last executing test programs: 11m34.411334403s ago: executing program 32 (id=148): r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@hat={'changehat ', 0x0, 0x5e, [',%-\\[\x00', '/dev/vhost-net\x00']}, 0x32) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) fcntl$lock(r2, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x1b9, 0x1fd}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000280)={{0x3, 0x0, 0x3, 0x0, 0x993}, 0x4, 0x7ff, 'id1\x00', 'timer0\x00', 0x0, 0x7, 0x7, 0x3, 0x6}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @hyper, 0x4, 0x9, 0x5e, 0x0, 0x0, 0x0, 0x10}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = socket$caif_stream(0x25, 0x1, 0x2) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x68d2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x2, 0x0, 0x5}) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x4, 0x2) close_range(r6, r6, 0x0) pipe2(&(0x7f0000000100), 0x80) sendmmsg(r4, &(0x7f0000002e40)=[{{&(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e22}, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffffa}}], 0x1, 0xd0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) 11m30.202787317s ago: executing program 33 (id=166): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001400010000000000000000c903000080080002"], 0x1c}], 0x1, 0x0, 0x0, 0x100}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000280)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000440)=0x1) r1 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000380)={0x90, 0x0, 0x52cb58c51ea0e395, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3ff, 0x21}}}}, [@NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) write$tun(r3, &(0x7f0000000400)=ANY=[], 0xa2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/4096, 0x1000, 0x0, &(0x7f00000000c0)}, &(0x7f0000000140)=0x40) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e04001220"], 0x7) 11m21.495713351s ago: executing program 34 (id=199): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x54, r1, 0x625, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x9, 0x24, [{0x6c, 0x1}, {0x0, 0x1}, {0x2}, {0x7c}, {0x24}]}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x5}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x5d, 0x4, 0xf5}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x3}, @NL80211_MESHCONF_NOLEARN={0x0, 0x1e, 0x1}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x80}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24008010}, 0x24000050) 11m0.681696414s ago: executing program 35 (id=222): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1}) bind$xdp(r2, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x1000000f}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)={0x44, 0x33, 0x100, 0x70bd26, 0x25dfdbfb, "", [@nested={0x32, 0x149, 0x0, 0x1, [@generic="a6351f7a2da1202628c49a8918fd37745b3b1470a5100e936f821ada5d0eeb8aa6ea44004e699e817483c3fd1542"]}]}, 0x44}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)='G', 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r4, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r5 = syz_open_dev$video4linux(&(0x7f0000002300), 0xffff, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r5, 0xc038563b, &(0x7f0000000000)={0x1}) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRESOCT=r2], 0x1126) socket$inet6_tcp(0xa, 0x1, 0x0) 10m49.74643941s ago: executing program 36 (id=304): syz_usb_connect(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xce, 0x30, 0xe5, 0x40, 0x61d, 0xc170, 0xe559, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc4, 0x9, 0x0, 0xf6, 0xae, 0x21, 0x40}}]}}]}}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 10m45.610497424s ago: executing program 37 (id=321): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x351301, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xd) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x1, 0xfffffff8, 0xff, 0x8000, 0xc, "7a5807004000000200000000000000000300"}) 10m41.364593029s ago: executing program 38 (id=330): rename(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0\x00') r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRESDEC], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000005c0)={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0}) r1 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f0000000280)={0x81, 0x0, 0x1}) syz_usb_connect$uac1(0x0, 0xc2, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb0, 0x3, 0x1, 0x2, 0x80, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1e9, 0xa}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x1ff, 0x2, 0x9, 0x9, 0x80, 0x4}, @mixer_unit={0x5, 0x24, 0x4, 0x6, 0xd8}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x206, 0x2, 0x6, 0xff59, 0x10, 0x8}, @extension_unit={0xb, 0x24, 0x8, 0x2, 0x1241, 0x0, "4dadc5b2"}, @processing_unit={0xd, 0x24, 0x7, 0x5, 0x1, 0x9, "16bc5428d7d7"}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x40, "7d0e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x1, 0xb, 0xd, {0x7, 0x25, 0x1, 0x6, 0x80, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0x9, 0x3}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x2, 0x1, 0xc4, 0xa0, "e7e71c", "65a714"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0xa0, 0x9, 0x5, {0x7, 0x25, 0x1, 0x0, 0xa7, 0x6}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x7, 0xeb, 0x7, 0x10, 0x7}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x4, [{0xe5, &(0x7f0000000780)=ANY=[@ANYBLOB="e5033375bd7a6ea10178427e35b6dad2af2943d56f29fa7b84cd4a771070f01a2bf7793bc343e639aa258ec83168223bece2c689d2a9de617fa291478cc00d5abb55b41cd8826d130dce53f97eb2ba521f7d1e69f66bafda33359c69a92855524932ccde98ac7c3575935e9ba5c7b63d0300825c42cd9ebcfe32a18692b8e80355ff37dd18027f151133aa9c06048da33d48e0ffff3abb44d56a6edf9eef5e218838af34be250d124d5c19e8135df5f22c76854ad418ae0800a8767168d47432ee021ebad0541cff34ce9725302bed8a3fdf964cac50e48abbe7af58d91d70e397a83f193ffea7c4afc1ccba06c9fd3b42d6ed62c75fc6d4309ab0b722e3d436054ba8cc8593b6289ff0be5f3f1c0b54cba9886dd9aa5df2b5ca0fd45b565088a71ff2408addc7c670b21e4bcbc094aaffea16a19a6e87078087e3ce1b180f20151d09d134dfb26debcb3c45f5b98d065a9b68c24c8b19197864e5d01aac435b488c329fcc7c6739cfa4283dbce5e944d12d3c4a0861c3e372503b116f1ec453569fc9dfb3ef"]}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x380a}}]}) readlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)=""/50, 0x32) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}}, 0x3, 0x7fff, 0x3, 0x8, 0x80}, &(0x7f0000000480)=0x98) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000340)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000980)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffd6}, {0xa, 0x4e23, 0x100, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}, 0xa}, r5, 0x9}}, 0x48) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000006c0)={r4, 0xe834}, &(0x7f0000000740)=0x8) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$netlink(0x10, 0x3, 0xa) bind$netlink(r6, &(0x7f0000000300)={0x10, 0x0, 0x25dfdbfe, 0x2000}, 0xc) 10m33.930434453s ago: executing program 39 (id=340): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x32, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002a00010a000000000051e63490f45f00080000000000000013fbbc"], 0x24}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f00000000c0)={0x6, 'dummy0\x00', {0x1}, 0xff7f}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x0, 'vlan1\x00', {0x3}, 0x4}) 9m54.44224562s ago: executing program 40 (id=558): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="4d010000e0000000000100e50414090b0092000000000000005ee4cc040c1e5fcc2eae7fc0dacea9ed192143db2c8381a3e349d8", 0x34, 0x81, &(0x7f0000000340)={0x11, 0x3, r1, 0x1, 0x10, 0x6, @random="645bcc77540e"}, 0x14) 9m25.149018623s ago: executing program 41 (id=778): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$video(&(0x7f0000000080), 0x80, 0x802) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040)=0x25, 0x4) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0x805, 0x4) 9m21.45216123s ago: executing program 42 (id=803): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x0, 0xfff, 0x4b, 0x8009}, 'syz0\x00', 0x3e}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) r2 = dup3(r1, r0, 0x80000) syz_fuse_handle_req(r2, &(0x7f0000000e00)="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", 0x2000, 0x0) 8m49.969542167s ago: executing program 43 (id=1027): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) close_range(r0, 0xffffffffffffffff, 0x300000000000000) 8m46.509935816s ago: executing program 44 (id=1036): r0 = syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x0) ioctl$CEC_DQEVENT(r0, 0x541b, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_test', 0x32641, 0x40) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="3e3ef36566f281360e00e80000000f3802bc008066f3660f08d8e23a3ece7666b93408000066b8a89f055c66ba000000000f300f22c5660f38818c00000f00110fa3687a", 0x44}], 0x1, 0x22, &(0x7f00000000c0)=[@efer={0x2, 0x4c01}, @dstype3={0x7, 0xe}], 0x2) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r4, 0x4068aea3, &(0x7f00000002c0)={0xc7, 0xfdfd, 0x1}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x80000000000) 8m40.426751146s ago: executing program 45 (id=1056): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2800000009000000000000000000000001"], 0x28) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)=ANY=[@ANYBLOB="401404000098"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, 0x0, 0x40012006) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x18000, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r3, 0xc4c03d09, &(0x7f00000009c0)={0x6}) syz_usb_control_io(r0, 0x0, &(0x7f0000000540)={0x84, &(0x7f0000000480)={0x20, 0x6, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, &(0x7f0000000f00)={0x0, 0x14, 0x4, "42467af9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7m53.651670829s ago: executing program 46 (id=1344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000440)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12, 0x0, 0x0, 0xd3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0x38, 0x2c, 0xff, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, '\x00', 0xf08, 0x11, 0xb9e02c7ea3376920, @ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x12}, [@hopopts={0x84}]}}}}}}, 0x6e) 7m52.24346803s ago: executing program 47 (id=1351): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000240)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x131d80, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000100)={0x3}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000440)={0x0, 0x17, 0x4, "153cecc0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0a009000ffffffffffffffffffffffff0806000108000604000200"], 0x2e) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 7m14.640294749s ago: executing program 48 (id=1632): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1e, &(0x7f0000000000)=0x2, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x40000000, 0x8, 0x5, 0x200, 0x0}) 7m11.549053806s ago: executing program 49 (id=1644): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104f0ff01090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_io_uring_setup(0x66ce, &(0x7f0000000300)={0x0, 0x3c05, 0x1e, 0x2, 0x187}, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x4, 0x3, "8f9e"}}}, &(0x7f0000000980)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0xd66}}) syz_usb_connect(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002fab91d405e048302bd4301020301090224000203d48009090401ff01afc9fb0b09050104000003045309042fff00ffffff08cd5d68ac02d8dbf4c97a7e90d0a6b34244be"], &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x200042, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x2}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @empty}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 7m4.866541054s ago: executing program 50 (id=1662): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x8080) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000080)={0x1, 0x1}) fcntl$lock(r5, 0x7, &(0x7f0000000100)={0x0, 0x1, 0x36, 0xc1b0}) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x0, 0x2, 0x2, 0xdbd}) fcntl$lock(r5, 0x25, &(0x7f0000000000)={0x0, 0x1, 0x7, 0x3}) close(r5) ioctl$FBIOGET_FSCREENINFO(r5, 0x4602, &(0x7f00000001c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4048aecb, &(0x7f0000000040)) r7 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r5, 0x0, 0x4) setreuid(0xffffffffffffffff, 0xee01) symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f00000053c0)=[{{&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000440)="93454e0d41403410b396c3a88fb7ee068cc386b2ecf75a6563284b971354d443f4f172fedab872313cfbdec5a16c7fa3498c68c5d55a606f43d818e4be5d787db10d052fb82d98a74c6e82f88433e93893088160ba87efdf783a5af6d2862744dd27cd1f65d3300b9ad8386600059261de5c13cd62f8a9ac08a68fd8106fd054824e2e7ac176ffb0321fad1773f553c34e778d7195da81614b3100dfc2f26bffb2533e130735f9b33199b4ca68998695cfb880ba036b7371ebbc9948702dd3e68dd70c0fc54d18d4d059cdb486bd6a21d5774191f5a6199c1d7d", 0xda}, {&(0x7f0000000600)="709d9ff1bda90cfd938638e4914dea5452fafb7efbc43ae83a12f05c1bbb3fcaa52a8ed6f392e2206ccc60203ad34c617b175843f6bd257903a071d48804c4069ef2b53bbc1d1a8be1ddaec2cfb593ac9db4515945f5cfde371019692d8fd69292e525597e8cb6b4dee96ce725fa6d25942e4325e9dfa07a1d2cf5a130e5891e2e9279b91eaccd0878a1b8193c7f8714a87eefa3f99fb07e3c8f161e079e198b3ff0dc7c5ff237a37cb3f60d48a2eec6bab5066620e98789d8a3f8446d73034d6b7497a338caa9ad69e87e9bb700258c53b7a2c93591c266ec5f56c83ca553e53504867742f4d60a964d66bb62fd2730caff647971c7bc6c40", 0xf9}], 0x2, &(0x7f0000000800)=[@rights={{0x20, 0x1, 0x1, [r7, r9, r2, r8]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60, 0x85}}, {{&(0x7f0000000880)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000900)="95518a2c60431a69967914006719ea1851355610e8a041ca6ed74b36f246c0a459e2fde1727d970457b417238c79df1e2d5967f1e49d14f8851a1d2355935e91e78571375303e3cf019e533c1f7cea68c6603bf20cc4513f877ffd3306c087e2663c6886bd1ad5f8c6055f6f8776886e791c38053841", 0x76}], 0x1, &(0x7f0000000a80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r8, r7, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80, 0x4040}}, {{&(0x7f0000000c00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000c80)="04b04023cde26b5f4b5c3e4e1d24dc6dc9241c32cd83d432d249896c07f044a3a72702f6f086fcaa4a6af3516e02275a6f78441b56059a31344b52e708c7ba0a72905014b1d170fcb9f6b5163e79d5f134c9a7fa2f7ce2c39077f6e246f5d7c904ec65d95790a4c60a55b25c89b80eca91b43d", 0x73}, {&(0x7f0000000d00)="14c44738eebf6dc2962aae37dcc488b0e6994017f1908b3564d5a3065a8c08c3c3bf56d505d5ba056a7e050a28d18aaa5b2ab7292ee08d55743615b88f1912f1202b8005bb9786ccffdc9996118b0d2226d9c043285ca8550aeba52853cfa7bd4c1ba633128a2eab67128df172fe2142d7a7de9fea2898e789f6cee6a660b5869938e1649451ad30de410092980802b24a8f01fc4f026cf5c8edc10385aebcfe25e42e6f78", 0xa5}, {&(0x7f0000004200)="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", 0x1000}, {&(0x7f0000000dc0)="a6693a8deae148988eb4b5ec16d5677709dc4f885c730aac868648e1c05733556b440224f3903f8b5bf25d7f13210c846cd5d7209ceb4a04d271a20150ee1ee86d293335640b555a0cf92b39ebe9ec9af4c9a8019c6173d300c30434", 0x5c}, {&(0x7f0000000b00)="17ca59ac04997c345323bc9212d69d01d3f43100fe392fc10e9996b27afe", 0x1e}, {&(0x7f0000000e40)="8cf05b2a47ed52ff1287c7cf820841226f40afd125f91fa24ceb4dcc8946a4ea1cd8af793196b014b303e3534067b89179bd428566fa0cd83e75c03e08c9dd70a17bb0e0638ccb0a094e7e3e915eda166c8c3e4efdf20d8663caa675a2b9e37c6a553677fe975444c9ee7779a5c738672646d1e0c1a607e9d32ac90a023d00e554226b7cdc58ebef3a53995d8f8dbbf4ce51d6dd5d6fa5b4bab5e033f42a83609d27e690c3b92f07d846fd544d3074a2d99e1d919a44c5ccb6248d406934", 0xbe}, {&(0x7f0000000f00)="46195245430d2b5ef56be8181d567cd86311ea177683be07838215091a3ab8226964027d90", 0x25}, {&(0x7f0000000f40)="cef667ea5c0eade40ae676264618f8a9751f51a41e831652147339b30932cc7451616f19beb90d49e951ff44645c951cd091678af2f2780a2489b65dee3bb3b8aadc59eaf9c540546a70d85cd042b1bee4945c73bc35bb1d4819c341b000238a197a383d7cbb9f7b636af89d4d5f9a237128ab61c23e2e3153cfcf773e1e848e444587c0ca6ef677271520b1098c70246252ece2876fae54d24e2c7a8318ac88e663b1935f6589496da219ad6f4dfb36ed184e02362251c2cd4450a62f88ef170c429d3db3477acbcddf6083c4c7c17a59fbfa907c319099bb734f835aa79bcbd45f6e9a4e4b8b19e9138b5edb", 0xed}, {&(0x7f0000001040)="a3b7061d117afce513f1fbcb600f1173bc6f98ea7191449571f1c075883c439a36b0b6bf1db179f2e72ed90666d174eb06f43372b0a2efec29341025fe0e053e1653b15e38a626377d1eb60a99bf698f47097d51768de742b3252517d1c13b76bcde597c0811909a006f09549123656d50f66bf9759029ed1e4653f203be99b93c9479aeb33b4790d78db1e6f04d7122ea40aab4a2e4ad6fe124f4c897e16b70dc10cecd65b58acf27a046b7621d407308b593539a19e86c9757b527865b562248246b7b70d00605fa4d05a5797a5649b42ca9acdc4c8edd011b4242b4b5ecb9be82e456202fb1cf0244ddf8d70990aff1d3a0", 0xf3}], 0x9, &(0x7f0000001200)=[@rights={{0x28, 0x1, 0x1, [r4, r4, r3, r7, r7, 0xffffffffffffffff]}}], 0x28, 0x50}}, {{&(0x7f0000001240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001480)=[{&(0x7f00000012c0)="2fdd7c6aed8822bce3bee48aaaa4dc3886c5744ab160ee4683f54a9a4266cf77449fadd3f3493a909cc6d118e9180a717fbc1c84e1a457214a9bbcb754621f050e893e97a61f508a8c484d8250bdb92a89d810d28023273e124a8c896f9e87fa07c63817216db177413f2d96c038e8d7c2696b8e5c33999737df6e329927f3b6638e6c80529a38d99688799d2846099dca547210b34674da0862ed9847a19a172cd45803b2fdbe93fbea207b6e601adf0803e1a5174847d5a54902f60623d64b8d15afe155deced00874f34e3e4ab88b18ec3634300ec040f9968ba33edfc0944b621b5515883af489f6cb", 0xeb}, {&(0x7f00000013c0)="f6b95789c9ea4fec47540132c1aa52eca7d62e650600aa6e01254042a3f37e91e6de8c22f63d018ef475d6bf94c478115bca2ad7977b3777d4ed9d1fd70e6ae8d76dccc710980f06d2a8aa8b2185873dd6133e", 0x53}, {&(0x7f0000001440)="021535e7a39ef4236dbf84cce122", 0xe}, {&(0x7f0000005200)="cb0c121e8809330220d187ec14f419c9661d971320967511fe783788b7178efa9c9e5d21954f4d659a71fedeaf50fcbd4ad791ede96f0b5ee87ea1308693cdfda8015b7827f059f5684592a1e834f52a3a959adc9b2bf5b2326d4e61eca89cbe6d6bc9113d84bdf8867517ef3d6aec8d51d141215ac3725d26b4e7d542eb8f33cfb635b252e3c2e2b47f15749f1ced212b554b5b1a347c1b098b6fe922480d4809331028f35f08", 0xa7}, {&(0x7f00000052c0)="f219644cf900c35244546bf6515c629951e7d6ee3fcd736f0480472f079c5983ff5c9d77a7c4e260cc6c57a9eaaac25a52fe5b2225b9705c97fc89cd93e1154839d0692d6853999cf2119b81537d4f56762b39bdb1fee0c0e583c88b92fe18aab4a95d8c45a2c987f0d10313b4d8de58574c605ea579b7ada18d5dbad8dce176bcd6358b0bd8352d3a24f2ae39656f0bf0bbfa3431a0146b222ca9a0c36e7dee8d2b6f1e3aed4e338ea3c5a94016ae92ce6ab2bbb4185278a7e568259b933a2d74149a04ca0970e4ac083fd445f5e15e38805bcbc62027e809218f8c5c9951dc187642c33d2a6b", 0xe7}], 0x5, 0x0, 0x0, 0x20000001}}], 0x4, 0x24004080) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x25, &(0x7f0000001500)={0x0, @in={{0x2, 0x4e22, @empty}}, 0xfffe}, 0x90) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20000840) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="070000000000000000000200000008002500000000000c00990001"], 0x28}}, 0x0) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x7) 6m54.754138905s ago: executing program 51 (id=1715): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a8001600040001", 0x37}], 0x1}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpgrp(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000280)={0x40000002}) r4 = syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r4, 0x7, r2, &(0x7f0000000180)={r3, 0xffffffffffffffff, 0x3}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006", 0x21}], 0x1}, 0x20000880) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe45) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x145a42, 0x0) sendfile(r6, r6, 0x0, 0x20003f) 6m53.637607792s ago: executing program 52 (id=1723): socket$kcm(0xa, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) pipe2(0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x47e8c3b29599b862) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e000a0010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 5m46.331077985s ago: executing program 53 (id=1977): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x14, 0x4) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x10, 0x9, @rand_addr=' \x01\x00', 0x8}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="c1", 0x1}], 0x1, 0x0, 0xfe80}}], 0x1, 0x200400c0) 5m33.839174616s ago: executing program 6 (id=2039): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000)=0x7, 0x4) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) 5m33.059310016s ago: executing program 0 (id=2042): r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x100) syz_usb_connect(0x5, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xb4, 0x0, 0x10, 0x20, 0x5f9, 0xffff, 0x345b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x77, 0x2, 0x1, 0x9f, 0x91, 0x46, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}]}}]}}]}}, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000100), 0x2, 0x20901) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000002300)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x0, 0x59565955, 0x8000140, 0x2000f0, 0x2, @stepwise={{0x203, 0x6}, {0x0, 0xb}, {0x80007ff, 0x81}}}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x200001, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0xfb0e, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}, 0x7ff}, 0x1c) 5m32.06608436s ago: executing program 6 (id=2044): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="019b1d35eb66c40f13002f"], 0x34}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000040), 0x1) (async) ioctl$COMEDI_SETWSUBD(r0, 0x6411) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, &(0x7f0000000f40)={0x5, 0x0, [{0x8000, 0x7, 0xfffff714, [0x9, 0x9, 0x1af, 0xb9a2, 0x1, 0x10, 0x8, 0x2]}, {0xfffff78a, 0x6, 0x9, [0x9f7, 0x3, 0x1, 0x0, 0x4, 0xf, 0x8, 0x200]}, {0x1ff, 0x9, 0x1ff, [0x94f, 0x1, 0x73e5d9cb, 0x9, 0x0, 0x9, 0xfffffff7, 0x400]}, {0x5, 0x7fffffff, 0xf, [0xbf, 0x100, 0x0, 0x10000, 0x8001, 0xca, 0x100, 0xf08b9bb]}, {0x2e, 0x3, 0x8, [0x8, 0x6, 0xb1, 0x7, 0x7, 0x0, 0x100, 0x4]}]}) (async) r5 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) r6 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) setns(r6, 0x0) (async) setreuid(0x0, 0xee00) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000100)={0x0, 0x8, 0xa4e}) 5m31.923365753s ago: executing program 6 (id=2045): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x28, r1, 0x201, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x28}, 0x1, 0xffc3, 0x0, 0x4004000}, 0x0) 5m31.75594328s ago: executing program 6 (id=2046): writev(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 5m31.589891628s ago: executing program 6 (id=2047): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000fd4500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="ad56a6c5", 0x56ad) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x3f, 0x32, 0x1c0, 0x0, 0x26f, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa}) 5m31.470871054s ago: executing program 0 (id=2048): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF(r1, 0x5457, &(0x7f0000000000)={0x0, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000001c0)={0x0, 0x101, 0xfffffc03, 0x400, 0x3, "54d208457f0b00"}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0xc008aeba, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000780)={0x40000000, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x2, 0x4, 0x1, 0x4, {0xa, 0x4e21, 0x6, @private2, 0xffffff01}}}, 0x3a) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040e06074b2003"], 0x9) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x98, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x6c, 0x3, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r10, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}], 0x1, 0x4000) shutdown(r10, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000080)) ioctl$KVM_GET_MSRS_cpu(r9, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x8b, 0x0, 