last executing test programs: 9m26.220356196s ago: executing program 0 (id=241): r0 = socket$inet(0x2, 0x3, 0x8001) fallocate(r0, 0x24, 0x80, 0x100000001) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000), 0x6, 0x1) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xe101, 0x0) mknodat(r2, &(0x7f0000000080)='./file0\x00', 0x2, 0x9) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x7fff, 0x6, [0x401, 0x1, 0x3cb3, 0xf10e, 0x4, 0xe]}, &(0x7f0000000100)=0x14) (rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={r3, 0x9c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0xe, @loopback, 0x7fffffff}, @in6={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e23, 0xb8, @mcast1, 0xb}, @in6={0xa, 0x4e23, 0x800, @empty, 0x9}, @in6={0xa, 0x4e20, 0x4, @local, 0x1}]}, &(0x7f0000000240)=0x10) r5 = open(&(0x7f0000000280)='./file0\x00', 0x2f01, 0x88) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000002c0)={r4, @in6={{0xa, 0x4e20, 0x6, @local, 0x900}}, [0x9, 0x7, 0x3, 0x5, 0xf00, 0x6, 0x9, 0x92, 0x0, 0x200, 0x0, 0x3, 0x4, 0x2, 0x8]}, &(0x7f00000003c0)=0x100) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000400)={r6, 0x9}, &(0x7f0000000440)=0x8) (async) r7 = socket$phonet(0x23, 0x2, 0x1) close_range(r2, r7, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000480)) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000540)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r7, 0x40089416, &(0x7f0000000580)=r8) (async) r9 = getpgrp(0x0) r10 = syz_open_procfs(r9, &(0x7f00000005c0)='comm\x00') rseq(&(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x100000001, 0x4, 0x400}}, 0x20, 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000680), r10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r10) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r11, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008815}, 0x20000000) (async) sendfile(r10, r1, &(0x7f0000000800)=0x9, 0x0) (async, rerun: 64) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000840)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x7f, 0x81, 0x7fffffffffffffff, 0x3, 0xca8e, 0x5e}, {0x4, 0x9, 0x1, 0x6, 0x1, 0x62bd}], ['\x00']}) (async, rerun: 64) r12 = openat$cgroup_ro(r2, &(0x7f0000000940)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r12, 0x89f5, &(0x7f0000000a40)={'sit0\x00', &(0x7f0000000980)={@broadcast, 0x1, 0x0, 0x90, 0x0, [{}, {@initdev}, {@loopback}, {@broadcast}, {@empty}, {@dev}, {@multicast1}, {@multicast1}, {@empty}]}}) (async) rseq(&(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0, 0x2, 0x9, 0x179200000000000, 0x2204}, 0x1}, 0x20, 0x1, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b00), 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)=@delqdisc={0x48, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xe}, {0x4, 0x9}, {0xd, 0x10}}, [@q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9711}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xff}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x8001) 9m26.148593577s ago: executing program 0 (id=242): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000004380)=[{{&(0x7f0000004440)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)='P', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080), 0x8) (async) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x800b3000) 9m26.064774996s ago: executing program 0 (id=243): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4c, 0x0, &(0x7f0000000140)) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902247251000000000904000012070103"], 0x0) 9m24.79945871s ago: executing program 0 (id=251): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) pivot_root(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00') r0 = socket$igmp(0x2, 0x3, 0x2) (async) setreuid(0xffffffffffffffff, 0xee01) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCL_SETSEL(r1, 0x5452, &(0x7f0000000100)) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) (async) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000380), 0x2fb8, 0x1) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001200"], 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x4000) syz_usb_connect(0x2, 0x6b, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a2403020005029a010209240603040000a5301124d500000000c65b0fa26410f3b600050924030506030501f909240702020005cbad0924030601016e"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 9m23.462407382s ago: executing program 0 (id=255): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@remote, @in=@local, 0x0, 0x33, 0x0, 0x0, 0xa, 0x60, 0x30}, {0x0, 0x7f, 0x800003, 0x2, 0x0, 0xffffffffffffffff, 0x200, 0xfeffffffffffffff}, {0x3, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x101}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000100)={r2, 0x1c, "d15b9d14605795874c66736f7bc6fa97ffbd503bc0eaed55b8f446b3"}, &(0x7f0000000140)=0x24) 9m21.7886294s ago: executing program 0 (id=262): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0xffffffffffffff14, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r1], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x1) sendto$inet6(r3, &(0x7f0000000540)="1a", 0x1, 0x0, 0x0, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r4 = getpid() r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1800, 0x0) r6 = syz_open_procfs(r4, &(0x7f0000000100)='net/dev_snmp6\x00') fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r7 = syz_pidfd_open(r4, 0x0) setns(r7, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000080)={0x3}) setsockopt$sock_int(r2, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 9m21.390555664s ago: executing program 32 (id=262): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0xffffffffffffff14, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r1], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x1) sendto$inet6(r3, &(0x7f0000000540)="1a", 0x1, 0x0, 0x0, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r4 = getpid() r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1800, 0x0) r6 = syz_open_procfs(r4, &(0x7f0000000100)='net/dev_snmp6\x00') fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r7 = syz_pidfd_open(r4, 0x0) setns(r7, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000080)={0x3}) setsockopt$sock_int(r2, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 6m43.638153874s ago: executing program 2 (id=1079): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x61, 0x0, 0x0) (async) mmap(&(0x7f000068c000/0x3000)=nil, 0x3000, 0x2, 0x30, r0, 0x341a0000) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000000)={0x0, 0x52424752}) (async) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000080)={0x0, 0x34324241, 0x0, @stepwise}) (async) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r1, 0x4068aea3, &(0x7f0000000600)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r1, 0xae80, 0x0) (async) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) 6m43.07454398s ago: executing program 2 (id=1089): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)="3aae1baf930b45", 0x7}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4a7a7caf0f0690713cee8b2dc3f1ce1852407a6a8a426097297d5431c998c929bd7d5d1bd75e37be9cfb9c5873daf8aa67a81f6715e496c22c2269ce035e6647f103686f71f3de9479", @ANYBLOB="55287885351c2f409ef1b4640557a82aaa3aafcf43e5d5be9907d86ef1b05cb88e1d3a9f15"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x24004040) r2 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xbe5, &(0x7f00000000c0)=ANY=[]) r3 = syz_usb_connect(0x0, 0x62, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24060101030200010006000609240305050306058109240306010304050507240405"], 0x0) syz_usb_control_io$rtl8150(r3, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x0, 0x23, 0x4d, {0x4d, 0x9, "b591347983fa2fefc5a6a15ba36c1e190d0ea3b3101e4150daa758d1958bc37fd63e0cf083656c5ea884f4717332b25692b8adf9be7626dffa67fa1fd5bacd096487652cd8a7731988b789"}}, &(0x7f00000000c0)=ANY=[@ANYBLOB="001303000000030342"], &(0x7f0000000100)={0x0, 0xf, 0x1b, {0x5, 0xf, 0x1b, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0xa8, 0x0, 0x1, 0xb51c811b4acb9a27, 0x8001}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0x0, 0x7}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x60, 0x1, 0x0, "65660ec3", "4e4c1568"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x4, 0x4, 0x0, 0xbb, 0x9, 0xeaa}}}, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x53, "7b87dcf259a999919321f4a48d0e55d1adbc41bfe86a960262d0c6da4a6d56d5a266aa245e9c157081409d0564f734ad81d70b72466a7dbc73584dbb05adad1644c633926fae5280965849fc28f66513a34455"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xf6}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x20, 0x40}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0xe}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "3985"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000540)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000580)={0x40, 0x17, 0x6, @local}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "ac9d"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x3}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x6}}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000001080)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x2, "9dc8a5270797e3"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000002180)={r5, r6, "7a9bcf3f439b42e0aeeed68859253b1a7a6cea7c0ac4af7a648d5ede6a0557c6483bef911960e22e41d872c807330242fc9233fd08b83743c0a9b504806042614d1d8d9238a09abc9a1c8a5abd847264a341f218987989abdc618777dd74d6324ae255da9aa3bbe249e0504bc4d58b8cf3b983bd61ae57273d3696a809178b152645b24afa67da7f58a1f9531817bd4ad86fe3c04dacb615d9d9d3aa81ae3a3eb354f0ff8baeb3dfd14f6019b8cdf3b3fa6fcc8d5d7416ce82a6433032305c239ee7f08ff21aa87cc37b39ed78753dddd11464971ef53d053423062521cf9d61ec8cbe904e25501479311266aa02e2b8c5d62c6f1eff715b0ce2d80e5ecd7e6c", "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"}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) socket$inet6(0xa, 0x3, 0x3c) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) (async) sendmmsg$inet(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)="3aae1baf930b45", 0x7}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4a7a7caf0f0690713cee8b2dc3f1ce1852407a6a8a426097297d5431c998c929bd7d5d1bd75e37be9cfb9c5873daf8aa67a81f6715e496c22c2269ce035e6647f103686f71f3de9479", @ANYBLOB="55287885351c2f409ef1b4640557a82aaa3aafcf43e5d5be9907d86ef1b05cb88e1d3a9f15"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x24004040) (async) syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) (async) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xbe5, &(0x7f00000000c0)=ANY=[]) (async) syz_usb_connect(0x0, 0x62, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24060101030200010006000609240305050306058109240306010304050507240405"], 0x0) (async) syz_usb_control_io$rtl8150(r3, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async) syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x0, 0x23, 0x4d, {0x4d, 0x9, "b591347983fa2fefc5a6a15ba36c1e190d0ea3b3101e4150daa758d1958bc37fd63e0cf083656c5ea884f4717332b25692b8adf9be7626dffa67fa1fd5bacd096487652cd8a7731988b789"}}, &(0x7f00000000c0)=ANY=[@ANYBLOB="001303000000030342"], &(0x7f0000000100)={0x0, 0xf, 0x1b, {0x5, 0xf, 0x1b, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0xa8, 0x0, 0x1, 0xb51c811b4acb9a27, 0x8001}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0x0, 0x7}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x60, 0x1, 0x0, "65660ec3", "4e4c1568"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x4, 0x4, 0x0, 0xbb, 0x9, 0xeaa}}}, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x53, "7b87dcf259a999919321f4a48d0e55d1adbc41bfe86a960262d0c6da4a6d56d5a266aa245e9c157081409d0564f734ad81d70b72466a7dbc73584dbb05adad1644c633926fae5280965849fc28f66513a34455"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xf6}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x20, 0x40}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0xe}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "3985"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000540)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000580)={0x40, 0x17, 0x6, @local}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "ac9d"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x3}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x6}}) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r4, &(0x7f0000000140), 0x10) (async) sendmsg$can_bcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x800) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000840)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000001080)={0x4, [], 0x2, "9dc8a5270797e3"}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000002180)={r5, r6, "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", "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"}) (async) 6m41.622569296s ago: executing program 2 (id=1098): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000002, 0x1010, r0, 0xf5ce9000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x1048422, &(0x7f00000001c0)=ANY=[@ANYRES16=r2, @ANYRES8=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2037) write$FUSE_INIT(r2, &(0x7f0000000040)={0xd, 0x0, r3, {0x7, 0x1f, 0x3, 0x10400}}, 0x50) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000140)={0x2, 'veth0_to_bridge\x00', {0x4000000}, 0x6}) (async) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x7, {0x0, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0xfc, 0x1000000, 0x0}) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000415000/0x2000)=nil, 0x2000}}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x700, 0x0, [@sadb_key={0x1, 0x9}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @private=0x80}}, @sadb_address={0x3, 0x5, 0x32, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x58}, 0x1, 0x7}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000000), 0x4) socket$inet6(0xa, 0x80000, 0x2000) (async) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000100)={@empty}, 0x14) 6m41.409565396s ago: executing program 2 (id=1101): sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x248}, 0x1, 0x0, 0x0, 0x4010}, 0x800) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0xb00) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x13, r2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000280)="c06a9c0a049a01b8dc994875572edb297601", 0x12}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001340)={'wlan1\x00'}) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001380)={0x20, r5, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x67}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x282}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067", 0x23}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454", 0x60}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000002780)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/187, 0xbb}, 0x4}, {{&(0x7f0000000700)=@x25, 0x80, &(0x7f0000000d00)=[{&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000780)=""/90, 0x5a}, {&(0x7f0000000ac0)=""/83, 0x53}, {&(0x7f0000000040)=""/25, 0x19}, {&(0x7f0000000b40)=""/153, 0x99}, {&(0x7f0000000c00)=""/216, 0xd8}], 0x6, &(0x7f0000000d80)=""/73, 0x49}, 0xfc}, {{&(0x7f0000000e00)=@alg, 0x80, &(0x7f0000000400)=[{&(0x7f0000000e80)=""/91, 0x5b}, {&(0x7f0000000f00)=""/130, 0x82}, {&(0x7f0000000200)}], 0x3, &(0x7f0000000fc0)=""/194, 0xc2}, 0x5}, {{&(0x7f00000010c0)=@nl, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001140)=""/201, 0xc9}, {0xfffffffffffffffd}, {&(0x7f0000001240)=""/161, 0xa1}, {&(0x7f0000001300)=""/22, 0x16}, {&(0x7f00000028c0)=""/90, 0x5a}], 0x5, &(0x7f0000001440)=""/26, 0x1a}, 0x81}, {{&(0x7f0000001480)=@xdp, 0x80, &(0x7f0000002700)=[{&(0x7f0000001500)=""/2, 0x2}, {&(0x7f0000001540)=""/81, 0x51}, {&(0x7f0000002600)=""/184, 0xb8}, {&(0x7f00000026c0)=""/19, 0x13}], 0x4, &(0x7f0000002740)=""/25, 0x19}, 0x1}], 0x5, 0x40000000, &(0x7f0000003700)={0x77359400}) 6m40.968343131s ago: executing program 2 (id=1103): r0 = syz_clone(0x2c9a4080, 0x0, 0x5f5, 0x0, 0x0, 0xfffffffffffffffc) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000002240)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f00000001c0)=0x40) tkill(r0, 0x10) bind$ax25(r1, &(0x7f0000000000)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) bind$ax25(r1, &(0x7f0000000100)={{0x3, @bcast, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r3, 0x9, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x32, "7f87cc904f0c1c2d4ab0697e7879b82cd0159586e2a2590ccb7c8c887150bcc19ada83f9309f132e658405396dd406201920"}, &(0x7f00000000c0)=0x3a) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000180)={r4}, &(0x7f00000001c0)=0x8) syz_usb_connect(0x6, 0x24, &(0x7f0000000100)=ANY=[@ANYRES8=r0], 0x0) 6m37.884197271s ago: executing program 2 (id=1125): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) writev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="bb", 0x1}], 0x2) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, 0x3f}, 0x1c) 6m22.758122462s ago: executing program 33 (id=1125): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) writev(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="bb", 0x1}], 0x2) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, 0x3f}, 0x1c) 2m35.354400991s ago: executing program 1 (id=2147): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@dyn}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@uuid_null}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@uuid_off}]}) chdir(&(0x7f00000000c0)='./bus\x00') (async) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) 2m35.229950263s ago: executing program 1 (id=2149): r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000880)=0xe) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x30, 0x1411, 0x1, 0x0, 0x20001, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x30}}, 0x0) (async) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000000000086a05ba00000100000070000000010902240001000000050904000c010300000009210200080122070009058103ff"], 0x0) (async) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000880)={0x0, 0xd9e2}, &(0x7f00000008c0)=0x8) (async, rerun: 32) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0x1389, 0x70000, 0xfffffffe, 0x7, 0x9, 0x65, 0x7f, 0x3, 0x5, 0x4, 0x0, 0x6, 0x2, 0x1ab, 0xfffffff8], 0x0, 0x1}) (async, rerun: 32) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000380)={0x2, @sdr={0x31435641, 0x2}}) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220d000000075bd31e2da2513ba721c06c5700053973de1081168e"], 0x0}, 0x0) 2m35.150643112s ago: executing program 1 (id=2150): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1abf0737765c88b0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0xfffffffffffffe11, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[], 0xe0}, 0x1, 0x0, 0x0, 0x180}, 0x0) 2m35.068634433s ago: executing program 1 (id=2151): r0 = socket(0x1e, 0x4, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mount(0x0, &(0x7f00000002c0)='.\x00', 0x0, 0x2000ca6, 0x0) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0) (async) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x3ffffffffffffa2, 0x9200000000000000) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async, rerun: 32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async, rerun: 32) write$tun(r5, &(0x7f000001f880)={@val={0xa, 0x8100}, @void, @eth={@broadcast, @empty, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, '\"\x00', 0x0, 0x29, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2}}}}}, 0x3a) (rerun: 32) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=E']) (async, rerun: 32) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x181140, 0x80) (async, rerun: 32) recvmsg$can_raw(r0, &(0x7f0000000600)={&(0x7f0000000000)=@caif=@dbg, 0x80, &(0x7f0000000180)=[{&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/177, 0xb1}, {&(0x7f0000000440)=""/140, 0x8c}], 0x3, &(0x7f0000000500)=""/236, 0xec}, 0x10040) (async, rerun: 64) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) (rerun: 64) 2m34.655660224s ago: executing program 1 (id=2152): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x82e, 0x101, 0x4}) r6 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f0000000440)={r7, 0x0, 0x0, 0x1, 0x8, 0x8, 0x0, 0xf7b4, 0x1000, 0x7, 0x4d, 0x4}) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000280)={0x3, r9, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000400)={r10, 0x0, 0x2, 0x0, 0x0, [0x0], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={r11, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r12}) close_range(r0, 0xffffffffffffffff, 0x0) 2m34.492381712s ago: executing program 1 (id=2154): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) (async) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) (async) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) (async) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) close(r1) (async) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r3, 0x400, 0x1) (async) r4 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_NAT_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x4, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}}) (async) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) (async) sendmmsg$unix(r9, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="d8", 0x1}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}}], 0x1, 0x4004080) syz_usb_control_io$sierra_net(r7, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_connect$hid(0xfef2d852f64c0efd, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x57, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x70, 0x8e, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x1, 0x2, {0x9, 0x21, 0xffff, 0x5, 0x1, {0x22, 0x36c}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xff, 0xf, 0xf9}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x0, 0x0, 0x7}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x8, 0x6, 0x7, 0x20, 0xe}, 0x12c, &(0x7f0000000300)={0x5, 0xf, 0x12c, 0x6, [@ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0xff, 0xf00, 0x1, [0x3f00, 0xffff00, 0xc0]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x5, 0xf6, 0xfff, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x8, 0xb, 0x400}, @generic={0xd7, 0x10, 0xa, "02b09e3246f15c06c93c989061575248725be2d5b173c239f8cf1e79a42fb0b0872146172b111a11cce84b6529414de0b6a603a73a88262bddc40ab52a74a03032554deee1f6035e4308ecf11d2c5fb909dc8f2155394c8d92d10cc6709da4f3172d78b3f0bedd017a383c09defeb840cbe51bc3b11f694af49070cd49a51639d906d4cbd874c1ef9050a6f9bc02028a0ae51195f958e57314a6d4e73273a6e964c414597033addc4ef56b2d2d601656a20a1d70890e0f53919fb61403b578b415f2c8394a16b7b0580b98fab1e436a72bfca5c9"}, @ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x7fffffb, 0xff0f, 0x6, [0x0, 0xffc000, 0x6000, 0xc000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x1, 0x0, 0x2}]}, 0x3, [{0x9c, &(0x7f0000000200)=@string={0x9c, 0x3, "9cea59c2c76c99fbb38e12d2841c3b4936a65341d9a56792dd85f5ff445a31ba1ab419e523bf9500f768720317b280f0bcbf3a49dab2318a5af14b6ce20853e117a6d160ee25ac3c0102d6bc01fbe588a7853950e2bb0a490c83123be3044c326f56f8825d2072ecc77a7b1ea8ca95b31b60b0828ba09b1744c2c41d809aa3e5333f2b6c623fd75829da950ae91381e461bfb6eac565aa0b99ac"}}, {0xd9, &(0x7f0000000440)=@string={0xd9, 0x3, "d32cbab636d0f3ddbeca0a08c3d3b411d6b1998124591ea06898c5df2a721ef416bee6a5ab1bcee7782209b15988d70bd7c61bf335ea311f12f62ca80efa99cfa8d6dd2d78d9dbac8c03e048898f32d363ba47993632e712964118cfb53c6819c692a9d35bfca3570306c2b0aaafd87bb132e17efd49f0e482c32a06b291e85ef96313cb2f345e91a38552fe4f6a8454badb42de556c2908dee2c5053b0205c750b236ae1c4012164ac1ecb24494df3deb28938b690a58be4426e131b286432342fdb3b9a04a1dca0770734ed0f3f18908f46cf77d2360"}}, {0x6b, &(0x7f0000000540)=@string={0x6b, 0x3, "3b1bab51fd17839512640fc6948c8c3570227e275d2ac43b6d8cb8fe334b9ec9c67f8822178b35d51f9cb864fea2b3ea986578258d1b96ded92080c5834d8b14b01efdadbbe5a2890d4314ea6f466155c7e1b57d0406abb83f8b1f2f74bc5f547d5743ed9b2031374f"}}]}) (async) syz_usb_control_io$hid(r7, 0x0, 0x0) 2m19.498323505s ago: executing program 34 (id=2154): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) (async) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) (async) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) (async) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) close(r1) (async) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r3, 0x400, 0x1) (async) r4 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_NAT_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x4, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}}) (async) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) (async) sendmmsg$unix(r9, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="d8", 0x1}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}}], 0x1, 0x4004080) syz_usb_control_io$sierra_net(r7, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_connect$hid(0xfef2d852f64c0efd, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x57, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x70, 0x8e, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x1, 0x2, {0x9, 0x21, 0xffff, 0x5, 0x1, {0x22, 0x36c}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xff, 0xf, 0xf9}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x0, 0x0, 0x7}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x8, 0x6, 0x7, 0x20, 0xe}, 0x12c, &(0x7f0000000300)={0x5, 0xf, 0x12c, 0x6, [@ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0xff, 0xf00, 0x1, [0x3f00, 0xffff00, 0xc0]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x5, 0xf6, 0xfff, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x8, 0xb, 0x400}, @generic={0xd7, 0x10, 0xa, "02b09e3246f15c06c93c989061575248725be2d5b173c239f8cf1e79a42fb0b0872146172b111a11cce84b6529414de0b6a603a73a88262bddc40ab52a74a03032554deee1f6035e4308ecf11d2c5fb909dc8f2155394c8d92d10cc6709da4f3172d78b3f0bedd017a383c09defeb840cbe51bc3b11f694af49070cd49a51639d906d4cbd874c1ef9050a6f9bc02028a0ae51195f958e57314a6d4e73273a6e964c414597033addc4ef56b2d2d601656a20a1d70890e0f53919fb61403b578b415f2c8394a16b7b0580b98fab1e436a72bfca5c9"}, @ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x7fffffb, 0xff0f, 0x6, [0x0, 0xffc000, 0x6000, 0xc000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x1, 0x0, 0x2}]}, 0x3, [{0x9c, &(0x7f0000000200)=@string={0x9c, 0x3, "9cea59c2c76c99fbb38e12d2841c3b4936a65341d9a56792dd85f5ff445a31ba1ab419e523bf9500f768720317b280f0bcbf3a49dab2318a5af14b6ce20853e117a6d160ee25ac3c0102d6bc01fbe588a7853950e2bb0a490c83123be3044c326f56f8825d2072ecc77a7b1ea8ca95b31b60b0828ba09b1744c2c41d809aa3e5333f2b6c623fd75829da950ae91381e461bfb6eac565aa0b99ac"}}, {0xd9, &(0x7f0000000440)=@string={0xd9, 