last executing test programs: 4m58.114393206s ago: executing program 1 (id=324): socket$nl_netfilter(0x10, 0x3, 0xc) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000004000)=[{{&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)=""/25, 0x19}, {&(0x7f00000003c0)=""/249, 0xf9}], 0x2}, 0x8}, {{&(0x7f00000004c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000540)=""/52, 0x34}], 0x1, &(0x7f00000005c0)=""/112, 0x70}, 0x8}, {{&(0x7f0000000640)=@isdn, 0x80, &(0x7f0000000d40)=[{&(0x7f00000006c0)=""/193, 0xc1}, {&(0x7f00000007c0)=""/130, 0x82}, {&(0x7f0000000940)=""/164, 0xa4}, {&(0x7f0000000880)=""/84, 0x54}, {&(0x7f0000000a80)=""/183, 0xb7}, {&(0x7f0000000b40)=""/144, 0x90}, {&(0x7f0000000c00)=""/115, 0x73}, {&(0x7f0000000a00)=""/19, 0x13}, {&(0x7f0000000c80)=""/64, 0x40}, {&(0x7f0000000cc0)=""/121, 0x79}], 0xa}, 0x5}, {{&(0x7f0000000e00)=@x25, 0x80, &(0x7f00000024c0)=[{&(0x7f0000000e80)=""/164, 0xa4}, {&(0x7f0000000f40)=""/113, 0x71}, {&(0x7f0000000fc0)=""/41, 0x29}, {&(0x7f0000001000)=""/85, 0x55}, {&(0x7f0000001080)=""/108, 0x6c}, {&(0x7f0000001100)=""/61, 0x3d}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000001140)=""/185, 0xb9}, {&(0x7f0000002400)=""/129, 0x81}], 0x9, &(0x7f0000002580)=""/221, 0xdd}, 0x9}, {{&(0x7f0000001200)=@pppol2tp, 0x80, &(0x7f0000002800)=[{&(0x7f0000002680)=""/72, 0x48}, {&(0x7f0000002700)=""/207, 0xcf}], 0x2, &(0x7f0000002840)=""/157, 0x9d}, 0xa}, {{&(0x7f0000002900)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002980)=""/163, 0xa3}], 0x1, &(0x7f0000002a80)=""/111, 0x6f}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000002b00)=""/64, 0x40}, {&(0x7f0000002b40)=""/108, 0x6c}, {&(0x7f0000002bc0)=""/164, 0xa4}, {&(0x7f0000002c80)=""/191, 0xbf}, {&(0x7f0000002d40)=""/180, 0xb4}, {&(0x7f0000002e00)=""/4096, 0x1000}], 0x6, &(0x7f0000003e80)=""/6, 0x6}, 0x8001}, {{0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000003ec0)}], 0x1, &(0x7f0000003f40)=""/153, 0x99}, 0x6}], 0x8, 0x0, 0x0) (async) r0 = socket$inet6(0xa, 0xa, 0x0) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x46, &(0x7f0000000280)={0xfffffffffffffe62, 0x0}, 0x10) (async) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x80000000, @mcast2, 0x2}, 0x1c) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040), 0xc) (async) r4 = socket$qrtr(0x2a, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) (async) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003ec0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="0a00340002020202020200002400fe0053f03f4fb854265841a3a4502e02c3168b97e253a6d10c5e9ff4032525df6d4e"], 0x4c}}, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x2) r9 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r9, 0x0) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_PIT(r11, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xc, 0x0, 0x5, 0xff, 0x1f, 0x0, 0x10000}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x9}, {0x0, 0x0, 0x3c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3}]}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) (async) ioctl$KVM_RUN(r12, 0xae80, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) (async) ioctl$sock_qrtr_TIOCINQ(r3, 0x541b, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) 4m57.997889678s ago: executing program 1 (id=326): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x2, 0x1, 0xf000, 0x2000, &(0x7f0000005000/0x2000)=nil}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3c}}, 0x10) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x8, &(0x7f0000000380)=[@flags={0x3, 0x128bc4}], 0x1) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x81) r3 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) renameat2(r4, &(0x7f00000003c0)='./bus\x00', r4, &(0x7f00000001c0)='./file0\x00', 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) close(r5) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000000)) 4m57.762673265s ago: executing program 1 (id=327): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000080)={0x9, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000340)={{0x0, 0x0, 0xfffffffffffffe6d, {0xdddd0000, 0x100000}}, "a9cbc4b723986beb2541731c8831607b6ee747534f2610e68420ac50bde6dad58d04aad3777f18b4f168b3950653ce1d7740b6225b60f102dea41282032f21c3f19760a59ad876506e4e939e80e92248edfd8137e41621c1a490cf3cbb0502fa6deb4cb0efa6bc813cca06ed4828bafa15d1afd8ac82b71d1a7b410eeac6a6f31e4995b05d3f93bf80a053ae74958ed42c6c4b4d0bcaa08d3e6025a166ac6f19973f974613e0d7ca520dd948ed23fcce9f475faa3e49d697324fa1b2cdfef7deb66a190e9185a90f5c54c88895af1a61f8c0722f0c0bf9835d8910449682cc5551ec995aec222238bb28f41ba7f99f93b785dd2d48cf389f27da125b9c3ec7f716d6b6b696a93e625f0e17b4ff3bac5eec8e2dd837254c16d8c9b2a773ac70b8dc7216980fcf1db0cd885a6f3379dfcca516b0b5771d3dfb2212fd569b8f6003dcf8478390e14a5bf73eb1a61a12ce20ea3f5fbd6d9a56a4adf6043190cc7d559e7773668d0498f6c7438917d204ed2ec53da03cc744619be3785cd8cddb678f8e90965f22242bb62fa3590dde45cacad3852a54154a90d7495cc4cfbd7baacc19604efd864cc76a7e867cd7403301f45a3ad20ed8edf412e4aae5f279eada88ee43a436dd3b1f37098b7d81759aff2d81e5593535d44035fdcbae0f45a7163c06b8ed7da27a03e266947d7f11d9e1600f1a88b99643a0b99abad360b8137415f7800f8a5a16ba306778733d5493cc73d0aacebe1cc4618847bd620034cb617c55e47ff8d8000f52c25a6b3e9272c297e6b30bed370dda4c2b56278893a4faefb28a87c40229d3f80814e128eedb7050465e1e00547a1b77ebaef78355d9867ce521138d63f147ec3de6cac38d9eeb1d167494466e00d97a32701117bbe0f95304970e632b9cf8ded044b3f1c01326095b422678d798a9c5f8ab05f4e6549639186723aa3d38927ed4ca94a9e6de3c4f5ce99d090389473455cb366c7dfcb43ebe60271a3693e80ae4948291753007f5032f518ffc832f3e819f3bdac1085a80cdd494cdcac4a874a14818b9dae534559c2c5a542a12949a22fddb9060e8a400f96512aa8eaaa6659932dc8852f5709a808604c2fda229c79933646e36255948baec6e0c2d4fbe056628157ba456603e5cb45761b5aa97c0daceb3e6d7a192d109847057cb4322c9c5e62403c921e9cebeca77d12c3ed05f5e131e3c00d9070618872ea8a1f05e4598c98739d3a9245e537ed992aa4eb8a571e4c7c0dc797f91e3258835f9db1b6501edaaf38c9fd4d718c743d30b6f1e480ce9408aa6b894055768738e3df843301d99b476ba8d30f6483022ad7fd50493e600700ef1b70c72f607feb0df9898b61a38f4f59d23779b7af4a5b5a0e7379877d8c875d1e47a9ddbac19208cd22e05f729a9175b9bf1c96618d63585204eb5ea29e0a0f17c12219fd51bc462dcff6d3ff73b64d2a5f7ebe6ebdefd841698e909cf1018a88afefc1802fc97c22a240f20ce6938ae6b2224f7ca311622695577f3e4cb8f7e87bcf5bcdcc5311815bab1499465f687903b4da5693c83cbe13ba3d94f413bbdf9886241fc1f0b9ea00e7b2d1c2fe29d8921c56919bbfa091d4542c590a18848256b7eca92114c5542356bb15e1cd59b28a5d5b86bb92c30e88ea6edc6efd3c685a7e9b840b61f445bb57d670d3dbba61da442fcdabd4c14b9dd6543aafca5bea6ca16c00bbdc0999cec79272dfd1de86bea7d830ec2deaa339c2fc57d6490ee7cf3bb4e6cb4b8dcaa4279bef0af601f96dc25a3cf926eb6c5eb9529a266e1a9d96fbb5e0ffeb472d40e3853f42d69e725d2dd570b531779a09a5f945a2dce4ddd898be60b9d38f3c305f942f8f8a3ee992de01a0d6b3db1a4174b770681d2470edd2319a9b9d04d3cadd67583a313c071f809c89134b2b714cb2d7247d4d6b5d794302e9408e946bf1cadc767a8ae918a6608f7d2dbb2d825e949c823ac6bda0c46dea864c83222f3c7f7ec020f3a6445f3762dfaae5a28c3857053b2548d11c9b9f4af5366b43012e35d14ba139085493e95ad24bcc92b835f3c72ff762fcbe3d04ee2051e959a9e680f51425d5eeeedd99767fccda20b44bbbac6989e1d6f70f030c2530b83923fbf27fbf24f62ff7a5619b39b338e165dcf66faf6092edd19216fdacfb8eb80bd7d8a7767f538c3021e20f498c8e456bc32af1157b5988950caf1c478047f132c01f53c12929f030e9d78c284e64a521350d72748ef214c05f4c8d2e47384c3cd29c99a2df1abb2e8ff5a363a488feb119e8ad5e3c39a4f24449d00b3772090b499e2c65b50a3e6ce7f1e2f2bac0ae5e58147d1d6887617ca38d12b1cc9a5e3ee47539f40179136698acd9b9e20a4f85335dcb19d4ba4a05bcd84b27a9f1897ab8f67abf78ba3ce4d87b37c129562d33bb0836c8fe830c068e7c8b6728ed585258c7d82b5c407d0532bf5ba60cfb0a6e6f3aa44bdf3bb7ac389023c3db4395c3875a3496d85640d423775d8ac0c4c3ab1831bdd785a5ca0ba2073bdf6970e4b63718944603ab32b83d7c73af090c3a941561a76f08e2235e1ea8a0b721cd6a73466664c411c33fd1a3e46e580c77034cb09ac38b6d1824f642d3354e827b6ddc0ca15c3bd7192882eaece388d428282c859fed7d280e5d81cd0252c149154e2038a3f2535781dc81d7221278c21ee819fb913fc8d97e96f3dbbf0b2cd63a0ceeadec43fca7a760f45aa53de97597b4afb3abf5921125e9f148da377556e6de1a62aab6055b10c1698649515e62c572d62d901ae7fcd417b627db64785fbdc21f0e978eb143d7abb2771de9a912466fb6e6f55a12f209e131732d45a8293f1a36ddddfad54f857016e3ab7fceb97ddfde1a8c8569dfa972ec636e7c93e603d5e1d0e98d6f109dfa6df50ce987abfc291aba0e488ba8f0596fbd1bacd58862b611250a85cd34e7d100f785286d815281b62ef2dfeea5e8ba4ee4a019af0ff59b0f4f3049f8718d0fca57de1cf88763d13ad26c50cccec4faba99d899ef079c3400052d065cc0a44e8f73dc5bef5f8681015b29c96dacd026d920f369a2b0c341b8295f5268e2d9bf80df2d9ea1017b5b41ec2060c2fecc67c040e7c37521b6d6174c4d4ed4accc5479f6fc4ddc0e45a7f8030ff8e23f000315a3565498d07bd0cc6459f5cff23b40ffb80ace2f48fe0c1a337bb4f748bb8c057089de5cd727b278b45d84a8f7df9f898b3cef2ec319b032f888c4953bfe141c8e4b67ab3f95fa133790ea17b27be21c9478da70641265045e81e28229a4dc15f59c2f18b1b9c082d1154bc9565508fc9419912b48f3b1271609006399a844f6ccedb6323ada63d3e0b340fd07cf9e3b98b1d193bd76796c2a185366b25468017d28371d8792eb42304961bc9c1f4ef4025d2814837dacc9f1d777bfeddb30eca1cacd9f5b6619c4000252ecdabf7107dff264046c111c6f5767e3486c37ec175f52bd3460a7ad49e35bb729ba76e2fa5e117c49b750000005e0abf56340740b81ea37c5df26b7c885cc5da412cf4e9932e2561aa7945945dcba0677786c9ea9b9aee47d73454df82048f021b30a817606c96415c22e1e908316f84aae52e050e31176408d35ef33091618df7d38d22bd2b626dc138f423c32362878c8f6538dcf0b96c4298668d4bb35773c952bbebd4778c964b0eae8eac9bef3469ea5da890377c500ea027180f5308585cd7941c7e3305c32d610de49b5c1acce6c285d88a99dcebb2b5972a276d416abf25b44c1712a43d3e30005a1535553e779c0f72ff519d2407214c02e7020ca479e93c3fb2b867ad73e69ba10e92f329cd54c4c80d227d0710cf384fd9a39d444053afce6d1e93b47137843d149e888bd868b1b2179c1fdd8291d15724db10a756300209ae4a2ed91788fe9f980af1bb00d05a8fe1a020fe4bba91fb487c8ea674a6739067a0a86b7f2a4fc141f6c864f065fc6e5effdb5a1f1d063c6888626e13ced52f3669677dad96da1cfff7d700e9f6f74131b8ac0f4fb6c8d5fd675b1ed6001bba7dd0e95567a6d06fe28e756609821312f4725c5909c6353ad385e57fb162e2f65b5e2a0100aaa356a19b9c5c183d195d0134adb8bc8d03415daafd95f3a5e44f201741e22dd905dc12469664040ce714a5d9042f58db392d6c6af1eaa4c82cd9b4996252b44334be627708463ffe52a80d8d1c8a5b1a23f9c68144c4a6c6387e542b3cb9de7765faf05fda086986d3c6a1f0906b2ea0eba741abb9514ccd57f2d8ea1d67145c5d71749b560f85093ecc265a24239078253fa0bd39bf67f8e1d78f07e167c05d808771c7b0146af368e8859273ef76f9feedf7fc69640b5e95a25076c477338e31cc9a7348b8a31a0f8d4dd9e6c46f18126279c5d1192ddee08a7057195689954b26a19dcfd2a59febb6556c18c18abc85527372919196b29a737f8bb3b97bebaf3e6c43099064e067f12772c2333be19dd4e803289430a660d68963a26ff1b1c8c664c0318a2558dec140d984837a936651906ab960b6bff8bc8b32704f3e0769e6c85c9f5bd50270bc1030ea71f2db5c43116bd0641ed31ab6db12514aec68febe59e04d2b872c9fc2173017ee6e75a18d6832c9992d1ed2ead9452dce9b2efa01dc97ea31ee5c3f5743760f2589615f45738140d0f8c148f1858d0897094a34727493e607132bc1eefa0d0ff236f9ac5a2a0f0bf06719c1d5061846e427fa36138c808741ccbd10ad3f6f54470804e656a8ab1a9ee9a523bed87cb2fd4d6db8aa6d6b80d1e9886dc12b915665101b9094a22f444379182f5356fed797ebd97ec6493bd681f69321f9735ae6d3d6822818c7cfb21c5f3a0f9d5b8ef070c916fe9ccbbf04128a27e7928e3572f125b986c52ec0de078b40135b922a2feb294b0349df06d1c3e2c9d2ed2ee88b7a1673423c6baedb51beb8f8cb1b3b986d1b9632fedfaec8e9a237311beb89cb0dd7efaa5b68537641d06b7cbfda581344c87452b4d3fe96cea6143378c4dd7586a9d55c666cce828ef91a35f3f0a5c9c369bd20c1bc7cc77fcf316a567fa21863b12c43faf3b9588dce4caa151937c6ee699cf49dba041775773ae062c69783758513a178bf46d2d40e24afe8975dd768a466755af2ffbb9fa728724a18fc9f427672ad5867a72ae8caca60fcc90cf817c291a2025b5243ae36e200b5e5c9ee4e90eac775c3b29fe1df8c35716f37d11961084fc28b0f8855376ec85d7741535f88db7977629dd832f06bb258e9a88cfc8671df2763fd9383a777f768c7aaecb9a7af9e76bb719767767c3d5178e2a10765c6b2ae80753f403125a9203ede6ed44eb96a1a010842f88f020dbb7f8df8bcbea0b60f1b99dd9b9aae2dbc995edc8ed82ec5e21e8d5e4d8d9fd0bfab342db38d12bb24c20c2a579069d74624db16bb9ec501312d8de0e653e9e74668d0ed05ccb0eb99db410c0000000fc246302635630b295ccf849e45944a25baa7f4651fa37f147e0fa977c0304e7cf25fa78260ca03abe8dc32cfb461f019f7d82194a98daae521ec4eaf3e138bb95b09d8ff2f106febcc126743abc8f8b707cd2cae1548c6fe54f64bf46c9ff03975e0c37eda3d485ff76ea5ae71fa5a2ca0d9293ea0cd4186e6e2e26fc2ba5e2cdde9400d9c1717058157a8410c9cd7ca4e679f41d8932576e7b292f28dfb9775b0ac5eb5788a8ddf797e32919e7a41c305af2e4e37eb4d5600", "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"}) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 4m56.050456141s ago: executing program 1 (id=330): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000200), 0x4) sendmsg$inet_sctp(r2, &(0x7f0000000080)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0xc04c000}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000200)=""/66, 0x42}, {&(0x7f00000001c0)=""/18, 0x12}, {&(0x7f00000014c0)=""/258, 0x102}, {&(0x7f00000004c0)=""/4082, 0xff2}], 0x4}}], 0x1, 0x40030002, 0x0) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000380)=[r5], &(0x7f00000003c0)=[0x7], &(0x7f00000000c0)=[r6, r6], &(0x7f0000000180)=[0x31], 0x0, 0xff}) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000000306010200000000000000000500000305000100e12107000000090002007304aed8633e797a320000"], 0x28}, 0x1, 0x0, 0x0, 0x5090}, 0x4014004) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 4m55.714220772s ago: executing program 1 (id=334): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x410002, 0x11, 0xb}, 0x18) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) r0 = socket(0x2c, 0x1, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x80044942, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d000905"], 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000, &(0x7f0000000a00)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x410002, 0x11, 0xb}, 0x18) (async) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) (async) socket(0x2c, 0x1, 0x0) (async) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x80044942, 0x0) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (async) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d000905"], 0x0) (async) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000, &(0x7f0000000a00)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) (async) 4m54.427922377s ago: executing program 1 (id=338): syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x4c, 0xf5, 0x76, 0x40, 0xc26, 0x12, 0xf79b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3c, 0x0, 0x2, 0xb3, 0x3c, 0x9d, 0x0, [], [{{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x8, 0x2, 0x2}}, {{0x9, 0x5, 0x5, 0x6, 0x40, 0x8, 0x10, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x14, 0x1e}]}}]}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x7, 0x1, 0x3, 0x60, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x91, 0x1, 0x0, 0x0, 0x0, 0x3e, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xff, 0x1}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x5, 0x8, 0x81, 0xbae6ff226d3cceac, 0x1}, 0xc8, &(0x7f00000000c0)={0x5, 0xf, 0xc8, 0x6, [@generic={0x80, 0x10, 0xa, "76f2b27f4b3867318aec2b2edabb5f3fc969c3715c0d7376b9fede82b6850f52d664635c9f4442b3d57cc1be825eee668c17bd9c3e8fdf25976ea4341f442ec18bc7167eab9a13b24a6867a78b6d1a7e90b34704471f3dac82155e4002a9d8676ad058599df2ec0e4fd42e61975a84bec0f6345e1d3775eda5a82b91f3"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "08c8bf5351b7b62b8aefe7be709c9410"}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "df870e1cbf62f9e3ba2981ac23f98d39"}, @ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x401, 0xf0f, 0x7}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x401, 0x0, 0x3}, @ptm_cap={0x3}]}, 0x5, [{0xca, &(0x7f00000001c0)=@string={0xca, 0x3, "2a8f1432c59cc2a2e9799a80a0eb6987bab2bd01181ebf644d796629bcf42c17019c8d97a306208395aa79ea3016b19e6fb67f1e43eee33b103bdc0a80fb5e8bb6e3c6d37e67ac07851307f851aa1a9d151cff5d85f9fcca52f095e3429f63bb08541231524586d24186180d7e137f35813ac75aaddae821222858bd8b39ce9433a36926aaf314e6def942b10d7b695738d39cdb4cc8e9b02b4b9b6ad0fde6425b7fc304e5ecce1afd5acf663b3d2d4f5bd9b645d598402c48c99479dcd66b015dae7684511f0e1b"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2001}}, {0x5b, &(0x7f0000000340)=@string={0x5b, 0x3, "a4d78add859ba983075e1db5da09a1928f7d9ddf0a2ea124c8598672b815d1f2b35e2a83028949da241ef912e43d9d8777b97485f62ae022e13f7e2d31a1a22b3ee34d4fdb3cfe3dc2f994ec904a32caa1934d26912555dd41"}}, {0x8b, &(0x7f00000003c0)=@string={0x8b, 0x3, "5f751830eb36958dc903ddbbea2e810c3bbfb1bb9ebf3bb6f28df1609530877d6abbe60678b618bb4ca708a35dd00895b95a0600b74c28119cc82bdf3662b2837163c8a48fff3092ca6de96b5146d909c3dc826721274faa2ba2a71a23258876cb6bed4b181670d8089b7a8672570e876c0f19b228818e9a24d23ba55a738a21ee5e2c1c5a2d52bbd9"}}]}) 4m47.543698017s ago: executing program 3 (id=368): prctl$PR_GET_NO_NEW_PRIVS(0x27) r0 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'pcm3724\x00', [0xfffffff6, 0x3, 0x80802, 0x1, 0x2f, 0x81, 0xc3, 0x5, 0xffe, 0x1, 0x4, 0x1, 0x3, 0x7, 0xffff, 0x10002, 0x7, 0x7ffffffd, 0x1ff, 0x401, 0xb9, 0x0, 0x7fff, 0x2, 0x1000, 0x8, 0x5, 0x5, 0x1, 0x3, 0x8049]}) r1 = socket$kcm(0x10, 0x2, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000200)={0x4, 0xc1eb}) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020000300feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 4m47.350484677s ago: executing program 3 (id=369): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000400)={0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x10, 0x9, 0x5778, 0x8, {0x401, 0x40, 0x8, 0x400f, 0x6, 0xfffe, 0x9, 0x6, 0x0, 0x9cea, 0x2, 0xfff, 0x783b, 0x0, "df3230788dc8efa0c04d638ab166b1dd4b9c2285c738c8fd8939bec8e0613e1c"}}) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000040)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, r1}) (async) r2 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) (async, rerun: 64) r5 = eventfd(0xffffffff) (rerun: 64) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) (async) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) (async) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f00000002c0)=0x200000000) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fddbdf250500000008000600", @ANYRES32=r8, @ANYBLOB="08002c0001000000080039000700000008000300", @ANYRES32=r9], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40040) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000080)={0x0, 0x31324d59}) (async) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x2}]}, 0x1c}}, 0x20000000) (async) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x62080, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r10, 0x40046411, &(0x7f0000000080)=0x8) 4m47.33141893s ago: executing program 3 (id=370): ioprio_set$pid(0x3, 0x0, 0x4001) (async, rerun: 32) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1080, &(0x7f0000000200)=ANY=[@ANYRESOCT=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES8=r1]) (async) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_open_dev$dri(0x0, 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc00864e2, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="1700004c4079db7210ca3a31452e6438cf932e61c2f4c6246fdb0000ef00", @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000400001802c00040014000100020000007f00000100000000000000001400020002000000e000000200000000000000000d0001007564703a73797a3200000000", @ANYRES32=r3, @ANYRES64=r2], 0x54}, 0x1, 0x0, 0x0, 0x240441c0}, 0x24000942) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x58, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7997cca41989"}}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 32) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f00000003c0)={0x0, 0x48, &(0x7f0000000380)={&(0x7f00000004c0)={0x74, r7, 0x1, 0x40000, 0x2, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe0}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000004) (async, rerun: 32) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xf, 0x80, 0xff}}}}}]}}]}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), r8) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000440)=ANY=[@ANYBLOB="41fdffffa69332d99d6b6faf34bedbac741a4b", @ANYRES16=r10, @ANYBLOB="01002dbd3000fedbdf25030000002400018000000580000002800000010008000000000003000200000000000100130000000000010019000000000001001a000000000004000a0000000000020040000000000002800000030008000000"], 0x18}}, 0x0) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x108000000000000) (rerun: 32) ioctl$KVM_PRE_FAULT_MEMORY(r13, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a5c000000060a010400000000000000000a0d02000000000000797a3100000000300004802c0001800a00010072616e676500000000000000000203800800024000e7000004000480080001400000001c0900020073797a320000000014000000110001000000000000000c000200000a"], 0x84}}, 0x24000000) 4m47.254163286s ago: executing program 3 (id=371): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) rmdir(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f0000000140)={0xf, 0x1}) (async) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getdents(r4, 0x0, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) pread64(r5, 0x0, 0x0, 0x9) (async) io_setup(0xae, &(0x7f0000000000)=0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) (async) ptrace$peeksig(0x4209, r7, &(0x7f00000003c0)={0x1, 0x0, 0xfffffeca}, 0x0) (async) io_pgetevents(r6, 0x8, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x10]}, 0x8}) (async) io_destroy(r6) 4m47.038569991s ago: executing program 3 (id=372): futex_waitv(&(0x7f0000000b40)=[{0x3, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000000f80), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, 0x0, &(0x7f0000003c00)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x1000, 0x80a0000, 0x8, 0x3, 0x8, 0x2, 0x1, 0x7, 0xa8, 0x4, 0xa4, 0x7}, {0x4, 0x8000000, 0x10, 0x8, 0x7f, 0x78, 0x1, 0x9, 0x2, 0x2, 0x7f}, {0xffff1000, 0x5000, 0x0, 0x9, 0x8, 0x4, 0x0, 0xe5, 0xfd, 0xfe, 0x8, 0x6}, {0x7003, 0xdddd0000, 0x0, 0xd6, 0x4, 0xfe, 0x3, 0x80, 0x40, 0x80, 0x7, 0x2}, {0x0, 0xf000, 0xf, 0x5, 0x3, 0x5, 0xf, 0xe, 0x4, 0x5d, 0x2, 0x16}, {0x4000, 0x3000, 0x9, 0xd4, 0x79, 0x9, 0x0, 0x7, 0x5, 0x4, 0x5, 0x1}, {0x4, 0xeeee8000, 0x4, 0x75, 0x7, 0x8, 0x2, 0xf8, 0x9, 0x11, 0x82}, {0xf000, 0x2000, 0xa, 0x7, 0xc0, 0x80, 0x40, 0x8, 0x0, 0x5, 0x8, 0x9}, {0xffff1000, 0x6}, {0xf7ff5000, 0x5}, 0x40001, 0x0, 0xd000, 0x4000, 0xe, 0x2800, 0x4000, [0x2, 0x7, 0x8]}) 4m46.983999208s ago: executing program 3 (id=373): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYBLOB="070000000000000007000000ffffffff"]) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="200e1100000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x0, 0x5b, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49, 0x1, 0x1, 0x9, 0x70, 0xab, [{{0x9, 0x4, 0x0, 0x9f, 0x3, 0x2, 0x6, 0x0, 0x3, {{0xa, 0x24, 0x6, 0x0, 0x0, "7c9b171f59"}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x48, 0x3, 0xb}}, {[{{0x9, 0x5, 0x81, 0x3, 0x7ef, 0x2, 0x1, 0x73}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0xd, 0x2, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x4, 0x6, 0x68}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x2, 0x9, 0x3, 0x8, 0xac}, 0x13, &(0x7f0000000180)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x0, 0x20, 0x4, 0x5, 0x7, 0x1}]}, 0x1, [{0xed, &(0x7f0000000280)=@string={0xed, 0x3, "d4ed7fb862e575f7cd92dced1ce482700778f2e528ae4cb7fe16f1062b4576bca28d5cabf4054733ce380eab761da02596e167a5bd4a70fc67af48c6b64f6a4d051e51b7f6d4144bb59808fcd3cfb7f964c31774d3b3446206448fdd3c84053c2b111db418537c12a88412d46166109348af81443578beb7309667ef907e54640fd526d6ba6e3212d4f68d251626fe916966a3de7ea5d2fb3800801e2d1e0ad371deec0be7ddfe10287f9a00f998e9c1e700a575b98889a71ac9e6c4cdbdb93e7b2ced37f9a49372c0dcd0bf26337fceaa67dffe04802d0815c9d06a6c9363505017304739955e40e2c01a"}}]}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) 4m46.829725034s ago: executing program 32 (id=373): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYBLOB="070000000000000007000000ffffffff"]) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="200e1100000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x0, 0x5b, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49, 0x1, 0x1, 0x9, 0x70, 0xab, [{{0x9, 0x4, 0x0, 0x9f, 0x3, 0x2, 0x6, 0x0, 0x3, {{0xa, 0x24, 0x6, 0x0, 0x0, "7c9b171f59"}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x48, 0x3, 0xb}}, {[{{0x9, 0x5, 0x81, 0x3, 0x7ef, 0x2, 0x1, 0x73}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0xd, 