0x67c7}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f0000000300)={0x2be6ed073ae11e49, 0x3, 0xa0000}, 0x20) sendmsg$inet(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmmsg(r11, &(0x7f00000033c0)=[{{&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f0000000340)=""/212, 0xd4}, {&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/254, 0xfe}, {&(0x7f0000000780)=""/203, 0xcb}, {&(0x7f0000000940)=""/180, 0xb4}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f00000002c0)=""/37, 0x25}, {&(0x7f0000000a00)=""/141, 0x8d}], 0xa}, 0xe0}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000000b80)=""/235, 0xeb}, {&(0x7f0000000c80)=""/170, 0xaa}, {&(0x7f0000000d40)=""/185, 0xb9}, {&(0x7f0000000880)}, {&(0x7f0000000e00)=""/133, 0x85}], 0x6}, 0x8}, {{&(0x7f0000000f40)=@generic, 0x80, &(0x7f0000001040)=[{&(0x7f0000000fc0)=""/116, 0x74}, {&(0x7f00000008c0)=""/62, 0x3e}], 0x2, &(0x7f0000001080)=""/104, 0x68}, 0x4}, {{&(0x7f0000001100)=@hci, 0x80, &(0x7f0000002640)=[{&(0x7f0000001180)=""/111, 0x6f}, {&(0x7f0000001200)=""/27, 0x1b}, {&(0x7f0000001240)=""/38, 0x26}, {&(0x7f0000001300)=""/103, 0x67}, {&(0x7f0000002400)=""/95, 0x5f}, {&(0x7f0000002480)=""/104, 0x68}, {&(0x7f0000001280)=""/10, 0xa}, {&(0x7f0000002500)=""/130, 0x82}, {&(0x7f00000025c0)=""/65, 0x41}], 0x9, &(0x7f0000002700)=""/223, 0xdf}, 0x3934000}, {{&(0x7f0000002800)=@ax25={{0x3, @rose}, [@remote, @default, @rose, @default, @bcast, @remote, @default, @rose]}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000002880)=""/232, 0xe8}, {&(0x7f0000001380)=""/46, 0x2e}, {&(0x7f0000002980)=""/141, 0x8d}, {&(0x7f0000002a40)=""/24, 0x18}, {&(0x7f0000002a80)=""/99, 0x63}], 0x5, &(0x7f0000002b80)=""/92, 0x5c}, 0x43}, {{&(0x7f0000002c00)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000003100)=[{&(0x7f0000002c80)=""/23, 0x17}, {&(0x7f0000002cc0)=""/86, 0x56}, {&(0x7f0000002d40)=""/129, 0x81}, {&(0x7f0000002e00)=""/250, 0xfa}, {&(0x7f0000002f00)=""/252, 0xfc}, {&(0x7f0000003000)=""/255, 0xff}], 0x6, &(0x7f0000003180)=""/39, 0x27}, 0x7}, {{&(0x7f00000031c0)=@rc, 0x80, &(0x7f0000003280)=[{&(0x7f0000003240)=""/14, 0xe}], 0x1, &(0x7f00000032c0)=""/202, 0xca}, 0x9}], 0x7, 0x0, &(0x7f0000003580)) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000040)={0xa000005, 0xf, &(0x7f0000000180)=[0x138b, 0xa, 0x20f909, 0x204005, 0x20006, 0x5, 0x7, 0x5, 0xfffffe01, 0x50, 0xd, 0x204, 0x88, 0x4, 0x2], 0x80000000, 0x4000007}) 5m31.226606065s ago: executing program 6 (id=2050): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) (async) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) (async) r4 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) (async) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xfdff) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="780000001a0001002abd7000000000000a"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9, 0x3}) (async) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9, 0x3}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x4, 0x0, &(0x7f0000000080)={r5, r6+60000000}, &(0x7f00000000c0)) 5m30.938762397s ago: executing program 54 (id=2050): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) (async) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) (async) r4 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) (async) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xfdff) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="780000001a0001002abd7000000000000a"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9, 0x3}) (async) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9, 0x3}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x4, 0x0, &(0x7f0000000080)={r5, r6+60000000}, &(0x7f00000000c0)) 5m30.408106409s ago: executing program 0 (id=2054): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2c, 0x700, &(0x7f0000000600)="878b7cdfd4455cf49da7ba6f280ae012ce80389a2aefe4fd04084554d7015aba5330d1b817d6c08af29938b8"}) 5m30.270900423s ago: executing program 0 (id=2055): writev(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 5m30.235716214s ago: executing program 0 (id=2056): syz_usb_connect(0x3, 0x42, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x7e, 0xbd, 0x6f, 0x8, 0x19d2, 0x1136, 0x204c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9c, 0x0, 0x0, 0xff, 0xff, 0xff, 0xfe, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "95"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x81, 0x3c0, 0x2a, 0x6}, {0x6, 0x24, 0x1a, 0x4, 0x1e}}]}}]}}]}}, 0x0) 5m29.080149326s ago: executing program 0 (id=2062): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) syz_usb_connect(0x2ff8d30ba93b19c2, 0x8c6, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100800201020824050503"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 5m28.537743116s ago: executing program 55 (id=2062): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) syz_usb_connect(0x2ff8d30ba93b19c2, 0x8c6, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100800201020824050503"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 4m51.308647115s ago: executing program 8 (id=2229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c697000140007800800084000002f5408000640"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xa00000000000000) 4m51.169184931s ago: executing program 8 (id=2231): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="a40000003a002902000000000000000002"], 0xa4}}, 0x8000) r1 = timerfd_create(0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r2, 0x1) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @loopback, 0x1}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0xfffdfff1, @empty, 0x2}, 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000006b40)={0x0, 0x0}) recvmmsg(r2, &(0x7f00000068c0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000240)=""/28, 0x1c}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/1, 0x1}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/242, 0xf2}, {&(0x7f00000014c0)=""/236, 0xec}], 0x6, &(0x7f0000001640)=""/149, 0x95}, 0xb}, {{&(0x7f0000001700)=@l2, 0x80, &(0x7f0000002d80)=[{&(0x7f0000001780)=""/107, 0x6b}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/239, 0xef}, {&(0x7f0000002900)=""/219, 0xdb}, {&(0x7f0000002a00)=""/73, 0x49}, {&(0x7f0000002a80)=""/234, 0xea}, {&(0x7f0000002b80)=""/198, 0xc6}, {&(0x7f0000002c80)=""/241, 0xf1}], 0x8, &(0x7f0000002e00)=""/40, 0x28}, 0x7}, {{&(0x7f0000002e40)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000005300)=[{&(0x7f0000002ec0)=""/92, 0x5c}, {&(0x7f0000002f40)=""/247, 0xf7}, {&(0x7f0000003040)=""/9, 0x9}, {&(0x7f0000003080)=""/105, 0x69}, {&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000004100)=""/4096, 0x1000}, {&(0x7f0000005100)=""/75, 0x4b}, {&(0x7f0000005180)=""/35, 0x23}, {&(0x7f00000051c0)=""/175, 0xaf}, {&(0x7f0000005280)=""/99, 0x63}], 0xa, &(0x7f00000053c0)=""/229, 0xe5}, 0x7}, {{&(0x7f00000054c0)=@can, 0x80, &(0x7f0000005840)=[{&(0x7f0000005540)=""/86, 0x56}, {&(0x7f00000055c0)=""/131, 0x83}, {&(0x7f0000005680)=""/121, 0x79}, {&(0x7f0000005700)=""/57, 0x39}, {&(0x7f0000005740)=""/242, 0xf2}], 0x5, &(0x7f00000058c0)=""/239, 0xef}, 0x2}, {{&(0x7f00000059c0)=@phonet, 0x80, &(0x7f0000005b00)=[{&(0x7f0000005a40)=""/129, 0x81}], 0x1, &(0x7f0000005b40)=""/5, 0x5}}, {{&(0x7f0000005b80)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000005c00), 0x0, &(0x7f0000005c40)=""/248, 0xf8}, 0xfffffff8}, {{&(0x7f0000005d40)=@caif=@dbg, 0x80, &(0x7f00000061c0)=[{&(0x7f0000005dc0)=""/226, 0xe2}, {&(0x7f0000005ec0)=""/212, 0xd4}, {&(0x7f0000005fc0)=""/61, 0x3d}, {&(0x7f0000006000)=""/219, 0xdb}, {&(0x7f0000006100)=""/192, 0xc0}], 0x5, &(0x7f0000006240)=""/102, 0x66}, 0xa}, {{0x0, 0x0, &(0x7f0000006400)=[{&(0x7f00000062c0)=""/49, 0x31}, {&(0x7f0000006300)=""/245, 0xf5}], 0x2, &(0x7f0000006440)=""/117, 0x75}, 0x3ff}, {{&(0x7f00000064c0)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f00000065c0)=[{&(0x7f0000006540)=""/79, 0x4f}], 0x1, &(0x7f0000006600)=""/12, 0xc}, 0x9}, {{&(0x7f0000006640)=@generic, 0x80, &(0x7f0000006800)=[{&(0x7f00000066c0)=""/42, 0x2a}, {&(0x7f0000006700)=""/232, 0xe8}], 0x2, &(0x7f0000006840)=""/76, 0x4c}, 0x800}], 0xa, 0x40000000, &(0x7f0000006b80)={r4, r5+60000000}) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) futex(&(0x7f0000000000)=0x2, 0x4, 0x2, &(0x7f00000001c0)={r7, r8+10000000}, &(0x7f0000000200)=0x1, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x7) ioctl$KVM_GET_VCPU_EVENTS(r9, 0x4140aecd, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000040), 0x0) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0xfffffffffffffff9]}, 0x8) 4m50.155298053s ago: executing program 8 (id=2233): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0xfe33) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000004700)=""/4097, 0x1001}, {&(0x7f0000003700)=""/4063, 0xfdf}, {&(0x7f0000000780)=""/4137, 0x1029}, {&(0x7f0000000200)=""/107, 0x6b}, {&(0x7f0000000580)=""/218, 0xda}], 0x5}, 0x120) 4m49.287449851s ago: executing program 8 (id=2239): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000021c0)='./file4\x00', 0x80040, 0x2) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000004300)={0x44, &(0x7f0000003e80)=ANY=[@ANYBLOB="001700200000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x1c8) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x400, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = getegid() r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002040)={'tunl0\x00', &(0x7f0000002200)={'ip_vti0\x00', 0x0, 0x20, 0x7800, 0xda, 0x4, {{0x24, 0x4, 0x0, 0x2, 0x90, 0x67, 0x0, 0x5f, 0x4, 0x0, @empty, @rand_addr=0x64010100, {[@generic={0x94, 0x7, "f1618d1fb1"}, @lsrr={0x83, 0x13, 0x4b, [@private=0xa010102, @multicast1, @empty, @broadcast]}, @timestamp_addr={0x44, 0x3c, 0xf, 0x1, 0x0, [{@loopback, 0xd}, {@empty, 0x8000}, {@rand_addr=0x64010102, 0x34c14f7c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@broadcast, 0x9}, {@multicast1, 0x6}, {@local, 0xb90}]}, @lsrr={0x83, 0x23, 0x62, [@multicast1, @broadcast, @local, @rand_addr=0x64010101, @broadcast, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x3a}]}, @generic={0x82, 0x2}]}}}}}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000022c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @mcast1, 0x7fffffff, 0x100, 0x6, 0x500, 0x1, 0x1900241, r5}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) write$FUSE_INIT(r4, &(0x7f0000004300)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0x1400001, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000000000)="03684a7b99a4fde940f3ec0d105ea2c8267323117153aa4a4f099c3835a607cd5cbd77b83cc33d13bbb6c6bcae59db739af84a4b5d34bffc145f3cc27ed3d4f9d9b3103699a1e1cc4ddfb6c1afd07ddfc18e358cd62649479724ce867fefc0a15041bee9f6084842fb982d5c2cf1488d668b741c64f0a6fd2643e729ac5a56462a6b64d5a0a751fda4fadf63ba0dc2fd14ecbf546918db77095545b41ab170e5d6e8ec8bf9ce9b8d53b832e90c701fe52af7999f8fd509577ead1be27891c1c9c65d8e151c58ddee43ec34e74d330ec50cbbb2bb21892c7ca995066e3cbea8a69d94dc6bcef5f3c0ef630e774d092ea58627f3e09c66a9c7d1abcf4f8f8af87f4269df288aca9bbf758275ce9695256e764d185a91a7570fca3aab16c75ecaff6b8dda371c3226d6ec6e55c5c4d8cfc5c33892bacc956a3613bcfa849da1b5e070a7911d7488b3e628d9339718e8b821f1bb5d5c45f0316bb563d0a442801412dfd5a4d61ca657e04d6686f7d5863d57954400aeee8e79be8f3cc4cbb3d4b91269df039c3d3543e500b90a2bdc6eb60cc7afab7b5187d88fbd76e6212ea29e872b73f925287bd8808b4a4f8ec7f8aa08bc90b29e217c3eef69d8deae4141f4f9bd110b7bde9320e7b45f422e9a6111bcaf99c9911e46e219d3bab477926bd5d2e78d4cd0eca133c232b1e863fd7799dbf609f3670b323e5518e8f4bd36e9b3da2c68a28eaec9cac688b4dd0b73adc24a8c7acc264399b7facbc2f43e8e40b6cae9f8e956d1dbfe259f12bae75ad362c354050ffdd6e954f2d7615fafce888bd6f672a81c9fd4318caba765069c0a425e898bf7611b77f0fe61c27d318159dba42f011900246c64557d27b77aef928ab04a147baca37863cf998a2ac30b903c0314449ddb218887c309ec7184c8c733f5d4e7b2d79516e9531c9a5becf8294d6ccd777f284b13160e1c949d3069c6c66c0daa62bac679bc9b69825398d1c290d765e882fa2c8708b20ccec885ab6785dc22696b61c109ff84bc5407932c3e5bf12069a68b8e3333a26d3dd390ef9bc01b86013fbcb5c28a1f4d2b8084f1502fccc4027a124c3629d8f4a8befd14b597cebda5f94f36050a31b95087cbac347788a71a90e87f2187fae600aa42719c05c2859cb30ae0fd58a7bba681f7a6027a00583071def2c9a94456e5d9acb9fd2d11fdea524582489c02377bf7f590948985c769b3822cb6366681d79113c6a6c752f2475caba77b7b2e8f293d7fd9b991f63e254c98dec94f4f3def4fee9cdb56ff3ba7fe6a718cbe9a7f04710e257ea8a49d6605266048fc122d4f3173d4b04b3e282bd3c5198d7fcb72ec38e0b07dd8a541b2807e601e5a0a01f07a281e0e1a261c65977088a54597efd0997c59647aeebb2605a89705eeff3ec780e302e24b23a0cbe4f81367c3f118545f01328d22eb8e802667389143166a9db9477c9b58eb5c76a19b8f8b2692b0d356003f08ae54dfc820d8e357ecbf91fb7e212cbef1262171abaf2f613a5bb59b783cad476fec50d16ca0ac13c08a59a3097e6e3fde700a4b987d10311fc22d4aa210956cd859799f78010e4c0f25b715876aa253df15009490f71be3b0022875161f537c70b14bdb9e2d87a5a11b414a1198533c7de6fc4d22228133bc26b19d9f1e7627b14c72e3c39d3fa2186a42e50a0d1867dc312f94c7209d51475ed4aa80b2ccb0557a40422bf7317de2fdf3296727723a2d23babd5e23f7c3edf4942bb485b95a122e6aba41b8f80f684f84605462448d5a4fd66dfe9bbf80590b9999b4780d4f4f189a20f4400b2975df85b584c8c8f9fa3095f13aede1f52dac98be358b0a0d72bed4df71cd23973e326179580268c4e5d1be4b2ae2e1e2dba913998faa6088af128fc8fd3ae26203a898882b67d86d63f6ee8f8e216337330db6d928facf9d0ca273845ee5b33a0a136aeb48b7c52d3b95fe73efaf06197ec8753ee0349f19db8730917d0f18a2de9602d3b887bc583ff64dfee67e2bdf4d5cc1c341b89acd3dd5176d2c15ec2a77120b8a49591ca438ae36c52845e5dca550e539da9ba2a2eda49be316f3d6d4b7c83666bd4759940347c29dedd273adac722630a940e104316b4806553ded47132be4e31a50600f5a4dd56825b245b7aae853f56f79e0ec31f7b5db945ee3bb92865acb0d8828598e77446ee50ecd8bf5e7ccbd963445a09e3be215709b0b3bff2e9d12e6549924338f236b4ff973682e2e03fbf6b167e3b3a0f8c3f3c1e8d0e21a71937c918cabab50dd74c011a1a5531cfcf88a5df5fa58f17715f7c7b3a64d9dab6f20a596288969191420ed71daccbae7c1ec88bf74811b5e1f4bd306f3d810c4f3600df2903ffdf8db40ac7153fd93327a1065cf2c4590c8ba9f9391eb6aa600cb42aff8793e4721afeb3d470beda45dad9adfc6f4fdb24eafc63792f5015c656ca37cee82b7ee382bda31d786d6e03d4c8611c4ca464e2360ca747815c9eebd38c8fc7d5eea2db96b29d771a96dc5c884029077125bcc31980564555d21ecce5d0388e1bc1e618c7dfb31b02b1a6730db7eda387dd4ceb96f65178bb088e81133e5086f73c458f84139685ef930945a51979faeab539e4964244709dcb8b38f575d3a3ec1328a0df65fb34241db7cb3250b8ae0dbc44670d2b5cc3a1785d8d281c05256ef2beee3b202d8bce053e55ce1fb2bb208e65d488ae24484b00c2e343fc3544ca546406688022db6e29ceca9539ec095a2a2cfc5f516230f75fc961c5de1e8d33222331f57db02cac5f9208029c6114d041bb1cc7f959f77511f5790a564600c018afc253e5ecd5010bd769b45a04296ca09e87fb63bf3d3b51dd8b3f6d4426a03c0944d09dff654c5718ab1fef063caba34029be6811502e8bb785011dd1e34b0c192915adeeb40faad0725a8f9a62acf61b944a271d20567f350cdee22d76e3cc5966ba742d9c43823af19ba74c60da0df0c5f4e7e26af7224147774a1f8ae09f929066e1769ffb3c40ba9fed13d2670b9e865a155426ed5c83648c0ad34e46f5308b455e0835730fe529668b606f3f52b0d04534d0e14bc0ff0f742359550e6980ac9978455adb3de0f292af12a3700453e035a49eafe98fc0d7f26e42a6c41f380448607b7c96291f98fa6bbd7e32c249a49171f8fa81762a490a1ce5c39d66d35c6ed6c0679440c06197c2e24d48e1de81c711164c02820816afb5393d3d6c801c3c062ac46d1494f52c45ca36faf94894eec9d71e1be6c7256f4aee8dc080156b28623c821ef8d1826ebf0a41332620f42589270e142561374c825e828e2bd9ae41fd34959db48319d54ffe7a1b58ae8f7361cbaee8e26e0e7e1b7f125f8cd99788825efd01c38ec987904190a0ad52bc20cd36cc7209f9269ac87b2fa44d2456661d3056d893cf912c69ae6b2b83d0c781a6d6c33df1910867b71257ab74e244e3ebbac07445069418fe2e440a384e16feedf8e3165676e67866430eb6a8a5334620d8c2cda15b0328bb0c50630886353f95241cf4f3b647a4ff812c70e1b074c4befdc70fbfdbf868bcc81652034b5bfa831f1b686724046dcd17ac91ace83711e9ec7465d14c9d508bce93676a58ef7dae37221436865ad34ac2fd691e3b3e12aee6736dbdeec9b1c05fcedf8b9ced547259a1a40471ebe8b4bfda69d2f884da025e2809fb9f159150bbcb331ca3c502012a7fe76b4fc2771976aeb624ad7f2d72c707f5f19d8ded84581ac5afa697ff99d27d88c9588fe769839c9cc9d6786a0f814667527c53b6253b1825bfe17e7d734d96d61da0ae7349d0922774fa9b4baf332a4568e32cafa417ec659c4ad72cd656a1e2c59c8dee38890ed3acd8b4f8657de41f670106c38c38ba1a553f0f589a57c61f5105d70e0c0953459383cb9337ca972cda1d2cd3056eb07f21c1f5b995a04997fecf501bb201c67fd2afe4d44fedea595969b6b3706087b0f59d2ddbb099d60436a94f0ba33282b29f6e914fe92add4b33cf70b680b905cfa2b2ccb00b9967f99806e8d69783fd35a2d7fbb424e9fde2647609aecb0208bc3864bf95f05e50ba12123edaca8de927b338dfcb3cc597947c606c08315061a7fec98c48f480e2febd26fcc8dc12289aeb0adefa2c2be1766a5bc74ef1aab6c2cdbdfbf1810d956bc889c8e614b7b933ff6e336bb208db5b592775fe71c3ebfad5f47e0d074e1c0cb36761481ec677794f23c3698bd35875719f242e3fc939bc3668f9723f31effe189dabdf4ebbed073eab952c88f13059eee22230bc7724d7266b15726a0b0898cdd274e3e56d0a356166b5d16456249e9e92e84e39f61c0ecdf99ec2cd230440c03fd21cf68f27306628d35ea47367775f39d20a07f3959b38d49e3674061fc1018b647047ad39f77027878badd29927c5806f95aebde5f070fed28ed34052550678d3c6b677a3b5a46f76a98264c42206bf62caa95df5437092b68e025ee9ce2ad733b6db3ec97fd33cdc3b2f77ee90dd86d8bd289ae1a437c86f4153ddcff5e846347bfecc1499bb42980e4fa91790faee1b1991dfead5d7c460348631f0469b2b9e8f65207a00985511e0c41f441d9a3154f5a0298c172fd7135d4bf95c11cdf1769db1cc55f392aec309037599327a7c53c10a56d1ace8ad19186a2fc75dfa9d657c114eae99c1c1a6b4a58440718bea82290bd1c2a67048938c381648ea2b2c7110d748c9c8d782f20430b1427b51d7036e55b0997c6f75717db67a82c88d3647ee036b49392f0467d6010b32f9de3e5e79ef082c5bb975d11d2bf76a97f7159c11a7753db8a065d3126ccda9abbebd2c54374e389942c24b27435868fadb45bb060d3c1084b211e2afa8dfaa2d8dab8dc47fe10e6c32afece7c4976176a7c66d704125c0948c238c843b41b0246be1f50f8e07884cfe7ae8885ca06339a339c8d5978b079e0eb78facfa1dc67ca70733dfefc6c868ca149e0661b70e0134870a3107c8c46711fed14f892d6fc66d95306838688f13b19e904416a8d161cc33527878b38ad10b1c08db21457b2075608be7300d39748e4fcebe02b190f3e8ed32a0ef734b11ca43a21f5f809bba795f5aa0ea01050021d0f5213620af5b08fda6421a42b7c82804a20a6ef6d471babf76f46538327f943476d1d109a3f0dc531233d6f93d8dc27f4745735085f92adf63d617b373fba24f289035710e69eb80da12d36e8eaec22620ffaabadfb824bd5fc309a2c74959505856b5b890bba8f22bc571a9d87e93ba3b9aba6dcf26f7076c0c2e271641835ea25fd49d96c69d4fb8bb8731bd2cbc75146aed10d269f9060462339cde8830b535920be3dbf143eace0f1ea9469b95a64fbd7e5057eb880d4422cbf97cfc3f7140251d4923580ca2113f345cf24a66499ceffd2e39dc4fd74cf448638962957b409f0d218c165c13ffe107aa1dd1d9a02092cd46cf2b353dd2d2ca7b8a7ae8eda0ee18bba269bbffed0c7d400497aee4da0896cf6329d76ccea098fbef9075412d1c2a3644cf0f202b884303d204314ae92c56217b2feb5e7c1e15a99fbdd655fb8f6bbc3ab1259bf03b2ee17c5b7e9443695177ec5040eeff3fc36ceafe143393d76a3d735cfe6c9b632e52dbe64dc1265961e8a27ee9f76c0add9e0581e474d7678214f5b64c932903715befc6b766611f1d7e495573b9a3e009cfcb0ffef7ac57c3561badbfa41c119e541180aa2364de61a601699cd1bf3de01d15794b728e1444efd6ffa1e57d95489c8df91fbc057b66dd6d9f3a01b19f36bc99f0b54ed1f9905067dd1608bce47f5ff1981a25184aacd39e331d8ff3dfa7c012d7e667a69249cb4803b23f7eeaab8ed29c69ba3d2a1b88821ffefc5825650c53b6364f38e0a178312f5d29d5375423cceabc8e1c4e51a566ba3f9b176b858c8860440ff8ebdde725640d2dff6b9160bb69f188755b0ff766b410704cda4c33e1ae2c73b5799a00d2f55de73109728b350302b64df2ce3eaf2e0c6561009b60c2701ac493076305e97ed20c3b42f40b2bc7f13bba4ab8181e2085b07930c6f5579205dff696902be824e65ddc774e886e8d261fe74712a31e406b0f7725b4559d7ad0f27a1a870261aa5bb8a720e7c89ba933770d48821416de070df1abcc6eee1147c20bda090d940aeee2bd48c0f3d94675d9b9cf1a62ba50e31a7af0714dd8325d5fb7142e88c4d22ddb8f0278ee6ba88e361524e291b6d000f6523ad4188b021da9ef4a634ed09eb2002b9c726746c9ffc32f261edb448106aa1e2daaed865255fd1d296fedbbb2de3f7c1f15935e52006492b632ad125aa1e000c9d71bdb945792668e16b26122a3fd7cba1a40db8083068c5c48fd2aaa621c87d9f5621bba442fc26839030dbe4e37fda4046d6503bb03e0f928de25d4cd4e2a40ec93c9021dfcbb25f6e2c943cc85eba8123340d6364949581e8c8c2913d59dafe4297672c0b9e7418485f00cbcf672a588904beb3c074bebf339815b91c7c374ceed5a701e1ade8f5d87ca536120116307ac259577a8e12958425317c482d2c7089bf3d83e12318d1526107a050f3c094492de7255b22e18ca2ff261b3ed197f2f8e67b71b1c5a6a04b99158b58e9baad75201aabe13254617d0de0a9073af62491c67fc18d1ccbf7686a85a99b39e9d7d9c85a0777e47c9fd0e10c932c20f13ef287b44b9b706ec818aa0c48a10caac58a9b8355e84bc820698c2501f0c12e1b67df701cfcbe72dc47a2c87d43753ebfdb24cc838507e241d9fcd3d4955a373209ccda903a3ffced05e4232f2cca9bba197fdba8a9357cb1d6da6d9b4095027dc03e17d59ebc2d358e171da0044df102b193c79390ebcb58023b40c621df71e064b0056bfcf1eaee1eca85357cd1ac78feaa54bbbd85596977ba85003ea60d8685f4e3b756e4f81453077396590fa214f672929e81569442023667b798c24e06ee20dbf64cfccb51b2bca4e2a5b0df137bb37ab3e2854dc7e1b879866a72a5809b563596cc9fd3e53abdbccfd5dbc60662252ddc5c290d72230d79b7504b40fdb45ded2f02e926652c1e04ea4c1c488025ad1098adeebe98e385ab1caec4b9eb4d3bbd5ef3ddf1fd0d72784604a989558fd37f6d4fee20609090b3331e254fec98414a2c54589ee01c9429b7cb574b9167efede1d966a227bf2a8e422f38680d77d3c555cf1117e7d7e804ad730c36a78b7846473d6481bd0839bd3e6982ed47246c370a90b76e5b88de202346fb20b8b6b5ecb6a90b8478d17b175a1821df75b48ecc34866fe5c8960bf64d5ff92831bb9357474bec65e0dd1699b0f0340ee5ac5e9e9d3df66edca20201371fc21ad80aacd49c6b0abcfee9c876c15edcfccde823b55b61cb7b254487ff8c8781a22043f4adaf25df34580a6b3904fd014b50c59fa90eff75fa5fd32aaec9aa10df8a2b9b824952e475c964533942bbe30f4167a11fc15d548e0a31f911030569722f0c67e79e90483f6f0bee1c7f80face1a1b0f940c891be688cb16394f6c07fd29b5f248c211d1f76ec1292755d8bd963e191b3a8851472fbbd2cb732f4fd9fef3a8fb29aea097328173fdeaf56fa2279e86fb954306b040c960d0b601b3a741c96cf1f0bd1172f848585cb3b57d7d2e2a84914526f5a6f9895cf5aa4425b4dbf9f59037756a0321bba204a737e36277e86fd268f6047921f4f8fab69dfee137c07874f12f89084e7117e2c9221690a27f880f17d08d56f9dbc96ffef3920b55fb773dde72e1ba35f3e0c9872e339508281426ab04941df4885f7e0293149f1642c2573e2b6594b8fd953ae2468cf917cdaa0692cf461e3628860935def39af78af5e1540147ab1c70c3ab7f7c76abea0d8541feb43e632d7a2cc7bef15a4700304048ecf135968d0a9644ce899aad05b186a2224bab3836248cc6137472203ebceb29b3e87610df12417ee722f309c54b2e65591d8b929440f3ec43ee9ff8f7b7710668e4312610d1591303d5270394da0ab61e4515af5215dc81137f0dc90f951972731f8d98ceb8b4ea38da7d8dc153ccbae5068781eaf9a4a7b11b4319090261b61aa65a8536292eb5392020eb285b2db07f81e7f764d65037050f1e3748593474c6c1dc11cfcb56e1c916157280098a437265e1c682cbfed717e7275bc6c3bb6c6ef7f0f9fdd19ef82ff2c82284c3a061f57b21d3705aff97710108a7d1217a7ea3feda021d20f1fdca94bbef67e0aeaa3db6ccc2d060f7b33707fe19cb2d0232f1239373bb38e666cbbbf3a697c6d0e957ec6730f56034440e789a7a37304d09eb742f21019a77c608cf578162a55d0aea113c051b110b5281ed8b6638d2b31604e965cb019f2f106bc4e96d1313c70612f1ff18afdce7926270dd242c49cc53792f160d1e143e04d7eb3ca40828b153fac466bc53a084281987b47b806a4ef668859eb9035ef68e9c20bd6bb790fdf6f921569b4e97fae5b7edc761b4944c1d6d90f4df40bc3203ed838d4c61cdeb7a9bbb68d59b2cc00125eecaf06b759ac1b9dd68028225d0a60efa499e4436962362727011eef6cc55962dd4ffe2fd3892907e837045883cc9ba8892ab265a31924f3055d4dee68feff05d9f10ebdf1e8c1c1e7001b5b02a7fe26b9c0641e054ae37854187fb1bb6e9fae05b09e85a1e0e14bc801f2d8b9a178a9a72b147e137e0d83192664a88a3aca4fb6a4f0c5787b20c31bc5975dfbc8bcff8987573bd14b1ca434d93452e67ed01c60be99e535bb3f848888d224520b61cfc1de2d6b2ebef9f24674c31aada52784a0b7b60f351653c71d546cf951e6b4a0d917ac6afd0a713f41833f9f74a3a7d3c19b523299666da2b48676ca7aafebadef05b3bbf4b6b62834046f51d3d4582fb4c9de27a3f5e992853368e4f17f9dba27c8c4438307fc7405f53fb27cc81c1521452a1a5edb0cabdf7a73b1cab0675b619fd5a0fadb7147776e74695c042d9d8bfda045bcef7542b42249f34c7590605d0201a762390f2fee5f3cdb488426609c663c9fc4dc2a5277f3f589a14e6dcc202dfcd89bb148a368ff1792d230c19934143d2c260dbdfb334af863b856e415febd22fba01c568d8f48dba6d92f493cd1164a376f006d55db609cc2c9532a9f56da3b06e3db2a05f797eed57892e2fb677541324bcd763cf4669e7a871e322d0cc6e21befe3c767976f058dbe7a059d673c94c7ac5d49178bf19d32907b6fe66a92cc8ea30a858da43f74354390d6e97021da50812c59a78915e5b33221531bfa054c594ce3a2300e5a7d712773181901dfcf6922e980566fa62b1f2b669a27fbecce29e9be6d22058463e350163f33d18ce92a72d1b470857b6a37998aec5672521a8f0d66ab2bd01de516036ec47d1f63b95b437dc6d5a0168189d5a963cb0a80a9a5f20b03515396e3525f0ab13b0c1e5dd051b4c930da6d57ab6f7dd94ab3e689e0355af0b34871296152a76cce170d7b14d471ee4d9daa93de4ed755f30d45344f724288c17e4b22583158f1305ff55fecf7d526e207fa609886e14c9a168bf364b049409f63590f18a5515de8c1fd8c5a9710b6e33d2ecd01466b799f14be787612b8f17df0c05483a16097c0a504880249e28f1e067663c640a550a8c7ad9d090f7b2e902c5c20936869a5f3d3a014817f90babf847b43cf67ec23f120ae4abc63a418d1d99f359fc2c33a5bb34e1f5780576111a88c5ede834bc41e498548ddd128f9e884f4cd3e1bf1aaa1204079ce74e709306f38f2d6859128fc35d3a74c534ff1dccadfc8fe41f1be9510349af8710eb6d2dbc758be12b65622dad1cf48abc2fc409f5ed6a3af8d0b6548643c46dfba9db4e5827475e6e317c9c018a4dd5de391cc9cca85ec527537e26949e5091baca4f0b563d4c3969f15115e5ccdeb9e40788fe12f9d32d9488a70ae53b819726e4483ea6bbcb76f99775ca5e4f93c76edae462c08d596209f985aa55ef5e786701edcee8d831dd6dc0fee9ad01b6bdd63e886a5e55bdc593390c81e18dfd8c685b81306bad6b7a19a86b2bab5cbf4754708422e99f8f2497d798b3db565e709bcbba4c376c1c60b22b994fe8fdcb25215d505511cc1927f6a35344023d5da0a3ac0830e6aa80f5f7f0d94a67c99c6b22717078aecba2a599daa2acc054cda25e3965172e5fef464ec19aa71de5e84b6de30cc673fbab8c441ea37bfb3fc321a504371bc0996702e9be38db762e339ad7ad66dc2caa887e4ab60272d7963f85b14c941d31e545b85c640427302efe7142f0e0897a8c623ce57da213fbc2d1f90677142fd48cafca0b2934e572833ed6473218d0513dd1f6ecc578e5a1109ddae552b3be0cfe7246d7682a59fe9ae783a0f318d1800d5c466c80c5fd3facd0340f455f081068dd2cda5cda744018d902217152b6c05d37c090f8348b0471053152c2a4570fbab3f6dc30c8e49a63b88a00b3aac75180a633692e35ea976821694e133eb8bb4d31237d002fce1dd2ce55528dafcef2f0e00690562d144bb0e19576ce6ab72deac22067d8edac916b1b07e4eb57ff0b885b1b79f37dcf88135eedc17ffd948b61e4df4985033bcf891dd5b1448c8668947a271d93d03ce31216810a6bb45a6c5a12e290d97a60ad4b5c7384cf19421ac1ca64d346b50771e0b50e5caf1d9dfe056e8da247aa502ff04c8e29ca810a1d3ec7a89bc17dba2936f03a80228171f7999b3f2768617970efe57b14011c80666ac4999a568ebef74e2ca14df0ff6f0fcd47c538be96aaca1e65b53b98447101e49672b48167c0afc1afffe669b0f9718bd3305805c292db9738740b362564e4691cbdf061db1ed3f9db1f8bed82939f835d14f46818e3eb4e25f7a8d77d9d0d7913c45d8a81115c1a5e37b1d3bd1b7b5e6afaaefc81d9700bf83506fbf15457bc0f59f7008cc803efdcb6d39e388f6b28e80d47134265cc5438804b12d50e61a489da829dca05792d2ac182ba747331e88a7118f7dd38067f7d38f37be362260effacbc33863bb47aeebbadeae648a1090718266eedd2ed5a2c23f168759198aa92b2ac45c2a68ff212f29260e641a38541b066d39df4e95cd1c8e7e6ffae1b8017e6f629db3910b07496c8a81e4e66ac2321fd9e7ebfecf5bf6e922d7a79fb710a2d42dad1916c9b186c2c50c818fdb1afa19be867d943ee98f732fe3a01364281c0f6d0eb64a278721dc7bff5316256b0f4251abbd9b8ba7c7c12a3bf02a1fbc9ca94b965588fbc82343d07df8e06eaa5ed2137fec129351d80a9048a7d78b31ffaf2e388864a763c4af7aa53000e0bb2eb8ac0e4272cbb79dc6a7d65890f125c523c7cfddacdedbe87938aca915c92c807dab26be7d748827d4e3188676312ef1ac8460b29e8e715f4075e33104ce82e6785aadf17a7cf82d2a705e9f2d0fd25810ba33d76e54b48eda3effc01f37c89db38af81922fadc8c3361fe74ed51eac5e4437108106ffdedb339b406c082d62a8bf718989846d23f966e1ea39103010f767b3a6f0a0a2041b1dafcb787e69ffad75ed2a0081b92a4136ad5ae557c55a4b6219a390103428181ab36f329ad182a92957495c00", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1ffffffffffff, 