last executing test programs: 6m2.338402701s ago: executing program 2 (id=99): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$NFT_BATCH(r0, 0x0, 0x20000085) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x105201, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0xffffffffffffffda}, 0x0}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e"], 0x16) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r6, 0xae80, 0x0) setitimer(0x0, &(0x7f0000000480), 0x0) setrlimit(0xd, &(0x7f0000000000)={0x2, 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000280)="430f320f07b083410fdf3f75c462a59a11b8050000b95ea997c00f01c1c7442400d87b0000c74424025b1d82ffc7442406000000000f011c248f4978d1812e4b00006466460f78c7f08a", 0x4a}], 0x1, 0x7d, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x3, 0xff) sendto(r7, 0x0, 0xa00, 0x810, &(0x7f00000008c0)=@nl=@unspec={0x0, 0x700, 0x0, 0x80fe}, 0x80) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2500e4, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r9, 0x4020aeb2, &(0x7f00000002c0)={0x0, 0x0, @pic={0x9, 0x76, 0xc, 0x2, 0x0, 0x7f, 0x5, 0x80, 0x6, 0x7f, 0x40, 0x6, 0x0, 0x4, 0x6, 0x80}}) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000018000000000000000000000005000600002000000a00004000000000fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000200120002000200000000000000000006003200000000000000000000000000fe880000000000000000000000000001ac141432000000000000000000000000040003"], 0xc0}}, 0x8000) 6m2.18310244s ago: executing program 2 (id=101): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom$inet(r1, &(0x7f00000000c0)=""/206, 0xce, 0x257e131ec6c47274, &(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000), 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000), 0x4) 6m2.047940029s ago: executing program 2 (id=103): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012e7e53626a823f60c6a774a98ad2706e65d936291a8e3751371c2f12a62485d80f4898f72"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) lseek(r1, 0x0, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41bbe0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f0000000700)="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", 0x1ca}, {&(0x7f0000000240)="f2b314c96d500b4af7fd46495062d9eb11d188464208592330ac482436286468", 0x20}], 0x3}}], 0x1, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r4 = semget$private(0x0, 0x4000000009, 0x0) semop(r4, &(0x7f00000002c0)=[{0x0, 0xff}, {0x0, 0x1f}, {0x4, 0x202}, {0x0, 0x8, 0x1000}, {0x0, 0xfff}], 0x26) semctl$GETZCNT(r4, 0x0, 0xf, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0xa, &(0x7f00000001c0)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x20, 0x30, 0xb0, {0xb0, 0x0, "c1781f00ef2542a3d173fb67bf30fe29183a50c0e20faa6fb035363c0979438ce9a81a7efbc63ca395cfa8c241436028ae296add55b7e9df0ea644c45ccc4138e330e8a640d30d9efc4d51271a1dde05b7654be4a0599e0e38e923778883f85aa82a88b5f208a83285bf7b1ad23d791627fc5c95eb43fb92c9dbc6f4dc9bddc96d07e93e36f294f5cbd0f07cf7e766137792aa7586a36fd78399bb5f35c3f25e06ffff667f811489adb62e88e1de"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x40, 0xe, 0x4f, "991c820c75356c8f96b30e7568d7f3890dbc8cef6a60dd7da546d4913c96d0d7362d36bd7b2ca3b2d289d33cdb8d95d30b6e6b7d7fa8d9f8d78daf7afcc386762d74340776c1f96998200a26b1c83e"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xf4}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x2, 0xf32, 0x4, 0x5, 0x0, 0x8, 0x6, 0x0, 0x1}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x94f}, &(0x7f0000000380)={0x20, 0x83, 0x2}, &(0x7f0000000440)={0x20, 0x87, 0x2, 0xa}, &(0x7f0000000480)={0x20, 0x89, 0x2}}) 5m56.971964339s ago: executing program 2 (id=123): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000000)={0x1, 0x9, [@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xa74c439061f5209f}, @local, @remote, @multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast]}) r4 = dup3(r1, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x6, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0xfffffffa, 0xffff2d33, 0x1dd2, 0x6, 0x7, 0x0, 0x80000000, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x3, 0x3, 0x107fff, 0x4c74, 0xfbf5, 0x0, 0xb, 0xa, 0x0, 0x71, 0x7, 0x2000007, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0x6, 0x3, 0x4, 0x4, 0x8, 0x0, 0x7f, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0x8, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0xfffff000, 0xfffffffe, 0x8, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x801, 0x8, 0x4, 0x0, 0x106, 0x2, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x83, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xd, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x387d, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x80002, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x20005, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x2000008, 0x2], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce5, 0x1fd, 0x6, 0x5, 0x5, 0x40000003, 0x100, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x5, 0xffffffff, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffb, 0x5, 0x8, 0xc8, 0x3, 0x3, 0x80ffff, 0x200003, 0x5, 0x80000000, 0x9602, 0xa, 0x2, 0x4, 0x10, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x3, 0x8, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$evdev(&(0x7f00000002c0), 0x7a94, 0x8000) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) connect$phonet_pipe(r7, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) ioctl$SIOCPNENABLEPIPE(r7, 0x89ed, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) fanotify_init(0x10, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000000300)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000880)={0x6, 0x400, {r2}, {r8}, 0x8}) 5m56.854390189s ago: executing program 2 (id=125): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x180000, &(0x7f00000001c0)=ANY=[@ANYBLOB="9a5d168ec00727fe378876c4884678f1ceb93a11ef977a9297dfd6589b9339ce08aed832f5a3b5378a5ac1811d4c94e8eb65142659cbc27d0e14c9589651850094bd064936066183a81a4c5413a9351548acbab6bb76451f6f847abef77a7e307adfd20f1207cf90a9be1e6140543e3da9acfdfcfd34ea8e4d42a8f04b741c43b2646cdf1b3b44537064a1f7d0d620bbac64fa5021af8a3b86d232e41dce201005ba57a88505de30ecfe5e918cc3", @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d3030a806760c04ba19787383928230303030302c937365725f6910dc", @ANYRES64=0x0, @ANYBLOB=',group_id=', @ANYBLOB="4b048b95d6c933a5895702366d315227d76bf08efa85f02d5134abbca36589959c3137eb8e487ef1f53146e7566c148dcd1a714c893fdb2b30f0e0ac21e7e77fa06b847cafe01363367502c02b04c835f1aad2c93df239bf8ef127e7c741162aec4cd3201edd", @ANYRESOCT=r2]) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r2, 0xe503, 0x0) (async) socket$inet(0x2, 0xa, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000080)=0x800f, 0x4) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x4) (async) r7 = userfaultfd(0x1) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) (async) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) (async, rerun: 32) syz_io_uring_setup(0x3b45, &(0x7f0000000340)={0x0, 0xc5f8, 0x1, 0x1, 0xc3}, 0x0, 0x0) (rerun: 32) read(r7, &(0x7f0000000100)=""/145, 0x91) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) dup(r0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) (async, rerun: 32) r10 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) close(r10) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) splice(r8, 0x0, r10, 0x0, 0x1100000000f336, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x3, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) 5m56.573518636s ago: executing program 2 (id=126): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d0000090582020000000000090503"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x17) 5m56.381741927s ago: executing program 32 (id=126): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d0000090582020000000000090503"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x17) 1m2.578060591s ago: executing program 0 (id=1015): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000680), 0x20002, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000009, 0x11, r3, 0xf2f3b000) (async) r4 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000f40)=[@wrmsr={0x65, 0x20, {0x20d, 0x7}}], 0x20}) (async, rerun: 64) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2d) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048048}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x38, r7, 0x5, 0x70bd27, 0x30000, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x230}]]}, 0x38}}, 0x0) (async) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f00000000c0)={[{0xd27, 0x22, 0x6, 0x4, 0x3, 0x3, 0x2, 0x4, 0x1a, 0x2, 0x2, 0x80, 0xffffffffffffffff}, {0x1, 0x5, 0x6, 0x5, 0x55, 0x32, 0x8, 0xab, 0x3, 0x9b, 0x8, 0x7f, 0x1}, {0x1, 0x2, 0x5, 0x80, 0x3, 0x6, 0xf6, 0x80, 0x54, 0x80, 0x9, 0x81, 0xffffffffffffffff}], 0x7}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m2.52540074s ago: executing program 0 (id=1016): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r4 = syz_open_dev$radio(&(0x7f00000000c0), 0x1, 0x2) ppoll(&(0x7f0000000140)=[{r4, 0x202}], 0x1, &(0x7f0000000180), 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r10, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r9, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0xd}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8005}, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) r11 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r11, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "b1975a9d", {0x1, 0x4, 0x4, 0xff, 0x2}}) 1m1.012594637s ago: executing program 0 (id=1021): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x29) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xff) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x4, 0x5, 0xfffffff9, 0xc6cf, 0xfd, "00000816000001f6150000000100", 0x240001, 0x1fd}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x8) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KDSKBLED(r0, 0x4b65, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x6, 0x0, 0x0) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="01032cbd7000fddbdf25000000001400020077673100"/34], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x880) 1m0.905832838s ago: executing program 0 (id=1022): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x10000, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000100)=0x1) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f0000000380)) read(r1, 0x0, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000240)="d1", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @remote, 0x5}, 0x1c) shutdown(r5, 0x1) r6 = socket(0x2, 0x80000, 0x20000001) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="075bfd18f19a3e244600581b771540912dcbf8f2ecdf1db1e86feb0f5627d8ec1f41264b4dd59907d52fad6cbc68c86fe19f7d8678909342f5", @ANYRES16=r4, @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x40851}, 