last executing test programs: 30.171857432s ago: executing program 3 (id=779): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x4, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x6, 0xe, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x8, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="000628"], 0x0, 0x0, 0x0, 0x0}, 0x0) 29.61464506s ago: executing program 3 (id=781): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 28.701094319s ago: executing program 3 (id=782): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200"], 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x1, 0x4}, 0x4) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 28.125010563s ago: executing program 3 (id=785): pipe(&(0x7f00000007c0)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="4700000001003f", 0x7) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') ioctl$NS_GET_PARENT(r1, 0x8004b706, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2040) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff3, 0x7}, {0x7, 0xd}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10040}, 0x4000050) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) r6 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r4) sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000011"], 0x30}], 0x1}, 0x0) pipe(&(0x7f00000007c0)) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r0, &(0x7f0000000340)="4700000001003f", 0x7) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) ioctl$NS_GET_PARENT(r1, 0x8004b706, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) (async) socket$phonet(0x23, 0x2, 0x1) (async) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2040) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) (async) socket(0x1d, 0x2, 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) (async) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff3, 0x7}, {0x7, 0xd}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10040}, 0x4000050) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r4) (async) sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000011"], 0x30}], 0x1}, 0x0) (async) 27.668566896s ago: executing program 3 (id=786): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d80)="900736ffd7fb87465963b0d3522d82eab665c2832180d084a2b466cc4ea717ab45c96aea10a8c013fdd2a867d155cff2cc400602ee3af3f80c92a078afe315445c352d1695da6c390258ae2e7efc2c02fc161e1b5e271d98a04e5d977b6ca58c3c61f2e559489bcad21796d816c99b330ad4f7f0ff31a95635d4e18731539a4485d53546337f6453f17004a64899aa1c42bceea63fb4bb4a43deb4de7ddf18f773c836c304b2f2edf9c37e2859da3e0f28a1db43866032877a5b3218da48534a923d2b864964cf53bc0156359c23b20c4b5ed905fb9b6dd9178e6110aa63b24a24c71ff171dbf7bb65c26a4f3e3b960e1fe4e5c38c458170e7e5d38a2fa77262a334b70da13159214b59e99043f2d45738cfe619d4e54d9d9d52faad4185dc1461e3de1d4a8e2bac117f496b9198352ed12b367de480013f50733fcce28686f100f105d037fe1d3c387164fd3bb6d9f758e8c35de274cc824e0ef8a4ec4d740cb37a646300158bd9f137d0712242f3ff01641eedbf6207cc3e7b9314e8cd44581f210ae9980710a38a426305d71a732645e48a5faf121177bb16c0253dbba4b6495b2fdf147bf3557edbf1134ad8135eddb75535613f0c13e995f458d7117b7b4484be02dda974d1f894074f5258bc3416e61b41949c2bca7746dd9edc6fc1d0b9305c7ee799be795a7df68f76872046beb4e1ff6d5a62a7177902fdb74cb5d1e104b8852fd4db5ced74b73b68eb138695110452ddf5def0a6961d7010d1b170391e5897f32102ebade663ec2804708f63becf2b7595461d10062df096794e1cb4232cda841f3a86a6d5e50fe8db194bfb3721c9bc3e29b176f3554f1010776afe8fe89b5869bb25e5ffe24ad26f382b7176fd85e3d19a2d8e58031e1939ed39c96c4f2f967f75049ee7e36469b8c010992623f8248cff1c362bbb12e8ed5fd05b72fb1f391b4c13d06a453f2169bea0cc67768e06311494a3dc736c80ef644fc0d09dae7dfc09de2b7f6d0b21734486503b74bd3387ffa9a5da1b39a2ec9c410a4b2d4ec1f8ef1d3a7ced2637878b038da8d69b32a3e402580e5b746f8e7f930ff478e6b15f475b6b96a25cd8f55bdd73bc483ee5625b56b81f8d9183bc36a5c4c0974db6ad499bf1fcccb994c3defccf1324543260fb1a790ef60d50da4f955783af41066d51abdf7a566c2b2c876e0199e7b920068f226c7a5f14b65b3dbd7fb244c3fb1660740b5f849942e468af39e5a9bc80a6075878dfac23d0ae839a0e509448130e7dabadd7c494b64e67be6400ea34b097bfc578deb3c5ebefa9c1019ef65bf641c9388d9b29f6c9c2e5b8b81fcfdd94059d9a21c80f318d9675721a31ca77a4920b06cb744e96ae74ef66b4dfbe5d1085c9485abf9356d966cb63a75a250dc4432b89ec09dff3531613e12694abdd61d270ab34fba12ae1db3ed45fbc87eb1725f962de4922a64c82ed5d4b652ad926be7330f15fee7a6d53719f6231be26e7593454eabf6fdfe940f04c8cdf022ce9e278c0e2ce9aa9285594972d2b910cedf1d956976f9e6d9571210e4939821c9b68146925e2780db8e1fe6872ba1e178dfb627d9623b5c700cae1d3ce830422b9d906060b28d0956af355a2ce927c9cde8391b43fdbccd428403ee758de7c09de5a2c8eb2dac85a0e", 0x49d}], 0x1}, 0x84) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @vbi={0x8, 0x4, 0x50424752, 0x38416761, [0xfffffff8, 0x8], [0xffffffff], 0x1}}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0xfffffffffffffce2}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d80)="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", 0x49d}], 0x1}, 0x84) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @vbi={0x8, 0x4, 0x50424752, 0x38416761, [0xfffffff8, 0x8], [0xffffffff], 0x1}}) (async) socket(0x10, 0x803, 0x0) (async) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0xfffffffffffffce2}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async) 27.652081223s ago: executing program 3 (id=787): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f022}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) sendmmsg$inet6(r2, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc89}}, {{&(0x7f0000000100)={0xa, 0x4e20, 0x6, @private1, 0x200}, 0x0, &(0x7f0000000600)=[{&(0x7f0000000240)="60b5429a99383640989e83199809bae1596f55104588339fb010c38e758ab3c37da64a33433c37ef6f973f8e6370685bb9fc5b0e43e335cd54e15b78282b7f6b3759e4c704d58a2086f972abc829721265457c1e8ef4adb0aa10127e89"}, {&(0x7f00000002c0)="e8bf25136bb60690760ddac6022edb197cb19bac9664943f226d52d830b0"}, {&(0x7f0000000300)="84a51f00f6db34acd15b99aff4"}, {&(0x7f0000000500)="7aaa88871cc6b1ba375732d093e476a5f1836e19c6b4860797dfa6637c429db518fff45876bd342665b99a9fc483ee9f9b117833c46f71a7ef34b8e6223fb91076b13f61436d84ef0fdf1a6349bfe92dd0de8246b564b8055ff0b5551f73b588f507fdf05ec95d5e1976937af7f929636b730dcc6405fbc0ba2e16978157b7df7104fc3d36e0e8827b4f2ae0f27b0629282f6c99e1d3602f5a89d9df2ca1fc64d4c0180c2227199a53bf28aeb10d78d8be99dfadd4b88ed99db73d700043cb42e890de58ad0a8cb02479376751cb58df83fe7427"}], 0x0, &(0x7f0000000640)=[@flowinfo={{0x0, 0x29, 0xb, 0x3}}]}}, {{&(0x7f0000000680)={0xa, 0x4e21, 0x11, @local, 0x6}, 0x0, &(0x7f0000001980)=[{&(0x7f00000006c0)="e4f57d982dfddbae52bffa1993fdcc1ce941568c1b90e0ebe50edd8b9164c9583def451edbb789ca962caedca6e0493f18220e86d2776b4e863b9a115e32b9f4d88fbd5a46f51a3d9649cb97d4123e9e6122e844cb7df44787ab7132665017416ddf5038f25c498d8ec2f9ae6eaf1f862ab77186eb1fb79a0e34dcfbdde7dfa418e5cafa81659c6bce50f4cc3e898d0f98c17d1fac5fc66431af9e70c82105cff9625da3caaff7dfddb7cf9e0b0659985c07491221596b6dc4a249e70b5b8dbd4ebc88bfcab486462cf15d57524af01aeab122ce304d86105ea48085822a178feea32b343d11402132"}, {&(0x7f00000007c0)="9443fd5b36f7a487f213d1d2d6816a4c52bb1fea1afc7161f29a455e404b5596797050bdb639d6d91155285a198918dfe198d3573d"}, {&(0x7f0000000980)="37e4b953fd4b545aa91f597609e700579c653487e97eecd3f0129750d08e2fe84dd5a5466702ec36bef4964d34fafd0f3377a607aca3ce71b7d5091ad20ef343de7b7105475c251bbaed6ddef22716a76bc3ef2e0333b47d1c8875d40c324f512c4f9cf938c44cdbf0365e9dd83f4a839521291f5a6eeb0544724dfc813fb1b2d89381051e412650b029647353e9713dbd2ef8b7c80b87ae2152bbbd51616739c77778df234c9850e4fcba561badd5ff5344ab806f905dd0641eaef616ab6c50e4c8cfdec83d158581c060f778701e7a5e1e04bc285c4df6a12d25d1bb65512d61d24073cf3a562b655fdd4604b450308aa14b52d6180aef762645084c90d78d1781566c255c71a8bd3945dde3ee94b4009e3685abdccf52cfd1b69f0acc4b9f9ebb77394ceb9d64b5a33d2429f2f266bd43ba379fa26d19a346de7b42b2932a0d0f25f8c7a7bd626e83f1f25b299a0fd4be66571424e7b7808346aace3746f25ff48d855bb10f5a5e66c78ef71ab922c8979d2235d2d5aa0da92b362d969a9179b05fbf692505bf178310af1f69837c2fccda09b190748da0c76bd152a421649907bb8779c2b9f55d41d8e675c3e852587e118714ff477638c4a1d23ce5a85764efb079d0635d9c5af12e46b793cb18afaa2d008e66aedda7878f5a59d613e92a56fde273f7fb59fcfbc681d804777387cc3f041518216287f21c2c028c741ae411e77744346f5c39664130ba6e5e07db9d91b410a6e2f4d2d5c933810f22d1c641c068aa73126396cc2cec97ae543eb36f8d4dbbb638ef20d58d57219b54e50003a2fb83f538e68af40495b4188ba47f36693f82e0869efa42da2f6296f2d2f48e1263a2687f91d7d9fa4f92cf8fe258947c77034785006cf6b7971d260306f76ede04252109949fa4f660312aa5cd081fb70b633896bc94209de3bd13ad61f7a1d22265d7ab2e7b0da65ef9694c8d278836bfbb2d40d67ed316e418c41414a2f4784a4b60db37ad97627a1186693d788d0f0ae8bb69a20ea8eeb0866846a3ab31b04b42b5b65e070cfae343ca13d117220dc6edfba61cabb8b918e3403e3fea00ac6351ae69065f414938dad88bc75f90915707a105d47be75c57db26bf42d0aa7c59f2252b63b533cc41a39f8a81efcafde8c5f869b491bb9ee852e9dcb510f3e35d8811e19d4efe1b910b71cbde864b5579138ee4af0dcffd50268ba6a225d5a28f9cf38844d8401fbe1df64af3712a14bd4071bb4e638d79041cde6e2d9dcfcdc863a0ac3aa3a91be08a108dc04ab2a67ea7933bacda7e1f3912c454b3dc2e177fb2209a05408613f90c582282205ef8e6464d8e2cb2c1b874963f5cab81b50d9171cb889e3d45620dffd2e6ddac3f17ad1c210be9e1d8cd8f10ac17e3edd84d7930ee7b81251f570e1a09e57570863a61dbb742572573de4c88652facd9d3aa8788a7f1035d849f2edbcb9396bdfb87c0629924a2cb0014861e822fefb7100a62bb653e60c6aa2e14eba63f6eedfdab0bc0a003d2ea458e2517b789b4d7edad71e0c05166af583d76edca5c63824ff8f976a97469906b2a1e1e7f8cb0f06ec39aad83eb1d154e00b8bf84938240b78ab2357ee85b19a273a0ce3fc810343193be3152d5521b907a10b3701c219d2b1d887f9b90cc1031013c7cdef58ec4edad2974df79c5a1df13d4529d68d4e9466e9a5f39bf94471ab5758fff2b161133c29a4ec6de6506ad114a432522b43ffe2c11d9f6cbf594f4dd7f3403d8de4b8b443dcf25b5ab8dd738ffb9b67a1f02a5e3b1b1c6aa0fa1c3031521c86bdd1642a89f3887e6bd64ccd2d7b6d4f256340f9366b4c97e6fd77369b8f3f0e0358b3545d3213ed1d1392d7b260c88c0a87dc71bf21d24074d08b55bb47d314aea9f9d49eec077fe0bdee529d1f02a88a1d7e5b39a6c86dcfd1f687020b72b0946632eb349a7dfb0d3aadaa404f6aa47ec4182c5cb3cb358670572a5dbde7ec7632dbd107dd860e29e8fe5e3174058c1b8db311a58b69a07670db979cdf98f262c158088a59a6139dfca2bc30cae48bd7cd91a66c1b8588f87959f2f3960f8408eaa8cd50a8de77e98d467d9d36cdaf29c4125f0020c0a1442f37fb22e28b153bf840dc790b285316f9fafd56890c1c42391f10aecd00ad29029ad104bc30e69564d1a2496d14bcbeb96b5bd0f6e444a8c3b0f28efecc6b4987f1c4068171280740c42a105313d67bbb53981698adacd8d75a2e362f52d27b2aa06bc8bd2246bae80cb404be098a62d6c5fc375be63a7ba71dafe25a502ce247ebc32b1371fd66174826c3c425e8a3a81bf974ceb4ac2c642ebee15e2cc817bd4be60c287269afefd4be480307a131e11338791821eecb561d9c8d11ddb33cde31d0bfbcfc90d98a588a2fa180801b6bf4a30669756f3a87c0d79ff4f0ecaca4bf54ae18c3bf9adea9db41445a376a5d59557efbef37b8045343e0b897643973a4807a71234eb26ced4e32255e25c2fd26e90659e44d3f0eba196472c425241a0a0ec5146854f88103f1a7ecb4acf746f3d8162e82ce2539dbcb483cf91e013054b2b4d0f995b5bbffdaa77b5cb2cba469067848e39c6c07339547bfbfd32fcaf92b9b56c63b91819badfb288abd8b489e30576414c446e53647cf1118ba847f17075e53d2940bdfd1a7937ad8bc033f05094e8862a760b7108e82005c0cd62aeea788b3ccc7f4dfc88be0f53b39ebaa84fe46d4a47ce18c6183d01a538c71bd36ce805c2cd098c52aac788481ce611b20ceffb26576ae57e58230f81f505211f306be792a19c57d72f5621deffe274a5eff9418bd4283a2faf68f0c79d0a7c187b70366d8657a83d56b1166b6c14d27d1e604800d4edc657e82d9abc5c496ae84b3c8af5c571e871744730a865221c6d63ad9b99030129a27700d3d75bd164139f76e25b28bb8ddf73c6426b4d29b57ade1e972701359c80b000b682ca0d2039f8be8f36e2f94acd3bc906002d6cd1ab84fb497630874a0923a6b0bc5b3b02629a2ec984aaa3928978fa4e3ddd763efdae7fe32988b67bcd260966fe61243f4f31b9abfb079e824e130d1a5d6c7b829b2f5302650959f5efe0ebb43d7b6549c165dab692b6f54fe306631e9a4b65347b97e2a66869877a6751d06d8b164064cee5be261bfcb9df67ea94666d0b3087e0b77c56315467df42c64538ed607bb73306b1806726d225851330996bdbbc1caf9f0cf3545a3bb9810527cff29f39f8f089192f120d6d924ffae345a3be1308b518b2d3e0e86eedf5ea73963f72306d11b74539d792b1ebc6568b45764e00a7fa6a8e35d6d6a900c21e7e50b9afe564fe828631cc1227047164d25598dff9e08fca5e5dd409d2e4ec6382f549536f0c7198d541cfc6b9978924a272fa8bcfab3fe4fd17f667fe404e3dfccae01ef17c8a28fb8f7c85e47579779dbf322a1c6bd0b7b547e5c1c712bca28e081790682b1555e5c0661f2272afcf92745f1530ef2cc7dc1c02d62449b360f875a9429356a4f17d20d0a9278594e1887df94c4931b562cd445091082be74f0b9a263b6dde725943b922b1a1646801d699eb8b1a24061873fcc8363e983dc315d6d132f7908997a5cfc05de78e64498e70ebd8b0ec05df853f877df2ebeb730a643ba9e03339200044747d3f451d4c0b529621e7d55c0bf9d10dffcce09b2e4752e380ca18236aa0fcbb2d7fe6577335eabcce8163825eca8605b9d97fec9eff8fb2e249e22ccb54532345f2435933942a5b6b6fdc701e346f45d0f05b0f89f77acdccf0e34bb6c65940b1f5deb4158068170ad46b5aa8bf2390b2216526792e20893f4b56648f46eb29de0c954d85a98f36846114af109f5cf0ed692b95557f4fcf9a18928a5b9061c7a668adc2adaf36522081900524d4a6a88625f4ab9e4786df1e8c99626e0ec84cef14573ef46a6906a2be090ec55ca8c27ca6914453b5131451d4dc89e1cf05b3bd85229fa0e1af22366772276b3d0e3848d84ee034b61a872c3d7ed2c305a03c415c5ad580d978706b30c1eab5773199dc5c820b6284f8b211d91bdc0e8c60f7e02452f4ccc8b22e9f9c79b7305ef557f6e700ec7f432789f6c671ec9b8edc93724c287acfe4a24ec6eafffade9f343c9133e82ecdcad49d8bd88194b5580b01f6bcb6b29acf6ec8cd73ea4dd9eb9c2fe9b2b7fd32653917fd6ed2ede0da8c35b8b693caf8cfc7ff8320da20c2ed1bf5fcc3f9f9cf7af2e2a591d3ad85526e22a985f25038c77ada9f465776877287c9c5e6b7ebbe779054449c0bb901b3512b8dfb9e6c495e79b1fb895c5117b6f38a1302d0f9cdfd82f96fcdd45ff385c2c7e5ee5561d7c71428444001a365fed2dcd807388297158bf2b68d0c63a48b0db760cd6d2f69b2b066d15df2e19f085632456c44aae01a00b3de49a21a2d6f99e33b41c483e1fc7084cd36e0334f0b54963579611509a399e5252f25115dff1e523e844b497aef2f003ae3cb5171da1559865e379c84341f4b2ef9241ffa2314b17bd75034391f61f58561358c8e86660aced758e5f9edb3ee92e59755eed6a6caafd0092b321d22089960f031b766e0450f38a331c98882a948654ca674161060e7401c2c8ef9d65e528201f2e1f4973e1205947c48b29446cb82910e3ce0b338bea49acc6c278f9a28aff7b3782444044df222189a69e8b9fd51edec9703e0d197a94f55a35c33065b847de4fe5076b0311084abe12696af41d7ca5c34c7c5784485c9e632cd68ab73479330384b3494dd55790b77f092cef26bc060ef685446469cab39144a20a271e8586876d6311589cc861839f510c159a9bfc10255be121b571902f7b9c6cf4d9857914f6b38662a8c65800094765b3db9b58f56121757b6e033b775fca48a7cefe3d9962cbcf10efee3b3b832d173cfa03d4318ee7e472f20cc25adac1b528b0c9dc7b3e42d9db1afbc886e5aa719ce0b4d8bbf94fa539237b373156bd6489447602b45a952a294cf6ee9f762976236d317b64becf58efbc9b72e4cb67a61bab6d06bf9d9109ceb75a1cd32a63e8c08fb9dd78e045afcbbe0bc1ae862686bdad772b0d9b3f8dd9590a21fd0953ed9972e3102376c7320352461bc725b0136f5984d52cfbb908b5efb71885dc222ac477e0095e48a77c1907cc1c26af1a18d574fbcd717e2f36848169678369643907045474cee389e1704df2e5ddf4d1d55025a4d25c0d431961954dab11782ab7d5d59fcfc1c5d23983497bcce32b0fb47b9309a5597ad445cc4fb8b14d276b083d41e091148300ff732d381c5b029b79ea9afd48d4e6d85b3c19136d6c946924082b01dfac6d2366b22fcf937779e5be1fd9a5cbf66d5ee81b1cad337a735b70441b8675a4e595bce79e503a80959581cc36b60a53db1f7c46654afb11cffa40c47510cbf41a0a3bf6df4a0d4eb54aed8edf92c543e6e4a69355e1285a26a0bb1d0267de6c6ea13e01db1bd3019a7f3905c982013f6cfab8625caa1a96f07a2cdb886a68a3382f44e2ff9c8ddafed5c4a5b3e3279b9288fc5b4b2945c2c52ab9edf453c53dbf7b48a11986c39d56a9d9e14ed2a459c64e8cf27888a0f8476fd5e2dcdb781ec854d761ce33a0d7f802e1fc4f08a354851f201edada333bec47eedb279918abeecf38af86f349f5ef319216b2d877fe87a4699c4b9ebbbbac1ea10486971d7e30d7fa10bda932e8f9016e0d9d9426d66ff3961f8877df9cceef9989bb229b3d27e2da561e58249344cbf33f32592fe870b4b69cc5c99bcdadacc27bc01af7894bcf926e53279"}], 0x0, &(0x7f00000019c0)=[@dstopts={{0x0, 0x29, 0x37, {0x32, 0x0, '\x00', [@hao={0xc9, 0x0, @private1}]}}}, @rthdr={{0x0, 0x29, 0x39, {0xff, 0x0, 0x0, 0x1}}}, @flowinfo={{0x0, 0x29, 0xb, 0x9}}, @rthdrdstopts={{0x0, 0x29, 0x37, {0x3b, 0x0, '\x00', [@ra={0x5, 0x2, 0x3}, @jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x80}, @generic={0x97, 