0xe5, 0xfffffff7, {0x1, 0x9, 0x1, 0x1, 0x5, 0x4, 0x8, 0x123, 0x3, 0xa000, 0x0, 0x0, r7, 0x6, 0x2000ffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getegid() setresgid(r3, r7, r8) chdir(&(0x7f00000001c0)='./bus\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) 4m46.252492784s ago: executing program 8 (id=2250): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x400, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) (fail_nth: 7) 4m45.83926932s ago: executing program 8 (id=2251): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './cgroup\x00'}) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, r1}}, {@noextend}]}}) 4m30.794803089s ago: executing program 56 (id=2251): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './cgroup\x00'}) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, r1}}, {@noextend}]}}) 4m20.375909589s ago: executing program 7 (id=2378): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, 0x0, 0x120) 4m20.364984416s ago: executing program 7 (id=2379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000000)=0x5) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000180)={@val={0x70, 0x806}, @void, @eth={@broadcast, @remote, @void, {@llc={0x4, {@llc={0xbc, 0xd4, "0e", "3123692205f6ec39dcdcb967edaf50b0174c68fbfa755d7f4b63dbe7d36406c19c5ebe3ab2882821bdd3d886a3b035ed4f46d1d595436f21ec24163bb23d80e7efb0b0f6312f946379c94294ea"}}}}}}, 0x62) 4m20.214054336s ago: executing program 7 (id=2380): r0 = memfd_secret(0x80000) accept4$unix(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x4e5102dc8fc02b91) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) io_pgetevents(0x0, 0x8, 0x0, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x8]}, 0x64}) (async) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0xc0010007, 0x0, 0x9}]}) 4m20.035167858s ago: executing program 7 (id=2381): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0xfffd, 0x200000000000000) 4m19.999884112s ago: executing program 7 (id=2383): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535e7976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fee30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac0b000000733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa36097a5015ad61a6a9484c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52ab50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc409541aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d7e083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc020b7dd5750062c9810c4bc1ad7afe338f2b0f29059e684fe16098eb30da105be01ca11a293635dfc6d25ecc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472785521147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f0041022522ec76476f0a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8c0df4bd40be3400c58f149319f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b3600000000000000000000000000000000000000000000000000000000000000000600"}) ioctl$KVM_RUN(r2, 0xae80, 0x20000000) 4m19.68095324s ago: executing program 7 (id=2385): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d75a3d00010880100000000000000000000000000000000ff0200000000000000000000000000014e211b59001090"], 0x4a) 4m19.554137617s ago: executing program 57 (id=2385): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d75a3d00010880100000000000000000000000000000000ff0200000000000000000000000000014e211b59001090"], 0x4a) 3m20.172763071s ago: executing program 9 (id=2752): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{0x6, 0x2}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x39000, 0x0) splice(r3, 0x0, r0, 0x0, 0x8000, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x109000) ioctl$DRM_IOCTL_GEM_OPEN(r5, 0xc010640b, &(0x7f0000000080)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000000)={0x0, 0xab, 0xc8f6}) write$binfmt_elf64(r2, &(0x7f0000000200)=ANY=[], 0xfffffe3e) r7 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x80000) ioctl$CEC_ADAP_G_LOG_ADDRS(r7, 0x805c6103, &(0x7f0000000140)) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r8, &(0x7f00000017c0)=[{{&(0x7f0000000200)={0xa, 0x4e33, 0xbaf, @loopback, 0x7ffffff}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000001200)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000080)}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback}}}, 0x84) 3m19.251240941s ago: executing program 9 (id=2759): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f700003d996ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 3m19.111154798s ago: executing program 9 (id=2761): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') fchdir(r0) (async) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000040)={0x5, 0xa}) (async) exit(0xffff) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201410117512920570509201ec70102030109022400010200100009045807028ab53800090506020001000006090582020002"], 0x0) (async, rerun: 32) r3 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 32) getsockopt(r3, 0x28, 0x1, &(0x7f0000001680)=""/54, &(0x7f0000000000)=0x36) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_open_dev$vbi(&(0x7f00000000c0), 0x1, 0x2) (async) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$printer(r2, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) (async, rerun: 64) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x11a, 0x4, 0x0, 0x0) (rerun: 64) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 3m19.078534939s ago: executing program 9 (id=2762): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0xfffd, 0x400000000000000) 3m18.955064875s ago: executing program 9 (id=2764): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'aio_aio12_8\x00', [0x8001, 0x6, 0x1, 0xffffffff, 0x0, 0xcc7, 0x8, 0x7, 0xe, 0x2, 0x6, 0x1, 0x8, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000001, 0x89, 0x2, 0xf2b, 0x6, 0xc, 0x8, 0x8, 0x8, 0x4, 0x1ae, 0xfffffff5]}) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4) 3m18.62360648s ago: executing program 9 (id=2767): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) r2 = open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x80c42, 0x1d0) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000401, 0xee01, 0x0) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000002640)=0x7fff, 0x4) syz_usb_control_io$hid(r3, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x11, {[@local=@item_012={0x0, 0x2, 0x9}, @local=@item_4={0x3, 0x2, 0xa, "9d4c0b64"}, @local=@item_4={0x3, 0x2, 0x0, "af982f32"}, @local=@item_4={0x3, 0x2, 0x2, "2faba62e"}, @local=@item_012={0x0, 0x2, 0x4}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x3, 0x1, {0x22, 0xc21}}}}, &(0x7f00000005c0)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x3, 0x1, 0x4}}) socket$inet6(0xa, 0x2, 0x0) syz_usb_control_io(r3, 0x0, 0x0) 3m18.462789857s ago: executing program 58 (id=2767): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) r2 = open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x80c42, 0x1d0) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000401, 0xee01, 0x0) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000002640)=0x7fff, 0x4) syz_usb_control_io$hid(r3, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x11, {[@local=@item_012={0x0, 0x2, 0x9}, @local=@item_4={0x3, 0x2, 0xa, "9d4c0b64"}, @local=@item_4={0x3, 0x2, 0x0, "af982f32"}, @local=@item_4={0x3, 0x2, 0x2, "2faba62e"}, @local=@item_012={0x0, 0x2, 0x4}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x3, 0x1, {0x22, 0xc21}}}}, &(0x7f00000005c0)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x3, 0x1, 0x4}}) socket$inet6(0xa, 0x2, 0x0) syz_usb_control_io(r3, 0x0, 0x0) 50.522431334s ago: executing program 1 (id=3535): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)=ANY=[@ANYBLOB="407c01000000e4"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000380)={0x20, 0x14, 0x2, "bc27"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x0, 0x0, 0xfc, {0xfc, 0x6, "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"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x438}}}, &(0x7f0000000680)={0x44, &(0x7f00000004c0)={0x40, 0x12, 0xe2, "49234a03f169ccc8429d17678b62fb62a0e7c3c96acd170ecb156f8e9523c8f58f1512727222920d0e5b507103bcc239a5aa7c819d6108817b2472c989764b407a06b07dfedb1635a53138e74813e0a8cff012017541d66defbe5dd267bf1c4dfaecf6ac7d6551ccbcf062213866bb4267b81e14579af4aae82a21565723cbff11e3e01191a6aa29bb846dc97d4962ab58e1bcf00c2d9a18de7af19a8e3bf071191f907047a2a50ef88e560321f4e5f968b214961c5facf238f505c925812d08c43d15d9dfb8cf96ff66a9c40df46602be83a93b9b80795ab5339f13a702119aae35"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xf6}, &(0x7f0000000340)={0x20, 0x81, 0x1, '\''}, &(0x7f00000003c0)={0x20, 0x82, 0x2, "ec2f"}, &(0x7f0000000400)={0x20, 0x83, 0x2, "e23f"}, &(0x7f0000000440)={0x20, 0x84, 0x2, "0165"}, &(0x7f0000000600)={0x20, 0x85, 0x3, "bf4401"}}) 47.682934894s ago: executing program 1 (id=3549): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="080086dd000128000486dd03a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) 47.410175686s ago: executing program 1 (id=3550): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) (async) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f041}) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) 47.409800147s ago: executing program 1 (id=3551): writev(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904"], 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x1c, r2, 0x321, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0) mount$bind(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x51a7800, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 44.019252791s ago: executing program 1 (id=3557): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000001018610f4205ae06d01000000000000000003010000000904690223d4780c99844068d1cbd5766d0000000000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 43.295263845s ago: executing program 1 (id=3561): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010701700ff000000000001090224000100000000090400000103000000090800000003350500090581000000"], 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, &(0x7f0000000040)) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x89, @empty, 0xffffffff}], 0x1c) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e09200000000000010902240001000000000904000901030001000921050000012205000905810300"], 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r4, 0x5608) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000100)={0x0, 0x9, 0x8, 0xe216, 0x6, "44000100000400"}) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="d69104000000805afdb9"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022050000004dbaf7ff0100000000"], 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022050000004dbaf7ff0100000000"], 0x0}, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000140)=0xa4b, 0x4) 43.09312334s ago: executing program 59 (id=3561): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010701700ff000000000001090224000100000000090400000103000000090800000003350500090581000000"], 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, &(0x7f0000000040)) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x89, @empty, 0xffffffff}], 0x1c) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e09200000000000010902240001000000000904000901030001000921050000012205000905810300"], 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r4, 0x5608) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000100)={0x0, 0x9, 0x8, 0xe216, 0x6, "44000100000400"}) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="d69104000000805afdb9"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022050000004dbaf7ff0100000000"], 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022050000004dbaf7ff0100000000"], 0x0}, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000140)=0xa4b, 0x4) 9.397462589s ago: executing program 2 (id=3709): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fbdbdf250700000008000300", @ANYRES32=r4, @ANYBLOB="140004006361696630000000000000000000000008000500060000000c001780040005"], 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r3, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x2e}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xdc}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x263}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040001}, 0x40085) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x40000002, 0x0) 9.299143773s ago: executing program 2 (id=3710): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b30, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000240)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x20, 0x1, 0xd, {0xd, 0x23, "0e06ab4541de34bd66951c"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3801}}}, &(0x7f00000006c0)={0x34, &(0x7f0000000480)={0x20, 0x17, 0x9a, "ac4c62560a17b75313ddc6a9a5acec6bac31915b13bdebb00db48858fbba107c2f1d5724f06fbab1fbe6def71d25f9cf37871705003b093aa7454e4244f9f30a6f3d584490bdb9c221d7e68d1cf7de8afa6c91ea38ac9651c746fceec883192134708d35789a8fed289f9c36a6f50e139a6cdbef19a19376bd7558c97c4d750ee5b7f91184380dc07969b0d3fbbd4e3c2892cac59968a44c1cac"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xf1}, &(0x7f00000005c0)={0xc0, 0xa1, 0x4, 0x7fff}, &(0x7f0000000600)={0x40, 0xa0, 0x4, 0xe70}, &(0x7f0000000640)={0xc0, 0xa2, 0x2f, "4cbaec331b76f0bef54458871156f95ade672f28d6dd29464d58a4f606011e04832893183f99953d5345f19e144bf0"}}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 6.291876597s ago: executing program 2 (id=3736): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x60000000}, 0x20000800) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x90, r2, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x44, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac}, 0x0, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x3, 0x8}}, @void, @val={0x3c, 0x4, {0x1, 0x7, 0x3c, 0x2}}, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x18, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xd, 0x2, "46948957988ef6aa74"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x90}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) syz_usb_connect(0x5, 0x4d, &(0x7f0000000000)=ANY=[@ANYRES64], 0x0) 4.929463042s ago: executing program 3 (id=3737): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) 4.84775421s ago: executing program 4 (id=3738): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x3f00, 0x18, 0x2, {0x0, 0x1}, {0x0, 0xfffffffd, 0xfffffffe}, {0x3f8d419, 0x7b86}, {0x1000800}, 0x0, 0x3f0, 0x2000000, 0xd613, 0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2}) 4.793289368s ago: executing program 4 (id=3739): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xd, 0x43}]}, 0x10) listen(r0, 0x5) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r4 = syz_pidfd_open(r3, 0x0) pidfd_send_signal(r4, 0x2, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendto$inet6(r5, &(0x7f0000000040)="c49751936c4a9af2ee0283d5cb9f092671197ab206efc20d10346df8914bae6b73118f43", 0x24, 0xc0, 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x406, r0) sendmsg$ETHTOOL_MSG_WOL_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000540)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x81) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r8, 0x541c, &(0x7f00000001c0)) ioctl$TIOCNOTTY(r8, 0x5422) 4.790769094s ago: executing program 3 (id=3740): r0 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r3, 0x2, {0x2, 0xff, 0x3}, 0xff}, 0x18) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) listen(r6, 0x78a2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001a40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)={0x2e4, r8, 0x400, 0x70bd25, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}, @WGDEVICE_A_PEERS={0x274, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x80}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x10c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x25a6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2271589d265a20d232ab6b378c6a6f7293d94e1436bc7a62ef48f3625e39b130"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x100}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x43}}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1d}}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}]}, {0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "05af7890d92b67c2c950202e23611723ff0dc6ae0d0213ea5d2dc399109729b4"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7759c2be57de04b35d97bf07517b4d99d12ecd165198ebe74ed08909db5a6d5d"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fb0379682f232da82af3cc00f56f8d7084e2d4b48747a73beb3cebec3d3d3fc0"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "46f270b27c6fa383c8e88558d5e624c2f1cc3341e8c40fba5d064ad4e4501c2e"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_FLAGS={0x8}]}, 0x2e4}}, 0x8810) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r11) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f0000000980)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xd0, r12, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xaf0}, {0xc, 0x90, 0x81}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x77}, {0xc, 0x90, 0x9}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4}, 0x28008800) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000002200)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_MPP(r7, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x68, r10, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x68}}, 0x24044000) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000009c0), r2) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r13, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r13, 0x3ba0, &(0x7f0000000440)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0xf6391c0fa9b4f841}) 4.644203354s ago: executing program 4 (id=3741): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000002410055810700000000000109023a39a9630e9da60f0400032d030002000921000033012205001005810300000809076b4e0400000000000000a572a8197ed57cf66bd0e65ca44a87e2e36147948d525f9e033ae686e805c5ddbbaaa010442dcfac4b09"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="200b050000000506a5551145a0d288b8de7af3f565d31ad8cdae0cafbff4108f67711cee026f9f061517"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x44044) 4.249997457s ago: executing program 5 (id=3744): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b30, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000240)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x20, 0x1, 0xd, {0xd, 0x23, "0e06ab4541de34bd66951c"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3801}}}, &(0x7f00000006c0)={0x34, &(0x7f0000000480)={0x20, 0x17, 0x9a, "ac4c62560a17b75313ddc6a9a5acec6bac31915b13bdebb00db48858fbba107c2f1d5724f06fbab1fbe6def71d25f9cf37871705003b093aa7454e4244f9f30a6f3d584490bdb9c221d7e68d1cf7de8afa6c91ea38ac9651c746fceec883192134708d35789a8fed289f9c36a6f50e139a6cdbef19a19376bd7558c97c4d750ee5b7f91184380dc07969b0d3fbbd4e3c2892cac59968a44c1cac"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xf1}, &(0x7f00000005c0)={0xc0, 0xa1, 0x4, 0x7fff}, &(0x7f0000000600)={0x40, 0xa0, 0x4, 0xe70}, &(0x7f0000000640)={0xc0, 0xa2, 0x2f, "4cbaec331b76f0bef54458871156f95ade672f28d6dd29464d58a4f606011e04832893183f99953d5345f19e144bf0"}}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 3.926285028s ago: executing program 3 (id=3745): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x149}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f0000000100)={[0x200000000000000]}, 0x8) 3.187671802s ago: executing program 2 (id=3746): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x1, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)=ANY=[@ANYBLOB="407c01000000e4"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000380)={0x20, 0x14, 0x2, "bc27"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x0, 0x0, 0xfc, {0xfc, 0x6, "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"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x438}}}, &(0x7f0000000680)={0x44, &(0x7f00000004c0)={0x40, 0x12, 0xe2, "49234a03f169ccc8429d17678b62fb62a0e7c3c96acd170ecb156f8e9523c8f58f1512727222920d0e5b507103bcc239a5aa7c819d6108817b2472c989764b407a06b07dfedb1635a53138e74813e0a8cff012017541d66defbe5dd267bf1c4dfaecf6ac7d6551ccbcf062213866bb4267b81e14579af4aae82a21565723cbff11e3e01191a6aa29bb846dc97d4962ab58e1bcf00c2d9a18de7af19a8e3bf071191f907047a2a50ef88e560321f4e5f968b214961c5facf238f505c925812d08c43d15d9dfb8cf96ff66a9c40df46602be83a93b9b80795ab5339f13a702119aae35"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xf6}, &(0x7f0000000340)={0x20, 0x81, 0x1, '\''}, &(0x7f00000003c0)={0x20, 0x82, 0x2, "ec2f"}, &(0x7f0000000400)={0x20, 0x83, 0x2, "e23f"}, &(0x7f0000000440)={0x20, 0x84, 0x2, "0165"}, &(0x7f0000000600)={0x20, 0x85, 0x3, "bf4401"}}) 2.419479247s ago: executing program 3 (id=3747): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, &(0x7f0000001580)="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", 0x5c4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000380)={0x1, 