0x40000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0xffffffffffffff6d, &(0x7f0000000300)=[{0x6, 0x8, 0x20, 0x5}]}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r8, 0x541c, &(0x7f0000000000)) close_range(r3, r6, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, 0x0, &(0x7f0000000340)) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002d0100000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000001a00000000000000777b3bfc48cbf0b2b7127adac73ac474f8d7f418cfcd80a30dd74254", @ANYRES16=r9, @ANYRES32, @ANYRES64=r8], 0xfc}}, 0x2000c0d5) sendto$inet6(r4, &(0x7f0000000000)="9436", 0x2, 0x4004080, 0x0, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001e00010a020000000000000100000000"], 0x14}}, 0x0) 1m0.85559769s ago: executing program 0 (id=1024): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921ebdd9c9, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) link(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)='./cgroup/file0\x00') mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) syz_usb_connect(0x0, 0x6b, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e010203010902590001648cd48809049300000e0100ff0a24010200040001a53011240606040508000400050406000100050924030506030501f909240702020005cbad0924030601010306f9"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8c) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) rmdir(&(0x7f0000000080)='./file0\x00') mount(&(0x7f0000000080)=@md0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='smb3\x00', 0x249005, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) getpriority(0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f0000000100)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) mount_setattr(r1, &(0x7f0000000240)='./file1/file0\x00', 0x9800, &(0x7f0000000280)={0x70, 0x0, 0x100000, {r2}}, 0x20) pread64(r0, &(0x7f00000000c0)=""/50, 0x32, 0x8) name_to_handle_at(r1, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000440)=@ceph_nfs_confh={0x10, 0x2, {0x9, 0x9}}, &(0x7f0000000480), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921ebdd9c9, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) link(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)='./cgroup/file0\x00') (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) (async) syz_usb_connect(0x0, 0x6b, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e010203010902590001648cd48809049300000e0100ff0a24010200040001a53011240606040508000400050406000100050924030506030501f909240702020005cbad0924030601010306f9"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8c) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) (async) rmdir(&(0x7f0000000080)='./file0\x00') (async) mount(&(0x7f0000000080)=@md0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='smb3\x00', 0x249005, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) (async) getpriority(0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f0000000100)=[0x0], 0x1}) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) (async) fcntl$setlease(r2, 0x400, 0x1) (async) mount_setattr(r1, &(0x7f0000000240)='./file1/file0\x00', 0x9800, &(0x7f0000000280)={0x70, 0x0, 0x100000, {r2}}, 0x20) (async) pread64(r0, &(0x7f00000000c0)=""/50, 0x32, 0x8) (async) name_to_handle_at(r1, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000440)=@ceph_nfs_confh={0x10, 0x2, {0x9, 0x9}}, &(0x7f0000000480), 0x0) (async) 1m0.025951332s ago: executing program 0 (id=1026): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, 0x0, 0x29) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) read$nci(r2, &(0x7f0000000100)=""/107, 0x6b) write$nci(r2, &(0x7f0000000100)=ANY=[], 0x4) syslog(0x2, &(0x7f0000000200), 0x0) write$proc_mixer(r2, &(0x7f00000002c0)=[{'MONITOR', @void}, {'LINE2', @void}], 0xe) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x2, @private1, 0x3}], 0x1c) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4}) ioctl(r5, 0x8b2c, &(0x7f0000000040)) setsockopt(r5, 0x7, 0x6363, &(0x7f0000000000), 0x0) syz_usbip_server_init(0x5) 44.79910593s ago: executing program 33 (id=1026): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, 0x0, 0x29) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) read$nci(r2, &(0x7f0000000100)=""/107, 0x6b) write$nci(r2, &(0x7f0000000100)=ANY=[], 0x4) syslog(0x2, &(0x7f0000000200), 0x0) write$proc_mixer(r2, &(0x7f00000002c0)=[{'MONITOR', @void}, {'LINE2', @void}], 0xe) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x2, @private1, 0x3}], 0x1c) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4}) ioctl(r5, 0x8b2c, &(0x7f0000000040)) setsockopt(r5, 0x7, 0x6363, &(0x7f0000000000), 0x0) syz_usbip_server_init(0x5) 25.626541361s ago: executing program 1 (id=1147): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x11ff, 0x3331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x36, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\a\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\a\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xffffe000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) 22.586583431s ago: executing program 1 (id=1160): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000025c0)={r3, 0x200, 0x10}, 0x8) syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) 21.33674783s ago: executing program 3 (id=1165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r1) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x10, 0x18, {0xff, @bearer=@l2={'ib', 0x3a, 'hsr0\x00'}}}}}, 0x2c}, 0x1, 0x0, 0x0, 0x80d0}, 0x4000880) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)={0x5c, 0x2, 0x1, 0x801, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x6}]}, @CTA_ZONE={0x6}, @CTA_LABELS={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10050}, 0x4) 21.270726214s ago: executing program 3 (id=1166): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r3 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x98, r1, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xff, 0x2d}}}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x9}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x7}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x5}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xef}, @NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4267}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x400}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x2}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r1, 0xb97534d5fe9704cf, 0x70bd2c, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_STA_FLAGS={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40880}, 0x8008) r4 = open(&(0x7f0000000000)='./file0\x00', 0xd8e, 0x9e) read(r4, 0x0, 0x0) syz_usb_connect(0x0, 0x43, &(0x7f00000016c0)={{0x12, 0x1, 0x201, 0xab, 0x62, 0x58, 0x40, 0xc880, 0x760e, 0x35fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x31, 0x1, 0xe, 0xe, 0xa0, 0x32, [{{0x9, 0x4, 0x15, 0xfb, 0x0, 0x1, 0x3, 0x67, 0x2, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "7c1f"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0xfffffff8, 0x2, 0x9}, {0x6, 0x24, 0x1a, 0x6}}]}}]}}]}}, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0}) 21.258620719s ago: executing program 1 (id=1167): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x5) ioctl$TCSETAW(r1, 0x5407, &(0x7f00000002c0)={0xd7b, 0x81, 0xc000, 0x3ff, 0x16, "279ff3f1008000"}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r2) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, r3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @loopback={0x2600000000000000}}]}, 0x3c}, 0x8, 0x3000000000002, 0x0, 0x885}, 0x24000090) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 21.223781084s ago: executing program 1 (id=1168): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x88582) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x1, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4a2e00d9683dda1af1ea09de2b7fb0a0100000000000000000300000000000a000029bf00", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) syz_usb_connect$uac1(0x2, 0xac, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109029a00030100007f0904000000010100000a24010000000201020c24020000000000000000000c24020400000000001000000d2407000000004336d88b1a5609040100000102000009040101010102000009050109400000000007250180000002090402"], 0x0) add_key(&(0x7f0000001540)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) socket$pppoe(0x18, 0x1, 0x0) 20.678098316s ago: executing program 4 (id=1169): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000000)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) read(r4, &(0x7f0000000040)=""/146, 0x92) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x2000, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0xc1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x20400, 0x180) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000000180)=[0x0]}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPKT(r6, 0x40045431, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r8, 0x84, 0x7f, 0x0, 0x0) syz_usb_control_io$sierra_net(r7, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000180)={0x20, 0x7, 0xd, "963fb51263ea1e728fb128edc8"}, 0x0, 0x0}) 20.155642856s ago: executing program 4 (id=1170): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000f00)="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", 0x3d6}], 0x1}}], 0x1, 0x4) sendto$inet(r0, &(0x7f0000000500)="04", 0x1, 0x4040045, 0x0, 0x0) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000000)) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f00090582", @ANYRES16], 0x0) 20.08942568s ago: executing program 3 (id=1171): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x4e24, 0x3, 'wlc\x00', 0x1, 0x4, 0x8}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9c, 0x32, 0x3f, 0x8, 0x4a5, 0x3003, 0x3ab2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0xf0, 0xf6}}]}}]}}, 0x0) syz_usb_control_io(r3, &(0x7f0000000000)={0x2c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003aa000000aa03"], 0x0, 0x0, 0x0}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffffffffffc, 0x3e, 0xff, @scatter={0x1, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/54, 0x36}]}, &(0x7f0000000100)="d016d62c56d51e01b7fc60be701ed5bae7271cec229c6388068a8b05bd04637d6197ab026b448d48b44976eb86c00af4df3ee9dfd8df2e7a2aca3a5f9bf6", &(0x7f0000000140)=""/176, 0x10000, 0x10030, 0x2, &(0x7f0000000200)}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) 19.946857877s ago: executing program 1 (id=1172): syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="090100026a17d11008170e00b1ad010246480902"], 0xfffffffffffffffe) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000240)={0x40, 0xb, 0x2, '4i'}, 0x0, 0x0}) syz_usb_ep_read(r0, 0xc, 0x1000, &(0x7f00000000c0)=""/4096) 18.910012731s ago: executing program 1 (id=1175): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) syz_usb_connect(0x1, 0x9a8, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000dc0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x7, 0x8, 0x2, 0x10, 0x8d}, 0x168, &(0x7f0000000e40)={0x5, 