0x3, "d32cbab636d0f3ddbeca0a08c3d3b411d6b1998124591ea06898c5df2a721ef416bee6a5ab1bcee7782209b15988d70bd7c61bf335ea311f12f62ca80efa99cfa8d6dd2d78d9dbac8c03e048898f32d363ba47993632e712964118cfb53c6819c692a9d35bfca3570306c2b0aaafd87bb132e17efd49f0e482c32a06b291e85ef96313cb2f345e91a38552fe4f6a8454badb42de556c2908dee2c5053b0205c750b236ae1c4012164ac1ecb24494df3deb28938b690a58be4426e131b286432342fdb3b9a04a1dca0770734ed0f3f18908f46cf77d2360"}}, {0x6b, &(0x7f0000000540)=@string={0x6b, 0x3, "3b1bab51fd17839512640fc6948c8c3570227e275d2ac43b6d8cb8fe334b9ec9c67f8822178b35d51f9cb864fea2b3ea986578258d1b96ded92080c5834d8b14b01efdadbbe5a2890d4314ea6f466155c7e1b57d0406abb83f8b1f2f74bc5f547d5743ed9b2031374f"}}]}) (async) syz_usb_control_io$hid(r7, 0x0, 0x0) 26.673147217s ago: executing program 6 (id=2682): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000240)={r3, 0x2}, &(0x7f00000002c0)=0x8) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0xbdb32d6f039bf3a6, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0xffff}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) 26.601769167s ago: executing program 6 (id=2683): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x8, 0x0, 0x0, 0x3, 0x0, 0x16, 0x0, 0x50}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)=0x7) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)) writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="976005b75f71900eaf8480928f63631a3a7d321506a6858fc3dc227de4014241b1fe97f45de1f53bbb5fe1", 0x2b}, {&(0x7f00000001c0)="bbabca6da0", 0x5}], 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r7 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r7, &(0x7f0000001880)=[{&(0x7f0000000000)=@in={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x200, 0xb54, 0xffff070d}}], 0x20}], 0x1, 0x10) read$FUSE(r6, &(0x7f0000003480)={0x2020}, 0x2020) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$sierra_net(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000005c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0x3, "ebdf93"}, 0x0}) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r4) sendmsg$NLBL_CIPSOV4_C_LIST(r4, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x64, r8, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x50, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa320}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71a37318}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xffb5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a139701}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x15558f7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x182ccfbe}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d3c4bf0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2b89}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6a10}]}]}]}, 0x64}}, 0x0) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r4, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0x64, r9, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x310, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2e4, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}]}, {0x2c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x2a0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xaa, 0x1, "826232ec37be0e931f60641477f2043747b90d1a473f93ea492260f357bbc5297db3ef216e7cedac145a4295eaad6ba248276d1bbf7ece323a2c3c260b81aaf759510b47d355c693fe9e9bab54898e43e59185144f63f468f8c3b0cd3d819ffc594a6e4b65296db0748638b194947144ff7d507bea7d1c8700b0408c5ceb95bca81202686bf5e8201cabbf15815a4f1e7c51b70bc22baf492ab01409d9548b6920753d97b4fb"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xe6, 0x1, "8271c177e1de5789e94fe03a7f1eca97c21b287f29b61730bc3818c5017a3baa34be3637a0b34457629017fd80351d66bcc10a3ee6f279e0bf242b0c1601937d84ee83aded568fe46656f9840cea8e95132f47b3d009c400d64c52589bfcc55795cd21320f57a18bca8697a657bd30e71b34d8843c5fc96927d462d1b30755a070b7597a69215ffb08475cc8226088fec719014a2214c6489a647facbf29f54f62f47e4576e004742184fc463694a3db99dae165861085ce5535e1eba05cc44a2bb1082a2ea714ee229862d1c45c5109a7ec1f4c11df3b104d9efad54ec8efa8e091"}, @NFTA_DATA_VALUE={0xcd, 0x1, "66c2e38994d7544db4cde3c80bd7c1f3cc33eaeba7ef31fb834dd1632e1dab1edbacb803ff73ff4d5b7be434e6f38d5f7f4b78dbcd35d7ee0c7fa3812f7bd03e5a034a6d82081e04608dfc60ae4a63cc50a1939fb875ee228c26446ea3af625a680c1c92c3379150ff2d3a3daca397a0f24407c9ca526977b1db47634a71a16c9c551810c2ad7892ed9b5320bd1354d14d41b7f1f665413d16d68aa72dc89e03e8c2f6b0b7fc0273e1c745d3ca033a6c97fc7438ea606d7327861c94fb7ade946664fc77eacbd426dc"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x338}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r10], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYRESDEC], 0x61) 26.328984732s ago: executing program 6 (id=2684): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0xcc000) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r1 = syz_open_dev$loop(&(0x7f0000000000), 0xf01c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x1e, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea8a1d91bec8d4b5a6d80b8785d9600010000000000000094d75396dccd0ff600000000a81b00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x1]}}) fspick(r2, &(0x7f0000000080)='./file0\x00', 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0x15) socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) 26.189261266s ago: executing program 6 (id=2685): syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000000)="1c681411f7ab96c0dacc6a3c24465b016f64b4c00b5f7c691cb24cb8000000081a0000200000008ba3d747ab00", 0x0, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011001d8793910d11235140000010203010902120001050770000904098000ff0401400eb86fb73e54ec2ae9ca02c8d03edef27ba019c06395bf158747b208a2ad5f4a7c"], 0x0) write$nci(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="51040300d99f0a53c585af6b1d2048c70822ae652078226122577c5c8da6c42c89cd90bcee86c38226006f90dd89b3862e0ceffbfc354c1f3f44db1c0fec4ee3d0194652aee7dbcf7968c336a69ca2e23c7b6a"], 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x10004, 0x4, 0xfffa2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_clone3(&(0x7f0000000280)={0x4080, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x58) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x34, r5, 0x1, 0x70bd30, 0x25dfdbfd, {0x1b}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x80) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000000)="1c681411f7ab96c0dacc6a3c24465b016f64b4c00b5f7c691cb24cb8000000081a0000200000008ba3d747ab00", 0x0, 0x48) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011001d8793910d11235140000010203010902120001050770000904098000ff0401400eb86fb73e54ec2ae9ca02c8d03edef27ba019c06395bf158747b208a2ad5f4a7c"], 0x0) (async) write$nci(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="51040300d99f0a53c585af6b1d2048c70822ae652078226122577c5c8da6c42c89cd90bcee86c38226006f90dd89b3862e0ceffbfc354c1f3f44db1c0fec4ee3d0194652aee7dbcf7968c336a69ca2e23c7b6a"], 0x4) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x10004, 0x4, 0xfffa2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_clone3(&(0x7f0000000280)={0x4080, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x58) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000000)={'wg0\x00'}) (async) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x34, r5, 0x1, 0x70bd30, 0x25dfdbfd, {0x1b}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x80) (async) ioctl$KVM_RUN(r1, 0xae80, 0x0) (async) 25.224477563s ago: executing program 6 (id=2690): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x7fffffff, 0x12) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) (async) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x1, "304b384a34a84e1d192bab294bd00c1146df28881b55b4b36dc81ffb733182ad", 0x2, 0x100, 0x4, 0xfffffff7}, 0x3c) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x10) (async) renameat(r2, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, 0x10000009, 0xffffffff) 25.079606309s ago: executing program 6 (id=2693): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r0) (async) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x12, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x12, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) r2 = syz_open_dev$sg(&(0x7f0000000200), 0xbfca, 0x84c1) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000080)) r3 = socket$can_raw(0x1d, 0x3, 0x1) write$cgroup_subtree(r3, 0x0, 0x36) (async) write$cgroup_subtree(r3, 0x0, 0x36) syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b5e67420ac0500000000010700000002220001000000440904770001039a02000905000000000000000705e37e1b82e6"], 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f0000000280)={r5, r6, 0x6, 0x3, 0x4}) 9.889688319s ago: executing program 35 (id=2693): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r0) (async) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x12, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x12, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) r2 = syz_open_dev$sg(&(0x7f0000000200), 0xbfca, 0x84c1) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000080)) r3 = socket$can_raw(0x1d, 0x3, 0x1) write$cgroup_subtree(r3, 0x0, 0x36) (async) write$cgroup_subtree(r3, 0x0, 0x36) syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b5e67420ac0500000000010700000002220001000000440904770001039a02000905000000000000000705e37e1b82e6"], 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f0000000280)={r5, r6, 0x6, 0x3, 0x4}) 6.770673431s ago: executing program 3 (id=2759): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000002040)=0x8, 0x4) (async) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r1 = syz_open_pts(0xffffffffffffffff, 0x10000) ioctl$KDADDIO(r1, 0x4b34, 0x9) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000000)) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)="81cee23e9cac80db89", 0x9}], 0x1}}], 0x1, 0x4001c00) 6.705235569s ago: executing program 3 (id=2760): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="76e61c"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="002315000000150582d4c4ec96d59f2425b2edde67d88e092929e6"], 0x0}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x4}, 0x8) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.264250522s ago: executing program 4 (id=2763): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000001c0)=@get={0x1, 0x0}) bind$x25(r0, &(0x7f0000000000), 0x12) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000c200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x40488102, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1, 0x6}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000004000)="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", 0x2000, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x28, 0x0, 0x80000000, {{0xffffffffcbb05892, 0x80000000, 0x1, r7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x90, 0x0, 0x6, {0x0, 0x1, 0x9, 0x2, 0x6, 0x97cb, {0x3, 0x80000000, 0x8000, 0x7, 0x9, 0x7fff, 0x9, 0x3ff, 0xa, 0x2000, 0x80000000, r6, 0x0, 0x400, 0xfff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f000000a200)="c1fd43b601662701272af37a7deda072caa09faa11b0a4ef2825e87f09fb6bc3dfd84ddd853b18203bbf08b1af6066c78b4714a789a8f3605f5920e7afc5b0a04271cebce72a797abd5b9e4a44fdcc150e6ef0e8c3d4360e74275818df26243f28cac3d84e264fd0c77d4bccbc466e7244b247d9dcee026df89aefc958d84a55d4d6922d96ce0349fe28efd6b83d15b7b08143a721c4a677b72362a49eeb15ec5b5f8569bad585e30a62ab149e7e4c7f49af9560fd52ea5730135dc3ea3f6a9a3ae6286e99e1520a43b8813ca6aad1adbb30b2459f90699e2ba3a6335ddcace3737ed8f5f21e027ac2b224389bf0c8c005ac8d8c3ae188679d34da0a2c20a910487d3c91b18770fa5ee483a3f09b882960f12e7d2eb9015895ce80b37f74a305a50deb146b1c3430f31d28e6f827b9c7070bc880d251ddb09e0e70a0512ed2600256332c43a5deaecb01f089333fc3b6721f6ed5b41f9971b7c63f57b5afa8042f5beb1ac1274676dc5406b5828247123bb7be795baee59d779bbde227c90d0a5d863936d434f2ce7a45f9b650600f32827b92e2d828915f0411f765ed82dd012561ed29b09950b96f8e490f1448dbd5e45bdc92a2a36aa67e5e9396b6376f82aa6915eac4144a102de786563e4482f0917698bc70776f8c7aad3346e18ee295af54f3c1658f9b124116a2fdac79353b095cf667dd941c3cba141b3ac8982eed42e7db649c9d49a59378216bf4323ff4c2f2992994d4144b74866a2426e19a2dc8dbf4643f97a214fc9c448512316d76c4116c3ae600dfb98cf85472da661745b638438dbf15d8dd87a8ba35205a65ba5bf79cf941454f8c788dc2eeccea412add734798c82e9c86122a91dff778edcd309c05fdca66176e9bc4d410b0ee4627eb889443b574ce205c7f4d6d428e909952712ec3dfc89552279b2da87b010051a451377a0c51a34ebba25c3b62ba98eb6f1549b0fee6a7c5e0c7a72835388803a0a8342bb9f2733224c92a50dd25a9b335f243f2d8c68142aa1db1de2f899a56c623a32f8a74c16db56983eb83f6469316f2fc14860c075236a3ba40e8c265909b8fc6b03c6378269f6629bab81418789cd748d8b786f47ab8f13b0caa5ecd79dbea61330be6de5804f5c211cef78f555e7b2093f4a836cdb8a2cfa261be14e0f59d075f58e97ba16cb130f062a2261df244c57d6f477d761262b2e755c96bad3898894e80b23fae71fc31b2895513a11b0cf07551ca87325592dd10549b7d92da1cb07119fe970b8cc3aacc386ab64d32b308679593256d2fcd1f9e9b15ee93ef859e7268be776053182460e83fb873711226ec9aa5c35b15fbfa12ea0abfc7465b300bd8445c831ae77d2aab7d4bc3ba5f218fda9e90eacde1ac5119eb30073a6f291727cb94fc87a3d3013f3ebb1cd259067c571bd3c57eacce716e61f86bf4041bacadd6c676e17fb3cf89c4984aec78216854a60af68533fcdff12897c3e1b2c10cec019722623f477a512c4e5eef74a6d1ab7a735905373ca3a0b18c3eaa523c86238fba77e45aa07c1b96fa1e3ceb04e5f4742536b687ebf989918f6805cda9611ab9ed10ee33cda71a95be2da0d2c21d2295fdb334dc2057942382dc7d0f70300df3df84cf9a18f042c11242a347569771f9b82404e13684324fb06d867641c87d6d70ad15e90240f901d04a8b8c7fdfb8b84aefee1606f14a2a6995e6b8aaee1b372cd586a6daf28ad7d8ef644c58fa72f0b2f847eef72e18f1a4374c4fa3d604a9bfec6a1a4fefdfaa848279693208dfbc1dbb97b44c4f034090606e0ad312cdfb6a8f68dae7312b064c68813eb41992559ca63d88a8e90711c838f220a4da5bc7d82ec0af83da059bdccdb524a59ad26e43413f131e7703eb82158293a331456ce728c28923bf9ae644a331a667c2932ae1f11a9f9b893f802796ad029c40496c9bc49cdf41a40da1092b404da660e80f33a6012a407805e70f9a180105cd0401ed01a9f6edef4e2479e1579ea365d843c197279e3c79ae56a107dfaba6af80ed9a24d535d19827596ca2b14bf4b110fae4820fc8d0570a64ae08e315da0091f766bceb1fc990465ecb84a2d72efcb9a269816863b72f8d0869b20c14bd72f909fc3ebbf2ba2f98ce3fd7eb54b738692916eeb98ab9ea04ce3e740817dc9ac6561c71d3bc15358ebbb3027294f66eb890577f8a63ecd23beacd93c3b1498d5eefd8b68ebab3536653d5839713b07f79ebb2a6106c009cc535a2173cde3ccc65676bcae513145db5bf08546e8810fb4d193266d491fb9121935138a74c52149959a0c270cd6e244dd7cb140fcf6bf0e7536220f798bf32cda564ebde025a92617f3195e549a491a45446ff0ebfd3b047775af339e59a8da0db6223339325c6f493baa5f2c71b5710a975def3e3919a24a52351acc12e5a2ab6c171705bad0e6afd0ad2b6dd6feaedc9924fdba533fc958fab9a980b775eb4c93a499413073cf09826381b8054f9f09f4a0dfa63ac2f6cb22d001ff277ec7f493bc54d2d1d34a6dad62cd7bccab2ecd419c90087f6945311460b87daad605ff8519aba1d8311a5e565dd26655577aa13da31e01cacbb7e10e720a486e9cc450b8a21d23aeab42838d81dc05f5be0474ab81b806fe71b888323037f3262179e451f765e419bddf7b7a99b40bcc226986efbd3765b66e56a3500de4b18b676361510bd35b3a9c6b8c08222cf7a73c4cda972190f839c2d01a4c171a803c0a77d2769c892b2f0191d2fa01d7d5ca53573e47e93ca9b56b8f0d684d5458d505ad8383f22e19024da06bf6abf30ed663cfb33e202be17bb951e9ea30cfcf65675d2fc64aa51e07237fe8391549185fac5822daa92e73778e080b1304dd757f9035092a729b9a0122d1c07d60336f18a9e46ebeced1041de2e2e8a5de6f4a814d5179bddfcdeda88888cb9ce322a516af3be2b7cf371e9193cb40e66cd41dd94e37f14c6e6469e8fa6c57a4fa3125fb6819b84e276768a7354dd3e2692a77a4a60af85bec0325d0aae72a5f4f7bf9468f1d35147910a55af546e4e3634fe2d8efe116601bf84c0e9c4d442ec8f99fe6c1cc90b99a8d1e53322b26b66928fd01738fa70c0aff84b4f02946c6fa684bd617667857cd751a3ad3d324f9574af78eec6c8c51c25e01cb0ef129199f5a3b3b29e32a34c4ef14c810c2e69e06158f02033e15f1ec00419a91c1450338956a188fac918fb73692491baaf5976ca392c139ba0e551de260dfd6c733b572215f2af0aacc5709b0d4a3b36d23f5882c5644bb455075c5c48bd50492b395d14c36393019fa9eab8a211d71d173754663ea2af1ebdf9751006792609d4db47824d95d68583c922c04af3cdfb58f37b6f958a4b35cbd74a30a393be192fb46bfe4e722c3634c94fbf4829f25dc0b8b07cd16cf4c7e924eb02ae8d675539d32b5d9a54a43811eb98e2db317c67d5bc62901582cbb128542d6be3bc9a5b5b8a8827f2eab15e82b28b411edf67d786b76feed9e7d5ffbc86fbdb19ed80a4f5dcebd631719f8734c398938047011a251370e40d5929e9b4426081029b1339ccb08bb0dbcbb4eedd53792e43a046abc1d5c1dc8c1749052233e18e25593daee94f77f327de61867f1e791b797cc5ee43f8109cb0654d8742ece8512c322442f63dff88702ba047e8370a1b7304536ee7cf465a0a19d965fd03543b991449d6a1a98be5ec3867314c688c5c487e59a6bb05291fda479827172bf3db615c20ea022ff7b16020299220b7c45a7181c1eda48c9a5fa7624843d112c52d99d0b27e168eeadbcd3c60b3f366175decc8c91c64a0a16d3a2e38244dd8d2de806ad741e2256075efcb0466360acaa3f65611789a821c30a13d4b60e44173be9e288dda7d7aae2f8341d9a85104170631c942eef22c10e903bf70b0ed36831d536a0cd65c11a209e37a76f3f54deb326735bec5a532431a81f303af5e9d03717a93a3da18317c459aee8db08b9f0b3331d29770fe7fc4266c15a4294c9c435a38296cd880dcedb34f63037f2a8e3ada9ead3e52abd69e5779905f82a607f70e351d2167bf1b599cfb9314a37df876bd5f2acff82f1773c512ffd308179e47b26946ebcce112273e12895145ec88c701269c93f32a5ab2bc16acd57e997d140d18c2cbed2601a05ec33a63e7edbcca673f71eecab66af5287d7d5a1dad68771ed612d29ef8ab23ef0211b4bbed6f981cd24d652f355d94f6003b01cf3d803a6e36b470402c05816aa2cd747f293300bbe891854d932df7809c7809c2cc3d06c693981e7bc21e89aa3ea8f8829c85185e4ecfd2e293bfa2b88cae2c9e4722b9cfee01911a502d59360532528661eadf2150e26a2992871f562d6fed4a36867b2521b1778c4ce955f5980b9dd9ede42fc4a1394491ebf1c1fb0d794cb8c28b103d76b2e70b0337877a222d7f3cd61f353baf7bc9e23d80f8e5b4459937d75f869c179dd9b948a70b9ba37386532790bac12f2f342fc4f2afd8a45f109331d5daf3344ade893029e322e8b7f3bdb5a49987116b31b2bd6d5bab789ca061ea42f7647c88488f734150e161e5aea78639c5bf9c2fb88da321cbfd379b38cbe6e14af979f238685e2c0ff51629cd228602dbaceff8a214cdc66528cdea114691ef619a8c9a0f9cdb7e08c5bcfc2bfd29e39af38f5db4821c648cc3d976cc455a6e6498c92511b407f3349284901562a912c5af25ff792b9c6c5dfb73519336c7d4a87e49debce7a441b7a29706173e4e4e8dacee63a06ab85dd359b508bc8a0f7002832fae10a0a38efaa475846c4205aebe777334788c3e4652086e26dcdddad991b0ce5256e113bac692d442f524d7e292b86eaf0dd8380ccd78b1489dd2ef6beaf2eb9b08b50bb2a5ff3ba8df3b226baf79a0739d8a60cf815cb347399ac4adb2cea533d3f0ce160a563f8d401e5a6100578e4c8178a7e70663e135edc645cdec2f0588fc99a0cb60dd8788e02554ade370960ce562c210e826a1eba767a09b10f46ebbe6c9166e24286331d2ff025c57a10c7b64c506d0a68642171ad965a001700561fcac2e3f548fd58d32bab5f38b36e62f5546129cea35ce856052e3e480fc639640a5301dd700c8e8d0bd6ac790910fcf2b4f159cc1531aa1c9e37b541520450dde638942081201ae8a580f28cf50530190a45f45468753a122b364be7dad79044ec8b9977d583bc0ac3ec7b9fae192397ce8693310f301c18c2cab5208b369e63c5ac18d0266834e218bb71f308c2c2f2df4a6ccadb3788860a2c733a9252b877ea1c1e849a38a328310bafae9614a6e161170c6fcbe9bd8c4177de1fd18f56805c91fb382aad767891556ff8e1b5f3ab8c18b4fa3053c981c12fa2ea017bb7596158ca533d0dd95a95d0b392222609f6ea336711a9dc50393bc41fac0d429540ad70757b2086bf1bea0132a609ea0bdeea0cef93d8b2a0d59189bffec05281e97b4722291005e9ca7e755be9070f405ab0d6c9546a5ebda2e62adcc621c2b1f6b07cd1e617d50469ef2c71647a47ef98ffbc71505e188cef3e5c774c0987664b6989794d7ca186804ccc6296da3adf22feb351792f1a9cff77413703744bf4f21212920d6a8fa1800da7a38fef7160a50f5b895e7b76f3fd830fcb9a25f3b3ccfd082a1712237e4ca665085aa1c5aa413bce813f1b7ca66105de94babb7b4a05029cc3759d00191fd9bfa0f996cc703403dd6ed2b33f2743a788041f279b767efc373314edfae1bd33f7eaaa7418a59fff7e40d02e618172f6e0abe08c855348f3cba40c8592a0521ed1e41524f20abccb2bf0ebb933e59b7036eff5a66279d578e6b2fd6c4140b33adc67f7083110d815ac55b4833ec0504488265b3ff2bdacec17c91bea9d6bdd931bf056d6e9790e472d874a5a3946b200493c9874d057aa6be3a1ca4da6fbb88a9d853aaa7c8ccabc83582caa65078bbe7b04625d139ed9860080d185bd9798d613ca3014713eb9e36bdeb73f14ac3fc7b2f8f594404f56dd937c0a7e865fa98e858cb0af661cbe12f15c928c4c45a982e24cd322320a96ccd54656b2c7876a5d717e42d3df13189b95ddc2b5a928dbda9ee02c30352045d02cbd854af821300f198b1ce1ea8e45c969020e5c7670fbd9b7227cfd3c809fac1df2eb18c199b27e969f32052376b450003b7ff6332ee1d9fce1b5947b72575ec6541b992fbc76f0e03fc1bb9a0df5ee3de0f34125c311d2ddb67962cf9a8230efff82c25c896621082a587139e997e0532962e84ad697a1a2b80d997c2a268ecca8b7d1095530b332ef368270bf31a75b777a7cfe8c8d324a8c558d3c65f801deac6822842f85f10a641b71ad7e5fb05f64eb3033507dc3a2e9ec02d667ef36c551f69c438e8b6c3927733d83e94f035ef3da230b759df5f5d1964815b176478c4ed94402dc8265e589171df165094a2e4e75614fc6febb8484f28ec8c1252b2d933852573926837e1edf9da0da3f91697b290c3ee5a44fcab3b10095b78b5df3701431cab31750e211d442a77dbc5e2d4d0e67bf329f9103414abd4f3879511375c8800f52f8a17ae6887214bf8634bd99075ab073540f04ff675d32190a3d1152ceee32e30719cd883a82185f89f071c02df443cf7046dce8a6ddc472ed63945faef588acf57985c7ecffa438f5427fb851ebc6a4c577a33895a8fc4628286a48d3bbcda1b769aa3194869e148ba457932fa6f2e4640e2755940e2f5a6a67796b5f88ac10f389b409c0c57bd4bf0cbe0fac2fd2f58ec498d19c43952e4522b51931712eb4002b7b208c02c4e06df99fa8e93e4b9e8b0d7a57e63aacdafb19db0fd422f8e89d1275b49963bd82b490f9e4d24cfe9700e98c73b31fdcf7b7d30d73e9bf6bd86439dc8b63171d53ca7caa860c60777436099db544164d4e4a81a483ffd5ef2980110f461529c057c40f2ee63b71a8eb2d87919726bda25a8fa2f242d3ff7bf0726d8a11d141eb87d2733f1faf456f2eccbe4c3a856702a80ba7e36cd8ef8e064e16e61eedda4478d2edaf0445e2247a76e25b4b5c68720b87bba69b4171983d95a5a764f42fa6f23466096d9a097edf84952023a4541110456b93ea558c2059156c287fc6cde7c74abd90ec539a5f43c2a641b1a34cffa2538ba565d0b57513b8c1b3df541d02d6d5a0aa2f96200dbbf64ab7c0adb868cce23ca607db6d6dd18f956185c983a90c8b4a7ec630178376ac400c61c77fcbacb979e2e07115db8a034a00ffb136f91c0b16c6d796f524f9ce6a0b72c378c8939b56bb83ca0f3d09da2b82b4d3457b568878d019f54f9cddd514a601d4edfae582f1a2674892bacf6eaba66124c797e1ebf91e1b5f12e520404d213b12770966d5c5f3435169f8867faed0107d2cd4cf0638e4f1c488122da7516820cc3d12cdc9f663778455352d2be1d8d3cd611808304554bde601e4ec4c9aa50ec22648b12f45c8d84bdcfc85f9421d5aa5bcb3ab00c72bc1dea95ba0afe254df5d8b40d53adf1d4fe1dc3744bd486e3eb14775f4f4c333f751975a4a8b5bfa497850633aff3ff98deb53d1b515a08c4c474bcce46149dfd5bece51d1dfb6eaf593f8ee037404a5ce5edc2887006059cd3743448ab977899f10540b5a5eac1b9d4346654e4eb0200858b5b92525399a87859859269d3b0fa4c2159dc807548368ff701076606378b44cee2839f05ad94f659270af868cd674b44729bbb8eb2f697101bf4fb4f96d07dabaeb5b6a1cc884423fcac3d3805bffb3c8de3e801d641436ca6b1f50aabce4c7b3b1a24eb6977d5a8c84d6cce8ec9ee93d3062a4bd78ff916fbba7ab228838bd61f25759c6ac8650adbe2b346e65681dbafbb934358ca2b1b854bf42f42404a15caf99b785f132b9a20413b2d9d353220656ae271883ca9733430db09b5e8578e9d4fff032b0ee792f429791089d93876a33665a35c420a0686c125005242551df27673e0826a1c38bc028c104e0f958ae1ffb2d5221fd1a36e598065eed6a449567b41c027b6faa461d3aeee8dfb6285661af7fdcfa484fee654b633342eb122fe72d5d68ea4cfc988cabb0df39b8cbd064d489fcbc90bf313f3a29797d479a8fc12cf5b9ead0907a2dca568bc0f40d0fa4a9c3758f9bfd1ac3662a9f04260ef0d2b86a02d23759b210f38830c4a224649186b6e4b87c6b457217c86f502521940caf1e5b2eadb72951a790c94dd74b929232947b01cefd5a1483e127b1b6d216317b581635f9cf96876af837e5f88cc38a46eb2fb6cd7fcc6fce1a264167b86723829ffffc413bbf3b8343154944875dd6219a95418314b1e071dd59d0e96083e02cb8778069ed54137ce98bd702dead8fc74992d7743d1450faf7de44c2d59ff2dd339b80d344902bea5b3a564f01aeefe300165bf3b00d811c7ae866cb1a0a1b87400c2941841cd2d6953308f1a963f1c6d4486e7e45daabf0b066ad8884f4577534d3c9f3d3f3bbe8a1a3088d9b95da1fc901573e26f5b86c7a868429b9b634c9e35dfa1ced7bc1b77a28716700e501905c9e81e190241e0edbf4f894aee4047c5b5fb58a3db4afaf76790690fdc1289236fbfc5f6cff540eb82de8044d17658fb054b198cc288cc43aa5d805a51cadac3e75c8fd82ad015a04932cb6f6b53aa4e8d9d84018ff8db0f756d6b5db4e06a689b52fe8471b9230c2dd14d042c1fea45c3d2452351a4222421366610d80785f7e47474d4ad58116313813d4db3176d93c4e29e5c7562806879ddc75b9cfcf38d6aed015c0f4d52302a51215187bfe254d6065bd142cc9b9e03f32ebc9686ad0d0cb3fcf0afa320a15f37cf591600636a4ef84c756c0d42ab98bc2479f0d5d230359f622447101844430a7555a4cbc702b55a4a6ed964cf399a1a493e40555f622da1643073a786a3425d95090b9b0e20521187e9e20d35f4e061e6201e67e844d88457f751e5519dd30df9251f1ce2836e0bf61eef8fc6ed22e4887186316566278bec46af3823ed53e3e18ca5741124dc53cadb5ff0846cc1c6b9c072be6dea187e8336eb6b6b7029ef79ff3b2999938cc59aafa1618fc4556ce3c81f99414d5d79538a83ee9d8a9ad0b9e57060d4be9c53266f418455d760f423a1642e9edfccede29d21891d7421ad0f1cefe472d0ef84965575419871374727bf5f1dc72057a18ed4d7e0a2ddd6d18beb2cc3718609814c2968f27465b00fb4b4a64359629722320583a05644693e6fcadde0efc12e66a0c8e48311f0550ab8fbc1556b69bb2a5a0c03f1a59d67046d7acd5beb9f7f9ae6eb18580431624d63ffe294ea5497a65ec3891f4c70b26b7b17a9f82145e5d5156d6b3355ad249bb66168bbb745d00c40d6ef42d52a032cf62caeeaec31f4c85ac403cbb0c6756953f0ddbf79da0cfa6ccc1c40de43bc4a10a700b98322e671225e80e663d30192ff5611c44c095351bb69a4e14c11a3d5b0b53e78954699760516134f3148e71a2b0bb04b24bb1a2c2b503f56249e0a2c638ff40e7c2c7d50ef7196fc9893e18c0ac3fc5a4c0d23ee08080f984dc643854b54df4a638af29dc5df79f905c4133ce263f3b2bb55fa7d56fa82795687e6ee5c68cc13d71e44367ea8670409cf2231990cc6d06e5aae2fc3af1537b33b42775b40bba3aa417016fb9dd89f90a89196c104017a68f7527b8b958e38f9646832a7790045fe394ce41bcbd1cbcbe52cd7e56cec7b2856e448fa5d7e837798b899f05a2c2fbe6d9f1a7b193bbf7c70444d6a37810d4d19d359f9cd6b8a6ef2230b735f8bebe0ccec94e44ed95234bfa4a36a2f0ee9fd5ca73d697344d28436e0fab81e73f447bb144a70aaf96acf6ff52c4737e7a4debcd285bdb54e363d842bc9a7d180c16f010fe4078b41c4c3e565c3edd64e61f995ab0086dbdc026dc1825b8c45ed96edd8d2bd9daa699e5da333274d6bee2097c004462848cd16849f95cd2252c4c87058a821ed977ed751b77b0a8fc0966bf3a30c26d49f3185782a7d314e89f039a15ede458538f1ada8eb836a36bb5d82c402e3feebd37e7b7c667a1c82edc8720072789fa5f388039daa731ce74dbd5aa8965b7ee99f6c271035239ca1c34cdc3c57bd8510dee08f74cda37095b1b098997998fa267e0be15de474b2c737936cacccb4ba44112570bbd13f870b55f3763f77724b586d6e26c3e72b20bb13272f2ee331bcabd4a79980a8d2965c20da2a3918c855215fecce95d29bec58f522d3d6d2852c4ac080fffcb3ee7fb98591f99b7cfb7bb124cc20078030756aee8fd284df06cd5f07c13fd56e5381b19e0a3a9f412a8d27428cb6af0078e4dc8ce4836630360a5c3b98ff5e6cbac1d9d29de9838a84d4722ceea3765be3df9984cf139770f3fb986b9cc9185ab787f54be33d46c54de74d94d13f74ec70cfbe1605c00db79fa8de64cd834090a35c80759f83c8fbefcf9a276dde8a8498d084b4619578eccdda2651a475f73367bda96894bb36eb868035251694cbb745feb150555ada09909497ff1d9c8aee7a35b7c8b2fc64ff483f4fd3491ed52304e6010b9bf2af8c5b8e162a383a0bf0bf108ca78f5086132b2b1a29581f323841c2f189509898d932436e5c1e693ed91f0524da026fecaa2b7efab54aeef120be61de457171c58811e0ca8a7600e0ac249aa579d78d2e2b1d6f41a3da4676b6690ca0249251f5b48b9a3820ac5b25a52cc01bc331c24039b6f4bfab72d5838a35629259930dea936f8c60b4f1b189db1fd1b5e7e6c8a842707ad6756d098a9ab543cde3e1d1161983ea91b7322ee2a713be3bad369d8112fdc7f1ac7b5122d55dc5ae443e10db711ddd6619ffbf96068e28911b1f54388413a17958d61ca07465b54699a1351915300cb826d3bf7f4f217bba0ed3195cbd077b67167b9a03040afc237f3bb36edd9fed33d7d6e7c9493fec34be6543880b0b442d8351496f2e8d60d4d984cca743983c0afab9cdedd5a9d774a121e91230d359c27a3d7b4db38ce73db747af3ca06470901f2605c031a7c9b7d1bbb1e838d36a4d39b039e80bcddfaecca906705fe8c844e93d5aee494dc62c7b4fcb6abe09acf925ef422dc09185b53e960795c56500b43faa6e89720aeee724532f89e60e20b12cd4f832b95189bf45b96aa7af10cf8298b44278de1c67e2d71d811240a7aa2d1d6de22e5b8cef4a1f309dcdb81c5a028aabdabddc9637974c2dc19b60458f0954bc751b7ae628ac602eb7c52c7fac0c1621ee7757fc5b002ad7e8fb66fc7da0896547abf01ee091c0cfe1d0fc66e6e03599bb2aa7608a72c30203af5eac3915a0b6616b6119c4a09654de2f56e53296d1f8487cd7ec36c86894bab72ec3ce61208f848432d45a27cafcfbf2a2c56b58e017c76ac7e943aff0b4acaf84dfb343d93efb29c518a9d552c36a3e44c6ea948673bc2aa71c5a873d1d301a9c8b02f19c086f922f0b3e4f7d14e8a59c017809188e2e1b4dc6b55fb8ad82b1c04460b5ff2e9b8f47d3e833599519b79ac6d9ab282db4a55654f60396d2e795c41f52735dde2bf8e2ebbc8c742913359edadfcbda00", 