0x2, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x4, 0x6, 0x68}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x2, 0x9, 0x3, 0x8, 0xac}, 0x13, &(0x7f0000000180)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x0, 0x20, 0x4, 0x5, 0x7, 0x1}]}, 0x1, [{0xed, &(0x7f0000000280)=@string={0xed, 0x3, "d4ed7fb862e575f7cd92dced1ce482700778f2e528ae4cb7fe16f1062b4576bca28d5cabf4054733ce380eab761da02596e167a5bd4a70fc67af48c6b64f6a4d051e51b7f6d4144bb59808fcd3cfb7f964c31774d3b3446206448fdd3c84053c2b111db418537c12a88412d46166109348af81443578beb7309667ef907e54640fd526d6ba6e3212d4f68d251626fe916966a3de7ea5d2fb3800801e2d1e0ad371deec0be7ddfe10287f9a00f998e9c1e700a575b98889a71ac9e6c4cdbdb93e7b2ced37f9a49372c0dcd0bf26337fceaa67dffe04802d0815c9d06a6c9363505017304739955e40e2c01a"}}]}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) 4m39.208161009s ago: executing program 33 (id=338): syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x4c, 0xf5, 0x76, 0x40, 0xc26, 0x12, 0xf79b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3c, 0x0, 0x2, 0xb3, 0x3c, 0x9d, 0x0, [], [{{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x8, 0x2, 0x2}}, {{0x9, 0x5, 0x5, 0x6, 0x40, 0x8, 0x10, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x14, 0x1e}]}}]}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x7, 0x1, 0x3, 0x60, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x91, 0x1, 0x0, 0x0, 0x0, 0x3e, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xff, 0x1}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x5, 0x8, 0x81, 0xbae6ff226d3cceac, 0x1}, 0xc8, &(0x7f00000000c0)={0x5, 0xf, 0xc8, 0x6, [@generic={0x80, 0x10, 0xa, "76f2b27f4b3867318aec2b2edabb5f3fc969c3715c0d7376b9fede82b6850f52d664635c9f4442b3d57cc1be825eee668c17bd9c3e8fdf25976ea4341f442ec18bc7167eab9a13b24a6867a78b6d1a7e90b34704471f3dac82155e4002a9d8676ad058599df2ec0e4fd42e61975a84bec0f6345e1d3775eda5a82b91f3"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "08c8bf5351b7b62b8aefe7be709c9410"}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "df870e1cbf62f9e3ba2981ac23f98d39"}, @ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x401, 0xf0f, 0x7}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x401, 0x0, 0x3}, @ptm_cap={0x3}]}, 0x5, [{0xca, &(0x7f00000001c0)=@string={0xca, 0x3, "2a8f1432c59cc2a2e9799a80a0eb6987bab2bd01181ebf644d796629bcf42c17019c8d97a306208395aa79ea3016b19e6fb67f1e43eee33b103bdc0a80fb5e8bb6e3c6d37e67ac07851307f851aa1a9d151cff5d85f9fcca52f095e3429f63bb08541231524586d24186180d7e137f35813ac75aaddae821222858bd8b39ce9433a36926aaf314e6def942b10d7b695738d39cdb4cc8e9b02b4b9b6ad0fde6425b7fc304e5ecce1afd5acf663b3d2d4f5bd9b645d598402c48c99479dcd66b015dae7684511f0e1b"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2001}}, {0x5b, &(0x7f0000000340)=@string={0x5b, 0x3, "a4d78add859ba983075e1db5da09a1928f7d9ddf0a2ea124c8598672b815d1f2b35e2a83028949da241ef912e43d9d8777b97485f62ae022e13f7e2d31a1a22b3ee34d4fdb3cfe3dc2f994ec904a32caa1934d26912555dd41"}}, {0x8b, &(0x7f00000003c0)=@string={0x8b, 0x3, "5f751830eb36958dc903ddbbea2e810c3bbfb1bb9ebf3bb6f28df1609530877d6abbe60678b618bb4ca708a35dd00895b95a0600b74c28119cc82bdf3662b2837163c8a48fff3092ca6de96b5146d909c3dc826721274faa2ba2a71a23258876cb6bed4b181670d8089b7a8672570e876c0f19b228818e9a24d23ba55a738a21ee5e2c1c5a2d52bbd9"}}]}) 2m23.446251111s ago: executing program 4 (id=1114): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb00090582024000"/54], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000001d80), 0x80, 0x0) (async) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000bc0)={0x1c, &(0x7f00000006c0)={0x20, 0xe, 0x6, "83eae4ac5a3b"}, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x3c32, 0x9, 0x4000000000000e52, 0x5, 0x9, 0x1045, 0x200000000006, 0x0, 0x1000000000000007, 0xfffffffffffffffe, 0x100000001, 0xfffffffffffffffd, 0x40000000009, 0x8000000000005, 0xfffffffffffffffb], 0xa0000, 0x40080}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) 2m23.230584162s ago: executing program 4 (id=1115): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xa003, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0xc000003, 0xf, &(0x7f0000000180)=[0x138d, 0x7f, 0xf909, 0x899e, 0x80, 0x9, 0x7, 0x2, 0xfffffe01, 0x1, 0x4, 0x2, 0x10006, 0x5, 0x0], 0x1, 0x4000003}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x35) ioctl$FIOCLEX(r2, 0x5451) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000aa3a3740480b032061390000000109021b000100000000090453"], 0x0) socket$kcm(0x2, 0x3, 0x2) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={r6, 0x4, 0x20}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'veth0_macvtap\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x51}}) r8 = syz_open_dev$vcsa(&(0x7f0000000000), 0x81, 0x84e00) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$sock_buf(r9, 0x1, 0x1f, 0x0, &(0x7f0000000340)) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f000000400000090507c6"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r8, &(0x7f0000000500)={0x0, 0xfffffffffffffe0c, &(0x7f0000000040)={0x0, 0xfffffffffffffe50}, 0x1, 0x0, 0x0, 0x20840}, 0x20000041) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000018010040"]) 2m21.384140591s ago: executing program 4 (id=1122): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e21, 0x3, @loopback, 0x8}, {0xa, 0x4e21, 0x16, @private1, 0x1}, 0xffffffffffffffff, {[0x7, 0x3, 0x9, 0x6, 0x1, 0xb6, 0x0, 0x8]}}, 0x5c) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)={0x58, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) (async) socket$igmp6(0xa, 0x3, 0x2) (async) setsockopt$MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e21, 0x3, @loopback, 0x8}, {0xa, 0x4e21, 0x16, @private1, 0x1}, 0xffffffffffffffff, {[0x7, 0x3, 0x9, 0x6, 0x1, 0xb6, 0x0, 0x8]}}, 0x5c) (async) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)={0x58, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}}, 0x0) (async) 2m21.333783933s ago: executing program 4 (id=1124): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x6, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0xff, @ipv4={'\x00', '\xff\xff', @local}, 0xff}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000002c0)="1f", 0x1}], 0x1}, 0x60) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000401, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000001600)={0x54, r4, 0x1, 0xfffffffd, 0x0, {0x26}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x51}, {0xc, 0x8f, 0xfffffffffffffffe}, {0xc}}]}, 0x54}}, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000001580)=0x0) r6 = geteuid() getresgid(&(0x7f00000015c0)=0x0, &(0x7f0000008800), &(0x7f0000008840)) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$cont(0x15, r8, 0xdfd, 0x106) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008880)={{{@in6=@private2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@remote}}, &(0x7f0000008980)=0xe8) getresgid(&(0x7f00000089c0), &(0x7f0000008a00), &(0x7f0000008b00)=0x0) sendmsg$netlink(r3, &(0x7f0000008ac0)={&(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbfc, 0x400000}, 0xc, &(0x7f0000000cc0)=[{&(0x7f00000014c0)={0xc0, 0x24, 0x4, 0x70bd25, 0x25dfdbfb, "", [@generic="00f4db4c00cfe66cc34b46ed62e20e28dc808bde5b10f4832ef47547ec6f072d8075b69a4f42181bfe1204d3227a35596bc3fd0f4835d152aa6cf22c9a7aebd847c828d7aa9d0b2d26391c6b98dbc40857ae51bd7922419d9f356ad44f744f869672b557c2f5c10a7298125312c9eb5e7aa35bc5ee62903d4f8a7a299856f406006bd58c13723c98116031ddb2a9bcc722f60a2fbe1c19da4e4a5abe37a01aa847c2349f31c96f6341a4159b14"]}, 0xc0}], 0x1, &(0x7f0000008a80)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}], 0x40, 0x20040844}, 0x40000) r11 = accept$nfc_llcp(r1, &(0x7f0000000140), &(0x7f00000001c0)=0x60) sendmmsg(r0, &(0x7f0000000280)=[{{&(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, r11, {0x2, 0x4e23, @rand_addr=0x64010101}, 0x0, 0x4, 0x0, 0x2}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000380)="b5b5b07679df0d3b47599f4ea6f8b19626b06eb09cec1cfd087779dc762e9d610002cbef52995941a24725495af7f2a07504329cfc3bf74c1cc0316b448b8f5f07fced17eb9d4999c90ba3301f8cdaee60fcd03b978eea", 0x57}, {&(0x7f0000000400)="64e54e7549ef84254bdcb857b5c8121c1ac9029bb1b0e7d0909e7a1fe732582ce8533b68f74e4a5fa0a408994b6f34b11c2d0c0a1aa456a9e3041682187ecbe091e0a8743551ca3fa4105d576bc982b858", 0x51}, {&(0x7f0000000480)="bc7ff53189ea003eb20094f3a724f7a159bff3bd8d91573db510d12d088eed6a6de9ffcaa63ed5452458bb07f595ee94bed976dea8686cbef4dc28d0e709292999d4dc07b2747774a522e09eee936260dcefe8ce6f9818015e71a2b1cf", 0x5d}, {&(0x7f0000000200)="08053348f284de3d", 0x8}, {&(0x7f0000000500)="913094bca631bf97b36e7b0ae370ecd5e9d721c5b70087b3be7265401375e5c063a78e0c235d3bbdaf3bf879cb247b9f255aefc6111833edd727e343dc436e58546c82184937a99d4202c665c945b4200e810ae584bb7407c7dce08fdaa8402c216247548db88b50bc4e3dce3d8358648cd02cd8c3828a087d9a41749d9d085fdcd7484377c2605aa2640be8e65fe36850b9ef6081557f49ff07989dee4c39f0784270286d18c2c03508635d15f8969396239ce60ae8446c273adff0919ccabd138efa8b4fbd6b3703649428e5acb79df78c831d699ef1c4dc67", 0xda}, {&(0x7f0000000600)="8a601fbb139f9b56ff9cbbb75dbf56d8284061826e24049f1f4c370807e005aab7d90cf747d968c1e552d1dbebc9a171f5f17daa29207145a95d53fd97c9fd4b708251440c4cd5f58e6d86dfed73c6b9ee5384c709187afc43d209f5da04ed970eb83864ac2c182e68cee99d4da1c251178ac8f7a3137ac9e05d", 0x7a}, {&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000000680)="557754a670464a115718d8aaadf0ea7946466d6fc27de61c01f0a13abb81bb9f6b7d89051298c697f1b702f7c71ca23c554e1e95a5b2e306cc15a25280e3dafd276db8074c0e96d4771030eee41651b62d18bc47e121eb63ddd3dad99e6bc79e35779fc750c9e7ee9da2b15f2df367cb0cc2d45242fa764201a79362e71c1456369c377c622b686d58044564f455537a0bd96e47", 0x94}], 0x8, &(0x7f0000000d00)=[{0xf0, 0x104, 0x7, "46e6c3f46a69f9d072af996c9500518df6a749b69e23a4a8de935ede203d0d868d8f2d9c260ec601bcecea3fa1b06e28a410428a4606aa41472b844264634e0f0a6b5c216fc238dd7f3f578a33c405acbf71eb282c99edcd81d5b1e0b7b2dbfe40a2a1c221ae0865f7aac01cf066afac82f2d89b938fbea3315c97653151725848ee7316f6ce7cf4bee15c961b2a8a866ac2f89e1252aaf190a7ce6dc6691610de7e44732b5c9e03c52d25456fd39d5c134a02dce29d96bb15a72830dd5a4af2a3d825c358d56a0ee153ef2f38400f379fddd9872b50ce558cd435c7a00285c4"}, {0xc0, 0x11, 0x100, "8591ac5059826b735c72597da4370e6d19dde40ad2208bf57252bcd5602a6c121cd5bf0800dfd6a1ca7f2088a37c3042886688311e766df72c138a2557a87fe6e60c0ead62ffd789d1da6c1aaade0370c5b0a3d0a2b4a2d00ed92f69af07ee17fd33316c83531fa94bfd988c8b68bfd0b7d5fce5a1a00866e5a9d77534b7109bce52d323a2296e6a8c2229a1be35a3d84385c24a21ac79b85faf5ad271bdb3cf0bc0016d340189f9f6bc"}, {0x98, 0x29, 0x10000, "6c7e64031b806432bae080d2c8bcba467ffbf62eedd6b58c8fbe02042814b0b9ba4826f3f4ae94bf55191a56a19060139ba2aa75d65bb01c0f71ebd7ac8dc0a4ef714dc2428558839b526adc57d3e3d43c79c94300ac497532f48482b9190860ce7a0930e96aad931b24bed00bfcc71901ade1d53090b03ac8d7d9bb0a37a7c72fa088b81dc23903"}, {0xf0, 0x119, 0x5, "6202f13e33715f0fd259c33fbb7c3fe98b57e2c2e51c4ec3dd25c2c31378524748891345cd0b3c25d455d10963f38cea57a6898a52b508939631d8dcd861b3d0c595795323e58ea9754588b2ae675b6437bfbf09f0a2fdf6ff183359d00cd99122f9bc2f9ae516161dd4d632ab96f9a3b1981851d19d55161372925bd1085f5b08a0a9ff93e48176a97f25b2b1ab0788554ed8e597260b2b25866b8dafe97ed32991712669943c0cb22a9b765e164fb94302c3f8b3d22d26f162bc80ed3651284868d56747c6da6ebba2c821decd630b3db0179fecff11d6c4f87f08c2ae"}, {0xb0, 0x10c, 0x8, "6a0017e9f2aa14814f5af0560ea9976fca4a272f18b2e2cc57f59b041537e3cb64152ea68d9d2c5051bf744bbbd8a96d7ceb37a8498d9ccadefeaa9e974646bad5fafb82cb145729e8120933cd71876c675dbc5a3a8169f9e283ba13afa95d88797d3ee6893a618a59966fe66dcdc391193af52b82501bfd344599ee73a0a9ec0dfd4b64c5535ff93b6ef654bb264dd6e7d5a9d3174d3701099642efc70555"}, {0xd8, 0x1, 0x8, "95c2d2a0511a254eed05e8fcd2578041b5fd32b808e4bffb30476cfbe4eb08cc1f4ed7fd2827dc1ede2972fd169fbb37a705df781805e7077135853da77cd1233f96c23efd53692dbda6f0368f871e5364a40c4e80bf67efdf4f209922c1708e86cf58a7952df31056d8c476b24e04f29c1d33dc662d33c135277e03fb871f4520399cb15fad15bfe897e7c096fefbca5bf05eb5696bc5923bbb42a411a69e78c0d4da2e47800f91aeb506b973dc87ca71cb26f60674319112b02fa640f321604ff2d04569"}, {0xe8, 0x10c, 0x428, "a358cddd95ebdd79b1a8c139a75516087f0ac2638712d0c15fdc189aa7834fb3c45ff74b222bb9de0cc6a3378fa8932194a5cf98ec978bbe9cc83244f7623fe8e6b72ffa8f6ad69fb34f57368f4000bfeed4b6ffe3d72e891778d4750e01884fe8bd133f45b0f510d409f6ba50544ff9d77cce2f195a99cc068e9c038571cc3e29a7c073fce95370579c3d18dd6d2c493b335aace4ee5b6cff0a17f6eb02ffad39ede3a1e01dabcc37dbc56b9106b695d105098d1e957db515b55424cf871a8880628bce68b7880a76b524a13babe2fadc5dc73f2f"}, {0x110, 0x119, 0x6, "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"}], 0x6b8}}], 0x1, 0x20008000) 2m21.210866783s ago: executing program 4 (id=1125): syz_usb_connect(0x5, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000f361ea08cc041681b94d01020301090271000100008000090400b80054043806"], 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket(0x18, 0x6, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) bind$unix(r0, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0xa) listen(r0, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000008) syz_usb_control_io(r2, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001480)={0x0, 0x11, 0x3, "f45f0d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x81, 0x30, 0x7, 0x8d8c}, &(0x7f0000000080)=0x18) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={r3, 0x2}, 0x8) 2m20.961676354s ago: executing program 4 (id=1126): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = gettid() rt_tgsigqueueinfo(r2, r2, 0x14, &(0x7f0000000480)={0x12, 0x0, 0x80000000}) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r3 = dup(r0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @empty}}) 2m20.716476145s ago: executing program 34 (id=1126): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = gettid() rt_tgsigqueueinfo(r2, r2, 0x14, &(0x7f0000000480)={0x12, 0x0, 0x80000000}) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r3 = dup(r0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000400)={'veth1_to_hsr\x00', {0x2, 0x4e22, @empty}}) 1m9.537611944s ago: executing program 2 (id=1515): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) clock_adjtime(0x0, &(0x7f00000001c0)={0x80, 0x8, 0x9, 0xffffffffffffff1d, 0x4, 0x7, 0xd, 0x7fffffffffffffff, 0x3ff, 0x0, 0x7fffffffffffffff, 0x773, 0x1, 0x1, 0x3, 0x40, 0x53ebbaaf, 0x1, 0x4, 0x8, 0x9, 0x3, 0x2, 0xff, 0x2, 0x3}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b0001000000000904000001ff7f880009050302"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000440)={0x40, 0x14, 0x1e, "69abd1d5f91ac1ed51931ffb112c2efe7da829b64948d0260b792ea4df87"}, 0x0, 0x0}) 1m6.462690148s ago: executing program 2 (id=1524): syz_usb_disconnect(0xffffffffffffffff) fsopen(0x0, 0x0) fchdir(0xffffffffffffffff) mount$fuse(0x0, 0x0, 0x0, 0x8, 0x0) r0 = syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x32, 0x33, 0x7a, 0x8, 0x644, 0x8021, 0x4778, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x7, 0x30, 0xe, [{{0x9, 0x4, 0x1, 0x1, 0x0, 0xff, 0xbc, 0x54, 0x8}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0xce, 0xaf, &(0x7f0000000000)="7c2b7e25eaddc2d8a9bfb08ffc184d39a91c8f113eccf6fbe2528d90d645229450f15f90a00b9349ab3ca77e3c9ac9d571c71e87452b334eb83f36d024ca1ccfbc2edb3373430c55c7357be6ac4e76b98cc004c0f41d26331604ff4375f16fd336410143988575d5fb07d8889a2265eee9ad6d5c6ab0fccb94fc16cee141de0cdf54c5cd1a4090efc44894517023d95d4d346680fa998c1e686a49a533ac79f9575220acd0b75bab338531cb7a286a") 1m5.05734274s ago: executing program 2 (id=1530): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendfile(r3, r5, 0x0, 0x10ffff) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000000)={0x120, r5}, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x7f, 0xfffffffe}}, 0x120) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040}, 0x4000) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a8c000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000004c0008800c00024000deffff55c3dd9e0c00014000000000000000000c00024000000000000000000c00024000000000000000090c00014000000000000000060c000140000000000000026314000480080002403cb140bb080001400000000314000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$inet6(r7, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x28}, 0x20040000) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) 1m4.316719232s ago: executing program 2 (id=1533): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000b, 0x8010, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00008fb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000eb4000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x7688, &(0x7f0000000040)={0x0, 0x800389b, 0x4000, 0x1, 0x19e}, 0x0, 0x0) 1m4.20654584s ago: executing program 2 (id=1534): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8=0xffffffffffffffff], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r4 = syz_pidfd_open(r3, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES16=r1], 0x68}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x3ef, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0xae03, 0x16) wait4(0x0, 0x0, 0x80000000, 0x0) pidfd_getfd(r4, 0xffffffffffffffff, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRESHEX=r5], 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000040)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="dd022c0000006e03da2c083acb2917b7c725590286ed70d2d3db1139258cd2620ada7bb5e652c3a22c36262c7df56cfc21f53c46f70dde2ba98c18a5d37bfb328e769e3c0fd684d443426b8a"], 0x0, 0x0}, 0x0) r8 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000b00)={0x0, 'gretap0\x00', {0xffe}, 0x80}) ioctl$HIDIOCGUSAGE(r2, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x100, 0x0, 0x2, 0xfffffffd, 0x2}) 1m4.014459214s ago: executing program 2 (id=1535): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x4, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2fc}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) getpeername(r0, 0x0, &(0x7f00000000c0)) 1m3.844937624s ago: executing program 35 (id=1535): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x4, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2fc}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) getpeername(r0, 0x0, &(0x7f00000000c0)) 10.010895305s ago: executing program 7 (id=1788): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x1000000009, 0x5, 0x180, 0x4, 0x12, 0xf1, 0x51, 0x400000007, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0x1], 0xffff1001, 0x122183}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x0, 0x0) prlimit64(0x0, 0x2, &(0x7f00000000c0)={0x9, 0x100000000000000}, &(0x7f0000000100)) brk(0xfffffffffffffff9) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000002c0)={@mcast2, @empty, @mcast2, 0x800, 0x6, 0x20, 0x100, 0x7, 0x540000, r2}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x180107, r9}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000ffdbdf251d0000000c009900090000006900000034002380050008000400000006000400f2000000050007009d00000008001a0002000000060012000400000008001a00020000007d07950e8a7328048c39751ae81ba711dcbe21baa0b6d8548fec8898c3ddc50ff521967df58d14bcaf26772a73101551619f5cd604d2956653a5b082258cc9363f21dd4061327846ec21c89cd2456afad540bc3c00896901bdbe36"], 0x54}, 0x1, 0x0, 0x0, 0x4000050}, 0x20040041) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x89a0, &(0x7f0000000180)={'syzkaller0\x00'}) 9.789454577s ago: executing program 7 (id=1789): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000100b060a5000000000000109022400010000500009040002010300000009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff030902"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB="3d04"]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000000c0)='autofs\x00', 0x0, &(0x7f0000000400)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@acquire={0x134, 0x17, 0x400, 0x0, 0x1, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfe, 0x0}}}, @in=@multicast2, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@remote, 0x0, 0x0, 0x0, 0x80}, {{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x70bd25}, [@mark={0xc, 0x15, {0x35075b, 0x3}}]}, 0x134}}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@acquire={0x134, 0x17, 0x400, 0x0, 0x1, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfe, 0x0}}}, @in=@multicast2, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@remote, 0x0, 0x0, 0x0, 0x80}, {{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x70bd25}, [@mark={0xc, 0x15, {0x35075b, 0x3}}]}, 0x134}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001000)=ANY=[@ANYBLOB="1201f401000000ff4f0451b64000010203010902240001010a40030904000001030101020921fcff020122c40d090581222000000609"], &(0x7f0000001240)={0xa, &(0x7f00000012c0)={0xa, 0x6, 0x201, 0x84, 0x20, 0x3, 0x20}, 0x19, &(0x7f0000001080)={0x5, 0xf, 0x19, 0x1}, 0x6, [{0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0xd4a7}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x2809}}, {0x1, &(0x7f0000001300)=@string={0x0, 0x3, "bc0df30800cc394eec6c5892450598eba82cb9fe6c5e0b61232becef15dd39454085aec83f82650357589376d5418e92eda72952bf7da8d70d3515d7ca27ce61a75322bf70ca3d4013f99d801a633b27593c483c2ba99e687e5f49ec81ebcf33a263346582aa386d000d01c68cf82a403410af5f65296f426d673a92f820901eeb0960765bc4d611728bbb92387c6e9e87d88e976fc45e953ef45cfdad38d2043132a9f75f95b3da8869804a5d0ce1efd2755888c29a4077a0c9e40cae0a0710404d3a1e97c6f45f3222"}}, {0x17, &(0x7f0000001180)=@string={0x17, 0x3, "47d4c934bcc557e8c57d01df2452cc7d47b045d2bf"}}, {0x2f, &(0x7f00000011c0)=@string={0x2f, 0x3, "a7a31e93692c9331fac3b29d4c11495e742fd0f0ecc7f6df82752bf291b8de7a60882c4ebee0d506ae1a7ff2ad"}}, {0x4, &(0x7f0000001400)=@lang_id={0x0, 0x3, 0x43e}}]}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) mmap$binder(&(0x7f0000735000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) (async) mmap$binder(&(0x7f0000735000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001040)={'pim6reg1\x00', 0x400}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001040)={'pim6reg1\x00', 0x400}) 6.710533077s ago: executing program 7 (id=1810): getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@loopback, @in=@broadcast}}, {{@in=@dev}, 0x0, @in=@private}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000340)={{0x2, 0x0, @broadcast}, {0x0, @link_local}, 0xa, {0x2, 0x800, @multicast2}, 'wg0\x00'}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e21, @broadcast}, {0x0, @random="5cf8274bdde8"}, 0x7b, {0x2, 0x4e22, @broadcast}, 'vxcan1\x00'}) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec80000ec00120c000140060404000a0404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000080)={'ni_daq_700\x00', [0x2e, 0x80008000, 0x9, 0x2, 0x0, 0x0, 0x2, 0xf, 0xffe, 0x4, 0x7, 0x2, 0x1006, 0x3, 0xffff, 0xffff, 0xffffffa8, 0x40000009, 0x3c, 0x24, 0x3ff, 0x10000, 0x100, 0xe2df, 0x2, 0x8, 0x5, 0x3, 0x7, 0x4, 0x8045]}) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 3.587037122s ago: executing program 7 (id=1829): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = fsopen(&(0x7f0000000000)='configfs\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x16) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0xfffffffffffffffe, r5, {0x7, 0x29, 0x0, 0x400040, 0x84, 0xfffe, 0xfffffffb, 0x2, 0x0, 0x0, 0x2, 0x1}}, 0x50) statfs(&(0x7f0000000000)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r3, 0x0, 0x5) fchdir(r6) syz_clone(0x8000000, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r7 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r10, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x10, 0x3fb, 0x400, 0x70bd2a, 0x25dfdbff}, 0x10}}, 0x4004010) ioctl$SNDCTL_TMR_SOURCE(r8, 0xc0045406) r11 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@private}}, &(0x7f0000000040)=0xe8) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r11, {r12, r13}}, './file0\x00'}) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r8, 0xc2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x400000000000009, 0x7ffc, 0x80000001, 0x800000010000, 0x4, 0x4002004c2, 0x0, 0x654, 0x0, 0x3ffffc, 0xfffffffffffffffd, 0x7fffffff, 0x20000000009, 0xffff, 0xfffffffffffffff7], 0x100000}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000140)="c744240033000000c7442402a04a0000ff2c240f01c8f3420f1a67d0876004c4827921700af32e460f30c481f97e2d00700000c443fd01bd485300001c410f0132f3400fc732", 