0xf, 0x168, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x4, 0x0, 0x8000}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "81468227c5c769ea5b47013d98ae4a97"}, @generic={0x103, 0x10, 0xd, "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"}, @generic={0x42, 0x10, 0xa, "909d4f912107c467cebd60f5c7647d3069ec24ebe753e70d970c042985aad11d927e9b5fe97a928433d5680855d076e82f70e9780b7435ae0ba421ac55b499"}]}, 0x4, [{0xe8, &(0x7f0000000cc0)=ANY=[@ANYBLOB="e803b41b58e1a48136cdc324d65f6adc7999fc1dbd8d4437b5e0d486208c3f69e56e07776ff6553c5db2656685cd530649bf4c1e61e3f9b2d34d4289e86b36ac512c89c458fa4559a37a162380c2f4ec8fb00e78bd879ce16b9d01c8fbe47d724bedaa0a5922be0960e18775084fa2f6a34733990dbf0a037db8c7ea983da96b14833ecb2f99d9c9dc65e2ca1627a861cc895e2116035f06bda75817c7036e50a1ee5ae8f7a3519f2b7ff06d600bc9da53e8e1d312d5ee913482cd2f5ba22375d0dfcc9138ce1c1eaf32415ede947e98383026ff9964981151bd268a76cf53f64099edc76c0f766c"]}, {0x22, &(0x7f0000000040)=@string={0x22, 0x3, "c6381d5363f99c02e2a76146b58bf0ce8228dafe19e4322c4179b0e8587573a3"}}, {0x2a, &(0x7f0000000080)=@string={0x2a, 0x3, "06120ac6deced695eeadcc6a01c179e9676c5c466d46b7e080c5b6bb505cbf9717daadd9dfb90cca"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x41c}}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80202, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80202, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x8) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x8) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0x8, 0xb, 0xf, 0x0, 0x2, 0x4, 0x8, 0x1, 0x7, 0x4, 0xb, 0xfa, 0x0, 0xfc000000, 0x3, 0x5, 0x3, 0x6f, 0x5, '\x00', 0xb3, 0x5}) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000180)={0x80000, 0x0, {[0x7, 0x5dfc, 0x100000000, 0x7fff, 0xd61, 0x5, 0x8, 0xdc]}}) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$llc_int(r4, 0x10c, 0x6, 0x0, 0x0) (async) setsockopt$llc_int(r4, 0x10c, 0x6, 0x0, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000ffffffffffffaaaaaaaaaaaa8100000086dd60b79a5600442900fe8000000000000000000000000000aaff"], 0x82) 18.468129176s ago: executing program 3 (id=1176): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/packet\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000013c0)=""/186, 0xba}], 0x1, 0x92bb, 0x21a) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000080)=""/35, &(0x7f0000000140)=0x23) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x9, 0x7, 0x7, 0x5, 0xe, "1c3bee24dc1bccadeb69082c26e407e6334d0a"}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/packet\x00') (async) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000013c0)=""/186, 0xba}], 0x1, 0x92bb, 0x21a) (async) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000080)=""/35, &(0x7f0000000140)=0x23) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x9, 0x7, 0x7, 0x5, 0xe, "1c3bee24dc1bccadeb69082c26e407e6334d0a"}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0) (async) 18.325843163s ago: executing program 3 (id=1177): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000280)) (async) r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x4b, 0x3, 0x9, 0x10, 0x1199, 0x9015, 0x992d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x3, 0x7f, 0x7, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0x9, 0x0, 0x45, 0x83, 0xd6, 0x3}}, {{0x9, 0x4, 0x1, 0xe, 0x0, 0xff, 0xff, 0xff, 0x8}}, {{0x9, 0x4, 0x66, 0xc, 0x0, 0xff, 0xff, 0xff, 0x8}}]}}]}}, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b52, &(0x7f0000000100)={0xfffffffffffffcf0, 0x0}) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e0c04"], 0xf) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1}, "c6"}, 0x5) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FICLONE(r4, 0x40049409, 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES32=r2, @ANYRES8=r0], 0x60}, 0x1, 0x0, 0x0, 0x8000000}, 0x4082) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x28}}, 0x4004) (async) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xd40b}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x180) mount(0x0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='tmpfs\x00', 0x801805, &(0x7f00000002c0)='grpquota') (async) r8 = creat(&(0x7f0000000240)='./file0/file0\x00', 0x154) quotactl_fd$Q_QUOTAOFF(r8, 0xffffffff80000301, 0x0, 0x0) 17.564830413s ago: executing program 5 (id=1182): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x44040) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000200)={{0x2, 0x2, 0x101, 0x0, 0x1}, 0x967, 0x9, 0x4}) r2 = socket$kcm(0x29, 0x5, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000280)='*+#[-@&/\x00', 0x0, r2) write$binfmt_elf32(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x6, 0x4, 0x5, 0xf, 0x3, 0x3e, 0x9, 0x1e4, 0x38, 0x2c, 0x10, 0xed4, 0x20, 0x1, 0x8, 0xffff, 0x1}, [{0x2, 0x8000, 0x89, 0x8, 0x846, 0x9, 0xa, 0x3}], "17e83f6b1450bcf22e20f1c54c8c996c83c7721dc05279282e97eb47cc069af107061a8042cf6f7fbe363eebc4e635fd3afb28c3c47d0f986c04b7a859d46c0f3372ab67a2f36c72c46ff3c663917a0b48f3178c408a412684e1d5d46e8942b4a8b3601337298383dc55bea419da8b233bb684814d42018895fe31d5d7d98fadbd50628325ef97bc33ddb2f38f0a96dd053dda3949859879b5b7608f7b3b14b5b830a40549008041791d8fb23948ad26fd76d53d35f64447c4e04c4e3c4767f57b0c666ba08667b1532507aebbbbbec90c61fd7a1835747af10d266fb4b20981eba77cb41596fb24", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x840) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000d00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4a64088}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x160, 0x4, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_USERDATA={0xb2, 0xc, "84afdfeb425c2916afc2bf604b25c52c8f81199b8a9cf59cd58760ca983b99a72061cccb4c1d12f18216b64bd8b1d6c7f01177a348f90ed9c3c4b15604a60ed8454230b20e051c7ae880ad1ed52e76917f3d0e425a4fd0e542bc702e66edb8ed67dc4c6a719185bb74ae94442b4cb15f026f725cc2ee3c27c4a5853628357f2c0f73d30d991cbc734411a45ce43a6858a2e462ccdabbb3f2d0a137c8c6f3a5c14f871ce987059aea4db912a77fad"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xf}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x800}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f0000000d40), &(0x7f0000000d80)=0x4) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000dc0)='syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r5, &(0x7f0000000e00)='devices.allow\x00', 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f0000000e40)={0x6}, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000e80)={'vcan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000ec0), 0x612000, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r7, 0xc018aec0, &(0x7f0000001300)={0x0, 0x380, 0x180, &(0x7f0000000f00)=[0x5, 0x9, 0x80000001, 0x1, 0x7fff, 0xdc, 0x3, 0x4, 0xfffffffffffffffc, 0x6, 0x6, 0x7, 0x8, 0x7, 0x95, 0x9, 0xc, 0x8, 0x0, 0x4, 0x7, 0x4, 0x3, 0xb3d2db9, 0x9, 0x14e7, 0x5, 0x0, 0x58, 0x200, 0x6, 0x3, 0x2, 0x2c000000000, 0x9, 0x1, 0x1f, 0x200, 0x8000000000000001, 0x7, 0x80000000, 0x0, 0x10000, 0x7, 0xb38c, 0x8de, 0x4, 0x0, 0xac4, 0x0, 0x70e311b1, 0x0, 0x5, 0x4, 0x10, 0x5, 0x100000000, 0xffffffffffffff80, 0x40, 0xfffffffffffffffa, 0x3, 0x754, 0x9, 0x1, 0x80000000, 0x2d, 0x2, 0x0, 0x2, 0x4d1658d9, 0x7e, 0x1, 0x2, 0x35a, 0x0, 0x9, 0x5, 0xffffffffffffffff, 0x401, 0x8, 0x2, 0x9, 0xfffffffffffffe01, 0x0, 0xfe2, 0xc, 0x5, 0x8, 0x8, 0x0, 0x8, 0x2, 0x3, 0x80, 0xfffffffffffffff7, 0x6, 0x2, 0x8, 0xc, 0x8000000000000000, 0x2, 0x7, 0x9, 0x5, 0x7, 0x400, 0x7, 0x100000000, 0x1, 0x4, 0x9, 0x7, 0x8, 0x100000000, 0x8b, 0x3c07, 0x7, 0x21, 0x200, 0x4, 0x6, 0x7, 0x8, 0x9, 0x8, 0x5, 0x1, 0x3ff]}) syz_usb_connect(0x3, 0xaf0, &(0x7f0000001340)={{0x12, 0x1, 0x200, 0xac, 0xf7, 0xbe, 0x8, 0x1b1c, 0x1ab5, 0x200, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xade, 0x2, 0x4c, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0xd7, 0x9, 0xb, 0x95, 0xbf, 0x4a, 0x9d, [], [{{0x9, 0x5, 0x80, 0x0, 0x8, 0xc, 0x2, 0x1, [@generic={0xf8, 0x23, "1def51b6eff515ecdeb581bb2e724e02806e5842e826fba30a10999b6b0b3f735f752bd103e89359e3d998ca28f9d83bd8a8d7ea5a05090877a462c846f6062955cbd1fc6f3635e274f97f09042aa2d2090a703b8b0c7c79ba89fbd78558ce06524c746541bd138ed8a8af0222d9919adec8e36868cbc1c95feba1ff14e1c1451b99dc4fe141a9a87c54c202acafa0c5fbe18ef3190259d67f32ff8e538733a9261b5b3eab214c2ff9f85f90a7f8c5ed11b1a2e0d41b6babe9acc2cc49761502b0f10b0f9547fdf167e1700fdabc3ba54172a67d43499d7edce8aac4e5013fd7311ea421a65e37b379ba2fd696914684b3f01a8b9c0a"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x200, 0xf6, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x10}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x5, 0x23, 0x52, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x79, 0x5}, @generic={0x8e, 0x22, "b0234f1bb64916fbff8e59d1b0e801a7e3d45be9ff0ebb17f43f5b090109c4f0e74e8262f9203f41fce2dad32e473fdeb294a158d9b24c57d94324cf6016ad8c0fe65e564a7e0880a22e421faa874d955d538a6fc2be49bfb67e354c048b60b9bc7c25e44c4cd728ab48bdf280e9d238f0ed26089544a321e668de6b22135b75561bd4a5769140c4372c9a49"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x200, 0x0, 0x7, 0xdf, [@generic={0x101, 0x6, "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"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x200, 0xe, 0xf9, 0x9, [@generic={0x89, 0x4, "ff48f45c77f6fed09c036e142a40f35822eb9ff2b4e38f347e5125efb41d90bdbe7e58fe7d77e1e8e445bfbd6709cd801bb6f4d3a9a54c7932321a2d8842b119accb28ad899e0452f09f52113257918516c2f0dc3558f3bfb40d61f56f22536c0ca0f890b72c411924824dfd2705d7a45d7533589e71ce98529e35fccafb7efda6b2dd8109a456"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x0, 0xeb, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xd, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0xd}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x5, 0xf, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x95, 0x4}, @generic={0x23, 0x22, "2c4073ebd0811d4176212c70473f94644d50c8fffb59aa1a5ace4b59d1f09f4239"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x40, 0x1, 0x4, 0x2, [@generic={0x9b, 0x22, "4a036f52e35bc26a5d1d1f7742bdd1383afc9de09c4e18f3b8bd876e33f0073dc3f5a84c8fdd7da03c719fe51a78ac3dc057e408291047ad906276f742ea426a64f0231a7ec0b8aef7f339894c41b7df427fcd7e08448c3207b7b994b5cabce00dacb063b3dfb1e2dc37e73f52e768592d48d7603c2f2cb7e29eb65af763d665017c514e0a1bc91e260d02d1cb7195175f7fa99c8a4b105d4c"}, @generic={0xd0, 0x22, "dcfa3cf10c12c5618f06ff2dd20dac4a30af6ab3159ffbafbdd30948849308277f6e5e98d0e71a2df138352024391ba0d49a07a7dc5654b40acf019240937b6886d94aac3083711b7bde67171d8e6b892341b54c03ea3b219de0be5bdcf5b11ddb5881628e7330ab4d385f21d9c41f759b295e0600ec7f28db751ef4ba9fb91d80bc5b47a61b990e6fb15b18d93d8170f610d5d4d18e964c08994c6fb87dff2d5fa9f53a81a2cdc45253532c9bde011e7251198aa01325bb98ebca417983d104c4cccaa50d1b30907deb11332698"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x1, 0xff, 0x7a}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x0, 0x4, 0x0, [@generic={0x96, 