fa04da30fba35215c733458c1e9c61ebdf2c2dc84dbd97398f166d163c2947eac2fc7ede66045b85aa188e4d72c98572c06767d1bc1db62d41c4524fa2744c713d2032954c0e5459f5935870c624ab4718ecfbe8f55a9fbb456f8"}]}}]}}, {{0x9, 0x4, 0xe2, 0x8, 0xb, 0x2, 0x6, 0x0, 0x3, [], [{{0x9, 0x5, 0x1, 0x0, 0x400, 0x3, 0x7f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x42, 0x80, 0x2}]}}, {{0x9, 0x5, 0x0, 0x4, 0x200, 0x4, 0x0, 0xb, [@generic={0x2b, 0x38f379f9e6266117, "ce59c20363585c3cbae16f993e1e1041dcf398fbffe13401ab974359efc7cc848b05a0f0fa3dda5db3"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x400, 0x0, 0x66, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0xc9b6}, @generic={0xee, 0x2, "5491652c1700c10705d31db3a698511795315123ec22948e5535f8bdce245f5c7437a7557c33d5a855b3df19331bdb3c3abdc686223bf656f76917922ed172320591a683474665b36e702a3772265f808655ea205419fadaea6920837e103a7e218c907aef52a2a877d79155ec40d0cfc0811b8a9d20fef737a1b82d14ac5a92964cadefe35b34a814b7c2f12ffa584a5c9f96c728c1fadfb58456cff844d17c49118958d644cfb4dccddc440e41a5817fef2e63a1e0162444a4acb8edfffdec9f4459b19196447022c2acf361e463710d8ad3ab22970830508df8280cea94dd457c415749580bc87ce37c39"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x1, 0xc0, 0x3, [@generic={0x102, 0x2, "056f4ce5ed5da9788dd13f4060bb910e7e9976ede5d734222d12ee1ddd9daefcc2dab60fb255321b8a0ba002fa39992ffc9a4b62fcae8e485d3b7b54c3501e62cd7e8ce48cffc054f75502640a7e8c87fdd205e22f7ccff6308d1aaac3d84d5124b5e53ad5984101ad5e9eb737f5425d8f3faadf471cb24d302e5fed65d0dbde8aba660cf381637ec31a390f0c5a21a370b89e9d757855b2c9d9788250e1a046321e888f1648bd20af0952a680019e5da4466732e6aabb618060ca01651b6f78ec2daf32e9ada800fa5abda48956c89aeaddf300ac81844720ddf2b5615503ac9e3f44bba1b547825e5316773243e47726a08dd9883961ab1f1cbe5552e7e68a"}]}}, {{0x9, 0x5, 0xd4c0f0d199235772, 0x4, 0x400, 0x6, 0x0, 0xb}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x0, 0x79, 0x15, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0xb0}, @generic={0x87, 0x0, "4d85f87932180f7dedf5e1c692b993742fff231662e6d59e141c64c25c316098d66c850e02ad71a7f0d3a9fa8d606f8de1768d900db8974f63bed24c5788bdcf022cd7ac0ddb31bec095b204f693764fc11f792fe48830dde25d1aad74775bf7b2bb26db110a6692c15fc3ec8ab8fdd4b36831b205b5fb8b36089df0d53787dd9f1436f615"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x10, 0x5, 0x5, 0x81}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x5, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x8}, @generic={0x4, 0x3, "c153"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x5, 0x4, 0x2}}, {{0x9, 0x5, 0xa, 0x1b, 0x400, 0x23, 0x5, 0x1}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0xd2, 0x62, 0x9}}]}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xb, 0x5, 0x7, 0x40, 0xb9}, 0x19, &(0x7f0000000100)={0x5, 0xf, 0x19, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x40, 0x3, 0x80}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x3, 0x8, 0xd1}, @ptm_cap={0x3}]}, 0x7, [{0xb5, &(0x7f0000000140)=@string={0xb5, 0x3, "057a27b37a5c61f23439300c9746e3662504ba194d7aa5e8aaa105cb1824364f914141bbf135a8396d8f4bf5d8ceca630bbba2752a35405a43c3b6d7136c8ca816a97f850c95b1cacdb4ed2c63e8cd82317d33463fa38138658205573e6f7fb9dacfd0a673ad383c21a7e0e2e5e8032df21eaf6fb50458272ec29d809f9823b1c56e92234514baf2b9eeff08bae9fb066c3480a82b0139ad9019a115d4f6606168a134870a50a2b8b9d167c10ae4cab9008fd5"}}, {0x33, &(0x7f0000000200)=@string={0x33, 0x3, "a35b4c783a59ab7c9dba7f075d6b23f49504b42e88e7ca900f114c389e30f51b55fb7d409ab7ea92de2a461445c0311adb"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x813}}, {0x2a, &(0x7f0000000280)=@string={0x2a, 0x3, "9a35668c7edd4e6a9e3fdf7d346137cd495ae4b74dbf0c409c27670693a36afdeb023900066a2f46"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x419}}]}) 1m48.200726225s ago: executing program 0 (id=2325): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1dd180, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) r2 = syz_init_net_socket$ax25(0x3, 0x0, 0xca) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setitimer(0x0, &(0x7f00000000c0)={{0x77359400}, {r3, r4/1000+10000}}, 0x0) r5 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r5) r6 = inotify_init1(0x800) fcntl$setstatus(r5, 0x4, 0x2c00) r7 = gettid() fcntl$setown(r5, 0x8, r7) fcntl$setsig(r6, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') bind$ax25(r2, &(0x7f0000000200)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @null, @default, @null, @null]}, 0x48) sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x89758e5b3ce5aed2}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x8) syz_usb_connect(0x0, 0x4f, &(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYBLOB="fe7b7750e32a43c5bb4aeb2ac4475a62264c2d33c62e080c1b99af5882e6e367a6d1b70e9d1285e9242abae511bcef1ea97cd5f41c9027a5ffae41146888fccfd207e901065369d7c47674cd097b24b2a9e03035a5b64a923ef278e1c20e5a2fcd674e495e91b0677a69503cc4ede6b3f1824eef7d13650f9f90f9ba426ac556111d749e61b709e115565d59fb18ab75b87890492a72a09b73", @ANYRESHEX=r0], 0x0) 1m44.877937803s ago: executing program 0 (id=2335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x13) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000854eb1"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) write$tun(r0, &(0x7f00000000c0)={@val={0x8, 0x800}, @void, @ipv4=@tcp={{0x6, 0x4, 0x2, 0x3, 0x2c, 0x65, 0x0, 0x52, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@timestamp={0x44, 0x4, 0x3f, 0x0, 0x6}]}}, {{0x4e23, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x14, 0x0, 0x200}}}}, 0x30) (async, rerun: 32) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext3\x00', 0x200000, 0x0) 1m41.313376697s ago: executing program 0 (id=2342): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x2, 0x3, 0x4, {0xa, 0x4e23, 0x3, @remote, 0x5}}}, 0x32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x40, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x80000000}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 1m41.119093071s ago: executing program 0 (id=2344): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x27, 0x9, 0x4, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x14) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 1m40.830553216s ago: executing program 0 (id=2347): timer_getoverrun(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r2, &(0x7f0000000c80)={'syz0\x00', {0x564, 0x5a91, 0x8, 0x8}, 0x8, [0x7fffffff, 0x6, 0x113, 0x4, 0x402, 0x1000, 0x80000001, 0x960, 0x9, 0x5, 0xffff, 0x3, 0x1, 0xbf, 0x2, 0xddf5, 0x6e5d, 0xfffffffc, 0x8, 0x2, 0x7, 0x5, 0x6, 0x24ab, 0xa, 0xe, 0x1, 0x7, 0x52, 0x1fe0, 0x2, 0x3, 0x80000001, 0x6, 0x1, 0x8001, 0x0, 0x2bd, 0x4, 0x7a, 0x100, 0x7, 0x5, 0x8, 0x9, 0x109, 0x9, 0x7, 0x6c, 0x5, 0x7, 0x9, 0x8aa, 0x2, 0x3, 0xce09, 0x1, 0x1000, 0x1, 0x166, 0x7, 0x5, 0x0, 0x8], [0x1, 0x7, 0x9, 0x0, 0xf, 0x5, 0x0, 0x9, 0xfffffff7, 0x800, 0x6b, 0x0, 0x5, 0x8, 0x1, 0x7, 0x7, 0x5f, 0x7, 0xc4, 0xed7, 0xc8a7, 0x6, 0x7f2d, 0xbf, 0xffffff14, 0x5, 0x500000, 0x1, 0x9, 0x8, 0x7fff, 0x8, 0x2, 0x0, 0xe31d, 0x8000, 0x7, 0x16bb, 0x8, 0x1, 0x10001, 0x51400000, 0x101, 0x0, 0x800, 0xa, 0x4, 0xfffe, 0x6, 0x2, 0x1000, 0x0, 0x5, 0xe, 0x2, 0x2, 0x1, 0x9c, 0x80000001, 0xeb3, 0x2f, 0x100006, 0x9], [0xffffff1d, 0x9, 0x40, 0x5, 0x9, 0x0, 0xffff, 0x5, 0x4, 0x5, 0x7ff, 0x9, 0x100, 0x80000001, 0x68c3, 0x5, 0x5, 0x5, 0x3ff, 0x101, 0x2, 0x8, 0xa5b6, 0x9, 0x2f, 0x8, 0x2, 0x3ff, 0x5, 0x1000, 0x1, 0x8, 0x401, 0x3, 0x5, 0x8, 0x80000001, 0x0, 0x8, 0xfffffff4, 0x200, 0x0, 0x6, 0x2, 0x2dc, 0x9, 0x401, 0x6, 0x100, 0x1, 0x803, 0x0, 0x7f7, 0x1, 0x5, 0xffffffff, 0x3a57, 0x0, 0x8, 0x8, 0x7, 0x62e, 0x8, 0x9], [0xc, 0x5, 0x4, 0xffc00000, 0x1, 0xd, 0xc, 0x45, 0x6, 0xa2, 0x3, 0x0, 0x7, 0x3, 0xe9, 0x4, 0x3, 0x7ff, 0x1000, 0x80000000, 0x401, 0xe5, 0x2e7, 0x1, 0x1, 0x2, 0x9, 0x9, 0xd, 0xfffffff9, 0x4, 0x7, 0xf0, 0x0, 0xfffffffe, 0x785d, 0xf61d, 0x6, 0x1000, 0xffff, 0x9, 0x1, 0x2, 0xb89a, 0x6, 0xa1, 0x80000001, 0x7, 0xfffffff8, 0x4a, 0x0, 0x5, 0x2, 0x7f, 0x9, 0x1, 0x6, 0x0, 0x401, 0x5, 0x4, 0x4, 0x59, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000300)={[0x2, 0x4, 0x9, 0x2, 0x4, 0xffffffff7fffffff, 0x1003, 0x2, 0x9b9, 0xfff, 0xf, 0x3, 0x2b5f7546, 0xfffffffffffffc00, 0x400, 0xffff], 0x100000, 0x1feb97}) ioctl$KVM_RUN(r3, 0xae80, 0x0) timer_getoverrun(0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) (async) write$uinput_user_dev(r2, &(0x7f0000000c80)={'syz0\x00', {0x564, 0x5a91, 0x8, 0x8}, 0x8, [0x7fffffff, 0x6, 0x113, 0x4, 0x402, 0x1000, 0x80000001, 0x960, 0x9, 0x5, 0xffff, 0x3, 0x1, 0xbf, 0x2, 0xddf5, 0x6e5d, 0xfffffffc, 0x8, 0x2, 0x7, 0x5, 0x6, 0x24ab, 0xa, 0xe, 0x1, 0x7, 0x52, 0x1fe0, 0x2, 0x3, 0x80000001, 0x6, 0x1, 0x8001, 0x0, 0x2bd, 0x4, 0x7a, 0x100, 0x7, 0x5, 0x8, 0x9, 0x109, 0x9, 0x7, 0x6c, 0x5, 0x7, 0x9, 0x8aa, 0x2, 0x3, 0xce09, 0x1, 0x1000, 0x1, 0x166, 0x7, 0x5, 0x0, 0x8], [0x1, 0x7, 0x9, 0x0, 0xf, 0x5, 0x0, 0x9, 0xfffffff7, 0x800, 0x6b, 0x0, 0x5, 0x8, 0x1, 0x7, 0x7, 0x5f, 0x7, 0xc4, 0xed7, 0xc8a7, 0x6, 0x7f2d, 0xbf, 0xffffff14, 0x5, 0x500000, 0x1, 0x9, 0x8, 0x7fff, 0x8, 0x2, 0x0, 0xe31d, 0x8000, 0x7, 0x16bb, 0x8, 0x1, 0x10001, 0x51400000, 0x101, 0x0, 0x800, 0xa, 0x4, 0xfffe, 0x6, 0x2, 0x1000, 0x0, 0x5, 0xe, 0x2, 0x2, 0x1, 0x9c, 0x80000001, 0xeb3, 0x2f, 0x100006, 0x9], [0xffffff1d, 0x9, 0x40, 0x5, 0x9, 0x0, 0xffff, 0x5, 0x4, 0x5, 0x7ff, 0x9, 0x100, 0x80000001, 0x68c3, 0x5, 0x5, 0x5, 0x3ff, 0x101, 0x2, 0x8, 0xa5b6, 0x9, 0x2f, 0x8, 0x2, 0x3ff, 0x5, 0x1000, 0x1, 0x8, 0x401, 0x3, 0x5, 0x8, 0x80000001, 0x0, 0x8, 0xfffffff4, 0x200, 0x0, 0x6, 0x2, 0x2dc, 0x9, 0x401, 0x6, 0x100, 0x1, 0x803, 0x0, 0x7f7, 0x1, 0x5, 0xffffffff, 0x3a57, 0x0, 0x8, 0x8, 0x7, 0x62e, 0x8, 0x9], [0xc, 0x5, 0x4, 0xffc00000, 0x1, 0xd, 0xc, 0x45, 0x6, 0xa2, 0x3, 0x0, 0x7, 0x3, 0xe9, 0x4, 0x3, 0x7ff, 0x1000, 0x80000000, 0x401, 0xe5, 0x2e7, 0x1, 0x1, 0x2, 0x9, 0x9, 0xd, 0xfffffff9, 0x4, 0x7, 0xf0, 0x0, 0xfffffffe, 0x785d, 0xf61d, 0x6, 0x1000, 0xffff, 0x9, 0x1, 0x2, 0xb89a, 0x6, 0xa1, 0x80000001, 0x7, 0xfffffff8, 0x4a, 0x0, 0x5, 0x2, 0x7f, 0x9, 0x1, 0x6, 0x0, 0x401, 0x5, 0x4, 0x4, 0x59, 0x4]}, 0x45c) (async) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) (async) ioctl$UI_DEV_CREATE(r2, 0x5501) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000300)={[0x2, 0x4, 0x9, 0x2, 0x4, 0xffffffff7fffffff, 0x1003, 0x2, 0x9b9, 0xfff, 0xf, 0x3, 0x2b5f7546, 0xfffffffffffffc00, 0x400, 0xffff], 0x100000, 0x1feb97}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 1m24.444111409s ago: executing program 36 (id=2347): timer_getoverrun(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r2, &(0x7f0000000c80)={'syz0\x00', {0x564, 0x5a91, 0x8, 0x8}, 0x8, [0x7fffffff, 0x6, 0x113, 0x4, 0x402, 0x1000, 0x80000001, 0x960, 0x9, 0x5, 0xffff, 0x3, 0x1, 0xbf, 0x2, 0xddf5, 0x6e5d, 0xfffffffc, 0x8, 0x2, 0x7, 0x5, 0x6, 0x24ab, 0xa, 0xe, 0x1, 0x7, 0x52, 0x1fe0, 0x2, 0x3, 0x80000001, 0x6, 0x1, 0x8001, 0x0, 0x2bd, 0x4, 0x7a, 0x100, 0x7, 0x5, 0x8, 0x9, 0x109, 0x9, 0x7, 0x6c, 0x5, 0x7, 0x9, 0x8aa, 0x2, 0x3, 0xce09, 0x1, 0x1000, 0x1, 0x166, 0x7, 0x5, 0x0, 0x8], [0x1, 0x7, 0x9, 0x0, 0xf, 0x5, 0x0, 0x9, 0xfffffff7, 0x800, 0x6b, 0x0, 0x5, 0x8, 0x1, 0x7, 0x7, 0x5f, 0x7, 0xc4, 0xed7, 0xc8a7, 0x6, 0x7f2d, 0xbf, 0xffffff14, 0x5, 0x500000, 0x1, 0x9, 0x8, 0x7fff, 0x8, 0x2, 0x0, 0xe31d, 0x8000, 0x7, 0x16bb, 0x8, 0x1, 0x10001, 0x51400000, 0x101, 0x0, 0x800, 0xa, 0x4, 0xfffe, 0x6, 0x2, 0x1000, 0x0, 0x5, 0xe, 0x2, 0x2, 0x1, 0x9c, 0x80000001, 0xeb3, 0x2f, 0x100006, 0x9], [0xffffff1d, 0x9, 0x40, 0x5, 0x9, 0x0, 0xffff, 0x5, 0x4, 0x5, 0x7ff, 0x9, 0x100, 0x80000001, 0x68c3, 0x5, 0x5, 0x5, 0x3ff, 0x101, 0x2, 0x8, 0xa5b6, 0x9, 0x2f, 0x8, 0x2, 0x3ff, 0x5, 0x1000, 0x1, 0x8, 0x401, 0x3, 0x5, 0x8, 0x80000001, 0x0, 0x8, 0xfffffff4, 0x200, 0x0, 0x6, 0x2, 0x2dc, 0x9, 0x401, 0x6, 0x100, 0x1, 0x803, 0x0, 0x7f7, 0x1, 0x5, 0xffffffff, 0x3a57, 0x0, 0x8, 0x8, 0x7, 0x62e, 0x8, 0x9], [0xc, 0x5, 0x4, 0xffc00000, 0x1, 0xd, 0xc, 0x45, 0x6, 0xa2, 0x3, 0x0, 0x7, 0x3, 0xe9, 0x4, 0x3, 0x7ff, 0x1000, 0x80000000, 0x401, 0xe5, 0x2e7, 0x1, 0x1, 0x2, 0x9, 0x9, 0xd, 0xfffffff9, 0x4, 0x7, 0xf0, 0x0, 0xfffffffe, 0x785d, 0xf61d, 0x6, 0x1000, 0xffff, 0x9, 0x1, 0x2, 0xb89a, 0x6, 0xa1, 0x80000001, 0x7, 0xfffffff8, 0x4a, 0x0, 0x5, 0x2, 0x7f, 0x9, 0x1, 0x6, 0x0, 0x401, 0x5, 0x4, 0x4, 0x59, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000300)={[0x2, 0x4, 0x9, 0x2, 0x4, 0xffffffff7fffffff, 0x1003, 0x2, 0x9b9, 0xfff, 0xf, 0x3, 0x2b5f7546, 0xfffffffffffffc00, 0x400, 0xffff], 0x100000, 0x1feb97}) ioctl$KVM_RUN(r3, 0xae80, 0x0) timer_getoverrun(0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) (async) write$uinput_user_dev(r2, &(0x7f0000000c80)={'syz0\x00', {0x564, 0x5a91, 0x8, 0x8}, 0x8, [0x7fffffff, 0x6, 0x113, 0x4, 0x402, 0x1000, 0x80000001, 0x960, 0x9, 0x5, 0xffff, 0x3, 0x1, 0xbf, 0x2, 0xddf5, 0x6e5d, 0xfffffffc, 0x8, 0x2, 0x7, 0x5, 0x6, 0x24ab, 0xa, 0xe, 0x1, 0x7, 0x52, 0x1fe0, 0x2, 0x3, 0x80000001, 0x6, 0x1, 0x8001, 0x0, 0x2bd, 0x4, 0x7a, 0x100, 0x7, 0x5, 0x8, 0x9, 0x109, 0x9, 0x7, 0x6c, 0x5, 0x7, 0x9, 0x8aa, 0x2, 0x3, 0xce09, 0x1, 0x1000, 0x1, 0x166, 0x7, 0x5, 0x0, 0x8], [0x1, 0x7, 0x9, 0x0, 0xf, 0x5, 0x0, 0x9, 0xfffffff7, 0x800, 0x6b, 0x0, 0x5, 0x8, 0x1, 0x7, 0x7, 0x5f, 0x7, 0xc4, 0xed7, 0xc8a7, 0x6, 0x7f2d, 0xbf, 0xffffff14, 0x5, 0x500000, 0x1, 0x9, 0x8, 0x7fff, 0x8, 0x2, 0x0, 0xe31d, 0x8000, 0x7, 0x16bb, 0x8, 0x1, 0x10001, 0x51400000, 0x101, 0x0, 0x800, 0xa, 0x4, 0xfffe, 0x6, 0x2, 0x1000, 0x0, 0x5, 0xe, 0x2, 0x2, 0x1, 0x9c, 0x80000001, 0xeb3, 0x2f, 0x100006, 0x9], [0xffffff1d, 0x9, 0x40, 0x5, 0x9, 0x0, 0xffff, 0x5, 0x4, 0x5, 0x7ff, 0x9, 0x100, 0x80000001, 0x68c3, 0x5, 0x5, 0x5, 0x3ff, 0x101, 0x2, 0x8, 0xa5b6, 0x9, 0x2f, 0x8, 0x2, 0x3ff, 0x5, 0x1000, 0x1, 0x8, 0x401, 0x3, 0x5, 0x8, 0x80000001, 0x0, 0x8, 0xfffffff4, 0x200, 0x0, 0x6, 0x2, 0x2dc, 0x9, 0x401, 0x6, 0x100, 0x1, 0x803, 0x0, 0x7f7, 0x1, 0x5, 0xffffffff, 0x3a57, 0x0, 0x8, 0x8, 0x7, 0x62e, 0x8, 0x9], [0xc, 0x5, 0x4, 0xffc00000, 0x1, 0xd, 0xc, 0x45, 0x6, 0xa2, 0x3, 0x0, 0x7, 0x3, 0xe9, 0x4, 0x3, 0x7ff, 0x1000, 0x80000000, 0x401, 0xe5, 0x2e7, 0x1, 0x1, 0x2, 0x9, 0x9, 0xd, 0xfffffff9, 0x4, 0x7, 0xf0, 0x0, 0xfffffffe, 0x785d, 0xf61d, 0x6, 0x1000, 0xffff, 0x9, 0x1, 0x2, 0xb89a, 0x6, 0xa1, 0x80000001, 0x7, 0xfffffff8, 0x4a, 0x0, 0x5, 0x2, 0x7f, 0x9, 0x1, 0x6, 0x0, 0x401, 0x5, 0x4, 0x4, 0x59, 0x4]}, 0x45c) (async) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) (async) ioctl$UI_DEV_CREATE(r2, 0x5501) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000300)={[0x2, 0x4, 0x9, 0x2, 0x4, 0xffffffff7fffffff, 0x1003, 0x2, 0x9b9, 0xfff, 0xf, 0x3, 0x2b5f7546, 0xfffffffffffffc00, 0x400, 0xffff], 0x100000, 0x1feb97}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 58.464639688s ago: executing program 8 (id=2542): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='devices.list\x00', 0x275a, 0x0) (async) io_setup(0x5, &(0x7f0000000040)=0x0) syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030601010405050724040501009c"], 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) io_submit(r2, 0x44, &(0x7f0000000180)) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000004d80), 0x20c983, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r3, 0x40045109, 0x0) (async) r4 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d0001000060020904001005030001000921000036012205000905810300000c00070905", @ANYBLOB="6ddc2ae3784033"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000380)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) mount$afs(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000001c0), 0x4080, &(0x7f0000000240)) read$FUSE(r0, &(0x7f0000000c40)={0x2020}, 0x2020) (async) recvmmsg(r1, &(0x7f00000052c0)=[{{&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000480)=[{&(0x7f0000000140)=""/39, 0x27}, {&(0x7f0000000180)=""/12, 0xc}, {&(0x7f0000000280)=""/75, 0x4b}, {&(0x7f0000000b40)=""/58, 0x3a}, {&(0x7f00000003c0)=""/153, 0x99}], 0x5, &(0x7f0000000500)=""/222, 0xde}, 0x6}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000640)=""/124, 0x7c}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/151, 0x97}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000780)=""/189, 0xbd}, {&(0x7f0000000840)=""/173, 0xad}, {&(0x7f0000003c80)=""/4096, 0x1000}, {&(0x7f0000000900)=""/96, 0x60}, {&(0x7f0000000980)=""/153, 0x99}], 0x9, &(0x7f0000000b00)=""/17, 0x11}, 0x9124}, {{0x0, 0x0, &(0x7f0000000b40), 0x0, &(0x7f0000000b80)=""/133, 0x85}, 0x3}, {{&(0x7f0000004dc0)=@alg, 0x80, &(0x7f0000005140)=[{&(0x7f0000000600)=""/15, 0xf}, {&(0x7f0000004e40)=""/33, 0x21}, {&(0x7f0000004e80)=""/236, 0xec}, {&(0x7f0000004f80)=""/17, 0x11}, {&(0x7f0000004fc0)=""/1, 0x1}, {&(0x7f0000005000)=""/12, 0xc}, {&(0x7f0000005040)=""/71, 0x47}, {&(0x7f00000050c0)=""/74, 0x4a}], 0x8, &(0x7f00000051c0)=""/238, 0xee}, 0x6}], 0x4, 0x40000020, &(0x7f0000004d40)={0x77359400}) 57.01699481s ago: executing program 8 (id=2547): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9f, 0x18, 0x76, 0x20, 0x17ef, 0x7203, 0x2e36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbc, 0x0, 0x2, 0x9e, 0x88, 0x33, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x3}}]}}]}}]}}, 0x0) (async) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9f, 0x18, 0x76, 0x20, 0x17ef, 0x7203, 0x2e36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbc, 0x0, 0x2, 0x9e, 0x88, 0x33, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000440)={0x0, 0x5, 0x2, "cda0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000440)={0x0, 0x5, 0x2, "cda0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)={0x20, 0x3, 0x2, '~K'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)={0x20, 0x16, 0x4, "b9ca51fd"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, &(0x7f00000000c0)={0x40, 0x30, 0x8d, {0x8d, 0xc2afb12e92136b12, "8120890666f7d32e660e73cbbd50965f632b11da0845ebdb3032da242651e6cabef69bd247dcbe930c94e15ccd8b87978beda400dde73bff26d4b7a03428878f09a98382efec7c36c8079e57193fc157f5e5b5cfa5117b40e39dd9c0bba356496459c6b88b2192f0e43b9ee56381beffa792f69f0bac7978dbf84c083a04c515a65adea3492dac432d1146"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x44, &(0x7f00000001c0)={0x20, 0x3, 0x3c, "7c3f63efbdffb4c9ff22fc7e80207968aa7d046b4e9bd1c2b96ad30f2aa28246d529f0d408646c4a631c16857f0d89967bd9bc2cf0e073ebf56078aa"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x5, 0x6, 0xa, 0x19, 0x7, 0x1055, 0x100, 0x5, 0x0, 0x0, 0xc, 0x800}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0xa}, &(0x7f00000003c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x2384}, &(0x7f0000000500)={0x20, 0x89, 0x2}}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000580)={0x20, 0xc, 0x2, "40c7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000480)={0x1c, &(0x7f00000002c0)={0x40, 0xc, 0x2, "bf71"}, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000480)={0x1c, &(0x7f00000002c0)={0x40, 0xc, 0x2, "bf71"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 55.635045771s ago: executing program 8 (id=2558): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB='e>\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 53.988202526s ago: executing program 8 (id=2565): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') syz_usb_connect(0x3, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x2c, 0x2d, 0x33, 0x40, 0x424, 0xcf19, 0xb2a1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3f, 0x0, 0x0, 0xb3, 0x1c, 0x33}}]}}]}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4c0182, 0x0) 52.648343575s ago: executing program 8 (id=2570): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="240000002800010023bd700000000000050000000c"], 0x24}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=ANY=[], 0x30}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) r2 = socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) umount2(&(0x7f0000000200)='./file0\x00', 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000a80)="cf435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) 52.597248071s ago: executing program 8 (id=2571): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000c00)={0x20, 0xe, 0x2, "169e"}, 0x0, 0x0}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/uevent_seqnum', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0xec, 0xb, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x1}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xa1}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xfffffff5}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x5e}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffff}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_ADT={0x58, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7ff}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) read$FUSE(r1, &(0x7f0000007040)={0x2020}, 0x2020) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000840)={0x34, &(0x7f0000000980)=ANY=[@ANYBLOB="000f77"], 0x0, 0x0, 0x0, 0x0, 0x0}) 36.534642541s ago: executing program 37 (id=2571): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000c00)={0x20, 0xe, 0x2, "169e"}, 0x0, 0x0}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/uevent_seqnum', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0xec, 0xb, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x1}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xa1}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xfffffff5}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x5e}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffff}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_ADT={0x58, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7ff}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) read$FUSE(r1, &(0x7f0000007040)={0x2020}, 0x2020) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000840)={0x34, &(0x7f0000000980)=ANY=[@ANYBLOB="000f77"], 0x0, 0x0, 0x0, 0x0, 0x0}) 5.142607436s ago: executing program 9 (id=2799): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'macvlan1\x00', &(0x7f0000000040)=@ethtool_cmd={0x38, 0x4, 0x8, 0xfffa, 0x5, 0x5f, 0x2, 0x81, 0xd, 0x7, 0xb473, 0x2, 0x85, 0x0, 0x4, 0x1, [0xfffff130, 0x2]}}) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000100)="167132515792183692b403163fad3b7c4b8ca21a3b511e10908aa4a0699b9a850643160595b17329ae2c94094a572cf0b34635040acd66ead2506cce20a3204e3d97f645392b7d64f7a15223dbad0f52236c282c600d559fed0484b9e1369da23019ddf03c5cfa983c3a3bcfa1a0", 0x6e, r0}, 0x68) (async) mmap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x8, 0x50, r0, 0x99ad2000) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000240)={@rand_addr=0x64010101, 0x1, 0x0, 0x10, 0x0, [{@broadcast}]}}) pread64(r0, &(0x7f00000002c0)=""/4096, 0x1000, 0x100000000) (async) r1 = open(&(0x7f00000012c0)='./file0\x00', 0x400, 0x40) ioctl$TCGETA(r1, 0x5405, &(0x7f0000001300)) (async) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000001340)) (async) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000001380)=@overlay={0xffffffff, 0xa, 0x4, 0x800, 0x1ff, {0x77359400}, {0x5, 0x8, 0x8, 0x3f, 0x2, 0x28, "6df8a307"}, 0x8, 0x3, {}, 0x0, 0x0, 0xffffffffffffffff}) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000014c0)={'sit0\x00', &(0x7f0000001400)={@empty, 0x1, 0x0, 0xa0, 0x0, [{@multicast2}, {@empty}, {}, {@multicast1}, {}, {@initdev}, {@multicast1}, {}, {}, {@loopback}]}}) (async) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000001500)='/dev/comedi0\x00', 0x310041, 0x0) ioctl$COMEDI_CMDTEST(r3, 0x8050640a, &(0x7f0000001600)={0xfffffffb, 0x30000, 0x20, 0x6, 0x1, 0x8, 0x10, 0x800, 0x40, 0x3, 0x2, 0x5e, &(0x7f0000001540)=[0x80000000, 0x7, 0xffffffff, 0x9, 0x6, 0x80000001, 0xcf7, 0x83d], 0x8, &(0x7f0000001580)="af8fb0354ab930d750d3e8ea75aa8c21c31e9b8a5cc9671016b38b0f23e93f5aaafcf31f8ceec71b621f1bafba6d50eac3c08a43483c564ad2d5c8df7e490881ec", 0x41}) (async) syz_clone3(&(0x7f0000001940)={0x400, &(0x7f0000001680), &(0x7f00000016c0), &(0x7f0000001700)=0x0, {0xb}, &(0x7f0000001740)=""/137, 