0x2000, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x90, 0x0, 0x88e, {0xffffffffffffffff, 0x0, 0xfffffe, 0x3, 0x3fe, 0xffffffff, {0x5, 0x8000000000000000, 0x2000, 0xfe2b2df, 0x4362d09f, 0x80000000, 0x2, 0x6, 0x0, 0xa000, 0xffffffff, r6, 0x0, 0x4, 0xdffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETINFO(r2, 0xffffffff80000502, r6, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 5.44415865s ago: executing program 7 (id=2749): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x1000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$alg(0x26, 0x5, 0x0) (async) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x200, 0x200, 0x308, 0x308, 0xf0, 0x4, 0x0, {[{{@arp={@multicast1, @loopback, 0xffffff00, 0xff, 0xa, 0x9, {@empty, {[0xff, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x3, 0x401, 0x9f, 0x17, 0xfffc, 0x2, 'syz_tun\x00', 'syz_tun\x00', {}, {0xff}, 0x0, 0x1cc}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x7, 0xea4, 0x1}}}, {{@arp={@multicast1, @loopback, 0xffffffff, 0xff, 0xc, 0x10, {@empty, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0xed, 0x5, 0x0, 0x35, 0x6, 0xfffb, 'macvlan0\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x0, 0x2f}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x1}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x5, {0x5}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async, rerun: 64) ptrace$setregset(0x4205, r0, 0x200, &(0x7f00000001c0)={&(0x7f0000000000)="c9453900000000000000000028685636", 0x10}) (rerun: 64) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003f7a7e40720c12009622010203010902120001000000000904"], 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 5.315779497s ago: executing program 4 (id=2765): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x4e21, @dev}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20}}, 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r3, 0x400, 0x0) fcntl$getflags(r2, 0x401) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e22, @empty}, 0x10) 5.144449993s ago: executing program 4 (id=2766): r0 = syz_usb_connect$hid(0x0, 0xffffffffffffff0d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2006, 0x118, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0xc, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xffff, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xff}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xe6, 0x6, 0x3}}]}}}]}}]}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @dev={0xac, 0x14, 0x14, 0x32}}, {0x2, 0x4e21, @empty}, 0x40, 0x0, 0x0, 0x0, 0x2009, 0x0, 0x200001, 0x1ff, 0x9}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000280)={&(0x7f0000000240)='H', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f0000000000)={r4}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3}) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xca, 0x20, 0xd6, 0x8, 0x471, 0x602, 0x715a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x71, 0x5c, 0x31}}]}}]}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@newae={0x54, 0x1e, 0x300, 0x70bd2a, 0x25dfdbfe, {{@in=@loopback, 0x4d2, 0xa, 0xff}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff, 0x3501}, [@coaddr={0x14, 0xe, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x4004040) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "054000"}]}}, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0xffffffffffffff0d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2006, 0x118, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0xc, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xffff, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xff}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xe6, 0x6, 0x3}}]}}}]}}]}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0x3, 0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @dev={0xac, 0x14, 0x14, 0x32}}, {0x2, 0x4e21, @empty}, 0x40, 0x0, 0x0, 0x0, 0x2009, 0x0, 0x200001, 0x1ff, 0x9}) (async) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000280)={&(0x7f0000000240)='H', 0x1}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f0000000000)={r4}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3}) (async) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xca, 0x20, 0xd6, 0x8, 0x471, 0x602, 0x715a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x71, 0x5c, 0x31}}]}}]}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@newae={0x54, 0x1e, 0x300, 0x70bd2a, 0x25dfdbfe, {{@in=@loopback, 0x4d2, 0xa, 0xff}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff, 0x3501}, [@coaddr={0x14, 0xe, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x4004040) (async) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "054000"}]}}, 0x0}, 0x0) (async) 4.244441716s ago: executing program 5 (id=2769): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x103, 0x0, {0xb7, 0x4, 0x200, 0x8}}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8917}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x103, 0x0, {0xb7, 0x4, 0x200, 0x8}}) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8917}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) 4.18485175s ago: executing program 5 (id=2770): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x8}, 0xe) shutdown(r1, 0x0) (async) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000004c0)=[@in6={0xa, 0x4e24, 0x20b, @loopback, 0x7fff}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000007c0)={r2, 0x3}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000007c0)={r2, 0x3}, 0x8) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x7, 0x54485746}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xc) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 4.081291943s ago: executing program 5 (id=2771): r0 = syz_open_dev$video4linux(&(0x7f0000000ac0), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000680)={0x0, 0x0, {0x0, 0xffffffff, 0x3013, 0x3}}) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x80000001, @empty, 0x6}, 0x1c) sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) setsockopt$inet6_udp_int(r1, 0x88, 0x1, &(0x7f0000000080), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x120800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x41, 0x110, 0x70bd27, 0x25dfdbfb, {0x4}, [@generic="5259598605033477be6def0931bd5c694b6c3be47f9b0ab8647687f05f4029"]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x44) 3.916967388s ago: executing program 5 (id=2772): r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000200)=""/165, 0xa5}, 0x41) socket$igmp6(0xa, 0x3, 0x2) r1 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000300)={{r1}, "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"}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000000206010900000000006000000000000005000500000000000900020073797a3000000000100003006269746d61703a706f72740014000780060005404e23000006000440000000000500010007000000050004"], 0x5c}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @private}, 0x10) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002140)=ANY=[@ANYBLOB="3c000000090605000000000000000000060000000900020073797a300000000014000780060004404e200000060005404effff000500010007"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x804) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x2, @empty, 0xa098}, {0xa, 0x4e21, 0x8000009, @mcast1}, r5, 0x4040099d}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x220, 0x3d, 0xab, 0xf0, 0x8, 0x5ac, 0x217, 0x7554, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x55, 0xe0, 0x1, [{{0x9, 0x4, 0x3c, 0xfe, 0x1, 0x3, 0x80, 0x2, 0x5c, [], [{{0x9, 0x5, 0x7, 0x7, 0x0, 0x2, 0x4f, 0x5}}]}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) 3.643961661s ago: executing program 3 (id=2773): r0 = syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000206b1d010140000102030109025f00030100000009040000000101"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80c}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x92, @string={0x92, 0x3, "5bbd03037b0609a5edb406ef4e23ff1efd7aeaae293a4a3a7a8005b78885081fa4f89c927ef98899178b8b5406a1a8e93579d5ac1c2d6601fd9627acacd28e82939cdf1b35f937bc569aa5f756e40f8feb0170032e37bced38ab2242dd2a705e47080443d5257aeee07e3a70ad5c02d7c5f40628786d28ad71c6f982dbf97b54d9e13bb6c4fd3ea67fe6d973df90761e"}}, 0x0, 0x0, 0x0}, 0x0) 2.630635671s ago: executing program 5 (id=2774): recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0xc8, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x40740}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f21) close(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) setpgid(0x0, r1) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.371366157s ago: executing program 7 (id=2775): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0x6, 0x6, 0x8, 0x7fffffffffffffff}) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, &(0x7f0000000100)={'#! ', '', [{0x20, '\xd9m\xf4\f00\xf4\xfa\t\tT\xf6\xd18\x17\xfa\xd7\xcds\xf4\xd3\x86\x03*\x9b\xcb\x8a\x9d\xff\x8ap\xf6\xd7\x8fA\xd9b?7\xc1ry\xdfh\xd0\xa4\xa3\x919\xfc\x80R\xbf\x94\xd1\x1d\xe1c]\x92\xeaw\xca\xc1\xfa\xa2\x9d\x85=\xcc\x00'/86}]}, 0x5b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f7, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 2.220976755s ago: executing program 7 (id=2776): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) io_setup(0x2e, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x4, 0x0, 0x1}]) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$KDENABIO(r3, 0x4b36) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x801, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0xe) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x4c}}, './file0\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) ioctl$KVM_GET_CPUID2(r7, 0xc008ae91, &(0x7f00000000c0)={0x1, 0x0, [{}]}) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009740)=ANY=[@ANYBLOB="280000001200170a26bd70000000000007000000"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) recvmsg$can_bcm(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (async) io_setup(0x2e, &(0x7f0000000200)) (async) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x4, 0x0, 0x1}]) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) dup(r2) (async) ioctl$KDENABIO(r3, 0x4b36) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x801, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0xe) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x4c}}, './file0\x00'}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) (async) ioctl$KVM_GET_CPUID2(r7, 0xc008ae91, &(0x7f00000000c0)={0x1, 0x0, [{}]}) (async) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009740)=ANY=[@ANYBLOB="280000001200170a26bd70000000000007000000"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async) recvmsg$can_bcm(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) 2.145473258s ago: executing program 4 (id=2777): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r1, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x4000005) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f0000000000)='./file4\x00', 0x149801, 0x1e0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x30) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x1472, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x1000000000000, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x2, 0x3a, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x11, 0x3d, 0xbb, 0x20, 0x2912, 0x1, 0xb5e1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x28, 0x1, 0xa, 0x0, 0x10, 0x7b, [{{0x9, 0x4, 0xb, 0x7, 0x1, 0x89, 0xd1, 0x4, 0x50, [@uac_control={{0xa, 0x24, 0x1, 0xffff, 0x5}}], [{{0x9, 0x5, 0xd, 0x2, 0x20, 0x0, 0x5, 0x6, [@generic={0x2, 0x8}, @generic={0x2, 0x30}]}}]}}]}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x1, 0x0, 0xf6, 0x20, 0x4}, 0x37, &(0x7f0000000bc0)=ANY=[@ANYBLOB="050f370004141004ff59bc7fc25ede9fc5a03dd70449488868dfdd0b07100204a900001410040389a541d17efab10faa2a4063813f8f64"], 0x1, [{0x0, 0x0}]}) 2.076441077s ago: executing program 7 (id=2778): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000200000000fcdbdf256b0000000400240004004400080026006c090000"], 0x24}}, 0x4004880) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000000)='\x00') r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r4, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001ec0)=ANY=[@ANYBLOB='<\x00\x00@', @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf251c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000003000b00ff000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40801}, 0x10) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.932370512s ago: executing program 7 (id=2779): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x0, 0x80, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @rand_addr, @rand_addr=0x64010102}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x40003c) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x19, 0x0, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x20000004) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000480)={0xbc, {{0x2, 0x4e22, @empty}}, {{0x2, 0x4e21, @empty}}}, 0x108) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x10842, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f00000002c0)=0x5) mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) mincore(&(0x7f000000f000/0x3000)=nil, 0x3000, &(0x7f0000000080)=""/6) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a05ff0f4000ee01030109022400017000000000000000010301030509210900ef0122e90a0995d25f2854c63505"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x41a}}, {0x2c, &(0x7f0000000280)=@string={0x2c, 0x3, "7acdfbc8cb387e49bdb486b9a1f7e8c7f88b1f738680738318049414e3bfcfa13ccdcbaa52d036da84dd"}}]}) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="00bb0000b700070000000000e0241adaea1d8ecfbeb410a0230861c7b83e27dea4b7e9c0ad4098079ec949772f57bc9f36b24ca3c0c1"]) 1.906117791s ago: executing program 3 (id=2780): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socket$inet(0x2, 0x6f7d0fcae572d3d5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f00000003c0)={0xa, 0x0, 0xffffffff, @local, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r7 = fcntl$dupfd(r6, 0x406, r6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYRES8=0xffffffffffffffff, @ANYRESOCT=0x0, @ANYBLOB="4689c46061c61e1d4cd253bc4c77c7836647092aff89dd767f881f14a2bc92836dfd36e980bf305ad47bb70b0d623f5d774de682c0418694e8548c03ba2333d5f785e51ef42caafe1649d713035f59da49189ff67d3b05ef063b8afca10b122b79003756e43f52ec9d54f26455452bc9181325f2b365ce7fc979cc71f86fd20657cbd275c952e288373d104c2c419a80d21422a06db592c41efde06f4bf1da282ecedafc20a47e7a3c882ec7481c086b1e3af665d31ca3513623daa21b6921c4d27828a5b21966a2f772c509ade2d554"], 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000500)=@ccm_128={{0x304}, "f8b65de4303a4a43", "78dc9a9e30ce8cfbac02dd796a6abbf4", '_1|6', "0d436edec575234b"}, 0x28) recvmmsg(r7, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x2004}, {{0x0, 0x0, &(0x7f0000000340)}, 0x4}], 0x2, 0x40000042, 0x0) r9 = syz_clone(0x3004e011, 0x0, 0xffffffffffffff1d, 0x0, 0x0, 0x0) r10 = syz_pidfd_open(r9, 0x0) fcntl$setlease(r10, 0x400, 0x1) syz_pidfd_open(r9, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="d20000d0765cd35f33e5484d8bcbd242ebac36676404740427d27d2b5facf8ce77526f50a71a8ba0b0a72c20b6698d21561184631b25a34f57290d673e71b5545bfc3928a2c0d3ae5cd6bb49f0cd977d6c4a18520230c4fc9f0910137685c7967b51e0102fb172609a124e872dccba77a41b71d987d92a8336f80d226e08f6c4612e370e6c68bc127893ffb1f3eea242ebc1ec5357a7ec26ec3200b06a872101d67d", @ANYRES16=r4, @ANYBLOB="0100fefffffffcdbdf25010000001c0007800c00018008000100", @ANYRES32=r11, @ANYBLOB="0c00018008000100", @ANYRES32=r5, @ANYBLOB="0c000200ffff000000000000"], 0x3c}}, 0x20000000) inotify_add_watch(r7, 0x0, 0xe500098c) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000200)={0x80802e, 0x4, [{0xfb, 0x0, 0x12}, {0x41, 0x0, 0x5}, {0x1000, 0x0, 0x8}, {0xe2, 0x0, 0xb4d}, {0x74, 0x0, 0x8}, {0x1000a3a0, 0x0, 0x200200}, {0x840, 0x0, 0x3}, {0x0, 0x0, 0x8000000000000001}, {0x8, 0x0, 0x3}, {0x9, 0x0, 0xffffffffffff}, {0xffffffff, 0x0, 0x18}, {0x80000005, 0x0, 0x8000000001}, {0x1, 0x0, 0x3}, {0x8, 0x0, 0x4}, {0x2ac46ab, 0x0, 0x800}, {0x25689, 0x0, 0x401}]}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r12 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000080), 0x302020, &(0x7f0000000640)=ANY=[@ANYRESHEX=r8, @ANYRESHEX=r1, @ANYRES16=r11, @ANYRESHEX=r12, @ANYBLOB="2cff3f4416391eb1a4864a83545e3c00"]) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.274490502s ago: executing program 3 (id=2781): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x80000000000000c, 0x0, 0x4, 0x10000, 0x7, 0x9004, 0x9, 0x8, 0x9, 0x5, 0x49, 0x3ff, 0x5, 0x2, 0x1, 0x8, 0x7, 0xc1, 0x1, 0x2, 0x2, 0x6, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x5, 0x7, 0x4, 0x3, 0x9, 0x888f, 0x1, 0x6, 0x46, 0x1, 0x3, 0xa3de, 0x20000000006, 0x8, 0x7, 0x400, 0x3, 0xffffffffffffffb7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x10001, 0x9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x4000000007, 0x2, 0x3, 0x2, 0x2, 0xfff, 0x6, 0x4, 0x1, 0xab6, 0x0, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x8061d, 0x3, 0x7, 0xf6, 0x4, 0x6, 0x204, 0x7, 0xe53e, 0x4, 0x8, 0x2293332f, 0x6, 0x5, 0x1e, 0xd, 0x2, 0x4, 0xfffffffffffffffb, 0x80000001, 0x7, 0xdfd4, 0xfff9, 0x10, 0x5, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x1000003]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a9c000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2e00b9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 964.927846ms ago: executing program 3 (id=2782): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @adapter={0x81, 0x1, 0x70c, 0x3, 0x4}}]}) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f00000001c0)={0x81, 0x0, 0x3}) r2 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x4}) write$eventfd(r2, &(0x7f0000000080)=0x430f, 0x8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002200)={0x20, 0x1d, 0x1, 0x0, 0x0, {0x8a, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x4, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x50810}, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fanotify_init(0x4, 0x1000) fanotify_mark(r9, 0x1, 0x1000, r8, 0x0) read$FUSE(r7, &(0x7f00000020c0)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r8, &(0x7f00000007c0)=ANY=[], 0xb0) 886.238663ms ago: executing program 5 (id=2783): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'syztnl1\x00', &(0x7f0000000940)={'erspan0\x00', 0x0, 0x10, 0x1, 0x7, 0x7, {{0x29, 0x4, 0x2, 0x39, 0xa4, 0x67, 0x0, 0x0, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x15}, {[@ssrr={0x89, 0xb, 0x4c, [@remote, @broadcast]}, @timestamp_addr={0x44, 0x34, 0x9d, 0x1, 0x7, [{@private=0xa010100, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@broadcast, 0x329aa1cb}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@rand_addr=0x64010102, 0x4}, {@broadcast, 0x2}]}, @timestamp_addr={0x44, 0x24, 0x49, 0x1, 0x9, [{@broadcast, 0x3}, {@rand_addr=0x64010101, 0x4}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x5}]}, @timestamp_addr={0x44, 0x14, 0x70, 0x1, 0x0, [{@loopback, 0x3}, {@dev={0xac, 0x14, 0x14, 0x15}, 0xc}]}, @timestamp={0x44, 0xc, 0xac, 0x0, 0x3, [0x3, 0xd5]}, @timestamp={0x44, 0xc, 0xc7, 0x0, 0x2, [0xc, 0x8]}, @noop]}}}}}) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000900)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000b80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x81}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote, @broadcast}}}, @ip_retopts={{0xc8, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x4e, 0x0, 0xc, [0x9, 0x0, 0x9]}, @timestamp_prespec={0x44, 0xc, 0xa9, 0x3, 0x3, [{@loopback, 0x8}]}, @timestamp_addr={0x44, 0x4c, 0xb7, 0x1, 0x5, [{@broadcast, 0x101}, {@local, 0x800}, {@broadcast, 0x7}, {@multicast2, 0x8d}, {@multicast2, 0xffff}, {@multicast2, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x700000}]}, @generic={0x0, 0xb, "13608b6e9d7a103c05"}, @lsrr={0x83, 0x13, 0x8d, [@private=0xa010101, @private=0xa010102, @local, @private=0xa010102]}, @cipso={0x86, 0x32, 0x3, [{0x0, 0x11, "9b3889eaa15708140e3304009a07ed"}, {0x6, 0xb, "a60aac799b539b49fb"}, {0x6, 0x10, "c795a0dee37b6e5ed1dfff8ddab9"}]}]}}}], 0x138}, 0xe900) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000002880)={0x84, &(0x7f0000002400)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5) sendmsg$DEVLINK_CMD_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="93fb26bd07da4a03e28545"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000040) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000280)={r4}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000002c0)={r4, 0x6, 0x8, 0xfffffffa}, &(0x7f00000008c0)=0x10) r7 = syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r7, &(0x7f0000000380)={0x2c, &(0x7f0000000100)={0x0, 0x9, 0x90, {0x90, 0x8, "5fede7d0459459bc272a2822b01f50f6400a783af94dd7cc311c61ea8fce8f894d2d40f6bbfb6c75a0879047fe844ee5549114e1103cfd16495fa7f556de9eb3f352ea84cd2220651f1d1bd1bbd672a8e9b9bc783e572df7f3fed9758a28d9272a1da2a9eaac387f52d22fbebaa97292b888cd795621f5e1834cf2dec880b0e24d021152ac79d3415b3c0adff3dd"}}, &(0x7f00000001c0)={0x0, 0x3, 0x76, @string={0x76, 0x3, "d7a910bbac6c64b8b2299b2007b38eebff9383a5bb8ffa54dd8d30f67e7e4658c29eff85301047bed2faf193cbd16c502804c0b8f62639bfd6359f5a55d4f5ba6b8c276df8dff76bd105160267325a57edaad9d49757d8330772456382e9f9f561e7cc5f1781ed434b3636beefde98abb6acaa08"}}, &(0x7f0000000240)={0x0, 0xf, 0x73, {0x5, 0xf, 0x73, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "173d6907b068ac8700"}, @ssp_cap={0x24, 0x10, 0xa, 0xd6, 0x6, 0xb, 0x7, 0x1, [0x30, 0x30, 0xcf, 0x18f, 0xc0, 0xff00cf]}, @ext_cap={0x7, 0x10, 0x2, 0x28, 0x1, 0x7, 0x4e3}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "4e098e3a45077326f7f1a3e88a5e12d8"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "a3cf27db10771ba4bdb9e6bb941363c1"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x0, 0xb, 0x7}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb, 0x4, 0x9, 0x2e, "07d313da", "cf5565c4"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x4, 0x8, 0x3, 0x5, 0x7, 0x1ff}}}, &(0x7f0000000800)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x5b, "081eecd2955d8544c9b05d67b8cdf4189ac1ec8b2c71b2e32de11a7f3c2800b96fb37e22c94c099f03453d7143b796d65df235ec742a1effa307c7ef7c0bd5afa9626ff12dc80093b8106f867b772d27ff9c8ff6f78943ff38baa2"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x7f}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x5}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x4}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "32ba"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000640)={0x40, 0x13, 0x6, @random="c40ae13fc293"}, &(0x7f0000000680)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "19ea"}, &(0x7f0000000700)={0x40, 0x1a, 0xfe71, 0x2}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x6}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x7}}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000002e40)={0x20, 0xf, 0x1, "a6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 714.961569ms ago: executing program 4 (id=2785): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'ip6erspan0\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0x6) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b80000001900010027bd70000000000000000000000000000000000000000000000001fe0000000000000a0000002900000045bfd231f7ffa2e81bfd65de", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000070000000000000008000000000000000000000000000000020000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00"/112], 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000006200)=ANY=[@ANYBLOB="b8000000150001000000000000030000e000000200000000000000000000000000000000000080ffffff00000000000001fe0000000000000a"], 0xb8}}, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x10000, 0x0) syz_clone3(&(0x7f0000000340)={0x16096000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100), {0x35}, &(0x7f0000000700)=""/4096, 0x1000, &(0x7f00000002c0)=""/9, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x6}, 0x58) r5 = pidfd_getfd(r4, r2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r5, 0x7aa, &(0x7f00000003c0)={{@host, 0x6}, 0x81, 0x58e4}) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000000)={0x1}) mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) 0s ago: executing program 4 (id=2786): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) (async) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x2, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) r4 = memfd_secret(0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) (async) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) close(0x3) (async) close(0x3) syz_usb_control_io(r5, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r5) (async) syz_usb_disconnect(r5) read$FUSE(r4, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000380)='2', 0x1) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00220f0000000b2e2b5aa40bf85edaca83"], 0x0}, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r6, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000200)=ANY=[@ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000200)=ANY=[@ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) kernel console output (not intermixed with test programs): bcdDevice=70.4b [ 650.746072][T23322] usb 7-1: USB disconnect, device number 37 [ 650.749627][ T5914] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 650.782299][ T5914] usb 5-1: Product: syz [ 650.786844][ T5914] usb 5-1: Manufacturer: syz [ 650.799375][ T5914] usb 5-1: SerialNumber: syz [ 650.889493][ T5892] usbhid 6-1:0.0: can't add hid device: -71 [ 650.914603][ T5892] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 650.927885][ T5892] usb 6-1: USB disconnect, device number 114 [ 650.946486][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 650.951885][ T5199] loop5: partition table partially beyond EOD, truncated [ 650.965335][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 651.041476][ T5914] usb 5-1: Handspring Visor / Palm OS: No valid connect info available [ 651.061783][ T5914] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 651.071503][ T5914] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 651.085930][ T5914] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 651.253162][ T5915] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 651.403541][ T5892] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 651.403615][ T5914] usb 5-1: palm_os_3_probe - error -110 getting bytes available request [ 651.420959][ T5914] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 651.428858][ T5915] usb 4-1: Using ep0 maxpacket: 32 [ 651.434849][ T5915] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 651.446962][ T5914] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 651.458275][ T5915] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 651.469135][ T5915] usb 4-1: config 0 has no interface number 0 [ 651.475988][ T5914] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 651.485850][ T5915] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 651.500840][ T5915] usb 4-1: config 0 has no interface number 0 [ 651.508250][ T5915] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 651.516652][ T5915] usb 4-1: config 0 has no interface number 0 [ 651.524172][ T5915] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 651.532217][ T5915] usb 4-1: config 0 has no interface number 0 [ 651.540167][ T5915] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 651.544353][ T5892] usb 6-1: device descriptor read/64, error -71 [ 651.548846][ T5915] usb 4-1: config 0 has no interface number 0 [ 651.557218][T23322] usb 7-1: new full-speed USB device number 38 using dummy_hcd [ 651.566327][ T5915] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 651.581281][ T5915] usb 4-1: config 0 has no interface number 0 [ 651.604153][ T5915] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 651.614894][ T5915] usb 4-1: config 0 has no interface number 0 [ 651.630406][ T5915] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 651.640876][ T5915] usb 4-1: config 0 has no interface number 0 [ 651.649969][ T5915] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 651.659387][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.668009][ T5915] usb 4-1: Product: syz [ 651.672652][ T5915] usb 4-1: Manufacturer: syz [ 651.678117][ T5915] usb 4-1: SerialNumber: syz [ 651.688157][ T5915] usb 4-1: config 0 descriptor?? [ 651.697513][ T5915] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 651.735176][T23322] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 651.746516][T23322] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 651.761461][T23322] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 651.770657][T23322] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.783196][T23322] usb 7-1: config 0 descriptor?? [ 651.794978][T26651] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 651.812838][ T5892] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 651.918203][T26641] syzkaller1: entered promiscuous mode [ 651.923959][T26641] syzkaller1: entered allmulticast mode [ 651.943131][ T5892] usb 6-1: device descriptor read/64, error -71 [ 652.010376][T26651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.021505][T26651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.034020][T23322] usbhid 7-1:0.0: can't add hid device: -71 [ 652.040148][T23322] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 652.054702][ T5892] usb usb6-port1: attempt power cycle [ 652.070164][T23322] usb 7-1: USB disconnect, device number 38 [ 652.392871][ T5892] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 652.414864][ T5892] usb 6-1: device descriptor read/8, error -71 [ 652.532808][T23322] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 652.655226][ T5892] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 652.682996][T23322] usb 7-1: Using ep0 maxpacket: 32 [ 652.692530][ T5892] usb 6-1: device descriptor read/8, error -71 [ 652.702179][T23322] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 652.713772][T23322] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 652.727933][T23322] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 652.737115][T23322] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.748763][T23322] usb 7-1: config 0 descriptor?? [ 652.771853][T23322] hub 7-1:0.0: bad descriptor, ignoring hub [ 652.778208][T23322] hub 7-1:0.0: probe with driver hub failed with error -5 [ 652.803833][ T5892] usb usb6-port1: unable to enumerate USB device [ 652.967677][T26651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.978580][T26651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.146911][ T5914] usb 5-1: USB disconnect, device number 108 [ 653.162412][ T5914] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 653.185657][ T5914] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 653.207534][ T5914] visor 5-1:1.0: device disconnected [ 653.227103][T23322] hid-multitouch 0003:0EEF:72C4.0038: unknown main item tag 0x0 [ 653.253451][T23322] hid-multitouch 0003:0EEF:72C4.0038: unknown main item tag 0x0 [ 653.268913][T23322] hid-multitouch 0003:0EEF:72C4.0038: unknown main item tag 0x0 [ 653.276865][T23322] hid-multitouch 0003:0EEF:72C4.0038: unknown main item tag 0x0 [ 653.286123][T23322] hid-multitouch 0003:0EEF:72C4.0038: unknown main item tag 0x0 [ 653.301826][T23322] hid-multitouch 0003:0EEF:72C4.0038: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.6-1/input0 [ 653.334066][T26704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.347744][T26704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.460148][T26716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.470022][T26716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.622913][ T5914] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 653.785231][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.796719][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.807439][ T5914] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 653.821229][ T5914] usb 5-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 653.830422][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.841496][ T5914] usb 5-1: config 0 descriptor?? [ 654.122096][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 654.128845][ T5199] loop5: partition table partially beyond EOD, truncated [ 654.141273][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 654.269838][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 654.282423][ T5199] loop5: partition table partially beyond EOD, truncated [ 654.296043][T23322] usb 7-1: USB disconnect, device number 39 [ 654.304438][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 654.547945][ T5915] etas_es58x 4-1:0.2: could not retrieve the product info string [ 654.562826][T21833] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 654.573886][ T5914] usbhid 5-1:0.0: can't add hid device: -71 [ 654.580094][ T5914] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 654.637252][ T5914] usb 5-1: USB disconnect, device number 109 [ 654.696152][ T5915] usb 4-1: USB disconnect, device number 25 [ 654.718250][ T5915] etas_es58x 4-1:0.2: Disconnecting syz syz [ 654.762901][T21833] usb 6-1: Using ep0 maxpacket: 32 [ 654.770547][T21833] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 654.789782][T21833] usb 6-1: config 0 has no interface number 0 [ 654.804277][T21833] usb 6-1: config 0 interface 184 has no altsetting 0 [ 654.827897][T21833] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 654.843737][T21833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.851795][T21833] usb 6-1: Product: syz [ 654.856622][T21833] usb 6-1: Manufacturer: syz [ 654.861264][T21833] usb 6-1: SerialNumber: syz [ 654.923928][T21833] usb 6-1: config 0 descriptor?? [ 654.965969][T21833] smsc75xx v1.0.0 [ 655.164941][T26794] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2520'. [ 655.302902][ T5892] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 655.457097][ T5892] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 655.468680][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.473353][ T5914] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 655.486551][ T5892] usb 5-1: Product: syz [ 655.490784][ T5892] usb 5-1: Manufacturer: syz [ 655.496099][ T5892] usb 5-1: SerialNumber: syz [ 655.510176][ T5892] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 655.530171][T23322] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 655.672484][ T5914] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 655.684565][ T5914] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 655.696779][ T5914] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 655.708980][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 655.720584][ T5914] usb 4-1: SerialNumber: syz [ 655.936176][ T5915] usb 5-1: USB disconnect, device number 110 [ 655.960796][ T5914] usb 4-1: 0:2 : does not exist [ 655.966159][ T5914] usb 4-1: unit 5: unexpected type 0x0b [ 656.024809][ T5914] usb 4-1: USB disconnect, device number 26 [ 656.074189][T15845] udevd[15845]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 656.109139][T21833] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 656.131819][T21833] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 656.153767][T21833] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 656.168686][T21833] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 656.179693][T21833] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 656.190607][T26846] binder: 26845:26846 ioctl c0306201 200000000680 returned -14 [ 656.202955][T21833] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 656.226073][T21833] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 656.250573][T21833] usb 6-1: USB disconnect, device number 119 [ 656.532299][T26860] netlink: 'syz.4.2527': attribute type 29 has an invalid length. [ 656.534474][T26861] netlink: 548 bytes leftover after parsing attributes in process `syz.4.2527'. [ 656.605811][T23322] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 656.628548][T23322] ath9k_htc: Failed to initialize the device [ 656.643108][ T5915] usb 5-1: ath9k_htc: USB layer deinitialized [ 656.651482][T21833] usb 7-1: new full-speed USB device number 40 using dummy_hcd [ 656.676461][T26868] team_slave_0: entered promiscuous mode [ 656.682434][T26868] team_slave_1: entered promiscuous mode [ 656.690468][T26869] netlink: 'syz.3.2529': attribute type 10 has an invalid length. [ 656.703859][T26869] team_slave_0: left promiscuous mode [ 656.709940][T26869] team_slave_1: left promiscuous mode [ 656.953718][T21833] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 656.960136][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 656.962346][T21833] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.970311][ T5199] loop5: partition table partially beyond EOD, truncated [ 656.993084][T21833] usb 7-1: config 0 has no interface number 0 [ 657.008270][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 657.246454][T21833] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 657.262751][T21833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.282772][T21833] usb 7-1: Product: syz [ 657.287005][T21833] usb 7-1: Manufacturer: syz [ 657.291636][T21833] usb 7-1: SerialNumber: syz [ 657.313480][T21833] usb 7-1: config 0 descriptor?? [ 657.320893][T21833] hub 7-1:0.31: bad descriptor, ignoring hub [ 657.330455][T26869] team0 (unregistering): Port device team_slave_0 removed [ 657.332858][T21833] hub 7-1:0.31: probe with driver hub failed with error -5 [ 657.353709][ T5892] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 657.364695][T21833] uvcvideo 7-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 657.366486][T26869] team0 (unregistering): Port device team_slave_1 removed [ 657.372059][T21833] uvcvideo 7-1:0.31: Entity type for entity Output 6 was not initialized! [ 657.404245][T21833] uvcvideo 7-1:0.31: Failed to create links for entity 6 [ 657.411351][T21833] uvcvideo 7-1:0.31: Failed to register entities (-22). [ 657.512800][ T5892] usb 6-1: Using ep0 maxpacket: 16 [ 657.526995][ T5892] usb 6-1: unable to get BOS descriptor or descriptor too short [ 657.558209][ T5892] usb 6-1: config 8 has an invalid interface number: 34 but max is 0 [ 657.585449][ T5892] usb 6-1: config 8 has no interface number 0 [ 657.591615][ T5892] usb 6-1: config 8 interface 34 altsetting 2 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 657.615373][ T5892] usb 6-1: config 8 interface 34 has no altsetting 0 [ 657.635158][ T5892] usb 6-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=e2.0c [ 657.657799][ T5832] usb 7-1: USB disconnect, device number 40 [ 657.665642][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.687141][ T5892] usb 6-1: Product: syz [ 657.691465][ T5892] usb 6-1: Manufacturer: syz [ 657.718941][ T5892] usb 6-1: SerialNumber: syz [ 657.814187][T26945] vivid-000: ================= START STATUS ================= [ 657.832170][T26945] vivid-000: Generate PTS: true [ 657.839302][T26945] vivid-000: Generate SCR: true [ 657.849422][T26945] tpg source WxH: 1600x1200 (R'G'B) [ 657.859526][T26945] tpg field: 1 [ 657.869649][T26945] tpg crop: (0,0)/1600x1200 [ 657.879769][T26945] tpg compose: (0,0)/1600x1200 [ 657.884831][T21833] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 657.905461][T26945] tpg colorspace: 9 [ 657.909343][T26945] tpg transfer function: 7/7 [ 657.925900][T26945] tpg quantization: 2/2 [ 657.932754][T26945] tpg RGB range: 0/2 [ 657.940341][T26945] vivid-000: ================== END STATUS ================== [ 657.953722][T26881] sg_read: process 799 (syz.5.2530) changed security contexts after opening file descriptor, this is not allowed. [ 657.992477][ T5892] usb 6-1: USB disconnect, device number 120 [ 658.000636][T26945] vivid-000: ================= START STATUS ================= [ 658.033417][T21833] usb 4-1: device descriptor read/64, error -71 [ 658.034946][T26945] vivid-000: Generate PTS: true [ 658.061464][T26945] vivid-000: Generate SCR: true [ 658.082793][T26945] tpg source WxH: 1600x1200 (R'G'B) [ 658.088189][T26945] tpg field: 1 [ 658.091605][T26945] tpg crop: (0,0)/1600x1200 [ 658.100507][T26945] tpg compose: (0,0)/1600x1200 [ 658.105638][T26945] tpg colorspace: 9 [ 658.109584][T26945] tpg transfer function: 7/7 [ 658.115921][T26945] tpg quantization: 2/2 [ 658.120783][T26945] tpg RGB range: 0/2 [ 658.124995][T26945] vivid-000: ================== END STATUS ================== [ 658.283704][T21833] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 658.412801][T21833] usb 4-1: device descriptor read/64, error -71 [ 658.526004][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 658.531853][ T5199] loop5: partition table partially beyond EOD, truncated [ 658.540265][T21833] usb usb4-port1: attempt power cycle [ 658.546481][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 658.752875][ T5892] usb 7-1: new full-speed USB device number 41 using dummy_hcd [ 658.892984][T21833] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 658.906697][ T5892] usb 7-1: config 0 has an invalid interface number: 151 but max is 0 [ 658.915256][ T5892] usb 7-1: config 0 has no interface number 0 [ 658.921499][ T5892] usb 7-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 658.933262][ T5892] usb 7-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 658.945333][T21833] usb 4-1: device descriptor read/8, error -71 [ 658.950761][ T5892] usb 7-1: New USB device found, idVendor=0499, idProduct=6bab, bcdDevice=68.2f [ 658.961374][ T5892] usb 7-1: New USB device strings: Mfr=20, Product=2, SerialNumber=3 [ 658.969730][ T5892] usb 7-1: Product: syz [ 658.974070][ T5892] usb 7-1: Manufacturer: syz [ 658.978711][ T5892] usb 7-1: SerialNumber: syz [ 658.987858][ T5892] usb 7-1: config 0 descriptor?? [ 659.182789][T21833] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 659.206641][T21833] usb 4-1: device descriptor read/8, error -71 [ 659.317062][T21833] usb usb4-port1: unable to enumerate USB device [ 659.336344][ T5892] usb 7-1: USB disconnect, device number 41 [ 659.374658][T15845] udevd[15845]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 659.424039][T27013] fuse: Unknown parameter '0x0000000000000003' [ 659.569225][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 659.575864][ T5199] loop5: partition table partially beyond EOD, truncated [ 659.585112][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 659.683577][T21833] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 659.833708][ T5915] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 659.844225][T21833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.856738][T21833] usb 5-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 659.866706][T21833] usb 5-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 659.875172][T21833] usb 5-1: Manufacturer: syz [ 659.882194][T21833] usb 5-1: config 0 descriptor?? [ 659.982849][ T5915] usb 6-1: Using ep0 maxpacket: 8 [ 659.989914][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 17277, setting to 64 [ 660.003911][ T5915] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 660.013410][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.021455][ T5915] usb 6-1: Product: syz [ 660.025754][ T5915] usb 6-1: Manufacturer: syz [ 660.030416][ T5915] usb 6-1: SerialNumber: syz [ 660.040150][ T5915] usb 6-1: config 0 descriptor?? [ 660.050835][ T5915] streamzap 6-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0278 [ 660.094221][T27013] netlink: 'syz.4.2543': attribute type 28 has an invalid length. [ 660.266515][ T5832] usb 6-1: USB disconnect, device number 121 [ 660.307611][T21833] hid_mf 0003:0079:1846.0039: reserved main item tag 0xd [ 660.315154][T21833] hid_mf 0003:0079:1846.0039: item fetching failed at offset 6/7 [ 660.326457][T21833] hid_mf 0003:0079:1846.0039: HID parse failed. [ 660.333756][T21833] hid_mf 0003:0079:1846.0039: probe with driver hid_mf failed with error -22 [ 660.508796][ T5832] usb 5-1: USB disconnect, device number 111 [ 660.839291][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 660.846310][ T5199] loop5: partition table partially beyond EOD, truncated [ 660.853964][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 660.870377][ T5832] IPVS: starting estimator thread 0... [ 660.982896][T27074] IPVS: using max 38 ests per chain, 91200 per kthread [ 661.115260][T21833] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 661.132876][ T5832] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 661.272933][T21833] usb 6-1: Using ep0 maxpacket: 8 [ 661.280736][T21833] usb 6-1: unable to get BOS descriptor or descriptor too short [ 661.296390][ T5832] usb 7-1: Using ep0 maxpacket: 16 [ 661.302336][T21833] usb 6-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 661.314662][ T5832] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 661.328255][ T5832] usb 7-1: config 1 has no interface number 1 [ 661.331103][T21833] usb 6-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=ad.d9 [ 661.336198][ T5832] usb 7-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 661.353304][ T5915] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 661.357618][ T5832] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 661.375913][T21833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.385384][ T5832] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 661.387190][T21833] usb 6-1: Product: syz [ 661.401496][T21833] usb 6-1: Manufacturer: syz [ 661.408447][T21833] usb 6-1: SerialNumber: syz [ 661.418877][ T5832] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 661.421344][T27090] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2552'. [ 661.438112][ T5832] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.447167][ T5832] usb 7-1: Product: syz [ 661.451453][ T5832] usb 7-1: Manufacturer: syz [ 661.457474][ T5832] usb 7-1: SerialNumber: syz [ 661.534889][ T5915] usb 5-1: config 150 has an invalid interface number: 204 but max is 1 [ 661.544024][ T5915] usb 5-1: config 150 has no interface number 0 [ 661.551326][ T5915] usb 5-1: config 150 interface 204 has no altsetting 0 [ 661.558612][ T5915] usb 5-1: config 150 interface 1 has no altsetting 0 [ 661.569569][ T5915] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 661.579458][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.587977][ T5915] usb 5-1: Product: syz [ 661.592238][ T5915] usb 5-1: Manufacturer: syz [ 661.594400][T27090] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2552'. [ 661.598936][ T5915] usb 5-1: SerialNumber: syz [ 661.613521][T27090] netlink: 'syz.3.2552': attribute type 1 has an invalid length. [ 661.657975][T21833] s2255 6-1:192.0: Could not find bulk-in endpoint [ 661.665653][T21833] Sensoray 2255 driver load failed: 0xfffffff4 [ 661.672132][T21833] s2255 6-1:192.0: probe with driver s2255 failed with error -12 [ 661.688785][T21833] usb 6-1: USB disconnect, device number 122 [ 661.778467][T27108] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2553'. [ 661.845367][ T5915] xr_serial 5-1:150.204: xr_serial converter detected [ 661.875133][ T5915] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 661.881593][ T5915] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 661.889456][ T5832] usb 7-1: 2:1 : format type 0 is detected, processed as PCM [ 661.911681][ T5915] usb 5-1: USB disconnect, device number 112 [ 661.923884][ T5915] xr_serial 5-1:150.204: device disconnected [ 662.191073][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 662.196781][ T5199] loop5: partition table partially beyond EOD, truncated [ 662.204751][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 662.323030][T21833] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 662.472812][T21833] usb 4-1: Using ep0 maxpacket: 16 [ 662.485107][T21833] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 662.502801][T21833] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 662.513182][T21833] usb 4-1: config 0 has no interface number 0 [ 662.522186][T21833] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 662.543083][T21833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.551146][T21833] usb 4-1: Product: syz [ 662.555623][T21833] usb 4-1: Manufacturer: syz [ 662.560266][T21833] usb 4-1: SerialNumber: syz [ 662.563356][ T5892] usb 6-1: new full-speed USB device number 123 using dummy_hcd [ 662.574641][T21833] usb 4-1: config 0 descriptor?? [ 662.590808][T21833] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 662.600379][T21833] uvcvideo 4-1:0.105: No valid video chain found. [ 662.696410][ T5832] usb 7-1: current rate 772 is different from the runtime rate 9338507 [ 662.738279][ T5892] usb 6-1: unable to get BOS descriptor or descriptor too short [ 662.747736][ T5892] usb 6-1: not running at top speed; connect to a high speed hub [ 662.762186][ T5892] usb 6-1: config 5 has an invalid interface number: 215 but max is 0 [ 662.771025][ T5892] usb 6-1: config 5 has no interface number 0 [ 662.777955][ T5892] usb 6-1: config 5 interface 215 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 662.789519][ T5892] usb 6-1: config 5 interface 215 has no altsetting 0 [ 662.804774][ T5892] usb 6-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba [ 662.814845][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=2 [ 662.826870][ T5892] usb 6-1: Product: syz [ 662.832968][ T5892] usb 6-1: Manufacturer: syz [ 662.838042][ T5892] usb 6-1: SerialNumber: syz [ 662.854044][T27150] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 663.105838][ T5892] cypress_m8 6-1:5.215: DeLorme Earthmate USB converter detected [ 663.133305][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 663.140027][ T5892] usb 6-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 663.149336][ T5199] loop5: partition table partially beyond EOD, truncated [ 663.168584][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 663.181280][ T5892] usb 6-1: USB disconnect, device number 123 [ 663.238091][ T5892] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 663.264744][ T5892] cypress_m8 6-1:5.215: device disconnected [ 663.436503][T27207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.448439][T27207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.663011][T21833] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 663.723115][ T5892] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 663.818575][T21833] usb 5-1: Using ep0 maxpacket: 32 [ 663.826182][T21833] usb 5-1: config 12 has an invalid interface number: 7 but max is 0 [ 663.835449][T21833] usb 5-1: config 12 has no interface number 0 [ 663.841738][T21833] usb 5-1: config 12 interface 7 has no altsetting 0 [ 663.851046][T21833] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 663.860788][T21833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.872367][T21833] usb 5-1: Product: syz [ 663.874270][ T5892] usb 6-1: device descriptor read/64, error -71 [ 663.876920][T21833] usb 5-1: Manufacturer: syz [ 663.890297][T21833] usb 5-1: SerialNumber: syz [ 664.032180][ T5832] usb 7-1: USB disconnect, device number 42 [ 664.072056][T15919] udevd[15919]: setting mode of /dev/bus/usb/007/042 to 020664 failed: No such file or directory [ 664.089439][T15919] udevd[15919]: setting owner of /dev/bus/usb/007/042 to uid=0, gid=0 failed: No such file or directory [ 664.114952][T21833] go7007 5-1:12.7: probe with driver go7007 failed with error -12 [ 664.134844][ T5892] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 664.139938][T21833] usb 5-1: USB disconnect, device number 113 [ 664.153045][T15843] udevd[15843]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 664.303128][ T5892] usb 6-1: device descriptor read/64, error -71 [ 664.402781][ T5832] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 664.414862][ T5892] usb usb6-port1: attempt power cycle [ 664.552861][ T5832] usb 7-1: Using ep0 maxpacket: 8 [ 664.561073][ T5832] usb 7-1: unable to get BOS descriptor or descriptor too short [ 664.573234][ T5832] usb 7-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b [ 664.582548][ T5832] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.590647][ T5832] usb 