0x0, "ae726c3ec24cb7ab0be380832795ccf04c9e333a029ec77c33c321598909ae629b57a71452c84f3fd05b092c67491ac05590da25443eabece1fb6993123d70815328114251e56ccf415adbdf0e70669266189a75e38819d50a7e17013f5055771e1eef0408c72c15097bec14086c4565a094c495a193dd9f80327133bfbd40c36fbcb99a12c79a162993ffec89aeb1eb4db47c9f"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0x8, 0x5, 0xe}}]}}, {{0x9, 0x4, 0x74, 0x3, 0xa, 0x7d, 0xfb, 0xb6, 0x3, [], [{{0x9, 0x5, 0xb, 0x10, 0x7cf, 0x8, 0x2, 0x7, [@generic={0x6d, 0xf, "aebe623a3a32775dbbcd5a4cd905ee55fa5309ab6a5279eb73b06a8bbdc55dbb0fd41fd7b5f76182daff03ac607a04f83f63a5c572bca891a3165a5b997a303a6a1ae631eba839a4edda3638f159b5b6b6ecbafe34a5141e4b215edc53203c6e146f936474c5e5a593f3cc"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x5}]}}, {{0x9, 0x5, 0x80, 0xf, 0x10, 0x2, 0x7f, 0xb0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x4}, @generic={0x32, 0xf, "4d3707c52eeccb3561cc344cb7fa04e827cbcf3e89fdec0f34571043a07304f83fbcd4535ab1cc4319429ba4bb74e4e7"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x3ff, 0x1, 0x4, 0xf, [@generic={0xdf, 0x0, "857367680a956c400c872f44bf8525cd20df19e96c4eecd0781d15150ae943e7dc50ba9bdbd7cc3535b2e458977992ceecfaec441cee6650639e3867c99689f6f627091f8f9a740a969b2d6a736761d6f62d415cd747d23b05bc3297aec8846d1027900c0403cf6c74f5f5a2c779dfd3b6f620ef1dfe622001f8f56400f5a316297c80e5699a62ae1012fb144589078dbc53a1218c138bcefa7ce1a351048fdd9233819ae21867d7da8b674c3e0b1c5e57257571fd4b2297043275e7e2d99aa2cd6cfda6948bf18c7a69c1a2c1de97d9a026800e20e1bef58bc0b975df"}, @generic={0x93, 0x11, "3bb83520b5ddfbf44e423619b9cc5a8f78ae04ade897552d9b6fdb678e04d8899100128d7dd9d8e1929e32693df8ad585f0ec393a108601e3eab8b68858e7661005a124912b7c02d76eee91e1ab8aa8cb516438d4ead5a9789f6972d25939d25b29ed96ade2651575042000e0ee594c813420680e35eda114081ea06ba9356a75add712af831a38371bc880b11fc423312"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x36, 0x7, 0x3, [@generic={0x82, 0x30, "64d528eb98a7c15efb28fa625ef0a689f79883aa7ddefb61a02ac175d63e8f63c28243233d160c8a038cc5fc8e0d254c4d153526494285ccd31ab05f7e6cf9c4e3caaa20e6d3862a894ad4be949cd97ba2f5700c5d88444e7e28b7da98f23775e62018eed32b78ce0b6bec6f9afc3cb5adc542f8d1d0a89bdabcd28d7a28de5d"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x8f95}]}}, {{0x9, 0x5, 0x1, 0x7, 0x40, 0x5, 0x3, 0x53, [@generic={0x1c, 0x4, "6b5755a764cfc470f27c143b197fd42b5763e2de3277e5f79200"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x8, 0x3ff, 0x4, 0x2, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x10, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x6}]}}, {{0x9, 0x5, 0xf, 0x2, 0x10, 0xf, 0x91, 0x5f, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x3c, 0x5}, @generic={0xf8, 0x31, "7865338d67373c4f1ceabcf49403fb4fb0f36c377624e017cd2cb8b0fe3db955bac1934fba84a47b086ee4a6645dd0889f5c1ca37b607f7d7ebd6caae5b1c4024da25f03278716371cd9bf78fce275fd21e80351d386af14d627cd66276aa67cc3f0e5cb086429d7ba0434d4698f6dbe4a711b8d6ae88d2885e1ae8675b00088477a4027ab5a69f5a979d3857eeb1ca6648fe208d93e29f0175c18e39b7b4d4134af1260d7910a28bfeed01291d56433469bdf406420da1f1cc45d2638c34acadf4e8b736b2ac1a18f91b1fe6eafa01f80cacc707deb3909fbbb1658f45c1ea583665bc2b0baa44146c1e5768e2b048188590b8776cb"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x200, 0x6c, 0x9, 0x55, [@generic={0xa0, 0x3, "cfd5db7cb60b34b97df049cfae200a9b419a0940bc07941d97b27e5505be5230fb016e67878febfb7cb9336a32ecdd8294aae97c1bd6b5013e157995224dcb8348879a699c7231defd943f1c317812ec6a4ac8192fb74e4ce3de64744362bb14100e925c035ee3b962feda99c3db9c9614e37219363dd1e9c6da4994235d49a4c7b1080a08a92981b0b51e6644de8cd5b9998956762f9c02fca5d32ae991"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x18, 0xf2, 0xd}}, {{0x9, 0x5, 0x0, 0x2, 0x10, 0x27, 0x9d, 0x2, [@generic={0x2d, 0xb, "272e365287da8a89fd0face3877abc50de7490f13825be8f6a371d0b9e9b72ba790121475accac3d0d9c77"}, @generic={0xa, 0x23, "f26bcf555036c398"}]}}]}}]}}]}}, &(0x7f0000002080)={0xa, &(0x7f0000001e40)={0xa, 0x6, 0x110, 0x5, 0x6, 0x7, 0x40, 0x2}, 0x51, &(0x7f0000001e80)={0x5, 0xf, 0x51, 0x6, [@ssp_cap={0x24, 0x10, 0xa, 0x81, 0x6, 0x7, 0x0, 0x9, [0xc0c0, 0xff0000, 0xf0, 0xc0, 0xc0f7, 0x3f00]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x7, 0x8, 0xb5}, @ss_cap={0xa, 0x10, 0x3, 0xd790de12844fe298, 0x0, 0xde, 0x3, 0x1000}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x81, 0x7, 0x55}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x9, 0x0, 0x8}]}, 0x3, [{0xf6, &(0x7f0000001f00)=@string={0xf6, 0x3, "a09a2b42fa588b31418fa09e1bb35045e37b3a4520edb77e356199cca849bcb9e603334f2643501515a9f5dada4c87fa0930a18c503e322db5aa07bb4dfef5580ddf1018f00fb8abde157bd039f6fafc0f25097302b06c9a1e68d1f27cd3a7c7c92ad02d4522d4b3c5c3605a1a6c8b9d725cf63349cc335d4cf6bf921d7e36bc0f5c891bce601a52cd0f6d56d297f4b4fda19bef5260c3ae0cad283c5121751d0b4f8d0f33de8ab614c7b3a87178e890a9b4cb45959734edce52786f565c6946a781dcbc6c72bd08a6ddb6320eb87620c56da22a254719ad1c0a27f735e2b39b5ac7203e03d5a3567f38516e6c9bb86a30ec2ae7"}}, {0x4, &(0x7f0000002000)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x200a}}]}) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000004) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f00000020c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002140), r8) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r7, &(0x7f0000002480)={&(0x7f0000002100), 0xc, &(0x7f0000002440)={&(0x7f0000002180)={0x2a8, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x118, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0xed, 0xb, "f045630d30f12d274317b05ffbdcbbefec60e25877be57c333fa14205819801f860f23300a431b3078976167777d8e142c4dbd3d93417b5f14621af228ecc8dcfd67054953affbd70d75ab225a7d10f01efa4c7ac8a26c22cd9b97ff1b0e0a913d04cf4a763ad4a49c7888757de4f90f8b461459eb6b6cb58b8751c5abeebe3a69d19f619e4f02088888d6d62bf7cf872f756ef1fbafdf738f6598e7b1c376ab082b8ebb77e2029d745d431c3aeec33199e3b9e6898ef3ef6f6609a7b1ea0139839793ffd03c49e98e281b929f5b6bfd2437566f97eb8496f8a2925ac1e852873f4bce91ec515ad290"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xf}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x6}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x3}]}, @NL80211_ATTR_NAN_FUNC={0x2c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "dbb148fa40f2"}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}]}, @NL80211_ATTR_NAN_FUNC={0x150, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x140, 0xe, 0x0, 0x1, [{0x92, 0x0, "6bd9634f12d9257a4c4258547a6fc4fc7d9c7c2f355a6c6ab578fc46ac2d57d595970286749aab0455eea5ff463ba66b39c99b9752a926b0b1ce056e2c9695a2681f4af66ba04f056d1c66a6cb13856ba633e637f657da4f46825338cdd6f64bad68219d7c35434e19c07becccce9930e69d291c4a90676a1370d176ccf3aad9258c649646ef9f5a161e85baa3b4"}, {0x37, 0x0, "5131bcd8008d0340a73421789b9d0b7d35f95dfbbac090099c4a8837f2d153d949f1b28cfd8158d5a426b14ba736c48602a71e"}, {0x70, 0x0, "f1bfe2c2f791eba789421421c288616e34534839c3b2c56de14cfbb08d06306286e4ada497f4b8c76e9d154cf9fd2d9a5bc44e6af2c9c406638925ff40061664357921bc59d3bde4e52ebc4db858022c4899dd7df5edabc4c046e5b968477068e9a68e86ce94ec5a358188bb"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x6}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = getuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000002540)={{0x1, 0x1, 0x18, r2, {0xee01, 0xee00}}, './file0/file0\x00'}) mount$overlay(0x0, &(0x7f00000024c0)='./file0\x00', &(0x7f0000002500), 0x804000, &(0x7f0000002580)={[{@index_off}], [{@fowner_eq={'fowner', 0x3d, r10}}, {@fsmagic={'fsmagic', 0x3d, 0xb0}}, {@euid_lt={'euid<', 0xee01}}, {@smackfsroot={'smackfsroot', 0x3d, '-^(*!@{^$\'S4'}}, {@obj_type={'obj_type', 0x3d, 'syz1\x00'}}, {@uid_lt={'uid<', r11}}, {@fsname={'fsname', 0x3d, '%.'}}, {@context={'context', 0x3d, 'system_u'}}]}) 17.107391719s ago: executing program 4 (id=1183): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000200)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="11002bbd7000fddbdf250700000008000300", @ANYRES32=r2, @ANYBLOB="0c009900fbffffff2d00000008000500060000001400040070696d726567000000000000000000000c001780060004"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x10) 17.014384333s ago: executing program 4 (id=1184): syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000280)=ANY=[], 0x0) 15.232204486s ago: executing program 3 (id=1185): r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df0009058202"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x1, 0x278e) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000300)={0xd000}) syz_usb_connect(0x2, 0x59, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0xce, 0x8e, 0xcd, 0x8, 0x2c7c, 0x195, 0xbcea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x4, 0x5, 0x90, 0x1, [{{0x9, 0x4, 0xe1, 0x3, 0x2, 0xff, 0xff, 0xff, 0x4, [], [{{0x9, 0x5, 0xf, 0xede9da985a30f683, 0x200, 0x9, 0xb3, 0x5}}, {{0x9, 0x5, 0x85, 0x3, 0x10, 0x4, 0x8, 0xae}}]}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 14.50950675s ago: executing program 5 (id=1186): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x8481, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x27) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x6feb, 0xfffffff9, {0xffffffffffffffff}, {}, 0x6, 0x9}) capget(&(0x7f0000000140)={0x20080522, r1}, &(0x7f0000000180)={0x6, 0x200, 0x6, 0x3b93cb87, 0x9, 0xfd}) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000c000904000001220500093c9b0500000000000007"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x3, &(0x7f0000000840)="91ad05") r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc0100, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6}, 0x18) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r6, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) getpeername(r5, 0x0, &(0x7f0000001380)) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r7, 0x84, 0xb, 0x0, &(0x7f0000000240)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000340)) r8 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r9 = add_key$user(&(0x7f0000000200), &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)="f2e240d45c900000000088052d3569dfb97889f653fc8ec3b8cd1c533ad2cbec1ce8fdab1dd5c173a474", 0x2a, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000100)={r8, r9, r9}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {r4}}, './file0\x00'}) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) 13.949509722s ago: executing program 4 (id=1187): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f00000002c0), 0x4) r2 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0xc88d4, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xb30b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x3, 0x9, {0x9, 0x21, 0x2, 0xe, 0x1, {0x22, 0x758}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1, 0x2, 0x80}}}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006300)={0x14, 0x14, 0x1, 0x70bd2a, 0x25dfdbfe, {0x2b, 0x28}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x840) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2d5a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x1, "acba0a68"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000b40)={0x24, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="cfe40304"], 