0x0, [{0xc0000102, 0x0, 0x103}]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000001c0)=0xf) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$TCFLSH(r7, 0x400455c8, 0x4) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000100)=0x2) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000400)=0x7) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000080)=0x2) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000580)=0xfc) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x10a, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/52, 0x34, 0x2, 0x32}, @fda={0x66646185, 0x8, 0x0, 0x1d}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0xc8, 0x0, &(0x7f00000003c0)="9c473d975540e759a1f5003a42b59c44b61f6aa774b13a4b9c15461bbe1cf42b3a117bed005db85fe4869dce90beb0e1aac9430f923f9e53aab2dd7a63f04784520688c58b16ae5454c3968ce6ee596dffce99d2bb013374898dd453559dbb7d8133ac9896ac2fc9b8eac0ea898d8f2ef14f2e6703104b58d0eb8e1e328a2a417737f8b9c156d88aecd47c8c36eacab16cefb93e48e9e800ab2662ca0da29843f28370e0ba99bc420ea93692ea400fd398b78afaceb5d6ab596de7bde0aaacb8d39ad1e3bd266625"}) r8 = dup3(r1, r5, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r8, 0x6, 0x15, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x14, 0x0, &(0x7f0000001380)) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x8000) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x2}, &(0x7f00000000c0)=0xc) mount(&(0x7f0000000580)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000380)='gfs2\x00', 0x280083b, &(0x7f0000000340)='norecovery') 1.605873527s ago: executing program 4 (id=3748): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000004540)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x301, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x20}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) 1.515100922s ago: executing program 4 (id=3749): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) (async) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r4, 0x3ba0, &(0x7f0000000000)={0x48, 0x3, 0x0, 0x0, 0x3ff, 0x0, 0x0}) (async) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r4, 0x3ba0, &(0x7f0000000000)={0x48, 0x3, 0x0, 0x0, 0x3ff, 0x0, 0x0}) write$vga_arbiter(r3, &(0x7f00000002c0)=@other={'decodes', ' ', 'mem'}, 0xc) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000080)=0x4) (async) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f0000000200)={0x7, &(0x7f0000000140)=[{0xfff, 0x7, 0x1, 0x7}, {0xfd, 0x1, 0xe8, 0x2}, {0x1, 0x2, 0x0, 0xfffffffe}, {0xca, 0x1, 0x8, 0x800}, {0x82b4, 0x20, 0xfb}, {0x6, 0x1, 0x5, 0x4}, {0x1, 0xff, 0xa6, 0x6}]}) (async) ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f0000000200)={0x7, &(0x7f0000000140)=[{0xfff, 0x7, 0x1, 0x7}, {0xfd, 0x1, 0xe8, 0x2}, {0x1, 0x2, 0x0, 0xfffffffe}, {0xca, 0x1, 0x8, 0x800}, {0x82b4, 0x20, 0xfb}, {0x6, 0x1, 0x5, 0x4}, {0x1, 0xff, 0xa6, 0x6}]}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000180)) (async) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000180)) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x0, 0xf1, 0x9, 0x3}, {0x1, 0x2, 0x9d, 0x7fffffff}, {0x14, 0x4, 0x7, 0x7f}, {0xc09e, 0x81, 0x5, 0x7}, {0x1, 0x6, 0x7f, 0x3}]}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r10 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x0, 0xa, 0x4, 0x40000004, 0x0, @mcast1, @empty, 0x90, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd70001000ee3c9bed000008000300", @ANYRES32=r8, @ANYBLOB="0c00238006000a00000000000400cc"], 0x2c}, 0x1, 0x0, 0x0, 0x44001}, 0x40000) 1.444726563s ago: executing program 4 (id=3750): openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8080) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, 0x0, 0x4000010) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)='H', 0x1}], 0x1) socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(0xffffffffffffffff, 0x0, 0x0) write$nci(r0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="6105810d0003800e010005080281c6588d39e67df7486e0b8ea100a71f080000000000000006b47e4ceaac8f098842f5cd3c4b88364cfcba0ca0be376757cbcaf92a2cfdfbd59cff9f3135bdbcbf383259efdb92b6b47a551048ec368d2f0070ed13f7cefe17f243b448fbb50acecad9d73fdc09c5162dca8ace45b904807fdb185d9cd26440d690029aa789177d906feffa53d4e4711628a72671545741e9ec1eafe78e377663"], 0xd5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000003c0)=ANY=[], 0x38}}, 0x0) 1.183399529s ago: executing program 5 (id=3751): syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) 1.095331737s ago: executing program 5 (id=3752): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="2e00000a10008188040f80ec59acbc0413a18100310000000220fff0000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x20040040) 1.095101648s ago: executing program 5 (id=3753): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100fff50000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a30"], 0x50}}, 0x0) 1.05176857s ago: executing program 5 (id=3754): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800, 0x20}) 1.011004451s ago: executing program 5 (id=3755): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x149}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f0000000100)={[0x200000000000000]}, 0x8) 203.174664ms ago: executing program 3 (id=3756): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) sendmsg$inet6(r0, &(0x7f0000002c00)={&(0x7f0000000040)={0xa, 0x4e21, 0x5, @private2}, 0x1c, &(0x7f0000002980)=[{&(0x7f0000000700)="85", 0x1}], 0x1, 0x0, 0x0, 0x1100}, 0x200000c0) 202.84777ms ago: executing program 3 (id=3757): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async, rerun: 64) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, &(0x7f0000000200)) (async, rerun: 64) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) (async, rerun: 64) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x22, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x400940, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x3, r4}) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 163.593257ms ago: executing program 2 (id=3758): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x442, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x5, 0x0, 0xd000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x3f, 0x30, 0x0, 0x0) 0s ago: executing program 2 (id=3759): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000240)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x20, 0x1, 0xd, {0xd, 0x23, "0e06ab4541de34bd66951c"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3801}}}, &(0x7f00000006c0)={0x34, &(0x7f0000000480)={0x20, 0x17, 0x9a, "ac4c62560a17b75313ddc6a9a5acec6bac31915b13bdebb00db48858fbba107c2f1d5724f06fbab1fbe6def71d25f9cf37871705003b093aa7454e4244f9f30a6f3d584490bdb9c221d7e68d1cf7de8afa6c91ea38ac9651c746fceec883192134708d35789a8fed289f9c36a6f50e139a6cdbef19a19376bd7558c97c4d750ee5b7f91184380dc07969b0d3fbbd4e3c2892cac59968a44c1cac"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xf1}, &(0x7f00000005c0)={0xc0, 0xa1, 0x4, 0x7fff}, &(0x7f0000000600)={0x40, 0xa0, 0x4, 0xe70}, &(0x7f0000000640)={0xc0, 0xa2, 0x2f, "4cbaec331b76f0bef54458871156f95ade672f28d6dd29464d58a4f606011e04832893183f99953d5345f19e144bf0"}}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): to read register index 0x00000098. ret = -EPIPE [ 711.405733][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 711.417852][T22589] dns_resolver: Unsupported content type (240) [ 711.441565][ T946] usb 3-1: USB disconnect, device number 89 [ 711.480716][ T9] usb 6-1: USB disconnect, device number 81 [ 711.500237][T22593] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3392'. [ 711.585892][T16071] vp7045: USB control message 'out' went wrong. [ 711.593688][T16071] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 711.604198][T16071] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 711.618900][T16071] usb 2-1: USB disconnect, device number 46 [ 711.823193][ T946] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 711.840475][T22586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.849350][T22586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.977833][ T946] usb 3-1: config 0 has an invalid interface number: 210 but max is 0 [ 711.986243][ T946] usb 3-1: config 0 has no interface number 0 [ 711.992339][ T946] usb 3-1: config 0 interface 210 has no altsetting 0 [ 712.002809][ T946] usb 3-1: New USB device found, idVendor=06e1, idProduct=0709, bcdDevice= 2.04 [ 712.012024][ T946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.020173][ T946] usb 3-1: Product: syz [ 712.024510][ T946] usb 3-1: Manufacturer: syz [ 712.029137][ T946] usb 3-1: SerialNumber: syz [ 712.040324][ T946] usb 3-1: config 0 descriptor?? [ 712.271207][ T946] go7007 3-1:0.210: probe with driver go7007 failed with error -12 [ 712.284803][ T946] usb 3-1: USB disconnect, device number 90 [ 712.413553][ T9] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 712.551879][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 712.576675][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 712.580718][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 712.586925][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 712.613549][ T9] usb 2-1: config 0 has no interfaces? [ 712.619195][ T9] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 712.628767][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.650183][ T9] usb 2-1: config 0 descriptor?? [ 712.651271][ T24] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 712.678975][ T24] usb 4-1: USB disconnect, device number 24 [ 712.861684][T22601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.877180][T22601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.890582][ T24] usb 2-1: USB disconnect, device number 47 [ 713.243240][ T24] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 713.423193][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 713.430143][ T24] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 713.459985][ T24] usb 3-1: config 0 has no interface number 0 [ 713.479224][ T24] usb 3-1: config 0 interface 12 has no altsetting 0 [ 713.505846][ T24] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 713.521659][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.544477][ T24] usb 3-1: Product: syz [ 713.548685][ T24] usb 3-1: Manufacturer: syz [ 713.570905][ T24] usb 3-1: SerialNumber: syz [ 713.585018][ T24] usb 3-1: config 0 descriptor?? [ 713.696102][T22633] netlink: 'syz.5.3407': attribute type 11 has an invalid length. [ 713.753616][ T9] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 713.915672][ T9] usb 2-1: config 2 has an invalid interface number: 201 but max is 0 [ 713.927345][ T9] usb 2-1: config 2 has no interface number 0 [ 713.938564][ T9] usb 2-1: config 2 interface 201 has no altsetting 0 [ 713.950658][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=c712, bcdDevice=9d.92 [ 713.962527][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.971129][ T9] usb 2-1: Product: syz [ 713.975640][ T9] usb 2-1: Manufacturer: syz [ 713.980272][ T9] usb 2-1: SerialNumber: syz [ 714.008690][T22641] openvswitch: netlink: Tunnel attr 255 out of range max 16 [ 714.191752][T22624] syzkaller1: entered promiscuous mode [ 714.197883][T22624] syzkaller1: entered allmulticast mode [ 714.227687][ T9] usb 2-1: USB disconnect, device number 48 [ 714.553320][ T946] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 714.727185][ T946] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 714.736463][ T946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.744516][ T946] usb 6-1: Product: syz [ 714.748725][ T946] usb 6-1: Manufacturer: syz [ 714.756187][ T946] usb 6-1: SerialNumber: syz [ 714.814449][ T24] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 714.822027][ T24] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 714.830473][ T24] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 714.844321][ T24] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 714.863511][ T24] usb 3-1: USB disconnect, device number 91 [ 714.887953][T22651] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 714.894027][T16071] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 714.954570][T22653] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3414'. [ 714.964722][T22653] nbd: must specify at least one socket [ 714.975973][T22654] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3414'. [ 714.985074][T22654] nbd: must specify at least one socket [ 715.063553][T16071] usb 4-1: Using ep0 maxpacket: 32 [ 715.075210][T16071] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 715.096556][T16071] usb 4-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=58.d6 [ 715.115994][T16071] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.124308][T16071] usb 4-1: Product: syz [ 715.130755][T16071] usb 4-1: Manufacturer: syz [ 715.135472][T16071] usb 4-1: SerialNumber: syz [ 715.144079][T16071] usb 4-1: config 0 descriptor?? [ 715.159208][T16071] snd_usb_variax 4-1:0.0: Line 6 Variax Workbench found [ 715.168269][T16071] usb 4-1: selecting invalid altsetting 1 [ 715.177880][ T946] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 715.189962][T16071] snd_usb_variax 4-1:0.0: set_interface failed [ 715.196451][T16071] snd_usb_variax 4-1:0.0: Line 6 Variax Workbench now disconnected [ 715.204450][ T946] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 715.215451][T16071] snd_usb_variax 4-1:0.0: probe with driver snd_usb_variax failed with error -22 [ 715.258004][T22664] netlink: 'syz.1.3417': attribute type 1 has an invalid length. [ 715.265963][T22664] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3417'. [ 715.276759][T22664] netlink: 'syz.1.3417': attribute type 1 has an invalid length. [ 715.284554][T22664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3417'. [ 715.353238][T22649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.369830][T22649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.382748][T16071] usb 4-1: USB disconnect, device number 25 [ 715.513598][T22673] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3420'. [ 715.773274][T16071] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 715.913520][T16071] usb 2-1: device descriptor read/64, error -71 [ 716.163213][T16071] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 716.303297][ T7385] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 716.313300][T16071] usb 2-1: device descriptor read/64, error -71 [ 716.356413][ T5913] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 716.434197][T16071] usb usb2-port1: attempt power cycle [ 716.453259][ T7385] usb 3-1: Using ep0 maxpacket: 32 [ 716.463516][ T7385] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 716.472588][ T7385] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.480711][ T7385] usb 3-1: Product: syz [ 716.484927][ T7385] usb 3-1: Manufacturer: syz [ 716.489505][ T7385] usb 3-1: SerialNumber: syz [ 716.496484][ T7385] usb 3-1: config 0 descriptor?? [ 716.508817][ T7385] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 716.517367][ T7385] dvb-usb: bulk message failed: -22 (4/0) [ 716.523100][ T7385] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 716.523269][ T5913] usb 4-1: Using ep0 maxpacket: 16 [ 716.533463][ T7385] dvb-usb: bulk message failed: -22 (5/0) [ 716.544759][ T7385] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 716.547203][ T5913] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 716.566576][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.568129][ T7385] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 716.574630][ T5913] usb 4-1: Product: syz [ 716.574648][ T5913] usb 4-1: Manufacturer: syz [ 716.574663][ T5913] usb 4-1: SerialNumber: syz [ 716.599230][ T7385] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 716.607994][ T7385] usb 3-1: media controller created [ 716.624400][ T7385] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 716.641183][ T946] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 716.650783][ T7385] usb 3-1: selecting invalid altsetting 3 [ 716.653917][ T946] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 716.660952][ T7385] ttusb2: set interface to alts=3 failed [ 716.672924][ T946] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 716.690681][ T946] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 716.706754][T22679] dvb-usb: bulk message failed: -22 (8/0) [ 716.716867][T22679] ttusb2: there might have been an error during control message transfer. (rlen = 4, was 0) [ 716.723517][ T7385] DVB: Unable to find symbol tda10086_attach() [ 716.727858][ T946] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 716.734675][ T7385] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 716.742475][T22679] ttusb2: i2c transfer failed. [ 716.752476][ T7385] dvb-usb: bulk message failed: -22 (4/0) [ 716.765678][ T7385] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 716.778884][ T7385] dvb-usb: bulk message failed: -22 (5/0) [ 716.784240][T16071] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 716.784891][ T7385] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 716.795252][ T946] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 716.803000][ T7385] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 716.826532][ T5913] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 716.831550][ T7385] usb 3-1: USB disconnect, device number 92 [ 716.843556][T16071] usb 2-1: device descriptor read/8, error -71 [ 716.859154][ T946] usb 6-1: USB disconnect, device number 82 [ 716.884546][ T5913] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 716.899798][ T5913] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 716.909082][ T5913] usb 4-1: media controller created [ 716.937561][ T5913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 716.961857][ T7385] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 717.029145][ T5913] zl10353_read_register: readreg error (reg=127, ret==-71) [ 717.057799][ T5913] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 717.072366][ T5913] usb 4-1: USB disconnect, device number 26 [ 717.113238][T16071] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 717.134253][T16071] usb 2-1: device descriptor read/8, error -71 [ 717.254312][T16071] usb usb2-port1: unable to enumerate USB device [ 717.503293][T18301] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 717.574349][T16071] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 717.633213][T18301] usb 6-1: device descriptor read/64, error -71 [ 717.733441][T16071] usb 3-1: Using ep0 maxpacket: 32 [ 717.740259][T16071] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 717.748642][T16071] usb 3-1: config 0 has no interface number 0 [ 717.754788][T16071] usb 3-1: config 0 interface 12 has no altsetting 0 [ 717.763022][T16071] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 717.772128][T16071] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.780166][T16071] usb 3-1: Product: syz [ 717.784366][T16071] usb 3-1: Manufacturer: syz [ 717.788951][T16071] usb 3-1: SerialNumber: syz [ 717.796138][T16071] usb 3-1: config 0 descriptor?? [ 717.803251][ T7385] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 717.875329][T18301] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 717.958530][ T7385] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 717.967744][ T7385] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.975940][ T7385] usb 4-1: Product: syz [ 717.980240][ T7385] usb 4-1: Manufacturer: syz [ 717.984906][ T7385] usb 4-1: SerialNumber: syz [ 718.013309][T18301] usb 6-1: device descriptor read/64, error -71 [ 718.124832][T18301] usb usb6-port1: attempt power cycle [ 718.399908][ T7385] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 718.412273][ T7385] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 718.463257][T18301] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 718.483869][T18301] usb 6-1: device descriptor read/8, error -71 [ 718.723286][T18301] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 718.743860][T18301] usb 6-1: device descriptor read/8, error -71 [ 718.853454][T18301] usb usb6-port1: unable to enumerate USB device [ 718.943309][ T946] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 719.024451][T16071] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 719.031987][T16071] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 719.039327][T16071] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 719.047016][T16071] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 719.060273][T16071] usb 3-1: USB disconnect, device number 93 [ 719.095240][ T946] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 719.107277][ T946] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 719.120412][ T946] usb 2-1: config 0 interface 0 has no altsetting 0 [ 719.127125][ T946] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 719.136195][ T946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.146511][ T946] usb 2-1: config 0 descriptor?? [ 719.648235][ T946] uclogic 0003:5543:0781.0036: item fetching failed at offset 4/5 [ 719.660333][ T946] uclogic 0003:5543:0781.0036: parse failed [ 719.666471][ T946] uclogic 0003:5543:0781.0036: probe with driver uclogic failed with error -22 [ 719.813254][ T9] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 719.877035][T22691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.897593][T22691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.007920][ T9] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 720.017259][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.043291][ T9] usb 3-1: Product: syz [ 720.047575][ T9] usb 3-1: Manufacturer: syz [ 720.052196][ T9] usb 3-1: SerialNumber: syz [ 720.074757][ T9] usb 3-1: config 0 descriptor?? [ 720.299800][T22695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.314986][T22695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.344525][ T9] hso 3-1:0.0: Can't find BULK IN endpoint [ 720.374843][ T9] usb-storage 3-1:0.0: USB Mass Storage device detected [ 720.541943][T22695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.554033][T22695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.576885][ T9] usb 3-1: USB disconnect, device number 94 [ 720.624663][ T946] usb 6-1: new full-speed USB device number 87 using dummy_hcd [ 720.671468][T22704] syzkaller1: entered promiscuous mode [ 720.682732][T22704] syzkaller1: entered allmulticast mode [ 720.785211][ T946] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.796612][ T946] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 720.826123][ T946] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 720.849830][ T946] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 720.872865][ T946] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 720.896172][ T946] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 720.905763][ T946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 720.920047][ T946] usb 6-1: Product: syz [ 720.925623][ T946] usb 6-1: Manufacturer: syz [ 720.930489][ T946] usb 6-1: SerialNumber: syz [ 720.942844][ T946] usb 6-1: config 0 descriptor?? [ 721.177360][ T946] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 721.195679][ T946] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 721.382285][T22700] input: syz1 as /devices/virtual/input/input98 [ 721.403254][T22700] input: failed to attach handler leds to device input98, error: -6 [ 721.431534][ T946] radio-si470x 6-1:0.0: software version 0, hardware version 0 [ 721.456347][ T946] radio-si470x 6-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 721.472900][ T946] radio-si470x 6-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 721.582878][T22717] netlink: 'syz.3.3437': attribute type 10 has an invalid length. [ 721.595329][ T7385] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 721.632430][ T7385] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 721.642219][ T946] radio-si470x 6-1:0.0: submitting int urb failed (-90) [ 