0x46}], 0x1, 0x7b, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.102573181s ago: executing program 7 (id=1830): r0 = socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) sendmmsg$unix(r2, &(0x7f00000bd000), 0x100, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') read$FUSE(r3, &(0x7f0000003480)={0x2020}, 0x2020) (async) read$FUSE(r3, &(0x7f0000003480)={0x2020}, 0x2020) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x59616d61, 0x1, 0x0, 0x2, 0x0) read$FUSE(r3, &(0x7f0000000b40)={0x2020}, 0x2020) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r5, &(0x7f0000000900)=[{{&(0x7f0000007b00)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000007b40)="fb9f", 0x2}], 0x1}}], 0x1, 0x40000) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x304}, "0f04c8a3342fbf07", "b367b24626ef554a1ead5d5699233181", "9979ed64", "bf6977b527e2b8a5"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000300)=@gcm_128={{0x304}, "2dc3fa5474cf6690", "50822f66b97a105f5b00d8edc5151b4a", "b2356f41", "06b950e7846e2394"}, 0x28) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4401000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="02000000"], 0x144}}, 0x4810) (async) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4401000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="02000000"], 0x144}}, 0x4810) r7 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) (async) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) (async) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r8, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r8, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r8, &(0x7f0000003740)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x12101, 0x0) bind$inet6(r7, &(0x7f0000000480)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) (async) bind$inet6(r7, &(0x7f0000000480)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) 3.075158423s ago: executing program 6 (id=1831): syz_usb_connect$uac1(0x4, 0x9c, &(0x7f0000000000)=ANY=[], 0x0) 2.914675554s ago: executing program 7 (id=1834): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) syz_usb_connect(0x1, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="120100020592020881060500c0560102030109021b0001070340f20904fc08010a"], &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r1 = inotify_init() r2 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x80044d0e, &(0x7f0000000180)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000380)={0x0, 0x627d}, 0x8) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000020c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r7}}, 0x20) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) fchown(r0, 0x0, r8) openat$cgroup_ro(r5, &(0x7f0000000900)='net_prio.prioidx\x00', 0x275a, 0xb) read$FUSE(r1, &(0x7f0000001fc0)={0x2020}, 0xfffffffffffffd45) openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) close(0x3) 2.544060468s ago: executing program 6 (id=1835): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x400c400}, 0x800) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0285628, &(0x7f0000000cc0)) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)={0x1c, 0x14, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="ecc032c4"]}]}, 0x1c}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.511973632s ago: executing program 6 (id=1836): r0 = socket$netlink(0x10, 0x3, 0x14) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000003, 0x12, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x80, &(0x7f0000000100)=0x8, 0x0, 0x4) (async) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x18}) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) (async, rerun: 32) sendmsg$can_bcm(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000020800de9c00000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000004001"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) (rerun: 32) sendmsg$can_bcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x5, 0xc9a, 0x0, {0x77359400}, {0x0, 0x2710}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "645b6048a2e4931133f6d9919fd48557d76811cd874f3c107bbfc1c8831026d40798a2be4cc414e02216198977dc3d41ed0880c64c39e5f4059bae641ed15112"}}, 0x38}}, 0x4) (async) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) (async) r5 = syz_clone(0x80000000, 0x0, 0x38, 0x0, 0x0, 0x0) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r7 = syz_open_procfs(r5, &(0x7f00000000c0)='stat\x00') pread64(r7, &(0x7f0000000140)=""/15, 0xf, 0x6) sendmsg$nl_netfilter(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000090b010127bd7000fddbdf2501000006bc1e2c6a41155e9e77ab94549b2142ec80aa72851616f22c980ab94781844d30abe5752e7d59f7d5f22ac4f2b94932096025a607002560deff7ab491be0be95e000400000ff6f994244cc5e84a8176d21a0b41e67b0ea41f0c1d6edf34b53fa8fda667be1a90bec4b61d7ff17a40e070e232b5519b8ed934b4da6eff576a50e6a3a5fbff4aa8f1f2908312c0e39e3c5c1e2334f6a0d744d84d36e47ee162985d2472eb71f8451911d1dfb34769f23823f67d0391e46e"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) (async) r8 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r8, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0xa9fe0000}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='r', 0x1}], 0x1}, 0x0) 2.222523843s ago: executing program 0 (id=1839): socket$kcm(0x10, 0x2, 0x0) r0 = socket(0x1d, 0x2, 0x6) socket$inet6_udplite(0xa, 0x2, 0x88) accept4$inet(r0, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000000e80)={0x0, [{0x1, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x5, 0x0}, {0x3, 0x0, 0x401, 0x0}, {0x2, 0x0, 0xfffffff2, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x0, 0x0, 0x428, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x2, 0x0, 0xa, 0x0}, {0x1, 0x0, 0xd99, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x8, 0x0}]}) close_range(r2, 0xffffffffffffffff, 0x0) getpeername$packet(r0, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb807ca007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}, {&(0x7f0000000040)="756c47d29c33d800fbf6b84d38e1e196b49a42ff0c4ae862fce2cdb884145cba54eb6c621a62415eba421927a38177023ad9daa7df680ab3663b94ecdbfa967c85dd7cbf427025c23e6af0eff0bd4fe7924c63006a0a114c6d18f7bb60256d63c22864ebbabc373a85081eed8584fac160e34d53781dfe15a9f1a870f6f95eb56971f0cc3a37afc9e2cb701417c958d82cc602e2a44189ecea606de5792def5a8c0264bee9f285743af0da3140d1eaf5531f805cc011d6b2dd081cec1fc7f31f527680f7180ea30d29b7dc5db452adbf8edf631aeca644f72b3369116f0ed90145e17435c0d2153062b2526b51c77e402b1a809e155c", 0xf6}], 0x2, 0x0, 0x0, 0x4a0f0000}, 0x4000044) 2.094073116s ago: executing program 0 (id=1841): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x10}}], 0x10, 0x4000801}, 0xd0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) 1.274944794s ago: executing program 6 (id=1846): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="050000000000000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffff"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) (async, rerun: 32) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) (async) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async, rerun: 64) r4 = socket(0xa, 0x3, 0x3a) (rerun: 64) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) (async) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd1, &(0x7f0000000400)=0x1, 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x1c, r5, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4) (async) move_pages(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[0x65], 0x0, 0x2) (async) r6 = dup(r3) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.27467855s ago: executing program 6 (id=1847): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={0x0}}, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket(0x15, 0x80005, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="bc010000190001000000000003000000fe880000000000000000000000000001fe8000000000000000000000000000aa000a0000000000000a000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000002"], 0x1bc}}, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0xa0, 0x1e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x8}}) getsockopt(r1, 0x200000000114, 0x5, &(0x7f0000019b00)=""/102385, &(0x7f0000000000)=0x18ff1) sendmsg$802154_dgram(r0, &(0x7f0000000140)={&(0x7f0000000040), 0x14, &(0x7f0000000080)={0x0}, 0x7}, 0x80) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCCONS(r4, 0x541d) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40012042, 0x0) 1.224756277s ago: executing program 6 (id=1848): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224"], 0x0) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000003090408000302020000052406000005240004000d240f0100000000000000000309058103200000000009058202200008000009050302"], 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0xe0, 0x6, [{{0x9, 0x4, 0x0, 0x3, 0x10, 0x7, 0x1, 0x3, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x6, 0x4, 0xc}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x2, 0x1, 0x9}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x9, 0x7, 0x1, 0x20, 0x3}, 0x1c, &(0x7f0000000180)={0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xf8, "18dd97eef568c3a21544a26a86dc4b50"}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x406}}]}) 1.185916004s ago: executing program 5 (id=1849): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864d0, &(0x7f0000000840)={0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r3, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x20004000) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r3, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x20004000) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) setresgid(0xffffffffffffffff, r5, r5) (async) setresgid(0xffffffffffffffff, r5, r5) r6 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r6, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)='\b\x00', 0x2}, {&(0x7f0000000040)="96b414bbbcc9", 0x6}], 0x2}, 0x24048004) (async) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)='\b\x00', 0x2}, {&(0x7f0000000040)="96b414bbbcc9", 0x6}], 0x2}, 0x24048004) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x40, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc1d}]}]}]}]}, 0x40}}, 0x0) 1.070335813s ago: executing program 5 (id=1850): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r2, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = getpgid(0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r6, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000003880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12141, 0x0) getsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000040), &(0x7f0000000100)=0x4) fcntl$setownex(r4, 0xf, &(0x7f0000000080)={0x1, r5}) sendmmsg$unix(r3, &(0x7f0000011500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4004040}}], 0x1, 0x40015) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003001f00000000", 0x39}], 0x1) 1.041007755s ago: executing program 5 (id=1851): pipe2(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, r1, 0x309, 0x0, 0x0, {0x1d}}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, r1, 0x309, 0x0, 0x0, {0x1d}}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000000300)=""/4096, 0x1000) (async) keyctl$read(0xb, r2, &(0x7f0000000300)=""/4096, 0x1000) 934.735872ms ago: executing program 5 (id=1852): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket(0x2, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmsg(r3, &(0x7f0000001280)={&(0x7f0000000080)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)=""/251, 0xfb}], 0x1, &(0x7f0000000280)=""/4096, 0x1000}, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) setreuid(0xee00, 0x0) r4 = getuid() setreuid(0x0, r4) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000080)={'sit0\x00', 0x0}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 726.445215ms ago: executing program 0 (id=1853): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x80}}]}, 0x1a0}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) write$apparmor_current(r2, &(0x7f00000003c0)=ANY=[], 0x1b) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000006c0)={0x0, 0x4, 0xffffffffffffffff, 0x1}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000ac0)={0x0, 0x79c99ee3, 0x10, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000ec0)={0x8, 0x1, {0xe91f, @usage=0xf657, r4, 0x9, 0x8, 0x9, 0x1, 0x100, 0x12, @struct={0x80, 0x7}, 0xffffff81, 0x1, [0xb, 0x5, 0x9, 0x100000000, 0x6, 0x1]}, {0x9, @usage=0x8001, r5, 0x200, 0x4, 0xf, 0xffffffffffffff32, 0xa, 0x488, @struct={0x8}, 0x3, 0x9, [0x9aa6, 0x8, 0x7fffffff, 0x8000, 0x4, 0x6]}, {0x8, @struct={0x7fff, 0x8}, r6, 0x0, 0xffff, 0x58, 0xb4c, 0x7, 0x401, @struct={0x7, 0x4}, 0xa431, 0x656, [0x8, 0x100000001, 0x89b6, 0x8, 0x4, 0x80000000]}, {0x70, 0xfff, 0x5}}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e24, @loopback}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r9, 0x8}, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x80}}]}, 0x1a0}}, 0x0) (async) pipe(&(0x7f0000000140)) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) close(r3) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) (async) write$apparmor_current(r2, &(0x7f00000003c0)=ANY=[], 0x1b) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}}) (async) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000006c0)={0x0, 0x4, 0xffffffffffffffff, 0x1}) (async) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000ac0)={0x0, 0x79c99ee3, 0x10, 0x1}) (async) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000ec0)={0x8, 0x1, {0xe91f, @usage=0xf657, r4, 0x9, 0x8, 0x9, 0x1, 0x100, 0x12, @struct={0x80, 0x7}, 0xffffff81, 0x1, [0xb, 0x5, 0x9, 0x100000000, 0x6, 0x1]}, {0x9, @usage=0x8001, r5, 0x200, 0x4, 0xf, 0xffffffffffffff32, 0xa, 0x488, @struct={0x8}, 0x3, 0x9, [0x9aa6, 0x8, 0x7fffffff, 0x8000, 0x4, 0x6]}, {0x8, @struct={0x7fff, 0x8}, r6, 0x0, 0xffff, 0x58, 0xb4c, 0x7, 0x401, @struct={0x7, 0x4}, 0xa431, 0x656, [0x8, 0x100000001, 0x89b6, 0x8, 0x4, 0x80000000]}, {0x70, 0xfff, 0x5}}) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e24, @loopback}]}, 0x0) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0x8) (async) setsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r9, 0x8}, 0x8) (async) 599.00837ms ago: executing program 0 (id=1854): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xfffff010}, {0x6, 0xa5, 0x0, 0x6}]}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept$alg(r1, 0x0, 0x0) recvmsg(r2, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000005600)=""/49, 0x31}], 0x39}, 0x40000102) sendmmsg$alg(r2, &(0x7f00000007c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4001044}], 0x1, 0x24008844) sendmmsg$inet(r2, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ec0767137af7e7d890debdedb6aba1a8b4ede604461087e87bc1e54d08a4c58d94481c59aaedb0d8e7dcf67b286f2eb812797a31410d9f1522c112a7fa390a471160d1c4d0832a4639", 0x49}, {&(0x7f0000000100)="4dea2e9fc630f1670cf70c207e43667030bf092497c42179b09807f9b234acd0e2", 0x21}], 0x2}}], 0x1, 0x8058) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) 517.652302ms ago: executing program 0 (id=1855): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$TUNATTACHFILTER(r0, 0x4020940d, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xb, 0x1b, 0x9, 0xc1}, {0xfff0, 0xe, 0x3, 0x1}, {0x7, 0x3, 0x0, 0xa}]}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)={'pim6reg1\x00'}) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000000c0)=""/80) 418.881918ms ago: executing program 0 (id=1856): syz_usb_connect$uac1(0x3, 0x71, &(0x7f00000002c0)=ANY=[], &(0x7f00000006c0)={0x10, 0x0, 0x0, 0x0}) 54.944693ms ago: executing program 5 (id=1857): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04910c20"], 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x33, 0x1, 0x70bd2a, 0x25dbdbfe, {0x4}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x5, 0x2, 0x0, 0x3, 0x1, 0x400, 0x0, 0x210}, &(0x7f0000000140)=0x20) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000140)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 0s ago: executing program 5 (id=1858): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r5 = syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x80080) ioctl$RTC_RD_TIME(r5, 0x80247009, &(0x7f00000000c0)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='00'], 0x30}, 0x1, 0x0, 0x0, 0x18004}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000800000001a000000280022800414008004000080040000808341f1680200008014000080040000800400008004000080060021", @ANYBLOB="c84a68743e3723e9136dd57ea96d3b55bd0c0a0cc01162e15a2a04c15ffb3b6607dbd16147a637eb6ad1d2098c397ca7a7a6adcd13c6ec0808b3200d1826ed527f50c6f4445af6b594432251ea25784cf3ac2fe1a45ee6f6470f1baa93eded8484b47cf250b7c0507c74d6c73878fee01f8c07d6015fa15bc4a469caa01a59d30523a554d18e3b5fcf4bb1b248f90480cc886a4bcadc56a1913359f3a55016d2116e31e1de160e3c264ce9fd7b2cfd7cd2f4b5b5cf5ed0db15ca890c7c21420c95c2921b7cf799f2763de6f47a7958ad88125b3e3bb4fb110f533ee81f6cffc2af"], 0x44}}, 0x0) close(r6) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r7, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x870a022}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x38, r2, 0x0, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r8 = socket$packet(0x11, 0x2, 0x300) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x7) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r9, @ANYRES64=r8], 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) kernel console output (not intermixed with test programs): adget: fail, usb_gadget_register_driver returned -16 [ 344.335968][ T5839] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 344.465918][ T5839] usb 3-1: device descriptor read/64, error -71 [ 344.576279][ T5839] usb usb3-port1: attempt power cycle [ 344.765052][T11292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.774099][T11292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.915901][ T5839] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 344.947319][ T5839] usb 3-1: device descriptor read/8, error -71 [ 345.186828][ T5839] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 345.206561][ T5839] usb 3-1: device descriptor read/8, error -71 [ 345.324283][ T5839] usb usb3-port1: unable to enumerate USB device [ 345.401109][T11296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.411060][T11296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.863060][ T24] usb 7-1: USB disconnect, device number 30 [ 345.896403][ T10] usb 1-1: new low-speed USB device number 41 using dummy_hcd [ 346.067255][ T10] usb 1-1: Invalid ep0 maxpacket: 16 [ 346.195921][ T10] usb 1-1: new low-speed USB device number 42 using dummy_hcd [ 346.356010][ T10] usb 1-1: Invalid ep0 maxpacket: 16 [ 346.362023][ T10] usb usb1-port1: attempt power cycle [ 346.534769][T11303] netlink: 'syz.6.1433': attribute type 4 has an invalid length. [ 346.727347][ T10] usb 1-1: new low-speed USB device number 43 using dummy_hcd [ 346.748072][ T10] usb 1-1: Invalid ep0 maxpacket: 16 [ 346.875987][ T10] usb 1-1: new low-speed USB device number 44 using dummy_hcd [ 346.896794][ T10] usb 1-1: Invalid ep0 maxpacket: 16 [ 346.897055][ T10] usb usb1-port1: unable to enumerate USB device [ 347.106178][ T5925] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 347.255927][ T5925] usb 3-1: device descriptor read/64, error -71 [ 347.509728][ T5925] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 347.646607][ T5925] usb 3-1: device descriptor read/64, error -71 [ 347.725941][ T979] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 347.756841][ T5925] usb usb3-port1: attempt power cycle [ 347.875898][ T979] usb 7-1: Using ep0 maxpacket: 16 [ 347.885413][ T979] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 347.894911][ T979] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.903405][ T979] usb 7-1: Product: syz [ 347.910502][ T979] usb 7-1: Manufacturer: syz [ 347.915243][ T979] usb 7-1: SerialNumber: syz [ 347.926755][ T979] r8152-cfgselector 7-1: Unknown version 0x0000 [ 347.937523][ T979] r8152-cfgselector 7-1: config 0 descriptor?? [ 348.097003][ T5925] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 348.116557][ T5925] usb 3-1: device descriptor read/8, error -71 [ 348.161271][T11314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.179800][T11314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.200981][T11314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.212033][T11314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.224774][ T979] r8152-cfgselector 7-1: Unknown version 0x0000 [ 348.235766][ T979] r8152-cfgselector 7-1: bad CDC descriptors [ 348.257226][ T979] r8152-cfgselector 7-1: USB disconnect, device number 31 [ 348.355946][ T5925] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 348.376673][ T5925] usb 3-1: device descriptor read/8, error -71 [ 348.486377][ T5925] usb usb3-port1: unable to enumerate USB device [ 348.729501][T11323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.739099][T11323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.935998][ T5925] usb 1-1: new low-speed USB device number 45 using dummy_hcd [ 349.076040][ T5925] usb 1-1: device descriptor read/64, error -71 [ 349.316004][ T5925] usb 1-1: new low-speed USB device number 46 using dummy_hcd [ 349.475913][ T5925] usb 1-1: device descriptor read/64, error -71 [ 349.596598][ T5925] usb usb1-port1: attempt power cycle [ 349.887928][ T10] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 349.936041][ T5925] usb 1-1: new low-speed USB device number 47 using dummy_hcd [ 349.956758][ T5925] usb 1-1: device descriptor read/8, error -71 [ 350.035949][ T10] usb 7-1: device descriptor read/64, error -71 [ 350.042240][T11346] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1447'. [ 350.207181][ T5925] usb 1-1: new low-speed USB device number 48 using dummy_hcd [ 350.213210][T11348] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1448'. [ 350.246737][ T5925] usb 1-1: device descriptor read/8, error -71 [ 350.287655][ T10] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 350.369475][ T5925] usb usb1-port1: unable to enumerate USB device [ 350.429440][T11361] nftables ruleset with unbound chain [ 350.446257][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 350.446685][ T10] usb 7-1: device descriptor read/64, error -71 [ 350.456544][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 350.469633][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 350.478219][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 350.489989][T11361] vxcan1: entered allmulticast mode [ 350.556562][T11364] netlink: 'syz.5.1451': attribute type 10 has an invalid length. [ 350.567978][ T30] audit: type=1326 audit(350.544:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11365 comm="syz.2.1452" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc1eb8eec9 code=0x0 [ 350.602631][T11364] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 350.611273][T11364] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 350.623549][T11364] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 350.634069][ T10] usb usb7-port1: attempt power cycle [ 350.675046][T11368] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1452'. [ 350.685560][T11368] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1452'. [ 350.804927][T11367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.814438][T11367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.945973][ T5839] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 350.985921][ T10] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 351.006609][ T10] usb 7-1: device descriptor read/8, error -71 [ 351.095919][ T5839] usb 3-1: Using ep0 maxpacket: 32 [ 351.102575][ T5839] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 351.114973][ T5839] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58320, setting to 1024 [ 351.126273][ T5839] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 351.141146][ T5839] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 351.150499][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 351.158902][ T5839] usb 3-1: Product: syz [ 351.163067][ T5839] usb 3-1: Manufacturer: syz [ 351.167911][ T5839] usb 3-1: SerialNumber: syz [ 351.182299][ T5839] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input56 [ 351.266365][ T10] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 351.287039][ T10] usb 7-1: device descriptor read/8, error -71 [ 351.397720][ T10] usb usb7-port1: unable to enumerate USB device [ 351.995918][ T9] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 352.157730][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 352.167979][ T9] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 352.180017][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 352.189150][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.197219][ T9] usb 1-1: Product: syz [ 352.201405][ T9] usb 1-1: Manufacturer: syz [ 352.206041][ T9] usb 1-1: SerialNumber: syz [ 353.048461][ T9] usb 1-1: reset high-speed USB device number 49 using dummy_hcd [ 353.069278][ T979] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 353.070325][ T9] usb 1-1: device reset changed ep0 maxpacket size! [ 353.095484][ T1150] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.100433][ T9] usb 1-1: USB disconnect, device number 49 [ 353.168309][ T1150] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.238560][ T979] usb 7-1: unable to get BOS descriptor or descriptor too short [ 353.248402][ T979] usb 7-1: config 2 has an invalid interface number: 9 but max is 2 [ 353.248955][ T1150] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.258047][ T979] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 353.271262][ T9] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 353.279460][ T979] usb 7-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 353.295139][ T979] usb 7-1: config 2 has no interface number 0 [ 353.301305][ T979] usb 7-1: config 2 interface 9 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 353.314364][ T979] usb 7-1: config 2 interface 9 has no altsetting 0 [ 353.323150][ T979] usb 7-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=49.af [ 353.334237][ T979] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.342329][ T979] usb 7-1: Product: syz [ 353.343358][ T1150] bond0: (slave netdevsim0): Releasing backup interface [ 353.351935][ T979] usb 7-1: Manufacturer: syz [ 353.360158][ T979] usb 7-1: SerialNumber: syz [ 353.366870][ T1150] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.436183][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 353.452680][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 353.473823][ T9] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 353.484271][ T9] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 353.504863][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 353.527660][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.535699][ T9] usb 1-1: Product: syz [ 353.552452][ T9] usb 1-1: Manufacturer: syz [ 353.562525][ T9] usb 1-1: SerialNumber: syz [ 353.632110][ T10] usb 3-1: USB disconnect, device number 43 [ 353.639175][ T979] usb 7-1: bad CDC descriptors [ 353.681565][ T979] usb 7-1: USB disconnect, device number 36 [ 353.682897][ T10] appletouch 3-1:1.0: input: appletouch disconnected [ 353.829016][ T9] cdc_ncm 1-1:1.0: bind() failure [ 353.847917][ T9] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 353.863646][ T9] cdc_ncm 1-1:1.1: bind() failure [ 353.886643][ T9] usb 1-1: USB disconnect, device number 50 [ 354.025294][ T1150] team0: Port device geneve1 removed [ 354.133582][T11398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.144661][T11398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.226367][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.239990][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.252174][ T1150] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 354.269976][ T1150] bond0 (unregistering): Released all slaves [ 354.301609][T11387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1458'. [ 354.306289][T11404] option changes via remount are deprecated (pid=11403 comm=syz.6.1461) [ 354.324372][T11405] option changes via remount are deprecated (pid=11403 comm=syz.6.1461) [ 354.419302][ T1150] tipc: Disabling bearer [ 354.424886][ T1150] tipc: Left network mode [ 354.702048][ T979] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 354.716028][ T5925] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 354.751117][ T1150] hsr_slave_0: left promiscuous mode [ 354.768563][ T1150] hsr_slave_1: left promiscuous mode [ 354.781866][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.791444][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.813423][ T1150] veth1_macvtap: left promiscuous mode [ 354.822928][ T1150] veth0_macvtap: left promiscuous mode [ 354.828708][ T1150] veth1_vlan: left promiscuous mode [ 354.866574][ T979] usb 7-1: Using ep0 maxpacket: 32 [ 354.875720][ T979] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 354.888394][ T5925] usb 1-1: Using ep0 maxpacket: 8 [ 354.898236][ T979] usb 7-1: config 0 has no interface number 0 [ 354.904477][ T5925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.905908][ T979] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 354.929044][ T5925] usb 1-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=46.08 [ 354.940856][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.948104][ T979] usb 7-1: config 0 interface 85 has no altsetting 0 [ 354.960736][ T979] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 354.971443][ T5925] usb 1-1: Product: syz [ 354.975909][ T979] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.988296][ T5925] usb 1-1: Manufacturer: syz [ 354.994176][ T979] usb 7-1: Product: syz [ 355.000796][ T5925] usb 1-1: SerialNumber: syz [ 355.004288][ T979] usb 7-1: Manufacturer: syz [ 355.016551][ T979] usb 7-1: SerialNumber: syz [ 355.016815][ T5923] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 355.030634][ T979] usb 7-1: config 0 descriptor?? [ 355.030958][ T5925] usb 1-1: config 0 descriptor?? [ 355.069149][ T5925] comedi comedi5: Wrong number of endpoints [ 355.077950][ T5925] dt9812 1-1:0.0: driver 'dt9812' failed to auto-configure device. [ 355.221828][ T5923] usb 3-1: Using ep0 maxpacket: 32 [ 355.236963][ T5923] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 355.245197][ T5923] usb 3-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config [ 355.262541][ T5925] usb 1-1: USB disconnect, device number 51 [ 355.278792][ T5923] usb 3-1: config 0 has no interface number 0 [ 355.292592][ T5923] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 355.315000][ T5923] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 355.325232][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.359306][ T5923] usb 3-1: config 0 descriptor?? [ 355.625464][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 355.660937][ T979] appletouch 7-1:0.85: Geyser mode initialized. [ 355.669913][ T979] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input57 [ 355.682883][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 355.877695][T11408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.891339][T11408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.900663][ T5839] usb 7-1: USB disconnect, device number 37 [ 355.931225][ T5839] appletouch 7-1:0.85: input: appletouch disconnected [ 356.087056][ T979] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 356.264132][ T979] usb 1-1: Using ep0 maxpacket: 16 [ 356.271751][ T979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.283335][ T979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.296472][ T979] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 356.305546][ T979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.319905][ T5923] usb 3-1: string descriptor 0 read error: -71 [ 356.320514][ T979] usb 1-1: config 0 descriptor?? [ 356.331220][ T5923] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 356.355283][ T5923] usb 3-1: USB disconnect, device number 44 [ 356.789152][T11430] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 356.796605][T11430] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 356.962172][ T979] hid_parser_main: 6 callbacks suppressed [ 356.962194][ T979] corsair 0003:1B1C:1B02.0030: unknown main item tag 0x0 [ 356.985267][ T979] corsair 0003:1B1C:1B02.0030: unknown main item tag 0x0 [ 357.002500][ T979] corsair 0003:1B1C:1B02.0030: unknown main item tag 0x0 [ 357.020432][ T979] corsair 0003:1B1C:1B02.0030: unknown main item tag 0x0 [ 357.056144][ T979] corsair 0003:1B1C:1B02.0030: unknown main item tag 0x0 [ 357.090283][ T979] corsair 0003:1B1C:1B02.0030: hidraw1: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 357.223540][ T979] corsair 0003:1B1C:1B02.0030: Failed to get K90 initial state (error -32). [ 357.446218][ T10] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 357.534085][ T5925] usb 1-1: USB disconnect, device number 52 [ 357.627137][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 357.643555][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.680671][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.711107][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 357.733265][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 357.764012][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.785724][ T10] usb 3-1: config 0 descriptor?? [ 357.809244][T11482] vxfs: WRONG superblock magic 00000000 at 1 [ 357.815722][T11482] vxfs: WRONG superblock magic 00000000 at 8 [ 357.821861][T11482] vxfs: can't find superblock. [ 358.123087][T11494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.140041][T11494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.168194][T11496] netlink: 'syz.0.1475': attribute type 10 has an invalid length. [ 358.178285][T11496] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1475'. [ 358.209579][ T10] kye 0003:0458:0138.0031: unknown main item tag 0x0 [ 358.229472][ T10] kye 0003:0458:0138.0031: unknown main item tag 0x0 [ 358.243426][ T10] kye 0003:0458:0138.0031: unknown main item tag 0x0 [ 358.252425][ T10] kye 0003:0458:0138.0031: unknown main item tag 0x0 [ 358.276832][ T10] kye 0003:0458:0138.0031: unknown main item tag 0x0 [ 358.284793][ T10] kye 0003:0458:0138.0031: unexpected long global item [ 358.298239][ T10] kye 0003:0458:0138.0031: parse failed [ 358.314173][ T10] kye 0003:0458:0138.0031: probe with driver kye failed with error -22 [ 358.410325][T11456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.430397][T11456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.461435][T11456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.489308][T11456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.532479][T11456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.545736][T11456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.566884][ T5906] usb 3-1: USB disconnect, device number 45 [ 358.777827][T11499] netlink: 124 bytes leftover after parsing attributes in process `syz.6.1476'. [ 359.124412][T11531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.139157][T11531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.150546][T11531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.162596][T11531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.361847][T11541] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 359.421016][T11541] binder: 11540:11541 ioctl 40046103 2000000000c0 returned -22 [ 359.447527][T11541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1484'. [ 359.494062][T11551] futex_wake_op: syz.6.1486 tries to shift op by 32; fix this program [ 359.766641][ T10] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 359.805971][ T5839] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 359.906119][ T10] usb 1-1: device descriptor read/64, error -71 [ 359.936026][ T5839] usb 7-1: device descriptor read/64, error -71 [ 360.148933][ T10] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 360.176717][ T5839] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 360.291077][ T10] usb 1-1: device descriptor read/64, error -71 [ 360.315903][ T5839] usb 7-1: device descriptor read/64, error -71 [ 360.384236][T11581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.401026][T11581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.402624][T11582] ALSA: mixer_oss: invalid OSS volume '^' [ 360.418311][ T10] usb usb1-port1: attempt power cycle [ 360.426520][ T5839] usb usb7-port1: attempt power cycle [ 360.481172][T11589] syz.2.1498(11589): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 360.717740][T11599] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 360.768651][ T5839] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 360.776321][ T10] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 360.798725][ T5839] usb 7-1: device descriptor read/8, error -71 [ 360.798836][ T10] usb 1-1: device descriptor read/8, error -71 [ 360.865963][ T5925] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 360.886972][T11609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.897129][T11609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.016034][ T5925] usb 3-1: Using ep0 maxpacket: 16 [ 361.022493][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.033565][ T5925] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 361.043594][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.046772][ T5839] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 361.051701][ T10] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 361.069501][ T5925] usb 3-1: config 0 descriptor?? [ 361.077028][ T5839] usb 7-1: device descriptor read/8, error -71 [ 361.086528][ T10] usb 1-1: device descriptor read/8, error -71 [ 361.187534][ T5839] usb usb7-port1: unable to enumerate USB device [ 361.206207][ T10] usb usb1-port1: unable to enumerate USB device [ 361.281006][T11595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.289960][T11595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.444590][T11612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.454037][T11612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.469280][T11612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.479880][T11612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.664790][T11621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.708016][T11621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.774001][T11636] fuse: Bad value for 'fd' [ 362.794063][T11637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.805133][T11636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.806318][ T5839] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 362.816637][T11637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.834581][T11636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.955947][ T979] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 362.976091][ T5839] usb 7-1: Using ep0 maxpacket: 32 [ 362.983807][ T5839] usb 7-1: config 0 has an invalid interface number: 25 but max is 0 [ 362.992097][ T5839] usb 7-1: config 0 has no interface number 0 [ 363.000380][ T5839] usb 7-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 363.009514][ T5839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.017591][ T5839] usb 7-1: Product: syz [ 363.021774][ T5839] usb 7-1: Manufacturer: syz [ 363.026690][ T5839] usb 7-1: SerialNumber: syz [ 363.034480][ T5839] usb 7-1: config 0 descriptor?? [ 363.043888][ T5839] go7007 7-1:0.25: The Lifeview TV Walker Ultra is not supported. Sorry! [ 363.106088][ T979] usb 1-1: Using ep0 maxpacket: 32 [ 363.113129][ T979] usb 1-1: unable to get BOS descriptor or descriptor too short [ 363.122433][ T979] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 363.130062][ T979] usb 1-1: can't read configurations, error -61 [ 363.262315][ T5839] usb 7-1: USB disconnect, device number 42 [ 363.277605][ T979] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 363.436081][ T979] usb 1-1: Using ep0 maxpacket: 32 [ 363.444962][ T979] usb 1-1: unable to get BOS descriptor or descriptor too short [ 363.454632][ T979] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 363.463978][ T979] usb 1-1: can't read configurations, error -61 [ 363.471522][ T979] usb usb1-port1: attempt power cycle [ 363.498850][T11647] overlayfs: failed to resolve './file0': -2 [ 363.571674][ T5839] hid_parser_main: 79 callbacks suppressed [ 363.571694][ T5839] hid-generic 0000:007F:FFFFFFFE.0032: unknown main item tag 0x0 [ 363.591628][ T5839] hid-generic 0000:007F:FFFFFFFE.0032: unknown main item tag 0x0 [ 363.601851][ T5839] hid-generic 0000:007F:FFFFFFFE.0032: unknown main item tag 0x0 [ 363.609759][ T5839] hid-generic 0000:007F:FFFFFFFE.0032: unknown main item tag 0x0 [ 363.617785][ T5839] hid-generic 0000:007F:FFFFFFFE.0032: unknown main item tag 0x0 [ 363.625639][ T5839] hid-generic 0000:007F:FFFFFFFE.0032: unknown main item tag 0x0 [ 363.633550][ T5839] hid-generic 0000:007F:FFFFFFFE.0032: unknown main item tag 0x0 [ 363.668692][ T5925] usbhid 3-1:0.0: can't add hid device: -71 [ 363.680356][ T5925] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 363.694312][ T5925] usb 3-1: USB disconnect, device number 46 [ 363.736265][ T5839] hid-generic 0000:007F:FFFFFFFE.0032: unknown main item tag 0x0 [ 363.744519][ T5839] hid-generic 0000:007F:FFFFFFFE.0032: unknown main item tag 0x0 [ 363.762350][ T5839] hid-generic 0000:007F:FFFFFFFE.0032: unknown main item tag 0x0 [ 363.773438][ T5839] hid-generic 0000:007F:FFFFFFFE.0032: hidraw1: HID v0.00 Device [syz1] on syz0 [ 363.816988][ T979] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 363.868207][ T979] usb 1-1: Using ep0 maxpacket: 32 [ 363.875528][T11652] fido_id[11652]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 363.892264][ T979] usb 1-1: unable to get BOS descriptor or descriptor too short [ 363.914507][ T979] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 363.929346][ T979] usb 1-1: can't read configurations, error -61 [ 364.033044][T11658] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 364.066072][ T979] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 364.077069][ T5925] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 364.086648][ T979] usb 1-1: Using ep0 maxpacket: 32 [ 364.093524][ T979] usb 1-1: unable to get BOS descriptor or descriptor too short [ 364.102674][ T979] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 364.111048][ T979] usb 1-1: can't read configurations, error -61 [ 364.117803][ T979] usb usb1-port1: unable to enumerate USB device [ 364.215995][ T5925] usb 3-1: device descriptor read/64, error -71 [ 364.455986][ T5925] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 364.585996][ T5925] usb 3-1: device descriptor read/64, error -71 [ 364.696279][ T5925] usb usb3-port1: attempt power cycle [ 365.035964][ T5925] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 365.057163][ T5925] usb 3-1: device descriptor read/8, error -71 [ 365.295986][ T5925] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 365.316559][ T5925] usb 3-1: device descriptor read/8, error -71 [ 365.427751][ T5925] usb usb3-port1: unable to enumerate USB device [ 365.995938][ T5925] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 366.125915][ T5925] usb 1-1: device descriptor read/64, error -71 [ 366.365979][ T5925] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 366.497018][ T5925] usb 1-1: device descriptor read/64, error -71 [ 366.616277][ T5925] usb usb1-port1: attempt power cycle [ 366.632019][T11678] 8021q: VLANs not supported on ip_vti0 [ 366.682151][T11681] netlink: 'syz.6.1523': attribute type 27 has an invalid length. [ 366.955942][ T5925] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 366.977590][ T5925] usb 1-1: device descriptor read/8, error -71 [ 367.216323][ T5925] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 367.226059][ T5923] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 367.236462][ T5925] usb 1-1: device descriptor read/8, error -71 [ 367.348064][ T5925] usb usb1-port1: unable to enumerate USB device [ 367.377201][ T5923] usb 3-1: Using ep0 maxpacket: 8 [ 367.383951][ T5923] usb 3-1: config 2 has an invalid interface number: 1 but max is 0 [ 367.390482][T11694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.393614][ T5923] usb 3-1: config 2 has no interface number 0 [ 367.404579][T11694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.410761][ T5923] usb 3-1: config 2 interface 1 has no altsetting 0 [ 367.425706][T11694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.445200][ T5923] usb 3-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=47.78 [ 367.463335][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.468922][T11694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.473756][ T5923] usb 3-1: Product: syz [ 367.483975][ T5923] usb 3-1: Manufacturer: syz [ 367.495561][ T5923] usb 3-1: SerialNumber: syz [ 367.695934][ T979] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 367.722241][ T5923] snd-usb-audio 3-1:2.1: probe with driver snd-usb-audio failed with error -22 [ 367.732233][ T5923] snd-usb-us122l 3-1:2.1: usb_set_interface error [ 367.739719][ T5923] snd-usb-us122l 3-1:2.1: probe with driver snd-usb-us122l failed with error -22 [ 367.752422][ T5923] usb 3-1: USB disconnect, device number 51 [ 367.773225][ T5949] udevd[5949]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:2.