0x0, "cd7cbe94bd857651f61506d4d4491ab4b73dce144434cd46ef62b20f851ef48945fd6b85adf2f77b20863d7d10ab728d6c98cfa12c569dc5856ebfbf13827dad700e246052d63d6e51a86cb1543ca18ee86a36a2838967b27975b886914a78f217cb09d817ed6b958f31ac14a399f5e6"}, @jumbo, @jumbo={0xc2, 0x4, 0x61400000}, @calipso={0x7, 0x0, {0x1, 0x0, 0x7, 0x6, [0x1, 0x0, 0xa2, 0x0, 0x8, 0x9, 0x8000000000000001]}}, @pad1, @ra={0x5, 0x2, 0x4}]}}}]}}], 0x1, 0x20041c10) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x107) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1, &(0x7f0000000040)}, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f00000013c0)={'wg0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r6 = userfaultfd(0x80001) r7 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, 0x0, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r8, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f00000003c0), 0x4) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="024005"], 0x0, 0x0, 0x0, 0x0}, 0x0) 16.132130053s ago: executing program 0 (id=829): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20480, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r2, 0xc0045103, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4066, 0xfe2, 0x17, 0x0, 0x0) r3 = getpid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x3b, 0x1, @tid=r3}, &(0x7f0000000340)) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000140)='X', 0x1}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000300)="f617a8ea0700ffffffffffff810016fe4305", 0x12, 0x40088d0, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x7, 0x6, @local}, 0x14) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xf90}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 15.353676275s ago: executing program 0 (id=831): r0 = add_key$fscrypt_v1(&(0x7f0000001040), &(0x7f0000001080)={'fscrypt:', @desc1}, &(0x7f00000010c0)={0x0, "202457facab502088d8a09ea434f286d340f466ff5be2d5bfeb14661889c37fbed10962baac0267efa37379088368e2ac35b9f5672d340e6ae1062dc601017af", 0x2f}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000001140)={r0, 0x8b, 0x28}, &(0x7f0000001180)={'enc=', 'oaep', ' hash=', {'blake2s-160-arm\x00'}}, &(0x7f0000001200)="30611d4c6ce79db4b4a21e1ebde85a5296b7e1fa61018169066db36211e7b2f3c2dca3f439ef23dbb229920ec92637b9439180159bc6ed6d797830af5d0adbca96bf04f83635e5d98486fa16a624e40643748c825aa75f58af2bc721f90e8b0f6043234936372abf5760a1f876bab33243610fe892efc07f2b9d55086744ab87422a3ed2be7dc2a3c1bc41", &(0x7f00000012c0)="48f4377d49e42683162a1185af2a1864723bd5617d5c3deb4fc3a922ac32897d9ffc7f1f45adf638") r1 = creat(&(0x7f0000000000)='./file0\x00', 0x40) (async) r2 = fsopen(&(0x7f0000000080)='squashfs\x00', 0x1) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r2], 0xb8) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000810, 0x0) (async) mkdirat(r1, &(0x7f0000001300)='./file0\x00', 0x211) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "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"}) r3 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r4 = dup(r3) write$binfmt_elf32(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000600000000003e03000038040000d600000097700000fe0320"], 0x58) (async) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0xa67c4000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f00000000c0)=0x1, 0x4) close(r1) (async) socket$inet(0x2, 0x5, 0x2) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 15.02128405s ago: executing program 0 (id=832): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe80003f000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x14, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x4004004) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40186f40, &(0x7f0000000440)=0x1f) (async, rerun: 64) clock_gettime(0x3, 0x0) (rerun: 64) r3 = syz_clone(0x30080391, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x0, 0x0) 14.973409132s ago: executing program 0 (id=833): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x14c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0xa, 0x0, &(0x7f0000000100)) sendto(r1, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@remote, @in6=@private1, 0x1, 0x794, 0x4e24, 0x0, 0x2, 0x20, 0x20, 0x3a, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x6c}, @in=@empty, {0x0, 0x5, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@rand_addr=0x64010100, 0x4e24, 0x0, 0x0, 0x80, 0x2}, {0x0, 0x0, 0x6}, {0x4}, 0xb, 0x0, 0x1, 0x0, 0x2}, {{@in=@rand_addr=0x64010102, 0x2, 0x6c}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000, 0x9}}, 0xe8) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x4044000) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) mount(&(0x7f0000000340)=@filename='./file0\x00', &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='btrfs\x00', 0x3880, &(0x7f0000000740)='wireguard\x00') ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r4, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @empty}}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4040060) 14.764727735s ago: executing program 0 (id=835): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000180)=0x20) unlink(&(0x7f00000001c0)='./file1\x00') sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002040)=ANY=[@ANYBLOB="18006641154907012bbd7000ffdbdf250a7cff0004000409"], 0x18}, 0x1, 0x0, 0x0, 0x2400c080}, 0xc010) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) 13.637083815s ago: executing program 0 (id=844): setresuid(0x0, 0xee00, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x3c, 0x0, 0x1, 0x20000002, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000700)={0x0, 0x2}, 0x8) mount(&(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000300)='udf\x00', 0x200480, 0x0) sendmmsg$inet6(r0, &(0x7f0000002d80)=[{{&(0x7f0000000cc0)={0xa, 0x4e21, 0x1000007d, @local, 0x1}, 0x1c}}], 0x1, 0x40050) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x7, 0xfc6a}, 0x8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2, @local, 'xfrm0\x00'}}, 0x1e) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000440)=';', 0x1}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89fc, &(0x7f0000000040)={'bond0\x00', @random="000180000020"}) 12.473016348s ago: executing program 32 (id=787): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f022}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) sendmmsg$inet6(r2, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc89}}, {{&(0x7f0000000100)={0xa, 0x4e20, 0x6, @private1, 0x200}, 0x0, &(0x7f0000000600)=[{&(0x7f0000000240)="60b5429a99383640989e83199809bae1596f55104588339fb010c38e758ab3c37da64a33433c37ef6f973f8e6370685bb9fc5b0e43e335cd54e15b78282b7f6b3759e4c704d58a2086f972abc829721265457c1e8ef4adb0aa10127e89"}, {&(0x7f00000002c0)="e8bf25136bb60690760ddac6022edb197cb19bac9664943f226d52d830b0"}, {&(0x7f0000000300)="84a51f00f6db34acd15b99aff4"}, {&(0x7f0000000500)="7aaa88871cc6b1ba375732d093e476a5f1836e19c6b4860797dfa6637c429db518fff45876bd342665b99a9fc483ee9f9b117833c46f71a7ef34b8e6223fb91076b13f61436d84ef0fdf1a6349bfe92dd0de8246b564b8055ff0b5551f73b588f507fdf05ec95d5e1976937af7f929636b730dcc6405fbc0ba2e16978157b7df7104fc3d36e0e8827b4f2ae0f27b0629282f6c99e1d3602f5a89d9df2ca1fc64d4c0180c2227199a53bf28aeb10d78d8be99dfadd4b88ed99db73d700043cb42e890de58ad0a8cb02479376751cb58df83fe7427"}], 0x0, &(0x7f0000000640)=[@flowinfo={{0x0, 0x29, 0xb, 0x3}}]}}, {{&(0x7f0000000680)={0xa, 0x4e21, 0x11, @local, 0x6}, 0x0, &(0x7f0000001980)=[{&(0x7f00000006c0)="e4f57d982dfddbae52bffa1993fdcc1ce941568c1b90e0ebe50edd8b9164c9583def451edbb789ca962caedca6e0493f18220e86d2776b4e863b9a115e32b9f4d88fbd5a46f51a3d9649cb97d4123e9e6122e844cb7df44787ab7132665017416ddf5038f25c498d8ec2f9ae6eaf1f862ab77186eb1fb79a0e34dcfbdde7dfa418e5cafa81659c6bce50f4cc3e898d0f98c17d1fac5fc66431af9e70c82105cff9625da3caaff7dfddb7cf9e0b0659985c07491221596b6dc4a249e70b5b8dbd4ebc88bfcab486462cf15d57524af01aeab122ce304d86105ea48085822a178feea32b343d11402132"}, {&(0x7f00000007c0)="9443fd5b36f7a487f213d1d2d6816a4c52bb1fea1afc7161f29a455e404b5596797050bdb639d6d91155285a198918dfe198d3573d"}, {&(0x7f0000000980)="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"}], 0x0, &(0x7f00000019c0)=[@dstopts={{0x0, 0x29, 0x37, {0x32, 0x0, '\x00', [@hao={0xc9, 0x0, @private1}]}}}, @rthdr={{0x0, 0x29, 0x39, {0xff, 0x0, 0x0, 0x1}}}, @flowinfo={{0x0, 0x29, 0xb, 0x9}}, @rthdrdstopts={{0x0, 0x29, 0x37, {0x3b, 0x0, '\x00', [@ra={0x5, 0x2, 0x3}, @jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x80}, @generic={0x97, 0x0, "cd7cbe94bd857651f61506d4d4491ab4b73dce144434cd46ef62b20f851ef48945fd6b85adf2f77b20863d7d10ab728d6c98cfa12c569dc5856ebfbf13827dad700e246052d63d6e51a86cb1543ca18ee86a36a2838967b27975b886914a78f217cb09d817ed6b958f31ac14a399f5e6"}, @jumbo, @jumbo={0xc2, 0x4, 0x61400000}, @calipso={0x7, 0x0, {0x1, 0x0, 0x7, 0x6, [0x1, 0x0, 0xa2, 0x0, 0x8, 0x9, 0x8000000000000001]}}, @pad1, @ra={0x5, 0x2, 0x4}]}}}]}}], 0x1, 0x20041c10) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x107) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1, &(0x7f0000000040)}, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f00000013c0)={'wg0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r6 = userfaultfd(0x80001) r7 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, 0x0, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r8, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f00000003c0), 0x4) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="024005"], 0x0, 0x0, 0x0, 0x0}, 0x0) 7.770736314s ago: executing program 1 (id=854): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0xee29, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) recvmsg(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x2) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e25, 0x2, @empty, 0x40003ff}, 0x1b) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xff0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 7.388198902s ago: executing program 1 (id=855): open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0x8, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x80) recvfrom(r0, 0x0, 0x0, 0x40, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') lseek(r1, 0x10, 0x2) getdents64(r1, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8004, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x10007e, 0xa0000006, 0x53, 0x6, 0x10000, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x402, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x2, 0x7, 0x7fbf, 0x8, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f31, 0xd, 0x40000101, 0x1, 0x4, 0xffff80f1, 0x7, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfdfffffe, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x6, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0xfffffffd, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xb42a, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x1000086, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x7, 0x7ff, 0x12b, 0x4, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x0, 0x80aaed, 0x4, 0x24], [0x9, 0x40bb33, 0x7ffffffd, 0xb, 0x5, 0x100093a, 0x9, 0x1000005, 0x100, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mount(&(0x7f00000004c0)=@sr0, &(0x7f0000000280)='./bus\x00', &(0x7f00000003c0)='9p\x00', 0x2208440, &(0x7f0000000300)='trans=rdma,') 6.160662565s ago: executing program 1 (id=858): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000040), &(0x7f0000000180)=0x68) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000280)={0x14, &(0x7f00000001c0)={0x40, 0x22, 0x78, {0x78, 0x21, "3672532e772133ca6e8eae1ccbab6fcab1a0f5a03ececb3294723c9d1655e276558dbf0c6401f8a4d2bc16d3a8247a40998fd0cf4593bb37a02c85941a209f3eab9bab5fb05fca854b9aa6b60511e54cdd8b5e61756a2d54c10c4c71a80742948fea898e68c703f708303685507da0724ed5a8215387"}}, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000580)={0x44, &(0x7f00000002c0)={0x40, 0xf, 0xf2, "5c05adb264554403ebf2730c7eb0fd2fdf244f57cb7918ffd423266444793f544b469216d6aabed4a3dcf89a73dec9e47a1a003ea98fdaaaf5f458142626de8c417f151af2f87b0f34d00061314976a091ae7c0e0142d8654c13c0a53d3b1dac6ad494a06dff3145072ced75df9ebcf9898b496b420fd236cdb5d079fb7c7aeb36cee5aa67569e45c6e106a78070e3fbfa422a4655dee5d0cae19f7895beee7541e7e30146396a1fe575371541bb474486972743b362203fd1bf09d7a3d25e512a50afca67d8ddd06b81f2250e22817c9e892f4236ae4fa28eddc40e26c3728228b71b0a942eaebb9510cf7b20d93dccbcad"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000440)={0x20, 0x80, 0x1c, {0xfc65, 0x24, 0x1, 0x5, 0x0, 0xc, 0x5, 0x9, 0x4d43, 0x101, 0x3, 0x5}}, &(0x7f0000000480)={0x20, 0x85, 0x4, 0x5}, &(0x7f00000004c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000500)={0x20, 0x87, 0x2, 0x101}, &(0x7f0000000540)={0x20, 0x89, 0x2, 0x1}}) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0x41, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0xb, 0x0, 0x1, [@typed={0x8, 0xd9, 0x0, 0x0, @ipv4=@remote}]}]}]}, @typed={0xfffffffffffffd95, 0x2, 0x0, 0x0, @fd=r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x4b564d05, 0x0, 0x390}]}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async, rerun: 64) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') (rerun: 64) write$binfmt_format(r6, &(0x7f0000000180)='1\x00', 0x2) (async) r7 = ioctl$KVM_GET_STATS_FD_cpu(r5, 0xaece) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000840)={0x70, 0x0, &(0x7f00000006c0)=[@increfs_done={0x40106308, 0x2}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000600)={@flat=@weak_binder={0x77622a85, 0x1, 0x3}, @fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000680)={0x0, 0x18, 0x30}}, 0x400}, @acquire={0x40046305, 0x1}, @release], 0xf1, 0x0, &(0x7f0000000740)="e6fd4645d5eb801f944e1fe609cd63478003d09bc0078969e2fcf60911322b6709030bc9297ff5b592dd762fe51713991f6201b05114093751b5b1c92a81cce45646cad328ba352d1f96665d7093bb928e8d4dc15e66d244f9f339695050bcd09eb1e35b19213b301193fadcc7fe0aa0c829db991b983e733112df5554f07fcdccd6ce44edac246c9acb41034c1f7ebe32251af8c4e0f3ab3472889088eb8c28a440a9afc820d8a8a32744c97b77e0347519f9ecdfc10f906b3bfdb1ab96b662e5265fc7b4e34a30030677d1719a7f512d2f9fe4284cdf05e85fc70fd0f8f61f805df396a57d5bb90e6fa2f5bc5b8277c6"}) 4.195621963s ago: executing program 1 (id=859): mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x11) r0 = syz_usb_connect$printer(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000000)={0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="202802"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000540)={0x2c, 0x0, &(0x7f0000000440)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0xd, 0x10, {0x10, 0x24, "136d3677ff7c766f0896f317d1a9"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x1c, &(0x7f0000000100)={0x0, 0xf, 0xb5, "c6d7e9985ca49287f99b68d48cde1bef170499abd77cebc0bc29d38af00d85781595e4486cc648c267a3309b2dcb45503ca5f69b88e84138c966bd2061045923e9c61299fae40df8a606425821be3f041d5742d5473197ef5ec416be098230f10f6e83eacf33beb48af32a517ce39093782f2ff01b63f58e94114a342a3891715e67ccb0ed6fd35a1512449954fe830b9b7c1484e968a431ac8206fcc7e0bc2f0d92827e63b3aa2a33f98caf9aa5d7beb94713536f"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x9}}) syz_usb_disconnect(r0) readv(r1, &(0x7f0000000800)=[{&(0x7f0000000040)=""/39, 0x27}, {0x0}], 0x2) 3.60876254s ago: executing program 2 (id=860): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20a40, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c, 0x5, 0x0, {0x0, 0x3, 0x8, 0x20}}, 0x188) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000440)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lseek(r0, 0x3, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f0000000040)=0x8, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) lseek(0xffffffffffffffff, 