7-1: Product: syz [ 664.595059][ T5832] usb 7-1: Manufacturer: syz [ 664.599703][ T5832] usb 7-1: SerialNumber: syz [ 664.763163][ T5892] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 664.783483][ T5892] usb 6-1: device descriptor read/8, error -71 [ 664.832885][ T5832] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 664.844380][ T5832] dvb-usb: bulk message failed: -22 (3/0) [ 664.866382][ T5832] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 664.877790][ T5832] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 664.887916][ T5832] usb 7-1: media controller created [ 664.904351][ T5832] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 664.912976][ T9] usb 5-1: new low-speed USB device number 114 using dummy_hcd [ 664.966101][ T5832] DVB: Unable to find symbol mt352_attach() [ 664.972078][ T5832] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 664.982794][ T5832] dvb-usb: bulk message failed: -22 (3/0) [ 665.006228][ T5832] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 665.020033][ T5832] usb 7-1: USB disconnect, device number 43 [ 665.026202][ T5892] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 665.053736][ T5892] usb 6-1: device descriptor read/8, error -71 [ 665.069067][ T5832] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 665.097473][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 665.106829][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 665.137620][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 665.158814][T23322] usb 4-1: USB disconnect, device number 31 [ 665.174173][ T5892] usb usb6-port1: unable to enumerate USB device [ 665.192482][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 665.222989][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 665.235940][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 665.254477][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 665.272827][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 665.289189][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 665.310237][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 665.323408][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 665.330903][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 665.343602][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 665.357650][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 665.415170][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 665.432644][ T9] usb 5-1: string descriptor 0 read error: -22 [ 665.440791][ T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 665.454282][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.477535][ T9] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 665.707855][T27304] overlayfs: upper fs does not support tmpfile. [ 666.452526][T27302] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 666.476349][T27302] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 666.494355][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 666.510925][ T5199] loop5: partition table partially beyond EOD, truncated [ 666.520002][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 666.651236][T27254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.666300][T27254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.802779][ T5914] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 666.816934][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 666.835455][ T5199] loop5: partition table partially beyond EOD, truncated [ 666.853101][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 666.972760][ T5914] usb 4-1: Invalid ep0 maxpacket: 16 [ 667.058930][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 667.073146][ T5199] loop5: partition table partially beyond EOD, truncated [ 667.080475][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 667.112981][ T5914] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 667.254581][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 667.259949][ T5199] loop5: partition table partially beyond EOD, truncated [ 667.283012][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 667.292932][ T5914] usb 4-1: Invalid ep0 maxpacket: 16 [ 667.313128][ T5914] usb usb4-port1: attempt power cycle [ 667.333786][ T9] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 667.385679][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 667.391061][ T5199] loop5: partition table partially beyond EOD, truncated [ 667.404773][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 667.483934][ T9] usb 7-1: device descriptor read/64, error -71 [ 667.673581][ T5914] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 667.704695][ T5914] usb 4-1: Invalid ep0 maxpacket: 16 [ 667.723445][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 667.732937][ T9] usb 7-1: new full-speed USB device number 45 using dummy_hcd [ 667.852864][ T5914] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 667.873704][ T5914] usb 4-1: Invalid ep0 maxpacket: 16 [ 667.879826][ T5914] usb usb4-port1: unable to enumerate USB device [ 667.892800][ T9] usb 7-1: device descriptor read/64, error -71 [ 667.899138][T23322] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 668.013247][ T9] usb usb7-port1: attempt power cycle [ 668.032889][T23322] usb 6-1: device descriptor read/64, error -71 [ 668.272849][T23322] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 668.352915][ T9] usb 7-1: new full-speed USB device number 46 using dummy_hcd [ 668.383651][ T9] usb 7-1: device descriptor read/8, error -71 [ 668.402997][T23322] usb 6-1: device descriptor read/64, error -71 [ 668.513320][T23322] usb usb6-port1: attempt power cycle [ 668.623016][ T9] usb 7-1: new full-speed USB device number 47 using dummy_hcd [ 668.643701][ T9] usb 7-1: device descriptor read/8, error -71 [ 668.754148][ T9] usb usb7-port1: unable to enumerate USB device [ 668.862854][T23322] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 668.883499][T23322] usb 6-1: device descriptor read/8, error -71 [ 669.122834][T23322] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 669.144212][T23322] usb 6-1: device descriptor read/8, error -71 [ 669.159211][T27383] syzkaller1: entered promiscuous mode [ 669.165586][ T5914] usb 5-1: USB disconnect, device number 114 [ 669.169057][T27383] syzkaller1: entered allmulticast mode [ 669.254317][T23322] usb usb6-port1: unable to enumerate USB device [ 669.369009][T21833] IPVS: starting estimator thread 0... [ 669.462879][T27406] IPVS: using max 37 ests per chain, 88800 per kthread [ 669.812887][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 670.181387][ T30] audit: type=1326 audit(2000000006.900:13277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27403 comm="syz.3.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab80f8f749 code=0x7fc00000 [ 670.213261][ T30] audit: type=1326 audit(2000000006.900:13278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27403 comm="syz.3.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fab80f8f749 code=0x7fc00000 [ 670.236343][ T30] audit: type=1326 audit(2000000006.900:13279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27403 comm="syz.3.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab80f8f749 code=0x7fc00000 [ 670.259244][ T30] audit: type=1326 audit(2000000006.900:13280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27403 comm="syz.3.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab80f8f749 code=0x7fc00000 [ 670.286400][ T30] audit: type=1326 audit(2000000006.900:13281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27403 comm="syz.3.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab80f8f749 code=0x7fc00000 [ 670.310209][ T30] audit: type=1326 audit(2000000006.910:13282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27403 comm="syz.3.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab80f8f749 code=0x7fc00000 [ 670.333086][ T30] audit: type=1326 audit(2000000006.910:13283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27403 comm="syz.3.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab80f8f749 code=0x7fc00000 [ 670.355999][ T30] audit: type=1326 audit(2000000006.910:13284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27403 comm="syz.3.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab80f8f749 code=0x7fc00000 [ 670.378868][ T30] audit: type=1326 audit(2000000006.910:13285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27403 comm="syz.3.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab80f8f749 code=0x7fc00000 [ 670.402045][ T30] audit: type=1326 audit(2000000006.910:13286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27403 comm="syz.3.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab80f8f749 code=0x7fc00000 [ 670.531064][T27423] netlink: 4368 bytes leftover after parsing attributes in process `syz.3.2585'. [ 670.557724][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 670.564913][ T5199] loop5: partition table partially beyond EOD, truncated [ 670.572571][T27423] openvswitch: netlink: Flow key attr not present in new flow. [ 670.580329][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 670.612191][T27424] block nbd0: Unsupported socket: should be TCP or UNIX. [ 670.842896][ T5914] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 670.993069][ T9] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 671.004520][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.015632][ T5914] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 671.025819][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.036809][ T5914] usb 6-1: config 0 descriptor?? [ 671.142829][ T9] usb 4-1: Invalid ep0 maxpacket: 64 [ 671.162924][T23322] usb 7-1: new full-speed USB device number 48 using dummy_hcd [ 671.272899][ T9] usb 4-1: new low-speed USB device number 37 using dummy_hcd [ 671.319305][T23322] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 671.328763][T23322] usb 7-1: config 1 has no interface number 0 [ 671.336279][T23322] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 671.348020][T23322] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 671.359015][T23322] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 671.368359][T23322] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 671.379303][T23322] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 172, setting to 64 [ 671.392833][T23322] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 671.401952][T23322] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.410135][T23322] usb 7-1: Product: syz [ 671.414599][T23322] usb 7-1: Manufacturer: syz [ 671.419438][T23322] usb 7-1: SerialNumber: syz [ 671.431079][T27443] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 671.440021][ T9] usb 4-1: Invalid ep0 maxpacket: 64 [ 671.446095][ T9] usb usb4-port1: attempt power cycle [ 671.457107][ T5914] keytouch 0003:0926:3333.003A: fixing up Keytouch IEC report descriptor [ 671.470801][ T5914] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.003A/input/input74 [ 671.583645][ T5914] keytouch 0003:0926:3333.003A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 671.655032][T27443] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 671.687465][T27443] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 671.710519][T27466] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 671.793099][ T9] usb 4-1: new low-speed USB device number 38 using dummy_hcd [ 671.823024][ T9] usb 4-1: Invalid ep0 maxpacket: 64 [ 671.943535][T27466] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 671.952069][T27466] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 671.953553][ T9] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 671.970282][T23322] cdc_ncm 7-1:1.1: bind() failure [ 671.993683][ T9] usb 4-1: Invalid ep0 maxpacket: 64 [ 671.999562][ T9] usb usb4-port1: unable to enumerate USB device [ 672.096046][T21833] usb 6-1: USB disconnect, device number 6 [ 672.168217][ T9] usb 7-1: USB disconnect, device number 48 [ 672.641024][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 672.651299][ T5199] loop5: partition table partially beyond EOD, truncated [ 672.658838][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 672.735386][T21833] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 672.905492][T21833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.917496][ T5914] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 672.926425][T21833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.942004][T21833] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 672.951572][T21833] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 672.959748][T21833] usb 5-1: Manufacturer: syz [ 672.972258][T21833] usb 5-1: config 0 descriptor?? [ 673.043656][T27526] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 673.057257][T27526] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2595'. [ 673.093125][ T5914] usb 6-1: Using ep0 maxpacket: 8 [ 673.105927][ T5914] usb 6-1: unable to get BOS descriptor or descriptor too short [ 673.116609][ T5914] usb 6-1: config 4 has an invalid interface number: 30 but max is 0 [ 673.124868][ T5914] usb 6-1: config 4 has no interface number 0 [ 673.131097][ T5914] usb 6-1: config 4 interface 30 has no altsetting 0 [ 673.147913][ T5914] usb 6-1: string descriptor 0 read error: -22 [ 673.154903][ T5914] usb 6-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 673.169307][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.187106][ T5914] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 673.195452][ T5914] dw2102: su3000_power_ctrl: 1, initialized 0 [ 673.201920][ T5914] dvb-usb: bulk message failed: -22 (2/0) [ 673.233428][ T5914] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 673.251546][ T5914] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 673.260151][ T5914] usb 6-1: media controller created [ 673.265627][ T5914] dvb-usb: bulk message failed: -22 (6/0) [ 673.273509][ T5914] dw2102: i2c transfer failed. [ 673.279382][ T5914] dvb-usb: bulk message failed: -22 (6/0) [ 673.286094][ T5914] dw2102: i2c transfer failed. [ 673.290947][ T5914] dvb-usb: bulk message failed: -22 (6/0) [ 673.296995][ T5914] dw2102: i2c transfer failed. [ 673.301951][ T5914] dvb-usb: bulk message failed: -22 (6/0) [ 673.308147][ T5914] dw2102: i2c transfer failed. [ 673.314638][ T5914] dvb-usb: bulk message failed: -22 (6/0) [ 673.320853][ T5914] dw2102: i2c transfer failed. [ 673.326121][ T5914] dvb-usb: bulk message failed: -22 (6/0) [ 673.332178][ T5914] dw2102: i2c transfer failed. [ 673.337529][ T5914] dvb-usb: MAC address: 02:02:02:02:02:02 [ 673.359571][ T5914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 673.384815][T27505] dvb-usb: bulk message failed: -22 (4/0) [ 673.393342][T27505] dw2102: i2c transfer failed. [ 673.398450][T27505] dvb-usb: bulk message failed: -22 (4/0) [ 673.408030][T27505] dw2102: i2c transfer failed. [ 673.418163][ T5914] dvb-usb: bulk message failed: -22 (3/0) [ 673.427214][ T5914] dw2102: command 0x0e transfer failed. [ 673.433638][ T5914] dvb-usb: bulk message failed: -22 (3/0) [ 673.439671][ T5914] dw2102: command 0x0e transfer failed. [ 673.445291][T27505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.446934][T27505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.592923][ T9] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 673.746657][ T9] usb 7-1: config 0 has an invalid interface number: 28 but max is 0 [ 673.766522][ T9] usb 7-1: config 0 has no interface number 0 [ 673.775709][ T9] usb 7-1: config 0 interface 28 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.780839][ T5914] dvb-usb: bulk message failed: -22 (3/0) [ 673.791718][ T9] usb 7-1: config 0 interface 28 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.811759][ T5914] dw2102: command 0x0e transfer failed. [ 673.820438][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 673.825580][ T5914] dvb-usb: bulk message failed: -22 (3/0) [ 673.841923][T21833] uclogic 0003:256C:006D.003B: interface is invalid, ignoring [ 673.847932][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.872023][ T5914] dw2102: command 0x0e transfer failed. [ 673.889392][ T5914] dvb-usb: bulk message failed: -22 (1/0) [ 673.898807][ T9] usb 7-1: config 0 descriptor?? [ 673.907450][ T5914] dw2102: command 0x51 transfer failed. [ 673.915480][ T5914] dvb-usb: bulk message failed: -22 (5/0) [ 673.921452][ T5914] dw2102: i2c probe for address 0x68 failed. [ 673.929020][ T5914] dvb-usb: bulk message failed: -22 (5/0) [ 673.936971][T23322] usb 5-1: USB disconnect, device number 115 [ 673.948184][ T5914] dw2102: i2c probe for address 0x69 failed. [ 673.960836][ T5914] dvb-usb: bulk message failed: -22 (5/0) [ 673.970162][ T5914] dw2102: i2c probe for address 0x6a failed. [ 673.977648][ T5914] dw2102: probing for demodulator failed. Is the external power switched on? [ 673.987698][ T5914] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 674.066896][ T5914] rc_core: IR keymap rc-tt-1500 not found [ 674.079331][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 674.088781][ T5914] Registered IR keymap rc-empty [ 674.094361][ T5199] loop5: partition table partially beyond EOD, truncated [ 674.103619][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 674.104251][ T5914] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 674.146544][ T5914] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input75 [ 674.187606][ T5914] dvb-usb: schedule remote query interval to 250 msecs. [ 674.219775][ T5914] dw2102: su3000_power_ctrl: 0, initialized 1 [ 674.249337][ T5914] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 674.282126][ T5914] usb 6-1: USB disconnect, device number 7 [ 674.332178][ T5914] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 674.362356][ T9] logitech-djreceiver 0003:046D:C534.003C: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.6-1/input28 [ 674.514841][T27606] Unsupported ieee802154 address type: 0 [ 674.536330][T27539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.549706][T27539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.559826][T21833] usb 7-1: USB disconnect, device number 49 [ 674.632939][ T5914] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 674.680001][T27622] btrfs: Unknown parameter 'discardA {ޓ _B.aɑFӺwkL32cw g 2' [ 674.782859][ T5914] usb 6-1: Using ep0 maxpacket: 32 [ 674.793038][ T5914] usb 6-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 674.802372][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.810514][ T5914] usb 6-1: Product: syz [ 674.829916][ T5914] usb 6-1: Manufacturer: syz [ 674.835242][ T5914] usb 6-1: SerialNumber: syz [ 674.855884][ T5914] usb 6-1: config 0 descriptor?? [ 674.877977][ T5914] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 674.897654][T27629] ptrace attach of "./syz-executor exec"[5824] was attempted by "./syz-executor exec"[27629] [ 675.026537][T27636] netlink: 'syz.3.2603': attribute type 10 has an invalid length. [ 675.036172][T27636] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2603'. [ 675.213389][ T5914] gspca_topro: reg_w err -71 [ 675.251740][ T5914] gspca_topro: Sensor soi763a [ 675.276427][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 675.276468][ T5199] loop5: partition table partially beyond EOD, truncated [ 675.277525][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 675.278158][ T5914] usb 6-1: USB disconnect, device number 8 [ 675.466678][ T5839] Bluetooth: hci4: unexpected event for opcode 0x0c25 [ 675.562183][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 675.573698][ T5199] loop5: partition table partially beyond EOD, truncated [ 675.581714][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 675.677354][T27648] Set syz1 is full, maxelem 5134 reached [ 675.707633][T27683] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2608'. [ 675.767147][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 675.785016][ T5199] loop5: partition table partially beyond EOD, truncated [ 675.800463][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 675.868650][T27692] netlink: 14593 bytes leftover after parsing attributes in process `syz.5.2609'. [ 675.980800][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 676.043258][ T5199] loop5: partition table partially beyond EOD, truncated [ 676.050763][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 676.154445][T27712] fuse: Unknown parameter 'grou#-x 00000000000000000000' [ 676.196540][T27712] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 676.251473][T27719] kvm: kvm [27706]: vcpu0, guest rIP: 0x9128 Unhandled WRMSR(0x4000001a) = 0x845 [ 676.353567][ T5914] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 676.520379][ T5914] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 676.530825][ T5914] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.539643][ T5914] usb 7-1: Product: syz [ 676.544043][T21833] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 676.551771][ T5914] usb 7-1: Manufacturer: syz [ 676.559718][ T5914] usb 7-1: SerialNumber: syz [ 676.577715][ T5914] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 676.596378][ T5915] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 676.716567][T21833] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 676.725841][T21833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.734041][T21833] usb 4-1: Product: syz [ 676.738294][T21833] usb 4-1: Manufacturer: syz [ 676.743027][T21833] usb 4-1: SerialNumber: syz [ 676.902838][ T9] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 677.008704][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 677.027363][ T5199] loop5: partition table partially beyond EOD, truncated [ 677.046336][ T5914] usb 7-1: USB disconnect, device number 50 [ 677.052965][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 677.065622][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 677.080979][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 677.096201][ T9] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 677.116455][ T9] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 677.133188][ T9] usb 5-1: Product: syz [ 677.138995][ T9] usb 5-1: Manufacturer: syz [ 677.144523][ T9] usb 5-1: SerialNumber: syz [ 677.240817][T27753] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2617'. [ 677.366966][ T9] usb 5-1: palm_os_3_probe - error -71 getting connection information [ 677.377039][ T9] visor 5-1:1.0: probe with driver visor failed with error -71 [ 677.391774][ T9] usb 5-1: USB disconnect, device number 116 [ 677.404108][T27723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.424467][T27723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.482320][T21833] rtl8150 4-1:1.0: couldn't reset the device [ 677.495877][T21833] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 677.513236][T21833] usb 4-1: USB disconnect, device number 40 [ 677.720603][T27778] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2620'. [ 677.882808][ T5915] usb 7-1: Service connection timeout for: 256 [ 677.889992][ T5915] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 677.902504][ T5915] ath9k_htc: Failed to initialize the device [ 677.909157][ T5914] usb 7-1: ath9k_htc: USB layer deinitialized [ 678.016262][T27792] lo speed is unknown, defaulting to 1000 [ 678.061814][T27801] binder: BINDER_SET_CONTEXT_MGR already set [ 678.093140][T27801] binder: 27799:27801 ioctl 4018620d 200000000480 returned -16 [ 678.140376][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 678.146224][ T5199] loop5: partition table partially beyond EOD, truncated [ 678.175681][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 678.223690][ T5914] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 678.402768][ T5914] usb 7-1: device descriptor read/64, error -71 [ 678.572952][T21833] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 678.586950][T27839] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 678.599885][T27837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 678.672946][ T5914] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 678.743598][T21833] usb 6-1: Using ep0 maxpacket: 32 [ 678.754274][T21833] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 678.772910][T21833] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xEA, changing to 0x8A [ 678.794951][T21833] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 100, changing to 10 [ 678.813907][ T5914] usb 7-1: device descriptor read/64, error -71 [ 678.821189][T21833] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 18268, setting to 1024 [ 678.842982][T21833] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0x6F, changing to 0xF [ 678.862881][T21833] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 678.874273][T21833] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 678.884253][T21833] usb 6-1: config 155 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 11 [ 678.901059][T21833] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 678.922913][T21833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.931027][T21833] usb 6-1: Product: syz [ 678.938022][ T5914] usb usb7-port1: attempt power cycle [ 678.943628][T21833] usb 6-1: Manufacturer: syz [ 678.948270][T21833] usb 6-1: SerialNumber: syz [ 678.959400][T27828] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 678.978652][ C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 679.000721][T21833] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input76 [ 679.038821][T21833] imon:send_packet: error submitting urb(-90) [ 679.082925][T21833] imon 6-1:155.0: panel buttons/knobs setup failed [ 679.089519][T21833] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 679.118041][T21833] (id 0x00) [ 679.196234][T21833] rc_core: IR keymap rc-imon-pad not found [ 679.202376][T21833] Registered IR keymap rc-empty [ 679.207701][T21833] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 679.220845][T21833] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 679.230441][T21833] imon:send_packet: error submitting urb(-90) [ 679.252910][T21833] imon 6-1:155.0: remote input dev register failed [ 679.261865][T21833] imon 6-1:155.0: imon_init_intf0: rc device setup failed [ 679.292873][ T5914] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 679.304164][T21833] imon 6-1:155.0: unable to initialize intf0, err 0 [ 679.310996][T21833] imon:imon_probe: failed to initialize context! [ 679.313163][ T9] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 679.321482][T21833] imon 6-1:155.0: unable to register, err -19 [ 679.335403][ T5914] usb 7-1: device descriptor read/8, error -71 [ 679.353072][T21833] usb 6-1: USB disconnect, device number 9 [ 