0x89, &(0x7f0000001800)=""/240, &(0x7f0000001900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r0}}, 0x58) fcntl$setown(r2, 0x8, r4) (async) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f00000019c0)) (async) r5 = syz_open_dev$loop(&(0x7f0000001a00), 0x6, 0x400) (async) r6 = syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000001a40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r6, &(0x7f0000001cc0)={0x2c, &(0x7f0000001a80)={0x20, 0x30, 0xf2, {0xf2, 0x2, "bd494e1f0cbe8e66cdcc01393d4fecb63d7e426cad6af0dbaa3b15ab85e5243830ec225b3a0cc6363c57d2dcdb167baa570e7574514cd4ea22cde2d95dc8ec4d24848db73c62b3c9ec99f520fb80f92e6c85a3fb2ef5e027dd8b6a3bfbf749c345a184308d29581933ab6de90c39d145826113b7d6024ce6dcefdd2232e3017042ef20ce0366fa1625a9053f17969500e6e42b00034ec06b1a7e5e6ecb35f323301f3e7c3853021d6ed9ab214a77abcc85db88ba3597acc4b9ff0b2479583c24c99f0c60a99f4f4362bdcf7602cc590a0f5f9a7d156932b68eea7af55a0dbc58c1fe863ebebeea0085ae4334cccc4348"}}, &(0x7f0000001b80)={0x0, 0x3, 0x8, @string={0x8, 0x3, "3f7d5c1906da"}}, &(0x7f0000001bc0)={0x0, 0xf, 0x43, {0x5, 0xf, 0x43, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x52, 0x8, 0x2, 0x8, 0xc3}, @wireless={0xb, 0x10, 0x1, 0xe, 0x84, 0x20, 0x8, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "5fa16b5303b106acdfb3012e3804586e"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x2, 0x0, 0x40}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x4, 0x80, 0x401}]}}, &(0x7f0000001c40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x1, 0x5, 0xb6, '}KMu', "4ebac0da"}}, &(0x7f0000001c80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x90, 0x4, 0x7, 0x2, 0xed, 0x3}}}, &(0x7f00000021c0)={0x84, &(0x7f0000001d00)={0x0, 0xf, 0xd8, "cd641df2520f7b02e07dede823a683ca80ff56707919e948a87e15a8831e6f5cd6ce14b22ecd5290dd059044d2c76c271fdeacdef64c486058941ce5f22313b8c7c3dcf416aa15ecf441526d58cfa98c98542b0cf1b94b58a9d2451eb316d08eac6a4db0de544fcfb5f1f01e266161ff09cb84b192f8401f7b50b533d72e12d321b60a64db5545cac2b6d54aff6a6c43fe1f2e09c321c2a3cc82b4f8c6adef4d158b30007648d61c695cc2c2cd84840cf4fe741ca56f36d736632a0f8753e69abda423c8616351711915e85c78fedf40a8ee828b650c84fc"}, &(0x7f0000001e00)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001e40)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001e80)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000001ec0)={0x20, 0x0, 0x4, {0x100, 0x1}}, &(0x7f0000001f00)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000001f40)={0x40, 0x9, 0x1, 0xcb}, &(0x7f0000001f80)={0x40, 0xb, 0x2, 'j\x00'}, &(0x7f0000001fc0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000002000)={0x40, 0x13, 0x6}, &(0x7f0000002040)={0x40, 0x17, 0x6}, &(0x7f0000002080)={0x40, 0x19, 0x2, ':Y'}, &(0x7f00000020c0)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000002100)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000002140)={0x40, 0x1e, 0x1, 0xfb}, &(0x7f0000002180)={0x40, 0x21, 0x1, 0x6}}) (async) ioctl$BTRFS_IOC_QGROUP_CREATE(r5, 0x4010942a, &(0x7f0000002280)={0x1, 0x6}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002300), r1) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f00000023c0)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x14, r7, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40008c8}, 0x20000000) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000002500)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x1c, r7, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", "", ""]}, 0x1c}}, 0x11) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002580), r1) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000002680)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002640)={&(0x7f00000025c0)={0x44, r9, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x804) (async) connect$caif(r1, &(0x7f00000026c0), 0x18) 4.258090047s ago: executing program 9 (id=2804): read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r1 = socket$inet(0x2, 0x80807, 0x1) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', &(0x7f0000002080)={0x1a3401, 0x0, 0x1}, 0x18) r3 = open_tree(r2, &(0x7f00000020c0)='./file0\x00', 0x88801) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000002100)={0x0, 0x2}, &(0x7f0000002140)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000002180)={r4, 0xfffffffc}, &(0x7f00000021c0)=0x8) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000002200)='wg1\x00', 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000002240)=0x8, 0x4) read$dsp(r3, &(0x7f0000002280)=""/105, 0x69) setsockopt$sock_int(r3, 0x1, 0x26, &(0x7f0000002300)=0x6, 0x4) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000002340)={'veth1_virt_wifi\x00', 0x6}) fallocate(r1, 0x44, 0x90, 0xc) sendmsg$alg(r3, &(0x7f0000003400)={0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000002380)="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", 0x1000}], 0x1, &(0x7f00000033c0)=[@assoc={0x18, 0x117, 0x4, 0x5}], 0x18, 0x4}, 0x0) sendmmsg$alg(r3, &(0x7f00000039c0)=[{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000003440)="74a308480d384c8dbe88f80d2d8eb6ebeecb0fe573b8016ff3beaaa657718c302f88fd5111c9967bf221de5fcbc591472f449e7ca248120e9f17596541d50e65b893e8b943561584ff3490ebbfecb4b58e19e1062c053aaaa87464db7ff70d4f5bb0c1b4b8e59362f5269f0b6e6381e07c22d191d6f9a39a5e70c42ffd058d518b28dab8539990c49f0388c4aacd79e49226b2886b54a9ddbc5fd190cd27f73c563fde03406bcda2cca6bd3d656e37927b6c9234e4dfba0ed080b45d263b8186f02f559904569115b2b31216ad538e8e9012b2d11a6fd74405e8a8bbbbae9d2c01232887c12e296e45b3", 0xea}, {&(0x7f0000003540)="cb3d2f2e7b7f55873904b1146e8cf2c7cc18b864ff3b558bacba357af3ed5ea434ae3f39ece65b1442faa2571c5ea57ec291714705b76f58caf59fec9ca8a72e91eaa288045cee64afc8b453f6c7512f11874669b8502886ee", 0x59}, {&(0x7f00000035c0)="36cc7a13d5a9a69ab3215b3f7ac910957ecfc81948cc1b9da8f4d25d9973cf39b984001d9b5bb8a094ca83be961b2b1ab3c4e29442bd29ddfcf66ae922d9b074c9cd2e5e095d01a3fbfbfaa46e5604d1094e7d89b09a89a8bfc671aebd53f24d8cacbc030ea76e7d3c68e0121f7e4dd419381f940079bcdc430beb0359d373ef2b65a881c7c6e6aab9e51f8fb85942783a2253be1a657e3d2783c7246a9af5031b56c0529ffb673bf638f307ac402e4edb625068c1ddd1c302d19c407a28994acd1d8fed3251e039", 0xc8}, {&(0x7f00000036c0)="3976ec81181d8481cd377f505eb0d3e5573d78deadc014d0da852b44014a37324f924d0864fd8d1b8a91bae68b823c8720309e347a5fe131c95efffa258ae95364c011cb15df996ac213c01e4aa2fb2e938b0888998e8cfc56cf34bae6ac8d688a5e09678ee45fdb72aacc8a419ee5db4c54110d4cf8128fa7258aec6d7c7899b3fb3178c8cd2e0f046d6f15948cb53f51b9f2553862f40d693d6628a38ac5f376e868fb66b2672cb4105d031e3ef121c6a68274737325a78216e1f5deaed4e2e5a6f432e4b35a62ad0e18520e857239b91f7df84600fecc2138fff8a4f0afef1bce485754d4ab24e84adb52a719fa795fd44e0cd50b19c8be9f", 0xfa}], 0x4, &(0x7f0000003800)=[@op={0x18, 0x117, 0x3, 0x2}, @op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x28, 0x117, 0x2, 0x10, "621082ed542e817ec6567bd07e78b22d"}, @iv={0xe8, 0x117, 0x2, 0xd2, "f961780192bcfc87e7e6c8c1e9620ad8c3c024e2b2a20652a8fee11663fa60e074001ef68bbf033e3e9f7053f90b31fd10708d2e5fa5f7330bbfe8417cc09e1be6337ffdf503368c8e6d5c4c558f9d8d498b15086504134942a02e6cf4a5bea4fe872e42f9af944842e5ae1309c9b6e7f4b91aca87d4072a0e56365903d1985d228de9b8a1b5ebb285c80fc9fe97e9c1afb7e1d19c283755b9ea4040bef1d518bd05be5768fbb2e2b96c0a10bc4e0a8016a70f234e02947d877dbbc2a8b76b615ead6ec095e30191af328fb9588e0ffa0d98"}, @iv={0x38, 0x117, 0x2, 0x22, "260d2aadc8375c2f9c4a41390f4f6d79237fa7ac0c925463fcf5aee0f3ab0d04d857"}], 0x1a8, 0x400c000}], 0x1, 0x4002405) syz_genetlink_get_family_id$l2tp(&(0x7f0000003a00), r3) r5 = socket(0x2a, 0x4, 0x1) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000003a80), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000003b40)={&(0x7f0000003a40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003b00)={&(0x7f0000003ac0)={0x24, r6, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffbff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8804}, 0x20000040) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000003b80)={'lo\x00', {0x2, 0x0, @initdev}}) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000003bc0)={0x0, r0}) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000003c00)) recvfrom$ax25(r5, &(0x7f0000003c40)=""/84, 0x54, 0x12042, &(0x7f0000003cc0)={{0x3, @null, 0x2}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000003d40), 0x4240c2, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003dc0), r7) getsockopt$inet6_mreq(r5, 0x29, 0x3a1c4ba67068b9e4, &(0x7f0000003e00)={@rand_addr, 0x0}, &(0x7f0000003e40)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000003f40)={'syztnl2\x00', &(0x7f0000003e80)={'syztnl0\x00', 0x0, 0x40, 0x8, 0x8, 0x7fffffff, {{0x25, 0x4, 0x3, 0x29, 0x94, 0x65, 0x0, 0xd3, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0xbe, 0x0, 0x7, [0x200, 0x6, 0xe34b, 0x1000, 0xfffffffc]}, @cipso={0x86, 0x2f, 0x3, [{0x2, 0x12, "65303c358a7297d58bc98164ac6a1ffe"}, {0x7, 0xa, "cd90895cab205669"}, {0x1, 0x3, "ef"}, {0x2, 0xa, "fdbe3d5a48b7a5fe"}]}, @cipso={0x86, 0x2a, 0x0, [{0x0, 0x7, "aaaf36bfb4"}, {0x5, 0x10, "5cc455c2f5ccd841796e90f4d877"}, {0x7, 0xd, "7ee92790f4530830b38ac3"}]}, @timestamp={0x44, 0xc, 0xee, 0x0, 0xc, [0x6, 0x9]}]}}}}}) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000003f80)={@local, @multicast1, 0x0}, &(0x7f0000003fc0)=0xc) getsockopt$inet6_mreq(r7, 0x29, 0x15, &(0x7f0000004000)={@private1, 0x0}, &(0x7f0000004040)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000004300)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000042c0)={&(0x7f0000004140)={0x16c, r8, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x16c}}, 0x4000) 4.144530432s ago: executing program 5 (id=2805): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)='B'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000640)={[0x2000, 0x26000, 0x4000], 0x8, 0x4, 0x8000}) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r5, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r0}}, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000001380)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002c00070100000000ffdbdf25027c000008000180040006000800028004000180d2a716f01ef2789108c82afacfee86c243690e5dfc5f33d0181f2cb69e3b84a06a406f49f26211c2b6239e74a2f5d206561f"], 0x24}, 0x1, 0x0, 0x0, 0xc044}, 0xc050) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = socket(0x11, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r8, &(0x7f0000000180)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000140)={'gre0\x00', &(0x7f00000005c0)={'gre0\x00', r10, 0x7, 0x10, 0x800, 0xd, {{0xd, 0x4, 0x2, 0x34, 0x34, 0x67, 0x0, 0x2, 0x2f, 0x0, @multicast1, @broadcast, {[@noop, @noop, @generic={0x44, 0xf, "a7c8535b214882fa6c5ab0a69e"}, @rr={0x7, 0xb, 0x56, [@loopback, @loopback]}, @noop]}}}}}) getdents(r6, &(0x7f0000001000)=""/4075, 0xfeb) 3.846665254s ago: executing program 5 (id=2806): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x42701, 0x192) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r0, &(0x7f00000000c0)='34', 0x2, 0x8000000000005}]) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000005c0)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x106}}, 0x20) r4 = syz_usb_connect(0x3, 0x797, &(0x7f0000000e00)={{0x12, 0x1, 0x300, 0xb7, 0xb0, 0x1c, 0xff, 0xeb1a, 0xe359, 0x91c3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x785, 0x3, 0xe, 0x1, 0x0, 0x4, [{{0x9, 0x4, 0xeb, 0x3, 0x2, 0xf6, 0xc3, 0x86, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x64b6, 0x2}, [@extension_unit={0xd, 0x24, 0x8, 0x1, 0xfffc, 0xf8, "8a7806fc8054"}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0x1, "ed"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x100, 0x1, 0x7, 0x2, 0x5, 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x302, 0x4, 0x1, 0x7}, @mixer_unit={0xb, 0x24, 0x4, 0x6, 0x7, "509042e3ef32"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0xa1b4d400a322a1ac, 0x4, 0x7, 0xc62, 0x2, 0x77}]}], [{{0x9, 0x5, 0xe, 0x0, 0x400, 0x8, 0x5, 0x1, [@generic={0x61, 0x19, "4e8e0e9318fb5b7f7680cf6f0dcf6c56bab8e25e5f462cec557a0109fc97dbc852cdb745f1a08dec933a660088a67ac7521e7171f0451f6644355f515f4fe2b0d45a8ec598fe482fd7adc5869e5d7e5b65a381543cabc2f5a5796fa1b61431"}, @generic={0x74, 0xb, "72683fa1f25c296605ca264ce5a1a4e71bb7b65746643ed5c60a2d9ebf2f6a5cb0c7dccb1d43c2161af4382484bb66600feb29459d26732974ed5eb95579d7e0da5b0c193cbac3fd48ab71be79583908f5ba1d1632ddf5f6906ed7987150dfd1096ff795b81f94aedffaa90e596281098feb"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xdd, 0x3, 0x3, [@generic={0x3b, 0x6, "82261e8ef3639949a092b24a6cc005a6475ee3ea4a350f21590c69d2ae2817093fdd4e31f3447290bab96b7f325ac15dd71bdd013309fe208e"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xa, 0x7}]}}]}}, {{0x9, 0x4, 0x5f, 0x5, 0x9, 0xde, 0x62, 0x22, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0xc, 0x1}, [@selector_unit={0x5, 0x24, 0x5, 0x4, 0xc0}, @selector_unit={0xb, 0x24, 0x5, 0x1, 0x6, "a45b97548994"}]}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "b914d71da8"}, {0x5, 0x24, 0x0, 0x617}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x0, 0xfffb, 0x7}, {0x6, 0x24, 0x1a, 0x7f}, [@obex={0x5}, @country_functional={0xc, 0x24, 0x7, 0xe, 0x101, [0x0, 0x8, 0x7]}]}], [{{0x9, 0x5, 0x8, 0x8, 0x3ff, 0x1, 0x7f, 0x9, [@generic={0x6a, 0xa, "88f6717dae5e8341e94a6b28a7d772588b349c72dd8f8dabb3a430ffaa6dd9d21d9388f5b552022836aefad32b5b7ff660a4217d54cc4be82e76cb08edc608f458b4fa9d31187530f60db5821965fffe2b1ea253b064cdc10c9f30931ad04c8d5fe925be582db738"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x5, 0xc, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x85, 0x5, 0x2}]}}, {{0x9, 0x5, 0xf, 0x2, 0x8, 0x45, 0xf8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x3}]}}, {{0x9, 0x5, 0xb, 0x4, 0x3bf, 0x9, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0xf}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x4, 0x3, 0x7, [@generic={0x1a, 0x7, "7a9bea7f88bd3401bb0277a037d1d0ef47942487b7478462"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x3ff, 0xb, 0x6, 0xf0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xa9, 0xafa0}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x4}]}}, {{0x9, 0x5, 0x80, 0x4, 0xbb7, 0x3, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x3}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x8, 0x7f, 0x71, [@generic={0x5e, 0x1, "a3c3676991327b93b71bd3d5edd444478472148657a931fe2e7f131ed2e539edd7e8e2661cabbdc76aeb1b751fb87a555aa505eada074243b8710c43cee7b4b5b203fb8003c3297616cdfaefefe55ce53c8c1fe18d73672812f8aeab"}, @generic={0x85, 0x23, "b802110db92862a8b8b7198077980fc18d01957b81eecabc5ecd4f43b44ad0ca618aae9a198dce38e1cd58b67220981699cb48736e68cefb7528f5a9b824b57dd8b30c60ed0ae3c262d72f6749791466d6b228a6e25b618a7f6a6dfeaa8388dbe4eaac03b1a8d33faa3e94f8b9dc2317c95c555e0b5870adfc7a86dcbe4f7ceb0bdc31"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x10, 0x8, 0x7, 0x8, [@generic={0xc6, 0x22, "a6be8ab72dacee2c4af997fa47f6c17d2cbdc90165172a18f4bb0d10cce180a2ae7bfe6b8b19a685c888ced2e175b9696fadda23d55eed94bca067f19961bb136bbf7b166ae550c19168ee6d79521c1ef3b22ba476fdd4ca387fba61db21c00962a3d8f9743224690957bdb54f7a5f738e9bc452dd180874f647ec8e5f6d16976c43e2e6f6aca1d2f65c694336fadecc1854cebf14a53a9eeabcbc1a30706b3adf87e9f2da4b5772340cdc6febd76aa31ec1a66bbdfa892e2f5644e6b2e15c1ed42b0212"}]}}]}}, {{0x9, 0x4, 0xbc, 0x2a, 0x7, 0xc9, 0xa3, 0xc4, 0x21, [@uac_control={{0xa, 0x24, 0x1, 0x7, 0x28}, [@feature_unit={0x11, 0x24, 0x6, 0x4, 0x3, 0x5, [0x1, 0x6, 0x4, 0x3, 0x5], 0x4}]}], [{{0x9, 0x5, 0x6, 0x8, 0x40, 0x5, 0x7f, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x9}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x7, 0x3, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x400}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x8, 0x0, 0x0, [@generic={0x62, 0x7, "a6cf55db6b407f7de1b8c2514486304f7337401e243cf094a31a3df40f2a4d8d5307fa98f8a4b43d285987b7e8fb7e9af93183abbda883c61b9f6874709bc5bba2e0c842ed3d53e4ec3fcc8b76b9aa87e2daee040445d2b44215085adabbe970"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x410, 0xa, 0x4, 0x9, [@generic={0x47, 0x7, "620efda3c26eba05517df98d2dfa1e10d50a78165790df83792d24727ca610b403c1e453ac2d6490710cd09e80e0206905362cd1f769a10a0531912616714ea11062bd833a"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x8}]}}, {{0x9, 0x5, 0x3, 0xc, 0x20, 0x1, 0x8, 0x0, [@generic={0xf9, 0x1, "912b94f74981c815e909d63fa7fd66e803dcce676e279369061a4161fcae2fe70dfa66471a17008a69bcc8403a6bcc0408f19dbe955a420b13f892796a753375c4b8534529e48b2fc58e8e6c7a8ee698585c757a5b0397a84613e21e79b1292ed09809c9025282a16e4670df78865b968e0698c560a50e7f4a2c5fc664f6ff34d9bd36b7790838e58da69689dc2a6b629346406d09b701823276254d9d8cbc886272fa03933223b0cc48565137eee175791d2f0309ae41d03c011405b007ad27693b4d43545c4f4cda8ee4cd5385f9f0604d045756b9307aaa00de7a75995471ccaeb634baaa71b3aa6a75123625bb37ce5297cb9ab440"}, @generic={0xa1, 0x24, "a919a048d1603cf4cfc5487efa343cfd31d3dbea1cd5fea13358ce987d83c98113015e3132a1e9f771e7c9049e3958592c869e55546275adba831dad64d1f2be0eaad847792ad5dac0edcbbbe4bef0a683e9fbf8716a66d520d2e0cc827ca5db74ec60570e7200b7d4d19f9a99067430c327011bb486aad549bc0eafe550134b17396fcfdab29df9f36c89f9ea3c1ea08617b4ac3bbcbedaec27a3aef16397"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x400, 0x9, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xc, 0xc}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x1, 0xe6, 0x1, [@generic={0x36, 0x22, "e7cfe330507a2916f7090ee3fcb6273ca785deaceafecc9e7874d5a0824153d791ce1ae63696200a96fa806b47a64a522eb22d2b"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x3efb}]}}]}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x6, 0xfb, 0x3, 0x20, 0x5}, 0xc, &(0x7f0000000240)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0x2, 0x8}]}, 0x8, [{0xa9, &(0x7f0000000280)=@string={0xa9, 0x3, "511d185409d62e6435f4a90cebff0263607094643e6af9d52047eea07bb510297f4a306c38751c5928d9b4d96a4de63a5949b5463ab99959cbddd3fd1655fd6bf503334cbe7baf6c6fb08a6b9d00c6394c25ef04ee0dac9c9760ca6b77e176627f9cc415e3f33b11c1aa56e534cdf2bc7b0c0874ddc460216bd1989c2c86a2b218f76c822c13ffc0d57e78c1dfc1efafd34ba0dd11eec696af27dea8a9cb04eaa504875ace709f"}}, {0x4e, &(0x7f00000004c0)=@string={0x4e, 0x3, "5c2e0a2fce4742c1868757c42e9a783de8569bd5b0a873e7ea485b518677ed68553741fb64a79674b21f127524f83d19064633c58c856bb305139999c8409466d38dc226a33d02f68f3d81ed"}}, {0x27, &(0x7f0000000340)=@string={0x27, 0x3, "5187f3b13aeea163e3dc12e2abac7a42b95db3e920dc0f2bc32c505059390fb496d8a6e3c0"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x40d}}, {0x21, &(0x7f0000000540)=@string={0x21, 0x3, "f568c18047388cce5bbe1ccc8f838f59dfae867804e6edaf8a0cdd47566e20"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x414}}, {0x7c, &(0x7f0000000640)=@string={0x7c, 0x3, "411a6cbc8d56610a68a3f6f496eb0358edab06b89a49695b724cf10f26d3dafa9379c4b8e1187e1e5402c1adf6751244f2aeb843333dba53faa17db91ef54a4ed6af4e6d38dda1caf7ee18c2b418156afe7d77d2347dee7b8ef829942f21354c28a13a28d67a48d1b74051014df97f4e59ad8be3159073166a5c"}}, {0x83, &(0x7f00000006c0)=@string={0x83, 0x3, "eca8b181cbe7ff828d2dfccb1540360d9adc1b6b143561654cb5c657003cdd53cf237feb1f4dbae3ecf7f2c29188e56f15f2f7da981fb271f3f3ec199d14017668eb0b972669c8d690e7f7d3211b7f137beb758df567f00c99a27a0e696231ef5243863fa3fa5379cf97b6b4916aa0bab9705d3a0fd79455b894c39c9d99799b2d"}}]}) syz_usb_control_io$printer(r4, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="db0569a69e4cf471094c578485156452f73fe85314eca199db6c4c698236ba34bfe3a85b5d11730a7239c935717ef29798af2e463a53176e95e3bc41202ccf7b22409ec98d9839edeae5c28d1dc9690606a2934af56f1e31e95555035e1bc331e1bedfd5c6f7bd4fc8d19bd24e1d9be70e56321aa4b401592051c4d3d1cf2041243a51981c0b36471980", @ANYRES16=r2, @ANYRES16=r3, @ANYRES8=r2, @ANYRESHEX=r2, @ANYRES16=r3, @ANYRES8=r2, @ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x6}, 0x7177}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000900)=@assoc_value={r6}, 0x8) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/pm_print_times', 0x8900, 0x50) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc, 0x2, 0x2}, 0x10) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r8 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x3, 0x82000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r8, 0xc0045520, &(0x7f0000000040)=0x1) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 3.769958595s ago: executing program 9 (id=2807): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}}) 3.642189626s ago: executing program 9 (id=2808): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a000100000000000000000080", @ANYRES64=r0], 0x84}, 0x1, 0x0, 0x0, 0x20000880}, 0x4a040) r1 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x3, 0x3, 0x5, 0x2f, 0x7, 0x7, 0x5, 0xffe, 0x1, 0xfffffffb, 0x8500, 0x1003, 0x0, 0xfffffff7, 0xffff, 0xffffffa9, 0x40, 0x80001ff, 0x3, 0x10, 0x2, 0x8, 0xe2df, 0x1, 0x108, 0x5, 0x3, 0x1, 0xfff, 0x8049]}) 3.488968983s ago: executing program 9 (id=2809): r0 = openat$kvm(0xffffff9c, &(0x7f0000000300), 0x80800, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0xc0000103, 0x0, 0x4}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffffb, 0x6, 0x0, 0x4, 0x10003, 0x0, 0x400200cc4, 0x5, 0x7d, 0x0, 0x0, 0x0, 0x5, 0x1, 0xb9, 0x8d], 0xeeee8000, 0x2011c0}) r6 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r7 = dup(r6) write$binfmt_elf64(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4606ff78a002efff000000000002003e00cd000002cb030000000000004000000000000000ea02000000000000000001000500380006"], 0x78) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) 3.189023021s ago: executing program 9 (id=2810): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a80)=ANY=[@ANYBLOB="2c0000002c0007f123a6e061d19c5e25017c00000800015d04000604100002800c000180f4a3ff63d308008e"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0xc010) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x48, 0x0, 0x2}]}) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)="56a8c8a7e58e46aa344375d9fcac22e9a252c775b4253209fe31694bd4897205213e135eb04acebc00333319045b83efecdea2233a2bc98447396ae640e0a8161cbb27dcad47d13793aa4fe8d1c6e40f2fa20e3eecb9db75d5f5eb0b67ff69184e45a60c9c0d3bc67839094923e7a6088ae103af48743dfca9c96067", 0x7c}, {&(0x7f00000003c0)="b5bd0e7ff8adf2c64c2ecab9200d5fc5abaa4335c0ca559b19a0271701d276f1601d9f46509caaf3b0ade3721d1b00494b81971d22a7a31121bf960ae8bfbb9f93a0eb8455eb3e22957ed61de6eb1a2170a372b719fc739142363b0b7537274013b35e9d2ad7daf2a3a9b47db47cf2a61b27b6145ad7f25a5d415294354227b6e362d1563b7dce487600fd91f8c7e1b7d6d2850ad13af64cad6b2c4fa646636a16493ae9b573", 0xa6}, {&(0x7f0000000140)="b19777f34f2b9f8371de01bc7612fd6701f2", 0x12}, {&(0x7f0000000540)="a275b1be0307e2b3b145c821ef249696c6487efa002a7158b2e7852fdaf154abda4509c10396480a9c1c151bf18e8e1a881a4ebe2759bd0d2a2b07f2ec8cfcfa6ea0aa2c8ba172d656690a4db831116fabefbc", 0x53}, {&(0x7f00000005c0)="85b89df5dbc6b8a1087e5cb9ff690cef1e9c35d5d104ae2b7b731da055aac147ea9241800778822afa698abc63e8e1642c3bd886d5fef89f28bb8e2cd2e56f10a8025e44af5b5f1944a7604da4b6d72b00bb976ca4980ff9c2f0fd262fa12575e22f221c811d", 0x66}, {&(0x7f0000000740)="d828ff2743f5250e4b79640e799ad3bd016dfd133b923a0dad2aa5641c7ae00c4b0d892b28208b95e4007a8212525b00612af7a0e1df88ed18b6c5a7d98de81da85f75e247bb766b09eb96cd382207de4786429e26c2a70f009f5c1bc8a5b4ee00cdc3e85c89794b6e3da61b47853d62178d8d3b8dd1860a08dbe62c3b260590587e5e8d88ceafdb9e9fdab043b79e72f217c20b77fd7013cc89d5898516a072ce626ce8a2774bdbd777abaac6f0b9937adc35ef9b50cde4f8cd08f84081cb4ee10f934744eb90aca079d4309e5e6014826243e9e06467be9ac9aa7379157f26a36c0bf7e8", 0xe5}, {&(0x7f0000000840)="5657b10dccb011cc39e25e44cfe876128d23d3c9648f058e1ace096286475d531d2407d177358abea078bc9f13c84a104d6d0fe2e59680bed722dea186f2ac36813f6ddba028f017348b213c8ac64b636fd7a324378f07d7f207451e57f63a5fdf731406fa6dc32a455e42d7b49df7f43a526297cac91acfc0fe5d15233093e2064c4cc848184bfa516be40d22453fec21034f57b2be788c8db710ff548f8efc1c0543e81f71925933cd2f1c908fb1628ce468fca0674d35383a96bd0ba26fc9c5b30e0563776b4b4d146b2dec38c05577f48dc69c557ed41b952bf416f40eda0e24d4fae4cc7ec6bd82b9bfd3e65e6703098321e9", 