0x1000, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="34000001050601040000000000000000000000040500018e1e8a3ac93e9e2800070000000900020073797a31000000000900030073787a3200000000ee4e4821c55d521c26fb6f3230c5812e5ec5a96450a0243cf6dd1cc9419c0c7d30c3b0e7b9f01cfe4b40bbe68f8e632e6f4644a502a33601579318aa3232"], 0x34}}, 0x4) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) fremovexattr(r7, &(0x7f0000000040)=@known='system.posix_acl_access\x00') umount2(0x0, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendto$packet(r5, &(0x7f00000002c0), 0x0, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$inet_udp(0x2, 0x2, 0x0) 2.164214751s ago: executing program 2 (id=861): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r1 = socket$inet6(0xa, 0x805, 0x0) (async) r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r2, 0x2000008, 0x10010, r3, 0x0) getsockopt$bt_hci(r1, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000120a09000000000000000000021000000900010073797a30000000000900020073992cecd200000008000340000000010800084000000000080004"], 0x6c}}, 0x0) 2.020128024s ago: executing program 2 (id=862): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x1}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000001c0)={r5, 0x4, 0xb1, 0x3}, &(0x7f0000000200)=0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2400, 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r7, 0x8915, &(0x7f0000000240)={'veth1\x00'}) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r9, 0x4068aea3, &(0x7f0000000080)={0xdc, 0x0, 0x4}) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 1.624604835s ago: executing program 2 (id=863): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1076, 0x103941) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000440)=0x200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x20000, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000140000000800200007001e0018000180140002006e657464657673696d3000000000000008001500000000020800130000000200080014"], 0x4c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d3, 0x6c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3507, 0x1, 0x3, 0x9, 0x2, 0x1, 0x4}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=ANY=[@ANYBLOB="a00000002100010000000000feffffffff0100000000000000000000000000010000000000000000000000000000c9d3fffe0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fc020000000000000000000000000000ff010000000000000000000000000001ff020000000000000000000000000001ffffffff0000000000000000000000006c010000000000000a000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="30000000060000000000000000000000000000000000000004008f4c0008000056b800"], 0x30) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x3, 0x654e00) ioctl$USBDEVFS_BULK(r5, 0xc0185502, &(0x7f0000000280)={{{0x1, 0x1}}, 0x0, 0x7, 0x0}) 1.264639985s ago: executing program 2 (id=864): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1b) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a32000000001400000011000157e3b46e5a64035b8147cb764333cb70917b79ffcfc06f81bebf1b4edb6270799fcd6fd089f1f9f19eb5c0deab179874e78b7b6a08d80dbac3350b5a85b83837effd01a7e7a809d4b1e00657ee3011642dc79b9fe9aa728da2cf896ab5c10843b06e9646f3f38ae40ac1883d1fd66ed7396d", @ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}}, 0x24000840) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000300)={0x1, 0x6}) socket$kcm(0xa, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x2208) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x7) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r11, 0x0) r12 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x201040}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x4c, r4, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x2}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x95}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1ff}]}, 0x4c}}, 0x10) socket$netlink(0x10, 0x3, 0x0) 984.352501ms ago: executing program 1 (id=865): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) openat$kvm(0x0, &(0x7f00000002c0), 0xa600, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x22003, 0x0) (async, rerun: 64) r5 = syz_ublk_setup_io_uring(0x31da, &(0x7f00000001c0)={0x0, 0x8ca8, 0x20000, 0x3, 0x26a}, &(0x7f0000000300), &(0x7f0000000380), &(0x7f00000003c0)) (rerun: 64) syz_ublk_setup_io_uring(0x2d02, &(0x7f0000000400)={0x0, 0xfb14, 0x10, 0x0, 0x214, 0x0, r5}, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3ffff, 0x180, 0x2, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x4, 0x4], 0xdddd0000, 0x1d4217}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x588) (async) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000003100)) 829.191988ms ago: executing program 2 (id=866): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) lseek(r0, 0x0, 0x0) ioctl$MEMERASE64(r0, 0x40104d14, &(0x7f0000000000)={0x6, 0xffffffffffffff37}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519fc00ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x6c}}, 0x50) setresuid(0xee00, 0xee00, 0x0) syz_fuse_handle_req(r2, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) close(r2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000080)={0x40, 0xf, 0x3, "c27a5f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r5, 0x5b03, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12011001000000080000000000000063000109022400010000700009040008"], 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r7 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) move_pages(0x0, 0x3, &(0x7f00000002c0)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil], &(0x7f0000000000)=[0x1, 0x1], &(0x7f00000000c0), 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, 0x0) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x0, 0x4400, 0xf0, 0x23, 0x800000, 0x6, 0x0, 0x0, 0x20}}, 0x50) read$FUSE(r7, &(0x7f00000007c0)={0x2020}, 0x2020) syz_usb_control_io$hid(r6, 0x0, 0x0) 0s ago: executing program 1 (id=867): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x10, 0x78, 0x601}, 0x10}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCMSET(r6, 0x5418, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r8 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000240)=0x6dae, 0x4) sendto$inet(r8, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7ee68e052af9c34b7d7494", 0x14, 0x800, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r9 = syz_open_dev$vivid(&(0x7f0000000140), 0x2, 0x2) ioctl$XFS_IOC_SWAPEXT(r8, 0xc0c0586d, &(0x7f0000000280)={0x0, r9, r5, 0x0, 0x1, '\x00', {0x2, 0xa, 0xc42, 0x9, 0x8, 0x9, 0xa89, 0xfffffffffffffff8, {0x9, 0x800}, {0x4, 0xae}, {0x101, 0x1}, 0x70000, 0x2, 0x139, 0xfffffff9, 0x418, 0x401, 0x81, 0x6, 0x1, 0xa, '\x00', 0x6, 0x5, 0x2, 0x92}}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000aa3dbeffffff020e00000800", @ANYRES32=r7, @ANYBLOB="080026006c0900000800270000030000"], 0x2c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004056) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x64a, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x60000, 0x4b}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7f}]}, 0x40}, 0x1, 0x0, 0x0, 0xc804}, 0x804) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x15) write$uinput_user_dev(r2, &(0x7f0000000800)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0x48, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x2000, 0xfa, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0xd, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xfffffffe, 0x9, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0xfffffffd, 0x4000000, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x2aa6, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x0, 0xb, 0x1, 0x4000000, 0x0, 0x1, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x6, 0x1, 0x0, 0xbda6, 0xe, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x40, 0x0, 0x0, 0xbd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x101, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cb9, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000015, 0x5031, 0xffffffffffffffff, 0xc2dcc000) write$uinput_user_dev(r2, &(0x7f0000000380)={'syz0\x00', {0x2, 0xfff, 0x2, 0x1}, 0x4, [0x7fff, 0x8000, 0x7b, 0x3, 0x1, 0x5, 0x9, 0x5, 0x9, 0x80000001, 0x86, 0x0, 0x3, 0x7ff, 0x8001, 0xf, 0x9, 0x503e47c1, 0xcde, 0x5, 0x3, 0x0, 0x5, 0x0, 0x6, 0x6, 0x498c, 0x2, 0x10, 0x4, 0x0, 0xe, 0x80000001, 0x6, 0x3, 0x2, 0x9e08, 0xc3, 0x8, 0xa, 0x10, 0x4430, 0xfffffffa, 0x5, 0x8, 0x109, 0x25, 0x7, 0x8, 0x1, 0x200, 0x9, 0x0, 0x1, 0x0, 0x8, 0x9, 0xd, 0x0, 0x9, 0x1, 0xc4b2, 0x5a, 0x9], [0x8, 0x5, 0xb54, 0x7, 0x6, 0x3, 0x8, 0xb9, 0x7, 0x1, 0x7fffffff, 0x2, 0x3, 0x7f, 0x2f0, 0x3, 0x0, 0x80000000, 0x6, 0x7fff, 0x0, 0x0, 0xff7, 0x8, 0xb1, 0x4, 0xfffffef9, 0x9, 0x8, 0x7, 0x6994412a, 0x3, 0x78, 0x8001, 0x5, 0x3, 0xe45e, 0x4000000, 0x8, 0x7f, 0x2, 0x80000001, 0x9, 0x80, 0x0, 0x200, 0x5, 0x81, 0x0, 0x97, 0x8, 0x80000000, 0x8a0a, 0x80000000, 0x9, 0xfffff170, 0x6, 0x101, 0x7761, 0x100, 0xfffffff8, 0x3, 0x6, 0x8000], [0x3eda, 0x6, 0x3, 0x20dc, 0x2, 0x200, 0x4, 0x8f4ab43, 0x1, 0x9e6, 0x9, 0x401, 0x31f7, 0x1, 0x5, 0x9, 0xd0, 0xb8b0, 0xb, 0x8000, 0x3, 0x8, 0xffff, 0xf85, 0x4f, 0x3, 0x0, 0x6, 0xfffffffc, 0x7, 0xff, 0x5, 0xd, 0x8, 0xb84, 0x7, 0x8, 0x8000, 0x4e501595, 0x3, 0x50000, 0x1, 0x10000, 0x9, 0x9, 0xfff, 0x3, 0x5, 0x4, 0x5, 0xfff, 0x2, 0x2, 0x400, 0x2, 0x2, 0xfffffff9, 0x631ab3bb, 0x5, 0x5c5b, 0x503, 0x5, 0x1, 0x2], [0x9, 0x0, 0x400, 0x5, 0xffffffff, 0x0, 0x1, 0xb1e, 0x0, 0x47, 0x2, 0x1, 0xfffffffb, 0x8, 0x81, 0x7, 0x0, 0x6, 0xff000000, 0x5, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, 0x0, 0x7, 0x9, 0x8, 0x0, 0x9, 0xf0d, 0x5, 0x2, 0x101, 0x5, 0x9, 0x7fff, 0x0, 0x8, 0xb, 0x3, 0x0, 0x9, 0x2, 0x4, 0x10001, 0x1ff, 0x3ff, 0x6, 0x80, 0x1, 0xb, 0x1ff, 0x0, 0x0, 0x80000004, 0x72, 0xdb35, 0x8, 0x5, 0x8001, 0x5]}, 0x45c) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000d80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0xa0, r4, 0x710, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9b9}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2650635e6316"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0xe33de00e44b7815e}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}], @NL80211_ATTR_MAC={0xa, 0x6, @random="a655c5689ca8"}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5430b7d9}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000a40)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf253b00000008000300", @ANYRES32=r10, @ANYBLOB="04006c002a0033"], 0x54}, 0x1, 0x0, 0x0, 0x8e0}, 0x8800) kernel console output (not intermixed with test programs): -kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa8323ae68e code=0x7ffc0000 [ 176.376366][ T37] audit: type=1326 audit(1783890836.671:65): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7338 comm="syz.1.423" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa8323edaeb code=0x7ffc0000 [ 176.376787][ T37] audit: type=1326 audit(1783890836.671:66): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7338 comm="syz.1.423" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa8323edaeb code=0x7ffc0000 [ 176.551798][ T37] audit: type=1326 audit(1783890836.851:67): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7338 comm="syz.1.423" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa8323edaeb code=0x7ffc0000 [ 176.552160][ T37] audit: type=1326 audit(1783890836.851:68): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7338 comm="syz.1.423" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa8323edaeb code=0x7ffc0000 [ 176.606427][ T37] audit: type=1326 audit(1783890836.891:69): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7338 comm="syz.1.423" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa8323edaeb code=0x7ffc0000 [ 176.713376][ T32] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 176.787307][ T7349] netlink: 44 bytes leftover after parsing attributes in process `syz.0.426'. [ 176.787332][ T7349] netlink: 27 bytes leftover after parsing attributes in process `syz.0.426'. [ 176.787347][ T7349] netlink: 27 bytes leftover after parsing attributes in process `syz.0.426'. [ 176.886431][ T32] usb 2-1: config index 0 descriptor too short (expected 1210, got 684) [ 176.886458][ T32] usb 2-1: config 1 has an invalid interface number: 18 but max is 0 [ 176.886478][ T32] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.886497][ T32] usb 2-1: config 1 has no interface number 0 [ 176.886547][ T32] usb 2-1: config 1 interface 18 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 176.936963][ T32] usb 2-1: New USB device found, idVendor=0421, idProduct=0420, bcdDevice=9e.4d [ 176.936995][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.938323][ T32] usb 2-1: Product: syz [ 176.938340][ T32] usb 2-1: Manufacturer: syz [ 176.938354][ T32] usb 2-1: SerialNumber: syz [ 176.944974][ T7351] capability: warning: `syz.0.426' uses 32-bit capabilities (legacy support in use) [ 177.068857][ T5616] Bluetooth: hci1: command 0x0c1a tx timeout [ 177.214442][ T32] rndis_host 2-1:1.18: ACM capabilities 01, not really RNDIS? [ 177.235484][ T32] usb 2-1: USB disconnect, device number 32 [ 177.270394][ T5680] usb 3-1: new low-speed USB device number 36 using dummy_hcd [ 177.421004][ T5680] usb 3-1: config 0 interface 0 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 177.421038][ T5680] usb 3-1: config 0 interface 0 altsetting 67 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 177.421058][ T5680] usb 3-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 177.421072][ T5680] usb 3-1: config 0 interface 0 has no altsetting 0 [ 177.421091][ T5680] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 177.421103][ T5680] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.425586][ T5680] usb 3-1: config 0 descriptor?? [ 177.469451][ T7352] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 177.608981][ T32] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 177.778891][ T32] usb 1-1: Using ep0 maxpacket: 8 [ 177.791331][ T32] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 177.791358][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.791427][ T32] usb 1-1: Product: syz [ 177.791441][ T32] usb 1-1: Manufacturer: syz [ 177.791454][ T32] usb 1-1: SerialNumber: syz [ 177.819581][ T32] usb 1-1: config 0 descriptor?? [ 177.865977][ T32] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 177.972039][ T7365] netlink: 132 bytes leftover after parsing attributes in process `syz.1.431'. [ 178.018839][ T5616] Bluetooth: hci3: command 0x0c1a tx timeout [ 178.081514][ T7366] kvm: emulating exchange as write [ 178.117713][ T5680] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 178.117808][ T5680] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 178.117837][ T5680] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 178.117863][ T5680] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 178.117890][ T5680] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 178.117965][ T5680] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 178.117991][ T5680] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 178.118017][ T5680] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 178.118043][ T5680] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 178.118115][ T5680] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x0 [ 178.134067][ T5680] greenasia 0003:0E8F:0012.0009: hidraw0: USB HID v0.01 Device [HID 0e8f:0012] on usb-dummy_hcd.2-1/input0 [ 178.134101][ T5680] greenasia 0003:0E8F:0012.0009: no inputs found [ 178.330864][ T5680] usb 3-1: USB disconnect, device number 36 [ 178.798905][ T11] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 178.957306][ T11] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 178.957336][ T11] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 178.957357][ T11] usb 2-1: Product: syz [ 178.957370][ T11] usb 2-1: Manufacturer: syz [ 178.957384][ T11] usb 2-1: SerialNumber: syz [ 179.006172][ T11] usb 2-1: config 0 descriptor?? [ 179.139369][ T5616] Bluetooth: hci1: command 0x0c1a tx timeout [ 179.198986][ T5680] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 179.259015][ T32] gspca_sonixj: i2c_w8 err -71 [ 179.260429][ T7382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.283986][ T7382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.341370][ T32] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 179.347471][ T32] usb 1-1: USB disconnect, device number 37 [ 179.349112][ T5680] usb 3-1: Invalid ep0 maxpacket: 32 [ 179.374712][ T7381] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 179.437954][ T7381] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 179.470878][ T49] usb 2-1: USB disconnect, device number 33 [ 179.481506][ T5680] usb 3-1: new low-speed USB device number 38 using dummy_hcd [ 179.629843][ T5680] usb 3-1: Invalid ep0 maxpacket: 32 [ 179.631826][ T5680] usb usb3-port1: attempt power cycle [ 179.968888][ T5680] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 179.990625][ T5680] usb 3-1: Invalid ep0 maxpacket: 32 [ 180.098880][ T5613] Bluetooth: hci3: command 0x0c1a tx timeout [ 180.119701][ T5680] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 180.149708][ T5680] usb 3-1: Invalid ep0 maxpacket: 32 [ 180.152002][ T5680] usb usb3-port1: unable to enumerate USB device [ 180.158403][ T7391] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 180.163007][ T7391] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 180.388952][ T49] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 180.562969][ T49] usb 1-1: unable to get BOS descriptor or descriptor too short [ 180.564138][ T49] usb 1-1: config 1 interface 0 has no altsetting 0 [ 180.566300][ T49] usb 1-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice= 0.40 [ 180.566327][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.566347][ T49] usb 1-1: Product: syz [ 180.566361][ T49] usb 1-1: Manufacturer: syz [ 180.566370][ T49] usb 1-1: SerialNumber: syz [ 180.812753][ T7396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.813341][ T7396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.961882][ T49] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input15 [ 181.008193][ T4952] bcm5974 1-1:1.0: could not read from device [ 181.053441][ T49] usb 1-1: USB disconnect, device number 38 [ 181.110994][ T5773] udevd[5773]: Error opening device "/dev/input/event4": No such file or directory [ 181.111173][ T5773] udevd[5773]: Unable to EVIOCGABS device "/dev/input/event4" [ 181.111242][ T5773] udevd[5773]: Unable to EVIOCGABS device "/dev/input/event4" [ 181.111298][ T5773] udevd[5773]: Unable to EVIOCGABS device "/dev/input/event4" [ 181.111353][ T5773] udevd[5773]: Unable to EVIOCGABS device "/dev/input/event4" [ 182.189579][ T5613] Bluetooth: hci3: command 0x0c1a tx timeout [ 182.590167][ T7432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.591874][ T7432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.033383][ T7440] netlink: 44 bytes leftover after parsing attributes in process `syz.2.454'. [ 183.033411][ T7440] netlink: 43 bytes leftover after parsing attributes in process `syz.2.454'. [ 183.033428][ T7440] netlink: 'syz.2.454': attribute type 5 has an invalid length. [ 183.033441][ T7440] netlink: 43 bytes leftover after parsing attributes in process `syz.2.454'. [ 183.130098][ T49] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 183.278865][ T49] usb 1-1: Using ep0 maxpacket: 16 [ 183.282014][ T49] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.282058][ T49] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.282073][ T49] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 183.282085][ T49] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 183.283129][ T49] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 183.283155][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 183.283174][ T49] usb 1-1: SerialNumber: syz [ 183.317498][ T49] hub 1-1:1.0: bad descriptor, ignoring hub [ 183.317536][ T49] hub 1-1:1.0: probe with driver hub failed with error -5 [ 183.321159][ T49] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 183.389828][ T5703] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 183.426485][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.456'. [ 183.551784][ T5703] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 183.551812][ T5703] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 183.551834][ T5703] usb 3-1: config 150 has no interface number 0 [ 183.551873][ T5703] usb 3-1: config 150 interface 204 has no altsetting 0 [ 183.554018][ T5703] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 183.554045][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.554064][ T5703] usb 3-1: Product: syz [ 183.554077][ T5703] usb 3-1: Manufacturer: syz [ 183.554087][ T5703] usb 3-1: SerialNumber: syz [ 183.768634][ T11] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 183.789221][ T5703] xr_serial 3-1:150.204: skipping garbage [ 183.789253][ T5703] xr_serial 3-1:150.204: xr_serial converter detected [ 183.928905][ T11] usb 2-1: Using ep0 maxpacket: 32 [ 183.930038][ T7453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.936357][ T11] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 183.936466][ T11] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 183.936493][ T11] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 183.936524][ T11] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 183.947313][ T11] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 183.947340][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.947359][ T11] usb 2-1: Product: syz [ 183.947372][ T11] usb 2-1: Manufacturer: syz [ 183.953549][ T11] usb 2-1: SerialNumber: syz [ 184.031535][ T7453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.058099][ T7453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.062534][ T7453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.101870][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 184.161432][ T11] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input16 [ 184.417510][ T11] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 184.417524][ T11] (id 0x00) [ 184.518909][ T11] rc_core: IR keymap rc-imon-pad not found [ 184.518932][ T11] Registered IR keymap rc-empty [ 184.519090][ T11] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 184.519109][ T11] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 184.563458][ T7470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.564129][ T7470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.668216][ T5703] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 184.668253][ T5703] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 184.674248][ T11] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 184.683481][ T5703] usb 3-1: USB disconnect, device number 41 [ 184.705992][ T5703] xr_serial 3-1:150.204: device disconnected [ 184.714186][ T11] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input17 [ 184.766313][ T11] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:34> initialized [ 185.217242][ T5703] usb 2-1: USB disconnect, device number 34 [ 185.243089][ T7472] imon:send_packet: packet tx failed (-71) [ 185.261137][ T7472] imon:vfd_write: send packet #1 failed [ 185.981819][ T49] usb 1-1: reset high-speed USB device number 39 using dummy_hcd [ 185.983840][ T7495] smc: net device wlan0 applied user defined pnetid SYZ0 [ 186.020681][ T49] usb 1-1: device reset changed ep0 maxpacket size! [ 186.055610][ T49] usb 1-1: USB disconnect, device number 39 [ 186.319238][ T11] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 186.359020][ T49] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 186.378896][ T5703] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 186.478812][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 186.480465][ T11] usb 2-1: config 5 has an invalid interface number: 146 but max is 0 [ 186.480490][ T11] usb 2-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 186.480508][ T11] usb 2-1: config 5 has no interface number 0 [ 186.480534][ T11] usb 2-1: config 5 interface 146 has no altsetting 0 [ 186.482585][ T11] usb 2-1: New USB device found, idVendor=2c42, idProduct=1634, bcdDevice=12.72 [ 186.482616][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.482634][ T11] usb 2-1: Product: syz [ 186.482641][ T11] usb 2-1: Manufacturer: syz [ 186.482649][ T11] usb 2-1: SerialNumber: syz [ 186.556378][ T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.556411][ T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.556449][ T49] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 186.556470][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.567070][ T49] usb 1-1: config 0 descriptor?? [ 186.614594][ T5703] usb 3-1: unable to get BOS descriptor or descriptor too short [ 186.616219][ T5703] usb 3-1: config 1 has an invalid descriptor of length 208, skipping remainder of the config [ 186.616243][ T5703] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.648268][ T5703] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 186.648299][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.648370][ T5703] usb 3-1: Product: syz [ 186.648385][ T5703] usb 3-1: Manufacturer: syz [ 186.648398][ T5703] usb 3-1: SerialNumber: syz [ 186.946758][ T11] f81232 2-1:5.146: f81534a converter detected [ 186.961161][ T11] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 186.962791][ T11] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 186.968666][ T5703] usb 3-1: selecting invalid altsetting 1 [ 186.992534][ T5703] usb 3-1: unit 3 not found! [ 186.993820][ T5703] usb 3-1: cannot request logical cluster ID: 21036 (err: -71) [ 186.993843][ T5703] usb 3-1: invalid MIXER UNIT descriptor 6 [ 187.014946][ T11] usb 2-1: USB disconnect, device number 35 [ 187.042488][ T49] hid_parser_main: 20 callbacks suppressed [ 187.042512][ T49] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 187.042539][ T49] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 187.042573][ T49] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 187.042599][ T49] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 187.042624][ T49] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 187.042649][ T49] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 187.042675][ T49] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 187.109665][ T11] f81232 2-1:5.146: device disconnected [ 187.118407][ T49] pyra 0003:1E7D:2CF6.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 187.217034][ T5703] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 187.235093][ T5703] usb 3-1: USB disconnect, device number 42 [ 187.409571][ T5751] udevd[5751]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.503900][ T7491] netlink: 'syz.0.466': attribute type 10 has an invalid length. [ 187.867960][ T7530] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 187.868241][ T7530] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 188.058972][ T5693] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 188.079928][ T11] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 188.158188][ T49] pyra 0003:1E7D:2CF6.000A: couldn't init struct pyra_device [ 188.158243][ T49] pyra 0003:1E7D:2CF6.000A: couldn't install mouse [ 188.163383][ T49] pyra 0003:1E7D:2CF6.000A: probe with driver pyra failed with error -32 [ 188.165788][ T7491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.166294][ T7491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.221659][ T5693] usb 2-1: unable to get BOS descriptor or descriptor too short [ 188.222865][ T5693] usb 2-1: config 1 has an invalid interface number: 16 but max is 0 [ 188.222892][ T5693] usb 2-1: config 1 has an invalid interface number: 213 but max is 0 [ 188.222912][ T5693] usb 2-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 188.222932][ T5693] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 188.222959][ T5693] usb 2-1: config 1 has no interface number 0 [ 188.222975][ T5693] usb 2-1: config 1 has no interface number 1 [ 188.223035][ T5693] usb 2-1: config 1 interface 16 altsetting 5 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 188.223060][ T5693] usb 2-1: config 1 interface 16 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 188.223082][ T5693] usb 2-1: config 1 interface 16 altsetting 5 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 188.223108][ T5693] usb 2-1: config 1 interface 16 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 188.223129][ T5693] usb 2-1: config 1 interface 16 altsetting 5 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 188.223155][ T5693] usb 2-1: config 1 interface 16 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 188.223178][ T5693] usb 2-1: config 1 interface 16 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 188.223205][ T5693] usb 2-1: config 1 interface 16 altsetting 5 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 188.223232][ T5693] usb 2-1: config 1 interface 16 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 188.223255][ T5693] usb 2-1: config 1 interface 16 altsetting 5 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 188.223280][ T5693] usb 2-1: config 1 interface 16 altsetting 5 has 12 endpoint descriptors, different from the interface descriptor's value: 16 [ 188.223306][ T5693] usb 2-1: too many endpoints for config 1 interface 213 altsetting 216: 203, using maximum allowed: 30 [ 188.223344][ T5693] usb 2-1: config 1 interface 213 altsetting 216 has 0 endpoint descriptors, different from the interface descriptor's value: 203 [ 188.223371][ T5693] usb 2-1: config 1 interface 16 has no altsetting 0 [ 188.223389][ T5693] usb 2-1: config 1 interface 213 has no altsetting 0 [ 188.225708][ T5693] usb 2-1: New USB device found, idVendor=12d1, idProduct=6544, bcdDevice=9c.74 [ 188.225735][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.225755][ T5693] usb 2-1: Product: syz [ 188.225769][ T5693] usb 2-1: Manufacturer: syz [ 188.225782][ T5693] usb 2-1: SerialNumber: syz [ 188.307937][ T11] usb 3-1: Using ep0 maxpacket: 8 [ 188.361874][ T11] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 188.361899][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 188.361919][ T11] usb 3-1: Product: syz [ 188.361933][ T11] usb 3-1: Manufacturer: syz [ 188.361947][ T11] usb 3-1: SerialNumber: syz [ 188.566111][ T11] usb 3-1: config 0 descriptor?? [ 188.579457][ T198] usb 1-1: USB disconnect, device number 40 [ 188.599491][ T11] gspca_main: sq905-2.14.0 probing 2770:9120 [ 188.868891][ T5693] option 2-1:1.16: GSM modem (1-port) converter detected [ 188.918336][ T5693] usb 2-1: USB disconnect, device number 36 [ 188.940848][ T5693] option 2-1:1.16: device disconnected [ 189.059051][ T198] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 189.190492][ T11] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 189.190549][ T11] sq905 3-1:0.0: probe with driver sq905 failed with error -71 [ 189.211512][ T198] usb 1-1: config index 0 descriptor too short (expected 67, got 45) [ 189.229792][ T198] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 189.229821][ T198] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.229841][ T198] usb 1-1: Product: syz [ 189.229854][ T198] usb 1-1: Manufacturer: syz [ 189.229867][ T198] usb 1-1: SerialNumber: syz [ 189.231355][ T11] usb 3-1: USB disconnect, device number 43 [ 189.631048][ T7548] netlink: 72 bytes leftover after parsing attributes in process `syz.3.484'. [ 189.631387][ T7549] netlink: 72 bytes leftover after parsing attributes in process `syz.3.484'. [ 189.685648][ T198] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 189.685712][ T198] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 189.844606][ T7555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.845099][ T7555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.085093][ T7567] netlink: 'syz.2.491': attribute type 2 has an invalid length. [ 190.278924][ T49] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 190.418923][ T11] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 190.433943][ T49] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 190.433973][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.443205][ T49] usb 2-1: config 0 descriptor?? [ 190.479175][ T7573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.480534][ T7573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.575393][ T11] usb 3-1: descriptor type invalid, skip [ 190.596808][ T11] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.596915][ T11] usb 3-1: config 1 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 190.596931][ T11] usb 3-1: config 1 interface 0 has no altsetting 0 [ 190.675597][ T11] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 190.675627][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.675702][ T11] usb 3-1: Product: syz [ 190.675716][ T11] usb 3-1: Manufacturer: 䃛徒샾囤倀 [ 190.675730][ T11] usb 3-1: SerialNumber: syz [ 191.172361][ T49] usb 2-1: Cannot set MAC address [ 191.172593][ T49] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 191.190363][ T7538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.193936][ T7538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.200647][ T49] usb 2-1: USB disconnect, device number 37 [ 191.234282][ T11] usb 3-1: No union descriptors [ 191.273939][ T198] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 191.299049][ T11] usb 3-1: USB disconnect, device number 44 [ 191.316152][ T198] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 191.316618][ T198] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 191.316668][ T198] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 191.391450][ T198] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 191.432423][ T198] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 191.453212][ T198] usb 1-1: USB disconnect, device number 41 [ 191.896333][ T7595] overlay: Unknown parameter 'smackfstransmute' [ 191.946695][ T7597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.947266][ T7597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.110416][ T198] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 192.178038][ T7597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.178627][ T7597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.292565][ T198] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 192.292610][ T198] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 192.292637][ T198] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 192.292679][ T198] usb 3-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.00 [ 192.292700][ T198] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.355375][ T198] usb 3-1: config 0 descriptor?? [ 192.474780][ T7597] mmap: syz.3.500 (7597) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 192.538926][ T49] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 192.688866][ T49] usb 2-1: Using ep0 maxpacket: 32 [ 192.691078][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.691109][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.691146][ T49] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 192.691171][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.699764][ T49] usb 2-1: config 0 descriptor?? [ 192.750786][ T49] hub 2-1:0.0: USB hub found [ 192.812038][ T198] ntrig 0003:1B96:000F.000B: item fetching failed at offset 3/6 [ 192.812732][ T198] ntrig 0003:1B96:000F.000B: parse failed [ 192.812850][ T198] ntrig 0003:1B96:000F.000B: probe with driver ntrig failed with error -22 [ 192.951738][ T49] hub 2-1:0.0: 1 port detected [ 192.952533][ T7613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.976108][ T7613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.015642][ T49] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 193.015668][ T49] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 193.016797][ T7593] 9pnet_fd: Insufficient options for proto=fd [ 193.024821][ T49] usbhid 2-1:0.0: can't add hid device: -71 [ 193.024925][ T49] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 193.081020][ T49] usb 2-1: USB disconnect, device number 38 [ 193.144987][ T198] usb 3-1: USB disconnect, device number 45 [ 193.247947][ T7622] random: crng reseeded on system resumption [ 193.274567][ T7622] Restarting kernel threads ... [ 193.275533][ T7622] Done restarting kernel threads. [ 193.489403][ T49] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 193.503708][ T7640] netlink: 'syz.0.507': attribute type 21 has an invalid length. [ 193.503721][ T7640] netlink: 128 bytes leftover after parsing attributes in process `syz.0.507'. [ 193.503791][ T7640] netlink: 3 bytes leftover after parsing attributes in process `syz.0.507'. [ 193.656267][ T5604] do_umount: task=syz-executor[5604] propagate_mount_busy()!=0 [ 193.656399][ T5604] do_umount: task=syz-executor[5604] propagate_mount_busy()!=0 [ 193.683667][ T49] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 193.683701][ T49] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 193.683727][ T49] usb 2-1: config 0 interface 0 has no altsetting 0 [ 193.683758][ T49] usb 2-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 193.683782][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.740254][ T49] usb 2-1: config 0 descriptor?? [ 193.749525][ T7617] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 193.978915][ T7617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.983182][ T7617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.261127][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.261214][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.263054][ T49] holtek_mouse 0003:04D9:A072.000C: unknown main item tag 0x0 [ 194.263085][ T49] holtek_mouse 0003:04D9:A072.000C: unknown main item tag 0x0 [ 194.263109][ T49] holtek_mouse 0003:04D9:A072.000C: unknown main item tag 0x0 [ 194.263133][ T49] holtek_mouse 0003:04D9:A072.000C: unknown main item tag 0x0 [ 194.263159][ T49] holtek_mouse 0003:04D9:A072.000C: unknown main item tag 0x0 [ 194.263184][ T49] holtek_mouse 0003:04D9:A072.000C: unknown main item tag 0x0 [ 194.263208][ T49] holtek_mouse 0003:04D9:A072.000C: unknown main item tag 0x0 [ 194.263232][ T49] holtek_mouse 0003:04D9:A072.000C: unknown main item tag 0x0 [ 194.263254][ T49] holtek_mouse 0003:04D9:A072.000C: unknown main item tag 0x0 [ 194.263279][ T49] holtek_mouse 0003:04D9:A072.000C: unknown main item tag 0x0 [ 194.366928][ T49] holtek_mouse 0003:04D9:A072.000C: hidraw0: USB HID v0.86 Device [HID 04d9:a072] on usb-dummy_hcd.1-1/input0 [ 194.466355][ T49] usb 2-1: USB disconnect, device number 39 [ 194.485669][ T7663] fido_id[7663]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 194.858913][ T198] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 195.013115][ T7679] binder: binder_mmap: 7678 200000000000-200000b36000 bad vm_flags failed -1 [ 195.017025][ T198] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 195.017053][ T198] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.017072][ T198] usb 3-1: Product: syz [ 195.017084][ T198] usb 3-1: Manufacturer: syz [ 195.017096][ T198] usb 3-1: SerialNumber: syz [ 195.041203][ T198] usb 3-1: config 0 descriptor?? [ 195.255709][ T198] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 195.438896][ T5703] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 195.518993][ T49] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 195.588848][ T5703] usb 2-1: Using ep0 maxpacket: 32 [ 195.590919][ T5703] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 195.590940][ T5703] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 195.590951][ T5703] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 195.590962][ T5703] usb 2-1: config 1 has no interface number 0 [ 195.590987][ T5703] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 195.591009][ T5703] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 195.591092][ T5703] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 195.591105][ T5703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.610503][ T5703] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 195.710818][ T49] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.710870][ T49] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 195.710895][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.747152][ T49] usb 1-1: config 0 descriptor?? [ 195.764837][ T49] pwc: Askey VC010 type 2 USB webcam detected. [ 195.808498][ T5703] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 196.154621][ T49] pwc: recv_control_msg error -32 req 02 val 2b00 [ 196.155793][ T49] pwc: recv_control_msg error -32 req 02 val 2700 [ 196.156486][ T49] pwc: recv_control_msg error -32 req 02 val 2c00 [ 196.157140][ T49] pwc: recv_control_msg error -32 req 04 val 1000 [ 196.157768][ T49] pwc: recv_control_msg error -32 req 04 val 1300 [ 196.158577][ T49] pwc: recv_control_msg error -32 req 04 val 1400 [ 196.171735][ T49] pwc: recv_control_msg error -32 req 02 val 2000 [ 196.298183][ T49] pwc: recv_control_msg error -32 req 02 val 2100 [ 196.308631][ T49] pwc: recv_control_msg error -32 req 04 val 1500 [ 196.316167][ T49] pwc: recv_control_msg error -32 req 02 val 2500 [ 196.335245][ T49] pwc: recv_control_msg error -32 req 02 val 2400 [ 196.564070][ T5703] usb 2-1: USB disconnect, device number 40 [ 196.592975][ T5703] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 196.957340][ T49] pwc: recv_control_msg error -71 req 02 val 2900 [ 196.957822][ T49] pwc: recv_control_msg error -71 req 02 val 2800 [ 196.958481][ T49] pwc: recv_control_msg error -71 req 04 val 1100 [ 196.981672][ T49] pwc: recv_control_msg error -71 req 04 val 1200 [ 197.114093][ T49] pwc: Registered as video103. [ 197.117178][ T49] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input18 [ 197.136928][ T49] usb 1-1: USB disconnect, device number 42 [ 197.889666][ T49] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 197.984488][ T7735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.986673][ T7735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.059042][ T49] usb 1-1: Using ep0 maxpacket: 8 [ 198.061928][ T49] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 198.061955][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.112432][ T49] pvrusb2: Hardware description: Terratec Grabster AV400 [ 198.112451][ T49] pvrusb2: ********** [ 198.112458][ T49] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 198.112470][ T49] pvrusb2: Important functionality might not be entirely working. [ 198.112478][ T49] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 198.112490][ T49] pvrusb2: ********** [ 198.341917][ T2370] pvrusb2: Invalid write control endpoint [ 198.360413][ T49] usb 1-1: USB disconnect, device number 43 [ 198.382591][ T198] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 198.412554][ T198] usb 3-1: USB disconnect, device number 46 [ 198.593833][ T2370] pvrusb2: Invalid write control endpoint [ 198.593849][ T2370] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 198.593858][ T2370] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 198.593866][ T2370] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 198.593875][ T2370] pvrusb2: Device being rendered inoperable [ 198.643095][ T2370] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 198.643640][ T2370] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 198.680030][ T2370] pvrusb2: Attached sub-driver cx25840 [ 198.680056][ T2370] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 198.680066][ T2370] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 198.839200][ T822] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 198.988657][ T7745] sg_write: data in/out 377308/192 bytes for SCSI command 0x0-- guessing data in; [ 198.988657][ T7745] program syz.2.538 not setting count and/or reply_len properly [ 198.993684][ T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 198.993732][ T822] usb 2-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.00 [ 198.993764][ T822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.000221][ T822] usb 2-1: config 0 descriptor?? [ 199.001047][ T7741] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 199.033707][ T7745] comedi comedi3: s526: I/O base address not correctly aligned [ 199.033850][ T7744] comedi comedi3: s526: I/O base address not correctly aligned [ 199.089871][ T822] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input19 [ 199.215762][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 199.216898][ T4952] bcm5974 2-1:0.0: could not read from device [ 199.295197][ T822] usb 2-1: USB disconnect, device number 41 [ 199.299400][ T4952] bcm5974 2-1:0.0: could not read from device [ 199.338886][ T198] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 199.489664][ T198] usb 1-1: Using ep0 maxpacket: 16 [ 199.495995][ T198] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.496023][ T198] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 199.523927][ T198] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 199.523955][ T198] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.523975][ T198] usb 1-1: Product: syz [ 199.523989][ T198] usb 1-1: Manufacturer: syz [ 199.524002][ T198] usb 1-1: SerialNumber: syz [ 199.606704][ T198] usb 1-1: skipping empty audio interface (v1) [ 199.687145][ T198] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 199.732508][ T5751] udevd[5751]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.816591][ T822] usb 1-1: USB disconnect, device number 44 [ 199.908227][ T7769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.543'. [ 200.398603][ T7787] fuse: Bad value for 'fd' [ 200.398662][ T7788] fuse: Bad value for 'fd' [ 200.429113][ T198] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 200.458879][ T5786] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 200.616828][ T198] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 200.616847][ T198] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.616858][ T198] usb 3-1: Product: syz [ 200.616865][ T198] usb 3-1: Manufacturer: syz [ 200.616873][ T198] usb 3-1: SerialNumber: syz [ 200.649326][ T5786] usb 2-1: unable to get BOS descriptor or descriptor too short [ 200.649857][ T5786] usb 2-1: not running at top speed; connect to a high speed hub [ 200.651771][ T5786] usb 2-1: config 2 has an invalid interface number: 75 but max is 0 [ 200.651794][ T5786] usb 2-1: config 2 has no interface number 0 [ 200.651822][ T5786] usb 2-1: config 2 interface 75 has no altsetting 0 [ 200.700353][ T5786] usb 2-1: New USB device found, idVendor=10b8, idProduct=2384, bcdDevice=17.96 [ 200.700381][ T5786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.700400][ T5786] usb 2-1: Product: syz [ 200.700413][ T5786] usb 2-1: Manufacturer: syz [ 200.700426][ T5786] usb 2-1: SerialNumber: syz [ 200.839935][ T9] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 200.945539][ T7792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.956471][ T7792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.042166][ T5786] dvb-usb: found a 'DiBcom NIM9090MD reference design' in cold state, will try to load a firmware [ 201.056940][ T7777] netlink: 'syz.2.547': attribute type 4 has an invalid length. [ 201.056961][ T7777] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.547'. [ 201.204969][ T7794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.205579][ T7794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.259525][ T9] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 202.270432][ T7794] ALSA: mixer_oss: invalid OSS volume 'OLUME' [ 202.336014][ T7804] netlink: 68 bytes leftover after parsing attributes in process `syz.3.554'. [ 203.236783][ T198] usb 3-1: USB disconnect, device number 47 [ 203.259452][ T5786] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 203.259497][ T5786] dib0700: firmware download failed at 7 with -22 [ 203.286930][ T5786] usb 2-1: USB disconnect, device number 42 [ 203.326886][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 203.399067][ T9] ath9k_htc: Failed to initialize the device [ 203.405938][ T198] usb 3-1: ath9k_htc: USB layer deinitialized [ 203.445174][ T7817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.451171][ T7817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.588927][ T5786] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 203.720619][ T5786] usb 2-1: device descriptor read/64, error -71 [ 203.959035][ T5786] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 203.983256][ T7831] netlink: 228 bytes leftover after parsing attributes in process `syz.2.561'. [ 203.997724][ T7833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.003828][ T7833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.017232][ T7831] netlink: 'syz.2.561': attribute type 29 has an invalid length. [ 204.017904][ T7830] netlink: 'syz.2.561': attribute type 29 has an invalid length. [ 204.090422][ T5786] usb 2-1: device descriptor read/64, error -71 [ 204.200439][ T5786] usb usb2-port1: attempt power cycle [ 204.422319][ T822] IPVS: starting estimator thread 0... [ 204.425035][ T7837] IPVS: set_ctl: invalid protocol: 2 100.1.1.0:20004 [ 204.516899][ T7838] IPVS: using max 15 ests per chain, 36000 per kthread [ 204.546358][ T5786] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 204.578920][ T5786] usb 2-1: device descriptor read/8, error -71 [ 204.594300][ T5693] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 204.663981][ T7842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.748848][ T5693] usb 3-1: Using ep0 maxpacket: 8 [ 204.765129][ T5693] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 204.765157][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.765177][ T5693] usb 3-1: Product: syz [ 204.765190][ T5693] usb 3-1: Manufacturer: syz [ 204.765204][ T5693] usb 3-1: SerialNumber: syz [ 204.801801][ T5693] usb 3-1: config 0 descriptor?? [ 205.078656][ T7854] comedi comedi3: 8255: I/O port conflict (0x20,4) [ 205.523777][ T5693] usb write operation failed. (-71) [ 205.527135][ T5693] usb write operation failed. (-71) [ 205.527153][ T5693] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 205.561146][ T5693] usb 3-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 205.561182][ T5693] usb 3-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 205.788985][ T5786] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 205.942502][ T5786] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 205.942555][ T5786] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 205.942568][ T5786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.979176][ T7884] netlink: 'syz.3.575': attribute type 10 has an invalid length. [ 205.984505][ T5786] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 206.121228][ T7884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.123573][ T7884] team0: Port device bond0 added [ 206.126232][ T7885] tipc: Started in network mode [ 206.126260][ T7885] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 206.127195][ T7885] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 206.142568][ T7885] tipc: Enabled bearer , priority 10 [ 206.158664][ T7889] xt_l2tp: invalid flags combination: c [ 206.207164][ T7892] dlm: Unknown command passed to DLM device : 3 [ 206.207164][ T7892] [ 206.300903][ T7899] cgroup: Unknown subsys name 'cpuset' [ 206.618863][ T822] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 206.788897][ T822] usb 1-1: Using ep0 maxpacket: 16 [ 206.791398][ T822] usb 1-1: unable to get BOS descriptor or descriptor too short [ 206.792604][ T822] usb 1-1: config 127 has an invalid interface number: 134 but max is 0 [ 206.792629][ T822] usb 1-1: config 127 has an invalid descriptor of length 252, skipping remainder of the config [ 206.792647][ T822] usb 1-1: config 127 has no interface number 0 [ 206.792690][ T822] usb 1-1: config 127 interface 134 altsetting 11 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 206.792718][ T822] usb 1-1: config 127 interface 134 altsetting 11 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 206.792745][ T822] usb 1-1: config 127 interface 134 has no altsetting 0 [ 206.795175][ T822] usb 1-1: New USB device found, idVendor=079b, idProduct=004b, bcdDevice=2e.11 [ 206.795201][ T822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.795221][ T822] usb 1-1: Product: syz [ 206.795234][ T822] usb 1-1: Manufacturer: syz [ 206.795248][ T822] usb 1-1: SerialNumber: syz [ 207.059932][ T5786] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 207.068444][ T822] usb 1-1: USB disconnect, device number 45 [ 207.269712][ T5786] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 207.269740][ T5786] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 207.297600][ T5786] usb 2-1: USB disconnect, device number 47 [ 207.305528][ T5590] tipc: Node number set to 1 [ 207.558869][ T822] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 207.718830][ T822] usb 1-1: Using ep0 maxpacket: 16 [ 207.724286][ T822] usb 1-1: unable to get BOS descriptor or descriptor too short [ 207.725307][ T822] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 207.725341][ T822] usb 1-1: can't read configurations, error -71 [ 208.078889][ T5680] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 208.248852][ T5680] usb 2-1: Using ep0 maxpacket: 8 [ 208.270664][ T5680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.270700][ T5680] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 208.270742][ T5680] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 208.270765][ T5680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.280320][ T5680] usb 2-1: config 0 descriptor?? [ 208.586205][ T7917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.600608][ T7917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.708267][ T5680] hid_parser_main: 30 callbacks suppressed [ 208.708290][ T5680] holtek 0003:1241:5015.000D: unknown main item tag 0x0 [ 208.708320][ T5680] holtek 0003:1241:5015.000D: unknown main item tag 0x0 [ 208.708346][ T5680] holtek 0003:1241:5015.000D: unknown main item tag 0x0 [ 208.708372][ T5680] holtek 0003:1241:5015.000D: unknown main item tag 0x0 [ 208.708396][ T5680] holtek 0003:1241:5015.000D: unknown main item tag 0x0 [ 208.708422][ T5680] holtek 0003:1241:5015.000D: unknown main item tag 0x0 [ 208.708448][ T5680] holtek 0003:1241:5015.000D: unknown main item tag 0x0 [ 208.708473][ T5680] holtek 0003:1241:5015.000D: unknown main item tag 0x0 [ 208.708498][ T5680] holtek 0003:1241:5015.000D: unknown main item tag 0x0 [ 208.708546][ T5680] holtek 0003:1241:5015.000D: unknown main item tag 0x0 [ 208.794507][ T5680] holtek 0003:1241:5015.000D: hidraw0: USB HID v0.81 Device [HID 1241:5015] on usb-dummy_hcd.1-1/input0 [ 208.794550][ T5680] holtek 0003:1241:5015.000D: no inputs found [ 209.049730][ T822] usb 2-1: USB disconnect, device number 48 [ 209.168867][ T5680] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 209.224425][ T7924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.224963][ T7924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.319029][ T5680] usb 1-1: Using ep0 maxpacket: 32 [ 209.320749][ T5680] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.320773][ T5680] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 209.322936][ T5680] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 209.322962][ T5680] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.322982][ T5680] usb 1-1: Product: syz [ 209.322996][ T5680] usb 1-1: Manufacturer: syz [ 209.323009][ T5680] usb 1-1: SerialNumber: syz [ 209.327323][ T5680] usb 1-1: config 0 descriptor?? [ 209.532042][ T7920] netlink: 40 bytes leftover after parsing attributes in process `syz.0.587'. [ 209.559426][ T7920] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.587'. [ 209.681953][ T822] usb 1-1: USB disconnect, device number 48 [ 209.859215][ T6716] wlan0: Trigger new scan to find an IBSS to join [ 210.177228][ T7937] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.594'. [ 210.178223][ T7936] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.594'. [ 210.208941][ T822] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 210.289506][ T7942] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 210.368910][ T822] usb 2-1: Using ep0 maxpacket: 8 [ 210.371495][ T822] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 210.371522][ T822] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 210.371539][ T822] usb 2-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 210.371552][ T822] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 210.371566][ T822] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 210.371579][ T822] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.371601][ T822] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 210.371613][ T822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.600142][ T822] usb 2-1: usb_control_msg returned -71 [ 210.600171][ T822] usbtmc 2-1:16.0: can't read capabilities [ 210.643442][ T822] usb 2-1: USB disconnect, device number 49 [ 210.645384][ T7953] loop6: detected capacity change from 0 to 9 [ 210.763887][ T7953] Dev loop6: unable to read RDB block 9 [ 210.763925][ T7953] loop6: unable to read partition table [ 210.764051][ T7953] loop6: partition table beyond EOD, truncated [ 210.764077][ T7953] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 210.800211][ T5748] Flush: task=udevd[5748] dev=loop6 state=2 [ 210.894053][ T5748] Teardown: task=udevd[5748] dev=loop6 state=2 [ 211.281377][ T7966] overlayfs: failed to resolve '/G+5wd HID v0.00 Device [syz1] on syz0 [ 240.137990][ T8523] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.826277][ T8533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.826839][ T8533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.847291][ T8533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.847736][ T8533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.051827][ T8556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.055430][ T8556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.255181][ T8567] netlink: 6 bytes leftover after parsing attributes in process `syz.3.762'. [ 242.255202][ T8567] netlink: 6 bytes leftover after parsing attributes in process `syz.3.762'. [ 242.453623][ T8574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.454627][ T8574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.530503][ T8582] netlink: 'syz.0.766': attribute type 10 has an invalid length. [ 242.545247][ T8582] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.590171][ T8582] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.620456][ T8582] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.623393][ T8582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.624831][ T8582] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.624941][ T8582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.635452][ T8582] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 243.028879][ T5680] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 243.190841][ T5680] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 243.190870][ T5680] usb 1-1: config 0 has no interface number 0 [ 243.190902][ T5680] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 5120, setting to 1024 [ 243.190917][ T5680] usb 1-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 243.190930][ T5680] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 243.190945][ T5680] usb 1-1: config 0 interface 11 has no altsetting 0 [ 243.190986][ T5680] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 243.190999][ T5680] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.194657][ T5680] usb 1-1: config 0 descriptor?? [ 243.201044][ T5680] keyspan 1-1:0.11: Keyspan 2 port adapter converter detected [ 243.209656][ T5680] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 81 [ 243.209741][ T5680] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 82 [ 243.210650][ T5680] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 1 [ 243.210732][ T5680] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 2 [ 243.210810][ T5680] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 85 [ 243.210888][ T5680] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 5 [ 243.219284][ T5680] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 243.225720][ T5680] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 83 [ 243.225803][ T5680] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 84 [ 243.225880][ T5680] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 3 [ 243.225957][ T5680] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 4 [ 243.226033][ T5680] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 86 [ 243.226123][ T5680] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 6 [ 243.245296][ T5680] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 243.306515][ T8587] vivid-002: disconnect [ 243.450437][ T198] usb 1-1: USB disconnect, device number 65 [ 243.470918][ T198] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 243.476733][ T198] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 243.477619][ T198] keyspan 1-1:0.11: device disconnected [ 243.504001][ T8586] vivid-002: reconnect [ 244.006197][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.773'. [ 244.006284][ T8607] netlink: del zone limit has 8 unknown bytes [ 244.112150][ T8606] netlink: 168 bytes leftover after parsing attributes in process `syz.0.775'. [ 244.114458][ T8606] netlink: 108 bytes leftover after parsing attributes in process `syz.0.775'. [ 244.498956][ T5680] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 244.708875][ T5680] usb 2-1: Using ep0 maxpacket: 8 [ 244.723922][ T5680] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 244.723951][ T5680] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.723971][ T5680] usb 2-1: Product: syz [ 244.723985][ T5680] usb 2-1: Manufacturer: syz [ 244.723999][ T5680] usb 2-1: SerialNumber: syz [ 244.735907][ T5680] usb 2-1: config 0 descriptor?? [ 244.966993][ T5680] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 245.440359][ T8622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.441514][ T8622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.667418][ T8623] netlink: 56 bytes leftover after parsing attributes in process `syz.1.776'. [ 246.208887][ T8221] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 246.349601][ T8221] usb 1-1: device descriptor read/64, error -71 [ 246.588835][ T8221] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 246.718903][ T8221] usb 1-1: device descriptor read/64, error -71 [ 246.841598][ T8221] usb usb1-port1: attempt power cycle [ 246.907506][ T8633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.908490][ T8633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.178883][ T8221] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 247.199544][ T8221] usb 1-1: device descriptor read/8, error -71 [ 247.273230][ T5680] usb write operation failed. (-71) [ 247.316359][ T5680] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 247.317275][ T5680] dvbdev: DVB: registering new adapter (Terratec H7) [ 247.319845][ T5680] usb 2-1: media controller created [ 247.320275][ T5680] usb read operation failed. (-71) [ 247.320894][ T5680] usb write operation failed. (-71) [ 247.348395][ T5680] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 247.362297][ T5680] usb 2-1: USB disconnect, device number 73 [ 247.438853][ T8221] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 247.459679][ T8221] usb 1-1: device descriptor read/8, error -71 [ 247.579834][ T8221] usb usb1-port1: unable to enumerate USB device [ 247.632209][ T8642] netlink: 16 bytes leftover after parsing attributes in process `syz.3.785'. [ 247.702539][ T5680] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 247.733896][ T8637] kAFS: unable to lookup cell '.' [ 247.857937][ T5680] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 25 [ 247.857974][ T5680] usb 2-1: can't read configurations, error -22 [ 247.958408][ T8651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.967822][ T8651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.980997][ T5680] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 248.142893][ T5680] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 25 [ 248.142930][ T5680] usb 2-1: can't read configurations, error -22 [ 248.143333][ T5680] usb usb2-port1: attempt power cycle [ 248.223436][ T8662] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.478847][ T5680] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 248.501581][ T5680] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 25 [ 248.501621][ T5680] usb 2-1: can't read configurations, error -22 [ 248.638871][ T5680] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 248.662322][ T5680] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 25 [ 248.662361][ T5680] usb 2-1: can't read configurations, error -22 [ 248.662714][ T5680] usb usb2-port1: unable to enumerate USB device [ 249.859351][ T32] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 250.010926][ T32] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 250.010954][ T32] usb 1-1: config 1 has no interface number 0 [ 250.010991][ T32] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 250.011015][ T32] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 250.011039][ T32] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 250.011058][ T32] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 250.011080][ T32] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 250.059440][ T32] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 250.059471][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.059490][ T32] usb 1-1: Product: syz [ 250.059502][ T32] usb 1-1: Manufacturer: syz [ 250.059515][ T32] usb 1-1: SerialNumber: syz [ 250.132930][ T8682] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 250.142489][ T32] usb 1-1: Error in usbnet_get_endpoints (-22) [ 250.339161][ T5702] usb 1-1: USB disconnect, device number 70 [ 251.449645][ T822] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 251.603366][ T822] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 251.603398][ T822] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 251.603429][ T822] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 251.605781][ T822] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 251.605807][ T822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.605826][ T822] usb 1-1: Product: syz [ 251.605840][ T822] usb 1-1: Manufacturer: syz [ 251.605853][ T822] usb 1-1: SerialNumber: syz [ 251.622807][ T822] usb 1-1: config 0 descriptor?? [ 251.623800][ T8693] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 251.623969][ T8693] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 251.633923][ T822] usb 1-1: ucan: probing device on interface #0 [ 251.673929][ T8703] netlink: 'syz.1.800': attribute type 1 has an invalid length. [ 252.247687][ T822] ucan 1-1:0.0: probe with driver ucan failed with error -22 [ 252.548916][ T822] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 252.698888][ T822] usb 2-1: Using ep0 maxpacket: 8 [ 252.701223][ T822] usb 2-1: too many endpoints for config 0 interface 0 altsetting 255: 222, using maximum allowed: 30 [ 252.701267][ T822] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 131, changing to 11 [ 252.701294][ T822] usb 2-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 222 [ 252.701321][ T822] usb 2-1: config 0 interface 0 has no altsetting 0 [ 252.701357][ T822] usb 2-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 252.701379][ T822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.716850][ T822] usb 2-1: config 0 descriptor?? [ 253.032334][ T8221] usb 1-1: USB disconnect, device number 71 [ 253.164728][ T822] cherry 0003:046A:0027.0010: item fetching failed at offset 38/40 [ 253.168584][ T822] cherry 0003:046A:0027.0010: probe with driver cherry failed with error -22 [ 253.550019][ T8708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.550605][ T8708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.553272][ T822] usb 2-1: USB disconnect, device number 78 [ 254.428907][ T822] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 254.582502][ T822] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.582558][ T822] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 254.582582][ T822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.604732][ T822] usb 1-1: config 0 descriptor?? [ 254.633144][ T822] pwc: Askey VC010 type 2 USB webcam detected. [ 255.016736][ T8721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.042040][ T8721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.113688][ T822] pwc: recv_control_msg error -71 req 02 val 2b00 [ 255.114319][ T822] pwc: recv_control_msg error -71 req 02 val 2700 [ 255.114791][ T822] pwc: recv_control_msg error -71 req 02 val 2c00 [ 255.117568][ T822] pwc: recv_control_msg error -71 req 04 val 1000 [ 255.119641][ T822] pwc: recv_control_msg error -71 req 04 val 1300 [ 255.120871][ T822] pwc: recv_control_msg error -71 req 04 val 1400 [ 255.126727][ T822] pwc: recv_control_msg error -71 req 02 val 2000 [ 255.128965][ T822] pwc: recv_control_msg error -71 req 02 val 2100 [ 255.132002][ T822] pwc: recv_control_msg error -71 req 04 val 1500 [ 255.132458][ T822] pwc: recv_control_msg error -71 req 02 val 2500 [ 255.134541][ T822] pwc: recv_control_msg error -71 req 02 val 2400 [ 255.136742][ T822] pwc: recv_control_msg error -71 req 02 val 2600 [ 255.140278][ T822] pwc: recv_control_msg error -71 req 02 val 2900 [ 255.140746][ T822] pwc: recv_control_msg error -71 req 02 val 2800 [ 255.146113][ T822] pwc: recv_control_msg error -71 req 04 val 1100 [ 255.146592][ T822] pwc: recv_control_msg error -71 req 04 val 1200 [ 255.226448][ T822] pwc: Registered as video103. [ 255.248869][ T8221] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 255.317745][ T822] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input26 [ 255.342550][ T822] usb 1-1: USB disconnect, device number 72 [ 255.409350][ T8221] usb 2-1: device descriptor read/64, error -71 [ 255.670044][ T8221] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 255.724854][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.724913][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.799425][ T8221] usb 2-1: device descriptor read/64, error -71 [ 255.911108][ T8221] usb usb2-port1: attempt power cycle [ 256.259270][ T8221] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 256.280139][ T8221] usb 2-1: device descriptor read/8, error -71 [ 256.530409][ T8221] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 256.551552][ T8221] usb 2-1: device descriptor read/8, error -71 [ 256.659569][ T8221] usb usb2-port1: unable to enumerate USB device [ 257.447836][ T8767] netlink: 'syz.0.818': attribute type 12 has an invalid length. [ 257.447860][ T8767] netlink: 132 bytes leftover after parsing attributes in process `syz.0.818'. [ 257.449926][ T8767] netlink: 132 bytes leftover after parsing attributes in process `syz.0.818'. [ 257.618616][ T8770] syz.0.819 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 257.674924][ T8770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.675920][ T8770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.749286][ T8770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.749594][ T8770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.841581][ T32] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 257.862439][ T8779] netlink: 36 bytes leftover after parsing attributes in process `syz.0.820'. [ 258.073011][ T5680] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 258.110522][ T5680] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 258.754625][ T8794] netlink: 380 bytes leftover after parsing attributes in process `syz.1.824'. [ 258.823321][ T8796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.825'. [ 259.884765][ T8810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.830'. [ 260.180155][ T5702] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 260.358803][ T5702] usb 2-1: Using ep0 maxpacket: 32 [ 260.360906][ T5702] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.426869][ T5702] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 260.426902][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.426923][ T5702] usb 2-1: Product: syz [ 260.426938][ T5702] usb 2-1: Manufacturer: syz [ 260.426951][ T5702] usb 2-1: SerialNumber: syz [ 260.554889][ T8819] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 260.554905][ T8819] IPv6: NLM_F_CREATE should be set when creating new route [ 260.576478][ T8819] IPv6: NLM_F_CREATE should be set when creating new route [ 260.576515][ T8819] IPv6: NLM_F_CREATE should be set when creating new route [ 260.836778][ T8827] dvmrp0: entered allmulticast mode [ 260.951082][ T8829] usb usb8: usbfs: process 8829 (syz.2.834) did not claim interface 0 before use [ 261.102489][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.834'. [ 263.019111][ T5702] cdc_ncm 2-1:1.0: SET_NTB_FORMAT failed [ 263.033137][ T5702] cdc_ncm 2-1:1.0: bind() failure [ 263.052797][ T5702] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 263.052842][ T5702] cdc_ncm 2-1:1.1: bind() failure [ 263.087668][ T5702] usb 2-1: USB disconnect, device number 83 [ 263.326190][ T8836] 9pnet_virtio: no channels available for device 127.0.0.1 [ 263.346722][ T5702] usb 4-1: USB disconnect, device number 12 [ 263.435104][ T8836] tmpfs: Unknown parameter 'kizDe' [ 263.614857][ T8845] binder: 8844:8845 ioctl c0306201 200000000080 returned -14 [ 263.799391][ T8845] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 263.808187][ T5613] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 263.827219][ T8845] binder: 8844:8845 ioctl c0306201 200000000380 returned -14 [ 263.854186][ T8845] binder: 8844:8845 ioctl c0306201 2000000003c0 returned -14 [ 263.856297][ T5613] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 263.866778][ T5613] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 263.876964][ T5613] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 263.883076][ T5613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 263.896127][ T8845] binder: 8844:8845 ioctl c0306201 200000000000 returned -14 [ 264.114998][ T5616] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 264.116638][ T5616] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 264.117085][ T5616] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 264.118231][ T5616] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 264.178942][ T5616] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 264.338889][ T5590] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 264.469843][ T5590] usb 2-1: device descriptor read/64, error -71 [ 264.729087][ T5590] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 264.863859][ T5590] usb 2-1: device descriptor read/64, error -71 [ 264.970438][ T5590] usb usb2-port1: attempt power cycle [ 265.398937][ T5590] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 265.425151][ T5590] usb 2-1: device descriptor read/8, error -71 [ 265.661075][ T5590] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 265.680062][ T5590] usb 2-1: device descriptor read/8, error -71 [ 265.802199][ T5590] usb usb2-port1: unable to enumerate USB device [ 266.160206][ T5693] usb 3-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 266.160352][ T5693] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 266.164099][ T5693] usb 3-1: USB disconnect, device number 48 [ 266.260475][ T5616] Bluetooth: hci4: command tx timeout [ 266.729901][ T8847] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.731670][ T8847] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.731938][ T8847] bridge_slave_0: entered allmulticast mode [ 266.737911][ T8847] bridge_slave_0: entered promiscuous mode [ 266.802465][ T8847] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.804298][ T8847] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.804559][ T8847] bridge_slave_1: entered allmulticast mode [ 266.824675][ T8847] bridge_slave_1: entered promiscuous mode [ 267.035982][ T8894] tmpfs: Unknown parameter 'no' [ 267.148959][ T5590] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 267.176102][ T8847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.195865][ T8847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.318830][ T5590] usb 3-1: Using ep0 maxpacket: 32 [ 267.323564][ T5590] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 267.323598][ T5590] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 247, changing to 11 [ 267.323624][ T5590] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 267.323646][ T5590] usb 3-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 267.326669][ T5590] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 267.326696][ T5590] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.326716][ T5590] usb 3-1: Product: syz [ 267.326730][ T5590] usb 3-1: Manufacturer: syz [ 267.326745][ T5590] usb 3-1: SerialNumber: syz [ 267.722005][ T8847] team0: Port device team_slave_0 added [ 267.737453][ T8847] team0: Port device team_slave_1 added [ 267.917526][ T5590] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 267.917586][ T5590] usb 3-1: MIDIStreaming interface descriptor not found [ 268.060306][ T5590] usb 3-1: USB disconnect, device number 49 [ 268.137661][ T8847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.137672][ T8847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.137686][ T8847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.206021][ T8847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.206036][ T8847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.206060][ T8847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.321950][ T5931] udevd[5931]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.348965][ T5616] Bluetooth: hci4: command tx timeout [ 268.675627][ T8909] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[5600] was attempted by "ci-upstream-rust-kasan-gce/syz-executor exec"[8909] [ 268.714268][ T8847] hsr_slave_0: entered promiscuous mode [ 268.714990][ T8909] syz.2.856: vmalloc error: size 68719476738, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 268.715178][ T8909] CPU: 1 UID: 0 PID: 8909 Comm: syz.2.856 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 268.715208][ T8909] Tainted: [L]=SOFTLOCKUP [ 268.715216][ T8909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 268.715236][ T8909] Call Trace: [ 268.715243][ T8909] [ 268.715252][ T8909] dump_stack_lvl+0xe8/0x150 [ 268.715282][ T8909] warn_alloc+0x24c/0x270 [ 268.715318][ T8909] ? __pfx_warn_alloc+0x10/0x10 [ 268.715358][ T8909] ? __lock_acquire+0x6df/0x2e40 [ 268.715378][ T8909] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 268.715404][ T8909] __vmalloc_node_range_noprof+0x130/0x1560 [ 268.715436][ T8909] ? kasan_quarantine_put+0xbb/0x1f0 [ 268.715481][ T8909] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 268.715509][ T8909] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 268.715532][ T8909] ? lockdep_hardirqs_on+0x7a/0x110 [ 268.715557][ T8909] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 268.715581][ T8909] vmalloc_noprof+0xb2/0xe0 [ 268.715606][ T8909] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 268.715630][ T8909] dvb_dvr_do_ioctl+0x12e/0x220 [ 268.715661][ T8909] dvb_usercopy+0x199/0x2e0 [ 268.715681][ T8909] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 268.715706][ T8909] ? __pfx_dvb_usercopy+0x10/0x10 [ 268.715738][ T8909] ? __fget_files+0x3a8/0x420 [ 268.715757][ T8909] ? __fget_files+0x2a/0x420 [ 268.715779][ T8909] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 268.715802][ T8909] dvb_dvr_ioctl+0x29/0x40 [ 268.715826][ T8909] __se_sys_ioctl+0xff/0x170 [ 268.715851][ T8909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.715872][ T8909] do_syscall_64+0x174/0x580 [ 268.715895][ T8909] ? trace_irq_disable+0x3b/0x140 [ 268.715913][ T8909] ? clear_bhb_loop+0x40/0x90 [ 268.715935][ T8909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.715955][ T8909] RIP: 0033:0x7fce4362de59 [ 268.715984][ T8909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.716001][ T8909] RSP: 002b:00007fce41886028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 268.716021][ T8909] RAX: ffffffffffffffda RBX: 00007fce438b5fa0 RCX: 00007fce4362de59 [ 268.716043][ T8909] RDX: 0000001000000002 RSI: 0000000000006f2d RDI: 0000000000000004 [ 268.716056][ T8909] RBP: 00007fce436c3e6f R08: 0000000000000000 R09: 0000000000000000 [ 268.716069][ T8909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.716082][ T8909] R13: 00007fce438b6038 R14: 00007fce438b5fa0 R15: 00007ffc1c6f6cc8 [ 268.716111][ T8909] [ 268.716122][ T8909] Mem-Info: [ 268.716131][ T8909] active_anon:7259 inactive_anon:32423 isolated_anon:0 [ 268.716131][ T8909] active_file:1374 inactive_file:22661 isolated_file:0 [ 268.716131][ T8909] unevictable:768 dirty:65 writeback:0 [ 268.716131][ T8909] slab_reclaimable:8270 slab_unreclaimable:100487 [ 268.716131][ T8909] mapped:30421 shmem:34202 pagetables:3806 [ 268.716131][ T8909] sec_pagetables:0 bounce:0 [ 268.716131][ T8909] kernel_misc_reclaimable:0 [ 268.716131][ T8909] free:381617 free_pcp:12764 free_cma:0 [ 268.716192][ T8909] Node 0 active_anon:29004kB inactive_anon:129692kB active_file:5412kB inactive_file:90008kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121684kB dirty:256kB writeback:0kB shmem:135272kB kernel_stack:14396kB pagetables:9848kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 268.716247][ T8909] Node 1 active_anon:32kB inactive_anon:0kB active_file:84kB inactive_file:636kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:5376kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 268.716297][ T8909] Node 0 DMA free:15312kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 268.716359][ T8909] lowmem_reserve[]: 0 2490 2490 2490 2490 [ 268.716393][ T8909] Node 0 [ 268.724469][ T8847] hsr_slave_1: entered promiscuous mode [ 268.724862][ T8909] DMA32 free:1079076kB boost:0kB min:3908kB low:6428kB high:8948kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29004kB inactive_anon:129692kB active_file:5412kB inactive_file:90008kB unevictable:1536kB writepending:256kB zspages:0kB present:3129332kB managed:2550208kB mlocked:0kB bounce:0kB free_pcp:34468kB local_pcp:18132kB free_cma:0kB [ 268.724925][ T8909] lowmem_reserve[]: 0 0 0 0 0 [ 268.724959][ T8909] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:540kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 268.725018][ T8909] lowmem_reserve[]: 0 0 0 0 0 [ 268.725059][ T8909] Node 1 Normal free:432080kB boost:0kB min:6376kB low:10484kB high:14592kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32kB inactive_anon:0kB active_file:84kB inactive_file:636kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:16572kB local_pcp:13168kB free_cma:0kB [ 268.725122][ T8909] lowmem_reserve[]: 0 0 0 0 0 [ 268.725153][ T8909] Node 0 DMA: 4*4kB (U) 0*8kB 2*16kB (U) 1*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 1*1024kB (U) 2*2048kB (UM) 2*4096kB (UM) = 15312kB [ 268.725811][ T8909] Node 0 DMA32: 1436*4kB (UME) 235*8kB (UME) 385*16kB (UE) 75*32kB (UE) 37*64kB (UME) 13*128kB (UE) 54*256kB (UE) 61*512kB (U) 34*1024kB (UM) 2*2048kB (M) 238*4096kB (U) = 1079032kB [ 268.725965][ T8909] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 268.726070][ T8909] Node 1 Normal: 76*4kB (UM) 54*8kB (UM) 41*16kB (UME) 53*32kB (UM) 37*64kB (UM) 23*128kB (UM) 15*256kB (UME) 12*512kB (UME) 10*1024kB (UE) 1*2048kB (E) 98*4096kB (UM) = 432080kB [ 268.726233][ T8909] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 268.726251][ T8909] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 268.726267][ T8909] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 268.732908][ T8847] debugfs: 'hsr0' already exists in 'hsr' [ 268.732933][ T8847] Cannot create hsr debugfs directory [ 268.734724][ T8909] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 268.734746][ T8909] 58233 total pagecache pages [ 268.734762][ T8909] 0 pages in swap cache [ 268.734770][ T8909] Free swap = 124996kB [ 268.734777][ T8909] Total swap = 124996kB [ 268.734786][ T8909] 2097051 pages RAM [ 268.734793][ T8909] 0 pages HighMem/MovableOnly [ 268.734800][ T8909] 427750 pages reserved [ 268.734807][ T8909] 0 pages cma reserved [ 268.741307][ T8909] netlink: 'syz.2.856': attribute type 27 has an invalid length. [ 268.741325][ T8909] netlink: 164 bytes leftover after parsing attributes in process `syz.2.856'. [ 269.338901][ T5693] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 269.469863][ T5693] usb 3-1: device descriptor read/64, error -71 [ 269.715994][ T5693] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 269.749695][ T32] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 269.859244][ T5693] usb 3-1: device descriptor read/64, error -71 [ 269.924025][ T8847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 269.924219][ T32] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 269.924245][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.924264][ T32] usb 2-1: Product: syz [ 269.924278][ T32] usb 2-1: Manufacturer: syz [ 269.924292][ T32] usb 2-1: SerialNumber: syz [ 269.943495][ T32] usb 2-1: config 0 descriptor?? [ 269.969165][ T5693] usb usb3-port1: attempt power cycle [ 269.991381][ T8847] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 269.992722][ T8847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 269.996543][ T32] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 270.033357][ T8847] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 270.034671][ T8847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 270.234230][ T8847] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 270.337435][ T5693] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 270.350909][ T8847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 270.360113][ T5693] usb 3-1: device descriptor read/8, error -71 [ 270.419280][ T5616] Bluetooth: hci4: command tx timeout [ 270.578083][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.858'. [ 270.578107][ T8914] openvswitch: netlink: Flow actions attr not present in new flow. [ 270.598915][ T5693] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 270.623555][ T5693] usb 3-1: device descriptor read/8, error -71 [ 270.711741][ T8847] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 270.732732][ T5693] usb usb3-port1: unable to enumerate USB device [ 271.381582][ T32] gspca_stk1135: reg_w 0xf err -71 [ 271.382637][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 271.382650][ T32] gspca_stk1135: Sensor write failed [ 271.382680][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 271.382690][ T32] gspca_stk1135: Sensor write failed [ 271.382715][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 271.382725][ T32] gspca_stk1135: Sensor read failed [ 271.382746][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 271.382754][ T32] gspca_stk1135: Sensor read failed [ 271.382760][ T32] gspca_stk1135: Detected sensor type unknown (0x0) [ 271.382788][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 271.382802][ T32] gspca_stk1135: Sensor read failed [ 271.397964][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 271.397981][ T32] gspca_stk1135: Sensor read failed [ 271.398008][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 271.398016][ T32] gspca_stk1135: Sensor write failed [ 271.398042][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 271.398051][ T32] gspca_stk1135: Sensor write failed [ 271.398542][ T32] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 271.410166][ T32] usb 2-1: USB disconnect, device number 88 [ 271.842949][ T8847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.898867][ T32] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 271.975951][ T8847] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.028890][ T32] usb 2-1: device descriptor read/64, error -71 [ 272.030454][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.030612][ T3326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.080769][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.082587][ T3326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.304430][ T32] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 272.480527][ T32] usb 2-1: device descriptor read/64, error -71 [ 272.516810][ T5613] Bluetooth: hci4: command tx timeout [ 272.591877][ T32] usb usb2-port1: attempt power cycle [ 272.962206][ T32] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 272.982852][ T32] usb 2-1: device descriptor read/8, error -71 [ 273.218964][ T32] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 273.243892][ T32] usb 2-1: device descriptor read/8, error -71 [ 273.350531][ T32] usb usb2-port1: unable to enumerate USB device [ 273.364478][ T8847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.167121][ T8847] veth0_vlan: entered promiscuous mode [ 274.205969][ T8847] veth1_vlan: entered promiscuous mode [ 274.477485][ T8847] veth0_macvtap: entered promiscuous mode [ 274.497357][ T8847] veth1_macvtap: entered promiscuous mode [ 274.625857][ T8847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.677758][ T8847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.719259][ T7483] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.719305][ T7483] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.719338][ T7483] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.719370][ T7483] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.198892][ T5590] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 275.368907][ T5590] usb 3-1: Using ep0 maxpacket: 8 [ 275.371155][ T5590] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 275.371210][ T5590] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 275.371234][ T5590] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 275.371256][ T5590] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 275.371279][ T5590] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 275.371317][ T5590] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 275.371340][ T5590] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.013559][ T5590] usb 3-1: usb_control_msg returned -32 [ 276.013604][ T5590] usbtmc 3-1:16.0: can't read capabilities [ 276.255925][ T5703] (NULL device *): [UEAGLE-ATM] firmware is not available [ 276.256013][ T5703] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN PTI [ 276.256032][ T5703] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 276.256050][ T5703] CPU: 0 UID: 0 PID: 5703 Comm: kworker/0:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 276.256070][ T5703] Tainted: [L]=SOFTLOCKUP [ 276.256075][ T5703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 276.256083][ T5703] Workqueue: events request_firmware_work_func [ 276.256106][ T5703] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 276.256122][ T5703] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 50 80 20 09 cc 66 66 66 66 66 66 2e [ 276.256134][ T5703] RSP: 0018:ffffc900053ef910 EFLAGS: 00010002 [ 276.256146][ T5703] RAX: dffffc0000000000 RBX: ffffffff8b524340 RCX: 0000000080000002 [ 276.256157][ T5703] RDX: 0000000000000000 RSI: ffffffff8b524340 RDI: 0000000000000004 [ 276.256166][ T5703] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 276.256176][ T5703] R10: dffffc0000000000 R11: fffffbfff1fa12f0 R12: 0000000000000020 [ 276.256186][ T5703] R13: 0000000000000000 R14: 0000000000000020 R15: 0000000000000001 [ 276.256195][ T5703] FS: 0000000000000000(0000) GS:ffff8881259fa000(0000) knlGS:0000000000000000 [ 276.256208][ T5703] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 276.256219][ T5703] CR2: 000000110c396d9e CR3: 000000003bbbe000 CR4: 00000000003526f0 [ 276.256234][ T5703] Call Trace: [ 276.256241][ T5703] [ 276.256246][ T5703] __kasan_check_byte+0x12/0x40 [ 276.256259][ T5703] lock_acquire+0x7d/0x350 [ 276.256272][ T5703] ? __pfx__dev_err+0x10/0x10 [ 276.256291][ T5703] ? rcu_is_watching+0x15/0xb0 [ 276.256310][ T5703] _raw_spin_lock_irqsave+0x40/0x60 [ 276.256328][ T5703] ? complete+0x28/0x1b0 [ 276.256348][ T5703] complete+0x28/0x1b0 [ 276.256364][ T5703] ? release_firmware+0x2e/0xb0 [ 276.256382][ T5703] uea_upload_pre_firmware+0x2ef/0x640 [ 276.256400][ T5703] ? __pfx__request_firmware+0x10/0x10 [ 276.256415][ T5703] ? __pfx_uea_upload_pre_firmware+0x10/0x10 [ 276.256431][ T5703] ? lock_acquire+0x115/0x350 [ 276.256445][ T5703] ? __pfx_uea_upload_pre_firmware+0x10/0x10 [ 276.256460][ T5703] request_firmware_work_func+0xf7/0x2d0 [ 276.256479][ T5703] ? rcu_is_watching+0x15/0xb0 [ 276.256494][ T5703] ? process_one_work+0x7fd/0x1480 [ 276.256509][ T5703] process_one_work+0xaaf/0x1480 [ 276.256532][ T5703] ? __pfx_process_one_work+0x10/0x10 [ 276.256546][ T5703] ? do_raw_spin_lock+0x12b/0x2f0 [ 276.256569][ T5703] ? assign_work+0x3cf/0x5d0 [ 276.256585][ T5703] worker_thread+0xb05/0x10d0 [ 276.256602][ T5703] ? __kthread_parkme+0x71/0x1f0 [ 276.256619][ T5703] kthread+0x388/0x470 [ 276.256634][ T5703] ? __pfx_worker_thread+0x10/0x10 [ 276.256646][ T5703] ? __pfx_kthread+0x10/0x10 [ 276.256662][ T5703] ret_from_fork+0x514/0xb70 [ 276.256682][ T5703] ? __pfx_ret_from_fork+0x10/0x10 [ 276.256697][ T5703] ? __switch_to+0xc89/0x1420 [ 276.256713][ T5703] ? __pfx_kthread+0x10/0x10 [ 276.256730][ T5703] ret_from_fork_asm+0x1a/0x30 [ 276.256754][ T5703] [ 276.256759][ T5703] Modules linked in: [ 276.256782][ T5703] ---[ end trace 0000000000000000 ]--- [ 276.256795][ T5703] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 276.256811][ T5703] Code: 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 50 80 20 09 cc 66 66 66 66 66 66 2e [ 276.256823][ T5703] RSP: 0018:ffffc900053ef910 EFLAGS: 00010002 [ 276.256836][ T5703] RAX: dffffc0000000000 RBX: ffffffff8b524340 RCX: 0000000080000002 [ 276.256846][ T5703] RDX: 0000000000000000 RSI: ffffffff8b524340 RDI: 0000000000000004 [ 276.256856][ T5703] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 276.256864][ T5703] R10: dffffc0000000000 R11: fffffbfff1fa12f0 R12: 0000000000000020 [ 276.256875][ T5703] R13: 0000000000000000 R14: 0000000000000020 R15: 0000000000000001 [ 276.256884][ T5703] FS: 0000000000000000(0000) GS:ffff8881259fa000(0000) knlGS:0000000000000000 [ 276.256897][ T5703] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 276.256908][ T5703] CR2: 000000110c396d9e CR3: 000000003bbbe000 CR4: 00000000003526f0 [ 276.256925][ T5703] Kernel panic - not syncing: Fatal exception [ 276.257206][ T5703] Kernel Offset: disabled