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x3e, 0x87, 0xde, 0x8, 0x2c7c, 0x512, 0xf5e9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x0, 0xff, 0xff, 0xff, 0x48}}]}}]}}, 0x0) syz_usb_control_io(r3, &(0x7f0000001f40)={0x2c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00031000000010033c5fde5c30ca699cb0c79ab0bb9a91f4dd75a9ae128c8a77718547c8cdbcda012d78b390c4013b5131f81e90959a4576fd182457e4ba50b3e7c9cbabe2949b3b64b7a03f8e2058ced1df73c7e4e10441667a0b9759961a0d8602d5", @ANYRES32=r2, @ANYRES32=r2, @ANYRESDEC=r0], &(0x7f0000001e40)=ANY=[@ANYBLOB="b93c05001800050f050000"], &(0x7f0000001ec0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x24, 0x1, 0xfc, 0x9, "f1b99de9", "32f33fef"}}, &(0x7f0000001f00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x60, 0x52, 0x3, 0x9, 0x4}}}, 0x0) sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x140) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x22400, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="410f2092b994000040b800000000ba000000800f30c461d25c971a32000066b86c000f00d866410f382a11360f01c3c7442400d86a7e6cc7442402e89e0000c7442406000000000f01142426f3400f1ef9c4e31d7de20066ba4100b082ee", 0x5e}], 0x1, 0x0, 0x0, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_usb_connect$cdc_ncm(0x4, 0x74, &(0x7f00000003c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x2, 0x50, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "65728eed4492"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1, 0x9, 0x5}, {0x6, 0x24, 0x1a, 0x1}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x6, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x33, 0xfe, 0xd5}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xb, 0x5, 0x8c}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x0, 0x4, 0x59, 0x80, 0xff, 0x3}, 0x10c, &(0x7f0000000880)={0x5, 0xf, 0x10c, 0x6, [@generic={0xbe, 0x10, 0xa, "ff131c5a612001d2b2fd2de65c73963696e44dd5eb368e57ad0e37d0f526e8933c95e9e840a52842b52db3a48d5a8528be386199ee4729175b6f10743ace0d9de762cc6e1aec8c240fb52dc2633c72ffc62129a64768eff9ee6550df894953dba21cab744956f52eff0fa32b67f0e1edd43c878ab7283637c77f9928efddd0b6940c9d300e1741fcd8f4c682c1a0205d046d9365ab927b73050a7d190239116c4b90d8d79318a8de4fc422ea92ba7b2055c4b2eec067c1ab8badfd"}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x400, 0xf00, 0xbd, [0x3f00, 0x0, 0x0, 0xffc000, 0x3f00]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x4, 0xc, 0x4094}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x2, 0x0, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc1, 0xb, 0x8, 0x3, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0xa3, 0x7, 0x7ff}]}, 0x2, [{0xfe, &(0x7f0000000640)=@string={0xfe, 0x3, "4147724d8d1cff6d55294e44fbd8401f34a7144a345393d1efcf523877b1fd890dde0c009a25bfa726f6a0eea56b98837b10b828cebba498a67a8c4b1254b5fb3443760cddb224eae2664eb94c172cdb6ea835af31821c3d052dfaa728aafd572b9411594c4caca9783822b2304a596410d2939e812850465d5861720ae2819ff37ef9b4cc24fd4b9c845b03f47676ea4f75badb5a9d7ca18d63ff1a9d6eef52846ce411ddeff0ebf3a6389dde065cfaa6ca3d5ee3f850c22e71b7e5d0fe64d9abe6ca742fd7d95c3468290ef9c7b5d340bd73d6e26e77ab2bd26f94a8dd15c4e010ae718cad54edcf799532323bcaff0320cf1a0e712cec8c3295f1"}}, {0x7a, &(0x7f0000000500)=ANY=[@ANYBLOB="7a03a8c1eb8f42dbd7d02654d1368c8d108d1633a8dbe4ca0ea4251e742d8e15d6091de8b9727609c085945dadbd9f6f36eba6cc5429b1802f09d38339b89a316efb4353fa50ea2ba4b5f3ca59c668ddc9be111bd725db8bdffbd7a08a3bc1ee980c27b94986e3f18ba45f822ce1f6b996bdc3b405722c4bd3897bfaa08999128a11148cc16c409759eb7eeeff63b81388b95b3e296845e192dc1dfdcc812ca64957e6"]}]}) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r7, 0x4068aea3, &(0x7f0000000140)={0xbc, 0x0, 0x1}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 11.39135861s ago: executing program 5 (id=1188): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b3, 0x3100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0xc, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x41, 0xdc, 0x32, 0x8, 0xb57, 0x2a8d, 0x3374, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x60, 0x3, 0x1, 0x3, 0x1, 0x2, 0x0, [], [{{0x9, 0x5, 0x88, 0x3, 0x400, 0xfe, 0xfa, 0x1}}]}}]}}]}}, 0x0) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000000)={0x6000004, 0x0, 0x0, 0x7, 0x80004000}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000000)={0x53, 0x0, 0x2, {0xfff9}, {0x6, 0x1}, @ramp={0x2, 0xfff9, {0x80, 0x33e, 0x368, 0xc8f0}}}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x80004506, 0xffffffffffffffff) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000080)={0x3, 0x200, 0x9, 0x0, 0x5}) 10.933787194s ago: executing program 4 (id=1189): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000001c0)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2d, 0x6, 0x40020400, 0x7, 0xa6d1, 0x4, 0xa2, 0x0, 0x0, 0x20, 0x8}}, 0x50) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r1, 0x112, 0x13, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1120000005000000", 0x29}], 0x1) r3 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) munlock(&(0x7f0000000000/0x1000)=nil, 0x1000) ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000000)=0x58fce1e1) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f00000001c0)={0x51, 0xffff, 0x560c, {0x803, 0x5d4}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x4, 0xb, 0xfffb, 0xb}, 0x0, 0x0}}) r5 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r5, &(0x7f0000000180)={'#! ', './file0'}, 0xb) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='highspeed', 0x9) setreuid(0xffffffffffffffff, 0xee00) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, 0x0, 0x0) sendmmsg(r6, 0x0, 0x0, 0x0) write$binfmt_elf32(r5, &(0x7f0000000e00)=ANY=[], 0x958) 8.26989575s ago: executing program 5 (id=1190): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000080)=""/54) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) 8.244264315s ago: executing program 5 (id=1191): r0 = syz_usb_connect(0x2, 0x58, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x13, 0xc1, 0x5a, 0x8, 0x2c7c, 0x12a, 0xe15a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x1, 0x3, 0x10, 0x10, 0x4, [{{0x9, 0x4, 0x37, 0x5, 0x1, 0xff, 0xff, 0x40, 0x3, [@hid_hid={0x9, 0x21, 0xffff, 0x2, 0x1, {0x22, 0xb89}}, @uac_control={{0xa, 0x24, 0x1, 0x9b, 0xeb}, [@extension_unit={0x9, 0x24, 0x8, 0x1, 0xe, 0x1, 'G\n'}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x306, 0x5, 0x4, 0x5}]}], [{{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x4, 0x81, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x10}]}}]}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x110, 0x9, 0x1, 0x3, 0x20, 0xf7}, 0x7e, &(0x7f0000000280)={0x5, 0xf, 0x7e, 0x6, [@generic={0x5a, 0x10, 0x2, "273bb184f7d436ff9dc7d90498336a1a590f0369c458e179be4aafdfdf4c0c73a28c7699fce6b4a3af4095718ca5bcf2eb4d4121b734b093c40fb33a6d868e2236fd079e829edeb699c0dde6e1bfb99b22d08ddf0b6569"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x4, 0x7, 0x9, 0x6, 0x5b}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x6, 0x7, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x6, 0x7, 0x1000}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x814}}, {0x33, &(0x7f0000000380)=@string={0x33, 0x3, "1b271e42b2122af0df22f5e31d3ea5cac36697e0230acd1ab5734cc5787fbc6892bbff9de9f1c6565a23eb44315978631c"}}, {0x7c, &(0x7f00000003c0)=@string={0x7c, 0x3, "45232a930cffe3d4f895391c1436bb8c221325fde01ba56b08e8575566b21f58598639d2a41a5cfa92fb791918c7bb395c3781dc91f5f9dc21a7e33d619a9873c8e91b0d45bff721e41cbd2ed5de2a833989c3c4704bf574bf9d00b4b37a63f24dcb05b25dd845f82380101459811355f896f32d202950106c46"}}, {0x8f, &(0x7f0000000440)=@string={0x8f, 0x3, "7b22bcbacfff9764e6697302081f564a6f451e94d2c0774859df4673818ba8a51206abe13b26fc6f457ad96a79225a7ffe681e5923a4ac7fa33818eb31902b9e6f280abe36a4a0661ab74d03cf94856857cb8158e45d039716301b6254f814bd654d5ab21d14251a983385ae49d02f1a39445ac5e6650e125d8f413881186151423e4b484667b5e46da8f1f4f9"}}]}) syz_usb_control_io$sierra_net(r0, &(0x7f0000000700)={0x14, &(0x7f0000000580)={0x0, 0xb, 0xaf, {0xaf, 0x3, "92d354135fc1c1ec1073bbb7b0c219e3870355b9ae18f6880c420db788f1e1690a4f3652ef2e85ef524f30378e018f729bc9e6cac69751862cc494b1b6b8de9ea58ee3b8e7d542598456725f3f6b27ef65fe5ac784cba27936ddde2b8d9a6a245cebd8adda10b177d0092f5c78bad05e8c147708705d7e3f2dd5730f30f5f36c976c2679cf2897d02a83c665d595b788af4495a58a98d5e6da55263a92069bf2e75e0ace887e9df64e7cabe7a2"}}, &(0x7f0000000640)={0x0, 0x3, 0xa1, @string={0xa1, 0x3, "66bf2ca21ecb1d0282356733f8b60a0512024fda087ec028747d4f1940cecf6df7e0c58c9008fd13069dd8be82c942016d2369b6b63cda36d12673a840ff2e76759554324fdc72af8532b5d843352d2bb13949c66ef46a5b56ccc5e1b3806a44e57e043ee4b7cf2db161817329b1c4aa0d23d3648c434e84c1c91f1bade107f441fda94a51703483a8a89bab9f5947680f09f45aa3516901bd2aead3cc145a"}}}, &(0x7f0000000c40)={0x1c, &(0x7f0000000740)={0x40, 0x1, 0x63, "00566fbdd63170daa5a6b331df9648102fb6a1a671ac2ad740b61b6af700dd61237ea33e374eba8fcd5ecbd1971aa5af3d9398e2c69e426465894932eca29260aa3cf5ad2bd279a64ba75f1d063c57a1c1b59ec6475ee8f21475a409786bc1208e2c39"}, &(0x7f00000007c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000c00)={0x21, 0x0, 0x1, "15"}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r2, 0x1, 0x4, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x20}}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28050900000000000109022400010000000009040200010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000002e00090025bd7000000000000400000008001a"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000001, 0x31, 0xffffffffffffffff, 0xf983e000) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) readv(r4, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0x2) syz_usb_control_io(r3, &(0x7f0000000000)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00017c"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000140)=@multiplanar_overlay={0x6, 0x0, 0x4, 0x4, 0x100, {0x0, 0x2710}, {0x1, 0xc, 0x3, 0x0, 0x6, 0x0, "3458328f"}, 0x9, 0x3, {&(0x7f00000000c0)=[{0x4, 0x3, {0x2}, 0x8}, {0x4, 0x2f4, {}, 0xfffff001}]}, 0x4}) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c0009040200000103000009040201"], 0x0) 5.113476487s ago: executing program 5 (id=1192): truncate(0x0, 0xfffffffffffffff9) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@file={0x1, './file2\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000001b40)=[{{&(0x7f0000000480)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x1, 0x20040805) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000099000000000000000700000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4c050}, 0x8080) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="ffbafd7f", @ANYRES16=r6, @ANYBLOB="01072bbd70000000000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x4008015) read$qrtrtun(r3, &(0x7f00000004c0)=""/57, 0x39) ioctl$TIOCCBRK(r3, 0x5428) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4800, 0x0, 0x0, 0x800}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0xc}, [@typed={0x4}, @typed={0xc, 0x7, 0x0, 