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 367.826173][ T979] usb 7-1: device descriptor read/64, error -71 [ 368.067456][ T979] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 368.205985][ T979] usb 7-1: device descriptor read/64, error -71 [ 368.316256][ T979] usb usb7-port1: attempt power cycle [ 368.655919][ T979] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 368.678086][ T979] usb 7-1: device descriptor read/8, error -71 [ 368.869726][T11699] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 368.875984][T11699] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 368.882015][T11699] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 368.888138][T11699] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 368.898251][T11699] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 368.917735][ T979] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 368.968578][T11708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.977424][ T979] usb 7-1: device descriptor read/8, error -71 [ 368.988492][T11708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.091929][ T979] usb usb7-port1: unable to enumerate USB device [ 369.155965][ T5839] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 369.308068][ T5839] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 369.316771][ T5839] usb 1-1: config 0 has no interface number 0 [ 369.325500][ T5839] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 369.339567][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.348580][ T5839] usb 1-1: Product: syz [ 369.352825][ T5839] usb 1-1: Manufacturer: syz [ 369.357699][ T5839] usb 1-1: SerialNumber: syz [ 369.365235][ T5839] usb 1-1: config 0 descriptor?? [ 369.597908][ T5839] uvcvideo 1-1:0.64: Found Unit with invalid ID 0 [ 369.605333][ T5839] uvcvideo 1-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 369.626049][ T5839] uvcvideo 1-1:0.64: Entity type for entity Output 65535 was not initialized! [ 369.634991][ T5839] uvcvideo 1-1:0.64: Failed to create links for entity 65535 [ 369.655939][ T5839] uvcvideo 1-1:0.64: Failed to register entities (-22). [ 369.686388][ T5839] usb 1-1: USB disconnect, device number 65 [ 369.768098][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 369.779486][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 369.789124][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 369.798162][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 369.807615][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 369.857285][T11724] dvmrp0: entered allmulticast mode [ 369.927873][T11727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.948088][T11727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.056192][T11721] chnl_net:caif_netlink_parms(): no params data found [ 370.132661][T11721] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.141243][T11721] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.148383][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 370.156454][T11721] bridge_slave_0: entered allmulticast mode [ 370.164297][T11721] bridge_slave_0: entered promiscuous mode [ 370.175981][T11721] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.183153][T11721] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.190481][T11721] bridge_slave_1: entered allmulticast mode [ 370.197640][T11721] bridge_slave_1: entered promiscuous mode [ 370.226347][T11721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.238692][T11721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.272407][T11721] team0: Port device team_slave_0 added [ 370.282651][T11721] team0: Port device team_slave_1 added [ 370.322901][T11721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.330027][T11721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.360821][T11721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.374351][T11721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.382014][T11721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.408366][T11721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.423285][ T5839] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 370.544022][T11721] hsr_slave_0: entered promiscuous mode [ 370.561181][ T5839] usb 1-1: device descriptor read/64, error -71 [ 370.569816][T11721] hsr_slave_1: entered promiscuous mode [ 370.591149][T11721] debugfs: 'hsr0' already exists in 'hsr' [ 370.600132][T11749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.617011][T11721] Cannot create hsr debugfs directory [ 370.628159][T11749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.816031][ T5839] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 370.896223][T11721] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 370.905943][ T5923] usb 7-1: new full-speed USB device number 47 using dummy_hcd [ 370.912840][T11721] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 370.925792][T11721] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 370.937415][T11721] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 370.946098][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 370.956035][ T5839] usb 1-1: device descriptor read/64, error -71 [ 371.063343][T11721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.070611][ T5839] usb usb1-port1: attempt power cycle [ 371.072675][ T5923] usb 7-1: config 4 has an invalid interface number: 88 but max is 1 [ 371.085575][ T5923] usb 7-1: config 4 has an invalid interface number: 29 but max is 1 [ 371.094216][ T5923] usb 7-1: config 4 has no interface number 0 [ 371.102878][ T5923] usb 7-1: config 4 has no interface number 1 [ 371.110839][ T5923] usb 7-1: config 4 interface 88 altsetting 119 has a duplicate endpoint with address 0xB, skipping [ 371.122013][ T5923] usb 7-1: config 4 interface 88 altsetting 119 has an invalid endpoint descriptor of length 2, skipping [ 371.133582][ T5923] usb 7-1: config 4 interface 88 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 371.178893][T11721] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.206641][ T5923] usb 7-1: config 4 interface 29 altsetting 9 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 371.227838][ T5923] usb 7-1: config 4 interface 29 altsetting 9 endpoint 0x86 has invalid maxpacket 1023, setting to 64 [ 371.240160][ T5923] usb 7-1: config 4 interface 88 has no altsetting 0 [ 371.243415][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.247606][ T5923] usb 7-1: config 4 interface 29 has no altsetting 0 [ 371.254079][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.263158][ T5923] usb 7-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 371.284365][ T5923] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.292650][ T5923] usb 7-1: Product: syz [ 371.297561][ T5923] usb 7-1: Manufacturer: syz [ 371.302905][ T5923] usb 7-1: SerialNumber: syz [ 371.339434][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.346691][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.427336][ T5839] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 371.458152][ T5839] usb 1-1: device descriptor read/8, error -71 [ 371.574178][ T5923] usb 7-1: USB disconnect, device number 47 [ 371.679207][T11785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.696560][ T5839] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 371.703162][T11785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.738208][ T5839] usb 1-1: device descriptor read/8, error -71 [ 371.740844][T11721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.831196][ T5840] Bluetooth: hci2: command tx timeout [ 371.852065][ T5839] usb usb1-port1: unable to enumerate USB device [ 372.060293][T11721] veth0_vlan: entered promiscuous mode [ 372.085231][T11721] veth1_vlan: entered promiscuous mode [ 372.131289][T11721] veth0_macvtap: entered promiscuous mode [ 372.142807][T11721] veth1_macvtap: entered promiscuous mode [ 372.173717][T11721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.213650][T11721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.279903][ T1150] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.297618][ T1150] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.353157][T11812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.389623][T11812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.404646][ T1150] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.435029][ T1150] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.515285][T11807] netlink: 'syz.6.1547': attribute type 1 has an invalid length. [ 372.528464][T11807] netlink: 'syz.6.1547': attribute type 101 has an invalid length. [ 372.559416][T11807] netlink: 480 bytes leftover after parsing attributes in process `syz.6.1547'. [ 372.576489][T11820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.595627][T11820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.633304][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.654246][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.699951][T11472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.709209][T11472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.029637][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 373.036733][T11840] /dev/loop0: Can't lookup blockdev [ 373.503335][T11867] netlink: 'syz.5.1559': attribute type 11 has an invalid length. [ 373.527018][T11867] netlink: 'syz.5.1559': attribute type 10 has an invalid length. [ 373.536365][T11867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.552737][T11867] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.565143][T11867] batadv_slave_0: entered promiscuous mode [ 373.572206][T11867] batadv_slave_0: entered allmulticast mode [ 373.579458][T11867] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 373.667481][ T9] usb 7-1: new full-speed USB device number 48 using dummy_hcd [ 373.803660][T11878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.818799][T11878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.851401][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 373.864360][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 373.880081][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 373.890672][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.899055][ T9] usb 7-1: Product: syz [ 373.903440][ T9] usb 7-1: Manufacturer: syz [ 373.907255][ T5840] Bluetooth: hci2: command tx timeout [ 373.909547][ T9] usb 7-1: SerialNumber: syz [ 373.930438][T11862] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 374.576072][ T5839] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 374.601488][T11890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.610874][T11890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.739473][ T5839] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 374.748230][ T5839] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 374.759211][ T5839] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 374.768298][ T5839] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 374.779305][ T5839] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 374.792205][ T5839] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 374.801332][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 374.809378][ T5839] usb 1-1: Product: syz [ 374.813541][ T5839] usb 1-1: Manufacturer: syz [ 374.825754][ T5839] cdc_wdm 1-1:1.0: skipping garbage [ 374.831104][ T5839] cdc_wdm 1-1:1.0: skipping garbage [ 374.838207][ T5839] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 374.844127][ T5839] cdc_wdm 1-1:1.0: Unknown control protocol [ 374.956704][ T9] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 374.964171][ T9] cdc_ncm 7-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 374.971811][ T9] cdc_ncm 7-1:1.0: setting rx_max = 2048 [ 375.028144][ T10] usb 1-1: USB disconnect, device number 70 [ 375.106021][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 375.162526][T11892] evm: overlay not supported [ 375.169237][ T9] cdc_ncm 7-1:1.0: setting tx_max = 16384 [ 375.208853][ T9] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 375.237562][T11894] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1569'. [ 375.258063][ T9] usb 7-1: USB disconnect, device number 48 [ 375.281922][ T9] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM (NO ZLP) [ 375.551706][ T30] audit: type=1326 audit(375.524:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11905 comm="syz.5.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75eb98eec9 code=0x7ffc0000 [ 375.576575][ T30] audit: type=1326 audit(375.524:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11905 comm="syz.5.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75eb98eec9 code=0x7ffc0000 [ 375.600422][ T30] audit: type=1326 audit(375.524:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11905 comm="syz.5.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f75eb98eec9 code=0x7ffc0000 [ 375.628254][ T30] audit: type=1326 audit(375.524:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11905 comm="syz.5.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75eb98eec9 code=0x7ffc0000 [ 375.658306][ T30] audit: type=1326 audit(375.524:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11905 comm="syz.5.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75eb98eec9 code=0x7ffc0000 [ 375.683427][ T30] audit: type=1326 audit(375.524:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11905 comm="syz.5.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f75eb98eec9 code=0x7ffc0000 [ 375.705356][ T30] audit: type=1326 audit(375.524:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11905 comm="syz.5.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75eb98eec9 code=0x7ffc0000 [ 375.727283][ T30] audit: type=1326 audit(375.524:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11905 comm="syz.5.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75eb98eec9 code=0x7ffc0000 [ 375.753357][ T30] audit: type=1326 audit(375.524:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11905 comm="syz.5.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75eb98eec9 code=0x7ffc0000 [ 375.777449][ T30] audit: type=1326 audit(375.534:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11905 comm="syz.5.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75eb98eec9 code=0x7ffc0000 [ 375.988536][ T5840] Bluetooth: hci2: command tx timeout [ 376.024434][T11921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.044551][T11921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.145988][ T9] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 376.307145][ T9] usb 7-1: device descriptor read/64, error -71 [ 376.546873][ T9] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 376.598372][T11932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.608889][T11932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.617758][T11932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.628240][T11932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.640173][T11932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.650018][T11932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.659382][T11932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.668888][T11932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.677927][T11932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.686014][ T9] usb 7-1: device descriptor read/64, error -71 [ 376.687986][T11932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.701416][T11932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.712119][T11932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.796268][ T9] usb usb7-port1: attempt power cycle [ 377.146311][ T9] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 377.167524][ T9] usb 7-1: device descriptor read/8, error -71 [ 377.289917][T11942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.300458][T11942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.315977][T11942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.327917][T11942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.339773][T11942] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 377.384401][T11948] netlink: 'syz.0.1586': attribute type 2 has an invalid length. [ 377.392234][T11948] netlink: 187320 bytes leftover after parsing attributes in process `syz.0.1586'. [ 377.402140][T11948] netlink: 'syz.0.1586': attribute type 2 has an invalid length. [ 377.409992][ T9] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 377.410020][T11948] netlink: 187320 bytes leftover after parsing attributes in process `syz.0.1586'. [ 377.430320][T11948] netlink: 'syz.0.1586': attribute type 2 has an invalid length. [ 377.438155][T11948] netlink: 187320 bytes leftover after parsing attributes in process `syz.0.1586'. [ 377.446889][ T9] usb 7-1: device descriptor read/8, error -71 [ 377.557380][ T9] usb usb7-port1: unable to enumerate USB device [ 378.066051][ T5840] Bluetooth: hci2: command tx timeout [ 378.152745][T11957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.162305][T11957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.172374][T11957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.181366][T11957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.293346][T11957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.302067][T11957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.347361][T11961] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 378.635154][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.642929][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.900297][T11970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.909773][T11970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.919523][T11970] cgroup2: Unknown parameter 'gid' [ 379.354991][T11992] hugetlbfs: syz.6.1600 (11992): Using mlock ulimits for SHM_HUGETLB is obsolete [ 379.674164][T11995] loop5: detected capacity change from 0 to 9111 [ 379.717928][T11995] loop5: detected capacity change from 9111 to 13535 [ 379.744957][T11995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.756508][ T5949] buffer_io_error: 130 callbacks suppressed [ 379.756526][ T5949] Buffer I/O error on dev loop5, logical block 1691, async page read [ 379.775378][T11995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.798691][ T5949] Buffer I/O error on dev loop5, logical block 1691, async page read [ 380.488961][T11999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.498689][T11999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.905990][ T5925] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 381.057340][ T5925] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE4, changing to 0x84 [ 381.069793][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 95, setting to 64 [ 381.080637][ T5925] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 381.089751][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.100363][ T5925] usb 1-1: config 0 descriptor?? [ 381.106463][T12002] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 381.424847][T12002] overlayfs: failed to resolve './file1/file0': -2 [ 381.443922][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 381.443939][ T30] audit: type=1326 audit(381.414:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12001 comm="syz.0.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa7898eec9 code=0x7fc00000 [ 381.472650][ T5925] ath6kl: Failed to submit usb control message: -71 [ 381.473374][ T30] audit: type=1326 audit(381.414:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12001 comm="syz.0.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa7898eec9 code=0x7fc00000 [ 381.479350][ T5925] ath6kl: unable to send the bmi data to the device: -71 [ 381.501871][ T30] audit: type=1326 audit(381.414:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12001 comm="syz.0.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa7898eec9 code=0x7fc00000 [ 381.509065][ T5925] ath6kl: Unable to send get target info: -71 [ 381.539797][ T30] audit: type=1326 audit(381.414:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12001 comm="syz.0.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa7898eec9 code=0x7fc00000 [ 381.548358][ T5925] ath6kl: Failed to init ath6kl core: -71 [ 381.562837][ T30] audit: type=1326 audit(381.414:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12001 comm="syz.0.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa7898eec9 code=0x7fc00000 [ 381.581247][ T5925] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 381.591230][ T30] audit: type=1326 audit(381.414:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12001 comm="syz.0.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa7898eec9 code=0x7fc00000 [ 381.615305][ T5925] usb 1-1: USB disconnect, device number 71 [ 381.628172][ T30] audit: type=1326 audit(381.414:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12001 comm="syz.0.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa7898eec9 code=0x7fc00000 [ 381.651764][ T30] audit: type=1326 audit(381.414:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12001 comm="syz.0.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa7898eec9 code=0x7fc00000 [ 381.673894][ T30] audit: type=1326 audit(381.414:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12001 comm="syz.0.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa7898eec9 code=0x7fc00000 [ 381.696343][ T30] audit: type=1326 audit(381.414:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12001 comm="syz.0.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa7898eec9 code=0x7fc00000 [ 382.640148][ T5925] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 382.790472][T12027] sctp: [Deprecated]: syz.7.1612 (pid 12027) Use of int in max_burst socket option. [ 382.790472][T12027] Use struct sctp_assoc_value instead [ 382.810310][ T5925] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 382.821476][ T5925] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 382.833581][ T5925] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 382.849844][ T5925] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 382.859255][ T5925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.867971][ T5925] usb 7-1: Product: syz [ 382.872875][ T5925] usb 7-1: Manufacturer: syz [ 382.879249][ T5925] usb 7-1: SerialNumber: syz [ 382.888411][ T5925] usb 7-1: config 0 descriptor?? [ 382.899938][T12014] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 382.907662][ T979] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 382.915436][T12014] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 382.927013][ T5925] usb 7-1: ucan: probing device on interface #0 [ 383.065992][ T979] usb 1-1: Using ep0 maxpacket: 16 [ 383.072782][ T979] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 383.081561][ T979] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 383.091974][ T979] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 383.101124][ T979] usb 1-1: config 1 has no interface number 1 [ 383.107555][ T979] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 383.120479][ T979] usb 1-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x61, changing to 0x1 [ 383.133993][ T979] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x1 has an invalid bInterval 97, changing to 7 [ 383.144991][ T979] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x1 has invalid maxpacket 24929, setting to 1024 [ 383.159423][ T979] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 383.168691][ T979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.176766][ T979] usb 1-1: Product: syz [ 383.180924][ T979] usb 1-1: Manufacturer: syz [ 383.185505][ T979] usb 1-1: SerialNumber: syz [ 383.396152][T12019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.405603][T12019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.421588][ T979] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 383.429906][ T979] usb 1-1: found format II with max.bitrate = 0, frame size=0 [ 383.438227][ T979] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 383.464380][ T979] usb 1-1: USB disconnect, device number 72 [ 383.494414][ T5949] udevd[5949]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 383.562651][ T5925] ucan 7-1:0.0 can0: registered device [ 383.632411][T12039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.647042][T12039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.702059][T12043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.712205][T12043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.747160][ T5925] ucan 7-1:0.0 can0: firmware string: unknown [ 383.772779][ T5925] usb 7-1: USB disconnect, device number 53 [ 384.196926][ T10] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 384.368692][ T10] usb 1-1: config 0 has an invalid descriptor of length 69, skipping remainder of the config [ 384.390098][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 384.400202][ T10] usb 1-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 384.410321][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.411366][T12056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.422778][ T10] usb 1-1: config 0 descriptor?? [ 384.436851][T12056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.585995][ T5925] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 384.639897][ T10] usb 1-1: USB disconnect, device number 73 [ 384.726987][ T5925] usb 7-1: device descriptor read/64, error -71 [ 384.975991][ T5925] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 384.990904][T12059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.002061][T12059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.014510][T12059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.023920][T12059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.037513][T12059] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1622'. [ 385.053647][T12059] dvmrp5: entered allmulticast mode [ 385.061581][T12059] dvmrp0: left allmulticast mode [ 385.067226][T12059] dvmrp5: left allmulticast mode [ 385.116057][ T5925] usb 7-1: device descriptor read/64, error -71 [ 385.226299][ T5925] usb usb7-port1: attempt power cycle [ 385.415966][ T10] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 385.566067][ T5925] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 385.575033][ T10] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 385.583293][ T10] usb 1-1: config 0 has no interface number 0 [ 385.589663][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 385.598827][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.607015][ T5925] usb 7-1: device descriptor read/8, error -71 [ 385.615472][ T10] usb 1-1: config 0 descriptor?? [ 385.630690][ T10] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.105/input/input58 [ 385.706308][T12064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.718759][T12064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.731025][T12064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.741618][T12064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.742812][T12065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.758513][T12065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.767941][T12064] netlink: 192 bytes leftover after parsing attributes in process `syz.5.1624'. [ 385.855991][ T5925] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 385.866747][ T5195] bcm5974 1-1:0.105: could not read from device [ 385.878713][ T5195] bcm5974 1-1:0.105: could not read from device [ 385.895921][ T5925] usb 7-1: device descriptor read/8, error -71 [ 385.907186][ T5195] bcm5974 1-1:0.105: could not read from device [ 385.911481][ T10] usb 1-1: USB disconnect, device number 74 [ 385.924616][T12070] syz.0.1625 uses old SIOCAX25GETINFO [ 385.927396][ T5949] bcm5974 1-1:0.105: could not read from device [ 385.958929][ T5949] udevd[5949]: Error opening device "/dev/input/event4": No such file or directory [ 385.972470][ T5949] udevd[5949]: Unable to EVIOCGABS device "/dev/input/event4" [ 385.980585][ T5949] udevd[5949]: Unable to EVIOCGABS device "/dev/input/event4" [ 385.989219][ T5949] udevd[5949]: Unable to EVIOCGABS device "/dev/input/event4" [ 385.999625][ T5949] udevd[5949]: Unable to EVIOCGABS device "/dev/input/event4" [ 386.011791][ T5925] usb usb7-port1: unable to enumerate USB device [ 386.316577][T12077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.325488][T12077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.941340][T12081] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1630'. [ 387.063443][T12093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.074312][T12093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.246015][ T5925] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 387.399391][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.412510][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.413991][T12097] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1634'. [ 387.422669][ T5925] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 387.422720][ T5925] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 387.453981][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.465575][ T5925] usb 1-1: config 0 descriptor?? [ 387.677184][T12091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.686353][T12091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.898646][T12091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.907587][T12091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.919813][ T5925] plantronics 0003:047F:FFFF.0033: item fetching failed at offset 12/15 [ 387.929114][ T5925] plantronics 0003:047F:FFFF.0033: parse failed [ 387.935425][ T5925] plantronics 0003:047F:FFFF.0033: probe with driver plantronics failed with error -22 [ 388.125289][ T5906] usb 1-1: USB disconnect, device number 75 [ 388.215072][T12106] netlink: 14568 bytes leftover after parsing attributes in process `syz.6.1638'. [ 388.466128][ T979] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 388.616001][ T979] usb 7-1: Using ep0 maxpacket: 32 [ 388.622491][ T979] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 388.630947][ T979] usb 7-1: config 0 has no interface number 0 [ 388.637701][ T979] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 388.649323][ T979] usb 7-1: config 0 interface 85 has no altsetting 0 [ 388.664888][ T979] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 388.669059][T12108] binder: BINDER_SET_CONTEXT_MGR already set [ 388.674609][ T979] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.681072][T12108] binder: 12107:12108 ioctl 4018620d 2000000000c0 returned -16 [ 388.689215][ T979] usb 7-1: Product: syz [ 388.689236][ T979] usb 7-1: Manufacturer: syz [ 388.689251][ T979] usb 7-1: SerialNumber: syz [ 388.692028][ T979] usb 7-1: config 0 descriptor?? [ 388.721009][T12108] binder_alloc: binder_alloc_mmap_handler: 12107 200000ffd000-200001000000 already mapped failed -16 [ 388.731489][T12109] binder: BINDER_SET_CONTEXT_MGR already set [ 388.738009][T12109] binder: 12107:12109 ioctl 4018620d 200000000040 returned -16 [ 389.206003][ T5906] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 389.332032][ T979] appletouch 7-1:0.85: Geyser mode initialized. [ 389.341276][ T979] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input59 [ 389.359796][ T5906] usb 1-1: Using ep0 maxpacket: 32 [ 389.367552][ T5906] usb 1-1: too many configurations: 83, using maximum allowed: 8 [ 389.377323][ T5906] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 389.384930][ T5906] usb 1-1: can't read configurations, error -61 [ 389.516097][ T5906] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 389.536406][ T979] usb 7-1: USB disconnect, device number 58 [ 389.553275][ T979] appletouch 7-1:0.85: input: appletouch disconnected [ 389.666019][ T5906] usb 1-1: Using ep0 maxpacket: 32 [ 389.671826][ T5906] usb 1-1: too many configurations: 83, using maximum allowed: 8 [ 389.681474][ T5906] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 389.689145][ T5906] usb 1-1: can't read configurations, error -61 [ 389.695686][ T5906] usb usb1-port1: attempt power cycle [ 390.035985][ T5906] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 390.077645][ T5906] usb 1-1: Using ep0 maxpacket: 32 [ 390.088388][ T5906] usb 1-1: too many configurations: 83, using maximum allowed: 8 [ 390.102301][ T5906] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 390.112326][ T5906] usb 1-1: can't read configurations, error -61 [ 390.152876][T12119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.163077][T12119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.173777][T12119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.183816][T12119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.246010][ T5906] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 390.266643][ T5906] usb 1-1: Using ep0 maxpacket: 32 [ 390.272362][ T5906] usb 1-1: too many configurations: 83, using maximum allowed: 8 [ 390.281432][ T5906] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 390.289227][ T5906] usb 1-1: can't read configurations, error -61 [ 390.295773][ T5906] usb usb1-port1: unable to enumerate USB device [ 390.345984][ T10] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 390.496028][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 390.502758][ T10] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 390.510977][ T10] usb 7-1: config 0 has no interface number 0 [ 390.517131][ T10] usb 7-1: config 0 interface 12 has no altsetting 0 [ 390.525739][ T10] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 390.536734][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.544743][ T10] usb 7-1: Product: syz [ 390.549838][ T10] usb 7-1: Manufacturer: syz [ 390.554863][ T10] usb 7-1: SerialNumber: syz [ 390.561460][ T10] usb 7-1: config 0 descriptor?? [ 390.744381][T12121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.757240][T12121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.265981][ T5840] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 391.792323][ T10] f81534 7-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 391.801992][ T10] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 391.809399][ T10] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 391.817172][ T10] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 391.833309][ T10] usb 7-1: USB disconnect, device number 59 [ 391.994574][T12126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1646'. [ 392.082394][T12135] netlink: 'syz.0.1648': attribute type 11 has an invalid length. [ 392.125517][ T5840] Bluetooth: hci1: unexpected event for opcode 0x200c [ 392.350401][T12142] netlink: 'syz.6.1650': attribute type 6 has an invalid length. [ 392.362487][T12142] netlink: 'syz.6.1650': attribute type 4 has an invalid length. [ 392.370131][T12140] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 392.373004][T12142] netlink: 'syz.6.1650': attribute type 6 has an invalid length. [ 392.376726][T12140] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 392.384411][T12140] vhci_hcd vhci_hcd.0: Device attached [ 392.385159][T12142] netlink: 'syz.6.1650': attribute type 13 has an invalid length. [ 392.406319][T12142] netlink: 'syz.6.1650': attribute type 15 has an invalid length. [ 392.414279][T12142] netlink: 'syz.6.1650': attribute type 19 has an invalid length. [ 392.430932][T12142] netlink: 3684 bytes leftover after parsing attributes in process `syz.6.1650'. [ 392.467104][T12146] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 392.481359][T12146] overlayfs: missing 'lowerdir' [ 392.578694][ T10] vhci_hcd: vhci_device speed not set [ 392.636914][ T10] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 392.655924][ T5906] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 392.805914][ T5906] usb 7-1: Using ep0 maxpacket: 32 [ 392.812897][ T5906] usb 7-1: config 40 has an invalid interface number: 140 but max is 0 [ 392.821980][ T5906] usb 7-1: config 40 has no interface number 0 [ 392.828617][ T5906] usb 7-1: config 40 interface 140 has no altsetting 0 [ 392.838545][ T5906] usb 7-1: New USB device found, idVendor=2040, idProduct=b200, bcdDevice=c7.df [ 392.847883][ T5906] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.856392][ T5906] usb 7-1: Product: syz [ 392.860646][ T5906] usb 7-1: Manufacturer: syz [ 392.865316][ T5906] usb 7-1: SerialNumber: syz [ 393.098548][ T5906] dvb-usb: found a 'Hauppauge ATSC MiniCard (B200)' in warm state. [ 393.109880][ T5906] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 393.131061][ T5906] dvbdev: DVB: registering new adapter (Hauppauge ATSC MiniCard (B200)) [ 393.141815][ T5906] usb 7-1: media controller created [ 393.168489][ T5906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 393.288664][T12143] vhci_hcd: connection reset by peer [ 393.297466][ T13] vhci_hcd: stop threads [ 393.305680][ T13] vhci_hcd: release socket [ 393.319258][ T13] vhci_hcd: disconnect device [ 393.739288][ T5906] DVB: Unable to find symbol lgdt3305_attach() [ 393.745487][ T5906] dvb-usb: no frontend was attached by 'Hauppauge ATSC MiniCard (B200)' [ 393.754153][ T5906] dvb-usb: Hauppauge ATSC MiniCard (B200) successfully initialized and connected. [ 393.771959][ T5906] usb 7-1: USB disconnect, device number 60 [ 393.796470][ T5939] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 393.796700][ T5906] dvb-usb: Hauppauge ATSC MiniCard (B200) successfully deinitialized and disconnected. [ 393.926016][ T5939] usb 1-1: device descriptor read/64, error -71 [ 394.175986][ T5939] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 394.205952][ T5906] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 394.308418][ T5939] usb 1-1: device descriptor read/64, error -71 [ 394.379896][ T5906] usb 7-1: Using ep0 maxpacket: 8 [ 394.389965][ T5906] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.402319][ T5906] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.412162][ T5906] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 394.416340][ T5939] usb usb1-port1: attempt power cycle [ 394.425756][ T5906] usb 7-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 394.440013][ T5906] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.450793][ T5906] usb 7-1: config 0 descriptor?? [ 394.765966][ T5939] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 394.786897][ T5939] usb 1-1: device descriptor read/8, error -71 [ 394.870123][T12159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.879023][T12159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.890737][T12159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.900125][T12159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.942790][ T5906] usbhid 7-1:0.0: can't add hid device: -71 [ 394.952072][ T5906] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 394.964599][ T5906] usb 7-1: USB disconnect, device number 61 [ 395.026203][ T5939] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 395.047137][ T5939] usb 1-1: device descriptor read/8, error -71 [ 395.156155][ T5939] usb usb1-port1: unable to enumerate USB device [ 395.529716][T12166] binder: 12165:12166 ioctl c0306201 200000000240 returned -14 [ 395.815994][ T24] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 395.975901][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 395.982286][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.995473][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 396.006460][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 396.016185][ T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 396.025970][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 396.040204][ T24] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 396.049321][ T24] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 396.058045][ T24] usb 7-1: Manufacturer: syz [ 396.065332][ T24] usb 7-1: config 0 descriptor?? [ 396.386278][ T24] rc_core: IR keymap rc-hauppauge not found [ 396.392206][ T24] Registered IR keymap rc-empty [ 396.397647][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 396.415982][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 396.436946][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 396.449860][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input60 [ 396.465037][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 396.486051][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 396.506234][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 396.525963][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 396.546419][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 396.566032][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 396.597597][T12171] netlink: 'syz.6.1658': attribute type 10 has an invalid length. [ 396.605571][T12171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.606013][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 396.626305][T12171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.638770][T12171] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 396.645956][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 396.655636][T12171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.668407][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 396.673252][T12171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.696027][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 396.717810][ T24] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 396.727246][ T24] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 396.965958][ T5925] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 397.118088][ T5925] usb 1-1: no configurations [ 397.122740][ T5925] usb 1-1: can't read configurations, error -22 [ 397.255985][ T5925] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 397.406638][ T5925] usb 1-1: no configurations [ 397.415253][ T5925] usb 1-1: can't read configurations, error -22 [ 397.431297][ T5925] usb usb1-port1: attempt power cycle [ 397.736033][ T10] vhci_hcd: vhci_device speed not set [ 397.775982][ T5925] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 397.807026][ T5925] usb 1-1: no configurations [ 397.811690][ T5925] usb 1-1: can't read configurations, error -22 [ 397.955986][ T5925] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 397.977419][ T5925] usb 1-1: no configurations [ 397.982075][ T5925] usb 1-1: can't read configurations, error -22 [ 397.988990][ T5925] usb usb1-port1: unable to enumerate USB device [ 398.598713][ T5925] usb 7-1: USB disconnect, device number 62 [ 398.645024][T12185] MTD: Attempt to mount non-MTD device "/dev/nbd6" [ 398.652661][T12185] cramfs: wrong magic [ 399.219471][T12199] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 399.226005][T12199] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 399.234700][T12199] vhci_hcd vhci_hcd.0: Device attached [ 399.475979][ T24] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 399.495964][ T979] usb 46-1: SetAddress Request (2) to port 0 [ 399.502629][ T979] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 399.605954][ T24] usb 7-1: device descriptor read/64, error -71 [ 399.790710][T12209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.800840][T12209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.846691][ T24] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 399.975953][ T24] usb 7-1: device descriptor read/64, error -71 [ 400.045923][ T5925] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 400.096356][ T24] usb usb7-port1: attempt power cycle [ 400.208771][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 400.219838][ T5925] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 400.231587][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 400.244373][ T5925] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 400.253531][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.261967][ T5925] usb 1-1: Product: syz [ 400.266242][ T5925] usb 1-1: Manufacturer: syz [ 400.270829][ T5925] usb 1-1: SerialNumber: syz [ 400.280945][ T5925] usb 1-1: config 0 descriptor?? [ 400.286574][T12203] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 400.293968][T12203] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 400.302375][ T5925] usb 1-1: ucan: probing device on interface #0 [ 400.398687][T12211] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 400.420580][T12211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.429782][T12211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.437742][ T24] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 400.467215][ T24] usb 7-1: device descriptor read/8, error -71 [ 400.706115][ T24] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 400.726556][ T24] usb 7-1: device descriptor read/8, error -71 [ 400.836181][ T24] usb usb7-port1: unable to enumerate USB device [ 400.906975][ T5925] ucan 1-1:0.0: probe with driver ucan failed with error -71 [ 400.921277][ T5925] usb 1-1: USB disconnect, device number 88 [ 401.050618][T12215] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1673'. [ 401.152154][T12218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.164371][T12218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.239351][T12200] vhci_hcd: connection reset by peer [ 402.256934][T11469] vhci_hcd: stop threads [ 402.261220][T11469] vhci_hcd: release socket [ 402.276235][T11469] vhci_hcd: disconnect device [ 402.665993][ T5925] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 402.845967][ T5925] usb 7-1: Using ep0 maxpacket: 32 [ 402.853357][ T5925] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.864456][ T5925] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.874309][ T5925] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 402.889863][ T5925] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 402.898996][ T5925] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 402.907399][ T5925] usb 7-1: Product: syz [ 402.911568][ T5925] usb 7-1: Manufacturer: syz [ 402.916252][ T5925] usb 7-1: SerialNumber: syz [ 402.930022][ T5925] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input61 [ 403.135293][ T10] usb 7-1: USB disconnect, device number 67 [ 403.148838][ T10] appletouch 7-1:1.0: input: appletouch disconnected [ 403.735988][ T24] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 403.887452][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 403.898262][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 403.909979][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12336, setting to 64 [ 403.921306][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 403.925962][ T5925] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 403.936498][ T24] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 403.952835][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.960971][ T24] usb 1-1: Product: syz [ 403.965166][ T24] usb 1-1: Manufacturer: syz [ 403.969832][ T24] usb 1-1: SerialNumber: syz [ 403.976728][ T24] usb 1-1: config 0 descriptor?? [ 403.985637][ T24] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input62 [ 403.998604][ C1] kbtab 1-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 404.098319][ T5925] usb 7-1: unable to get BOS descriptor or descriptor too short [ 404.109102][ T5925] usb 7-1: config 160 has an invalid interface number: 19 but max is 0 [ 404.117474][ T5925] usb 7-1: config 160 has no interface number 0 [ 404.123749][ T5925] usb 7-1: config 160 interface 19 has no altsetting 0 [ 404.132773][ T5925] usb 7-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=31.f3 [ 404.141863][ T5925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.150204][ T5925] usb 7-1: Product: syz [ 404.154378][ T5925] usb 7-1: Manufacturer: syz [ 404.159358][ T5925] usb 7-1: SerialNumber: syz [ 404.197043][ C0] kbtab 1-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 404.209195][T12251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.223012][T12251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.224823][T12256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.243201][T12256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.244276][ T24] usb 1-1: USB disconnect, device number 89 [ 404.256769][T12256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.269645][T12256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.369170][T12253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.378858][T12253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.397768][ T5925] usb 7-1: USB disconnect, device number 68 [ 404.546060][ T979] usb 46-1: device descriptor read/8, error -110 [ 404.834145][T12265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.845716][T12265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.949173][ T979] usb usb46-port1: attempt power cycle [ 405.056050][ T5906] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 405.209169][ T5906] usb 1-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 405.218429][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.227183][ T5906] usb 1-1: Product: syz [ 405.231372][ T5906] usb 1-1: Manufacturer: syz [ 405.237362][ T5906] usb 1-1: SerialNumber: syz [ 405.244642][ T5906] usb 1-1: config 0 descriptor?? [ 405.454930][T12263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.465759][T12272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.466494][T12263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.480939][T12272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.495280][T12272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.504383][T12272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.517846][ T979] usb usb46-port1: unable to enumerate USB device [ 405.527769][T12272] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1692'. [ 405.666847][T12263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.675812][T12263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.688007][ T5906] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 405.702205][ T5906] asix 1-1:0.0: probe with driver asix failed with error -71 [ 405.715021][ T5906] usb 1-1: USB disconnect, device number 90 [ 406.135718][T12284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.136853][ T5906] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 406.147219][T12284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.172174][T12284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.181467][T12284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.192594][T12284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.203307][T12284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.213709][T12284] No control pipe specified [ 406.307720][ T5906] usb 7-1: Using ep0 maxpacket: 16 [ 406.320128][ T5906] usb 7-1: config 0 has an invalid interface number: 104 but max is 1 [ 406.328813][ T5906] usb 7-1: config 0 has an invalid interface number: 104 but max is 1 [ 406.338099][ T5906] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 406.347841][ T5906] usb 7-1: config 0 has no interface number 0 [ 406.354041][ T5906] usb 7-1: config 0 interface 104 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 406.365280][ T5906] usb 7-1: config 0 interface 104 has no altsetting 1 [ 406.374386][ T5906] usb 7-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 406.379118][T12295] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 406.384396][ T5906] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.405943][ T5906] usb 7-1: Product: syz [ 406.410420][ T5906] usb 7-1: Manufacturer: syz [ 406.415083][ T5906] usb 7-1: SerialNumber: syz [ 406.423948][ T5906] usb 7-1: config 0 descriptor?? [ 406.632210][T12281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.642184][T12281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.655598][ T5906] asix 