721.652573][ T7385] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 721.706125][ T7385] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 721.731913][ T7385] usb 4-1: USB disconnect, device number 27 [ 721.739713][ T5913] usb 2-1: USB disconnect, device number 53 [ 721.793795][T16071] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 721.967291][T16071] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.984439][T16071] usb 3-1: config 0 has no interfaces? [ 721.990712][T16071] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 722.001333][T16071] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.013580][T16071] usb 3-1: config 0 descriptor?? [ 722.053255][ T7385] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 722.203312][ T7385] usb 4-1: Using ep0 maxpacket: 32 [ 722.210457][ T7385] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 722.218669][ T7385] usb 4-1: config 0 has no interface number 0 [ 722.224836][ T7385] usb 4-1: config 0 interface 12 has no altsetting 0 [ 722.226069][T22716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.233624][ T7385] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 722.247720][T22716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.251260][ T7385] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.265758][ T7385] usb 4-1: Product: syz [ 722.267818][ T5913] usb 3-1: USB disconnect, device number 95 [ 722.269923][ T7385] usb 4-1: Manufacturer: syz [ 722.269939][ T7385] usb 4-1: SerialNumber: syz [ 722.280264][ T7385] usb 4-1: config 0 descriptor?? [ 722.413345][T16071] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 722.573265][T16071] usb 2-1: Using ep0 maxpacket: 32 [ 722.580435][T16071] usb 2-1: config 0 interface 0 has no altsetting 0 [ 722.589465][T16071] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 722.598750][T16071] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.606872][T16071] usb 2-1: Product: syz [ 722.611119][T16071] usb 2-1: Manufacturer: syz [ 722.615767][T16071] usb 2-1: SerialNumber: syz [ 722.623104][T16071] usb 2-1: config 0 descriptor?? [ 722.630438][T16071] gs_usb 2-1:0.0: Required endpoints not found [ 722.834735][T22731] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3442'. [ 723.013361][ T946] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 723.033638][ T946] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 723.520742][ T7385] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 723.528427][ T7385] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 723.536054][ T7385] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 723.545497][ T7385] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 723.558888][ T7385] usb 4-1: USB disconnect, device number 28 [ 723.603515][ T9] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 723.755367][ T7385] usb 6-1: USB disconnect, device number 87 [ 723.796819][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 723.812139][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.828552][ T9] usb 3-1: Product: syz [ 723.832736][ T9] usb 3-1: Manufacturer: syz [ 723.837817][ T9] usb 3-1: SerialNumber: syz [ 724.260888][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 724.274578][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 724.870581][T22771] syzkaller1: entered promiscuous mode [ 724.876386][T22771] syzkaller1: entered allmulticast mode [ 725.073311][ T5913] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 725.176595][ T946] usb 2-1: USB disconnect, device number 54 [ 725.234111][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 725.246597][ T5913] usb 4-1: config 4 has an invalid interface number: 102 but max is 0 [ 725.256161][ T5913] usb 4-1: config 4 has no interface number 0 [ 725.262851][ T5913] usb 4-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.00 [ 725.273725][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.299907][ T5913] ums-jumpshot 4-1:4.102: USB Mass Storage device detected [ 725.329313][ T5913] ums-jumpshot 4-1:4.102: Quirks match for vid 05dc pid 0001: 2 [ 725.493384][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 725.505928][ T5913] usb 4-1: USB disconnect, device number 29 [ 725.506360][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 725.526709][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 725.543315][ T946] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 725.555725][ T9] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 725.695594][ T946] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 725.704772][ T946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.716485][ T946] usb 2-1: config 0 descriptor?? [ 726.130608][T22779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.142348][T22779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.154768][ T9] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 726.166095][ T946] kye 0003:0458:0138.0037: item fetching failed at offset 3/7 [ 726.177658][ T946] kye 0003:0458:0138.0037: parse failed [ 726.184241][ T946] kye 0003:0458:0138.0037: probe with driver kye failed with error -22 [ 726.241714][T22792] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 726.242435][T22793] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 726.275215][T22792] lo speed is unknown, defaulting to 1000 [ 726.313510][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 726.324362][ T9] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 726.333068][ T9] usb 6-1: config 0 has no interface number 0 [ 726.340245][ T9] usb 6-1: config 0 interface 12 has no altsetting 0 [ 726.349396][ T9] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 726.361325][T22779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.369975][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.378513][T22779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.386474][ T9] usb 6-1: Product: syz [ 726.390666][ T9] usb 6-1: Manufacturer: syz [ 726.395208][ T5913] usb 2-1: USB disconnect, device number 55 [ 726.395636][ T9] usb 6-1: SerialNumber: syz [ 726.411446][ T9] usb 6-1: config 0 descriptor?? [ 726.528433][ T7385] usb 3-1: USB disconnect, device number 96 [ 726.556836][ T946] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 726.714607][ T946] usb 4-1: device descriptor read/64, error -71 [ 726.955178][ T946] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 727.093202][ T946] usb 4-1: device descriptor read/64, error -71 [ 727.103212][ T7385] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 727.173282][T18301] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 727.203435][ T946] usb usb4-port1: attempt power cycle [ 727.264765][ T7385] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 727.275067][ T7385] usb 3-1: config 0 has no interfaces? [ 727.280547][ T7385] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 727.289628][ T7385] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.299906][ T7385] usb 3-1: config 0 descriptor?? [ 727.323263][T18301] usb 2-1: Using ep0 maxpacket: 32 [ 727.330207][T18301] usb 2-1: config 0 interface 0 has no altsetting 0 [ 727.339107][T18301] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 727.348232][T18301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.356297][T18301] usb 2-1: Product: syz [ 727.360855][T18301] usb 2-1: Manufacturer: syz [ 727.365530][T18301] usb 2-1: SerialNumber: syz [ 727.372125][T18301] usb 2-1: config 0 descriptor?? [ 727.380982][T18301] gs_usb 2-1:0.0: Required endpoints not found [ 727.511631][T22801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.520438][T22801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.531173][T16071] usb 3-1: USB disconnect, device number 97 [ 727.543291][ T946] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 727.564251][ T946] usb 4-1: device descriptor read/8, error -71 [ 727.638126][ T9] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 727.645871][ T9] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 727.653909][ T9] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 727.661593][ T9] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 727.679243][ T9] usb 6-1: USB disconnect, device number 88 [ 727.803907][ T946] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 727.823645][ T946] usb 4-1: device descriptor read/8, error -71 [ 727.934366][ T946] usb usb4-port1: unable to enumerate USB device [ 728.483278][ T9] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 728.637633][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 728.646978][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.655044][ T9] usb 3-1: Product: syz [ 728.659246][ T9] usb 3-1: Manufacturer: syz [ 728.663879][ T9] usb 3-1: SerialNumber: syz [ 728.754707][ T7385] usb 6-1: new low-speed USB device number 89 using dummy_hcd [ 728.923260][ T7385] usb 6-1: Invalid ep0 maxpacket: 64 [ 729.053216][ T7385] usb 6-1: new low-speed USB device number 90 using dummy_hcd [ 729.077349][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 729.090334][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 729.213190][ T7385] usb 6-1: Invalid ep0 maxpacket: 64 [ 729.218897][ T7385] usb usb6-port1: attempt power cycle [ 729.563453][ T7385] usb 6-1: new low-speed USB device number 91 using dummy_hcd [ 729.583824][ T7385] usb 6-1: Invalid ep0 maxpacket: 64 [ 729.713847][ T7385] usb 6-1: new low-speed USB device number 92 using dummy_hcd [ 729.734103][ T7385] usb 6-1: Invalid ep0 maxpacket: 64 [ 729.739775][ T7385] usb usb6-port1: unable to enumerate USB device [ 729.753314][ T5913] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 729.903194][ T5913] usb 4-1: Using ep0 maxpacket: 32 [ 729.910013][ T5913] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 729.919928][ T5913] usb 4-1: config 0 has no interface number 0 [ 729.926134][ T5913] usb 4-1: config 0 interface 12 has no altsetting 0 [ 729.935623][ T5913] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 729.944855][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.952852][ T5913] usb 4-1: Product: syz [ 729.957073][ T5913] usb 4-1: Manufacturer: syz [ 729.961855][ T5913] usb 4-1: SerialNumber: syz [ 729.973966][ T5913] usb 4-1: config 0 descriptor?? [ 729.984129][ T7385] usb 2-1: USB disconnect, device number 56 [ 730.326124][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 730.338768][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 730.348640][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 730.396137][ T9] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 731.347112][ T946] usb 3-1: USB disconnect, device number 98 [ 731.381993][T22859] netlink: 540 bytes leftover after parsing attributes in process `syz.2.3484'. [ 731.428927][T22861] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3485'. [ 731.475294][ T9] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 731.664022][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 731.673914][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 731.696341][ T9] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 731.724293][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.732345][ T9] usb 2-1: Product: syz [ 731.745500][ T9] usb 2-1: Manufacturer: syz [ 731.750128][ T9] usb 2-1: SerialNumber: syz [ 731.779065][ T9] usb 2-1: config 0 descriptor?? [ 731.786202][T22857] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 731.809479][T22857] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 731.837265][ T5913] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 731.845697][ T5913] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 731.866938][ T5913] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 731.883238][ T5913] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 731.904424][ T5913] usb 4-1: USB disconnect, device number 34 [ 731.973205][ T946] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 732.060454][T22857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.076346][T22857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.094473][T22857] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 732.104005][T22857] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 732.133174][ T946] usb 3-1: Using ep0 maxpacket: 32 [ 732.144845][ T946] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 732.165529][ T946] usb 3-1: config 2 has no interface number 0 [ 732.177831][ T946] usb 3-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 732.199801][ T946] usb 3-1: config 2 interface 88 has no altsetting 0 [ 732.211936][ T946] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 732.232158][ T946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.242259][ T946] usb 3-1: Product: syz [ 732.250404][ T946] usb 3-1: Manufacturer: syz [ 732.255130][ T946] usb 3-1: SerialNumber: syz [ 732.287250][T22869] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 732.525108][T22866] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 732.534465][ T9] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 732.634442][ T7385] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 732.805119][ T7385] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.815787][ T7385] usb 4-1: config 0 has no interfaces? [ 732.821301][ T7385] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 732.832366][ T7385] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.854907][ T7385] usb 4-1: config 0 descriptor?? [ 732.861755][T22883] binder: BINDER_SET_CONTEXT_MGR already set [ 732.867879][T22883] binder: 22880:22883 ioctl 4018620d 200000004a80 returned -16 [ 732.948462][ T9] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 732.984075][ T9] usb 2-1: USB disconnect, device number 57 [ 733.067342][T22879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.078475][T22879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.106660][ T7385] usb 4-1: USB disconnect, device number 35 [ 733.443317][ T5913] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 733.588464][ T946] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 733.602693][ T946] asix 3-1:2.88: probe with driver asix failed with error -71 [ 733.616289][ T5913] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 733.640787][ T946] usb 3-1: USB disconnect, device number 99 [ 733.647832][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.674447][ T5913] usb 6-1: Product: syz [ 733.678648][ T5913] usb 6-1: Manufacturer: syz [ 733.684507][ T5913] usb 6-1: SerialNumber: syz [ 733.717258][T22892] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20001 [ 733.892683][T22898] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 733.983219][ T9] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 734.107605][ T5913] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 734.123757][ T5913] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 734.154885][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.165863][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 734.177945][ T9] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 734.191484][ T9] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 734.202709][ T9] usb 2-1: Manufacturer: syz [ 734.210736][ T9] usb 2-1: config 0 descriptor?? [ 734.503243][ T946] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 734.665873][ T946] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 734.674228][ T946] usb 3-1: config 0 has no interface number 0 [ 734.680385][ T946] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.691463][ T946] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 734.701239][ T946] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 734.710318][ T946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.721388][ T946] usb 3-1: config 0 descriptor?? [ 734.790223][T22902] use of bytesused == 0 is deprecated and will be removed in the future, [ 734.799817][T22902] use the actual size instead. [ 734.855488][T22904] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3499'. [ 735.235000][ T9] uclogic 0003:256C:006D.0038: v1 frame probing failed: -71 [ 735.245347][ T9] uclogic 0003:256C:006D.0038: failed probing parameters: -71 [ 735.252914][ T9] uclogic 0003:256C:006D.0038: probe with driver uclogic failed with error -71 [ 735.265888][ T9] usb 2-1: USB disconnect, device number 58 [ 735.342747][ T5913] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 735.356253][ T5913] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 735.366145][ T5913] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 735.393361][T16071] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 735.435545][ T5913] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 735.548456][T16071] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 735.560599][T16071] usb 4-1: config 0 has no interfaces? [ 735.566259][T16071] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 735.575549][T16071] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.585989][T16071] usb 4-1: config 0 descriptor?? [ 735.783515][T22917] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3504'. [ 735.792580][T22917] openvswitch: netlink: Flow key attr not present in new flow. [ 735.798352][T22913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.802992][T22917] futex_wake_op: syz.1.3504 tries to shift op by -1; fix this program [ 735.811840][T22913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.833004][T11451] usb 4-1: USB disconnect, device number 36 [ 735.882610][T22919] FAULT_INJECTION: forcing a failure. [ 735.882610][T22919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 735.896520][T22919] CPU: 1 UID: 0 PID: 22919 Comm: syz.1.3505 Tainted: G L syzkaller #0 PREEMPT(full) [ 735.896538][T22919] Tainted: [L]=SOFTLOCKUP [ 735.896542][T22919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 735.896548][T22919] Call Trace: [ 735.896552][T22919] [ 735.896557][T22919] dump_stack_lvl+0xe8/0x150 [ 735.896575][T22919] should_fail_ex+0x412/0x560 [ 735.896591][T22919] _copy_to_user+0x31/0xb0 [ 735.896601][T22919] put_user_ifreq+0x6a/0xc0 [ 735.896615][T22919] sock_ioctl+0x78e/0x7f0 [ 735.896632][T22919] ? __pfx_sock_ioctl+0x10/0x10 [ 735.896646][T22919] ? __fget_files+0x3a0/0x420 [ 735.896658][T22919] ? __fget_files+0x2a/0x420 [ 735.896671][T22919] ? bpf_lsm_file_ioctl+0x9/0x20 [ 735.896683][T22919] ? __pfx_sock_ioctl+0x10/0x10 [ 735.896695][T22919] __se_sys_ioctl+0xfc/0x170 [ 735.896706][T22919] do_syscall_64+0xe2/0xf80 [ 735.896717][T22919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.896727][T22919] ? clear_bhb_loop+0x40/0x90 [ 735.896739][T22919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.896748][T22919] RIP: 0033:0x7fae2d19aeb9 [ 735.896759][T22919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.896767][T22919] RSP: 002b:00007fae2e04c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 735.896778][T22919] RAX: ffffffffffffffda RBX: 00007fae2d415fa0 RCX: 00007fae2d19aeb9 [ 735.896785][T22919] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000003 [ 735.896791][T22919] RBP: 00007fae2e04c090 R08: 0000000000000000 R09: 0000000000000000 [ 735.896797][T22919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 735.896803][T22919] R13: 00007fae2d416038 R14: 00007fae2d415fa0 R15: 00007ffeae024608 [ 735.896817][T22919] [ 736.389820][ T5913] usb 6-1: USB disconnect, device number 93 [ 736.580577][T22940] netlink: 'syz.3.3514': attribute type 4 has an invalid length. [ 736.733249][ T9] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 736.887318][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 736.899060][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.907518][ T9] usb 2-1: Product: syz [ 736.911824][ T9] usb 2-1: Manufacturer: syz [ 736.919738][ T9] usb 2-1: SerialNumber: syz [ 736.963636][ T5913] usb 4-1: new low-speed USB device number 37 using dummy_hcd [ 737.125390][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 737.136627][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 737.146510][ T5913] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 737.156989][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.173879][ T5913] usb 4-1: config 0 descriptor?? [ 737.271270][ T946] usbhid 3-1:0.1: can't add hid device: -71 [ 737.291922][ T946] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 737.313473][ T946] usb 3-1: USB disconnect, device number 100 [ 737.337156][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 737.351149][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 737.353459][T22959] Invalid logical block size (50331648) [ 737.473215][T11451] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 737.614045][ T5913] aquacomputer_d5next 0003:0C70:F0B6.0039: item fetching failed at offset 3/7 [ 737.624916][ T5913] aquacomputer_d5next 0003:0C70:F0B6.0039: probe with driver aquacomputer_d5next failed with error -22 [ 737.640909][T11451] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 737.651367][T11451] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.660604][T11451] usb 6-1: Product: syz [ 737.664993][T11451] usb 6-1: Manufacturer: syz [ 737.669587][T11451] usb 6-1: SerialNumber: syz [ 737.763265][ T946] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 737.924952][ T946] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.935322][ T946] usb 3-1: config 0 has no interfaces? [ 737.940817][ T946] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 737.949973][ T946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.965650][ T946] usb 3-1: config 0 descriptor?? [ 738.084295][T11451] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 738.097260][T11451] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 738.177320][T22964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.186419][T22964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.197568][ T7385] usb 3-1: USB disconnect, device number 101 [ 738.598729][T22933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.608875][T22933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.617927][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 738.638438][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 738.651007][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 738.666287][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 738.678505][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 738.726097][ T9] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 738.742798][ T9] usb 2-1: USB disconnect, device number 59 [ 739.043220][T18286] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 739.173525][T18286] usb 3-1: device descriptor read/64, error -71 [ 739.315861][T11451] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 739.328147][T11451] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 739.337950][T11451] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 739.384486][T11451] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 739.413269][T18286] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 739.422512][ T9] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 739.553387][T18286] usb 3-1: device descriptor read/64, error -71 [ 739.576528][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 739.585749][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.593802][ T9] usb 2-1: Product: syz [ 739.598169][ T9] usb 2-1: Manufacturer: syz [ 739.602772][ T9] usb 2-1: SerialNumber: syz [ 739.668555][T18286] usb usb3-port1: attempt power cycle [ 739.732740][ T7385] usb 4-1: USB disconnect, device number 37 [ 740.013180][T18286] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 740.021267][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 740.026156][T22970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.034295][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 740.049901][T22970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.054058][T18286] usb 3-1: device descriptor read/8, error -71 [ 740.068527][T22970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.077486][T22970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.087069][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 