0x0, @u64}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) 3.040817842s ago: executing program 34 (id=1175): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) syz_usb_connect(0x1, 0x9a8, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000dc0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x7, 0x8, 0x2, 0x10, 0x8d}, 0x168, &(0x7f0000000e40)={0x5, 0xf, 0x168, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x4, 0x0, 0x8000}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "81468227c5c769ea5b47013d98ae4a97"}, @generic={0x103, 0x10, 0xd, "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"}, @generic={0x42, 0x10, 0xa, "909d4f912107c467cebd60f5c7647d3069ec24ebe753e70d970c042985aad11d927e9b5fe97a928433d5680855d076e82f70e9780b7435ae0ba421ac55b499"}]}, 0x4, [{0xe8, &(0x7f0000000cc0)=ANY=[@ANYBLOB="e803b41b58e1a48136cdc324d65f6adc7999fc1dbd8d4437b5e0d486208c3f69e56e07776ff6553c5db2656685cd530649bf4c1e61e3f9b2d34d4289e86b36ac512c89c458fa4559a37a162380c2f4ec8fb00e78bd879ce16b9d01c8fbe47d724bedaa0a5922be0960e18775084fa2f6a34733990dbf0a037db8c7ea983da96b14833ecb2f99d9c9dc65e2ca1627a861cc895e2116035f06bda75817c7036e50a1ee5ae8f7a3519f2b7ff06d600bc9da53e8e1d312d5ee913482cd2f5ba22375d0dfcc9138ce1c1eaf32415ede947e98383026ff9964981151bd268a76cf53f64099edc76c0f766c"]}, {0x22, &(0x7f0000000040)=@string={0x22, 0x3, "c6381d5363f99c02e2a76146b58bf0ce8228dafe19e4322c4179b0e8587573a3"}}, {0x2a, &(0x7f0000000080)=@string={0x2a, 0x3, "06120ac6deced695eeadcc6a01c179e9676c5c466d46b7e080c5b6bb505cbf9717daadd9dfb90cca"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x41c}}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80202, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80202, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x8) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x8) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0x8, 0xb, 0xf, 0x0, 0x2, 0x4, 0x8, 0x1, 0x7, 0x4, 0xb, 0xfa, 0x0, 0xfc000000, 0x3, 0x5, 0x3, 0x6f, 0x5, '\x00', 0xb3, 0x5}) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000180)={0x80000, 0x0, {[0x7, 0x5dfc, 0x100000000, 0x7fff, 0xd61, 0x5, 0x8, 0xdc]}}) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$llc_int(r4, 0x10c, 0x6, 0x0, 0x0) (async) setsockopt$llc_int(r4, 0x10c, 0x6, 0x0, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000ffffffffffffaaaaaaaaaaaa8100000086dd60b79a5600442900fe8000000000000000000000000000aaff"], 0x82) 0s ago: executing program 35 (id=1185): r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df0009058202"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pwritev(r2, 0x0, 0x0, 0x1, 0x278e) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000300)={0xd000}) syz_usb_connect(0x2, 0x59, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0xce, 0x8e, 0xcd, 0x8, 0x2c7c, 0x195, 0xbcea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x4, 0x5, 0x90, 0x1, [{{0x9, 0x4, 0xe1, 0x3, 0x2, 0xff, 0xff, 0xff, 0x4, [], [{{0x9, 0x5, 0xf, 0xede9da985a30f683, 0x200, 0x9, 0xb3, 0x5}}, {{0x9, 0x5, 0x85, 0x3, 0x10, 0x4, 0x8, 0xae}}]}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 349.858210][ T8947] [ 349.869082][ T8947] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 350.161193][ T24] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 350.315257][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 350.329180][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 350.350516][ T24] usb 2-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b [ 350.359980][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.368562][ T24] usb 2-1: Product: syz [ 350.372933][ T24] usb 2-1: Manufacturer: syz [ 350.377625][ T24] usb 2-1: SerialNumber: syz [ 350.598618][ T8950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.611197][ T8950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.679770][ T24] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 350.704451][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 350.735888][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 350.767183][ T8963] netlink: 52 bytes leftover after parsing attributes in process `syz.3.833'. [ 350.770052][ T24] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 350.785739][ T8963] netlink: 52 bytes leftover after parsing attributes in process `syz.3.833'. [ 350.795083][ T24] usb 2-1: media controller created [ 350.809962][ T8963] netlink: 52 bytes leftover after parsing attributes in process `syz.3.833'. [ 350.817703][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 350.962043][ T24] DVB: Unable to find symbol mt352_attach() [ 350.974441][ T24] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 350.993857][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 351.014429][ T24] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 351.043822][ T24] usb 2-1: USB disconnect, device number 115 [ 351.118349][ T24] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 351.267429][ T8956] netlink: 188 bytes leftover after parsing attributes in process `syz.0.831'. [ 351.334582][ T5847] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 351.445424][ T24] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 351.468452][ T8976] can0: slcan on ttyS3. [ 351.496127][ T5847] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 351.506772][ T5847] usb 4-1: config 0 interface 0 has no altsetting 0 [ 351.515268][ T5847] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 351.523300][ T8976] can0 (unregistered): slcan off ttyS3. [ 351.525585][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 351.538490][ T5847] usb 4-1: Product: syz [ 351.542688][ T5847] usb 4-1: Manufacturer: syz [ 351.547389][ T5847] usb 4-1: SerialNumber: syz [ 351.555990][ T5847] usb 4-1: config 0 descriptor?? [ 351.570208][ T5847] usb 4-1: selecting invalid altsetting 0 [ 351.604485][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 351.614428][ T24] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.639430][ T24] usb 2-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 351.679271][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 351.687798][ T24] usb 2-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 351.696991][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.709987][ T8984] block nbd0: Unsupported socket: should be TCP or UNIX. [ 351.729199][ T24] usb 2-1: config 0 descriptor?? [ 351.766994][ T8969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.778326][ T8969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.788752][ T5847] usb 4-1: USB disconnect, device number 69 [ 352.147958][ T24] uclogic 0003:2179:0053.0019: interface is invalid, ignoring [ 352.345927][ T24] usb 2-1: USB disconnect, device number 116 [ 352.638419][ T8992] add_ndev_hash(virt_wifi0) on ffff888051ecc000 done [ 352.646931][ T8992] virt_wifi0 speed is unknown, defaulting to 1000 [ 352.653488][ T8992] virt_wifi0 speed is unknown, defaulting to 1000 [ 352.662828][ T8992] virt_wifi0 speed is unknown, defaulting to 1000 [ 352.672796][ T8992] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 352.686961][ T8992] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 352.716376][ T8992] virt_wifi0 speed is unknown, defaulting to 1000 [ 352.724059][ T8992] virt_wifi0 speed is unknown, defaulting to 1000 [ 352.733733][ T8992] virt_wifi0 speed is unknown, defaulting to 1000 [ 352.741461][ T8992] virt_wifi0 speed is unknown, defaulting to 1000 [ 352.912548][ T8998] netlink: 16 bytes leftover after parsing attributes in process `syz.0.843'. [ 352.922709][ T8998] netlink: 9 bytes leftover after parsing attributes in process `syz.0.843'. [ 352.949828][ T8998] gretap0: entered promiscuous mode [ 353.205121][ T5847] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 353.364469][ T5847] usb 2-1: Using ep0 maxpacket: 16 [ 353.372209][ T5847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.383667][ T5847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.394175][ T5847] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 353.407095][ T5847] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 353.416223][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.426941][ T5847] usb 2-1: config 0 descriptor?? [ 353.908400][ T5847] microsoft 0003:045E:07DA.001A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 353.926657][ T5847] microsoft 0003:045E:07DA.001A: no inputs found [ 353.933012][ T5847] microsoft 0003:045E:07DA.001A: could not initialize ff, continuing anyway [ 354.037736][ T5844] usb 2-1: USB disconnect, device number 117 [ 354.134529][ T5847] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 354.306403][ T5847] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 354.316386][ T5847] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 354.327931][ T5847] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 354.339460][ T5847] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 354.348604][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.356617][ T5847] usb 4-1: Product: syz [ 354.360773][ T5847] usb 4-1: Manufacturer: syz [ 354.365439][ T5847] usb 4-1: SerialNumber: syz [ 354.372079][ T5847] usb 4-1: config 0 descriptor?? [ 354.378014][ T9007] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 354.385392][ T9007] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 354.393592][ T5847] usb 4-1: ucan: probing device on interface #0 [ 354.596528][ T5847] usb 4-1: ucan: could not read protocol version, ret=0 [ 354.603503][ T5847] usb 4-1: ucan: probe failed; try to update the device firmware [ 355.151620][ T9020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.168567][ T9020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.257259][ T5844] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 355.419885][ T5844] usb 2-1: unable to get BOS descriptor or descriptor too short [ 355.428710][ T5844] usb 2-1: config 3 has an invalid interface number: 114 but max is 0 [ 355.437366][ T5844] usb 2-1: config 3 has an invalid descriptor of length 23, skipping remainder of the config [ 355.447777][ T5844] usb 2-1: config 3 has no interface number 0 [ 355.453861][ T5844] usb 2-1: too many endpoints for config 3 interface 114 altsetting 183: 187, using maximum allowed: 30 [ 355.465699][ T5844] usb 2-1: config 3 interface 114 altsetting 183 has 0 endpoint descriptors, different from the interface descriptor's value: 187 [ 355.479159][ T5844] usb 2-1: config 3 interface 114 has no altsetting 0 [ 355.488491][ T5844] usb 2-1: string descriptor 0 read error: -22 [ 355.494878][ T5844] usb 2-1: New USB device found, idVendor=0cf3, idProduct=d0b5, bcdDevice=d5.05 [ 355.503903][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.721474][ T5844] usb 2-1: USB disconnect, device number 118 [ 356.125854][ T9035] netlink: 'syz.0.855': attribute type 21 has an invalid length. [ 356.174796][ T9] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 356.183409][ T9039] netlink: 44 bytes leftover after parsing attributes in process `syz.0.856'. [ 356.346764][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 