0xf5}, {&(0x7f0000000c00)="c0711e187e46e91f5c90a4712b1a1dfe825c6c7504d70a342b2b28b6bbf72b84e9d937080517d208540d2a4c4c8f8a6e19d732f144ea73982ba4f905ca165d464ccd4aa10e23704d6e911c6a42feda271e25c79479b1f367ceede405eb99ebe1155bbbc36200a87a858c59c10caaaa8b95d3f56f5902704c46f2533fa8f9529b52448686cdd9ac426d9e60db329d871b3cbd1298a85d3e410cacb1694228259608db960c2daeda24ec9c8561a90ebfd9b78558f2dfdd7ca7b2e1ad1d76078f3ab8a8af76d707fbba4e23b1a01ea84595", 0xd0}, {&(0x7f0000000a40)="bc80b3b16f6822ced6aa17656b1811fcc8b765842f931d0fd54bdab89661a9d1b9c69cff16b6f5500f20e95dd6441b0f428e82c1fd06ddbac6d8874261e8837c9616ee59b5a831192988cb8dec60ee440eed50b2e2abd6d6efa6758aa5611fc8d359d2fbcbd65d056ace18de6b7ead1f77ddd5971411ffd498642a2bdfa88fb72a0575e10a1619049680c2257e942a1daf8011a749be80fbb0b5fc6624c3739f8babd912369d5956be501139c55a9e367bb7b7558e704dc4cb7533b8f3140ee3994f18eaf9af7c814671b25c5f3e1a5f988a5494bf81798851", 0xd9}], 0x9}}], 0x1, 0x20004000) (async) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001030000000904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async) r8 = socket$kcm(0x10, 0x2, 0x4) close(r8) (async) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, 0x0, 0x20000800) (async) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x84, r6, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3f, 0xe, {{{}, {}, @device_b, @broadcast, @random="4d8e505a6882"}, 0x0, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x7, 0x3c, 0x2}}, @void, @void, @val={0x71, 0x7, {0xfd, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x84}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@version_9p2000}], [{@fsmagic={'fsmagic', 0x3d, 0xfd}}, {@euid_gt}, {@subj_role={'subj_role', 0x3d, '9p\x00'}}, {@euid_gt}]}}) write$P9_RVERSION(r11, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r10, @ANYRES16], 0x15) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) (async) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r12 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) sendfile(r12, r12, 0x0, 0x7f03) (async) ioctl$TCSETS(r12, 0x5402, &(0x7f0000000480)={0x1, 0xd7d1, 0x1ff, 0x9, 0x1b, "fde8b613a09ba4537640823c14b8297b7646e9"}) 2.65207272s ago: executing program 1 (id=2811): syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092ecc620ac05c2773aeb010203010902240001000020000904c40102fffd01"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'ipvlan0\x00', @random="31ff066cc57a"}) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.368358811s ago: executing program 1 (id=2812): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'bridge_slave_0\x00', &(0x7f0000000140)=@ethtool_stats}) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'bridge_slave_0\x00', &(0x7f0000000140)=@ethtool_stats}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2c, &(0x7f0000000000)=0x1000, 0x4) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x2c, &(0x7f0000000000)=0x1000, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002600)=ANY=[@ANYBLOB="ac0000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040020010000000000000000000000000001080007400000000018000d80070003"], 0xac}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002600)=ANY=[@ANYBLOB="ac0000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040020010000000000000000000000000001080007400000000018000d80070003"], 0xac}}, 0x0) 2.281091906s ago: executing program 1 (id=2813): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1c4f, 0x59, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x58, 0xb1, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x44, 0x3, 0x2, 0xfb}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="76e61c"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000100)={0x0, 0x23, 0x15, {0x15, 0x5, "82d4c4ec96d59f248704222467d88e092929e6"}}, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$dmmidi(&(0x7f0000000080), 0xffffffffffffffff, 0x201) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/248, 0xf8}], 0x1, 0x9, 0x8) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000146"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1c4f, 0x59, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x58, 0xb1, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x44, 0x3, 0x2, 0xfb}}}}}]}}]}}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="76e61c"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000100)={0x0, 0x23, 0x15, {0x15, 0x5, "82d4c4ec96d59f248704222467d88e092929e6"}}, 0x0}, 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$dmmidi(&(0x7f0000000080), 0xffffffffffffffff, 0x201) (async) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/248, 0xf8}], 0x1, 0x9, 0x8) (async) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000146"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) 1.648595304s ago: executing program 7 (id=2816): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket(0x28, 0x800, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0x1c}}, 0x8040) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r1, &(0x7f00000004c0)={0x2020}, 0x2020) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x10) 1.013146779s ago: executing program 7 (id=2817): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x8b, 0xffffffff, 0x40}) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x0, 0xe, 0x4a}) 905.080918ms ago: executing program 7 (id=2818): ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[0x2, 0x401]}) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) move_pages(0x0, 0x2, &(0x7f0000000180)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000240)=[0x1, 0x1], &(0x7f0000000000), 0x0) 832.619087ms ago: executing program 1 (id=2819): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) (async) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x1b3) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) (async) landlock_restrict_self(r0, 0x0) (async) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r3, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x2}) (async) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x6, 0x401, 0x2, 0x0, 0x1}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000140)={r4, @in={{0x2, 0x4e20, @local}}, 0x81, 0x6, 0x3, 0x70c073f7, 0xd}, &(0x7f0000000200)=0x98) 774.592272ms ago: executing program 7 (id=2820): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0501ffffffff0a0000002e00000008000300", @ANYBLOB="169ad90f29d5a84871cf50485b63d0cb5672d6aaf36cde5edb79e2a9b73fd92badb02998d9bc03eef9ff3afd6ff0d6470bb9a1286169ff8fcdea574eb741820f6ee9fb14732ab2c31cd874cc7e5f9eb4741f8264632245eb6c9e89755f5d6629b4f08cf6027e309c419e3f10a3f78e210c8d6d2f6970c6220fe522ef41f8811364440ecf83753fadc71fd8b2a669d9b4184a64e3c3d79113773391a15d0057743e6d2f9b", @ANYBLOB="0a003400020202e202fa0000080700000e7a0800"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) 766.889145ms ago: executing program 1 (id=2821): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) (async) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, &(0x7f00000005c0)={0x20, 0x31, 0xfffffffffffffd45, {0x3e, 0xd, "814bedaff91bba1eec44cfd103667c43a8bce2fcc5cbf123b5a2eb48369362bb5a92f5c7b6c4610c91de97d82f0a19ad75c3f0b0d33b1766e46cc9f5"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x49}}}, &(0x7f0000000640)={0x44, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0xc4, 0x4, 0x0, 0x2, 0x10, 0xa6, 0x9, 0x7fff, 0x1, 0x7, 0x1, 0xf}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000400)={0x20, 0x83, 0x2}, &(0x7f0000000440)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000480)={0x20, 0x89, 0x2, 0x1}}) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (rerun: 32) syz_usb_disconnect(r1) r2 = epoll_create1(0x0) r3 = socket$unix(0x1, 0x1, 0x0) close(r3) syz_usb_control_io(r0, &(0x7f0000000880)={0x2c, &(0x7f0000000140)={0x40, 0xf, 0x48, {0x48, 0x2, "5a40768db317c629144208f8a0cddba0b0a87095fdea0efcf5112864c897356683fbf140c7a263e61c9c81a1446c76bf76f5636a20efc766b02febaffe78f9b37fcddeb97361"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}, &(0x7f0000000540)={0x0, 0xf, 0x4d, {0x5, 0xf, 0x4d, 0x6, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x60, 0x98, 0xe, 0x7f, 0x1c}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "758e318c807b8ececfe8e169302e88af"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x5, 0x46a}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "33088ac04aea440fcd98613b5b75a2b1"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0x3, 0x45, 0x10, 0xab}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x90, 0x4, 0xd8, 0x10, "6565fdd2", "8e54dbaa"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x60, 0xff, 0x5, 0x3e, 0x7, 0xa7}}}, &(0x7f0000000dc0)={0x84, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000ac0)={0x20, 0x0, 0x4, {0x10, 0x20}}, &(0x7f0000000b00)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000b40)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000b80)={0x40, 0xb, 0x2, "8c82"}, &(0x7f0000000bc0)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000c00)={0x40, 0x13, 0x6, @local}, &(0x7f0000000c40)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000c80)={0x40, 0x19, 0x2, "e29d"}, &(0x7f0000000cc0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000d00)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000d40)={0x40, 0x1e, 0x1, 0x80}, &(0x7f0000000d80)={0x40, 0x21, 0x1, 0x7}}) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0xa002a008}) (async) syz_usb_connect$uac1(0x2, 0xdb, &(0x7f0000000e80)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc9, 0x3, 0x1, 0x7, 0x10, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x6}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x3, 0x5, 0x3, 0x9, 0x6, 0xde}, @selector_unit={0xb, 0x24, 0x5, 0x4, 0x2, "cddb52e25731"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x101, 0x3, 0x5, 0x4000, 0x1}, @feature_unit={0x13, 0x24, 0x6, 0x2, 0x1, 0x6, [0x7, 0x7, 0xa, 0xa, 0x9, 0xa], 0x7}, @mixer_unit={0x8, 0x24, 0x4, 0x1, 0x2, "3bc171"}, @extension_unit={0xa, 0x24, 0x8, 0x5, 0x100, 0x9, "6b9b92"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7f, 0x7, 0x3, {0x7, 0x25, 0x1, 0xa197c9ff54daec08, 0x7f, 0x5088}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xce, 0x5, 0x2, "be78c30065e046"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xd, 0x2, 0xdb, 0x0, "e7c8", 't'}, @as_header={0x7, 0x24, 0x1, 0x1, 0xbd, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x3, 0xc, 0xe, {0x7, 0x25, 0x1, 0x0, 0x6, 0x6c5e}}}}}}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000000f80)={0xa, 0x6, 0x300, 0x3, 0x6, 0x30, 0xff, 0x1}, 0xf, &(0x7f0000000fc0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x8d, 0x2d, 0x38b4}]}, 0x4, [{0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x861}}, {0x64, &(0x7f0000001040)=@string={0x64, 0x3, "5a91335006ff514985125eba4044feeeebe34f2a0fa34fd679f0eb3b97b953068035e40a55efb900abd2ca9be9abb4b7e87abd812ce5d83a5ede75d9777fa62727e8ac06c87005fb138bf6ec2f623226e39bfcb881d17849f2fee0c1b32c2b663d18"}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x1401}}, {0x52, &(0x7f0000001100)=@string={0x52, 0x3, "4c84191707d016134dfb2a59ee7ac0b422e4520a527a4fe5332ba3248298fcbe8adb8def1d97a0062409a16dbae87cef2dc8f030a975a974fd4263f1bbf741e9bf3bdbc4fe271d4218b72bc4a52e77fc"}}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b07, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) (async, rerun: 64) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000004000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) 588.738458ms ago: executing program 7 (id=2822): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_pidfd_open(r0, 0x0) r5 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0) arch_prctl$ARCH_GET_FS(0x1003, 0x0) wait4(r0, 0x0, 0x8, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc040ff0b, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c5) mount(&(0x7f0000000300)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)='f2fs\x00', 0x0, &(0x7f00000035c0)='quota') 578.772914ms ago: executing program 1 (id=2823): ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x9, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000440)=[@in6={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xff}], 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c0002801400899382e9e3328ebd110002000f116b276c603b61c751ab61979e090001006c3274700000000008000240000000000900010073797a30000004000900020073797a3200000000140000001100010000000000c43ecae3c35b94694b4f3c707e0bc902d05d3b5b89f2423043b8f11b9bcc91035e57c29de2c59dfddd481a439c0ce9"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_usb_connect$uac1(0x3, 0xc8, &(0x7f0000001840)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xff79, 0x3, 0x1, 0x9, 0x72baf62e7b8e93c8, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x72e, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x180, 0x6, 0x3, 0x9}, @selector_unit={0x9, 0x24, 0x5, 0x6, 0x8, "b58a0284"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x2, 0xea58, 0x7, "9285edac8feab51125"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x3, 0x5, 0x6, "941996"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x40, 0x5}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xe, 0x1, 0xe, 0x3}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x1, 0x400, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x8, 0x2, 0xe, {0x7, 0x25, 0x1, 0xc7, 0xff, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xc, 0x1, 0x1, 0x9}, @as_header={0x7, 0x24, 0x1, 0x2, 0x6, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0xc, 0x25, {0x7, 0x25, 0x1, 0x0, 0x4, 0x3}}}}}}}]}}, &(0x7f0000001d40)={0xa, &(0x7f0000001940)={0xa, 0x6, 0x310, 0x5, 0x3, 0x0, 0x8, 0x4}, 0x5, &(0x7f0000001980)=ANY=[@ANYBLOB="050fed0204"]}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0x1, 0x8080000, 0xc, 0x6, 0x4, 0xa, 0x3, 0xe, 0x0, 0x1, 0xc, 0x3}, {0x2, 0x3000, 0xe, 0x13, 0x1, 0x63, 0x3, 0x8, 0x0, 0xfd, 0x1}, {0x2, 0x5001, 0x4, 0xf, 0x5, 0x3, 0xc3, 0x6, 0x3, 0x6, 0x5, 0x3}, {0x0, 0x0, 0x1a, 0xc, 0x7f, 0x6, 0x8, 0x7f, 0xd, 0x2, 0x1, 0x6}, {0x1, 0x8000000, 0x1, 0xd, 0x59, 0x2d, 0x5, 0xc, 0xfc, 0x0, 0xf8, 0xe5}, {0x2, 0x8092000, 0x8, 0xbd, 0x9, 0x7, 0x10, 0x1, 0xbf, 0x18, 0x2, 0x4}, {0x5000, 0x8000000, 0xc, 0x9, 0x0, 0xf, 0x10, 0x3, 0x8, 0x0, 0x80, 0x7}, {0x2, 0xffff, 0x10, 0x4, 0x2, 0x8, 0x0, 0xf9, 0x1, 0x8, 0x0, 0xfe}, {0x1, 0x7f}, {0xffff1000, 0x17}, 0x40019, 0x0, 0xeeee0000, 0x0, 0x4, 0x0, 0xdddd1000, [0x5, 0x4, 0x4000000000000009, 0x7]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1000000000000) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r6, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000480)={'lo\x00', @local}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68fb, 0x80000000, 0x0, 0x5, 0xa, 0x0, 0x10], 0x10000, 0x104202}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f00000014c0)={0xc0, 0x0, 0x8000}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000004c0)={0x10, 0x0, &(0x7f0000000280)=[@acquire, @increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) 462.389237ms ago: executing program 5 (id=2824): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7, 0x0, 0x2}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) ioctl$KVM_SET_SREGS2(r3, 0x4140aecd, &(0x7f0000000300)={{0x3001, 0xdddd1000, 0xd, 0x7, 0x2, 0x7, 0xc, 0x82, 0x0, 0xd, 0x4, 0x5}, {0xeeee0000, 0xeeee0000, 0xa, 0xa, 0x7, 0xf5, 0xf7, 0x2, 0x5, 0x6, 0x4, 0x9}, {0x80a0000, 0xeeee0000, 0x8, 0x8, 0x7, 0x2f, 0x3, 0x7f, 0x7, 0x6, 0x29, 0x80}, {0xeeee8000, 0x3000, 0xc, 0x4, 0x6, 0x2, 0x80, 0x0, 0x5, 0x84, 0x6, 0xe7}, {0x80a0000, 0x4, 0x10, 0xbb, 0x80, 0xad, 0x2, 0xfc, 0x10, 0x7, 0x1, 0xd}, {0x1, 0x8000000, 0xa, 0x9, 0x7f, 0xe8, 0x5, 0x7, 0x2, 0x25, 0x6, 0x2}, {0xeeee0000, 0xdddd0000, 0xb, 0x0, 0x6, 0x7, 0x2, 0xfc, 0xc6, 0x20, 0x2, 0x81}, {0xffff1000, 0x2, 0x4, 0x51, 0x7f, 0xfe, 0x2, 0x0, 0x5, 0x8, 0x5, 0x7}, {0xeeee0000, 0x3}, {0xd000, 0x43}, 0x80000001, 0x0, 0x1, 0x0, 0x9, 0xe900, 0xdddd1000, 0x1, [0x40, 0xd4df, 0x8, 0x6bbb]}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r5, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x1009}, r6, 0x7}}, 0x48) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x82, 0x0, &(0x7f0000000100)) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x10, &(0x7f0000000300)=0x9, 0x4d) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x5) 275.841568ms ago: executing program 5 (id=2825): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x19, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) (async) socket(0x2, 0x1, 0x0) (async) setsockopt$inet_opts(r0, 0x0, 0x19, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x0) (async) socket$inet(0x2, 0x1, 0x0) (async) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async) 129.518944ms ago: executing program 5 (id=2826): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f0000000200)={r2, 0xfffe, 0x20}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2, 0x7ff, 0x7fff, 0x9}, &(0x7f00000000c0)=0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @private=0xa010100}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000100)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c080}, 0x4000891) 7.754987ms ago: executing program 7 (id=2827): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x1fc, 0x4, 0xe000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r3, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xa1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xf}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000340)={r4, 0x1, 0x6, @local}, 0x10) ioctl$KVM_CAP_DISABLE_QUIRKS(r2, 0x4068aea3, &(0x7f0000000380)={0x74, 0x0, 0x9}) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x100, 0x0) write$rfkill(r6, &(0x7f0000000440)={0x2, 0x7, 0x1}, 0x8) fcntl$setflags(r2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x24080, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xf8, r8, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r6, {0x9, 0x8}}, './file0\x00'}) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000700)={{0x58000, 0xf000, 0x4, 0xf, 0x8a, 0x40, 0x3, 0x1, 0x54, 0x7, 0xa5, 0xfb}, {0x100000, 0xb001, 0xd, 0x8, 0x6, 0x7, 0x4, 0x80, 0xa3, 0x0, 0x2}, {0x58000, 0xd000, 0x0, 0x6, 0xc, 0x6, 0x1, 0x4, 0x4, 0x8, 0x1, 0x8b}, {0xf000, 0xb000, 0x4, 0x7, 0xfd, 0x9, 0x8, 0x7, 0x7, 0x3, 0x8, 0xff}, {0xa000, 0xffffffff, 0x3, 0x21, 0x1, 0x0, 0x80, 0x7, 0x3, 0xbd, 0xf7, 0x5}, {0x3000, 0xe6eb8000, 0xa, 0x6, 0x8, 0x9, 0x6, 0x2, 0x40, 0xe9, 0x4, 0x6}, {0x4, 0x9000, 0x0, 0xff, 0x5, 0xae, 0x81, 0x0, 0xa, 0xe, 0x2, 0x7}, {0xdddd1000, 0xeeee0000, 0xe, 0x5, 0x3, 0x4, 0x3, 0x0, 0x7d, 0x2, 0xbb, 0x2}, {0x40000, 0x18}, {0x26000, 0x401}, 0x2000000a, 0x0, 0x4000, 0x11, 0x6, 0x2400, 0xfec00000, [0x2, 0x56a, 0x80000001, 0xade1]}) setsockopt$sock_int(r9, 0x1, 0x21, &(0x7f0000000840)=0x4, 0x4) ioctl$PPPIOCGCHAN(r9, 0x80047437, &(0x7f0000000880)) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r9, 0x84, 0x12, &(0x7f00000008c0), &(0x7f0000000900)=0x4) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl0\x00', r5, 0x4, 0xfd, 0x3, 0x6, 0x2, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x7, 0x2, 0x800000}}) sendmsg$ETHTOOL_MSG_EEE_GET(r9, &(0x7f0000000c80)={&(0x7f0000000940), 0xc, &(0x7f0000000c40)={&(0x7f0000000a80)={0x184, r10, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x40000}, 0x40000d1) ioctl$KVM_SET_TSC_KHZ_cpu(r9, 0xaea2, 0xffffffffffffff81) r12 = syz_open_dev$mouse(&(0x7f0000000cc0), 0x6, 0x24001) sendmsg$TIPC_CMD_ENABLE_BEARER(r12, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x38, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x1c, 0x17, {0x18, 0x8000, @l2={'eth', 0x3a, 'macvlan0\x00'}}}}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x24000000) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000e80)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x8, @mcast1, 0x8000}, {0xa, 0x4e22, 0x7, @private0, 0x80}}}, 0x48) 0s ago: executing program 5 (id=2828): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/fscaps', 0x8aa83, 0x83) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x300) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x200000000007, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0x9, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x4, 0x9]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r3 = socket(0x10, 0x3, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x484000, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000040)={0xa, {"a2e3ad21ed0d52f91b38090987f70e06d038e7ff7fc6e5539b3244078b089b3407326d090890e0878f0e1ac6e7049b336d959b679a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec97a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f11f46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f1b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83cd06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803335ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c134b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3765b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b33c5260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000af7000/0x1000)=nil, 0x1000, 0x15) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r1, 0x3ba0, &(0x7f0000001140)={0x48, 0xb, r1, 0x0, r6}) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sched\x00') exit(0x1ff) write$uinput_user_dev(r7, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000440)=ANY=[@ANYBLOB="b80400001600010a00000000000000000a000000a404ca809d0401"], 0x4b8}, 0x1, 0x0, 0x0, 0x8}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r9 = syz_open_dev$vcsn(&(0x7f0000001f80), 0x1, 0x0) read$char_usb(r9, 0x0, 0x60ff) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_PIT(r11, 0x4048aec9, &(0x7f0000000180)={[{0x5, 0x10, 0x0, 0x0, 0x4, 0x0, 0xfe, 0x5, 0x4, 0x8, 0x0, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, {0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x4, 0x0, 0x4d, 0x0, 0x0, 0xff, 0x800}], 0xfffffffc}) ioctl$FS_IOC_RESVSP(r8, 0x40305829, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f00000010c0)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) kernel console output (not intermixed with test programs): w high-speed USB device number 109 using dummy_hcd [ 557.274548][T15399] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 557.283468][T15399] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 557.292230][T15399] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 557.301648][T15399] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 557.312149][T15399] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 557.326865][T15399] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 557.340688][T15399] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.353221][T15399] usb 8-1: Product: syz [ 557.357969][T15399] usb 8-1: Manufacturer: syz [ 557.362619][T15399] usb 8-1: SerialNumber: syz [ 557.378172][ T5891] usb 2-1: device descriptor read/64, error -71 [ 557.634807][ T5891] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 557.784436][ T5891] usb 2-1: device descriptor read/64, error -71 [ 557.812308][T15399] usb 8-1: 0:2 : does not exist [ 557.854722][T15399] usb 8-1: USB disconnect, device number 77 [ 557.890836][T10743] udevd[10743]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 557.909197][ T5891] usb usb2-port1: attempt power cycle [ 558.277354][ T5891] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 558.298191][ T5891] usb 2-1: device descriptor read/8, error -71 [ 558.379079][T15645] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2372'. [ 558.391980][T15645] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2372'. [ 558.575817][ T5891] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 558.598002][ T5891] usb 2-1: device descriptor read/8, error -71 [ 558.661287][ T5937] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 558.693468][ T24] usb 8-1: new high-speed USB device number 78 using dummy_hcd [ 558.728559][ T5891] usb usb2-port1: unable to enumerate USB device [ 558.823490][ T5937] usb 6-1: config 0 has an invalid descriptor of length 17, skipping remainder of the config [ 558.835253][ T5937] usb 6-1: config 0 has an invalid descriptor of length 17, skipping remainder of the config [ 558.848022][ T5937] usb 6-1: config 0 has an invalid descriptor of length 17, skipping remainder of the config [ 558.858349][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 558.863561][ T5937] usb 6-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 558.872929][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.884349][ T24] usb 8-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 558.895232][ T5937] usb 6-1: config 0 descriptor?? [ 558.900608][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.909635][ T24] usb 8-1: Product: syz [ 558.919772][ T24] usb 8-1: Manufacturer: syz [ 558.924502][ T24] usb 8-1: SerialNumber: syz [ 558.939930][ T24] usb 8-1: config 0 descriptor?? [ 558.952291][ T24] gspca_main: se401-2.14.0 probing 047d:5003 [ 559.135866][T15645] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2372'. [ 559.168020][ T5937] usb 6-1: USB disconnect, device number 37 [ 559.336829][T15673] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2375'. [ 559.599178][ T24] input: se401 as /devices/platform/dummy_hcd.7/usb8/8-1/input/input39 [ 559.677902][ T5937] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 559.813508][T15651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.823343][T15651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.836491][ T24] usb 8-1: USB disconnect, device number 78 [ 559.861166][ T5937] usb 6-1: config 0 has an invalid interface number: 237 but max is 0 [ 559.869531][ T5937] usb 6-1: config 0 has no interface number 0 [ 559.889490][ T5937] usb 6-1: New USB device found, idVendor=041e, idProduct=401d, bcdDevice=57.70 [ 559.899432][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.907994][ T5937] usb 6-1: Product: syz [ 559.912294][ T5937] usb 6-1: Manufacturer: syz [ 559.917324][ T5937] usb 6-1: SerialNumber: syz [ 559.932650][ T5937] usb 6-1: config 0 descriptor?? [ 559.942882][ T5937] gspca_main: spca505-2.14.0 probing 041e:401d [ 560.232014][T15701] bpf: Bad value for 'uid' [ 560.453823][T15712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.584124][ T5937] gspca_spca505: reg write: error -71 [ 560.596438][ T5937] spca505 6-1:0.237: probe with driver spca505 failed with error -5 [ 560.617111][ T5937] usb 6-1: USB disconnect, device number 38 [ 560.746635][ T24] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 560.907026][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 560.915097][ T24] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 560.926546][ T24] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 560.940418][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 560.947086][ T24] usb 2-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 560.956217][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.967340][ T24] usb 2-1: config 0 descriptor?? [ 561.623527][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 561.634395][T15399] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 561.711981][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 561.720324][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 561.731314][ T24] usb 2-1: USB disconnect, device number 113 [ 561.795342][T15399] usb 6-1: Using ep0 maxpacket: 32 [ 561.806085][T15399] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 561.815226][T15399] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.823427][T15399] usb 6-1: Product: syz [ 561.827667][T15399] usb 6-1: Manufacturer: syz [ 561.832288][T15399] usb 6-1: SerialNumber: syz [ 561.839598][T15399] usb 6-1: config 0 descriptor?? [ 561.853348][T15399] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 562.470189][T15778] block device autoloading is deprecated and will be removed. [ 562.500757][T15745] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 562.511880][T15399] gspca_stk1135: reg_w 0x3 err -71 [ 562.518103][T15399] gspca_stk1135: serial bus timeout: status=0x00 [ 562.527401][T15399] gspca_stk1135: Sensor write failed [ 562.536739][T15399] gspca_stk1135: serial bus timeout: status=0x00 [ 562.544218][T15399] gspca_stk1135: Sensor write failed [ 562.549747][T15399] gspca_stk1135: serial bus timeout: status=0x00 [ 562.556263][T15399] gspca_stk1135: Sensor read failed [ 562.575254][T15399] gspca_stk1135: serial bus timeout: status=0x00 [ 562.596968][T15399] gspca_stk1135: Sensor read failed [ 562.608022][T15399] gspca_stk1135: Detected sensor type unknown (0x0) [ 562.616261][T15399] gspca_stk1135: serial bus timeout: status=0x00 [ 562.630763][T15399] gspca_stk1135: Sensor read failed [ 562.636040][T15399] gspca_stk1135: serial bus timeout: status=0x00 [ 562.643567][T15399] gspca_stk1135: Sensor read failed [ 562.648871][T15399] gspca_stk1135: serial bus timeout: status=0x00 [ 562.658358][T15399] gspca_stk1135: Sensor write failed [ 562.666242][T15399] gspca_stk1135: serial bus timeout: status=0x00 [ 562.672691][T15399] gspca_stk1135: Sensor write failed [ 562.678098][T15399] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71 [ 562.705241][T15399] usb 6-1: USB disconnect, device number 39 [ 562.853326][ T5937] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 563.035099][ T5937] usb 2-1: Using ep0 maxpacket: 8 [ 563.042231][ T5937] usb 2-1: unable to get BOS descriptor or descriptor too short [ 563.051525][ T5937] usb 2-1: config 1 has an invalid interface number: 4 but max is 2 [ 563.067139][ T5937] usb 2-1: config 1 has an invalid interface descriptor of length 6, skipping [ 563.076074][ T5937] usb 2-1: config 1 has an invalid descriptor of length 168, skipping remainder of the config [ 563.086532][ T5937] usb 2-1: config 1 has no interface number 1 [ 563.092917][ T5937] usb 2-1: config 1 interface 4 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 563.106896][ T5937] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 86, changing to 7 [ 563.123692][ T5937] usb 2-1: config 1 interface 4 has no altsetting 0 [ 563.133882][ T5937] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 563.144016][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.152070][ T5937] usb 2-1: Product: syz [ 563.157257][ T5937] usb 2-1: Manufacturer: syz [ 563.161912][ T5937] usb 2-1: SerialNumber: syz [ 563.536770][ T5937] usb 2-1: 2:1 : invalid UAC_AS_GENERAL desc [ 563.584975][ T5937] usb 2-1: USB disconnect, device number 114 [ 563.628160][T10743] udevd[10743]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 563.719534][ T889] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 563.882094][ T889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 563.892580][ T889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 563.905832][ T889] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 563.914998][ T889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.923081][ T889] usb 6-1: Product: syz [ 563.927276][ T889] usb 6-1: Manufacturer: syz [ 563.931904][ T889] usb 6-1: SerialNumber: syz [ 563.939775][ T889] usb 6-1: config 0 descriptor?? [ 563.950988][ T889] usb 6-1: 0:0 : invalid sync pipe. is_playback 1, ep 0b, bSynchAddress 0d [ 564.479062][ T889] usb 6-1: USB disconnect, device number 40 [ 564.627436][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 564.641184][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 564.652880][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 564.663661][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 564.673428][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 564.874087][T15904] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 565.259420][ T889] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 565.340504][ T138] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.381538][T15883] chnl_net:caif_netlink_parms(): no params data found [ 565.433920][ T889] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 565.449562][ T889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.458521][ T889] usb 2-1: Product: syz [ 565.464528][ T889] usb 2-1: Manufacturer: syz [ 565.469297][ T889] usb 2-1: SerialNumber: syz [ 565.497866][ T138] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.510631][ T889] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 565.534479][ T5917] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 565.632867][ T138] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.754752][ T138] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.776998][T15883] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.784488][T15883] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.791816][T15883] bridge_slave_0: entered allmulticast mode [ 565.800233][T15883] bridge_slave_0: entered promiscuous mode [ 565.809499][T15883] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.822451][ T5891] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 565.830645][T15883] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.838505][T15883] bridge_slave_1: entered allmulticast mode [ 565.846888][T15883] bridge_slave_1: entered promiscuous mode [ 565.985068][T15883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.997720][ T5891] usb 6-1: Using ep0 maxpacket: 16 [ 566.014887][T15923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.028176][ T5891] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 566.028488][T15883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.052792][ T5891] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 566.064032][T15923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.073051][ T5891] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 566.087800][T15923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.107976][T15923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.120101][ T5891] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 566.131221][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.148067][ T5891] usb 6-1: Product: syz [ 566.172891][ T5891] usb 6-1: Manufacturer: syz [ 566.179701][ T5891] usb 6-1: SerialNumber: syz [ 566.219598][T15883] team0: Port device team_slave_0 added [ 566.257462][T15883] team0: Port device team_slave_1 added [ 566.317425][ T138] bridge_slave_1: left allmulticast mode [ 566.323804][ T138] bridge_slave_1: left promiscuous mode [ 566.331992][ T138] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.342384][T15923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.356525][ T138] bridge_slave_0: left allmulticast mode [ 566.359351][T15923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.366907][ T138] bridge_slave_0: left promiscuous mode [ 566.376421][ T138] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.429925][ T5891] usb 6-1: 0:2 : does not exist [ 566.453362][ T5937] usb 2-1: USB disconnect, device number 115 [ 566.485292][ T5891] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1) [ 566.612532][ T5891] usb 6-1: USB disconnect, device number 41 [ 566.674250][ T5917] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 566.689826][ T5917] ath9k_htc: Failed to initialize the device [ 566.698201][ T5937] usb 2-1: ath9k_htc: USB layer deinitialized [ 566.929712][ T5149] Bluetooth: hci1: command tx timeout [ 567.017518][ T5891] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 567.155937][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 567.163536][ T138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.176175][ T5891] usb 6-1: device descriptor read/64, error -71 [ 567.183242][ T138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.193874][ T138] bond0 (unregistering): Released all slaves [ 567.231716][T15883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.252461][T15883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.299457][T15883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.327315][T15883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.334727][T15883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.361942][T15883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.407841][ T30] audit: type=1326 audit(1783250898.945:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16232 comm="syz.1.2419" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa02fd8f749 code=0x0 [ 567.440982][ T5891] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 567.566070][T15883] hsr_slave_0: entered promiscuous mode [ 567.575315][T15883] hsr_slave_1: entered promiscuous mode [ 567.584873][ T5891] usb 6-1: device descriptor read/64, error -71 [ 567.593857][T15883] debugfs: 'hsr0' already exists in 'hsr' [ 567.599848][T15883] Cannot create hsr debugfs directory [ 567.640426][ T138] hsr_slave_0: left promiscuous mode [ 567.651436][ T138] hsr_slave_1: left promiscuous mode [ 567.658264][ T138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 567.666876][ T138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 567.675415][ T138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 567.683620][ T138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 567.714317][ T138] veth1_macvtap: left promiscuous mode [ 567.722542][ T5891] usb usb6-port1: attempt power cycle [ 567.728549][ T138] veth0_macvtap: left promiscuous mode [ 567.735576][ T138] veth1_vlan: left promiscuous mode [ 567.742525][ T138] veth0_vlan: left promiscuous mode [ 568.104643][ T5891] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 568.151514][ T5891] usb 6-1: device descriptor read/8, error -71 [ 568.414101][ T5891] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 568.444891][ T5891] usb 6-1: device descriptor read/8, error -71 [ 568.571004][ T5891] usb usb6-port1: unable to enumerate USB device [ 568.626352][ T138] team0 (unregistering): Port device team_slave_1 removed [ 568.693967][ T138] team0 (unregistering): Port device team_slave_0 removed [ 569.162663][ T5149] Bluetooth: hci1: command tx timeout [ 569.306835][T16294] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2424'. [ 569.319704][T16295] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2424'. [ 569.992379][T16391] bpf: Bad value for 'uid' [ 570.004942][T16397] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2432'. [ 570.025081][T15883] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 570.093800][T15883] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 570.143159][T15883] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 570.213138][T15883] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 570.236184][T16419] fuse: Bad value for 'fd' [ 570.241926][T16420] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2434'. [ 570.369132][T15883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.400699][T15883] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.404186][ T5917] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 570.423793][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.431135][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.458946][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.466268][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.478306][ T889] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 570.595902][ T5917] usb 2-1: Using ep0 maxpacket: 16 [ 570.605019][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.631061][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.652420][ T5917] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 570.683960][ T889] usb 6-1: unable to get BOS descriptor or descriptor too short [ 570.706796][ T5917] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 570.718287][ T889] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 570.734780][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.744551][ T889] usb 6-1: can't read configurations, error -61 [ 570.752764][ T5917] usb 2-1: config 0 descriptor?? [ 570.916781][ T889] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 570.939190][T15883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.106427][ T889] usb 6-1: unable to get BOS descriptor or descriptor too short [ 571.137803][ T889] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 571.164276][ T889] usb 6-1: can't read configurations, error -61 [ 571.186834][ T889] usb usb6-port1: attempt power cycle [ 571.250270][ T5917] input: HID 0955:7214 Haptics as /devices/virtual/input/input41 [ 571.379129][ T5149] Bluetooth: hci1: command tx timeout [ 571.414803][ T5917] shield 0003:0955:7214.0022: Registered Thunderstrike controller [ 571.429962][T16397] random: crng reseeded on system resumption [ 571.441492][ T5917] shield 0003:0955:7214.0022: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 571.539645][ T24] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 571.567785][ T5917] usb 2-1: USB disconnect, device number 116 [ 571.579939][ T889] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 571.613459][ T24] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 571.645787][ T889] usb 6-1: unable to get BOS descriptor or descriptor too short [ 571.656237][ T889] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 571.668951][ T24] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 571.682940][ T889] usb 6-1: can't read configurations, error -61 [ 571.702882][ T24] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 571.838860][ T889] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 571.867445][T15883] veth0_vlan: entered promiscuous mode [ 571.876839][ T889] usb 6-1: unable to get BOS descriptor or descriptor too short [ 571.896676][ T889] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 571.905656][ T889] usb 6-1: can't read configurations, error -61 [ 571.912963][T15883] veth1_vlan: entered promiscuous mode [ 571.919473][ T889] usb usb6-port1: unable to enumerate USB device [ 571.985497][T15883] veth0_macvtap: entered promiscuous mode [ 572.003036][T15883] veth1_macvtap: entered promiscuous mode [ 572.030132][T15883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.063397][T15883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.099897][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.128530][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.148750][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.170908][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.374161][ T8087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.389295][ T8087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.475982][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.484492][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.691683][ T795] usb 2-1: new full-speed USB device number 117 using dummy_hcd [ 572.858192][T16527] netlink: 'syz.8.2439': attribute type 21 has an invalid length. [ 572.866975][T16527] netlink: 128 bytes leftover after parsing attributes in process `syz.8.2439'. [ 572.876288][T16527] netlink: 'syz.8.2439': attribute type 5 has an invalid length. [ 572.884343][T16527] netlink: 'syz.8.2439': attribute type 6 has an invalid length. [ 572.892129][T16527] netlink: 3 bytes leftover after parsing attributes in process `syz.8.2439'. [ 572.895247][ T795] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 572.936194][ T795] usb 2-1: config 1 has no interface number 0 [ 572.950837][ T795] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 572.979862][ T795] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 572.995042][ T795] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 573.007243][ T795] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 573.020101][ T795] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 172, setting to 64 [ 573.053636][ T795] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 573.067223][ T795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.075295][ T795] usb 2-1: Product: syz [ 573.084460][ T795] usb 2-1: Manufacturer: syz [ 573.092254][ T795] usb 2-1: SerialNumber: syz [ 573.107535][T16505] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 573.343665][T16505] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 573.426917][ T795] cdc_ncm 2-1:1.1: bind() failure [ 573.468562][ T795] usb 2-1: USB disconnect, device number 117 [ 573.556203][T16567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2444'. [ 573.601140][ T5149] Bluetooth: hci1: command tx timeout [ 574.018416][ T795] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 574.217172][ T795] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 574.226672][ T795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.235174][ T795] usb 6-1: Product: syz [ 574.239483][ T795] usb 6-1: Manufacturer: syz [ 574.244306][ T795] usb 6-1: SerialNumber: syz [ 574.254188][ T795] usb 6-1: config 0 descriptor?? [ 574.267070][ T795] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 050 [ 574.680731][T15399] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 574.873173][T15399] usb 9-1: Using ep0 maxpacket: 16 [ 574.880515][T15399] usb 9-1: config 5 has an invalid interface number: 105 but max is 0 [ 574.889014][T15399] usb 9-1: config 5 has no interface number 0 [ 574.896250][T15399] usb 9-1: config 5 interface 105 altsetting 4 endpoint 0x8 has an invalid bInterval 154, changing to 11 [ 574.907633][T15399] usb 9-1: config 5 interface 105 has no altsetting 0 [ 574.914830][T15399] usb 9-1: New USB device found, idVendor=046d, idProduct=c291, bcdDevice=60.eb [ 574.924390][T15399] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.037613][T16609] Attempt to restore checkpoint with obsolete wellknown handles [ 575.170236][T16599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.183936][T16599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.193243][T15399] usb 9-1: string descriptor 0 read error: -71 [ 575.216500][T15399] usb 9-1: USB disconnect, device number 2 [ 575.834307][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 575.847965][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 576.466967][ T5832] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 576.521225][ T795] (null): failure setting delay to 10us [ 576.526979][ T795] i2c-tiny-usb 6-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 576.619260][T16661] netlink: 14568 bytes leftover after parsing attributes in process `syz.8.2464'. [ 576.637590][ T5832] usb 2-1: Using ep0 maxpacket: 8 [ 576.645340][ T5832] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 576.655222][ T5832] usb 2-1: config 0 has no interface number 0 [ 576.665897][ T5832] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 576.694175][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.722367][ T5832] usb 2-1: Product: syz [ 576.732376][ T5832] usb 2-1: Manufacturer: syz [ 576.745436][ T5832] usb 2-1: SerialNumber: syz [ 576.777137][ T5832] usb 2-1: config 0 descriptor?? [ 576.874787][ T795] usb 6-1: USB disconnect, device number 50 [ 577.011914][ T5937] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 577.177025][ T5937] usb 9-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 577.189792][ T5937] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.215111][ T5937] usb 9-1: Product: syz [ 577.219356][ T5937] usb 9-1: Manufacturer: syz [ 577.224002][ T5937] usb 9-1: SerialNumber: syz [ 577.243709][ T5937] usb 9-1: config 0 descriptor?? [ 577.268602][ T795] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 577.445499][ T795] usb 6-1: unable to get BOS descriptor or descriptor too short [ 577.455302][ T795] usb 6-1: not running at top speed; connect to a high