740.099232][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 740.108645][ T7385] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 740.119416][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 740.164395][ T9] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 740.264552][ T7385] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 740.275238][ T7385] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 740.286546][ T7385] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 740.295655][ T7385] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 740.303770][T18286] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 740.311739][ T7385] usb 4-1: SerialNumber: syz [ 740.335718][T18286] usb 3-1: device descriptor read/8, error -71 [ 740.348801][ T9] usb 6-1: USB disconnect, device number 94 [ 740.445622][T18286] usb usb3-port1: unable to enumerate USB device [ 740.526712][ T7385] usb 4-1: 0:2 : does not exist [ 740.556936][ T7385] usb 4-1: USB disconnect, device number 38 [ 740.580031][T16174] udevd[16174]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 740.783199][ T9] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 740.944746][ T9] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 740.952925][ T9] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 740.962870][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 740.971122][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 740.980906][ T9] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 740.989166][ T9] usb 6-1: Product: syz [ 740.993527][ T9] usb 6-1: Manufacturer: syz [ 740.998119][ T9] usb 6-1: SerialNumber: syz [ 741.006001][ T9] usb 6-1: config 0 descriptor?? [ 741.015868][ T9] hub 6-1:0.0: bad descriptor, ignoring hub [ 741.021772][ T9] hub 6-1:0.0: probe with driver hub failed with error -5 [ 741.030958][ T9] usb 6-1: selecting invalid altsetting 0 [ 741.383199][T11451] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 741.544882][T11451] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 53, changing to 9 [ 741.556144][T11451] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 51001, setting to 1024 [ 741.567357][T11451] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 741.580204][T11451] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 741.589360][T11451] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.600884][T11451] usb 4-1: config 0 descriptor?? [ 741.607197][T22982] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 741.825754][T22982] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 742.039193][T11451] acrux 0003:1A34:0802.003A: item fetching failed at offset 3/5 [ 742.047491][T11451] acrux 0003:1A34:0802.003A: parse failed [ 742.053303][T11451] acrux 0003:1A34:0802.003A: probe with driver acrux failed with error -22 [ 742.060641][ T9] usb 6-1: USB disconnect, device number 95 [ 742.177684][T11451] usb 2-1: USB disconnect, device number 60 [ 742.241241][T18286] usb 4-1: USB disconnect, device number 39 [ 742.282135][T22991] loop5: detected capacity change from 0 to 7 [ 742.291334][T22991] Dev loop5: unable to read RDB block 7 [ 742.297000][T22991] loop5: unable to read partition table [ 742.302866][T22991] loop5: partition table beyond EOD, truncated [ 742.313154][T22991] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 742.753267][T11451] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 742.914073][T16071] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 742.943220][T11451] usb 2-1: Using ep0 maxpacket: 32 [ 742.950544][T11451] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 742.960426][T11451] usb 2-1: config 0 has no interface number 0 [ 742.966672][T11451] usb 2-1: config 0 interface 12 has no altsetting 0 [ 742.976195][T11451] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 742.985404][T11451] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.993973][T11451] usb 2-1: Product: syz [ 742.998152][T11451] usb 2-1: Manufacturer: syz [ 743.002748][T11451] usb 2-1: SerialNumber: syz [ 743.010691][T11451] usb 2-1: config 0 descriptor?? [ 743.086901][T16071] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 743.096033][T16071] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.104120][T16071] usb 6-1: Product: syz [ 743.108300][T16071] usb 6-1: Manufacturer: syz [ 743.112892][T16071] usb 6-1: SerialNumber: syz [ 743.527432][T16071] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 743.547565][T16071] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 743.793203][T18286] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 743.943203][T18286] usb 4-1: Using ep0 maxpacket: 16 [ 743.952736][T18286] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 743.962192][T18286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.970425][T18286] usb 4-1: Product: syz [ 743.974687][T18286] usb 4-1: Manufacturer: syz [ 743.979280][T18286] usb 4-1: SerialNumber: syz [ 743.992906][T18286] r8152-cfgselector 4-1: Unknown version 0x0000 [ 743.999335][T18286] r8152-cfgselector 4-1: config 0 descriptor?? [ 744.414150][ T5913] r8152-cfgselector 4-1: USB disconnect, device number 40 [ 744.769318][T16071] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 744.781535][T16071] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 744.791386][T16071] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 744.836357][T11451] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 744.844765][T16071] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 744.853381][T11451] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 744.863640][T11451] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 744.875515][T11451] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 744.888886][T11451] usb 2-1: USB disconnect, device number 61 [ 745.042472][T23016] netlink: 'syz.2.3543': attribute type 1 has an invalid length. [ 745.054337][T23016] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3543'. [ 745.543697][T11451] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 745.592289][T23034] vivid-003: disconnect [ 745.596840][T23033] vivid-003: reconnect [ 745.613820][ T5913] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 745.714981][T11451] usb 4-1: config 0 has no interfaces? [ 745.720585][T11451] usb 4-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 745.730446][T11451] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.740911][T11451] usb 4-1: config 0 descriptor?? [ 745.775964][ T5913] usb 3-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice=77.ea [ 745.785091][ T5913] usb 3-1: New USB device strings: Mfr=64, Product=2, SerialNumber=3 [ 745.794946][ T5913] usb 3-1: Product: syz [ 745.799280][ T5913] usb 3-1: Manufacturer: syz [ 745.804613][ T5913] usb 3-1: SerialNumber: syz [ 745.813665][ T7385] usb 6-1: USB disconnect, device number 96 [ 745.814481][ T5913] usb 3-1: config 0 descriptor?? [ 745.829803][ T5913] usb 3-1: cannot find UAC_HEADER [ 745.866395][ T946] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 745.922954][ T5913] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 745.957285][T23027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 745.966502][T16174] udevd[16174]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 745.976293][T23027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.997549][T23027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.008956][T23027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.018631][ T9] usb 4-1: USB disconnect, device number 41 [ 746.027159][ T946] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 746.046933][ T946] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 746.056865][ T946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.065404][ T946] usb 2-1: Product: syz [ 746.069628][ T946] usb 2-1: Manufacturer: syz [ 746.074305][ T946] usb 2-1: SerialNumber: syz [ 746.080961][ T946] usb 2-1: config 0 descriptor?? [ 746.088283][ T946] CoreChips 2-1:0.0: probe with driver CoreChips failed with error -22 [ 746.819553][T23049] ptrace attach of "./syz-executor exec"[18671] was attempted by "./syz-executor exec"[23049] [ 747.088117][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.256982][T23053] Bluetooth: hci3: unexpected event 0x2f length: 571 > 260 [ 748.703225][T16071] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 748.866029][T16071] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 748.875196][T16071] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.883290][T23044] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 748.892039][T16071] usb 4-1: Product: syz [ 748.908226][T16071] usb 4-1: Manufacturer: syz [ 748.923216][T16071] usb 4-1: SerialNumber: syz [ 748.954744][ T946] usb 2-1: USB disconnect, device number 62 [ 748.968123][ T7385] usb 3-1: USB disconnect, device number 106 [ 749.060081][T23063] MINIX-fs: unable to read superblock [ 749.073889][T23053] Bluetooth: hci3: command 0x206a tx timeout [ 749.348711][T16071] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 749.362930][T16071] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 749.384975][ T5913] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 749.403264][ T7385] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 749.556522][ T5913] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 749.567478][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.573196][ T7385] usb 3-1: Using ep0 maxpacket: 32 [ 749.580625][ T5913] usb 6-1: Product: syz [ 749.580643][ T5913] usb 6-1: Manufacturer: syz [ 749.580656][ T5913] usb 6-1: SerialNumber: syz [ 749.602310][ T7385] usb 3-1: config 0 has an invalid interface number: 76 but max is 0 [ 749.611999][ T7385] usb 3-1: config 0 has no interface number 0 [ 749.621271][ T7385] usb 3-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 749.630545][ T7385] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.639546][ T7385] usb 3-1: Product: syz [ 749.644377][ T7385] usb 3-1: Manufacturer: syz [ 749.649065][ T7385] usb 3-1: SerialNumber: syz [ 749.656935][ T7385] usb 3-1: config 0 descriptor?? [ 749.665456][ T7385] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 749.674447][ T7385] dw2102: su3000_power_ctrl: 1, initialized 0 [ 749.680522][ T7385] dvb-usb: bulk message failed: -22 (2/0) [ 749.705947][ T7385] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 749.719523][ T7385] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 749.730077][ T7385] usb 3-1: media controller created [ 749.735387][ T7385] dvb-usb: bulk message failed: -22 (6/0) [ 749.741252][ T7385] dw2102: i2c transfer failed. [ 749.746388][ T7385] dvb-usb: bulk message failed: -22 (6/0) [ 749.752257][ T7385] dw2102: i2c transfer failed. [ 749.759133][ T7385] dvb-usb: bulk message failed: -22 (6/0) [ 749.767829][ T7385] dw2102: i2c transfer failed. [ 749.772610][ T7385] dvb-usb: bulk message failed: -22 (6/0) [ 749.779334][ T7385] dw2102: i2c transfer failed. [ 749.786124][ T7385] dvb-usb: bulk message failed: -22 (6/0) [ 749.791990][ T7385] dw2102: i2c transfer failed. [ 749.796883][ T7385] dvb-usb: bulk message failed: -22 (6/0) [ 749.807210][ T7385] dw2102: i2c transfer failed. [ 749.812043][ T7385] dvb-usb: MAC address: 02:02:02:02:02:02 [ 749.836398][ T7385] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 749.859853][ T7385] dvb-usb: bulk message failed: -22 (3/0) [ 749.867756][ T7385] dw2102: command 0x0e transfer failed. [ 749.877204][ T7385] dvb-usb: bulk message failed: -22 (3/0) [ 749.882971][ T7385] dw2102: command 0x0e transfer failed. [ 749.938264][ T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.013843][ T5913] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 750.032505][ T5913] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 750.061165][ T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.076447][ T5141] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 750.089215][ T5141] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 750.098333][ T5141] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 750.106720][ T5141] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 750.117996][ T5141] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 750.161975][ T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.195014][ T7385] dvb-usb: bulk message failed: -22 (3/0) [ 750.200809][ T7385] dw2102: command 0x0e transfer failed. [ 750.206760][ T7385] dvb-usb: bulk message failed: -22 (3/0) [ 750.212498][ T7385] dw2102: command 0x0e transfer failed. [ 750.212813][T23069] lo speed is unknown, defaulting to 1000 [ 750.218843][ T7385] dvb-usb: bulk message failed: -22 (1/0) [ 750.229988][ T7385] dw2102: command 0x51 transfer failed. [ 750.236317][T23063] dvb-usb: bulk message failed: -22 (24/0) [ 750.242336][T23063] dw2102: i2c transfer failed. [ 750.271592][ T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.306935][ T7385] DVB: Unable to find symbol ds3000_attach() [ 750.320330][ T7385] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 750.414680][ T7385] rc_core: IR keymap rc-su3000 not found [ 750.420376][ T7385] Registered IR keymap rc-empty [ 750.428389][ T7385] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 750.455241][ T7385] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input100 [ 750.479325][ T7385] dvb-usb: schedule remote query interval to 150 msecs. [ 750.488150][ T7385] dw2102: su3000_power_ctrl: 0, initialized 1 [ 750.509249][ T7385] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 750.524151][ T7385] usb 3-1: USB disconnect, device number 107 [ 750.601239][T16071] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 750.616501][T16071] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 750.679668][T23069] chnl_net:caif_netlink_parms(): no params data found [ 750.708260][ T7385] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 750.721189][ T154] bridge_slave_1: left allmulticast mode [ 750.730004][ T154] bridge_slave_1: left promiscuous mode [ 750.740271][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.756578][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.036766][T16071] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 751.070638][T16071] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 751.078602][ T7385] IPVS: starting estimator thread 0... [ 751.086068][T16071] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 751.120082][T16071] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 751.153885][ T5141] Bluetooth: hci3: command 0x206a tx timeout [ 751.176655][T16071] usb 4-1: USB disconnect, device number 42 [ 751.183250][T23084] IPVS: using max 32 ests per chain, 76800 per kthread [ 751.285703][ T5913] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 751.303462][ T5913] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 751.333471][ T5913] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 751.349832][ T5913] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 751.389009][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 751.408243][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 751.495080][ T154] bond0 (unregistering): Released all slaves [ 751.601444][T23069] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.634493][T23069] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.641734][T23069] bridge_slave_0: entered allmulticast mode [ 751.650128][T23069] bridge_slave_0: entered promiscuous mode [ 751.657394][ T154] tipc: Disabling bearer [ 751.662908][ T154] tipc: Left network mode [ 751.663380][T23069] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.685283][T23069] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.692558][T23069] bridge_slave_1: entered allmulticast mode [ 751.700440][T23069] bridge_slave_1: entered promiscuous mode [ 751.716670][ T946] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 751.756638][T23069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 751.772265][T23069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 751.876213][T16071] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 751.884403][T23069] team0: Port device team_slave_0 added [ 751.898136][T23069] team0: Port device team_slave_1 added [ 751.914108][ T946] usb 3-1: Using ep0 maxpacket: 8 [ 751.927126][ T946] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 751.944401][ T946] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 751.960012][ T946] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 751.972598][ T946] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 752.001409][ T946] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 752.023012][ T946] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 752.035129][ T946] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 752.050974][ T946] usb 3-1: config 168 interface 0 has no altsetting 0 [ 752.057988][T16071] usb 4-1: Using ep0 maxpacket: 8 [ 752.068543][ T946] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 752.078417][ T946] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 752.091869][T16071] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 752.100226][T16071] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 752.110044][ T946] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 752.122141][T16071] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 752.133457][ T946] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 752.149570][T16071] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 752.151858][T23069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.163148][ T946] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 752.181128][T23069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.182793][T16071] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 752.225486][T23053] Bluetooth: hci0: command tx timeout [ 752.234219][ T946] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 752.244211][T23069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.247490][ T946] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 752.277028][T16071] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 752.288648][ T946] usb 3-1: config 168 interface 0 has no altsetting 0 [ 752.296511][T16071] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.305770][ T946] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 752.330257][ T946] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 752.355870][ T5883] usb 6-1: USB disconnect, device number 97 [ 752.399004][ T946] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 752.415543][ T946] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 752.429678][ T946] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 752.448000][ T946] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 752.459829][ T946] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 752.478696][T23069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.486108][T23069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.538287][ T946] usb 3-1: config 168 interface 0 has no altsetting 0 [ 752.543441][T23069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 752.561820][T16071] usb 4-1: GET_CAPABILITIES returned 0 [ 752.568492][T16071] usbtmc 4-1:16.0: can't read capabilities [ 752.580980][ T946] usb 3-1: string descriptor 0 read error: -22 [ 752.588801][ T946] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 752.600426][ T946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.662685][ T946] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 752.697366][ T154] hsr_slave_0: left promiscuous mode [ 752.705007][ T154] hsr_slave_1: left promiscuous mode [ 752.710872][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 752.733782][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 752.750104][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 752.759093][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 752.826740][ T154] veth1_macvtap: left promiscuous mode [ 752.832285][ T154] veth0_macvtap: left promiscuous mode [ 752.853496][T18286] usb 4-1: USB disconnect, device number 43 [ 752.854367][ T5883] usb 3-1: USB disconnect, device number 108 [ 752.862835][ T154] veth1_vlan: left promiscuous mode [ 752.873754][ T154] veth0_vlan: left promiscuous mode [ 752.883224][ T946] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 753.039833][ T946] usb 6-1: device descriptor read/64, error -71 [ 753.283186][ T946] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 753.443223][ T946] usb 6-1: device descriptor read/64, error -71 [ 753.563473][ T946] usb usb6-port1: attempt power cycle [ 753.664279][T23124] binder: 23123:23124 unknown command 0 [ 753.670069][T23124] binder: 23123:23124 ioctl c0306201 2000000016c0 returned -22 [ 753.697680][ T154] team0 (unregistering): Port device team_slave_1 removed [ 753.763803][ T154] team0 (unregistering): Port device team_slave_0 removed [ 753.929829][ T946] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 753.966477][ T946] usb 6-1: device descriptor read/8, error -71 [ 754.216222][ T946] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 754.255700][ T946] usb 6-1: device descriptor read/8, error -71 [ 754.273716][T23053] Bluetooth: hci0: command tx timeout [ 754.313196][T18286] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 754.388486][ T946] usb usb6-port1: unable to enumerate USB device [ 754.473266][T18286] usb 4-1: Using ep0 maxpacket: 32 [ 754.484504][T18286] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 754.492611][T18286] usb 4-1: config 0 has no interface number 0 [ 754.513214][T18286] usb 4-1: config 0 interface 12 has no altsetting 0 [ 754.528511][T18286] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 754.537845][T18286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.558165][T18286] usb 4-1: Product: syz [ 754.565889][T18286] usb 4-1: Manufacturer: syz [ 754.570505][T18286] usb 4-1: SerialNumber: syz [ 754.614403][T18286] usb 4-1: config 0 descriptor?? [ 754.668912][T23069] hsr_slave_0: entered promiscuous mode [ 754.682130][T23069] hsr_slave_1: entered promiscuous mode [ 754.690842][T23069] debugfs: 'hsr0' already exists in 'hsr' [ 754.701956][T23069] Cannot create hsr debugfs directory [ 754.913675][ T9] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 754.991164][ T154] IPVS: stop unused estimator thread 0... [ 755.094254][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 755.123222][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.131279][ T9] usb 3-1: Product: syz [ 755.161945][ T9] usb 3-1: Manufacturer: syz [ 755.177835][ T9] usb 3-1: SerialNumber: syz [ 755.636588][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 755.662043][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 755.831492][T23069] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 755.845163][T18286] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 755.845368][T23069] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 755.852757][T18286] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 755.874300][T18286] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 755.884706][T18286] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 755.895240][T23069] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 755.909613][T23069] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 755.920516][T18286] usb 4-1: USB disconnect, device number 44 [ 755.966244][T16071] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 756.080425][T23069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 756.105083][T23069] 8021q: adding VLAN 0 to HW filter on device team0 [ 756.122931][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.130137][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 756.141484][T16071] usb 6-1: too many configurations: 134, using maximum allowed: 8 [ 756.159087][T16071] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 756.168415][T16071] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.181869][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.189043][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 