679.484022][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 679.491301][ T9] usb 5-1: config index 0 descriptor too short (expected 53522, got 18) [ 679.512753][ T9] usb 5-1: config 43 has too many interfaces: 90, using maximum allowed: 32 [ 679.521532][ T9] usb 5-1: config 43 has an invalid descriptor of length 79, skipping remainder of the config [ 679.533028][ T9] usb 5-1: config 43 has 0 interfaces, different from the descriptor's value: 90 [ 679.553930][ T9] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 679.564565][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.573044][ T9] usb 5-1: Product: syz [ 679.577391][ T9] usb 5-1: Manufacturer: syz [ 679.582021][ T9] usb 5-1: SerialNumber: syz [ 679.583006][ T5914] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 679.595682][ T9] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 679.605767][ T9] usb 5-1: no configuration chosen from 1 choice [ 679.629286][ T5914] usb 7-1: device descriptor read/8, error -71 [ 679.722796][T21833] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 679.753320][ T5914] usb usb7-port1: unable to enumerate USB device [ 679.755485][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 679.782768][ T5199] loop5: partition table partially beyond EOD, truncated [ 679.791366][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 679.902785][T21833] usb 4-1: Using ep0 maxpacket: 32 [ 679.908741][T21833] usb 4-1: too many configurations: 209, using maximum allowed: 8 [ 679.944810][T21833] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 679.952447][T21833] usb 4-1: can't read configurations, error -61 [ 679.979077][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 679.995589][ T5199] loop5: partition table partially beyond EOD, truncated [ 680.006267][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 680.093247][T21833] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 680.252902][T21833] usb 4-1: Using ep0 maxpacket: 32 [ 680.258992][T21833] usb 4-1: too many configurations: 209, using maximum allowed: 8 [ 680.269069][T21833] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 680.276975][T21833] usb 4-1: can't read configurations, error -61 [ 680.283406][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 680.291918][T21833] usb usb4-port1: attempt power cycle [ 680.445408][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 680.453979][ T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 680.462434][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 680.473456][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 680.483748][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 680.493850][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 680.507160][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 680.516334][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.633960][T21833] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 680.665409][T21833] usb 4-1: Using ep0 maxpacket: 32 [ 680.671393][T21833] usb 4-1: too many configurations: 209, using maximum allowed: 8 [ 680.681320][T21833] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 680.690065][T21833] usb 4-1: can't read configurations, error -61 [ 680.730837][ T9] usb 6-1: GET_CAPABILITIES returned 0 [ 680.736897][ T9] usbtmc 6-1:16.0: can't read capabilities [ 680.825069][T21833] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 680.865181][T21833] usb 4-1: Using ep0 maxpacket: 32 [ 680.871064][T21833] usb 4-1: too many configurations: 209, using maximum allowed: 8 [ 680.881010][T21833] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 680.890524][T21833] usb 4-1: can't read configurations, error -61 [ 680.897702][T21833] usb usb4-port1: unable to enumerate USB device [ 681.044834][ T9] usb 6-1: USB disconnect, device number 10 [ 681.050954][T27878] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 681.075810][T27904] usb 6-1: usbtmc_ioctl_clear_out_halt returned -19 [ 681.522806][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 681.674953][ T9] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 681.688382][ T9] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 681.698307][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.707671][ T9] usb 6-1: Product: syz [ 681.712114][ T9] usb 6-1: Manufacturer: syz [ 681.717184][ T9] usb 6-1: SerialNumber: syz [ 681.741184][ T9] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 682.100823][T23322] usb 5-1: USB disconnect, device number 117 [ 682.205532][ T9] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 682.217115][ T9] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 682.225975][ T9] usb 6-1: media controller created [ 682.241061][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 682.253049][T21833] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 682.333815][ T9] usb 6-1: USB disconnect, device number 11 [ 682.396734][T21833] usb 7-1: device descriptor read/64, error -71 [ 682.499951][T23322] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 682.647483][T21833] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 682.662942][T23322] usb 5-1: Using ep0 maxpacket: 16 [ 682.672948][T23322] usb 5-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 682.682062][T23322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.690757][T23322] usb 5-1: Product: syz [ 682.695095][T23322] usb 5-1: Manufacturer: syz [ 682.700523][T23322] usb 5-1: SerialNumber: syz [ 682.710246][T23322] usb 5-1: config 0 descriptor?? [ 682.725282][T23322] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 682.758336][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 682.770804][ T5199] loop5: partition table partially beyond EOD, truncated [ 682.779405][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 682.786879][T21833] usb 7-1: device descriptor read/64, error -71 [ 682.873012][ T9] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 682.895424][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 682.900950][ T5199] loop5: partition table partially beyond EOD, truncated [ 682.913348][T21833] usb usb7-port1: attempt power cycle [ 682.919241][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 682.930775][T23322] gspca_sn9c2028: read1 error -71 [ 682.947121][T23322] gspca_sn9c2028: read1 error -71 [ 682.968229][T23322] gspca_sn9c2028: read1 error -71 [ 682.977183][T23322] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -71 [ 683.016747][T23322] usb 5-1: USB disconnect, device number 118 [ 683.037488][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 683.050684][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 683.062209][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 683.073090][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 683.081120][ T9] usb 4-1: SerialNumber: syz [ 683.095490][ T9] usb 4-1: 0:2 : does not exist [ 683.232807][ T5914] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 683.262791][T21833] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 683.283516][T21833] usb 7-1: device descriptor read/8, error -71 [ 683.292994][T27972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.306966][T27972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.385815][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 683.398080][ T5914] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 683.407890][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.420845][ T5914] usb 6-1: config 0 descriptor?? [ 683.427923][T27993] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 683.497436][T28014] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 683.523106][T21833] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 683.539322][T27972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.553120][T28018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.562476][T27972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.572235][T28018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.580909][T21833] usb 7-1: device descriptor read/8, error -71 [ 683.623982][ T9] usb 4-1: USB disconnect, device number 45 [ 683.693774][T21833] usb usb7-port1: unable to enumerate USB device [ 683.772923][T23322] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 683.923789][T23322] usb 5-1: Using ep0 maxpacket: 16 [ 683.932239][T23322] usb 5-1: config 0 has an invalid interface number: 173 but max is 0 [ 683.940853][T23322] usb 5-1: config 0 has no interface number 0 [ 683.947081][T23322] usb 5-1: config 0 interface 173 has no altsetting 0 [ 683.957579][T23322] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0122, bcdDevice=57.d8 [ 683.967807][T23322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.976309][T23322] usb 5-1: Product: syz [ 683.980651][T23322] usb 5-1: Manufacturer: syz [ 683.988653][T23322] usb 5-1: SerialNumber: syz [ 683.996838][T23322] usb 5-1: config 0 descriptor?? [ 684.008392][T23322] option 5-1:0.173: GSM modem (1-port) converter detected [ 684.059643][ T5914] usbhid 6-1:0.0: can't add hid device: -71 [ 684.069336][ T5914] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 684.081336][ T5914] usb 6-1: USB disconnect, device number 12 [ 684.143084][T21833] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 684.272825][T21833] usb 4-1: device descriptor read/64, error -71 [ 684.523091][T21833] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 684.602026][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 684.612803][ T5199] loop5: partition table partially beyond EOD, truncated [ 684.621163][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 684.650795][T28067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.660786][T28067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.663528][T21833] usb 4-1: device descriptor read/64, error -71 [ 684.793262][T21833] usb usb4-port1: attempt power cycle [ 684.873266][T23322] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 685.032861][T23322] usb 6-1: Using ep0 maxpacket: 32 [ 685.040916][T23322] usb 6-1: unable to get BOS descriptor or descriptor too short [ 685.050655][T23322] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 685.069832][T23322] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 685.080987][T23322] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 685.090826][T23322] usb 6-1: config 128 has no interface number 0 [ 685.097625][T23322] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 685.110161][T23322] usb 6-1: config 128 interface 127 has no altsetting 0 [ 685.120528][T23322] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 685.130087][T23322] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.138560][T23322] usb 6-1: Product: syz [ 685.143055][T23322] usb 6-1: Manufacturer: syz [ 685.147694][T23322] usb 6-1: SerialNumber: syz [ 685.148466][T21833] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 685.172927][T28068] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 685.174383][T21833] usb 4-1: device descriptor read/8, error -71 [ 685.375138][T28086] overlayfs: cannot append lower layer [ 685.405960][T23322] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 685.426236][T21833] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 685.455065][T21833] usb 4-1: device descriptor read/8, error -71 [ 685.504579][T23322] usb 6-1: USB disconnect, device number 13 [ 685.556709][T26086] udevd[26086]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 685.580415][T21833] usb usb4-port1: unable to enumerate USB device [ 685.925768][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 685.942829][ T5199] loop5: partition table partially beyond EOD, truncated [ 685.953959][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 686.169614][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 686.179312][ T5199] loop5: partition table partially beyond EOD, truncated [ 686.189646][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 686.392628][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 686.399225][ T5199] loop5: partition table partially beyond EOD, truncated [ 686.410227][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 686.420350][T28150] x_tables: duplicate underflow at hook 4 [ 686.561276][T21833] usb 5-1: USB disconnect, device number 119 [ 686.589256][T21833] option 5-1:0.173: device disconnected [ 686.943448][T21833] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 687.112851][T21833] usb 7-1: Using ep0 maxpacket: 32 [ 687.114180][T23322] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 687.130449][T21833] usb 7-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 64 [ 687.151805][T21833] usb 7-1: config 1 interface 0 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 687.171586][T21833] usb 7-1: config 1 interface 0 has no altsetting 0 [ 687.203495][T21833] usb 7-1: language id specifier not provided by device, defaulting to English [ 687.236626][T21833] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 687.252811][T21833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.260869][T21833] usb 7-1: Product: 랓⡲瓡ᘒࡨ纕ꛘ旉╓ମ闇ⶽỦ鮀¢쫓膬栅㵥⠮珇㷕ꠂ㹎笹쮴⋯୚﵀쏽儸모쉓热龇澥⯀湒ᖧ懲䤬恑Ṛꕜ뭦쥴벡﫥঴⸧／璫䌄령盵殽Ψ햎鱖㤁ݧࡹ춧秷皓銼ዞ쁞瀁빴펤醇쥰഑尸⥮嚝鎁퇖⑺윏핈贴ት푿䟂 [ 687.291841][T21833] usb 7-1: Manufacturer: င [ 687.293393][T23322] usb 5-1: Using ep0 maxpacket: 8 [ 687.303371][T21833] usb 7-1: SerialNumber: syz [ 687.312553][T28171] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 687.320921][T28171] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 687.355637][T23322] usb 5-1: config 1 has an invalid interface number: 80 but max is 0 [ 687.364935][T23322] usb 5-1: config 1 has no interface number 0 [ 687.371094][T23322] usb 5-1: config 1 interface 80 has no altsetting 0 [ 687.380654][T23322] usb 5-1: New USB device found, idVendor=0c45, idProduct=60fb, bcdDevice=8d.41 [ 687.390374][T23322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.398847][T23322] usb 5-1: Product: syz [ 687.412452][T23322] usb 5-1: Manufacturer: syz [ 687.427592][T23322] usb 5-1: SerialNumber: syz [ 687.534140][T28171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.543942][T28171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.574836][T21833] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 687.605557][T21833] usb 7-1: USB disconnect, device number 59 [ 687.663701][T28222] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 687.670292][T28222] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 687.689835][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 687.700889][T23322] gspca_main: sonixj-2.14.0 probing 0c45:60fb [ 687.707863][ T5199] loop5: partition table partially beyond EOD, truncated [ 687.717443][T23322] gspca_sonixj: reg_w1 err -71 [ 687.724421][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 687.731824][T23322] sonixj 5-1:1.80: probe with driver sonixj failed with error -71 [ 687.734546][T28222] vhci_hcd vhci_hcd.0: Device attached [ 687.757249][T23322] usb 5-1: USB disconnect, device number 120 [ 687.932798][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 687.972799][ T5832] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 688.012950][ T5895] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 688.062802][ T9] usb 6-1: device descriptor read/64, error -71 [ 688.173471][ T5895] usb 4-1: Using ep0 maxpacket: 32 [ 688.193353][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.215927][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.227150][ T5895] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 688.236855][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.250343][ T5895] usb 4-1: config 0 descriptor?? [ 688.255952][T28251] netlink: 'syz.6.2667': attribute type 3 has an invalid length. [ 688.313589][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 688.329448][T28255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2668'. [ 688.457969][T28264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 688.463465][ T9] usb 6-1: device descriptor read/64, error -71 [ 688.553872][T28273] overlay: Unknown parameter 'audit' [ 688.586193][ T9] usb usb6-port1: attempt power cycle [ 688.686697][ T5895] redragon 0003:0C45:760B.003D: hidraw0: USB HID v0.02 Device [HID 0c45:760b] on usb-dummy_hcd.3-1/input0 [ 688.803790][T23322] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 688.880694][ T5895] usb 4-1: USB disconnect, device number 50 [ 688.891360][T28223] vhci_hcd: connection reset by peer [ 688.905985][T10262] vhci_hcd vhci_hcd.3: stop threads [ 688.911485][T10262] vhci_hcd vhci_hcd.3: release socket [ 688.919290][T10262] vhci_hcd vhci_hcd.3: disconnect device [ 688.953065][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 688.973548][ T9] usb 6-1: device descriptor read/8, error -71 [ 688.984543][T23322] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 160, changing to 11 [ 688.996178][T23322] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 689.006378][T23322] usb 7-1: config 0 interface 0 has no altsetting 0 [ 689.013762][T23322] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 689.023233][T23322] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.034557][T23322] usb 7-1: config 0 descriptor?? [ 689.222850][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 689.243890][ T9] usb 6-1: device descriptor read/8, error -71 [ 689.353202][ T9] usb usb6-port1: unable to enumerate USB device [ 689.657072][T23322] usbhid 7-1:0.0: can't add hid device: -71 [ 689.665971][T23322] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 689.678481][T23322] usb 7-1: USB disconnect, device number 60 [ 690.185696][T21833] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 690.362895][T21833] usb 5-1: Using ep0 maxpacket: 32 [ 690.375713][T21833] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.387165][T21833] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.414199][T21833] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 690.423705][T21833] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 690.432498][T21833] usb 5-1: Product: syz [ 690.436863][T21833] usb 5-1: Manufacturer: syz [ 690.465720][T21833] hub 5-1:4.0: USB hub found [ 690.680956][T21833] hub 5-1:4.0: 2 ports detected [ 690.761312][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 690.770138][ T5199] loop5: partition table partially beyond EOD, truncated [ 690.780768][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 690.890604][T28329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.908033][T28329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.919493][T28329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.930108][T28329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.944575][T21833] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 690.951430][T21833] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 691.009980][T28389] netlink: 'syz.3.2687': attribute type 10 has an invalid length. [ 691.013122][ T5914] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 691.026897][T28389] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2687'. [ 691.030129][T21833] usb 5-1: USB disconnect, device number 121 [ 691.091663][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.202885][ T5914] usb 7-1: Using ep0 maxpacket: 16 [ 691.210036][ T5914] usb 7-1: config 5 has an invalid interface number: 9 but max is 0 [ 691.218319][ T5914] usb 7-1: config 5 has no interface number 0 [ 691.224511][ T5914] usb 7-1: config 5 interface 9 has no altsetting 0 [ 691.233761][ T5914] usb 7-1: New USB device found, idVendor=12d1, idProduct=1435, bcdDevice= 0.00 [ 691.243834][ T5914] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.251977][ T5914] usb 7-1: Product: syz [ 691.256519][ T5914] usb 7-1: Manufacturer: syz [ 691.261177][ T5914] usb 7-1: SerialNumber: syz [ 691.627502][ T5914] usb-storage 7-1:5.9: USB Mass Storage device detected [ 691.739897][ T5914] option 7-1:5.9: GSM modem (1-port) converter detected [ 691.759818][ T5914] usb 7-1: USB disconnect, device number 61 [ 691.782777][T21833] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 691.797627][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 691.806545][ T5914] option 7-1:5.9: device disconnected [ 691.815833][ T5199] loop5: partition table partially beyond EOD, truncated [ 691.827673][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 691.962862][T21833] usb 5-1: Using ep0 maxpacket: 32 [ 691.970372][T21833] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 691.983985][T21833] usb 5-1: config 0 has no interface number 0 [ 691.990151][T21833] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 692.022773][T21833] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 692.032935][ T5915] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 692.043761][T21833] usb 5-1: config 0 interface 85 has no altsetting 0 [ 692.071001][T21833] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 692.093306][T21833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.101402][T21833] usb 5-1: Product: syz [ 692.135760][T21833] usb 5-1: Manufacturer: syz [ 692.140425][T21833] usb 5-1: SerialNumber: syz [ 692.149990][T21833] usb 5-1: config 0 descriptor?? [ 692.173900][ T5915] usb 4-1: device descriptor read/64, error -71 [ 692.186686][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 692.192048][ T5199] loop5: partition table partially beyond EOD, truncated [ 692.213558][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 692.356035][T28454] netlink: 'syz.5.2696': attribute type 29 has an invalid length. [ 692.399086][T28400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.432972][ T5915] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 692.435167][T28400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.461966][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 692.468762][T21833] appletouch 5-1:0.85: Failed to read mode from device. [ 692.482809][ T5199] loop5: partition table partially beyond EOD, truncated [ 692.490163][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 692.497751][T21833] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 692.582971][ T5915] usb 4-1: device descriptor read/64, error -71 [ 692.646807][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 692.652328][ T5199] loop5: partition table partially beyond EOD, truncated [ 692.660429][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 692.685202][T21833] usb 5-1: USB disconnect, device number 122 [ 692.705707][ T5915] usb usb4-port1: attempt power cycle [ 692.796601][T28475] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 692.803196][T28475] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 692.815320][T28475] vhci_hcd vhci_hcd.0: Device attached [ 692.932120][T28476] vhci_hcd: connection closed [ 692.932336][T24082] vhci_hcd vhci_hcd.5: stop threads [ 692.947709][T24082] vhci_hcd vhci_hcd.5: release socket [ 692.953741][T24082] vhci_hcd vhci_hcd.5: disconnect device [ 692.992850][ T9] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 693.056468][ T5915] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 693.072874][ T5832] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 693.085527][ T5915] usb 4-1: device descriptor read/8, error -71 [ 693.343151][ T5915] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 693.365610][ T5915] usb 4-1: device descriptor read/8, error -71 [ 693.486654][ T5915] usb usb4-port1: unable to enumerate USB device [ 694.139715][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 694.158482][ T5199] loop5: partition table partially beyond EOD, truncated [ 694.168904][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 694.253184][ T5832] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 694.315982][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 694.321352][ T5199] loop5: partition table partially beyond EOD, truncated [ 694.334077][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 694.422817][ T5832] usb 5-1: Using ep0 maxpacket: 32 [ 694.431178][ T5832] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 694.443597][ T5832] usb 5-1: config 0 has no interface number 0 [ 694.449711][ T5832] usb 5-1: config 0 interface 184 has no altsetting 0 [ 694.459249][ T5832] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 694.468674][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.479359][ T5832] usb 5-1: Product: syz [ 694.483949][ T5832] usb 5-1: Manufacturer: syz [ 694.488582][ T5832] usb 5-1: SerialNumber: syz [ 694.497347][ T5832] usb 5-1: config 0 descriptor?? [ 694.510597][ T5832] smsc75xx v1.0.0 [ 694.642801][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 694.648308][ T5199] loop5: partition table partially beyond EOD, truncated [ 694.661483][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 694.724749][T28520] binder: 28516:28520 ioctl c0306201 200000000640 returned -22 [ 694.833688][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 694.840530][ T5199] loop5: partition table partially beyond EOD, truncated [ 694.873639][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 695.114008][ T5832] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 695.133167][ T5832] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 695.179992][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 695.195718][ T5199] loop5: partition table partially beyond EOD, truncated [ 695.203967][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 695.532767][ T5915] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 695.684149][ T5915] usb 6-1: not running at top speed; connect to a high speed hub [ 695.711662][ T5915] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 695.731675][ T5915] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 695.753819][ T5915] usb 6-1: config 1 has no interface number 1 [ 695.760001][ T5915] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 37, changing to 4 [ 695.782817][ T5915] usb 6-1: config 1 interface 2 has no altsetting 0 [ 695.805196][ T5915] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 695.815523][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.823686][ T5915] usb 6-1: Product: syz [ 695.827954][ T5915] usb 6-1: Manufacturer: syz [ 695.832616][ T5915] usb 6-1: SerialNumber: syz [ 695.845328][T28557] Dead loop on virtual device ip6_vti0, fix it urgently! [ 695.864349][T28557] Dead loop on virtual device ip6_vti0, fix it urgently! [ 695.882196][T28557] Dead loop on virtual device ip6_vti0, fix it urgently! [ 695.903321][T28557] Dead loop on virtual device ip6_vti0, fix it urgently! [ 695.911149][T28557] Dead loop on virtual device ip6_vti0, fix it urgently! [ 695.931405][T28557] Dead loop on virtual device ip6_vti0, fix it urgently! [ 695.949814][ T5832] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 695.972786][ T5832] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 695.993203][ T5832] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 696.014747][ T5832] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 696.044456][ T5832] usb 5-1: USB disconnect, device number 123 [ 696.536903][T28546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.547259][T28546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.572900][ T5832] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 696.573754][ T5915] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 696.600678][ T5915] usb 6-1: selecting invalid altsetting 0 [ 696.615303][T28584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.663286][T28584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.732435][ T5915] usb 6-1: USB disconnect, device number 18 [ 696.733565][ T5832] usb 4-1: device descriptor read/64, error -71 [ 696.826066][T15845] udevd[15845]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 696.842290][T21833] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 697.002822][ T5832] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 697.003434][T21833] usb 5-1: Using ep0 maxpacket: 8 [ 697.026360][T21833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 697.044291][T21833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 697.054453][T21833] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 697.064556][T21833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.103487][T21833] usb 5-1: config 0 descriptor?? [ 697.162998][ T5832] usb 4-1: device descriptor read/64, error -71 [ 697.273169][ T5832] usb usb4-port1: attempt power cycle [ 697.289999][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 697.296979][ T5199] loop5: partition table partially beyond EOD, truncated [ 697.304885][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 697.536163][T21833] usbhid 5-1:0.0: can't add hid device: -71 [ 697.548420][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 697.554130][T21833] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 697.564160][ T5199] loop5: partition table partially beyond EOD, truncated [ 697.571465][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 697.580409][T21833] usb 5-1: USB disconnect, device number 124 [ 697.613710][ T5832] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 697.647189][ T5832] usb 4-1: device descriptor read/8, error -71 [ 697.892829][ T5832] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 697.934625][ T5832] usb 4-1: device descriptor read/8, error -71 [ 698.008632][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 698.032846][ T5199] loop5: partition table partially beyond EOD, truncated [ 698.063314][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 698.066139][ T5832] usb usb4-port1: unable to enumerate USB device [ 698.382805][ T5895] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 698.542757][ T5895] usb 6-1: Using ep0 maxpacket: 16 [ 698.556472][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 698.589389][ T5895] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 698.626032][ T5895] usb 6-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 698.643598][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.666104][ T5895] usb 6-1: config 0 descriptor?? [ 698.862793][T21833] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 699.019494][T21833] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 699.029880][T21833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.038282][T21833] usb 5-1: Product: syz [ 699.042494][T21833] usb 5-1: Manufacturer: syz [ 699.048151][T21833] usb 5-1: SerialNumber: syz [ 699.063497][T21833] usb 5-1: config 0 descriptor?? [ 699.075581][T21833] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 699.103791][T21833] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 699.115269][T21833] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 699.125311][T21833] usb 5-1: media controller created [ 699.146224][T21833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 699.238275][T21833] DVB: Unable to find symbol mt352_attach() [ 699.271439][T28650] dvb-usb: bulk message failed: -22 (7/0) [ 699.289415][ T5895] usbhid 6-1:0.0: can't add hid device: -71 [ 699.318264][ T5895] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 699.346489][ T5895] usb 6-1: USB disconnect, device number 19 [ 699.354444][T21833] DVB: Unable to find symbol nxt6000_attach() [ 699.360605][T21833] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 699.413669][T21833] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input79 [ 699.454722][T21833] dvb-usb: schedule remote query interval to 1000 msecs. [ 699.461818][T21833] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 699.515330][T21833] dvb-usb: bulk message failed: -22 (7/0) [ 699.521172][T21833] dvb-usb: bulk message failed: -22 (7/0) [ 699.544251][T21833] usb 5-1: USB disconnect, device number 125 [ 699.589467][T21833] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 699.742868][ T5895] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 699.881540][T28701] netlink: 'syz.4.2720': attribute type 10 has an invalid length. [ 699.914585][ T5895] usb 4-1: config 0 has an invalid interface number: 165 but max is 0 [ 699.927762][T28701] team0: Device veth1_macvtap failed to register rx_handler [ 699.936201][ T5895] usb 4-1: config 0 has no interface number 0 [ 699.942550][ T5895] usb 4-1: config 0 interface 165 has no altsetting 0 [ 699.977026][ T5895] usb 4-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=71.ba [ 699.992073][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.000442][ T5895] usb 4-1: Product: syz [ 700.009311][ T5895] usb 4-1: Manufacturer: syz [ 700.022153][ T5895] usb 4-1: SerialNumber: syz [ 700.033532][ T5895] usb 4-1: config 0 descriptor?? [ 700.254757][ T5895] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 700.297400][ T5895] usb 4-1: USB disconnect, device number 59 [ 700.352865][ T9] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 700.427643][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 700.433098][ T5199] loop5: partition table partially beyond EOD, truncated [ 700.440692][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 700.497960][ T9] usb 5-1: device descriptor read/64, error -71 [ 700.523433][T28728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.547927][T28728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.762910][ T5832] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 700.776063][T28728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.784892][ T9] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 700.788585][T28728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.801208][T28735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.834599][T28735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.857813][T28728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.893685][T28728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.926462][ T5832] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 700.944872][ T5832] usb 6-1: config 0 interface 0 has no altsetting 0 [ 700.956095][T28735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.966780][T28735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.975083][ T9] usb 5-1: device descriptor read/64, error -71 [ 701.056485][ T5832] usb 6-1: string descriptor 0 read error: -71 [ 701.074319][ T5832] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 701.084692][ T9] usb usb5-port1: attempt power cycle [ 701.103500][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 701.126288][ T5832] usb 6-1: config 0 descriptor?? [ 701.137084][ T5832] usb 6-1: can't set config #0, error -71 [ 701.156747][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 701.162253][ T5199] loop5: partition table partially beyond EOD, truncated [ 701.166136][ T5832] usb 6-1: USB disconnect, device number 20 [ 701.175943][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 701.453004][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 701.475243][ T9] usb 5-1: device descriptor read/8, error -71 [ 701.723011][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 701.754375][ T9] usb 5-1: device descriptor read/8, error -71 [ 701.875592][ T9] usb usb5-port1: unable to enumerate USB device [ 702.047170][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 702.065621][ T5199] loop5: partition table partially beyond EOD, truncated [ 702.073116][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 702.123139][ T9] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 702.303371][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 702.315080][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 702.324210][ T9] usb 4-1: config 179 has no interface number 0 [ 702.330563][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 702.345404][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 702.356999][T21833] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 702.359226][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 702.376358][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 702.388677][ T9] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 702.403863][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 702.416034][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.435019][T28785] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 702.545403][T21833] usb 6-1: unable to get BOS descriptor or descriptor too short [ 702.565710][T21833] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 702.574850][T21833] usb 6-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 702.589707][T21833] usb 6-1: config 1 interface 0 has no altsetting 1 [ 702.600207][T21833] usb 6-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 702.611836][T21833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.621422][T21833] usb 6-1: Product: syz [ 702.625744][T21833] usb 6-1: Manufacturer: syz [ 702.630380][T21833] usb 6-1: SerialNumber: syz [ 702.656518][T21833] smsusb:smsusb_probe: board id=8, interface number 0 [ 702.696952][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input80 [ 702.855570][T21833] smsusb:smsusb_probe: Device initialized with return code -19 [ 702.873844][ T9] usb 4-1: USB disconnect, device number 60 [ 702.873907][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 702.888189][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 703.058022][ T5832] usb 6-1: USB disconnect, device number 21 [ 703.512847][T21833] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 703.662856][T21833] usb 5-1: Using ep0 maxpacket: 8 [ 703.676459][T21833] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 703.693503][T21833] usb 5-1: can't read configurations, error -22 [ 703.703952][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 703.709362][ T5199] loop5: partition table partially beyond EOD, truncated [ 703.747913][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 703.853776][T21833] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 703.925468][T28854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2734'. [ 704.022777][T21833] usb 5-1: Using ep0 maxpacket: 8 [ 704.030562][T21833] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 704.049922][T21833] usb 5-1: can't read configurations, error -22 [ 704.063507][T21833] usb usb5-port1: attempt power cycle [ 704.413714][T21833] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 704.434191][T21833] usb 5-1: Using ep0 maxpacket: 8 [ 704.441409][T21833] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 704.450232][T21833] usb 5-1: can't read configurations, error -22 [ 704.518269][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 704.530551][ T5199] loop5: partition table partially beyond EOD, truncated [ 704.546556][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 704.585475][T21833] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 704.623825][T21833] usb 5-1: Using ep0 maxpacket: 8 [ 704.631196][T21833] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 704.653188][T21833] usb 5-1: can't read configurations, error -22 [ 704.664785][T21833] usb usb5-port1: unable to enumerate USB device [ 704.747131][T28884] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 704.782330][T28884] netlink: 'syz.5.2741': attribute type 10 has an invalid length. [ 704.793073][T28884] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.800538][T28884] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.821914][T28884] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.829236][T28884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 704.836913][T28884] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.844228][T28884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 704.870195][T28884] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 705.368205][T28890] PID 28890 killed due to inadequate hugepage pool [ 705.638836][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 705.662179][ T5199] loop5: partition table partially beyond EOD, truncated [ 705.671286][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 705.892831][ T5832] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 706.052791][ T5832] usb 6-1: Using ep0 maxpacket: 32 [ 706.060551][ T5832] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 706.071022][ T5832] usb 6-1: config 0 has no interface number 0 [ 706.077653][ T5832] usb 6-1: config 0 interface 119 has no altsetting 0 [ 706.087899][ T5832] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=34.5b [ 706.099994][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.108438][ T5832] usb 6-1: Product: syz [ 706.115159][ T5832] usb 6-1: Manufacturer: syz [ 706.119875][ T5832] usb 6-1: SerialNumber: syz [ 706.134136][ T5832] usb 6-1: config 0 descriptor?? [ 706.147744][ T5832] usbserial_generic 6-1:0.119: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 706.159927][ T5832] usbserial_generic 6-1:0.119: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 706.171732][ T5832] usbserial_generic 6-1:0.119: generic converter detected [ 706.198812][ T5832] usb 6-1: generic converter now attached to ttyUSB0 [ 706.351683][T21833] usb 6-1: USB disconnect, device number 22 [ 706.389960][T21833] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 706.405490][T21833] usbserial_generic 6-1:0.119: device disconnected [ 706.803072][ T5832] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 706.927749][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 706.949965][ T5199] loop5: partition table partially beyond EOD, truncated [ 706.958486][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 706.972771][ T5832] usb 5-1: Using ep0 maxpacket: 16 [ 706.985391][ T5832] usb 5-1: config 0 has an invalid interface number: 226 but max is 0 [ 707.008537][ T5832] usb 5-1: config 0 has no interface number 0 [ 707.021961][ T5832] usb 5-1: config 0 interface 226 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 707.056469][ T5832] usb 5-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=f0.56 [ 707.092757][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.124005][ T5832] usb 5-1: Product: syz [ 707.131544][ T5832] usb 5-1: Manufacturer: syz [ 707.140810][ T5832] usb 5-1: SerialNumber: syz [ 707.167946][ T5832] usb 5-1: config 0 descriptor?? [ 707.182861][T28936] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 707.317461][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 707.328793][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 707.337179][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 707.346991][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 707.354848][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 707.449819][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 707.455365][ T5199] loop5: partition table partially beyond EOD, truncated [ 707.463961][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 707.482372][ T5832] usb 5-1: USB disconnect, device number 8 [ 707.558214][T28953] lo speed is unknown, defaulting to 1000 [ 707.713645][T29000] serio: Serial port ptm0 [ 707.813099][T21833] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 707.940859][T28953] chnl_net:caif_netlink_parms(): no params data found [ 707.982848][T21833] usb 6-1: Using ep0 maxpacket: 32 [ 707.995994][T21833] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 708.013392][ T5832] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 708.022877][T21833] usb 6-1: config 0 has no interface number 0 [ 708.039719][T21833] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 708.070262][T21833] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 708.090143][T21833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.102397][T21833] usb 6-1: Product: syz [ 708.107871][T21833] usb 6-1: Manufacturer: syz [ 708.112609][T21833] usb 6-1: SerialNumber: syz [ 708.140737][T21833] usb 6-1: config 0 descriptor?? [ 708.159374][T28969] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 708.173301][ T5832] usb 4-1: Using ep0 maxpacket: 32 [ 708.189962][ T5832] usb 4-1: config 3 has an invalid interface number: 29 but max is 0 [ 708.208602][ T5832] usb 4-1: config 3 has no interface number 0 [ 708.223257][ T5832] usb 4-1: config 3 interface 29 altsetting 129 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 708.236813][ T5832] usb 4-1: config 3 interface 29 altsetting 129 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 708.248163][ T5832] usb 4-1: config 3 interface 29 altsetting 129 endpoint 0xB has an invalid bInterval 64, changing to 10 [ 708.284129][ T5832] usb 4-1: config 3 interface 29 altsetting 129 has a duplicate endpoint with address 0xB, skipping [ 708.299011][ T5832] usb 4-1: config 3 interface 29 has no altsetting 0 [ 708.308215][T28953] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.324979][T28953] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.343686][T28953] bridge_slave_0: entered allmulticast mode [ 708.351115][ T5832] usb 4-1: New USB device found, idVendor=260d, idProduct=19aa, bcdDevice=a6.2b [ 708.364271][T28953] bridge_slave_0: entered promiscuous mode [ 708.382046][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.393366][T28953] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.401231][ T5832] usb 4-1: Product: ࠬ [ 708.406276][T28969] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 708.412933][ T5832] usb 4-1: Manufacturer: ⁋祡஁ⵅ⑅﷠穹荍㒌猿∹꡺⢋曆ᓙ贱埚ᰫňƈ쟕莅蔠밵嵒梗ᙑ皐讎ꐻ킺酴熪롺喧᤯硧굉챾䈝긜㻬ジ࿪撘뱈ࣿ傈꩸羫첁脙啎ꖆ㢥瑤儨䉮Դ龜꧘뒨켊啅梼鴕મ뾕밂ꙣ厫袪萁χ讁훚談ⴷㅽ㬭쓩幒賃᱌띈挜灭逶戟ꆓ鵒횭㗝줱玷뻌丄堃⒄Ἂ봌獯漾鯚냼퐍苁ʚ [ 708.450045][T28953] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.457980][T28953] bridge_slave_1: entered allmulticast mode [ 708.475378][T28953] bridge_slave_1: entered promiscuous mode [ 708.508737][ T5832] usb 4-1: SerialNumber: syz [ 708.598750][T28953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 708.620149][T28953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 708.710773][T28953] team0: Port device team_slave_0 added [ 708.725484][T28953] team0: Port device team_slave_1 added [ 708.756451][ T5832] usb 4-1: USB disconnect, device number 61 [ 708.835982][ T5915] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 708.867941][T28953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 708.875302][T28953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.905261][T28953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 708.920990][T28953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 708.929681][T28953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.956359][T28953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 709.003365][ T5915] usb 5-1: Using ep0 maxpacket: 8 [ 709.012265][ T5915] usb 5-1: too many endpoints for config 0 interface 0 altsetting 144: 124, using maximum allowed: 30 [ 709.025568][ T5915] usb 5-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.039590][ T5915] usb 5-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 124 [ 709.072953][ T5915] usb 5-1: config 0 interface 0 has no altsetting 0 [ 709.087835][ T5915] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 709.111929][T28953] hsr_slave_0: entered promiscuous mode [ 709.117957][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.129132][T28953] hsr_slave_1: entered promiscuous mode [ 709.140873][ T5915] usb 5-1: config 0 descriptor?? [ 709.154125][T28953] debugfs: 'hsr0' already exists in 'hsr' [ 709.175345][T28953] Cannot create hsr debugfs directory [ 709.413533][ T5840] Bluetooth: hci5: command tx timeout [ 709.567666][T28953] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 709.596207][T28953] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 709.602611][ T5915] uclogic 0003:145F:0212.003E: interface is invalid, ignoring [ 709.638460][T28953] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 709.659054][T28953] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 709.798073][ T5914] usb 5-1: USB disconnect, device number 9 [ 709.820138][T29352] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 709.847365][T28953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.878649][T28953] 8021q: adding VLAN 0 to HW filter on device team0 [ 709.901136][T10262] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.908407][T10262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 709.956034][T10263] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.963336][T10263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 709.994471][T29364] kernel read not supported for file / (pid: 29364 comm: syz.3.2758) [ 710.003556][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 710.003575][ T30] audit: type=1800 audit(2000000046.730:13345): pid=29364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2758" name=0D dev="mqueue" ino=69217 res=0 errno=0 [ 710.301363][T28953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 710.452995][T23936] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 710.464588][T29389] program syz.4.2762 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 710.483644][T21833] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 710.490279][T29388] input: syz1 as /devices/virtual/input/input81 [ 710.508135][T21833] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 710.522442][T21833] asix 6-1:0.188: probe with driver asix failed with error -71 [ 710.540383][T21833] usb 6-1: USB disconnect, device number 23 [ 710.619547][T23936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 710.638390][T23936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 710.652120][T23936] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 710.661633][T23936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.682621][T23936] usb 4-1: config 0 descriptor?? [ 710.790429][T28953] veth0_vlan: entered promiscuous mode [ 710.805293][T28953] veth1_vlan: entered promiscuous mode [ 710.847772][T28953] veth0_macvtap: entered promiscuous mode [ 710.860746][T28953] veth1_macvtap: entered promiscuous mode [ 710.887244][T28953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 710.908011][T28953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 710.928674][ T1004] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.939150][ T1004] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.955665][ T1004] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.967231][ T1004] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.101809][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 711.109310][T23936] playstation 0003:054C:0DF2.003F: unknown main item tag 0x0 [ 711.126210][ T5199] loop5: partition table partially beyond EOD, truncated [ 711.139426][T10263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.153469][T23936] playstation 0003:054C:0DF2.003F: unknown main item tag 0x0 [ 711.167308][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 711.176923][T10263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.185494][T23936] playstation 0003:054C:0DF2.003F: unknown main item tag 0x0 [ 711.203047][T23936] playstation 0003:054C:0DF2.003F: unknown main item tag 0x0 [ 711.211238][T23936] playstation 0003:054C:0DF2.003F: unknown main item tag 0x0 [ 711.249837][T23936] playstation 0003:054C:0DF2.003F: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 711.268245][ T1004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.294531][ T1004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.358643][T23936] playstation 0003:054C:0DF2.003F: Invalid reportID received, expected 9 got 21 [ 711.373656][ T5892] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 711.386963][T23936] playstation 0003:054C:0DF2.003F: Failed to retrieve DualSense pairing info: -22 [ 711.415931][T23936] playstation 0003:054C:0DF2.003F: Failed to get MAC address from DualSense [ 711.437011][T23936] playstation 0003:054C:0DF2.003F: Failed to create dualsense. [ 711.475728][T23936] playstation 0003:054C:0DF2.003F: probe with driver playstation failed with error -22 [ 711.486358][ T5840] Bluetooth: hci5: command tx timeout [ 711.543775][ T5892] usb 6-1: not running at top speed; connect to a high speed hub [ 711.578179][ T5892] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 711.587671][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.600758][ T5892] usb 6-1: Product: ࠚ [ 711.608809][ T5892] usb 6-1: Manufacturer: ࠌ [ 711.616039][ T5892] usb 6-1: SerialNumber: 㘟象쪹㕳숰⟴㱁봊磉Ⴣ眎㒴蒜⃖ﮖ뷟䪜㲸ᬵ࢕夿๗䏴묎잀釹࿭ㅾ痿ꆤꁜ浼ㆱ㷡⵭ン媯㊆텤玥邖᥉ﰕͧ墢࿺妭슪⽺䞛Ꮵ冊츻笪➹뜧歼濋澴흳岹Ჶ荿千鼱䆐໑妘뼹긿聃㎄ﴇ‭戤✱薱亅讣 [ 711.878408][ T5892] cdc_ncm 6-1:1.0: bind() failure [ 711.890962][ T5892] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 711.898876][ T5892] cdc_ncm 6-1:1.1: bind() failure [ 711.913017][ T5892] usb 6-1: USB disconnect, device number 24 [ 711.963499][T23936] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 712.132802][T23936] usb 5-1: Using ep0 maxpacket: 16 [ 712.140043][T23936] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 712.148121][T23936] usb 5-1: can't read configurations, error -22 [ 712.282909][T23936] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 712.418104][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 712.423609][ T5199] loop5: partition table partially beyond EOD, truncated [ 712.431674][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 712.446508][T23936] usb 5-1: Using ep0 maxpacket: 16 [ 712.459424][T23936] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 712.468366][T23936] usb 5-1: can't read configurations, error -22 [ 712.486501][T23936] usb usb5-port1: attempt power cycle [ 712.811268][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 712.821203][ T5199] loop5: partition table partially beyond EOD, truncated [ 712.830226][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 