speed hub [ 577.466863][ T795] usb 6-1: config 8 has an invalid interface number: 197 but max is 0 [ 577.477086][ T795] usb 6-1: config 8 has no interface number 0 [ 577.483829][ T795] usb 6-1: config 8 interface 197 has no altsetting 0 [ 577.496014][ T795] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10ae, bcdDevice=74.43 [ 577.505299][ T5937] int51x1 9-1:0.0: probe with driver int51x1 failed with error -22 [ 577.506543][ T795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.522271][ T795] usb 6-1: Product: syz [ 577.526974][ T795] usb 6-1: Manufacturer: syz [ 577.531728][ T795] usb 6-1: SerialNumber: syz [ 577.709768][ T5937] usb 9-1: USB disconnect, device number 3 [ 577.805545][ T795] usb 6-1: USB disconnect, device number 51 [ 578.616131][ T795] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 578.690864][ T5937] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 578.812061][ T795] usb 9-1: config 5 has an invalid interface number: 79 but max is 1 [ 578.820527][ T795] usb 9-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 578.833716][ T795] usb 9-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 578.842853][ T795] usb 9-1: config 5 has no interface number 0 [ 578.849312][ T795] usb 9-1: config 5 interface 79 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 578.865335][ T795] usb 9-1: config 5 interface 79 has no altsetting 0 [ 578.873990][ T5937] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.890320][ T795] usb 9-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice=4a.07 [ 578.899706][ T5937] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 578.907876][ T795] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.916841][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.917050][ T5937] usb 6-1: Product: syz [ 578.917069][ T5937] usb 6-1: Manufacturer: syz [ 578.917086][ T5937] usb 6-1: SerialNumber: syz [ 578.929250][ T5937] usb 6-1: config 0 descriptor?? [ 578.955340][ T795] usb 9-1: Product: syz [ 578.959729][ T795] usb 9-1: Manufacturer: syz [ 578.964697][ T795] usb 9-1: SerialNumber: syz [ 578.972066][ T5937] usb 6-1: ucan: probing device on interface #0 [ 578.978694][ T5937] usb 6-1: ucan: invalid EP count (0) [ 578.984609][ T5937] usb 6-1: ucan: probe failed; try to update the device firmware [ 579.185539][ T9] usb 6-1: USB disconnect, device number 52 [ 579.250550][ T795] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:5.79/input/input42 [ 579.267491][ T5184] bcm5974 9-1:5.79: could not read from device [ 579.287731][ T5184] bcm5974 9-1:5.79: could not read from device [ 579.295353][ T795] usb 9-1: USB disconnect, device number 4 [ 579.519627][ T5832] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 579.546363][ T5832] uvcvideo 2-1:0.31: Entity type for entity Output 6 was not initialized! [ 579.569356][ T5832] usb 2-1: USB disconnect, device number 118 [ 580.054209][T16813] fuse: Bad value for 'fd' [ 580.093553][ T5891] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 580.284409][ T5891] usb 2-1: Using ep0 maxpacket: 8 [ 580.289671][ T5832] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 580.301726][ T5891] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 580.312731][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.320969][ T5891] usb 2-1: Product: syz [ 580.325261][ T5891] usb 2-1: Manufacturer: syz [ 580.330180][ T5891] usb 2-1: SerialNumber: syz [ 580.339347][ T5891] usb 2-1: config 0 descriptor?? [ 580.401873][ T5869] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 580.458665][ T5832] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 580.469158][ T5832] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 580.480048][ T5832] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 580.489428][ T5832] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 580.497565][ T5832] usb 9-1: SerialNumber: syz [ 580.572766][ T5869] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 580.583183][ T5891] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 580.586171][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.598615][ T5869] usb 6-1: Product: syz [ 580.602820][ T5869] usb 6-1: Manufacturer: syz [ 580.618399][ T5869] usb 6-1: SerialNumber: syz [ 580.638844][ T5869] usb 6-1: config 0 descriptor?? [ 580.784067][ T5832] usb 9-1: 0:2 : does not exist [ 580.849576][ T5832] usb 9-1: USB disconnect, device number 5 [ 580.873665][T16815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.906405][T16815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.927588][ T5869] usb-storage 6-1:0.0: USB Mass Storage device detected [ 580.961188][T13439] udevd[13439]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 581.027327][ T5891] gspca_sunplus: reg_w_riv err -71 [ 581.032169][ T5869] usb 6-1: USB disconnect, device number 53 [ 581.039226][ T5891] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 581.064241][ T5891] usb 2-1: USB disconnect, device number 119 [ 581.403581][T16872] overlayfs: failed to clone upperpath [ 581.413406][T16872] fuse: Bad value for 'fd' [ 581.461117][T16874] netlink: 763 bytes leftover after parsing attributes in process `syz.7.2486'. [ 581.541487][T16876] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2487'. [ 581.649259][T16878] netlink: 'syz.7.2488': attribute type 9 has an invalid length. [ 581.663689][T16878] netlink: 'syz.7.2488': attribute type 11 has an invalid length. [ 581.675373][T16878] netlink: 'syz.7.2488': attribute type 12 has an invalid length. [ 581.683265][T16878] netlink: 210020 bytes leftover after parsing attributes in process `syz.7.2488'. [ 581.705183][T16878] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2488'. [ 582.145028][ T5937] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 582.167679][ T5832] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 582.307439][ T5937] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 582.317624][ T5937] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 582.335747][ T5937] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 582.345288][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.356102][ T5832] usb 2-1: Using ep0 maxpacket: 16 [ 582.374552][ T5832] usb 2-1: config 1 interface 0 altsetting 196 bulk endpoint 0x1 has invalid maxpacket 16 [ 582.392558][ T5832] usb 2-1: config 1 interface 0 altsetting 196 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 582.406982][ T5832] usb 2-1: config 1 interface 0 has no altsetting 0 [ 582.417683][ T5832] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 582.427279][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.436508][ T5832] usb 2-1: Product: 蚜ᵃ䕷茂晀⯆奓됛⏌⮇皌찁⍎곧땽蓰ଢ଼軲᫸힊㊏⌊惱뼇첩擘㔈蛻牥䡧䬃逺䡫ዙ韗㣳ⅰ﷐ᵳ꼬Ḻ潀䢴ꔌో画觛頸﷬ꃃ㧧ﮞ廣䘴탟ꖐ뵡倦䉇紻筠䋮竂땈ꎦ䲭⇀쉔ᱠ鮨쇈朂谤ᆊ [ 582.462234][ T5832] usb 2-1: Manufacturer: о [ 582.467415][ T5832] usb 2-1: SerialNumber: ࠝ [ 582.477279][T16900] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 582.484606][T16900] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 582.576766][ T5937] usb 6-1: GET_CAPABILITIES returned 0 [ 582.582552][ T5937] usbtmc 6-1:16.0: can't read capabilities [ 582.766626][ T5832] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 120 if 0 alt 196 proto 1 vid 0x0525 pid 0xA4A8 [ 582.785862][ T5832] usb 2-1: USB disconnect, device number 120 [ 582.808888][ T5832] usblp1: removed [ 582.870110][T16895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.884980][T16895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.054285][ T9] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 583.080990][ T5832] usb 6-1: USB disconnect, device number 54 [ 583.249093][ T9] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 583.257996][ T9] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 583.272575][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 583.294469][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 583.306642][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 583.323381][ T9] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 583.332745][ T9] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 583.340786][ T9] usb 9-1: Product: syz [ 583.347134][ T9] usb 9-1: Manufacturer: syz [ 583.365456][ T9] cdc_wdm 9-1:1.0: skipping garbage [ 583.370791][ T9] cdc_wdm 9-1:1.0: skipping garbage [ 583.381475][ T9] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 583.387642][ T9] cdc_wdm 9-1:1.0: Unknown control protocol [ 583.407064][ T5891] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 583.584470][ T5832] usb 9-1: USB disconnect, device number 6 [ 583.590877][ T5891] usb 2-1: Using ep0 maxpacket: 16 [ 583.604895][ T5891] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 583.628475][ T5891] usb 2-1: can't read configurations, error -61 [ 583.771756][ T5891] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 583.791854][ T9] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 583.865273][T17017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 583.942547][ T5891] usb 2-1: Using ep0 maxpacket: 16 [ 583.950301][ T5891] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 583.958571][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 583.965808][ T5891] usb 2-1: can't read configurations, error -61 [ 583.975443][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 583.985941][ T5891] usb usb2-port1: attempt power cycle [ 583.992522][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 584.002868][ T9] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 584.013128][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.040865][ T9] hub 6-1:1.0: bad descriptor, ignoring hub [ 584.046910][ T9] hub 6-1:1.0: probe with driver hub failed with error -5 [ 584.055504][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 584.062537][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 584.067919][ T9] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 584.137721][T17032] futex_wake_op: syz.7.2512 tries to shift op by -1; fix this program [ 584.305106][ T5937] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 584.348914][ T5891] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 584.369636][ T5876] usb 6-1: USB disconnect, device number 55 [ 584.370492][ T5891] usb 2-1: Using ep0 maxpacket: 16 [ 584.386743][ T5891] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 584.399104][ T5891] usb 2-1: can't read configurations, error -61 [ 584.479639][ T5937] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 584.488648][ T5937] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 584.499006][ T5937] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 584.508331][ T5937] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 584.519560][ T5937] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 584.533616][ T5937] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 584.540766][ T5891] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 584.543388][ T5937] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 584.561490][ T5937] usb 9-1: Product: syz [ 584.566174][ T5937] usb 9-1: Manufacturer: syz [ 584.577242][ T5937] cdc_wdm 9-1:1.0: skipping garbage [ 584.583829][ T5891] usb 2-1: Using ep0 maxpacket: 16 [ 584.589210][ T5937] cdc_wdm 9-1:1.0: skipping garbage [ 584.599721][ T5891] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 584.607790][ T5891] usb 2-1: can't read configurations, error -61 [ 584.610287][ T5937] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 584.620449][ T5891] usb usb2-port1: unable to enumerate USB device [ 584.621887][ T5937] cdc_wdm 9-1:1.0: Unknown control protocol [ 585.085807][ T5891] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 585.174012][ C0] cdc_wdm 9-1:1.0: Stall on int endpoint [ 585.179799][ C0] cdc_wdm 9-1:1.0: Cannot schedule work [ 585.187197][ C0] cdc_wdm 9-1:1.0: Stall on int endpoint [ 585.193354][ C0] cdc_wdm 9-1:1.0: Stall on int endpoint [ 585.199071][ C0] cdc_wdm 9-1:1.0: Cannot schedule work [ 585.204919][ C0] cdc_wdm 9-1:1.0: Stall on int endpoint [ 585.211087][ C0] cdc_wdm 9-1:1.0: Stall on int endpoint [ 585.217006][ C0] cdc_wdm 9-1:1.0: Stall on int endpoint [ 585.224244][ C0] cdc_wdm 9-1:1.0: Stall on int endpoint [ 585.230229][ C0] cdc_wdm 9-1:1.0: Stall on int endpoint [ 585.236179][ C0] cdc_wdm 9-1:1.0: Stall on int endpoint [ 585.243299][ C0] cdc_wdm 9-1:1.0: Stall on int endpoint [ 585.249222][ C0] cdc_wdm 9-1:1.0: Stall on int endpoint [ 585.255197][ C0] cdc_wdm 9-1:1.0: Stall on int endpoint [ 585.261685][ C0] cdc_wdm 9-1:1.0: Stall on int endpoint [ 585.267415][ C0] cdc_wdm 9-1:1.0: Cannot schedule work [ 585.273260][ C0] cdc_wdm 9-1:1.0: Stall on int endpoint [ 585.279199][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -EPIPE [ 585.287197][ C0] cdc_wdm 9-1:1.0: Stall on int endpoint [ 585.293047][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 585.303431][ T5937] usb 9-1: USB disconnect, device number 7 [ 585.324623][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.335510][ T5891] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 585.345317][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.358541][ T5891] usb 6-1: config 0 descriptor?? [ 585.805281][ T5891] usbhid 6-1:0.0: can't add hid device: -32 [ 585.827151][ T5891] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 585.853415][ T5891] usb 6-1: USB disconnect, device number 56 [ 586.123798][T17115] batadv_slave_0: entered promiscuous mode [ 586.239990][T17107] affs: No valid root block on device nullb0 [ 586.321548][T17106] batadv_slave_0: left promiscuous mode [ 586.514968][T17129] Bluetooth: MGMT ver 1.23 [ 586.525867][T17129] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2524'. [ 586.797131][ T5905] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 586.949951][ T889] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 586.967846][ T5905] usb 2-1: Using ep0 maxpacket: 8 [ 586.978372][ T5905] usb 2-1: unable to get BOS descriptor or descriptor too short [ 586.992094][ T5905] usb 2-1: config 248 has an invalid interface number: 242 but max is 0 [ 587.001058][ T5905] usb 2-1: config 248 has no interface number 0 [ 587.007490][ T5905] usb 2-1: config 248 interface 242 has no altsetting 0 [ 587.019126][ T5905] usb 2-1: New USB device found, idVendor=061d, idProduct=c1a0, bcdDevice=4c.13 [ 587.028937][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.037445][ T5905] usb 2-1: Product: syz [ 587.042164][ T5905] usb 2-1: Manufacturer: syz [ 587.047287][ T5905] usb 2-1: SerialNumber: syz [ 587.138937][ T889] usb 9-1: Using ep0 maxpacket: 16 [ 587.147017][ T889] usb 9-1: unable to get BOS descriptor or descriptor too short [ 587.161993][ T889] usb 9-1: config 4 has an invalid interface number: 189 but max is 0 [ 587.170404][ T889] usb 9-1: config 4 has no interface number 0 [ 587.177125][ T889] usb 9-1: config 4 interface 189 has no altsetting 0 [ 587.187660][ T889] usb 9-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 587.199819][ T889] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.212993][ T889] usb 9-1: Product: syz [ 587.218452][ T889] usb 9-1: Manufacturer: syz [ 587.223375][ T889] usb 9-1: SerialNumber: syz [ 587.288095][ T5905] quatech2 2-1:248.242: Quatech 2nd gen USB to Serial Driver converter detected [ 587.322127][ T5905] usb 2-1: qt2_attach - failed to power on unit: -71 [ 587.329263][ T5905] quatech2 2-1:248.242: probe with driver quatech2 failed with error -71 [ 587.354425][ T5905] usb 2-1: USB disconnect, device number 125 [ 587.480395][ T889] usb 9-1: USB disconnect, device number 8 [ 587.784668][T17196] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 587.816001][T17196] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2530'. [ 588.124814][T17219] overlayfs: missing 'lowerdir' [ 588.175102][ T5905] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 588.215234][T17223] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2535'. [ 588.225529][T17223] nbd: illegal input index -1900544 [ 588.234761][T17219] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2534'. [ 588.245891][T17219] unsupported nlmsg_type 40 [ 588.271607][T17228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.294294][T17228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.348442][ T5905] usb 2-1: Using ep0 maxpacket: 32 [ 588.360123][ T5905] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 588.368515][ T5905] usb 2-1: config 0 has no interface number 0 [ 588.375221][ T5905] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 588.394693][ T5905] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 588.405204][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.416232][ T5905] usb 2-1: Product: syz [ 588.420592][ T5905] usb 2-1: Manufacturer: syz [ 588.425744][ T5905] usb 2-1: SerialNumber: syz [ 588.440332][ T5905] usb 2-1: config 0 descriptor?? [ 588.451264][T17205] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 588.518461][ T795] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 588.668398][ T795] usb 6-1: device descriptor read/64, error -71 [ 588.684140][T17205] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 588.935534][ T795] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 589.074556][ T795] usb 6-1: device descriptor read/64, error -71 [ 589.193101][ T795] usb usb6-port1: attempt power cycle [ 589.408762][T17254] No control pipe specified [ 589.566498][ T795] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 589.590212][ T795] usb 6-1: device descriptor read/8, error -71 [ 589.779025][T17262] F2FS-fs (nbd8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 589.788926][T17262] F2FS-fs (nbd8): Can't find valid F2FS filesystem in 1th superblock [ 589.798133][T17262] F2FS-fs (nbd8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 589.806455][T17262] F2FS-fs (nbd8): Can't find valid F2FS filesystem in 2th superblock [ 589.866403][ T795] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 589.909379][ T795] usb 6-1: device descriptor read/8, error -71 [ 590.037601][ T795] usb usb6-port1: unable to enumerate USB device [ 590.167205][T17275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.181864][T17275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.411361][ T5869] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 590.582428][ T5869] usb 9-1: Using ep0 maxpacket: 8 [ 590.590885][ T5869] usb 9-1: config 0 has an invalid interface number: 31 but max is 0 [ 590.599462][ T5869] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 590.610829][ T5869] usb 9-1: config 0 has no interface number 0 [ 590.619626][ T5869] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 590.628972][ T5869] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.637851][ T5869] usb 9-1: Product: syz [ 590.642078][ T5869] usb 9-1: Manufacturer: syz [ 590.647828][ T5869] usb 9-1: SerialNumber: syz [ 590.656019][ T5869] usb 9-1: config 0 descriptor?? [ 590.880111][ T5869] uvcvideo 9-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 590.887703][ T5869] uvcvideo 9-1:0.31: No valid video chain found. [ 590.900244][ T5869] usb 9-1: USB disconnect, device number 9 [ 590.915101][T13439] udevd[13439]: setting mode of /dev/bus/usb/009/009 to 020664 failed: No such file or directory [ 590.926954][T13439] udevd[13439]: setting owner of /dev/bus/usb/009/009 to uid=0, gid=0 failed: No such file or directory [ 591.289034][ T5905] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 591.301425][ T5905] asix 2-1:0.188: probe with driver asix failed with error -71 [ 591.316168][ T5905] usb 2-1: USB disconnect, device number 126 [ 591.544458][T17313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.554738][T17313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.790959][ T5905] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 591.951348][ T5905] usb 9-1: Using ep0 maxpacket: 32 [ 591.958716][ T5905] usb 9-1: config 0 has an invalid interface number: 188 but max is 0 [ 591.970847][ T5905] usb 9-1: config 0 has no interface number 0 [ 591.979180][ T5905] usb 9-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 591.994037][ T5905] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 592.003346][ T5905] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.011889][ T5905] usb 9-1: Product: syz [ 592.016990][ T5905] usb 9-1: Manufacturer: syz [ 592.021729][ T5905] usb 9-1: SerialNumber: syz [ 592.038138][ T5905] usb 9-1: config 0 descriptor?? [ 592.044224][T17312] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 592.203001][T17336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2550'. [ 592.227838][T17336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2550'. [ 592.286965][ T5905] asix 9-1:0.188: probe with driver asix failed with error -71 [ 592.341063][ T5905] usb 9-1: USB disconnect, device number 10 [ 592.405289][T17347] f2fs: Unknown parameter 'usrquta' [ 592.413368][T17350] x_tables: unsorted underflow at hook 1 [ 592.700768][T17363] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 592.706156][T17363] @0: renamed from bond_slave_1 (while UP) [ 592.817349][ T889] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 592.999278][ T889] usb 2-1: Using ep0 maxpacket: 32 [ 593.013978][ T889] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 593.023823][ T889] usb 2-1: config 0 has no interface number 0 [ 593.047083][ T889] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 593.056650][ T889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.065985][ T889] usb 2-1: Product: syz [ 593.070241][ T889] usb 2-1: Manufacturer: syz [ 593.078540][ T889] usb 2-1: SerialNumber: syz [ 593.096110][ T889] usb 2-1: config 0 descriptor?? [ 593.104538][ T889] smsc95xx v2.0.0 [ 593.255975][ T5905] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 593.263659][ T795] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 593.333303][T17389] netlink: 'syz.7.2561': attribute type 13 has an invalid length. [ 593.345923][T17389] macvtap0: entered promiscuous mode [ 593.353873][T17389] macvtap0: refused to change device tx_queue_len [ 593.440550][ T795] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 593.456264][ T5905] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 593.469767][ T795] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 593.478963][ T795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.487087][ T5905] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.495343][ T5905] usb 9-1: Product: syz [ 593.499556][ T5905] usb 9-1: Manufacturer: syz [ 593.505886][ T5905] usb 9-1: SerialNumber: syz [ 593.511708][ T795] usb 6-1: config 0 descriptor?? [ 593.520400][ T5905] usb 9-1: config 0 descriptor?? [ 593.537183][ T795] pwc: Askey VC010 type 2 USB webcam detected. [ 593.747218][ T795] pwc: send_video_command error -71 [ 593.752817][ T795] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 593.762800][ T795] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 593.782435][ T5905] usb 9-1: Firmware version (0.0) predates our first public release. [ 593.796272][ T795] usb 6-1: USB disconnect, device number 61 [ 593.802367][ T5905] usb 9-1: Please update to version 0.2 or newer [ 593.814129][ T5905] usb 9-1: Firmware: build [ 593.915373][T17396] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2554'. [ 593.929083][T17396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.941567][T17396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.068818][ T5905] usb 9-1: USB disconnect, device number 11 [ 594.346831][ T795] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 594.509640][ T795] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.522809][ T795] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 594.532361][ T795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.546163][ T795] usb 6-1: config 0 descriptor?? [ 594.556928][ T795] pwc: Askey VC010 type 2 USB webcam