7-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 406.666345][ T5906] asix 7-1:0.104: probe with driver asix failed with error -71 [ 406.679631][ T5906] usb 7-1: USB disconnect, device number 69 [ 406.707443][ T10] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 406.867930][ T10] usb 1-1: config 0 has an invalid interface number: 46 but max is 0 [ 406.877665][ T10] usb 1-1: config 0 has no interface number 0 [ 406.883862][ T10] usb 1-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 406.894947][ T10] usb 1-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 406.907652][ T10] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 406.917757][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.925775][ T10] usb 1-1: Product: syz [ 406.930651][ T10] usb 1-1: Manufacturer: syz [ 406.935265][ T10] usb 1-1: SerialNumber: syz [ 406.945685][ T10] usb 1-1: config 0 descriptor?? [ 406.957606][ T10] ums-karma 1-1:0.46: USB Mass Storage device detected [ 406.969365][T12301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.980027][T12301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.019065][ T10] ums-karma 1-1:0.46: probe with driver ums-karma failed with error -5 [ 407.112006][T12309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.121391][T12309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.160255][ T5906] usb 1-1: USB disconnect, device number 91 [ 407.219197][T12311] netlink: 'syz.6.1703': attribute type 2 has an invalid length. [ 407.227735][T12311] netlink: 'syz.6.1703': attribute type 8 has an invalid length. [ 407.235517][T12311] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1703'. [ 407.485988][ T10] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 407.602091][T12313] binder: 12312:12313 ioctl c018620c 200000000640 returned -22 [ 407.624654][T12313] ALSA: mixer_oss: invalid OSS volume '' [ 407.632168][T12313] overlayfs: failed to resolve './file0': -2 [ 407.640051][T12313] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 407.646267][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 407.646566][T12313] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 407.654927][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.661474][T12313] vhci_hcd vhci_hcd.0: Device attached [ 407.671497][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.703633][ T10] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 407.704254][T12314] vhci_hcd: cannot find the pending unlink 0 [ 407.722385][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.756940][ T10] usb 7-1: config 0 descriptor?? [ 407.784980][T12317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.799430][T12317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.809231][T12320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.820285][T12320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.836120][ T5906] vhci_hcd: vhci_device speed not set [ 407.873182][T12323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.884172][T12323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.897643][ T5906] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 407.986764][T12327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1707'. [ 408.173067][T12311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.182656][T12311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.395730][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 408.403473][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 408.418223][ T10] usb 7-1: USB disconnect, device number 70 [ 408.986901][T12329] netlink: 'syz.6.1709': attribute type 1 has an invalid length. [ 408.994906][T12329] netlink: 'syz.6.1709': attribute type 4 has an invalid length. [ 409.008123][T12329] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.1709'. [ 409.045148][T12331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1708'. [ 409.085064][T12331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1708'. [ 409.415929][ T24] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 409.567905][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 409.578505][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 409.588662][ T24] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 409.598162][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 409.606426][ T24] usb 1-1: SerialNumber: syz [ 409.829967][ T24] usb 1-1: 0:2 : does not exist [ 409.845532][ T24] usb 1-1: USB disconnect, device number 92 [ 409.867981][ T5949] udevd[5949]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 409.936089][ T979] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 410.085923][ T979] usb 7-1: Using ep0 maxpacket: 16 [ 410.093070][ T979] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.104149][ T979] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.114055][ T979] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 410.127051][ T979] usb 7-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 410.136236][ T979] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.146612][ T979] usb 7-1: config 0 descriptor?? [ 410.357207][T12348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.366980][T12348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.591958][ T979] hid-multitouch 0003:0457:07DA.0034: hidraw1: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.6-1/input0 [ 410.636667][T12314] vhci_hcd: connection reset by peer [ 410.654694][ T12] vhci_hcd: stop threads [ 410.659304][ T12] vhci_hcd: release socket [ 410.671518][ T24] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 410.679718][ T12] vhci_hcd: disconnect device [ 410.756189][T12356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.770055][T12356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.791258][T12356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.802345][T12356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.806870][T12357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.832784][T12357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.841352][ T979] usb 7-1: USB disconnect, device number 71 [ 410.847455][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 410.863012][ T24] usb 1-1: config 4 has an invalid interface number: 8 but max is 0 [ 410.872221][ T24] usb 1-1: config 4 has no interface number 0 [ 410.884865][ T24] usb 1-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 410.898644][ T24] usb 1-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0 [ 410.909087][ T24] usb 1-1: config 4 interface 8 has no altsetting 0 [ 410.918824][ T24] usb 1-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 410.927978][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.936265][ T24] usb 1-1: Product: syz [ 410.940467][ T24] usb 1-1: Manufacturer: syz [ 410.945123][ T24] usb 1-1: SerialNumber: syz [ 411.156210][T12352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.165080][T12352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.175117][T12352] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 411.191956][T12352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.200975][T12352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.212170][T12352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.221537][T12352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.237371][ T24] opticon 1-1:4.8: opticon converter detected [ 411.246192][ T24] usb 1-1: opticon converter now attached to ttyUSB0 [ 411.257595][ T24] usb 1-1: USB disconnect, device number 93 [ 411.278484][ T24] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 411.289161][ T24] opticon 1-1:4.8: device disconnected [ 411.645956][ T979] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 411.730727][T12365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.750987][T12365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.777231][ T979] usb 7-1: device descriptor read/64, error -71 [ 412.016112][ T979] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 412.155929][ T979] usb 7-1: device descriptor read/64, error -71 [ 412.266814][ T979] usb usb7-port1: attempt power cycle [ 412.605969][ T979] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 412.630030][ T979] usb 7-1: device descriptor read/8, error -71 [ 412.875932][ T979] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 412.896536][ T979] usb 7-1: device descriptor read/8, error -71 [ 413.006160][ T979] usb usb7-port1: unable to enumerate USB device [ 413.016124][ T5906] vhci_hcd: vhci_device speed not set [ 413.036113][ T5925] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 413.165995][ T5925] usb 1-1: device descriptor read/64, error -71 [ 413.405937][ T5925] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 413.535907][ T5925] usb 1-1: device descriptor read/64, error -71 [ 413.646660][ T5925] usb usb1-port1: attempt power cycle [ 413.986047][ T5925] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 414.006345][ T5925] usb 1-1: device descriptor read/8, error -71 [ 414.245946][ T5925] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 414.267738][ T5925] usb 1-1: device descriptor read/8, error -71 [ 414.376334][ T5925] usb usb1-port1: unable to enumerate USB device [ 414.446556][T12383] dns_resolver: Unsupported content type (254) [ 414.446918][T12385] dns_resolver: Unsupported content type (254) [ 414.769483][T12390] ALSA: mixer_oss: invalid OSS volume '' [ 414.957084][ T24] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 414.973776][T12401] syzkaller1: entered promiscuous mode [ 414.979666][T12401] syzkaller1: entered allmulticast mode [ 414.993552][ T30] kauditd_printk_skb: 1612 callbacks suppressed [ 414.993569][ T30] audit: type=1326 audit(414.964:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12400 comm="syz.5.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75eb98eec9 code=0x7ffc0000 [ 415.025028][ T30] audit: type=1326 audit(414.964:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12400 comm="syz.5.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f75eb98eec9 code=0x7ffc0000 [ 415.049070][ T30] audit: type=1326 audit(414.964:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12400 comm="syz.5.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75eb98eec9 code=0x7ffc0000 [ 415.072137][ T30] audit: type=1326 audit(414.964:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12400 comm="syz.5.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75eb98eec9 code=0x7ffc0000 [ 415.100139][ T30] audit: type=1326 audit(414.964:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12400 comm="syz.5.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75eb98eec9 code=0x7ffc0000 [ 415.125581][ T24] usb 7-1: config 0 has an invalid interface number: 209 but max is 0 [ 415.132560][T12401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.141532][ T24] usb 7-1: config 0 has no interface number 0 [ 415.144395][T12401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.149065][ T24] usb 7-1: config 0 interface 209 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 415.168368][ T30] audit: type=1326 audit(414.964:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12400 comm="syz.5.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f75eb98eec9 code=0x7ffc0000 [ 415.191623][ T24] usb 7-1: config 0 interface 209 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 32 [ 415.199745][ T30] audit: type=1326 audit(414.994:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12400 comm="syz.5.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75eb98eec9 code=0x7ffc0000 [ 415.201919][ T24] usb 7-1: config 0 interface 209 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 415.225049][ T30] audit: type=1326 audit(414.994:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12400 comm="syz.5.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75eb98eec9 code=0x7ffc0000 [ 415.237723][ T24] usb 7-1: config 0 interface 209 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 415.274461][ T30] audit: type=1326 audit(415.004:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12400 comm="syz.5.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75eb98eec9 code=0x7ffc0000 [ 415.297434][ T30] audit: type=1326 audit(415.004:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12400 comm="syz.5.1731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f75eb98eec9 code=0x7ffc0000 [ 415.322220][ T24] usb 7-1: New USB device found, idVendor=049f, idProduct=0032, bcdDevice=9a.7f [ 415.331573][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.340292][ T24] usb 7-1: Product: syz [ 415.344548][ T24] usb 7-1: Manufacturer: syz [ 415.349276][ T24] usb 7-1: SerialNumber: syz [ 415.365662][ T24] usb 7-1: config 0 descriptor?? [ 415.371666][T12388] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 415.380516][T12388] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 415.589528][ T5925] usb 7-1: USB disconnect, device number 76 [ 416.009355][T12409] can: request_module (can-proto-0) failed. [ 416.272399][T12423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.282282][T12423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.293421][T12423] netlink: 'syz.5.1737': attribute type 2 has an invalid length. [ 416.302380][T12423] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1737'. [ 416.425927][ T5925] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 416.565908][ T5925] usb 7-1: device descriptor read/64, error -71 [ 416.806025][ T5925] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 416.956041][ T5925] usb 7-1: device descriptor read/64, error -71 [ 417.066152][ T5925] usb usb7-port1: attempt power cycle [ 417.405993][ T5925] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 417.427857][ T5925] usb 7-1: device descriptor read/8, error -71 [ 417.666956][ T5925] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 417.687229][ T5925] usb 7-1: device descriptor read/8, error -71 [ 417.726791][T12434] netlink: 5452 bytes leftover after parsing attributes in process `syz.5.1741'. [ 417.798249][ T5925] usb usb7-port1: unable to enumerate USB device [ 417.830029][T12438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.838916][T12438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.849484][T12439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.859453][T12439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.906068][ T5840] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 417.906569][ T5848] Bluetooth: hci4: command 0x1003 tx timeout [ 418.017631][T12446] netlink: 'syz.0.1745': attribute type 4 has an invalid length. [ 418.205661][T12458] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input63 [ 418.385945][ T5925] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 418.538276][ T5925] usb 1-1: unable to get BOS descriptor or descriptor too short [ 418.546952][ T5925] usb 1-1: config 251 has an invalid interface number: 227 but max is 1 [ 418.555304][ T5925] usb 1-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 418.566535][ T5925] usb 1-1: config 251 has 1 interface, different from the descriptor's value: 2 [ 418.575587][ T5925] usb 1-1: config 251 has no interface number 0 [ 418.584321][ T5925] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=6d.47 [ 418.594039][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.602322][ T5925] usb 1-1: Product: syz [ 418.606654][ T5925] usb 1-1: Manufacturer: syz [ 418.611713][ T5925] usb 1-1: SerialNumber: syz [ 418.808197][T12462] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1751'. [ 419.099874][T12468] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1753'. [ 419.121850][T12468] syzkaller0: entered promiscuous mode [ 419.132401][T12468] syzkaller0 (unregistering): left promiscuous mode [ 419.337002][T12473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.351210][T12473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.826043][ T10] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 419.904205][T12485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.914295][T12485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.978941][ T10] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 419.989238][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.000993][ T10] usb 7-1: config 0 descriptor?? [ 420.010188][ T10] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 420.214975][ T10] gp8psk: usb in 128 operation failed. [ 420.215192][T12483] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1758'. [ 420.232797][T12483] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 420.241392][T12483] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 420.254355][ T10] gp8psk: usb in 137 operation failed. [ 420.260038][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 420.270448][ T10] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 420.279374][ T10] usb 7-1: media controller created [ 420.299168][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 420.320429][ T10] gp8psk_fe: Frontend attached [ 420.325334][ T10] usb 7-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 420.334104][ T10] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 420.527012][T12497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.537703][T12497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.583120][ T10] gp8psk: usb in 138 operation failed. [ 420.588878][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 420.599077][ T10] gp8psk: found Genpix USB device pID = 203 (hex) [ 420.613506][ T10] usb 7-1: USB disconnect, device number 81 [ 420.668627][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 421.120389][T12500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.134047][T12500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.236221][ T5925] usb 1-1: USB disconnect, device number 98 [ 421.362098][T12513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.384595][T12513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.396885][T12513] netlink: 'syz.5.1769': attribute type 10 has an invalid length. [ 421.724906][T12535] nft_compat: unsupported protocol 4 [ 421.990197][T12553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.011339][T12556] bond0: entered promiscuous mode [ 422.016810][T12556] bond_slave_0: entered promiscuous mode [ 422.022617][T12556] bond_slave_1: entered promiscuous mode [ 422.028819][T12553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.716370][ T979] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 422.782844][T12589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.809963][T12589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.875927][ T979] usb 7-1: Using ep0 maxpacket: 32 [ 422.882426][ T979] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 422.892414][ T979] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.906154][ T979] usb 7-1: config 0 descriptor?? [ 422.920040][ T979] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 423.024737][T12597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.034303][T12597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.333206][ T979] gspca_nw80x: reg_r err -71 [ 423.339918][ T979] nw80x 7-1:0.0: probe with driver nw80x failed with error -71 [ 423.351862][ T979] usb 7-1: USB disconnect, device number 82 [ 423.640003][T12612] netlink: 'syz.5.1791': attribute type 58 has an invalid length. [ 423.650071][T12612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.661034][T12612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.994283][T12623] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1795'. [ 424.165356][T12626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.175366][T12626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.187272][T12626] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.1796'. [ 424.197234][T12627] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.1796'. [ 424.209111][T12626] blk_print_req_error: 131 callbacks suppressed [ 424.209128][T12626] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 424.229002][T12626] Buffer I/O error on dev nbd0, logical block 0, async page read [ 424.236943][ T979] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 424.248750][T12626] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 424.252831][T12629] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1797'. [ 424.268941][T12626] Buffer I/O error on dev nbd0, logical block 1, async page read [ 424.278498][T12626] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 424.290216][T12626] Buffer I/O error on dev nbd0, logical block 2, async page read [ 424.298885][T12626] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 424.309896][T12626] Buffer I/O error on dev nbd0, logical block 3, async page read [ 424.318940][T12626] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 424.329707][T12626] Buffer I/O error on dev nbd0, logical block 0, async page read [ 424.341968][T12626] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 424.354263][T12626] Buffer I/O error on dev nbd0, logical block 1, async page read [ 424.364954][T12626] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 424.375254][T12626] Buffer I/O error on dev nbd0, logical block 2, async page read [ 424.383818][T12626] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 424.394124][T12626] Buffer I/O error on dev nbd0, logical block 3, async page read [ 424.404305][ T979] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 424.406567][ T10] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 424.413304][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 424.430113][T12635] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1798'. [ 424.430140][T12635] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1798'. [ 424.450675][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 424.459925][ T25] Buffer I/O error on dev nbd0, logical block 1, async page read [ 424.470067][T12626] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 424.470163][ T979] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 424.490404][ T979] usb 7-1: config 220 has no interface number 2 [ 424.496921][ T979] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 424.510371][ T979] usb 7-1: config 220 interface 0 has no altsetting 0 [ 424.517294][ T979] usb 7-1: config 220 interface 76 has no altsetting 0 [ 424.517798][T12626] ldm_validate_partition_table(): Disk read failed. [ 424.524215][ T979] usb 7-1: config 220 interface 1 has no altsetting 0 [ 424.542409][T12626] Dev nbd0: unable to read RDB block 0 [ 424.551464][ T979] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 424.553933][T12626] nbd0: unable to read partition table [ 424.563402][ T979] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.577200][ T979] usb 7-1: Product: syz [ 424.581429][ T979] usb 7-1: Manufacturer: syz [ 424.586248][ T979] usb 7-1: SerialNumber: syz [ 424.650410][T12639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.662612][T12639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.809382][ T979] usb 7-1: selecting invalid altsetting 0 [ 424.815578][ T979] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 424.823527][ T979] uvcvideo 7-1:220.0: No valid video chain found. [ 424.835018][ T979] usb 7-1: selecting invalid altsetting 0 [ 424.841408][ T979] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 424.853358][ T979] usb 7-1: USB disconnect, device number 83 [ 425.086950][ T10] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 425.226984][ T10] usb 1-1: device descriptor read/64, error -71 [ 425.336225][ T10] usb usb1-port1: attempt power cycle [ 425.366721][T12646] netlink: 324 bytes leftover after parsing attributes in process `syz.5.1801'. [ 425.530449][T12656] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1803'. [ 425.533223][T12656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.550674][T12656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.690486][ T10] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 425.723099][T12662] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 425.736673][ T10] usb 1-1: device descriptor read/8, error -71 [ 425.996113][ T10] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 426.016390][ T10] usb 1-1: device descriptor read/8, error -71 [ 426.136150][ T10] usb usb1-port1: unable to enumerate USB device [ 426.206317][ T979] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 