756.199633][T16071] usb 6-1: Product: syz [ 756.204380][T16071] usb 6-1: Manufacturer: syz [ 756.208990][T16071] usb 6-1: SerialNumber: syz [ 756.353586][T23053] Bluetooth: hci0: command tx timeout [ 756.549702][T23069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 756.647719][T16071] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 756.670473][T16071] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 756.927867][T23069] veth0_vlan: entered promiscuous mode [ 756.934342][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 756.945387][T23069] veth1_vlan: entered promiscuous mode [ 756.963555][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 756.979673][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 756.999522][T23069] veth0_macvtap: entered promiscuous mode [ 757.008019][ T9] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 757.013570][T23069] veth1_macvtap: entered promiscuous mode [ 757.057218][T23069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 757.076748][T23069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 757.102118][ T76] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.113222][ T76] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.124541][ T76] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.139856][ T76] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.255269][ T5908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.269327][ T5908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.308236][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.326751][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.898582][T16071] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 757.997000][ T5848] usb 3-1: USB disconnect, device number 109 [ 758.028714][T18301] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 758.204971][T18301] usb 5-1: Using ep0 maxpacket: 8 [ 758.217787][T18301] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 758.229959][T18301] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 758.240636][T18301] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 758.253247][T18301] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 758.263495][T18301] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 758.277332][T18301] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 758.293395][T18301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.315526][T23162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.341185][T23162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.408161][T16071] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO [ 758.424975][T16071] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 758.433596][T23053] Bluetooth: hci0: command tx timeout [ 758.438429][T16071] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 758.458744][T16071] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 758.491818][T16071] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 758.542073][T18301] usb 5-1: GET_CAPABILITIES returned 0 [ 758.542135][T16071] usb 6-1: USB disconnect, device number 102 [ 758.553274][T18301] usbtmc 5-1:16.0: can't read capabilities [ 758.567414][ T5848] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 758.767741][ T5848] usb 3-1: Using ep0 maxpacket: 32 [ 758.782051][ T5848] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 758.791561][ T9] usb 5-1: USB disconnect, device number 48 [ 758.803691][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 758.812325][ T5848] usb 3-1: Product: syz [ 758.850709][ T5848] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 758.933311][T18286] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 759.094839][T18286] usb 4-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 759.118337][T18286] usb 4-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 759.133159][T18286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.154340][T18286] usb 4-1: Product: syz [ 759.158535][T18286] usb 4-1: Manufacturer: syz [ 759.175965][T18286] usb 4-1: SerialNumber: syz [ 759.205564][T18286] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 759.217267][T18286] dvb-usb: bulk message failed: -22 (3/0) [ 759.236907][T18286] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 759.237768][T23265] syzkaller0: entered promiscuous mode [ 759.258147][ T5848] gspca_nw80x: reg_r err -32 [ 759.258569][T18286] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 759.262829][ T5848] nw80x 3-1:3.0: probe with driver nw80x failed with error -32 [ 759.286127][T18286] usb 4-1: media controller created [ 759.293256][T23265] syzkaller0: entered allmulticast mode [ 759.342169][T18286] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 759.457349][T18286] DVB: Unable to find symbol mt352_attach() [ 759.478057][T18286] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 759.490182][T18286] dvb-usb: bulk message failed: -22 (3/0) [ 759.514400][T18286] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 759.540363][T18286] usb 4-1: USB disconnect, device number 45 [ 759.644462][T18286] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 759.965600][ T946] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 760.001235][T23290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3590'. [ 760.155652][ T946] usb 5-1: Using ep0 maxpacket: 8 [ 760.172444][ T946] usb 5-1: config 1 has an invalid interface descriptor of length 2, skipping [ 760.188699][ T946] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 760.201209][ T946] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 760.210320][ T946] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 760.226891][ T946] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 760.239700][ T946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.269876][ T946] usb 5-1: Product: syz [ 760.286588][ T946] usb 5-1: Manufacturer: 톁鍡銽䟢㓷载䴀찅⠢DŽ蘴욕䆃⤒柫 [ 760.303458][ T946] usb 5-1: SerialNumber: syz [ 760.318707][T23283] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 760.586960][ T24] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 760.737861][ T946] usb 5-1: 0:2 : does not exist [ 760.787063][ T946] usb 5-1: USB disconnect, device number 49 [ 760.800569][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 760.810832][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.819075][ T24] usb 4-1: Product: syz [ 760.830077][ T24] usb 4-1: Manufacturer: syz [ 760.851125][ T24] usb 4-1: SerialNumber: syz [ 760.878030][T16174] udevd[16174]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 761.158349][ T5141] Bluetooth: hci4: command 0x0406 tx timeout [ 761.286078][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 761.302488][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 761.623289][ T5848] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 761.808926][ T5848] usb 5-1: Using ep0 maxpacket: 8 [ 761.816856][ T5848] usb 5-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.829084][ T5848] usb 5-1: config 0 interface 0 has no altsetting 0 [ 761.835789][ T5848] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 761.846961][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.864035][ T5848] usb 5-1: config 0 descriptor?? [ 762.292373][ T5848] smartjoyplus 0003:6666:8804.003B: unknown main item tag 0x1 [ 762.300143][ T5848] smartjoyplus 0003:6666:8804.003B: collection stack underflow [ 762.310032][ T9] usb 3-1: USB disconnect, device number 110 [ 762.313835][ T5848] smartjoyplus 0003:6666:8804.003B: item 0 1 0 12 parsing failed [ 762.327740][ T5848] smartjoyplus 0003:6666:8804.003B: parse failed [ 762.337391][ T5848] smartjoyplus 0003:6666:8804.003B: probe with driver smartjoyplus failed with error -22 [ 762.490509][T23325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3592'. [ 762.511348][T23325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.538405][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 762.551832][T23325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.574426][ T946] usb 5-1: USB disconnect, device number 50 [ 763.175252][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -EPROTO [ 763.204726][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 763.228524][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 763.256181][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 763.315893][ T24] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 763.356437][ T24] usb 4-1: USB disconnect, device number 46 [ 763.673186][ T5848] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 763.843466][ T5848] usb 6-1: Using ep0 maxpacket: 16 [ 763.872906][ T5848] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 763.890000][ T5848] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 763.923658][ T5848] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 763.945267][ T5848] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.969441][ T5848] usb 6-1: Product: syz [ 763.983166][ T5848] usb 6-1: Manufacturer: syz [ 763.988768][ T5848] usb 6-1: SerialNumber: syz [ 764.084401][T23382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.137348][T23382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.234661][ T5848] usb 6-1: 0:2 : does not exist [ 764.247989][ T5848] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 764.303346][T18286] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 764.381094][ T5848] usb 6-1: USB disconnect, device number 103 [ 764.455182][T16174] udevd[16174]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 764.463288][T18286] usb 4-1: Using ep0 maxpacket: 16 [ 764.509635][T18286] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 764.540390][T18286] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 764.581867][T18286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 764.613164][T18286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 764.653216][T18286] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 764.680705][T18286] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 764.690119][T18286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.708411][T18286] usb 4-1: Product: syz [ 764.722887][T18286] usb 4-1: Manufacturer: syz [ 764.727698][T18286] usb 4-1: SerialNumber: syz [ 764.745076][T18286] usb 4-1: config 0 descriptor?? [ 764.958692][T18286] appledisplay 4-1:0.0: Error while getting initial brightness: -71 [ 765.035256][T18286] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -71 [ 765.049308][T23053] Bluetooth: hci1: unexpected event 0x2f length: 571 > 260 [ 765.082434][T18286] usb 4-1: USB disconnect, device number 47 [ 765.613252][ T24] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 765.792127][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 765.832855][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.851209][ T24] usb 5-1: Product: syz [ 765.861951][ T24] usb 5-1: Manufacturer: syz [ 765.881979][ T24] usb 5-1: SerialNumber: syz [ 765.923214][ T5848] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 766.105523][ T5848] usb 4-1: Using ep0 maxpacket: 32 [ 766.116862][ T5848] usb 4-1: config 0 interface 0 has no altsetting 0 [ 766.149984][ T5848] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 766.171455][T23444] fuse: Bad value for 'fd' [ 766.174225][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.204697][ T5848] usb 4-1: Product: syz [ 766.208914][ T5848] usb 4-1: Manufacturer: syz [ 766.223164][ T5848] usb 4-1: SerialNumber: syz [ 766.234262][ T5848] usb 4-1: config 0 descriptor?? [ 766.314548][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 766.342492][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 766.708085][ T5848] gs_usb 4-1:0.0: Couldn't get device config: (err=-121) [ 766.733185][ T5848] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -121 [ 766.782363][T18286] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 766.948148][T18286] usb 3-1: config 7 has an invalid interface number: 251 but max is 0 [ 766.957753][T18286] usb 3-1: config 7 has no interface number 0 [ 766.973380][T18286] usb 3-1: config 7 interface 251 has no altsetting 0 [ 766.985709][T18286] usb 3-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=a6.35 [ 767.008618][T18286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.045877][T18286] usb 3-1: Product: syz [ 767.054092][T18286] usb 3-1: Manufacturer: syz [ 767.058703][T18286] usb 3-1: SerialNumber: syz [ 767.339674][T18286] mvusb_mdio 3-1:7.251: probe with driver mvusb_mdio failed with error -5 [ 767.368189][T18286] usb 3-1: USB disconnect, device number 111 [ 767.389791][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 767.410029][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 767.432142][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 767.485279][ T24] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 768.421454][ T9] usb 5-1: USB disconnect, device number 51 [ 768.546751][T23504] netlink: 'syz.2.3629': attribute type 25 has an invalid length. [ 768.689927][ T5848] usb 4-1: USB disconnect, device number 48 [ 769.488162][T23522] fuse: Unknown parameter 'g7 [ 772.310209][T23586] dump_stack_lvl+0xe8/0x150 [ 772.310228][T23586] should_fail_ex+0x412/0x560 [ 772.310244][T23586] should_failslab+0xa8/0x100 [ 772.310255][T23586] ? prepare_creds+0x30/0x820 [ 772.310265][T23586] kmem_cache_alloc_noprof+0x87/0x650 [ 772.310285][T23586] prepare_creds+0x30/0x820 [ 772.310297][T23586] ovl_override_creator_creds+0x106/0x2f0 [ 772.310313][T23586] ovl_create_or_link+0x127/0x270 [ 772.310326][T23586] ovl_create_object+0x2bc/0x3d0 [ 772.310339][T23586] ? __pfx_ovl_create_object+0x10/0x10 [ 772.310350][T23586] ? apparmor_path_mknod+0x33d/0x410 [ 772.310363][T23586] ? inode_permission+0x346/0x5f0 [ 772.310375][T23586] ? bpf_lsm_inode_mknod+0x9/0x20 [ 772.310389][T23586] ? security_inode_mknod+0xc2/0x330 [ 772.310406][T23586] vfs_mknod+0x447/0x610 [ 772.310419][T23586] filename_mknodat+0x3cb/0x660 [ 772.310431][T23586] ? __pfx_filename_mknodat+0x10/0x10 [ 772.310443][T23586] ? do_getname+0x151/0x250 [ 772.310455][T23586] __se_sys_mknodat+0x3b/0x150 [ 772.310466][T23586] do_syscall_64+0xe2/0xf80 [ 772.310478][T23586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.310488][T23586] ? trace_irq_disable+0x37/0x100 [ 772.310500][T23586] ? clear_bhb_loop+0x40/0x90 [ 772.310513][T23586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.310522][T23586] RIP: 0033:0x7f15d819aeb9 [ 772.310535][T23586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.310542][T23586] RSP: 002b:00007f15d8ffd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 772.310554][T23586] RAX: ffffffffffffffda RBX: 00007f15d8415fa0 RCX: 00007f15d819aeb9 [ 772.310561][T23586] RDX: 00000000000011c0 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 772.310567][T23586] RBP: 00007f15d8ffd090 R08: 0000000000000000 R09: 0000000000000000 [ 772.310573][T23586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 772.310579][T23586] R13: 00007f15d8416038 R14: 00007f15d8415fa0 R15: 00007ffccfa44888 [ 772.310594][T23586] [ 772.373320][T11451] usb 5-1: device descriptor read/64, error -71 [ 772.663540][T11451] usb usb5-port1: attempt power cycle [ 772.681053][ T5883] usb 6-1: USB disconnect, device number 104 [ 772.729330][T23592] netlink: 'syz.5.3653': attribute type 25 has an invalid length. [ 772.833227][ T87] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 772.896396][ T5883] usb 3-1: USB disconnect, device number 112 [ 772.929408][T23594] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3654'. [ 772.940573][T23594] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3654'. [ 772.950162][T23594] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3654'. [ 772.984737][ T87] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 772.998440][ T87] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 773.007608][ T87] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.015913][ T87] usb 4-1: Product: syz [ 773.020065][ T87] usb 4-1: Manufacturer: syz [ 773.024701][ T87] usb 4-1: SerialNumber: syz [ 773.035713][T11451] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 773.065251][T11451] usb 5-1: device descriptor read/8, error -71 [ 773.247012][T23590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.267805][T23590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.303973][T11451] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 773.325520][T11451] usb 5-1: device descriptor read/8, error -71 [ 773.416268][ T87] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 773.424107][ T87] cdc_ncm 4-1:1.0: bind() failure [ 773.432338][ T87] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 773.440793][ T87] cdc_ncm 4-1:1.1: bind() failure [ 773.443431][T11451] usb usb5-port1: unable to enumerate USB device [ 773.451436][ T87] usb 4-1: USB disconnect, device number 51 [ 773.573195][ T5883] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 773.713213][ T5883] usb 6-1: device descriptor read/64, error -71 [ 773.953212][ T5883] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 774.104528][ T5883] usb 6-1: device descriptor read/64, error -71 [ 774.213441][ T5883] usb usb6-port1: attempt power cycle [ 774.313203][T11451] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 774.496963][T11451] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 774.507037][T11451] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.516106][T11451] usb 4-1: Product: syz [ 774.520398][T11451] usb 4-1: Manufacturer: syz [ 774.529131][T11451] usb 4-1: SerialNumber: syz [ 774.563287][ T5883] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 774.594694][ T5883] usb 6-1: device descriptor read/8, error -71 [ 774.813371][ T87] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 774.833487][ T5883] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 774.855566][ T5883] usb 6-1: device descriptor read/8, error -71 [ 774.945547][T11451] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 774.945609][T11451] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 774.963421][ T5883] usb usb6-port1: unable to enumerate USB device [ 774.975875][ T87] usb 5-1: Using ep0 maxpacket: 16 [ 774.978203][ T87] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 774.978234][ T87] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 774.980192][ T87] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 774.980224][ T87] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.980242][ T87] usb 5-1: Product: syz [ 774.980256][ T87] usb 5-1: Manufacturer: syz [ 774.980268][ T87] usb 5-1: SerialNumber: syz [ 775.190147][T23618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.201047][T23618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.218056][ T87] usb 5-1: 0:2 : does not exist [ 775.233047][ T87] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 775.252567][ T87] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 775.266802][ T87] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 775.278266][ T87] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5) [ 775.291162][ T87] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 775.302421][ T87] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 775.317499][ T87] usb 5-1: 5:0: cannot get min/max values for control 8 (id 5) [ 775.338118][ T87] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 775.349817][ T87] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 775.377843][ T87] usb 5-1: USB disconnect, device number 56 [ 775.413890][T16438] udevd[16438]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 775.463936][T18286] usb 3-1: new low-speed USB device number 113 using dummy_hcd [ 775.593185][T18286] usb 3-1: device descriptor read/64, error -71 [ 775.807330][T23632] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3668'. [ 775.834395][T18286] usb 3-1: new low-speed USB device number 114 using dummy_hcd [ 775.942328][T23636] NFSD: Failed to start, no listeners configured. [ 775.973216][T18286] usb 3-1: device descriptor read/64, error -71 [ 776.004375][T11451] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 776.017061][T11451] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 776.028036][T11451] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 776.065256][T11451] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 776.087966][T18286] usb usb3-port1: attempt power cycle [ 776.334854][T23638] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 776.390018][T23641] overlayfs: invalid origin (000000ca387fe0fb3738702bed8ab4416592a5356da96db48150eae0040000006fe65c239a40022f0000000000000000) [ 776.433817][T18286] usb 3-1: new low-speed USB device number 115 using dummy_hcd [ 776.464925][T18286] usb 3-1: device descriptor read/8, error -71 [ 776.703690][T18286] usb 3-1: new low-speed USB device number 116 using dummy_hcd [ 776.725790][T18286] usb 3-1: device descriptor read/8, error -71 [ 776.793228][T18301] usb 6-1: new full-speed USB device number 109 using dummy_hcd [ 776.843877][T18286] usb usb3-port1: unable to enumerate USB device [ 776.923990][T18301] usb 6-1: device descriptor read/64, error -71 [ 776.983270][ T87] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 777.084092][T11451] usb 4-1: USB disconnect, device number 52 [ 777.135247][ T87] usb 5-1: Using ep0 maxpacket: 8 [ 777.141921][ T87] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 777.150347][ T87] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 777.160453][ T87] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 777.170619][T18301] usb 6-1: new full-speed USB device number 110 using dummy_hcd [ 777.179205][ T87] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 777.202046][ T87] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 777.215865][ T87] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 777.224944][ T87] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.343201][T18301] usb 6-1: device descriptor read/64, error -71 [ 777.440272][ T87] usb 5-1: GET_CAPABILITIES returned 2d [ 777.446025][ T87] usbtmc 5-1:16.0: can't read capabilities [ 777.457121][T18301] usb usb6-port1: attempt power cycle [ 777.805285][T18301] usb 6-1: new full-speed USB device number 111 using dummy_hcd [ 777.806210][T11451] usb 5-1: USB disconnect, device number 57 [ 777.839812][T18301] usb 6-1: device descriptor read/8, error -71 [ 778.093156][T18301] usb 6-1: new full-speed USB device number 112 using dummy_hcd [ 778.113625][T18301] usb 6-1: device descriptor read/8, error -71 [ 778.224066][T18301] usb usb6-port1: unable to enumerate USB device [ 778.233229][ T87] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 778.396719][ T87] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 778.415481][ T87] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 778.430646][ T87] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 778.443480][ T87] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.457773][T23671] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 778.468996][ T87] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 778.635740][ T5848] usb 3-1: new full-speed USB device number 117 using dummy_hcd [ 778.679255][ T87] usb 4-1: USB disconnect, device number 53 [ 778.805326][ T5848] usb 3-1: device descriptor read/64, error -71 [ 778.977913][T23699] netlink: 'syz.4.3686': attribute type 27 has an invalid length. [ 778.998357][T23699] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3686'. [ 779.053438][ T5848] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 779.223229][ T5848] usb 3-1: device descriptor read/64, error -71 [ 779.333592][ T5848] usb usb3-port1: attempt power cycle [ 779.533213][T18286] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 779.640147][T23715] lo speed is unknown, defaulting to 1000 [ 779.674822][ T5848] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 779.693225][ T5913] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 779.694934][T18286] usb 5-1: config 0 has an invalid interface number: 201 but max is 0 [ 779.723165][T18286] usb 5-1: config 0 has no interface number 0 [ 