detected. [ 594.902833][ T5905] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 594.984898][ T795] pwc: recv_control_msg error -32 req 02 val 2b00 [ 595.006926][ T795] pwc: recv_control_msg error -32 req 02 val 2700 [ 595.021075][ T795] pwc: recv_control_msg error -32 req 02 val 2c00 [ 595.028585][ T795] pwc: recv_control_msg error -32 req 04 val 1000 [ 595.036397][ T795] pwc: recv_control_msg error -32 req 04 val 1300 [ 595.044186][ T795] pwc: recv_control_msg error -32 req 04 val 1400 [ 595.051597][ T795] pwc: recv_control_msg error -32 req 02 val 2000 [ 595.097690][ T5905] usb 9-1: config 0 has an invalid interface number: 63 but max is 0 [ 595.106337][ T5905] usb 9-1: config 0 has no interface number 0 [ 595.112550][ T5905] usb 9-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=b2.a1 [ 595.121811][ T5905] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.139425][ T5905] usb 9-1: config 0 descriptor?? [ 595.280028][ T795] pwc: recv_control_msg error -71 req 04 val 1500 [ 595.300919][ T795] pwc: recv_control_msg error -71 req 02 val 2500 [ 595.312885][ T795] pwc: recv_control_msg error -71 req 02 val 2400 [ 595.341181][ T795] pwc: recv_control_msg error -71 req 02 val 2600 [ 595.348190][ T795] pwc: recv_control_msg error -71 req 02 val 2900 [ 595.368861][ T5905] usb 9-1: USB disconnect, device number 12 [ 595.384273][ T795] pwc: recv_control_msg error -71 req 02 val 2800 [ 595.395317][ T795] pwc: recv_control_msg error -71 req 04 val 1100 [ 595.417418][ T795] pwc: recv_control_msg error -71 req 04 val 1200 [ 595.458907][ T795] pwc: Registered as video103. [ 595.468856][ T795] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input43 [ 595.502905][ T795] usb 6-1: USB disconnect, device number 62 [ 595.774061][ T889] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 595.800998][ T889] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 595.810977][ T889] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 595.826054][ T889] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 595.842095][ T889] usb 2-1: USB disconnect, device number 127 [ 596.335659][ T795] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 596.510303][ T795] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 596.526866][ T795] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.538394][ T795] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 596.551664][ T795] usb 6-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 596.560854][ T795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.581512][ T795] usb 6-1: config 0 descriptor?? [ 596.653762][ T5149] Bluetooth: hci3: Malformed Event: 0x13 [ 596.913206][ T5832] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 597.021882][ T795] thrustmaster 0003:044F:B323.0023: unknown main item tag 0x2 [ 597.035755][ T795] thrustmaster 0003:044F:B323.0023: hidraw0: USB HID v0.08 Device [HID 044f:b323] on usb-dummy_hcd.5-1/input0 [ 597.048878][ T795] thrustmaster 0003:044F:B323.0023: no inputs found [ 597.078631][ T5832] usb 2-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 597.087941][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 597.096559][ T5832] usb 2-1: Product: syz [ 597.100780][ T5832] usb 2-1: Manufacturer: syz [ 597.105440][ T5832] usb 2-1: SerialNumber: syz [ 597.114186][ T5832] usb 2-1: config 0 descriptor?? [ 597.141135][ T5832] comedi comedi4: This driver needs USB 2.0 to operate. Aborting... [ 597.150737][ T5832] usbduxfast 2-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 597.236901][ T5832] usb 6-1: USB disconnect, device number 63 [ 597.337945][ T889] usb 2-1: USB disconnect, device number 2 [ 597.847232][T17568] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2583'. [ 597.965182][T17568] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2583'. [ 597.975157][ T5149] Bluetooth: hci0: unexpected event for opcode 0x040d [ 597.989302][ T5832] IPVS: starting estimator thread 0... [ 598.100769][T17572] IPVS: using max 40 ests per chain, 96000 per kthread [ 598.174825][ T5149] Bluetooth: hci0: connection err: -111 [ 598.260826][ T5869] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 598.434491][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 598.443364][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.454546][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.464720][ T5869] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 598.477972][ T5869] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 598.488252][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.500732][ T5869] usb 2-1: config 0 descriptor?? [ 598.572708][T17638] netlink: 'syz.7.2588': attribute type 4 has an invalid length. [ 598.596193][T17638] netlink: 'syz.7.2588': attribute type 4 has an invalid length. [ 598.937509][T17571] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 598.951382][ T5869] usbhid 2-1:0.0: can't add hid device: -71 [ 598.972113][ T5869] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 598.984977][ T5869] usb 2-1: USB disconnect, device number 3 [ 599.188444][T17672] syzkaller1: entered promiscuous mode [ 599.194420][T17672] syzkaller1: entered allmulticast mode [ 599.260215][T17676] fuse: Unknown parameter '0xffffffffffffffff' [ 599.267136][T17677] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2594'. [ 599.278220][T17672] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2594'. [ 599.396559][T17681] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2596'. [ 599.410612][T17682] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2596'. [ 599.466064][T17686] pim6reg: entered allmulticast mode [ 599.621842][T17699] openvswitch: netlink: Flow actions attr not present in new flow. [ 599.918552][ T795] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 600.101255][ T795] usb 2-1: Using ep0 maxpacket: 32 [ 600.111421][ T795] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 600.125058][ T795] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 600.136833][ T795] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 600.145442][ T795] usb 2-1: Product: syz [ 600.149837][ T795] usb 2-1: Manufacturer: syz [ 600.154609][ T795] usb 2-1: SerialNumber: syz [ 600.163462][ T795] usb 2-1: config 0 descriptor?? [ 600.169934][T17701] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 600.179776][ T795] hub 2-1:0.0: bad descriptor, ignoring hub [ 600.186299][ T795] hub 2-1:0.0: probe with driver hub failed with error -5 [ 600.592395][T17731] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 601.084021][ T889] usb 6-1: new full-speed USB device number 64 using dummy_hcd [ 601.206012][ T75] raw-gadget.0 gadget.1: failed to queue suspend event [ 601.246266][ T889] usb 6-1: config 7 has an invalid interface number: 101 but max is 0 [ 601.254680][ T889] usb 6-1: config 7 has no interface number 0 [ 601.263595][ T889] usb 6-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 601.274739][ T889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.282867][ T889] usb 6-1: Product: syz [ 601.288460][T17701] raw-gadget.0 gadget.1: failed to queue resume event [ 601.295820][ T889] usb 6-1: Manufacturer: syz [ 601.301488][ T889] usb 6-1: SerialNumber: syz [ 601.337195][T16231] raw-gadget.0 gadget.1: failed to queue suspend event [ 601.426952][T17728] raw-gadget.0 gadget.1: failed to queue resume event [ 601.452372][ T8086] raw-gadget.0 gadget.1: failed to queue suspend event [ 601.533305][T17728] raw-gadget.0 gadget.1: failed to queue resume event [ 601.564844][T17364] raw-gadget.0 gadget.1: failed to queue suspend event [ 601.651070][T17728] raw-gadget.0 gadget.1: failed to queue resume event [ 601.678243][T16231] raw-gadget.0 gadget.1: failed to queue suspend event [ 601.770518][T17728] raw-gadget.0 gadget.1: failed to queue resume event [ 601.801823][ T8086] raw-gadget.0 gadget.1: failed to queue suspend event [ 601.886853][T17701] raw-gadget.0 gadget.1: failed to queue resume event [ 601.908579][ T75] raw-gadget.0 gadget.1: failed to queue suspend event [ 601.994438][T17701] raw-gadget.0 gadget.1: failed to queue resume event [ 602.027159][ T75] raw-gadget.0 gadget.1: failed to queue suspend event [ 602.103144][T17728] raw-gadget.0 gadget.1: failed to queue resume event [ 602.132227][ T889] as10x_usb: device has been detected [ 602.138060][T17364] raw-gadget.0 gadget.1: failed to queue suspend event [ 602.145890][ T889] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 602.160896][ T889] usb 6-1: DVB: registering adapter 2 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 602.176732][ T889] as10x_usb: error during firmware upload part1 [ 602.197370][ T889] Registered device Elgato EyeTV DTT Deluxe [ 602.231986][T17701] raw-gadget.0 gadget.1: failed to queue resume event [ 602.272501][T17364] raw-gadget.0 gadget.1: failed to queue suspend event [ 602.347555][T17728] raw-gadget.0 gadget.1: failed to queue resume event [ 602.379303][T17364] raw-gadget.0 gadget.1: failed to queue suspend event [ 602.453047][T17701] raw-gadget.0 gadget.1: failed to queue resume event [ 602.478619][ T60] raw-gadget.0 gadget.1: failed to queue suspend event [ 602.570711][T17728] raw-gadget.0 gadget.1: failed to queue resume event [ 602.595941][ T60] raw-gadget.0 gadget.1: failed to queue suspend event [ 602.677670][T17701] raw-gadget.0 gadget.1: failed to queue resume event [ 602.700067][ T8086] raw-gadget.0 gadget.1: failed to queue suspend event [ 602.774086][T17728] raw-gadget.0 gadget.1: failed to queue resume event [ 602.796304][T16231] raw-gadget.0 gadget.1: failed to queue suspend event [ 602.870298][T17728] raw-gadget.0 gadget.1: failed to queue resume event [ 602.892454][ T8086] raw-gadget.0 gadget.1: failed to queue suspend event [ 602.916172][T17728] raw-gadget.0 gadget.1: failed to queue disconnect event [ 603.228412][ T795] usb 2-1: USB disconnect, device number 4 [ 603.565256][ T795] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 603.713320][T17781] syz.7.2614 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 603.715488][ T795] usb 2-1: device descriptor read/64, error -71 [ 603.982473][ T795] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 604.051620][ T5832] usb 6-1: USB disconnect, device number 64 [ 604.083782][ T5832] Unregistered device Elgato EyeTV DTT Deluxe [ 604.086935][ T5832] as10x_usb: device has been disconnected [ 604.143018][ T795] usb 2-1: device descriptor read/64, error -71 [ 604.261850][ T795] usb usb2-port1: attempt power cycle [ 604.454574][ T5832] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 604.473357][T17809] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2618'. [ 604.616827][ T5832] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 604.625765][ T795] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 604.634130][ T5832] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 604.644550][ T5832] usb 6-1: config 0 has no interface number 0 [ 604.653277][ T5832] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 604.663214][ T795] usb 2-1: device descriptor read/8, error -71 [ 604.673044][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.681303][ T5832] usb 6-1: Product: syz [ 604.685569][ T5832] usb 6-1: Manufacturer: syz [ 604.690683][ T5832] usb 6-1: SerialNumber: syz [ 604.698155][ T5832] usb 6-1: config 0 descriptor?? [ 604.708293][ T5832] hub 6-1:0.31: bad descriptor, ignoring hub [ 604.714507][ T5832] hub 6-1:0.31: probe with driver hub failed with error -5 [ 604.723638][ T5832] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 604.735153][ T5832] uvcvideo 6-1:0.31: Entity type for entity Output 6 was not initialized! [ 604.744348][ T5832] uvcvideo 6-1:0.31: Failed to create links for entity 6 [ 604.751441][ T5832] uvcvideo 6-1:0.31: Failed to register entities (-22). [ 604.924415][ T795] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 604.947198][ T795] usb 2-1: device descriptor read/8, error -71 [ 605.074069][ T795] usb usb2-port1: unable to enumerate USB device [ 605.084494][ T5869] usb 6-1: USB disconnect, device number 65 [ 605.586183][T17835] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2623'. [ 605.596143][ T5827] Bluetooth: hci2: ISO packet for unknown connection handle 1481 [ 605.886187][ T795] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 606.050271][ T795] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 606.061961][ T795] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 606.075190][ T795] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 606.084505][ T795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.311999][ T795] usb 6-1: GET_CAPABILITIES returned 0 [ 606.327114][ T795] usbtmc 6-1:16.0: can't read capabilities [ 606.400311][T17891] usb usb8: usbfs: process 17891 (syz.1.2629) did not claim interface 0 before use [ 606.545754][ T795] usb 6-1: USB disconnect, device number 66 [ 606.848946][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 607.012739][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.023948][ T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 607.039285][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 607.048690][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.057338][ T9] usb 2-1: Product: syz [ 607.061768][ T9] usb 2-1: Manufacturer: syz [ 607.066537][ T9] usb 2-1: SerialNumber: syz [ 607.290952][T17905] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 607.956917][T17905] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 608.003828][ T889] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 608.164367][ T889] usb 6-1: Using ep0 maxpacket: 16 [ 608.179749][ T889] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 608.189243][ T889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.190666][ T9] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 608.197689][ T889] usb 6-1: Product: syz [ 608.208805][ T889] usb 6-1: Manufacturer: syz [ 608.213467][ T889] usb 6-1: SerialNumber: syz [ 608.215428][ T9] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 608.225692][ T9] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 608.234954][ T889] usb 6-1: config 0 descriptor?? [ 608.405171][ T9] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 608.432761][ T9] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 608.461481][ T9] usb 2-1: USB disconnect, device number 9 [ 608.469946][ T9] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 608.675006][ T889] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 608.690945][ T889] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 608.701395][ T889] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 608.709939][ T889] usb 6-1: media controller created [ 608.726150][ T889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 608.890205][ T889] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 608.899396][ T889] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 609.109671][ T5876] usb 6-1: USB disconnect, device number 67 [ 609.177503][ T5876] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 609.441538][T17993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.452393][T17993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.710211][ T5876] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 609.850929][T18010] IPVS: set_ctl: invalid protocol: 33 172.30.1.8:20001 [ 609.886003][ T5876] usb 2-1: Using ep0 maxpacket: 8 [ 609.912318][ T5876] usb 2-1: config 1 interface 0 altsetting 64 bulk endpoint 0x1 has invalid maxpacket 1023 [ 609.923061][ T5876] usb 2-1: config 1 interface 0 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 609.937123][ T5876] usb 2-1: config 1 interface 0 has no altsetting 0 [ 609.955544][ T5876] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 609.968144][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.977190][ T5876] usb 2-1: Product: syz [ 609.981513][ T5876] usb 2-1: Manufacturer: 碊촀鿲햶ꟷ◰ஂꐥ൶液䝦ฤ馫얲볠ᄟꃌ떷՜骝퓵䅩禆鶿胮앣ꆊ坚ᯆ쩍䓉᭸︹甅嫣猸힑靃瀾ⰼ궸踀 [ 610.002679][ T5876] usb 2-1: SerialNumber: syz [ 610.012596][T17992] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 610.025254][T17992] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 610.121417][ T5917] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 610.261306][ T5917] usb 6-1: device descriptor read/64, error -71 [ 610.270220][ T5876] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 64 proto 1 vid 0x0525 pid 0xA4A8 [ 610.298105][ T5876] usb 2-1: USB disconnect, device number 10 [ 610.308613][ T5876] usblp0: removed [ 610.517141][ T5917] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 610.656083][ T5917] usb 6-1: device descriptor read/64, error -71 [ 610.775230][ T5917] usb usb6-port1: attempt power cycle [ 611.148046][ T5917] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 611.180785][ T5917] usb 6-1: device descriptor read/8, error -71 [ 611.191587][ T5876] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 611.347427][T18059] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2652'. [ 611.352908][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 611.364243][ T5876] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 611.381559][ T5876] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 611.392551][ T5876] usb 2-1: config 0 has no interface number 0 [ 611.401991][ T5876] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 611.412250][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.421186][ T5876] usb 2-1: Product: syz [ 611.426037][ T5876] usb 2-1: Manufacturer: syz [ 611.430696][ T5876] usb 2-1: SerialNumber: syz [ 611.436733][ T5917] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 611.446826][ T5876] usb 2-1: config 0 descriptor?? [ 611.457190][ T5876] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 611.465286][ T5876] uvcvideo 2-1:0.105: No valid video chain found. [ 611.472998][ T5917] usb 6-1: device descriptor read/8, error -71 [ 611.597462][ T5917] usb usb6-port1: unable to enumerate USB device [ 611.673007][ T9] usb 2-1: USB disconnect, device number 11 [ 611.941400][T18070] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2653'. [ 612.001517][T18072] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2654'. [ 612.129274][T18075] bridge0: port 3(veth0_to_bridge) entered blocking state [ 612.151165][T18075] bridge0: port 3(veth0_to_bridge) entered disabled state [ 612.177636][T18075] veth0_to_bridge: entered allmulticast mode [ 612.200760][T18075] veth0_to_bridge: entered promiscuous mode [ 612.217573][T18075] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.255554][T18075] bridge0: port 3(veth0_to_bridge) entered blocking state [ 612.263683][T18075] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 612.526370][ T5149] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 612.539991][ T5149] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 612.557154][ T5149] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 612.565664][ T5149] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 612.575339][ T5149] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 612.721921][ T795] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 612.911465][ T795] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 612.922837][ T795] usb 2-1: config 0 has no interface number 0 [ 612.931729][ T795] usb 2-1: config 0 interface 67 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 612.945202][ T795] usb 2-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 612.951099][T17364] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.967893][ T795] usb 2-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=6d.88 [ 612.988502][ T795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.996585][ T795] usb 2-1: Product: syz [ 613.001476][ T795] usb 2-1: Manufacturer: syz [ 613.006221][ T795] usb 2-1: SerialNumber: syz [ 613.018345][ T795] usb 2-1: config 0 descriptor?? [ 613.167830][T17364] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.206617][T18211] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2661'. [ 613.219319][T18087] chnl_net:caif_netlink_parms(): no params data found [ 613.247911][ T795] usb 2-1: USB disconnect, device number 12 [ 613.277360][T18211] netlink: 'syz.5.2661': attribute type 33 has an invalid length. [ 613.285268][T18211] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2661'. [ 613.307188][T17364] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.357663][T18219] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2661'. [ 613.424866][T17364] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.486101][T18236] binder_alloc: 18231: binder_alloc_buf size 17664 failed, no address space [ 613.497969][T18236] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 613.675589][T18087] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.687179][T18284] ieee802154 phy0 wpan0: encryption failed: -22 [ 613.694417][T18087] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.707593][T18087] bridge_slave_0: entered allmulticast mode [ 613.720537][T18087] bridge_slave_0: entered promiscuous mode [ 613.761177][T18087] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.769775][T18087] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.777307][T18087] bridge_slave_1: entered allmulticast mode [ 613.788798][T18087] bridge_slave_1: entered promiscuous mode [ 613.980537][T18087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.022415][T18087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.120516][T17364] bridge_slave_1: left allmulticast mode [ 614.130622][T17364] bridge_slave_1: left promiscuous mode [ 614.137302][T17364] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.150787][T17364] bridge_slave_0: left allmulticast mode [ 614.160509][T17364] bridge_slave_0: left promiscuous mode [ 614.167356][T17364] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.292083][ T889] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 614.331393][ T5917] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 614.358228][T18371] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2671'. [ 614.472639][ T889] usb 2-1: Using ep0 maxpacket: 32 [ 614.507274][ T889] usb 2-1: unable to get BOS descriptor or descriptor too short [ 614.525956][ T889] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 614.536137][ T889] usb 2-1: can't read configurations, error -71 [ 614.545125][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 614.557193][ T5917] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 614.570630][ T5917] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 614.582870][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.611455][ T5917] usb 6-1: config 0 descriptor?? [ 614.618108][T18335] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 614.782470][ T5827] Bluetooth: hci4: command tx timeout [ 614.853891][T18335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.870931][T18335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.891997][ T5917] usbhid 6-1:0.0: can't add hid device: -71 [ 614.898985][ T5917] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 614.916963][ T5917] usb 6-1: USB disconnect, device number 72 [ 615.033212][T17364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 615.046216][T17364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.057129][T17364] bond0 (unregistering): Released all slaves [ 615.080473][T18087] team0: Port device team_slave_0 added [ 615.174260][T18087] team0: Port device team_slave_1 added [ 615.353741][T18087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.360957][T18087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.387461][T18087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.403737][T18087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.415735][T18087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.442338][T18087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.482904][ T5917] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 615.594164][T18087] hsr_slave_0: entered promiscuous mode [ 615.602571][T18087] hsr_slave_1: entered promiscuous mode [ 615.612175][T18087] debugfs: 'hsr0' already exists in 'hsr' [ 615.618659][T18087] Cannot create hsr debugfs directory [ 615.672072][ T5917] usb 6-1: Using ep0 maxpacket: 32 [ 615.685057][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 615.699630][ T889] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 615.711987][ T5917] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 615.728445][ T5917] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 615.738475][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.768761][ T5917] usb 6-1: config 0 descriptor?? [ 615.809874][ T5917] hub 6-1:0.0: bad descriptor, ignoring hub [ 615.823545][ T5917] hub 6-1:0.0: probe with driver hub failed with error -5 [ 615.865883][T17364] hsr_slave_0: left promiscuous mode [ 615.881986][T17364] hsr_slave_1: left promiscuous mode [ 615.898625][T17364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 615.906726][T17364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.934090][T18497] netlink: 15743 bytes leftover after parsing attributes in process `syz.7.2675'. [ 615.935348][ T889] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 615.961930][T17364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 615.969465][T17364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.992682][ T889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.000791][ T889] usb 2-1: Product: syz [ 616.036486][ T889] usb 2-1: Manufacturer: syz [ 616.041396][ T889] usb 2-1: SerialNumber: syz [ 616.074243][T17364] veth1_macvtap: left promiscuous mode [ 616.091697][ T889] usb 2-1: config 0 descriptor?? [ 616.109782][T17364] veth0_macvtap: left promiscuous mode [ 616.133063][T18509] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2669'. [ 616.142610][T17364] veth1_vlan: left promiscuous mode [ 616.148150][T17364] veth0_vlan: left promiscuous mode [ 616.535262][ T889] mos7840 2-1:0.0: required endpoints missing [ 616.585021][ T889] usb 2-1: USB disconnect, device number 14 [ 616.739219][T18542] netlink: 'syz.7.2680': attribute type 21 has an invalid length. [ 616.762972][T18542] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2680'. [ 616.984185][ T5827] Bluetooth: hci4: command tx timeout [ 617.014929][ T889] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 617.219473][ T889] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 617.228513][ T889] usb 2-1: config 0 has no interface number 0 [ 617.239530][ T889] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 617.249014][ T889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.257449][ T889] usb 2-1: Product: syz [ 617.261923][ T889] usb 2-1: Manufacturer: syz [ 617.266747][ T889] usb 2-1: SerialNumber: syz [ 617.283561][ T889] usb 2-1: config 0 descriptor?? [ 617.553298][T17364] team0 (unregistering): Port device team_slave_1 removed [ 617.667610][T17364] team0 (unregistering): Port device team_slave_0 removed [ 617.740565][ T889] usb 2-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (1) [ 617.749321][ T889] usb 2-1: Firmware version (0.0) predates our first public release. [ 617.758144][ T889] usb 2-1: Please update to version 0.2 or newer [ 618.740798][ T889] usb 2-1: USB disconnect, device number 15 [ 618.968620][ T5917] usbhid 6-1:0.0: can't add hid device: -71 [ 618.974744][ T5917] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 619.031945][ T5917] usb 6-1: USB disconnect, device number 73 [ 619.171614][T18613] Bluetooth: MGMT ver 1.23 [ 619.205721][ T5827] Bluetooth: hci4: command tx timeout [ 619.650253][ T889] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 619.686646][T18087] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 619.712139][T18087] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 619.740083][T18087] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 619.762565][T18087] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 619.842659][ T889] usb 2-1: Using ep0 maxpacket: 32 [ 619.859599][ T889] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 619.890539][ T889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.919737][ T889] usb 2-1: config 0 descriptor?? [ 619.946852][ T889] gspca_main: sunplus-2.14.0 probing 041e:400b [ 620.092444][T18087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.172090][T18087] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.197178][ T8087] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.204507][ T8087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.237662][ T8087] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.245009][ T8087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.363765][ T889] gspca_sunplus: reg_r err -32 [ 620.382869][ T889] sunplus 2-1:0.0: probe with driver sunplus failed with error -32 [ 621.045626][T18087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.223536][T18693] program syz.5.2690 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 621.263501][T18694] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2691'. [ 621.309733][T18694] overlayfs: failed to resolve '/X]-bca6NJl}6;tGeY޸ eEX-3щ1=s.Ի'9' [ 621.309733][T18694] 7c&bDwa!|_ZI1 .HZ}k$#+-krkH.?j#M@i ]th]ܼ2^P(L2#i0Uzb[C-&(8‡s噴Xj ?)`R&*'-Įm5-1bK ܰ`x|íQ-œciGv4وIK^WҘ2<Gg}TkеyVQ [ 621.309733][T18694] ?y|': -36 [ 621.429073][ T5827] Bluetooth: hci4: command tx timeout [ 621.542494][ T10] usb 2-1: USB disconnect, device number 16 [ 621.892139][T18718] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2693'. [ 621.938132][T17364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.959361][T17364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.988792][T18726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 621.999233][T18718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 622.069168][T18087] veth0_vlan: entered promiscuous mode [ 622.087126][T18087] veth1_vlan: entered promiscuous mode [ 622.188259][T18087] veth0_macvtap: entered promiscuous mode [ 622.232761][T18087] veth1_macvtap: entered promiscuous mode [ 622.305678][T18087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 622.366136][T18087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 622.429034][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.449726][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.489760][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.501632][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.738693][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.762191][ T889] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 622.784430][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.850350][ T1332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.859255][ T1332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.959420][ T889] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 622.997498][ T889] usb 6-1: config 0 has no interface number 0 [ 623.008361][ T5891] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 623.033624][ T889] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 623.079949][ T889] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 623.121208][ T889] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 623.135557][ T889] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 623.146132][T18763] cgroup: Unknown subsys name 'cpuset' [ 623.160872][T18763] netlink: 188 bytes leftover after parsing attributes in process `syz.9.2655'. [ 623.164447][ T889] usb 6-1: Product: syz [ 623.183038][ T889] usb 6-1: SerialNumber: syz [ 623.192958][ T5891] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.215362][ T889] usb 6-1: config 0 descriptor?? [ 623.228413][T18763] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2655'. [ 623.248907][ T889] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 623.255625][ T5891] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 623.255664][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 623.255695][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 623.327689][ T889] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input44 [ 623.354702][ T5891] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 623.410278][ T5891] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 623.457205][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.521507][ T5891] usb 2-1: Product: syz [ 623.525865][ T5891] usb 2-1: Manufacturer: syz [ 623.530597][ T5891] usb 2-1: SerialNumber: syz [ 623.591088][ T5891] usb 2-1: config 0 descriptor?? [ 623.629282][T18750] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 623.805342][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 623.814792][T18795] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2702'. [ 623.817297][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 623.831471][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 623.838740][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 623.845974][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 623.853273][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 623.860668][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 623.867953][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 623.875233][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 623.882905][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 623.892357][ T889] usb 6-1: USB disconnect, device number 74 [ 623.898435][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 623.945698][ T889] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 624.004617][ T5891] rc_core: IR keymap rc-xbox-dvd not found [ 624.018943][ T5891] Registered IR keymap rc-empty [ 624.043357][ T5891] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 624.081982][ T5891] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input45 [ 624.142595][ T5891] usb 2-1: USB disconnect, device number 17 [ 624.148659][ C0] xbox_remote 2-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 624.828465][T18839] fuse: Bad value for 'rootmode' [ 625.233774][T18864] netlink: 'syz.9.2710': attribute type 10 has an invalid length. [ 625.260904][T18864] lo: entered promiscuous mode [ 625.275699][T18864] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 625.297651][T18868] netlink: 220 bytes leftover after parsing attributes in process `syz.9.2710'. [ 625.350279][ T795] usb 6-1: new full-speed USB device number 75 using dummy_hcd [ 625.536057][ T795] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 625.547184][ T5891] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 625.560295][ T795] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 625.574576][ T795] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 625.594072][ T795] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 625.613490][ T795] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 625.632665][ T795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.648306][ T795] usb 6-1: config 0 descriptor?? [ 625.659506][ T795] gspca_main: spca561-2.14.0 probing abcd:cdee [ 625.714289][ T5891] usb 2-1: Using ep0 maxpacket: 16 [ 625.722574][ T5891] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 625.736814][ T5891] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 625.750427][ T5891] usb 2-1: config 0 has no interface number 0 [ 625.761553][ T5891] usb 2-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 625.773869][ T5891] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 625.787136][ T5891] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 625.807185][ T5891] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 29797, setting to 1024 [ 625.818695][ T5891] usb 2-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 625.829285][ T5891] usb 2-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 625.847449][ T5891] usb 2-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 625.862973][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.892100][ T5891] usb 2-1: config 0 descriptor?? [ 625.900135][T18866] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 625.908038][T18866] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 625.924267][ T5891] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 625.987491][T18894] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2715'. [ 626.045999][T18894] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2715'. [ 626.105147][ T795] spca561 6-1:0.0: probe with driver spca561 failed with error -22 [ 626.144223][ T795] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 626.154983][ T5891] usb 2-1: USB disconnect, device number 18 [ 626.167014][ T795] usb 6-1: MIDIStreaming interface descriptor not found [ 626.385522][ T795] usb 6-1: USB disconnect, device number 75 [ 626.726752][T18956] random: crng reseeded on system resumption [ 626.750117][T18956] Unrecognized hibernate image header format! [ 626.757027][T18956] PM: hibernation: Image mismatch: architecture specific data [ 627.158210][T18952] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 627.275407][ T5891] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 627.298477][T18952] usb 2-1: device descriptor read/64, error -71 [ 627.435779][ T5891] usb 10-1: Invalid ep0 maxpacket: 32 [ 627.553440][T18952] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 627.574838][ T5891] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 627.692645][T18952] usb 2-1: device descriptor read/64, error -71 [ 627.735246][ T5891] usb 10-1: Invalid ep0 maxpacket: 32 [ 627.744202][ T5891] usb usb10-port1: attempt power cycle [ 627.773945][T18983] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2724'. [ 627.811663][T18952] usb usb2-port1: attempt power cycle [ 628.110293][ T5891] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 628.154840][ T5891] usb 10-1: Invalid ep0 maxpacket: 32 [ 628.173813][T18952] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 628.207565][T18952] usb 2-1: device descriptor read/8, error -71 [ 628.209998][T19003] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2729'. [ 628.312881][ T5891] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 628.335234][ T5891] usb 10-1: Invalid ep0 maxpacket: 32 [ 628.341192][ T5891] usb usb10-port1: unable to enumerate USB device [ 628.462408][T11522] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 628.462408][T18952] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 628.496243][T18952] usb 2-1: device descriptor read/8, error -71 [ 628.614538][T18952] usb usb2-port1: unable to enumerate USB device [ 628.622809][T11522] usb 6-1: Using ep0 maxpacket: 32 [ 628.630253][T11522] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.641598][T11522] usb 6-1: config 0 interface 0 has no altsetting 0 [ 628.648303][T11522] usb 6-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 628.657512][T11522] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.668941][T11522] usb 6-1: config 0 descriptor?? [ 629.334902][T11522] usb 6-1: string descriptor 0 read error: -71 [ 629.342062][T11522] uclogic 0003:5543:006E.0024: failed retrieving string descriptor #200: -71 [ 629.351580][T11522] uclogic 0003:5543:006E.0024: failed retrieving pen parameters: -71 [ 629.360244][T11522] uclogic 0003:5543:006E.0024: failed probing pen v2 parameters: -71 [ 629.368650][T11522] uclogic 0003:5543:006E.0024: failed probing parameters: -71 [ 629.378655][T11522] uclogic 0003:5543:006E.0024: probe with driver uclogic failed with error -71 [ 629.391614][T11522] usb 6-1: USB disconnect, device number 76 [ 629.999475][T19036] netlink: 'syz.5.2736': attribute type 21 has an invalid length. [ 630.007803][T19036] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2736'. [ 630.182074][T19048] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2737'. [ 630.270037][ T5891] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 630.430259][ T5891] usb 6-1: Using ep0 maxpacket: 16 [ 630.458015][T19062] input: syz1 as /devices/virtual/input/input46 [ 630.474243][ T5891] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 630.511958][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 630.542977][ T5891] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 630.554798][T19068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.571847][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.581218][ T5891] usb 6-1: Product: syz [ 630.585941][ T5891] usb 6-1: Manufacturer: syz [ 630.603598][T19068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.615418][ T5891] usb 6-1: SerialNumber: syz [ 630.672027][ T5891] usb 6-1: config 0 descriptor?? [ 630.698493][ T5891] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 630.732356][ T5891] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 631.221793][ T5917] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 631.337895][ T5891] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 631.363762][ T5891] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 631.388188][T19108] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2750'. [ 631.408831][ T5917] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 631.433646][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.456902][ T5917] usb 2-1: Product: syz [ 631.461193][ T5917] usb 2-1: Manufacturer: syz [ 631.465856][ T5917] usb 2-1: SerialNumber: syz [ 631.532551][ T5917] usb 2-1: config 0 descriptor?? [ 632.003209][ T795] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 632.011461][ T5917] usb 2-1: f81604_read: reg: 100f failed: -EPIPE [ 632.047784][ T5891] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 632.062827][ T5917] usb 2-1: f81604_read: reg: 200f failed: -EPROTO [ 632.094688][ T5917] usb 2-1: USB disconnect, device number 23 [ 632.124837][ T5917] usb 2-1: f81604_read: reg: 100f failed: -ENODEV [ 632.178614][ T795] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.204588][ T5494] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 632.206968][ T795] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.232903][ T5917] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 632.246848][ T795] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 632.262734][ T795] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 632.272792][ T795] usb 10-1: Manufacturer: syz [ 632.284950][ T5891] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 632.305476][ T5891] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 632.319945][ T795] usb 10-1: config 0 descriptor?? [ 632.334672][ T5891] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 632.353052][ T5891] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 632.360723][ T5891] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 632.424218][ T5891] usb 6-1: USB disconnect, device number 77 [ 632.911471][T11522] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 633.082418][T11522] usb 2-1: Using ep0 maxpacket: 16 [ 633.089997][T11522] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 633.114817][T11522] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.08 [ 633.124130][T11522] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.158514][T11522] usb 2-1: config 0 descriptor?? [ 633.181814][T11522] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 633.253696][ T795] uclogic 0003:256C:006D.0025: interface is invalid, ignoring [ 633.285939][ T795] usb 10-1: USB disconnect, device number 7 [ 633.446074][ T5832] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 633.627953][ T5832] usb 6-1: Using ep0 maxpacket: 16 [ 633.635721][ T5832] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 633.644756][ T5832] usb 6-1: config 0 has no interface number 0 [ 633.651258][ T5832] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 633.662434][ T5832] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 633.675857][ T5832] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 633.685057][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.693358][ T5832] usb 6-1: Product: syz [ 633.697559][ T5832] usb 6-1: Manufacturer: syz [ 633.702178][ T5832] usb 6-1: SerialNumber: syz [ 633.712096][ T5832] usb 6-1: config 0 descriptor?? [ 633.721611][T19193] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 633.729931][T19193] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 633.974857][T19193] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 633.975409][T19220] netlink: 'syz.9.2764': attribute type 10 has an invalid length. [ 633.992715][T19193] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 634.006044][T19220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.016785][T19220] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 634.031265][T19220] netlink: 'syz.9.2764': attribute type 10 has an invalid length. [ 634.040255][T19220] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2764'. [ 634.049721][T19220] batadv0: entered promiscuous mode [ 634.055226][T19220] batadv0: entered allmulticast mode [ 634.065593][T19220] bond0: (slave batadv0): Releasing backup interface [ 634.080773][T19220] bridge0: port 3(batadv0) entered blocking state [ 634.087783][T19220] bridge0: port 3(batadv0) entered disabled state [ 634.164394][ T1332] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 634.174322][ T1332] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 634.200317][T19224] tmpfs: Unknown parameter '' [ 634.229955][T19193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.242337][T19193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.271699][T19193] syzkaller1: entered promiscuous mode [ 634.277551][T19193] syzkaller1: entered allmulticast mode [ 634.293548][T19193] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 957 [ 634.668771][ T5832] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 634.682477][ T5832] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 634.703548][ T5832] asix 6-1:0.251: probe with driver asix failed with error -71 [ 634.720935][ T5832] usb 6-1: USB disconnect, device number 78 [ 635.211780][T19260] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2769'. [ 635.623647][T19274] kAFS: Can only specify source 'none' with -o dyn [ 635.846873][T19281] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 635.895561][ T5891] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 635.903860][ T5832] usb 2-1: USB disconnect, device number 24 [ 636.101273][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 636.111399][ T5891] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 636.122308][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 636.132554][ T5891] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 636.147873][ T5891] usb 6-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 636.158213][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.167099][ T5891] usb 6-1: Product: syz [ 636.171605][ T5891] usb 6-1: Manufacturer: syz [ 636.176381][ T5891] usb 6-1: SerialNumber: syz [ 636.188197][ T5891] usb 6-1: config 0 descriptor?? [ 636.200330][ T5891] ti_usb_3410_5052 6-1:0.0: TI USB 3410 1 port adapter converter detected [ 636.217927][ T5891] usb 6-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 636.375208][T19312] comedi comedi0: pcm3724: I/O port conflict (0x3,16) [ 636.415108][ T30] audit: type=1326 audit(2000000027.172:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19285 comm="syz.7.2774" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbea178f749 code=0x0 [ 636.438606][ T5891] usb 6-1: USB disconnect, device number 79 [ 636.477552][ T5891] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 636.530319][ T5891] ti_usb_3410_5052 6-1:0.0: device disconnected [ 636.654588][ T24] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 636.825950][ T24] usb 10-1: device descriptor