426.358445][ T979] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 426.367104][ T979] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.378493][ T979] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 426.387664][ T979] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 426.395706][ T979] usb 7-1: Manufacturer: syz [ 426.403110][ T979] usb 7-1: config 0 descriptor?? [ 426.456320][ T979] rc_core: IR keymap rc-hauppauge not found [ 426.466570][ T979] Registered IR keymap rc-empty [ 426.473491][ T979] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 426.485796][ T979] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input64 [ 426.570655][T12690] netlink: 'syz.7.1810': attribute type 27 has an invalid length. [ 426.621974][T12690] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.629994][T12690] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.637660][T12691] comedi comedi0: driver 'ni_daq_700' does not support attach using comedi_config [ 426.782833][T12690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.801680][T12690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.851664][T12682] fuse: Invalid rootmode [ 426.869420][T12682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.890135][T12682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.903322][T12682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.915215][T12682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.928065][ T5925] usb 7-1: USB disconnect, device number 84 [ 426.982883][T11469] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.992972][T11469] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.007600][T11472] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.034236][T12691] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.151727][T12694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.160842][T12694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.173944][T12694] program syz.5.1811 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 427.613850][T12699] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1813'. [ 428.034386][T12718] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1819'. [ 428.152900][T12724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.163770][T12724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.782572][T12740] loop9: detected capacity change from 0 to 7 [ 428.807945][T12740] ldm_validate_partition_table(): Disk read failed. [ 428.815031][T12740] Dev loop9: unable to read RDB block 0 [ 428.851747][T12740] loop9: unable to read partition table [ 428.868287][T12740] loop9: partition table beyond EOD, truncated [ 428.874683][T12740] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 428.874683][T12740] ) failed (rc=-5) [ 428.878208][T12741] netlink: 'syz.6.1823': attribute type 46 has an invalid length. [ 428.984490][T12743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.004680][T12743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.285917][ T5839] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 429.479088][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 429.489286][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 429.517836][ T5839] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 429.527138][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.535552][ T5839] usb 1-1: Product: syz [ 429.539907][ T5839] usb 1-1: Manufacturer: syz [ 429.545140][ T5839] usb 1-1: SerialNumber: syz [ 429.552911][ T5839] usb 1-1: config 0 descriptor?? [ 429.631943][T12750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.642461][T12750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.654253][T12750] __nla_validate_parse: 1 callbacks suppressed [ 429.654279][T12750] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1828'. [ 429.703528][T12750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.727973][T12750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.804043][ T5839] usb 1-1: USB disconnect, device number 103 [ 429.885787][ T5948] udevd[5948]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 430.248430][T12762] netlink: 84 bytes leftover after parsing attributes in process `syz.7.1830'. [ 430.257760][T12759] netlink: 84 bytes leftover after parsing attributes in process `syz.7.1830'. [ 430.334496][T12766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.353724][T12766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.309174][T12798] netlink: 'syz.5.1843': attribute type 2 has an invalid length. [ 431.318323][T12798] netlink: 'syz.5.1843': attribute type 2 has an invalid length. [ 431.515956][ T979] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 431.536896][T12803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.547404][T12803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.699902][ T979] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 431.716236][ T979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.725955][ T979] usb 1-1: Product: syz [ 431.730456][ T979] usb 1-1: Manufacturer: syz [ 431.743222][ T979] usb 1-1: SerialNumber: syz [ 431.757186][ T979] usb 1-1: config 0 descriptor?? [ 431.765542][ T979] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 104 [ 431.935843][ C1] hrtimer: interrupt took 65720 ns [ 431.967988][ T979] (null): failure setting delay to 10us [ 431.975042][ T979] i2c-tiny-usb 1-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 431.992036][ T979] usb 1-1: USB disconnect, device number 104 [ 432.004227][T12810] netlink: 260 bytes leftover after parsing attributes in process `syz.6.1847'. [ 432.315942][ T10] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 432.481633][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.502952][ T10] usb 7-1: config 0 has no interfaces? [ 432.516730][ T10] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 432.525801][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.558622][ T10] usb 7-1: config 0 descriptor?? [ 432.773011][T12812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.783169][T12812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.795043][T12812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.808258][T12812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.818150][ T979] usb 7-1: USB disconnect, device number 85 [ 433.085992][ T5839] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 433.200192][T12822] block nbd5: shutting down sockets [ 433.215940][ T5839] usb 1-1: device descriptor read/64, error -71 [ 433.312666][T12848] netlink: 'syz.5.1858': attribute type 10 has an invalid length. [ 433.328556][T12848] [ 433.330899][T12848] ====================================================== [ 433.337918][T12848] WARNING: possible circular locking dependency detected [ 433.344953][T12848] syzkaller #0 Not tainted [ 433.349354][T12848] ------------------------------------------------------ [ 433.356355][T12848] syz.5.1858/12848 is trying to acquire lock: [ 433.362403][T12848] ffffffff8e245220 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_noprof+0x45/0x6e0 [ 433.371799][T12848] [ 433.371799][T12848] but task is already holding lock: [ 433.379149][T12848] ffffffff8e22d270 (slab_mutex){+.+.}-{4:4}, at: __kmem_cache_create_args+0x45/0x320 [ 433.388622][T12848] [ 433.388622][T12848] which lock already depends on the new lock. [ 433.388622][T12848] [ 433.399010][T12848] [ 433.399010][T12848] the existing dependency chain (in reverse order) is: [ 433.408012][T12848] [ 433.408012][T12848] -> #8 (slab_mutex){+.+.}-{4:4}: [ 433.415218][T12848] lock_acquire+0x120/0x360 [ 433.420249][T12848] __mutex_lock+0x187/0x1350 [ 433.425352][T12848] flush_all_rcu_sheaves+0x21/0x1c0 [ 433.431067][T12848] kvfree_rcu_barrier+0x13/0x160 [ 433.436514][T12848] kmem_cache_destroy+0x2e/0x170 [ 433.441966][T12848] p9_client_destroy+0x491/0x4e0 [ 433.447462][T12848] v9fs_session_close+0x4f/0x200 [ 433.452910][T12848] v9fs_kill_super+0x5c/0x90 [ 433.458017][T12848] deactivate_locked_super+0xbc/0x130 [ 433.463914][T12848] v9fs_mount+0x805/0xa50 [ 433.468760][T12848] legacy_get_tree+0xfd/0x1a0 [ 433.473959][T12848] vfs_get_tree+0x92/0x2b0 [ 433.478884][T12848] do_new_mount+0x302/0x9e0 [ 433.483906][T12848] __se_sys_mount+0x313/0x410 [ 433.489093][T12848] do_syscall_64+0xfa/0xfa0 [ 433.494107][T12848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.500508][T12848] [ 433.500508][T12848] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 433.508229][T12848] lock_acquire+0x120/0x360 [ 433.513245][T12848] cpus_read_lock+0x42/0x160 [ 433.518343][T12848] static_key_slow_inc+0x12/0x30 [ 433.523794][T12848] tcp_md5_do_add+0x21f/0x3a0 [ 433.528979][T12848] tcp_v4_parse_md5_keys+0x412/0x600 [ 433.534777][T12848] do_tcp_setsockopt+0x11dc/0x1f20 [ 433.540405][T12848] do_sock_setsockopt+0x17c/0x1b0 [ 433.545947][T12848] __x64_sys_setsockopt+0x13f/0x1b0 [ 433.551742][T12848] do_syscall_64+0xfa/0xfa0 [ 433.556767][T12848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.563180][T12848] [ 433.563180][T12848] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 433.570836][T12848] lock_acquire+0x120/0x360 [ 433.575861][T12848] lock_sock_nested+0x48/0x100 [ 433.581145][T12848] inet_shutdown+0x6a/0x390 [ 433.586165][T12848] nbd_mark_nsock_dead+0x2e9/0x560 [ 433.591799][T12848] sock_shutdown+0x15e/0x260 [ 433.596909][T12848] nbd_config_put+0x342/0x790 [ 433.602101][T12848] nbd_release+0xfe/0x140 [ 433.606934][T12848] bdev_release+0x536/0x650 [ 433.611944][T12848] blkdev_release+0x15/0x20 [ 433.616964][T12848] __fput+0x44c/0xa70 [ 433.621475][T12848] task_work_run+0x1d4/0x260 [ 433.626577][T12848] exit_to_user_mode_loop+0xe9/0x130 [ 433.632382][T12848] do_syscall_64+0x2bd/0xfa0 [ 433.637503][T12848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.643907][T12848] [ 433.643907][T12848] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 433.651546][T12848] lock_acquire+0x120/0x360 [ 433.656563][T12848] __mutex_lock+0x187/0x1350 [ 433.661661][T12848] nbd_queue_rq+0x257/0xf10 [ 433.666675][T12848] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 433.672733][T12848] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 433.679569][T12848] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 433.686057][T12848] blk_mq_run_hw_queue+0x348/0x4f0 [ 433.691674][T12848] blk_mq_dispatch_list+0xd0c/0xe00 [ 433.697378][T12848] blk_mq_flush_plug_list+0x469/0x550 [ 433.703259][T12848] __blk_flush_plug+0x3d3/0x4b0 [ 433.708616][T12848] __submit_bio+0x2d3/0x5a0 [ 433.713644][T12848] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 433.719799][T12848] block_read_full_folio+0x599/0x830 [ 433.725595][T12848] filemap_read_folio+0x117/0x380 [ 433.731131][T12848] do_read_cache_folio+0x350/0x590 [ 433.736753][T12848] read_part_sector+0xb6/0x2b0 [ 433.742025][T12848] adfspart_check_ICS+0xa4/0xa50 [ 433.747472][T12848] bdev_disk_changed+0x75f/0x14b0 [ 433.753001][T12848] blkdev_get_whole+0x380/0x510 [ 433.758367][T12848] bdev_open+0x31e/0xd30 [ 433.763115][T12848] blkdev_open+0x457/0x600 [ 433.768040][T12848] do_dentry_open+0x953/0x13f0 [ 433.773318][T12848] vfs_open+0x3b/0x340 [ 433.777896][T12848] path_openat+0x2ee5/0x3830 [ 433.782992][T12848] do_filp_open+0x1fa/0x410 [ 433.787998][T12848] do_sys_openat2+0x121/0x1c0 [ 433.793190][T12848] __x64_sys_openat+0x138/0x170 [ 433.798550][T12848] do_syscall_64+0xfa/0xfa0 [ 433.803562][T12848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.809960][T12848] [ 433.809960][T12848] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 433.817167][T12848] lock_acquire+0x120/0x360 [ 433.822178][T12848] __mutex_lock+0x187/0x1350 [ 433.827275][T12848] nbd_queue_rq+0xc8/0xf10 [ 433.832204][T12848] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 433.838256][T12848] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 433.845095][T12848] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 433.851583][T12848] blk_mq_run_hw_queue+0x348/0x4f0 [ 433.857201][T12848] blk_mq_dispatch_list+0xd0c/0xe00 [ 433.862908][T12848] blk_mq_flush_plug_list+0x469/0x550 [ 433.868788][T12848] __blk_flush_plug+0x3d3/0x4b0 [ 433.874146][T12848] __submit_bio+0x2d3/0x5a0 [ 433.879153][T12848] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 433.885290][T12848] block_read_full_folio+0x599/0x830 [ 433.891086][T12848] filemap_read_folio+0x117/0x380 [ 433.896617][T12848] do_read_cache_folio+0x350/0x590 [ 433.902235][T12848] read_part_sector+0xb6/0x2b0 [ 433.907502][T12848] adfspart_check_ICS+0xa4/0xa50 [ 433.912944][T12848] bdev_disk_changed+0x75f/0x14b0 [ 433.918475][T12848] blkdev_get_whole+0x380/0x510 [ 433.923834][T12848] bdev_open+0x31e/0xd30 [ 433.928580][T12848] blkdev_open+0x457/0x600 [ 433.933500][T12848] do_dentry_open+0x953/0x13f0 [ 433.938772][T12848] vfs_open+0x3b/0x340 [ 433.943350][T12848] path_openat+0x2ee5/0x3830 [ 433.948456][T12848] do_filp_open+0x1fa/0x410 [ 433.953466][T12848] do_sys_openat2+0x121/0x1c0 [ 433.958652][T12848] __x64_sys_openat+0x138/0x170 [ 433.964017][T12848] do_syscall_64+0xfa/0xfa0 [ 433.969030][T12848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.975431][T12848] [ 433.975431][T12848] -> #3 (set->srcu){.+.+}-{0:0}: [ 433.982543][T12848] lock_sync+0xba/0x160 [ 433.987216][T12848] __synchronize_srcu+0x96/0x3a0 [ 433.992661][T12848] elevator_switch+0x12b/0x640 [ 433.997932][T12848] elevator_change+0x315/0x4c0 [ 434.003204][T12848] elevator_set_default+0x186/0x260 [ 434.008907][T12848] blk_register_queue+0x34e/0x3f0 [ 434.014438][T12848] __add_disk+0x677/0xd50 [ 434.019281][T12848] add_disk_fwnode+0xfc/0x480 [ 434.024467][T12848] nbd_dev_add+0x717/0xae0 [ 434.029393][T12848] nbd_init+0x168/0x1f0 [ 434.034061][T12848] do_one_initcall+0x236/0x820 [ 434.039329][T12848] do_initcall_level+0x104/0x190 [ 434.044770][T12848] do_initcalls+0x59/0xa0 [ 434.049613][T12848] kernel_init_freeable+0x334/0x4b0 [ 434.055404][T12848] kernel_init+0x1d/0x1d0 [ 434.060246][T12848] ret_from_fork+0x4bc/0x870 [ 434.065344][T12848] ret_from_fork_asm+0x1a/0x30 [ 434.070623][T12848] [ 434.070623][T12848] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 434.078440][T12848] lock_acquire+0x120/0x360 [ 434.083465][T12848] __mutex_lock+0x187/0x1350 [ 434.088574][T12848] elevator_change+0x1e5/0x4c0 [ 434.093850][T12848] elevator_set_none+0x42/0xb0 [ 434.099119][T12848] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 434.105444][T12848] nbd_start_device+0x17f/0xb10 [ 434.110808][T12848] nbd_genl_connect+0x135b/0x18f0 [ 434.116343][T12848] genl_family_rcv_msg_doit+0x215/0x300 [ 434.122402][T12848] genl_rcv_msg+0x60e/0x790 [ 434.127419][T12848] netlink_rcv_skb+0x208/0x470 [ 434.132689][T12848] genl_rcv+0x28/0x40 [ 434.137184][T12848] netlink_unicast+0x82f/0x9e0 [ 434.142455][T12848] netlink_sendmsg+0x805/0xb30 [ 434.147729][T12848] __sock_sendmsg+0x21c/0x270 [ 434.152920][T12848] ____sys_sendmsg+0x505/0x830 [ 434.158197][T12848] ___sys_sendmsg+0x21f/0x2a0 [ 434.163384][T12848] __x64_sys_sendmsg+0x19b/0x260 [ 434.168831][T12848] do_syscall_64+0xfa/0xfa0 [ 434.173845][T12848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.180246][T12848] [ 434.180246][T12848] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 434.188848][T12848] lock_acquire+0x120/0x360 [ 434.193865][T12848] blk_alloc_queue+0x538/0x620 [ 434.199139][T12848] __blk_mq_alloc_disk+0x15c/0x340 [ 434.204763][T12848] nbd_dev_add+0x46c/0xae0 [ 434.209694][T12848] nbd_init+0x168/0x1f0 [ 434.214370][T12848] do_one_initcall+0x236/0x820 [ 434.219645][T12848] do_initcall_level+0x104/0x190 [ 434.225089][T12848] do_initcalls+0x59/0xa0 [ 434.229924][T12848] kernel_init_freeable+0x334/0x4b0 [ 434.235628][T12848] kernel_init+0x1d/0x1d0 [ 434.240468][T12848] ret_from_fork+0x4bc/0x870 [ 434.245571][T12848] ret_from_fork_asm+0x1a/0x30 [ 434.250845][T12848] [ 434.250845][T12848] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 434.258047][T12848] validate_chain+0xb9b/0x2140 [ 434.263329][T12848] __lock_acquire+0xab9/0xd20 [ 434.268517][T12848] lock_acquire+0x120/0x360 [ 434.273531][T12848] fs_reclaim_acquire+0x72/0x100 [ 434.278978][T12848] kmem_cache_alloc_noprof+0x45/0x6e0 [ 434.284863][T12848] __kmem_cache_create_args+0x19b/0x320 [ 434.290920][T12848] ieee80211_mesh_init_sdata+0x35f/0x610 [ 434.297064][T12848] ieee80211_setup_sdata+0x80e/0xb50 [ 434.302860][T12848] ieee80211_if_add+0xc17/0x1390 [ 434.308307][T12848] ieee80211_add_iface+0xb5/0x5c0 [ 434.313840][T12848] nl80211_new_interface+0x893/0x11a0 [ 434.319725][T12848] genl_family_rcv_msg_doit+0x215/0x300 [ 434.325785][T12848] genl_rcv_msg+0x60e/0x790 [ 434.330801][T12848] netlink_rcv_skb+0x208/0x470 [ 434.336073][T12848] genl_rcv+0x28/0x40 [ 434.340563][T12848] netlink_unicast+0x82f/0x9e0 [ 434.345836][T12848] netlink_sendmsg+0x805/0xb30 [ 434.351108][T12848] __sock_sendmsg+0x21c/0x270 [ 434.356298][T12848] ____sys_sendmsg+0x505/0x830 [ 434.361570][T12848] ___sys_sendmsg+0x21f/0x2a0 [ 434.366754][T12848] __x64_sys_sendmsg+0x19b/0x260 [ 434.372204][T12848] do_syscall_64+0xfa/0xfa0 [ 434.377215][T12848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.383617][T12848] [ 434.383617][T12848] other info that might help us debug this: [ 434.383617][T12848] [ 434.393828][T12848] Chain exists of: [ 434.393828][T12848] fs_reclaim --> cpu_hotplug_lock --> slab_mutex [ 434.393828][T12848] [ 434.406070][T12848] Possible unsafe locking scenario: [ 434.406070][T12848] [ 434.413506][T12848] CPU0 CPU1 [ 434.418863][T12848] ---- ---- [ 434.424212][T12848] lock(slab_mutex); [ 434.428181][T12848] lock(cpu_hotplug_lock); [ 434.435191][T12848] lock(slab_mutex); [ 434.441678][T12848] lock(fs_reclaim); [ 434.445653][T12848] [ 434.445653][T12848] *** DEADLOCK *** [ 434.445653][T12848] [ 434.453791][T12848] 4 locks held by syz.5.1858/12848: [ 434.458972][T12848] #0: ffffffff8f558090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.467155][T12848] #1: ffffffff8f4f2588 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x8e0 [ 434.476369][T12848] #2: ffff88807a9b0788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: nl80211_new_interface+0xc3/0x11a0 [ 434.486636][T12848] #3: ffffffff8e22d270 (slab_mutex){+.+.}-{4:4}, at: __kmem_cache_create_args+0x45/0x320 [ 434.496551][T12848] [ 434.496551][T12848] stack backtrace: [ 434.502437][T12848] CPU: 0 UID: 0 PID: 12848 Comm: syz.5.1858 Not tainted syzkaller #0 PREEMPT(full) [ 434.502456][T12848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 434.502472][T12848] Call Trace: [ 434.502482][T12848] [ 434.502489][T12848] dump_stack_lvl+0x189/0x250 [ 434.502508][T12848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.502521][T12848] ? __pfx__printk+0x10/0x10 [ 434.502535][T12848] ? print_lock_name+0xde/0x100 [ 434.502557][T12848] print_circular_bug+0x2ee/0x310 [ 434.502580][T12848] check_noncircular+0x134/0x160 [ 434.502602][T12848] validate_chain+0xb9b/0x2140 [ 434.502623][T12848] ? __mutex_trylock_common+0x153/0x260 [ 434.502644][T12848] ? __pfx___mutex_trylock_common+0x10/0x10 [ 434.502664][T12848] ? genl_rcv_msg+0x60e/0x790 [ 434.502683][T12848] ? genl_rcv+0x28/0x40 [ 434.502707][T12848] ? rcu_is_watching+0x15/0xb0 [ 434.502728][T12848] __lock_acquire+0xab9/0xd20 [ 434.502747][T12848] ? kmem_cache_alloc_noprof+0x45/0x6e0 [ 434.502768][T12848] lock_acquire+0x120/0x360 [ 434.502787][T12848] ? kmem_cache_alloc_noprof+0x45/0x6e0 [ 434.502812][T12848] fs_reclaim_acquire+0x72/0x100 [ 434.502827][T12848] ? kmem_cache_alloc_noprof+0x45/0x6e0 [ 434.502847][T12848] kmem_cache_alloc_noprof+0x45/0x6e0 [ 434.502868][T12848] ? __kmem_cache_create_args+0x19b/0x320 [ 434.502883][T12848] __kmem_cache_create_args+0x19b/0x320 [ 434.502898][T12848] ieee80211_mesh_init_sdata+0x35f/0x610 [ 434.502916][T12848] ? __pfx_ieee80211_mesh_init_sdata+0x10/0x10 [ 434.502931][T12848] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 434.502950][T12848] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 434.502966][T12848] ? __raw_spin_lock_init+0x45/0x100 [ 434.502981][T12848] ieee80211_setup_sdata+0x80e/0xb50 [ 434.503001][T12848] ieee80211_if_add+0xc17/0x1390 [ 434.503021][T12848] ieee80211_add_iface+0xb5/0x5c0 [ 434.503038][T12848] ? __pfx_ieee80211_add_iface+0x10/0x10 [ 434.503055][T12848] nl80211_new_interface+0x893/0x11a0 [ 434.503073][T12848] ? __pfx_nl80211_new_interface+0x10/0x10 [ 434.503089][T12848] ? nl80211_pre_doit+0x4df/0x8e0 [ 434.503105][T12848] genl_family_rcv_msg_doit+0x215/0x300 [ 434.503127][T12848] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 434.503151][T12848] ? bpf_lsm_capable+0x9/0x20 [ 434.503170][T12848] ? security_capable+0x7e/0x2e0 [ 434.503187][T12848] genl_rcv_msg+0x60e/0x790 [ 434.503208][T12848] ? __pfx_genl_rcv_msg+0x10/0x10 [ 434.503227][T12848] ? ref_tracker_free+0x63a/0x7d0 [ 434.503241][T12848] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 434.503254][T12848] ? __pfx_nl80211_new_interface+0x10/0x10 [ 434.503268][T12848] ? __pfx_nl80211_post_doit+0x10/0x10 [ 434.503281][T12848] ? ____sys_sendmsg+0x505/0x830 [ 434.503298][T12848] ? ___sys_sendmsg+0x21f/0x2a0 [ 434.503314][T12848] ? __x64_sys_sendmsg+0x19b/0x260 [ 434.503330][T12848] ? do_syscall_64+0xfa/0xfa0 [ 434.503346][T12848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.503363][T12848] netlink_rcv_skb+0x208/0x470 [ 434.503378][T12848] ? __lock_acquire+0xab9/0xd20 [ 434.503395][T12848] ? __pfx_genl_rcv_msg+0x10/0x10 [ 434.503414][T12848] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 434.503435][T12848] ? down_read+0x1ad/0x2e0 [ 434.503454][T12848] genl_rcv+0x28/0x40 [ 434.503471][T12848] netlink_unicast+0x82f/0x9e0 [ 434.503487][T12848] ? __pfx_netlink_unicast+0x10/0x10 [ 434.503501][T12848] ? netlink_sendmsg+0x642/0xb30 [ 434.503516][T12848] ? skb_put+0x11b/0x210 [ 434.503533][T12848] netlink_sendmsg+0x805/0xb30 [ 434.503551][T12848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.503568][T12848] ? aa_sock_msg_perm+0xf1/0x1d0 [ 434.503586][T12848] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 434.503602][T12848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.503617][T12848] __sock_sendmsg+0x21c/0x270 [ 434.503639][T12848] ____sys_sendmsg+0x505/0x830 [ 434.503658][T12848] ? __pfx_____sys_sendmsg+0x10/0x10 [ 434.503678][T12848] ? import_iovec+0x74/0xa0 [ 434.503701][T12848] ___sys_sendmsg+0x21f/0x2a0 [ 434.503718][T12848] ? __pfx____sys_sendmsg+0x10/0x10 [ 434.503746][T12848] ? __fget_files+0x2a/0x420 [ 434.503765][T12848] ? __fget_files+0x3a0/0x420 [ 434.503788][T12848] __x64_sys_sendmsg+0x19b/0x260 [ 434.503806][T12848] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 434.503829][T12848] ? do_syscall_64+0xbe/0xfa0 [ 434.503846][T12848] do_syscall_64+0xfa/0xfa0 [ 434.503862][T12848] ? lockdep_hardirqs_on+0x9c/0x150 [ 434.503878][T12848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.503892][T12848] ? clear_bhb_loop+0x60/0xb0 [ 434.503908][T12848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.503923][T12848] RIP: 0033:0x7f75eb98eec9 [ 434.503938][T12848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.503953][T12848] RSP: 002b:00007f75e9bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.503969][T12848] RAX: ffffffffffffffda RBX: 00007f75ebbe5fa0 RCX: 00007f75eb98eec9 [ 434.503981][T12848] RDX: 0000000024044884 RSI: 0000200000000300 RDI: 0000000000000003 [ 434.503991][T12848] RBP: 00007f75eba11f91 R08: 0000000000000000 R09: 0000000000000000 [ 434.504001][T12848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.504011][T12848] R13: 00007f75ebbe6038 R14: 00007f75ebbe5fa0 R15: 00007fff2191b828 [ 434.504028][T12848] [ 435.006446][ T5839] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 435.043875][T12848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.056011][T12848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.145933][ T5839] usb 1-1: device descriptor read/64, error -71 [ 435.256240][ T5839] usb usb1-port1: attempt power cycle [ 435.607365][ T5839] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 435.626316][ T5839] usb 1-1: device descriptor read/8, error -71 [ 435.865905][ T5839] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 436.075935][ T5839] usb 1-1: device not accepting address 108, error -71 [ 436.083144][ T5839] usb usb1-port1: unable to enumerate USB device [ 440.068128][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.074441][ T1301] ieee802154 phy1 wpan1: encryption failed: -22