712.840698][T23936] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 712.863562][T23936] usb 5-1: Using ep0 maxpacket: 16 [ 712.871633][T23936] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 712.880278][T23936] usb 5-1: can't read configurations, error -22 [ 713.033677][T23936] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 713.054518][T23936] usb 5-1: Using ep0 maxpacket: 16 [ 713.061616][T23936] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 713.069918][T23936] usb 5-1: can't read configurations, error -22 [ 713.078500][T23936] usb usb5-port1: unable to enumerate USB device [ 713.222901][ T44] usb 4-1: USB disconnect, device number 62 [ 713.237522][T23936] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 713.402963][T23936] usb 6-1: Using ep0 maxpacket: 8 [ 713.410839][T23936] usb 6-1: unable to get BOS descriptor or descriptor too short [ 713.420970][T23936] usb 6-1: config 7 has an invalid interface number: 60 but max is 0 [ 713.429552][T23936] usb 6-1: config 7 has no interface number 0 [ 713.435909][T23936] usb 6-1: config 7 interface 60 has no altsetting 0 [ 713.445553][T23936] usb 6-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice=75.54 [ 713.455579][T23936] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.463857][T23936] usb 6-1: Product: syz [ 713.468091][T23936] usb 6-1: Manufacturer: syz [ 713.473004][T23936] usb 6-1: SerialNumber: syz [ 713.572842][ T5840] Bluetooth: hci5: command tx timeout [ 713.593376][ T44] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 713.685719][T23936] appletouch 6-1:7.60: Could not find int-in endpoint [ 713.692546][T23936] appletouch 6-1:7.60: probe with driver appletouch failed with error -5 [ 713.709647][T23936] usbhid 6-1:7.60: couldn't find an input interrupt endpoint [ 713.724602][T23936] usb 6-1: USB disconnect, device number 25 [ 713.748878][ T44] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 713.764247][ T44] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 713.776676][ T44] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 713.786797][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.795069][ T44] usb 4-1: Product: syz [ 713.799313][ T44] usb 4-1: Manufacturer: syz [ 713.804003][ T44] usb 4-1: SerialNumber: syz [ 714.221189][ T44] usb 4-1: cannot find UAC_HEADER [ 714.262177][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 714.275219][ T5199] loop5: partition table partially beyond EOD, truncated [ 714.286285][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 714.296160][ T44] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 714.375660][T15845] udevd[15845]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 714.429450][ T44] usb 4-1: USB disconnect, device number 63 [ 714.582942][T23936] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 714.640236][T29551] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2776'. [ 714.733009][T23936] usb 6-1: Using ep0 maxpacket: 8 [ 714.758159][T23936] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 714.771244][T23936] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.820612][T23936] usb 6-1: Product: syz [ 714.835582][T23936] usb 6-1: Manufacturer: syz [ 714.853420][T23936] usb 6-1: SerialNumber: syz [ 714.865844][T23936] usb 6-1: config 0 descriptor?? [ 714.877972][T23936] gspca_main: se401-2.14.0 probing 047d:5003 [ 715.122803][ T5892] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 715.264978][T23936] gspca_se401: ExtraFeatures: 7 [ 715.269962][T23936] gspca_se401: Frame size: 0x0 1/16th janggu [ 715.276338][T23936] gspca_se401: Frame size: 0x0 1/16th janggu [ 715.283024][T23936] gspca_se401: Frame size: 0x0 1/16th janggu [ 715.289310][T23936] gspca_se401: Frame size: 0x0 1/16th janggu [ 715.291227][ T5892] usb 5-1: not running at top speed; connect to a high speed hub [ 715.305541][ T5892] usb 5-1: config 10 has an invalid interface number: 11 but max is 0 [ 715.314328][ T5892] usb 5-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config [ 715.325454][ T5892] usb 5-1: config 10 has no interface number 0 [ 715.331694][ T5892] usb 5-1: config 10 interface 11 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 715.348529][ T5892] usb 5-1: config 10 interface 11 has no altsetting 0 [ 715.359431][ T5892] usb 5-1: string descriptor 0 read error: -22 [ 715.366844][ T5892] usb 5-1: New USB device found, idVendor=2912, idProduct=0001, bcdDevice=b5.e1 [ 715.378267][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.395812][ T5892] cdc_acm 5-1:10.11: skipping garbage [ 715.470695][T23936] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input82 [ 715.499157][T23936] usb 6-1: USB disconnect, device number 26 [ 715.603870][ T5892] usb 5-1: USB disconnect, device number 14 [ 715.643184][ T5840] Bluetooth: hci5: command tx timeout [ 715.709206][T29605] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2781'. [ 716.011970][ T5199] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 716.027903][ T5199] loop5: partition table partially beyond EOD, truncated [ 716.038612][ T5199] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 716.245412][T29622] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2785'. [ 716.327769][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 716.340340][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 716.356522][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 716.365766][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 716.377038][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 716.459792][T29623] lo speed is unknown, defaulting to 1000 [ 716.776078][T29623] chnl_net:caif_netlink_parms(): no params data found [ 717.012197][T29623] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.024594][T29623] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.032135][T29623] bridge_slave_0: entered allmulticast mode [ 717.040922][T29623] bridge_slave_0: entered promiscuous mode [ 717.057659][T29623] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.065391][T29623] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.073007][T29623] bridge_slave_1: entered allmulticast mode [ 717.081503][T29623] bridge_slave_1: entered promiscuous mode [ 717.142801][T23936] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 717.184257][T29623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.200075][T29623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.271371][T29623] team0: Port device team_slave_0 added [ 717.287908][T29623] team0: Port device team_slave_1 added [ 717.314541][T23936] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 717.323219][ T31] INFO: task syz.1.2154:22113 blocked for more than 143 seconds. [ 717.333662][T23936] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 717.342792][ T31] Tainted: G L syzkaller #0 [ 717.342974][T23936] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 717.349326][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 717.349342][ T31] task:syz.1.2154 state:D stack:26888 pid:22113 tgid:22112 ppid:5825 task_flags:0x400640 flags:0x00080802 [ 717.363087][T23936] usb 5-1: config 0 interface 0 has no altsetting 0 [ 717.410438][ T31] Call Trace: [ 717.422709][ T31] [ 717.425706][ T31] __schedule+0x150e/0x5070 [ 717.430265][ T31] ? register_lock_class+0x51/0x320 [ 717.431425][T23936] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 717.443691][ T31] ? __pfx___schedule+0x10/0x10 [ 717.448608][T23936] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 717.461134][ T31] ? schedule+0x91/0x360 [ 717.465691][ T31] schedule+0x165/0x360 [ 717.469902][ T31] schedule_timeout+0x9a/0x270 [ 717.475871][T23936] usb 5-1: config 0 interface 0 has no altsetting 0 [ 717.486486][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 717.491948][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 717.494200][T23936] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 717.506527][T23936] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 717.522810][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 717.528086][ T31] __wait_for_common+0x3da/0x710 [ 717.539872][T23936] usb 5-1: config 0 interface 0 has no altsetting 0 [ 717.546657][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 717.546729][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 717.566177][T23936] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 717.575398][T23936] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 717.599791][T23936] usb 5-1: config 0 interface 0 has no altsetting 0 [ 717.606668][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 717.622915][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 717.638614][T23936] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 717.654722][ T31] wait_for_completion_state+0x1c/0x40 [ 717.667594][T23936] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 717.699988][ T31] vfs_coredump+0x94b/0x3e60 [ 717.718813][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 717.730625][T23936] usb 5-1: config 0 interface 0 has no altsetting 0 [ 717.740369][ T31] ? __pfx_vfs_coredump+0x10/0x10 [ 717.754497][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 717.760626][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 717.766470][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 717.771829][T23936] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 717.780911][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 717.786744][T23936] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 717.814439][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 717.819621][ T31] ? unwind_next_frame+0xa5/0x23d0 [ 717.844378][T23936] usb 5-1: config 0 interface 0 has no altsetting 0 [ 717.852339][ T31] ? unwind_next_frame+0xa5/0x23d0 [ 717.858222][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 717.865565][T23936] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 717.892793][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 717.898093][ T31] ? is_bpf_text_address+0x292/0x2b0 [ 717.903528][T23936] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 717.920659][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 717.932791][T23936] usb 5-1: config 0 interface 0 has no altsetting 0 [ 717.939966][ T31] ? kernel_text_address+0xa5/0xe0 [ 717.945817][ T31] ? __kernel_text_address+0xd/0x40 [ 717.951102][ T31] ? unwind_get_return_address+0x4d/0x90 [ 717.957132][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 717.963706][ T31] ? arch_stack_walk+0xfc/0x150 [ 717.968729][ T31] ? stack_trace_save+0x9c/0xe0 [ 717.973865][ T31] ? stack_depot_save_flags+0x40/0x850 [ 717.979613][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 717.984870][ T31] ? kasan_save_track+0x4f/0x80 [ 717.989774][ T31] ? kasan_save_track+0x3e/0x80 [ 717.995064][ T31] ? kasan_save_free_info+0x46/0x50 [ 718.000508][ T31] ? __kasan_slab_free+0x5c/0x80 [ 718.005687][T23936] usb 5-1: unable to read config index 7 descriptor/start: -71 [ 718.017934][ T31] ? kmem_cache_free+0x197/0x620 [ 718.033167][T23936] usb 5-1: can't read configurations, error -71 [ 718.039589][ T31] ? get_signal+0xa4b/0x1340 [ 718.046142][ T31] ? arch_do_signal_or_restart+0x9a/0x7a0 [ 718.052268][ T31] ? irqentry_exit+0x177/0x660 [ 718.062724][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 718.069054][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 718.074563][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 718.079969][ T31] get_signal+0x1108/0x1340 [ 718.084593][ T31] arch_do_signal_or_restart+0x9a/0x7a0 [ 718.092809][ T31] ? rseq_update_user_cs+0x262/0x3c0 [ 718.098150][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 718.104412][ T31] ? local_irq_enable_exit_to_user+0x5/0x10 [ 718.110548][ T31] irqentry_exit+0x177/0x660 [ 718.115400][ T31] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 718.121440][ T31] RIP: 0033:0x7fa2c264f6b0 [ 718.126148][ T31] RSP: 002b:00007fa2c3686578 EFLAGS: 00000246 [ 718.133193][ T31] RAX: 0000000000000000 RBX: 00007fa2c29e5fa8 RCX: 00007fa2c278f749 [ 718.141288][ T31] RDX: 00007fa2c3686580 RSI: 00007fa2c36866b0 RDI: 000000000000000b [ 718.149392][ T31] RBP: 00007fa2c29e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 718.158207][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 718.166281][ T31] R13: 00007fa2c29e6038 R14: 00007fff4a1104b0 R15: 00007fff4a110598 [ 718.174715][ T31] [ 718.186067][ T31] [ 718.186067][ T31] Showing all locks held in the system: [ 718.212759][ T31] 1 lock held by pool_workqueue_/3: [ 718.218276][ T31] #0: ffffffff8e344e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 718.242700][ T31] 3 locks held by kworker/0:0/9: [ 718.248865][ T31] #0: ffff88813fe55948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x841/0x15a0 [ 718.322845][ T31] #1: ffffc900000e7b80 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x868/0x15a0 [ 718.352844][ T31] #2: ffff8880b863ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 718.369798][ T31] 1 lock held by khungtaskd/31: [ 718.383959][ T31] #0: ffffffff8e33f2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 718.394432][ T31] 3 locks held by kworker/u8:5/1004: [ 718.399759][ T31] #0: ffff88813fe69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x841/0x15a0 [ 718.432823][ T31] #1: ffffc90003a6fb80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x868/0x15a0 [ 718.443850][ T5839] Bluetooth: hci0: command tx timeout [ 718.462789][ T31] #2: ffffffff8f72c588 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 718.471880][ T31] 2 locks held by getty/5581: [ 718.476980][ T31] #0: ffff88814d5fe0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 718.487274][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 718.497731][ T31] 3 locks held by kworker/0:6/5892: [ 718.503218][ T31] 1 lock held by syz.3.1189/15044: [ 718.508358][ T31] #0: ffffffff8f72c588 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 718.518528][ T31] 5 locks held by kworker/u8:2/19972: [ 718.524291][ T31] 2 locks held by syz.4.2118/21847: [ 718.529523][ T31] 3 locks held by kworker/0:2/23322: [ 718.559728][ T31] 3 locks held by kworker/u8:4/23389: [ 718.582769][ T31] 6 locks held by kworker/1:7/23936: [ 718.588207][ T31] #0: ffff8881426e3148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x841/0x15a0 [ 718.622861][ T31] #1: ffffc9000b007b80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x868/0x15a0 [ 718.642819][ T31] #2: ffff888028f2c198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 718.651797][ T31] #3: ffff888028f73518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 718.683830][ T31] #4: ffff8880286a1068 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 718.702975][ T31] #5: ffffffff8efea510 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14e/0x1850 [ 718.734831][ T31] 1 lock held by syz.7.2779/29570: [ 718.740034][ T31] 1 lock held by syz.5.2783/29616: [ 718.755295][ T31] 1 lock held by syz-executor/29623: [ 718.760718][ T31] #0: ffffffff8e344e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 718.792787][ T31] [ 718.797800][ T31] ============================================= [ 718.797800][ T31] [ 718.816579][ T31] NMI backtrace for cpu 0 [ 718.816614][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 718.816637][ T31] Tainted: [L]=SOFTLOCKUP [ 718.816643][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 718.816658][ T31] Call Trace: [ 718.816665][ T31] [ 718.816673][ T31] dump_stack_lvl+0x189/0x250 [ 718.816697][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 718.816714][ T31] ? __pfx__printk+0x10/0x10 [ 718.816748][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 718.816774][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 718.816800][ T31] ? __pfx__printk+0x10/0x10 [ 718.816827][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 718.816851][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 718.816877][ T31] sys_info+0x135/0x170 [ 718.816897][ T31] watchdog+0xe40/0xe90 [ 718.816921][ T31] ? watchdog+0x202/0xe90 [ 718.816946][ T31] kthread+0x711/0x8a0 [ 718.816967][ T31] ? __pfx_watchdog+0x10/0x10 [ 718.816985][ T31] ? __pfx_kthread+0x10/0x10 [ 718.817004][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 718.817020][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 718.817037][ T31] ? __pfx_kthread+0x10/0x10 [ 718.817055][ T31] ret_from_fork+0x599/0xb30 [ 718.817080][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 718.817112][ T31] ? __switch_to_asm+0x39/0x70 [ 718.817129][ T31] ? __switch_to_asm+0x33/0x70 [ 718.817146][ T31] ? __pfx_kthread+0x10/0x10 [ 718.817165][ T31] ret_from_fork_asm+0x1a/0x30 [ 718.817196][ T31] [ 718.817203][ T31] Sending NMI from CPU 0 to CPUs 1: [ 718.978451][ C1] NMI backtrace for cpu 1 [ 718.978472][ C1] CPU: 1 UID: 0 PID: 10262 Comm: kworker/u8:16 Tainted: G L syzkaller #0 PREEMPT(full) [ 718.978496][ C1] Tainted: [L]=SOFTLOCKUP [ 718.978504][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 718.978517][ C1] Workqueue: events_unbound toggle_allocation_gate [ 718.978542][ C1] RIP: 0010:__text_poke+0x341/0x9f0 [ 718.978563][ C1] Code: 00 02 00 00 31 ff e8 ee 3b 59 00 48 81 e3 00 02 00 00 75 07 e8 00 37 59 00 eb 0a e8 f9 36 59 00 e8 c4 13 61 00 4c 89 74 24 68 <48> 89 5c 24 38 48 c7 c0 30 55 cc 8d 48 c1 e8 03 48 b9 00 00 00 00 [ 718.978579][ C1] RSP: 0018:ffffc900111376c0 EFLAGS: 00000002 [ 718.978593][ C1] RAX: 0000000000000001 RBX: 0000000000000200 RCX: f1b5934248b50900 [ 718.978606][ C1] RDX: 0000000000000000 RSI: ffffffff8be247c0 RDI: ffffffff8be24780 [ 718.978618][ C1] RBP: ffffc90011137810 R08: ffffffff8fc3d077 R09: 1ffffffff1f87a0e [ 718.978631][ C1] R10: dffffc0000000000 R11: fffffbfff1f87a0f R12: ffffffff821d392a [ 718.978644][ C1] R13: fffffffffffffeff R14: 0000000000000000 R15: ffffea00000874c0 [ 718.978657][ C1] FS: 0000000000000000(0000) GS:ffff888125adc000(0000) knlGS:0000000000000000 [ 718.978672][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 718.978684][ C1] CR2: 000055d7360a8000 CR3: 000000000e138000 CR4: 00000000003526f0 [ 718.978700][ C1] Call Trace: [ 718.978707][ C1] [ 718.978719][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 718.978737][ C1] ? perf_event_text_poke+0x13d/0x190 [ 718.978760][ C1] ? kmem_cache_alloc_from_sheaf_noprof+0x3a/0x1a0 [ 718.978787][ C1] ? __pfx___text_poke+0x10/0x10 [ 718.978803][ C1] ? rcu_is_watching+0x15/0xb0 [ 718.978821][ C1] ? trace_contention_end+0x39/0x100 [ 718.978847][ C1] smp_text_poke_batch_finish+0xd0f/0x1130 [ 718.978872][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 718.978895][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 718.978924][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 718.978946][ C1] static_key_disable_cpuslocked+0xc5/0x1a0 [ 718.978970][ C1] static_key_disable+0x1a/0x20 [ 718.978989][ C1] toggle_allocation_gate+0x1a1/0x240 [ 718.979008][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 718.979026][ C1] ? process_one_work+0x868/0x15a0 [ 718.979055][ C1] ? process_one_work+0x868/0x15a0 [ 718.979078][ C1] ? process_one_work+0x868/0x15a0 [ 718.979107][ C1] process_one_work+0x93a/0x15a0 [ 718.979143][ C1] ? __pfx_process_one_work+0x10/0x10 [ 718.979171][ C1] ? assign_work+0x3c7/0x5b0 [ 718.979197][ C1] worker_thread+0x9b0/0xee0 [ 718.979235][ C1] kthread+0x711/0x8a0 [ 718.979255][ C1] ? __pfx_worker_thread+0x10/0x10 [ 718.979280][ C1] ? __pfx_kthread+0x10/0x10 [ 718.979299][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 718.979316][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 718.979334][ C1] ? __pfx_kthread+0x10/0x10 [ 718.979354][ C1] ret_from_fork+0x599/0xb30 [ 718.979379][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 718.979408][ C1] ? __switch_to_asm+0x39/0x70 [ 718.979428][ C1] ? __switch_to_asm+0x33/0x70 [ 718.979446][ C1] ? __pfx_kthread+0x10/0x10 [ 718.979465][ C1] ret_from_fork_asm+0x1a/0x30 [ 718.979493][ C1] [ 719.609003][ T1004] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.802366][ T1004] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.931451][ T1004] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.074846][ T1004] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.208270][ T1004] bridge_slave_1: left allmulticast mode [ 720.219310][ T1004] bridge_slave_1: left promiscuous mode [ 720.226940][ T1004] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.236168][ T1004] bridge_slave_0: left allmulticast mode [ 720.241822][ T1004] bridge_slave_0: left promiscuous mode [ 720.248864][ T1004] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.486026][ T1004] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 720.652219][ T1004] smc: removing net device bond0 with user defined pnetid SYZ2 [ 720.661699][ T1004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 720.674605][ T1004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 720.687552][ T1004] bond0 (unregistering): Released all slaves [ 720.791854][ T1004] tipc: Left network mode [ 720.824088][ T1004] IPVS: stopping master sync thread 18908 ... [ 721.189769][ T1004] hsr_slave_0: left promiscuous mode [ 721.200134][ T1004] hsr_slave_1: left promiscuous mode [ 721.220372][ T1004] veth0_macvtap: left promiscuous mode [ 721.232175][ T1004] veth1_vlan: left promiscuous mode [ 721.239888][ T1004] veth0_vlan: left promiscuous mode [ 722.362428][ T1004] IPVS: stop unused estimator thread 0... [ 722.497598][ T1004] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.613564][ T1004] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.697282][ T1004] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.801321][ T1004] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.034923][ T1004] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.145154][ T1004] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.202605][ T1004] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.279072][ T1004] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.559451][ T1004] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.639769][ T1004] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.720291][ T1004] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.788483][ T1004] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.959294][ T1004] bridge_slave_1: left allmulticast mode [ 723.971310][ T1004] bridge_slave_1: left promiscuous mode [ 723.978676][ T1004] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.990508][ T1004] bridge_slave_0: left allmulticast mode [ 723.996532][ T1004] bridge_slave_0: left promiscuous mode [ 724.002362][ T1004] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.017640][ T1004] bridge_slave_1: left allmulticast mode [ 724.024860][ T1004] bridge_slave_1: left promiscuous mode [ 724.030617][ T1004] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.041842][ T1004] bridge_slave_0: left allmulticast mode [ 724.047874][ T1004] bridge_slave_0: left promiscuous mode [ 724.054319][ T1004] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.067616][ T1004] bridge_slave_1: left allmulticast mode [ 724.073486][ T1004] bridge_slave_1: left promiscuous mode [ 724.079209][ T1004] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.090788][ T1004] bridge_slave_0: left allmulticast mode [ 724.096945][ T1004] bridge_slave_0: left promiscuous mode [ 724.102752][ T1004] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.114102][ T1004] bridge_slave_1: left allmulticast mode [ 724.119863][ T1004] bridge_slave_1: left promiscuous mode [ 724.126984][ T1004] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.136519][ T1004] bridge_slave_0: left allmulticast mode [ 724.142174][ T1004] bridge_slave_0: left promiscuous mode [ 724.148227][ T1004] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.616238][ T1004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.627314][ T1004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 724.637872][ T1004] bond0 (unregistering): Released all slaves [ 724.730283][ T1004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.741783][ T1004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 724.758436][ T1004] bond0 (unregistering): Released all slaves [ 725.149356][ T1004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 725.160502][ T1004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 725.171015][ T1004] bond0 (unregistering): Released all slaves [ 725.341332][ T1004] dvmrp0 (unregistering): left allmulticast mode [ 725.387263][ T1004] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 725.549862][ T1004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 725.562036][ T1004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 725.574738][ T1004] bond0 (unregistering): (slave team0): Releasing backup interface [ 725.584650][ T1004] bond0 (unregistering): Released all slaves [ 725.720343][ T1004] tipc: Left network mode [ 726.804853][ T1004] hsr_slave_0: left promiscuous mode [ 726.811246][ T1004] hsr_slave_1: left promiscuous mode [ 726.817848][ T1004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 726.826507][ T1004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 726.838312][ T1004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 726.846301][ T1004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 726.863863][ T1004] hsr_slave_0: left promiscuous mode [ 726.870270][ T1004] hsr_slave_1: left promiscuous mode [ 726.877021][ T1004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 726.884901][ T1004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 726.894266][ T1004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 726.901691][ T1004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 726.924698][ T1004] hsr_slave_0: left promiscuous mode [ 726.934020][ T1004] hsr_slave_1: left promiscuous mode [ 726.940306][ T1004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 726.948490][ T1004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 726.964243][ T1004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 726.971712][ T1004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 727.035105][ T1004] veth0_macvtap: left allmulticast mode [ 727.040746][ T1004] veth0_macvtap: left promiscuous mode [ 727.046855][ T1004] veth1_vlan: left promiscuous mode [ 727.052169][ T1004] veth0_vlan: left promiscuous mode [ 727.061665][ T1004] veth1_macvtap: left promiscuous mode [ 727.067306][ T1004] veth0_macvtap: left promiscuous mode [ 727.073210][ T1004] veth1_vlan: left promiscuous mode [ 727.078753][ T1004] veth0_vlan: left promiscuous mode [ 727.086230][ T1004] veth1_macvtap: left promiscuous mode [ 727.091760][ T1004] veth0_macvtap: left promiscuous mode [ 727.097654][ T1004] veth1_vlan: left promiscuous mode [ 727.103060][ T1004] veth0_vlan: left promiscuous mode