read/64, error -71 [ 637.093001][ T24] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 637.242604][ T24] usb 10-1: device descriptor read/64, error -71 [ 637.269022][ T5891] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 637.360554][ T24] usb usb10-port1: attempt power cycle [ 637.445873][ T5891] usb 2-1: Using ep0 maxpacket: 8 [ 637.461037][ T5891] usb 2-1: unable to get BOS descriptor or descriptor too short [ 637.489785][ T5891] usb 2-1: config 8 has no interfaces? [ 637.503007][ T5891] usb 2-1: New USB device found, idVendor=0403, idProduct=e006, bcdDevice=ba.d1 [ 637.531476][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.539934][ T5891] usb 2-1: Product: syz [ 637.552945][ T5891] usb 2-1: Manufacturer: syz [ 637.557827][ T5891] usb 2-1: SerialNumber: syz [ 637.745326][ T24] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 637.779340][ T24] usb 10-1: device descriptor read/8, error -71 [ 637.810991][ T5891] usb 2-1: USB disconnect, device number 25 [ 638.045363][ T24] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 638.077367][ T24] usb 10-1: device descriptor read/8, error -71 [ 638.205714][ T24] usb usb10-port1: unable to enumerate USB device [ 638.676335][ T795] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 638.856840][ T795] usb 2-1: config 6 has an invalid interface number: 32 but max is 2 [ 638.866337][ T795] usb 2-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 638.875487][ T795] usb 2-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 638.886403][ T795] usb 2-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 638.895707][ T795] usb 2-1: config 6 has an invalid interface number: 9 but max is 2 [ 638.905714][ T795] usb 2-1: config 6 has an invalid interface number: 44 but max is 2 [ 638.914489][ T795] usb 2-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 638.924616][ T795] usb 2-1: config 6 has no interface number 0 [ 638.930888][ T795] usb 2-1: config 6 has no interface number 1 [ 638.937588][ T795] usb 2-1: config 6 has no interface number 2 [ 638.944181][ T795] usb 2-1: config 6 interface 32 altsetting 109 endpoint 0x1 has invalid maxpacket 959, setting to 64 [ 638.956836][ T795] usb 2-1: config 6 interface 32 altsetting 109 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 638.969520][ T795] usb 2-1: config 6 interface 32 altsetting 109 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 638.983113][ T795] usb 2-1: config 6 interface 32 altsetting 109 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 638.996786][ T795] usb 2-1: config 6 interface 32 altsetting 109 has a duplicate endpoint with address 0xF, skipping [ 639.010267][ T795] usb 2-1: config 6 interface 32 altsetting 109 has a duplicate endpoint with address 0xA, skipping [ 639.021729][ T795] usb 2-1: config 6 interface 32 altsetting 109 has a duplicate endpoint with address 0x1, skipping [ 639.032974][ T795] usb 2-1: config 6 interface 32 altsetting 109 has a duplicate endpoint with address 0x3, skipping [ 639.046125][ T795] usb 2-1: config 6 interface 32 altsetting 109 has an invalid descriptor for endpoint zero, skipping [ 639.058095][ T795] usb 2-1: config 6 interface 32 altsetting 109 has an invalid descriptor for endpoint zero, skipping [ 639.070479][ T795] usb 2-1: config 6 interface 9 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 639.078364][ T5869] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 639.087219][ T795] usb 2-1: config 6 interface 9 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 639.103871][ T795] usb 2-1: config 6 interface 9 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 639.117852][ T795] usb 2-1: config 6 interface 9 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 639.129359][ T795] usb 2-1: config 6 interface 9 altsetting 6 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 639.162898][ T795] usb 2-1: config 6 interface 9 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 639.184636][ T795] usb 2-1: config 6 interface 44 altsetting 255 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 639.209379][ T795] usb 2-1: config 6 interface 44 altsetting 255 has a duplicate endpoint with address 0x2, skipping [ 639.234548][ T795] usb 2-1: config 6 interface 44 altsetting 255 has a duplicate endpoint with address 0xE, skipping [ 639.261323][ T5869] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 639.263960][ T795] usb 2-1: config 6 interface 32 has no altsetting 0 [ 639.284836][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.289043][ T795] usb 2-1: config 6 interface 9 has no altsetting 0 [ 639.305217][ T5869] usb 6-1: Product: syz [ 639.310853][ T795] usb 2-1: config 6 interface 44 has no altsetting 0 [ 639.324704][ T5869] usb 6-1: Manufacturer: syz [ 639.334984][ T795] usb 2-1: New USB device found, idVendor=19d2, idProduct=ff59, bcdDevice=66.f9 [ 639.351185][ T5869] usb 6-1: SerialNumber: syz [ 639.355966][ T795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.373406][ T5869] usb 6-1: config 0 descriptor?? [ 639.374522][ T795] usb 2-1: Product: syz [ 639.398308][ T795] usb 2-1: Manufacturer: syz [ 639.411601][ T795] usb 2-1: SerialNumber: syz [ 639.633934][T19395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.674533][T19395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.694987][ T795] option 2-1:6.32: GSM modem (1-port) converter detected [ 639.774022][ T5869] usb-storage 6-1:0.0: USB Mass Storage device detected [ 639.827097][ T795] usb 2-1: USB disconnect, device number 26 [ 639.911188][ T5869] usb 6-1: USB disconnect, device number 80 [ 639.926590][ T795] option 2-1:6.32: device disconnected [ 640.397816][ T5869] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 640.559854][T19485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 640.579287][ T5869] usb 6-1: Using ep0 maxpacket: 32 [ 640.592465][ T5869] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 640.608020][ T5869] usb 6-1: config 0 has no interface number 0 [ 640.616538][ T5869] usb 6-1: config 0 interface 184 has no altsetting 0 [ 640.629753][ T5869] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 640.643202][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.653644][ T5869] usb 6-1: Product: syz [ 640.654765][ T5832] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 640.659681][ T5869] usb 6-1: Manufacturer: syz [ 640.670740][ T5869] usb 6-1: SerialNumber: syz [ 640.682885][ T5869] usb 6-1: config 0 descriptor?? [ 640.695182][ T5869] smsc75xx v1.0.0 [ 640.731450][T19489] netlink: 'syz.7.2791': attribute type 10 has an invalid length. [ 640.754938][T19489] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 640.849832][ T5832] usb 2-1: config 0 interface 0 altsetting 250 endpoint 0x2 has invalid maxpacket 1024, setting to 8 [ 640.867788][ T5832] usb 2-1: config 0 interface 0 has no altsetting 0 [ 640.877152][ T5832] usb 2-1: New USB device found, idVendor=1b96, idProduct=000d, bcdDevice= 0.00 [ 640.888600][ T5832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.904504][ T5832] usb 2-1: config 0 descriptor?? [ 640.914468][T19477] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 641.350583][ T5869] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 641.363545][ T5869] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 641.388241][ T5832] ntrig 0003:1B96:000D.0026: hidraw0: USB HID vf4.f6 Device [HID 1b96:000d] on usb-dummy_hcd.1-1/input0 [ 641.551125][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 641.558538][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 641.624003][ T5832] usb 2-1: USB disconnect, device number 27 [ 642.525929][ T24] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 642.707735][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 642.719430][ T24] usb 2-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 642.729236][ T24] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 642.743087][ T24] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 642.753164][ T24] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 642.763099][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.998788][ T24] usb 2-1: string descriptor 0 read error: -71 [ 643.137745][ T24] usb 2-1: USB disconnect, device number 28 [ 643.328864][ T5869] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000300: -71 [ 643.342819][ T5869] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX: -71 [ 643.353647][ T5869] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 643.366178][ T5869] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 643.379976][ T5869] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 643.406125][ T5869] usb 6-1: USB disconnect, device number 81 [ 643.777029][ T5869] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 643.851899][T18952] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 643.970245][ T5869] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 643.993900][ T5869] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.010451][ T5869] usb 10-1: Product: syz [ 644.018433][ T5869] usb 10-1: Manufacturer: syz [ 644.028358][ T5869] usb 10-1: SerialNumber: syz [ 644.039155][T18952] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 644.066008][T18952] usb 2-1: config 1 has no interface number 1 [ 644.073184][T18952] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 644.107277][T18952] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 644.137365][T18952] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 644.175391][T18952] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 644.191172][T18952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.208040][T18952] usb 2-1: Product: syz [ 644.208861][T19584] netlink: 'syz.5.2803': attribute type 10 has an invalid length. [ 644.212391][T18952] usb 2-1: Manufacturer: syz [ 644.212412][T18952] usb 2-1: SerialNumber: syz [ 644.270952][T19584] team0: Device tunl0 is of different type [ 644.399785][ T5869] rtl8150 10-1:1.0: couldn't reset the device [ 644.427122][ T5869] rtl8150 10-1:1.0: probe with driver rtl8150 failed with error -5 [ 644.466362][T18952] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 644.500021][ T5869] usb 10-1: USB disconnect, device number 12 [ 644.530784][T19598] binder: BINDER_SET_CONTEXT_MGR already set [ 644.562896][T19598] binder: 19596:19598 ioctl 4018620d 2000000002c0 returned -16 [ 644.598843][T19603] binder: 19596:19603 ioctl 4080aea2 200000000640 returned -22 [ 644.633912][T19598] netlink: 'syz.5.2805': attribute type 1 has an invalid length. [ 644.787685][T19607] kernel profiling enabled (shift: 34) [ 644.794175][T19607] profiling shift: 34 too large [ 645.019241][T19616] comedi comedi0: Minor 3 could not be opened [ 645.050020][ T5869] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 645.111325][T18952] usb 2-1: current rate 772 is different from the runtime rate 9338507 [ 645.260524][ T5869] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 645.271475][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.280514][ T5869] usb 6-1: Product: syz [ 645.285768][ T5869] usb 6-1: Manufacturer: syz [ 645.290623][ T5869] usb 6-1: SerialNumber: syz [ 645.308670][ T5869] usb 6-1: config 0 descriptor?? [ 645.328687][ T5869] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 645.495458][T18952] usb 2-1: USB disconnect, device number 29 [ 645.755917][ T5891] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 645.937279][ T5891] usb 10-1: Using ep0 maxpacket: 32 [ 645.949499][ T5891] usb 10-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 645.980162][ T5891] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.017547][ T5891] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 646.046462][T19670] ipvlan0: entered promiscuous mode [ 646.052610][T19669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.072839][T19669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.074816][T19670] ipvlan0: entered allmulticast mode [ 646.089027][T19670] veth0_vlan: entered allmulticast mode [ 646.220809][T19607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.249561][T19607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.554110][T19690] sctp: [Deprecated]: syz.5.2806 (pid 19690) Use of struct sctp_assoc_value in delayed_ack socket option. [ 646.554110][T19690] Use struct sctp_sack_info instead [ 646.586244][T19690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.599534][T19690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.624744][ T24] IPVS: starting estimator thread 0... [ 646.633277][T18952] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 646.656746][T19691] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 646.664757][ C0] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 646.718232][T19694] IPVS: using max 32 ests per chain, 76800 per kthread [ 646.771900][ T5891] gspca_nw80x: reg_r err -110 [ 646.777424][ T5891] nw80x 10-1:3.0: probe with driver nw80x failed with error -110 [ 646.808287][T18952] usb 2-1: config 0 interface 0 has no altsetting 0 [ 646.822023][T18952] usb 2-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 646.834816][T18952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.863582][T18952] usb 2-1: config 0 descriptor?? [ 647.199761][ T5869] gspca_sunplus: reg_r err -110 [ 647.208568][ T5869] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 647.319399][T19685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.336019][T19685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.365038][T18952] sigmamicro 0003:1C4F:0059.0027: item fetching failed at offset 2/3 [ 647.393163][T18952] sigmamicro 0003:1C4F:0059.0027: probe with driver sigmamicro failed with error -22 [ 647.573043][T19685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.596494][T19710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.609623][T19685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.625886][T19710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.676798][ T5869] usb 2-1: USB disconnect, device number 30 [ 647.896381][T19736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.916734][T19736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.017981][T19750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2823'. [ 648.095905][ T5891] usb 6-1: USB disconnect, device number 82 [ 648.375839][ T5869] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 648.537905][ T5869] usb 2-1: device descriptor read/64, error -71 [ 648.656673][T19777] [ 648.659647][T19777] ====================================================== [ 648.668256][T19777] WARNING: possible circular locking dependency detected [ 648.677687][T19777] syzkaller #0 Tainted: G L [ 648.684091][T19777] ------------------------------------------------------ [ 648.695945][T19777] syz.5.2828/19777 is trying to acquire lock: [ 648.705387][T19777] ffff88801d2b0220 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9e/0x450 [ 648.716804][T19777] [ 648.716804][T19777] but task is already holding lock: [ 648.724331][T19777] ffff888025ba5fb0 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x1604/0x1c50 [ 648.735659][T19777] [ 648.735659][T19777] which lock already depends on the new lock. [ 648.735659][T19777] [ 648.747435][T19777] [ 648.747435][T19777] the existing dependency chain (in reverse order) is: [ 648.757718][T19777] [ 648.757718][T19777] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 648.768911][T19777] blk_alloc_queue+0x52f/0x610 [ 648.776159][T19777] __blk_mq_alloc_disk+0x15c/0x340 [ 648.785600][T19777] loop_add+0x411/0xad0 [ 648.791427][T19777] loop_init+0xd9/0x170 [ 648.797311][T19777] do_one_initcall+0x1fb/0x820 [ 648.803792][T19777] do_initcall_level+0x104/0x190 [ 648.812104][T19777] do_initcalls+0x59/0xa0 [ 648.817658][T19777] kernel_init_freeable+0x334/0x4b0 [ 648.824136][T19777] kernel_init+0x1d/0x1d0 [ 648.830652][T19777] ret_from_fork+0x599/0xb30 [ 648.836904][T19777] ret_from_fork_asm+0x1a/0x30 [ 648.842849][T19777] [ 648.842849][T19777] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 648.852466][T19777] fs_reclaim_acquire+0x72/0x100 [ 648.859221][T19777] kmem_cache_alloc_noprof+0x45/0x710 [ 648.865707][T19777] __kernfs_iattrs+0xd9/0x320 [ 648.871519][T19777] kernfs_iop_setattr+0xea/0x3f0 [ 648.878190][T19777] notify_change+0xc1a/0xf40 [ 648.884789][T19777] do_truncate+0x1a4/0x220 [ 648.889806][T19777] path_openat+0x2f62/0x3840 [ 648.895515][T19777] do_filp_open+0x1fa/0x410 [ 648.900860][T19777] do_sys_openat2+0x121/0x200 [ 648.906493][T19777] __x64_sys_openat+0x138/0x170 [ 648.912364][T19777] do_syscall_64+0xfa/0xf80 [ 648.918212][T19777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.925285][T19777] [ 648.925285][T19777] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 648.935453][T19777] __lock_acquire+0x15a6/0x2cf0 [ 648.943153][T19777] lock_acquire+0x117/0x340 [ 648.949560][T19777] down_read+0x47/0x2e0 [ 648.955463][T19777] kernfs_iop_getattr+0x9e/0x450 [ 648.962652][T19777] vfs_getattr_nosec+0x2e1/0x430 [ 648.970126][T19777] loop_assign_backing_file+0x222/0x400 [ 648.979707][T19777] lo_ioctl+0x167f/0x1c50 [ 648.985779][T19777] blkdev_ioctl+0x60e/0x710 [ 648.990960][T19777] __se_sys_ioctl+0xfc/0x170 [ 648.996844][T19777] do_syscall_64+0xfa/0xf80 [ 649.004147][T19777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.012670][T19777] [ 649.012670][T19777] other info that might help us debug this: [ 649.012670][T19777] [ 649.030410][T19777] Chain exists of: [ 649.030410][T19777] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#24 [ 649.030410][T19777] [ 649.047540][T19777] Possible unsafe locking scenario: [ 649.047540][T19777] [ 649.056884][T19777] CPU0 CPU1 [ 649.065251][T19777] ---- ---- [ 649.073830][T19777] lock(&q->q_usage_counter(io)#24); [ 649.081202][T19777] lock(fs_reclaim); [ 649.089653][T19777] lock(&q->q_usage_counter(io)#24); [ 649.100953][T19777] rlock(&root->kernfs_iattr_rwsem); [ 649.110339][T19777] [ 649.110339][T19777] *** DEADLOCK *** [ 649.110339][T19777] [ 649.121932][T19777] 3 locks held by syz.5.2828/19777: [ 649.129922][T19777] #0: ffff888141f31448 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x11e4/0x1c50 [ 649.141132][T19777] #1: ffff888025ba5fb0 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x1604/0x1c50 [ 649.153625][T19777] #2: ffff888025ba5fe8 (&q->q_usage_counter(queue)#8){+.+.}-{0:0}, at: lo_ioctl+0x1604/0x1c50 [ 649.172542][T19777] [ 649.172542][T19777] stack backtrace: [ 649.180510][T19777] CPU: 1 UID: 0 PID: 19777 Comm: syz.5.2828 Tainted: G L syzkaller #0 PREEMPT(full) [ 649.180621][T19777] Tainted: [L]=SOFTLOCKUP [ 649.180629][T19777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 649.180649][T19777] Call Trace: [ 649.180658][T19777] [ 649.180668][T19777] dump_stack_lvl+0x189/0x250 [ 649.180694][T19777] ? __pfx_dump_stack_lvl+0x10/0x10 [ 649.180718][T19777] ? __pfx__printk+0x10/0x10 [ 649.180745][T19777] ? print_lock_name+0xde/0x100 [ 649.180774][T19777] print_circular_bug+0x2e2/0x300 [ 649.180796][T19777] check_noncircular+0x12e/0x150 [ 649.180821][T19777] __lock_acquire+0x15a6/0x2cf0 [ 649.180857][T19777] ? kernfs_iop_getattr+0x9e/0x450 [ 649.180884][T19777] lock_acquire+0x117/0x340 [ 649.180907][T19777] ? kernfs_iop_getattr+0x9e/0x450 [ 649.180938][T19777] down_read+0x47/0x2e0 [ 649.180959][T19777] ? kernfs_iop_getattr+0x9e/0x450 [ 649.180985][T19777] kernfs_iop_getattr+0x9e/0x450 [ 649.181012][T19777] vfs_getattr_nosec+0x2e1/0x430 [ 649.181033][T19777] loop_assign_backing_file+0x222/0x400 [ 649.181057][T19777] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 649.181079][T19777] ? schedule+0x91/0x360 [ 649.181108][T19777] lo_ioctl+0x167f/0x1c50 [ 649.181132][T19777] ? __pfx_lo_ioctl+0x10/0x10 [ 649.181157][T19777] ? update_cfs_rq_load_avg+0x3fb/0x4e0 [ 649.181183][T19777] ? update_load_avg+0x1b9/0x1480 [ 649.181209][T19777] ? __lock_acquire+0x6b6/0x2cf0 [ 649.181237][T19777] ? __lock_acquire+0x6b6/0x2cf0 [ 649.181263][T19777] ? __lock_acquire+0x6b6/0x2cf0 [ 649.181288][T19777] ? __lock_acquire+0x6b6/0x2cf0 [ 649.181326][T19777] ? is_bpf_text_address+0x26/0x2b0 [ 649.181352][T19777] ? is_bpf_text_address+0x292/0x2b0 [ 649.181374][T19777] ? is_bpf_text_address+0x26/0x2b0 [ 649.181397][T19777] ? kernel_text_address+0xa5/0xe0 [ 649.181418][T19777] ? __kernel_text_address+0xd/0x40 [ 649.181438][T19777] ? unwind_get_return_address+0x4d/0x90 [ 649.181455][T19777] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 649.181479][T19777] ? arch_stack_walk+0xfc/0x150 [ 649.181498][T19777] ? stack_trace_save+0x9c/0xe0 [ 649.183452][T19777] ? stack_depot_save_flags+0x40/0x850 [ 649.183495][T19777] ? format_decode+0xc0/0xe10 [ 649.183525][T19777] ? kasan_save_track+0x4f/0x80 [ 649.183554][T19777] ? kasan_save_track+0x3e/0x80 [ 649.183580][T19777] ? kasan_save_free_info+0x46/0x50 [ 649.183604][T19777] ? __kasan_slab_free+0x5c/0x80 [ 649.183619][T19777] ? kfree+0x1c0/0x660 [ 649.183642][T19777] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 649.183659][T19777] ? security_file_ioctl+0xcb/0x2d0 [ 649.183685][T19777] ? __se_sys_ioctl+0x47/0x170 [ 649.183709][T19777] ? do_syscall_64+0xfa/0xf80 [ 649.183795][T19777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.183821][T19777] ? __asan_memset+0x22/0x50 [ 649.183848][T19777] ? blk_get_meta_cap+0x18c/0x750 [ 649.183874][T19777] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 649.183900][T19777] ? blkdev_common_ioctl+0x11d9/0x2c70 [ 649.183937][T19777] ? kasan_quarantine_put+0xdd/0x220 [ 649.183961][T19777] ? lockdep_hardirqs_on+0x98/0x140 [ 649.184121][T19777] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 649.184159][T19777] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 649.184182][T19777] ? do_vfs_ioctl+0xbe8/0x1430 [ 649.184207][T19777] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 649.184225][T19777] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 649.184257][T19777] ? do_futex+0x395/0x420 [ 649.184292][T19777] ? __pfx_lo_ioctl+0x10/0x10 [ 649.184313][T19777] blkdev_ioctl+0x60e/0x710 [ 649.184339][T19777] ? __pfx_blkdev_ioctl+0x10/0x10 [ 649.184360][T19777] ? __fget_files+0x3a0/0x420 [ 649.184379][T19777] ? __fget_files+0x2a/0x420 [ 649.184400][T19777] ? bpf_lsm_file_ioctl+0x9/0x20 [ 649.184420][T19777] ? __pfx_blkdev_ioctl+0x10/0x10 [ 649.184442][T19777] __se_sys_ioctl+0xfc/0x170 [ 649.184468][T19777] do_syscall_64+0xfa/0xf80 [ 649.184489][T19777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.184507][T19777] ? clear_bhb_loop+0x60/0xb0 [ 649.184527][T19777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.184607][T19777] RIP: 0033:0x7fb86918f749 [ 649.184636][T19777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 649.184653][T19777] RSP: 002b:00007fb8673f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 649.184675][T19777] RAX: ffffffffffffffda RBX: 00007fb8693e5fa0 RCX: 00007fb86918f749 [ 649.184690][T19777] RDX: 0000000000000004 RSI: 0000000000004c06 RDI: 0000000000000003 [ 649.184701][T19777] RBP: 00007fb869213f91 R08: 0000000000000000 R09: 0000000000000000 [ 649.184713][T19777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 649.184724][T19777] R13: 00007fb8693e6038 R14: 00007fb8693e5fa0 R15: 00007fff0ea53e58 [ 649.184746][T19777] [ 649.803469][ T5827] Bluetooth: hci0: command 0x080f tx timeout [ 649.937123][ T5869] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 650.086834][ T5869] usb 2-1: device descriptor read/64, error -71 [ 650.204789][ T5869] usb usb2-port1: attempt power cycle [ 650.568078][ T5869] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 650.590294][ T5869] usb 2-1: device descriptor read/8, error -71 [ 650.846197][ T5869] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 650.889824][ T5869] usb 2-1: device descriptor read/8, error -71 [ 651.007080][ T5869] usb usb2-port1: unable to enumerate USB device