779.723950][ T5848] usb 3-1: device descriptor read/8, error -71 [ 779.731717][T18286] usb 5-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=7f.d1 [ 779.773150][T18286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.783493][T18286] usb 5-1: Product: syz [ 779.803707][T18286] usb 5-1: Manufacturer: syz [ 779.808364][T18286] usb 5-1: SerialNumber: syz [ 779.827927][T18286] usb 5-1: config 0 descriptor?? [ 779.840014][T18286] gspca_main: mars-2.14.0 probing 093a:050f [ 779.856943][ T5913] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 779.866303][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.880473][ T5913] usb 4-1: Product: syz [ 779.884753][ T5913] usb 4-1: Manufacturer: syz [ 779.890948][ T5913] usb 4-1: SerialNumber: syz [ 779.993177][ T5848] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 780.024507][ T5848] usb 3-1: device descriptor read/8, error -71 [ 780.130091][T23715] netlink: 'syz.5.3689': attribute type 6 has an invalid length. [ 780.144240][ T5848] usb usb3-port1: unable to enumerate USB device [ 780.158675][T18286] usb 5-1: USB disconnect, device number 58 [ 780.315865][ T5913] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 780.365254][ T5913] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 780.381064][ T5913] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 780.409719][ T5913] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 780.420805][ T5913] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 780.456760][ T5913] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 780.963407][ T5907] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 781.009628][T23739] binder_alloc: 23738: binder_alloc_buf, no vma [ 781.123577][ T5907] usb 5-1: Using ep0 maxpacket: 32 [ 781.143983][ T5907] usb 5-1: config 0 interface 0 has no altsetting 0 [ 781.172501][ T5907] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 781.198102][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.215247][ T5907] usb 5-1: Product: syz [ 781.219452][ T5907] usb 5-1: Manufacturer: syz [ 781.225115][ T5907] usb 5-1: SerialNumber: syz [ 781.232288][ T5907] usb 5-1: config 0 descriptor?? [ 781.644059][ T5907] gs_usb 5-1:0.0: Configuring for 42 interfaces [ 781.844697][ T5907] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 781.853026][ T5907] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -32 [ 782.076719][T23770] forcing mempool usage for bio_alloc_bioset+0x363/0x11b0 [ 782.453360][ T5907] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 782.468004][T18301] usb 4-1: USB disconnect, device number 54 [ 782.648620][ T5907] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 782.658507][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.667226][ T5907] usb 3-1: Product: syz [ 782.671403][ T5907] usb 3-1: Manufacturer: syz [ 782.676871][ T5907] usb 3-1: SerialNumber: syz [ 782.684877][ T5907] usb 3-1: config 0 descriptor?? [ 782.803200][T18301] usb 4-1: new low-speed USB device number 55 using dummy_hcd [ 782.901450][ T5907] hso 3-1:0.0: Failed to find BULK IN ep [ 782.912116][ T5907] usb-storage 3-1:0.0: USB Mass Storage device detected [ 782.955554][T18301] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 782.973811][T18301] usb 4-1: config 0 interface 0 has no altsetting 0 [ 782.983469][T18301] usb 4-1: New USB device found, idVendor=046d, idProduct=c713, bcdDevice= 0.00 [ 783.011344][T18301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.035988][T18301] usb 4-1: config 0 descriptor?? [ 783.051959][T23777] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 783.104202][ T5907] usb 3-1: USB disconnect, device number 121 [ 783.294955][ T5913] usb 4-1: USB disconnect, device number 55 [ 783.651259][T23803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3709'. [ 783.771476][ T5907] usb 5-1: USB disconnect, device number 59 [ 783.953447][T23815] netlink: 'syz.5.3713': attribute type 1 has an invalid length. [ 783.961713][T23815] infiniband: Added to hash: ib_dev=ffff888076418000 (0)() ndev=ffff88806bf38000 (27)(bond0) [ 783.972627][T23815] siw: device registration error -23 [ 783.978122][T18301] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 783.983310][T23815] infiniband: Removed from hash: ib_dev=ffff888076418000 (0)() ndev=ffff88806bf38000 (27)(bond0) [ 784.001412][T23815] tmpfs: Invalid uid '0x00000000ffffffff' [ 784.098968][T23820] syzkaller1: entered promiscuous mode [ 784.105502][T23820] syzkaller1: entered allmulticast mode [ 784.136086][T18301] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 784.145287][T18301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.153826][ T5907] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 784.162018][T18301] usb 3-1: Product: syz [ 784.166572][T18301] usb 3-1: Manufacturer: syz [ 784.171566][T18301] usb 3-1: SerialNumber: syz [ 784.229217][T23824] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 784.316058][ T5907] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 784.326674][ T5907] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 784.338467][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 784.359039][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 784.369059][ T5907] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 784.386641][ T5907] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 784.402659][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 784.411446][ T5907] usb 5-1: Product: syz [ 784.417036][ T5907] usb 5-1: Manufacturer: syz [ 784.421755][ T5907] usb 5-1: SerialNumber: syz [ 784.449751][ T5907] usb 5-1: config 0 descriptor?? [ 784.519786][T23834] pim6reg1: entered promiscuous mode [ 784.525259][T23834] pim6reg1: entered allmulticast mode [ 784.601355][T18301] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 784.615226][T18301] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 784.631273][T18301] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 784.644288][T18301] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 784.666361][T18301] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 784.679049][ T5907] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 784.692073][ T5907] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 784.714871][T18301] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 784.739883][T23838] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3722'. [ 784.752258][T23837] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3722'. [ 784.876257][ T5907] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 784.884052][ T5907] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 784.896707][ T5907] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 785.022730][T23849] hpfs: hpfs_map_sector(): read error [ 785.077195][ T5907] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 785.293246][T18301] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 785.443201][T18301] usb 4-1: Using ep0 maxpacket: 32 [ 785.460505][T18301] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 785.471380][T18301] usb 4-1: config 0 has no interface number 0 [ 785.486298][T18301] usb 4-1: config 0 interface 12 has no altsetting 0 [ 785.503827][T18301] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 785.512931][T18301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.522346][T18301] usb 4-1: Product: syz [ 785.530566][T18301] usb 4-1: Manufacturer: syz [ 785.537120][T18301] usb 4-1: SerialNumber: syz [ 785.548387][T18301] usb 4-1: config 0 descriptor?? [ 785.557072][T18301] f81534 4-1:0.12: required endpoints missing [ 785.773191][ T5848] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 785.897158][ T5907] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 785.907013][ T5907] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 785.913179][ T5848] usb 6-1: device descriptor read/64, error -71 [ 785.920336][ T5907] usb 5-1: USB disconnect, device number 60 [ 786.183214][ T5848] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 786.324826][ T5848] usb 6-1: device descriptor read/64, error -71 [ 786.443843][ T5848] usb usb6-port1: attempt power cycle [ 786.451999][T23865] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 786.731844][T18301] usb 3-1: USB disconnect, device number 122 [ 786.776232][T23878] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3736'. [ 786.793222][ T5848] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 786.814278][ T5848] usb 6-1: device descriptor read/8, error -71 [ 786.883180][ T5913] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 787.064197][ T5848] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 787.072023][ T5913] usb 5-1: Using ep0 maxpacket: 16 [ 787.082134][ T5913] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 787.084272][T18301] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 787.091409][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.107885][ T5913] usb 5-1: Product: syz [ 787.112099][ T5913] usb 5-1: Manufacturer: syz [ 787.116831][ T5848] usb 6-1: device descriptor read/8, error -71 [ 787.123014][ T5913] usb 5-1: SerialNumber: syz [ 787.223219][T18301] usb 3-1: device descriptor read/64, error -71 [ 787.234909][ T5848] usb usb6-port1: unable to enumerate USB device [ 787.334433][ T5913] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 787.346136][ T5913] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 787.356723][ T5913] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 787.366557][ T5913] usb 5-1: media controller created [ 787.378372][ T5913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 787.463229][T18301] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 787.603205][T18301] usb 3-1: device descriptor read/64, error -71 [ 787.606500][ T5913] zl10353_read_register: readreg error (reg=127, ret==-110) [ 787.641105][ T5913] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 787.653590][ T5913] usb 5-1: USB disconnect, device number 61 [ 787.716191][T18301] usb usb3-port1: attempt power cycle [ 788.063393][T18301] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 788.086317][ T5848] usb 4-1: USB disconnect, device number 56 [ 788.100765][T18301] usb 3-1: device descriptor read/8, error -71 [ 788.343225][T18301] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 788.363873][T18301] usb 3-1: device descriptor read/8, error -71 [ 788.484703][T18301] usb usb3-port1: unable to enumerate USB device [ 788.653394][ T5907] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 788.794046][ T5907] usb 5-1: device descriptor read/64, error -71 [ 789.043779][ T5907] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 789.053404][T18301] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 789.173320][ T5907] usb 5-1: device descriptor read/64, error -71 [ 789.206397][T18301] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 789.216206][T18301] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.225087][T18301] usb 6-1: Product: syz [ 789.229243][T18301] usb 6-1: Manufacturer: syz [ 789.234429][T18301] usb 6-1: SerialNumber: syz [ 789.284498][ T5907] usb usb5-port1: attempt power cycle [ 789.363317][T18286] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 789.513198][T18286] usb 4-1: Using ep0 maxpacket: 8 [ 789.523627][T18286] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 789.531908][T18286] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 789.542058][T18286] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 789.551851][T18286] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 789.561809][T18286] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 789.575382][T18286] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 789.584548][T18286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.633962][ T5907] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 789.647298][T18301] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 789.659569][T18301] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 789.670792][ T5907] usb 5-1: device descriptor read/8, error -71 [ 789.677156][T18301] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 789.688996][T18301] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 789.698802][T18301] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 789.745251][T18301] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 789.809126][T18286] usb 4-1: GET_CAPABILITIES returned 0 [ 789.814775][T18286] usbtmc 4-1:16.0: can't read capabilities [ 789.925821][ T5907] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 789.954984][ T5907] usb 5-1: device descriptor read/8, error -71 [ 790.063555][ T5907] usb usb5-port1: unable to enumerate USB device [ 790.075975][ T5907] usb 4-1: USB disconnect, device number 57 [ 790.183427][T18286] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 790.333275][T18286] usb 3-1: Using ep0 maxpacket: 32 [ 790.340725][T18286] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 790.348936][T18286] usb 3-1: config 0 has no interface number 0 [ 790.355093][T18286] usb 3-1: config 0 interface 12 has no altsetting 0 [ 790.363674][T18286] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 790.372711][T18286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.380854][T18286] usb 3-1: Product: syz [ 790.385092][T18286] usb 3-1: Manufacturer: syz [ 790.389680][T18286] usb 3-1: SerialNumber: syz [ 790.396594][T18286] usb 3-1: config 0 descriptor?? [ 790.407330][T18286] f81534 3-1:0.12: required endpoints missing [ 791.447936][T23916] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3748'. [ 791.495081][T23918] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 791.824260][ T5907] usb 6-1: USB disconnect, device number 117 [ 792.283275][T18301] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 792.433198][T18301] usb 6-1: Using ep0 maxpacket: 8 [ 792.440129][T18301] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 792.448617][T18301] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 792.458729][T18301] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 792.468616][T18301] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 792.478626][T18301] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 792.492481][T18301] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 792.501669][T18301] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.683210][T23053] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 792.683235][ T5141] Bluetooth: hci5: command 0x1003 tx timeout [ 792.729488][T18301] usb 6-1: GET_CAPABILITIES returned 0 [ 792.738339][T18301] usbtmc 6-1:16.0: can't read capabilities [ 792.846597][ T5883] usb 3-1: USB disconnect, device number 127 [ 792.992641][T18301] usb 6-1: USB disconnect, device number 118 [ 793.087622][T23950] block nbd3: shutting down sockets [ 793.138492][T23946] [ 793.140833][T23946] ====================================================== [ 793.147831][T23946] WARNING: possible circular locking dependency detected [ 793.154840][T23946] syzkaller #0 Tainted: G L [ 793.160797][T23946] ------------------------------------------------------ [ 793.167795][T23946] syz.3.3757/23946 is trying to acquire lock: [ 793.173838][T23946] ffffffff8ea5dd68 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x20c/0x18e0 [ 793.183389][T23946] [ 793.183389][T23946] but task is already holding lock: [ 793.190744][T23946] ffff888026aa3990 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 793.201008][T23946] [ 793.201008][T23946] which lock already depends on the new lock. [ 793.201008][T23946] [ 793.211400][T23946] [ 793.211400][T23946] the existing dependency chain (in reverse order) is: [ 793.220398][T23946] [ 793.220398][T23946] -> #2 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 793.228980][T23946] blk_alloc_queue+0x52f/0x610 [ 793.234259][T23946] __blk_mq_alloc_disk+0x197/0x390 [ 793.239900][T23946] nbd_dev_add+0x499/0xb50 [ 793.244824][T23946] nbd_init+0x168/0x1f0 [ 793.249481][T23946] do_one_initcall+0x250/0x840 [ 793.254758][T23946] do_initcall_level+0x104/0x190 [ 793.260195][T23946] do_initcalls+0x59/0xa0 [ 793.265024][T23946] kernel_init_freeable+0x2a6/0x3e0 [ 793.270730][T23946] kernel_init+0x1d/0x1d0 [ 793.275586][T23946] ret_from_fork+0x51b/0xa40 [ 793.280679][T23946] ret_from_fork_asm+0x1a/0x30 [ 793.285953][T23946] [ 793.285953][T23946] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 793.293148][T23946] fs_reclaim_acquire+0x71/0x100 [ 793.298595][T23946] prepare_alloc_pages+0x152/0x650 [ 793.304209][T23946] __alloc_frozen_pages_noprof+0x12f/0x380 [ 793.310519][T23946] __alloc_pages_noprof+0xa/0x30 [ 793.315963][T23946] pcpu_populate_chunk+0x182/0xb30 [ 793.321630][T23946] pcpu_alloc_noprof+0xbe2/0x18e0 [ 793.327173][T23946] xt_percpu_counter_alloc+0x161/0x220 [ 793.333174][T23946] translate_table+0x1332/0x20b0 [ 793.338643][T23946] ip6t_register_table+0x11b/0x800 [ 793.344265][T23946] ip6table_nat_table_init+0x43/0x2e0 [ 793.350153][T23946] xt_find_table_lock+0x30c/0x3e0 [ 793.355690][T23946] xt_request_find_table_lock+0x26/0x100 [ 793.361831][T23946] do_ip6t_get_ctl+0x716/0x1230 [ 793.367188][T23946] nf_getsockopt+0x26e/0x290 [ 793.372285][T23946] ipv6_getsockopt+0x1fd/0x2b0 [ 793.377553][T23946] do_sock_getsockopt+0x2d3/0x3f0 [ 793.383084][T23946] __x64_sys_getsockopt+0x1a4/0x240 [ 793.388792][T23946] do_syscall_64+0xe2/0xf80 [ 793.393804][T23946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.400201][T23946] [ 793.400201][T23946] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 793.407927][T23946] __lock_acquire+0x15a5/0x2cf0 [ 793.413288][T23946] lock_acquire+0x106/0x330 [ 793.418297][T23946] __mutex_lock+0x19f/0x1300 [ 793.423390][T23946] pcpu_alloc_noprof+0x20c/0x18e0 [ 793.428920][T23946] sbitmap_init_node+0x1e1/0x640 [ 793.434364][T23946] sbitmap_queue_init_node+0x3e/0x4d0 [ 793.440264][T23946] blk_mq_init_tags+0x15c/0x2d0 [ 793.445626][T23946] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 793.451598][T23946] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 793.457909][T23946] nbd_start_device+0x17f/0xb10 [ 793.463268][T23946] nbd_ioctl+0x579/0xe40 [ 793.468014][T23946] blkdev_ioctl+0x5e3/0x740 [ 793.473034][T23946] __se_sys_ioctl+0xfc/0x170 [ 793.478138][T23946] do_syscall_64+0xe2/0xf80 [ 793.483154][T23946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.489563][T23946] [ 793.489563][T23946] other info that might help us debug this: [ 793.489563][T23946] [ 793.499777][T23946] Chain exists of: [ 793.499777][T23946] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#52 [ 793.499777][T23946] [ 793.513420][T23946] Possible unsafe locking scenario: [ 793.513420][T23946] [ 793.520853][T23946] CPU0 CPU1 [ 793.526201][T23946] ---- ---- [ 793.531546][T23946] lock(&q->q_usage_counter(io)#52); [ 793.536912][T23946] lock(fs_reclaim); [ 793.543402][T23946] lock(&q->q_usage_counter(io)#52); [ 793.551281][T23946] lock(pcpu_alloc_mutex); [ 793.555771][T23946] [ 793.555771][T23946] *** DEADLOCK *** [ 793.555771][T23946] [ 793.563897][T23946] 4 locks held by syz.3.3757/23946: [ 793.569076][T23946] #0: ffff888026a161d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1ae0 [ 793.580563][T23946] #1: ffff888026a160d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1ae0 [ 793.591530][T23946] #2: ffff888026aa3990 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 793.602237][T23946] #3: ffff888026aa39c8 (&q->q_usage_counter(queue)#36){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 793.613213][T23946] [ 793.613213][T23946] stack backtrace: [ 793.619105][T23946] CPU: 1 UID: 0 PID: 23946 Comm: syz.3.3757 Tainted: G L syzkaller #0 PREEMPT(full) [ 793.619125][T23946] Tainted: [L]=SOFTLOCKUP [ 793.619130][T23946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 793.619138][T23946] Call Trace: [ 793.619144][T23946] [ 793.619151][T23946] dump_stack_lvl+0xe8/0x150 [ 793.619170][T23946] print_circular_bug+0x2e1/0x300 [ 793.619187][T23946] check_noncircular+0x12e/0x150 [ 793.619205][T23946] __lock_acquire+0x15a5/0x2cf0 [ 793.619223][T23946] ? kernel_text_address+0xa5/0xe0 [ 793.619236][T23946] ? pcpu_alloc_noprof+0x20c/0x18e0 [ 793.619253][T23946] lock_acquire+0x106/0x330 [ 793.619265][T23946] ? pcpu_alloc_noprof+0x20c/0x18e0 [ 793.619285][T23946] __mutex_lock+0x19f/0x1300 [ 793.619299][T23946] ? pcpu_alloc_noprof+0x20c/0x18e0 [ 793.619316][T23946] ? stack_depot_save_flags+0x3f3/0x810 [ 793.619333][T23946] ? kasan_save_track+0x4f/0x80 [ 793.619349][T23946] ? kasan_save_track+0x3e/0x80 [ 793.619364][T23946] ? pcpu_alloc_noprof+0x20c/0x18e0 [ 793.619379][T23946] ? __kmalloc_cache_node_noprof+0x3ef/0x6b0 [ 793.619397][T23946] ? blk_mq_init_tags+0x83/0x2d0 [ 793.619410][T23946] ? blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 793.619425][T23946] ? blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 793.619443][T23946] ? __pfx___mutex_lock+0x10/0x10 [ 793.619456][T23946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.619473][T23946] pcpu_alloc_noprof+0x20c/0x18e0 [ 793.619494][T23946] sbitmap_init_node+0x1e1/0x640 [ 793.619513][T23946] sbitmap_queue_init_node+0x3e/0x4d0 [ 793.619526][T23946] blk_mq_init_tags+0x15c/0x2d0 [ 793.619540][T23946] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 793.619556][T23946] ? kfree+0x1c1/0x610 [ 793.619570][T23946] ? blk_mq_update_nr_hw_queues+0x977/0x1ae0 [ 793.619593][T23946] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 793.619614][T23946] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 793.619634][T23946] ? __pfx___mutex_lock+0x10/0x10 [ 793.619649][T23946] nbd_start_device+0x17f/0xb10 [ 793.619670][T23946] nbd_ioctl+0x579/0xe40 [ 793.619687][T23946] ? __pfx_nbd_ioctl+0x10/0x10 [ 793.619701][T23946] ? __pfx_nbd_ioctl+0x10/0x10 [ 793.619712][T23946] blkdev_ioctl+0x5e3/0x740 [ 793.619729][T23946] ? __pfx_blkdev_ioctl+0x10/0x10 [ 793.619744][T23946] ? __fget_files+0x2a/0x420 [ 793.619760][T23946] ? bpf_lsm_file_ioctl+0x9/0x20 [ 793.619772][T23946] ? __pfx_blkdev_ioctl+0x10/0x10 [ 793.619788][T23946] __se_sys_ioctl+0xfc/0x170 [ 793.619800][T23946] do_syscall_64+0xe2/0xf80 [ 793.619814][T23946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.619825][T23946] ? trace_irq_disable+0x37/0x100 [ 793.619841][T23946] ? clear_bhb_loop+0x40/0x90 [ 793.619855][T23946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.619867][T23946] RIP: 0033:0x7f15d819aeb9 [ 793.619880][T23946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 793.619890][T23946] RSP: 002b:00007f15d8ffd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 793.619904][T23946] RAX: ffffffffffffffda RBX: 00007f15d8415fa0 RCX: 00007f15d819aeb9 [ 793.619913][T23946] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 793.619921][T23946] RBP: 00007f15d8208c1f R08: 0000000000000000 R09: 0000000000000000 [ 793.619929][T23946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 793.619936][T23946] R13: 00007f15d8416038 R14: 00007f15d8415fa0 R15: 00007ffccfa44888 [ 793.619949][T23946] [ 793.626396][T18301] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 794.126185][T18301] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 794.135269][T18301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.143558][T18301] usb 3-1: Product: syz [ 794.147721][T18301] usb 3-1: Manufacturer: syz [ 794.152296][T18301] usb 3-1: SerialNumber: syz [ 794.565278][T18301] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 794.577241][T18301] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 794.607775][T23923] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 795.796002][T18301] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 796.411970][T18301] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -EPROTO [ 796.424193][T18301] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 796.436315][T18301] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 796.445818][T18301] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 796.504678][T18301] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 796.516767][T18301] usb 3-1: USB disconnect, device number 2