356.355652][ T9] usb 2-1: config 3 has an invalid interface number: 114 but max is 0 [ 356.363820][ T9] usb 2-1: config 3 has an invalid descriptor of length 23, skipping remainder of the config [ 356.374257][ T9] usb 2-1: config 3 has no interface number 0 [ 356.380402][ T9] usb 2-1: too many endpoints for config 3 interface 114 altsetting 183: 187, using maximum allowed: 30 [ 356.391725][ T9] usb 2-1: config 3 interface 114 altsetting 183 has 0 endpoint descriptors, different from the interface descriptor's value: 187 [ 356.405352][ T9] usb 2-1: config 3 interface 114 has no altsetting 0 [ 356.414444][ T9] usb 2-1: string descriptor 0 read error: -22 [ 356.420696][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=d0b5, bcdDevice=d5.05 [ 356.429899][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.646755][ T9] usb 2-1: USB disconnect, device number 119 [ 356.915537][ T9] usb 4-1: USB disconnect, device number 70 [ 357.235162][ T9050] netlink: 558 bytes leftover after parsing attributes in process `syz.3.859'. [ 357.414500][ T5908] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 357.574458][ T5908] usb 2-1: Using ep0 maxpacket: 32 [ 357.580975][ T5908] usb 2-1: config 0 has an invalid interface number: 81 but max is 0 [ 357.589401][ T5908] usb 2-1: config 0 has no interface number 0 [ 357.595695][ T5908] usb 2-1: config 0 interface 81 has no altsetting 0 [ 357.604264][ T5908] usb 2-1: New USB device found, idVendor=0856, idProduct=bc01, bcdDevice=7b.45 [ 357.613451][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.621462][ T5908] usb 2-1: Product: syz [ 357.625646][ T5908] usb 2-1: Manufacturer: syz [ 357.630231][ T5908] usb 2-1: SerialNumber: syz [ 357.636834][ T5908] usb 2-1: config 0 descriptor?? [ 357.860073][ T9053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.880830][ T9053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.114499][ T9] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 358.267976][ T9] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 358.277332][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.285606][ T9] usb 4-1: Product: syz [ 358.289768][ T9] usb 4-1: Manufacturer: syz [ 358.294959][ T9] usb 4-1: SerialNumber: syz [ 358.295389][ T5908] mos7840 2-1:0.81: required endpoints missing [ 358.308598][ T9] usb 4-1: config 0 descriptor?? [ 358.321762][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 358.508287][ T5847] usb 2-1: USB disconnect, device number 120 [ 358.546657][ T9063] netlink: 20 bytes leftover after parsing attributes in process `syz.4.863'. [ 358.730972][ T9] gspca_stk1135: reg_w 0x5 err -71 [ 358.739310][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 358.749920][ T9] gspca_stk1135: Sensor write failed [ 358.757324][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 358.763849][ T9] gspca_stk1135: Sensor write failed [ 358.770103][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 358.776652][ T9] gspca_stk1135: Sensor read failed [ 358.781954][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 358.788585][ T9] gspca_stk1135: Sensor read failed [ 358.793809][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 358.800618][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 358.807006][ T9] gspca_stk1135: Sensor read failed [ 358.812400][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 358.819010][ T9] gspca_stk1135: Sensor read failed [ 358.824495][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 358.830859][ T9] gspca_stk1135: Sensor write failed [ 358.836415][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 358.842848][ T9] gspca_stk1135: Sensor write failed [ 358.851399][ T9] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 358.868616][ T9] usb 4-1: USB disconnect, device number 71 [ 359.065183][ T9073] netlink: 'syz.4.866': attribute type 2 has an invalid length. [ 359.326748][ T5826] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 359.336058][ T5826] Bluetooth: hci3: Injecting HCI hardware error event [ 359.345137][ T5828] Bluetooth: hci3: hardware error 0x00 [ 359.450067][ T9086] virt_wifi0 speed is unknown, defaulting to 1000 [ 359.644547][ T9] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 359.774547][ T9] usb 2-1: device descriptor read/64, error -71 [ 359.862479][ T9107] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 360.044510][ T9] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 360.184518][ T9] usb 2-1: device descriptor read/64, error -71 [ 360.294690][ T9] usb usb2-port1: attempt power cycle [ 360.324547][ T5908] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 360.475165][ T5908] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 360.483655][ T5908] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 360.492688][ T5908] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 360.503638][ T5908] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 360.513440][ T5908] usb 4-1: config 0 interface 0 has no altsetting 0 [ 360.521013][ T5908] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 360.530038][ T5908] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 360.540948][ T5908] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 360.550835][ T5908] usb 4-1: config 0 interface 0 has no altsetting 0 [ 360.558391][ T5908] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 360.567337][ T5908] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 360.578321][ T5908] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 360.588236][ T5908] usb 4-1: config 0 interface 0 has no altsetting 0 [ 360.595830][ T5908] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 360.605680][ T5908] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 360.616596][ T5908] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 360.626372][ T5908] usb 4-1: config 0 interface 0 has no altsetting 0 [ 360.633801][ T5908] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 360.642745][ T5908] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 360.644552][ T9] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 360.653673][ T5908] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 360.671078][ T5908] usb 4-1: config 0 interface 0 has no altsetting 0 [ 360.678724][ T5908] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 360.688195][ T9] usb 2-1: device descriptor read/8, error -71 [ 360.688276][ T5908] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 360.705260][ T5908] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 360.715066][ T5908] usb 4-1: config 0 interface 0 has no altsetting 0 [ 360.722521][ T5908] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 360.731487][ T5908] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 360.742385][ T5908] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 360.752168][ T5908] usb 4-1: config 0 interface 0 has no altsetting 0 [ 360.759666][ T5908] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 360.768764][ T5908] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 360.779724][ T5908] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 360.789535][ T5908] usb 4-1: config 0 interface 0 has no altsetting 0 [ 360.799540][ T5908] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 360.808669][ T5908] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 360.817200][ T5908] usb 4-1: Product: syz [ 360.821355][ T5908] usb 4-1: Manufacturer: syz [ 360.826026][ T5908] usb 4-1: SerialNumber: syz [ 360.832943][ T5908] usb 4-1: config 0 descriptor?? [ 360.841268][ T5908] yurex 4-1:0.0: Could not submitting URB [ 360.847386][ T5908] yurex 4-1:0.0: probe with driver yurex failed with error -5 [ 360.934629][ T9] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 360.954925][ T9] usb 2-1: device descriptor read/8, error -71 [ 361.039515][ T9117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.879'. [ 361.049065][ T5908] usb 4-1: USB disconnect, device number 72 [ 361.064795][ T9] usb usb2-port1: unable to enumerate USB device [ 361.484617][ T5828] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 361.597594][ T9122] can0: slcan on ttyS3. [ 362.533314][ T9147] program syz.1.883 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 362.594076][ T9148] program syz.1.883 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 362.603674][ T9148] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 362.734504][ T10] usb 4-1: new low-speed USB device number 73 using dummy_hcd [ 362.758535][ T9150] netlink: 80 bytes leftover after parsing attributes in process `syz.1.885'. [ 362.773596][ T9150] IPVS: Unknown mcast interface: pimreg0 [ 362.874608][ T10] usb 4-1: device descriptor read/64, error -71 [ 362.985049][ T9159] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 362.995614][ T9159] block device autoloading is deprecated and will be removed. [ 363.036363][ T9158] tmpfs: Bad value for 'mpol' [ 363.124904][ T10] usb 4-1: new low-speed USB device number 74 using dummy_hcd [ 363.264486][ T10] usb 4-1: device descriptor read/64, error -71 [ 363.374841][ T10] usb usb4-port1: attempt power cycle [ 363.724537][ T10] usb 4-1: new low-speed USB device number 75 using dummy_hcd [ 363.744989][ T10] usb 4-1: device descriptor read/8, error -71 [ 363.954632][ T5847] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 363.984494][ T10] usb 4-1: new low-speed USB device number 76 using dummy_hcd [ 364.005164][ T10] usb 4-1: device descriptor read/8, error -71 [ 364.106330][ T5847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 364.117792][ T10] usb usb4-port1: unable to enumerate USB device [ 364.124208][ T5847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.134968][ T5847] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 364.147867][ T5847] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 364.156941][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.166839][ T5847] usb 2-1: config 0 descriptor?? [ 364.598555][ T5847] hid_parser_main: 2 callbacks suppressed [ 364.598577][ T5847] logitech 0003:046D:C24F.001B: unknown main item tag 0x0 [ 364.611852][ T5847] logitech 0003:046D:C24F.001B: unknown main item tag 0x0 [ 364.619390][ T5847] logitech 0003:046D:C24F.001B: unknown main item tag 0x0 [ 364.626875][ T5847] logitech 0003:046D:C24F.001B: unknown main item tag 0x0 [ 364.634013][ T5847] logitech 0003:046D:C24F.001B: unknown main item tag 0x0 [ 364.641514][ T5847] logitech 0003:046D:C24F.001B: unknown main item tag 0x0 [ 364.648824][ T5847] logitech 0003:046D:C24F.001B: unknown main item tag 0x0 [ 364.657948][ T5847] logitech 0003:046D:C24F.001B: hidraw0: USB HID v0.00 Device [HID 046d:c24f] on usb-dummy_hcd.1-1/input0 [ 364.669455][ T5847] logitech 0003:046D:C24F.001B: no inputs found [ 364.805786][ T5847] usb 2-1: USB disconnect, device number 125 [ 365.604988][ T5847] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 365.754463][ T5847] usb 2-1: Using ep0 maxpacket: 32 [ 365.760158][ T5847] usb 2-1: no configurations [ 365.764905][ T5847] usb 2-1: can't read configurations, error -22 [ 365.894666][ T5847] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 365.914464][ T5875] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 366.044476][ T5847] usb 2-1: Using ep0 maxpacket: 32 [ 366.050310][ T5847] usb 2-1: no configurations [ 366.055241][ T5875] usb 4-1: device descriptor read/64, error -71 [ 366.055339][ T5847] usb 2-1: can't read configurations, error -22 [ 366.068484][ T5847] usb usb2-port1: attempt power cycle [ 366.298905][ T5875] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 366.414535][ T5847] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 366.434925][ T5847] usb 2-1: Using ep0 maxpacket: 32 [ 366.440555][ T5847] usb 2-1: no configurations [ 366.445614][ T5847] usb 2-1: can't read configurations, error -22 [ 366.454570][ T5875] usb 4-1: device descriptor read/64, error -71 [ 366.564731][ T5875] usb usb4-port1: attempt power cycle [ 366.574664][ T5847] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 366.594906][ T5847] usb 2-1: Using ep0 maxpacket: 32 [ 366.600531][ T5847] usb 2-1: no configurations [ 366.605391][ T5847] usb 2-1: can't read configurations, error -22 [ 366.611878][ T5847] usb usb2-port1: unable to enumerate USB device [ 366.914514][ T5875] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 366.934929][ T5875] usb 4-1: device descriptor read/8, error -71 [ 367.194485][ T5875] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 367.215134][ T5875] usb 4-1: device descriptor read/8, error -71 [ 367.325617][ T5875] usb usb4-port1: unable to enumerate USB device [ 369.224552][ T5875] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 369.385454][ T5875] usb 4-1: Using ep0 maxpacket: 32 [ 369.403817][ T5875] usb 4-1: config 0 has an invalid interface number: 81 but max is 0 [ 369.423220][ T5875] usb 4-1: config 0 has no interface number 0 [ 369.432805][ T5875] usb 4-1: config 0 interface 81 has no altsetting 0 [ 369.451302][ T5875] usb 4-1: New USB device found, idVendor=0856, idProduct=bc01, bcdDevice=7b.45 [ 369.462273][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.472105][ T5875] usb 4-1: Product: syz [ 369.476572][ T5875] usb 4-1: Manufacturer: syz [ 369.481236][ T5875] usb 4-1: SerialNumber: syz [ 369.488152][ T5875] usb 4-1: config 0 descriptor?? [ 369.901480][ T5875] mos7840 4-1:0.81: required endpoints missing [ 369.910986][ T5875] usb 4-1: USB disconnect, device number 81 [ 370.585526][ T9221] loop6: detected capacity change from 0 to 524287999 [ 370.924478][ T5875] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 371.104451][ T5875] usb 4-1: Using ep0 maxpacket: 16 [ 371.110994][ T5875] usb 4-1: config 127 has an invalid interface number: 102 but max is 2 [ 371.119394][ T5875] usb 4-1: config 127 has no interface number 2 [ 371.125675][ T5875] usb 4-1: config 127 interface 0 has no altsetting 0 [ 371.132418][ T5875] usb 4-1: config 127 interface 1 has no altsetting 0 [ 371.139248][ T5875] usb 4-1: config 127 interface 102 has no altsetting 0 [ 371.148108][ T5875] usb 4-1: New USB device found, idVendor=1199, idProduct=9015, bcdDevice=99.2d [ 371.157244][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.167162][ T5875] usb 4-1: Product: syz [ 371.171317][ T5875] usb 4-1: Manufacturer: syz [ 371.175940][ T5875] usb 4-1: SerialNumber: syz [ 371.396042][ T5875] usb 4-1: selecting invalid altsetting 0 [ 371.401919][ T5875] usb 4-1: Could not set interface, error -22 [ 371.412887][ T5875] usb 4-1: selecting invalid altsetting 0 [ 371.419843][ T5875] usb 4-1: Could not set interface, error -22 [ 371.436285][ T5875] usb 4-1: USB disconnect, device number 82 [ 371.914551][ T5875] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 372.066563][ T5875] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 372.074722][ T5875] usb 2-1: config 0 has no interface number 0 [ 372.080860][ T5875] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 372.090260][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.100428][ T5875] usb 2-1: config 0 descriptor?? [ 372.109191][ T5875] usb 2-1: selecting invalid altsetting 1 [ 372.117176][ T5875] dvb_ttusb_budget: ttusb_init_controller: error [ 372.123492][ T5875] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 372.169810][ T5875] DVB: Unable to find symbol cx22700_attach() [ 372.196442][ T5875] DVB: Unable to find symbol tda10046_attach() [ 372.202605][ T5875] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 372.244731][ T10] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 372.310960][ T9234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.319696][ T9234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.330435][ T5847] usb 2-1: USB disconnect, device number 4 [ 372.395668][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 372.404848][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.415046][ T10] usb 4-1: config 0 descriptor?? [ 372.438502][ T10] gspca_main: spca508-2.14.0 probing 8086:0110 [ 372.497789][ T9252] overlayfs: failed to resolve 'lowerdir=./file0': -2 [ 372.895084][ T9263] debugfs: 'ptm0' already exists in 'caif_serial' [ 373.008281][ T9271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.017577][ T9271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.051165][ T10] gspca_spca508: reg_read err -71 [ 373.078062][ T10] gspca_spca508: reg_read err -71 [ 373.086288][ T10] gspca_spca508: reg_read err -71 [ 373.096065][ T10] gspca_spca508: reg_read err -71 [ 373.105028][ T10] gspca_spca508: reg write: error -71 [ 373.110512][ T10] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 373.134899][ T10] usb 4-1: USB disconnect, device number 83 [ 373.143433][ T9275] overlayfs: workdir and upperdir must be separate subtrees [ 373.164741][ T9271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.170634][ T9275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.918'. [ 373.186583][ T9271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.219242][ T5828] block nbd0: Receive control failed (result -1) [ 373.294562][ T5844] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 373.409624][ T106] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 373.428297][ T5844] usb 2-1: device descriptor read/64, error -71 [ 373.434863][ T106] dvb_usb_az6027 1-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 373.448592][ T106] usb 1-1: USB disconnect, device number 98 [ 373.594455][ T24] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 373.674498][ T5844] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 373.744539][ T106] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 373.764532][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 373.774639][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.785933][ T24] usb 4-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 373.798952][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 373.808607][ T24] usb 4-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 373.818677][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.830215][ T24] usb 4-1: Product: syz [ 373.835094][ T24] usb 4-1: Manufacturer: syz [ 373.839797][ T24] usb 4-1: SerialNumber: syz [ 373.844594][ T5844] usb 2-1: device descriptor read/64, error -71 [ 373.907163][ T106] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.917222][ T106] usb 1-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 373.926816][ T106] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.940247][ T106] usb 1-1: config 0 descriptor?? [ 373.972660][ T5844] usb usb2-port1: attempt power cycle [ 374.068890][ T24] usb 4-1: bad CDC descriptors [ 374.080486][ T24] usb 4-1: USB disconnect, device number 84 [ 374.161936][ T9261] sctp: [Deprecated]: syz.0.915 (pid 9261) Use of struct sctp_assoc_value in delayed_ack socket option. [ 374.161936][ T9261] Use struct sctp_sack_info instead [ 374.178755][ T9261] sctp: [Deprecated]: syz.0.915 (pid 9261) Use of struct sctp_assoc_value in delayed_ack socket option. [ 374.178755][ T9261] Use struct sctp_sack_info instead [ 374.334494][ T5844] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 374.355122][ T5844] usb 2-1: device descriptor read/8, error -71 [ 374.398912][ T106] cypress 0003:04B4:DE61.001C: unknown main item tag 0x0 [ 374.406098][ T106] cypress 0003:04B4:DE61.001C: unknown main item tag 0x0 [ 374.413143][ T106] cypress 0003:04B4:DE61.001C: unknown main item tag 0x0 [ 374.420299][ T106] cypress 0003:04B4:DE61.001C: unknown main item tag 0x0 [ 374.427660][ T106] cypress 0003:04B4:DE61.001C: unknown main item tag 0x0 [ 374.434765][ T106] cypress 0003:04B4:DE61.001C: unknown main item tag 0x0 [ 374.441881][ T106] cypress 0003:04B4:DE61.001C: unknown main item tag 0x0 [ 374.451763][ T106] cypress 0003:04B4:DE61.001C: hidraw0: USB HID v0.07 Device [HID 04b4:de61] on usb-dummy_hcd.0-1/input0 [ 374.594540][ T5844] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 374.601488][ T10] usb 1-1: USB disconnect, device number 99 [ 374.635070][ T5844] usb 2-1: device descriptor read/8, error -71 [ 374.766033][ T5844] usb usb2-port1: unable to enumerate USB device [ 374.901886][ T9285] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 374.910475][ T9285] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 374.930357][ T9284] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 375.294469][ T106] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 375.404513][ T10] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 375.447347][ T106] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 375.456512][ T106] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 375.464812][ T106] usb 4-1: Product: syz [ 375.469209][ T106] usb 4-1: Manufacturer: syz [ 375.473801][ T106] usb 4-1: SerialNumber: syz [ 375.480369][ T106] usb 4-1: config 0 descriptor?? [ 375.491523][ T106] ch341 4-1:0.0: ch341-uart converter detected [ 375.554447][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 375.561427][ T10] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 375.569800][ T10] usb 1-1: config 0 has no interface number 0 [ 375.576322][ T10] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 375.587418][ T10] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 375.599244][ T10] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 375.608436][ T10] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 375.616601][ T10] usb 1-1: Product: syz [ 375.620784][ T10] usb 1-1: SerialNumber: syz [ 375.628156][ T10] usb 1-1: config 0 descriptor?? [ 375.636479][ T10] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 375.645017][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input36 [ 375.839539][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 376.298260][ T9288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.322081][ T9288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.553290][ T106] ch341-uart ttyUSB0: failed to read break control: -121 [ 376.560527][ T106] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 376.601839][ T106] usb 1-1: USB disconnect, device number 100 [ 376.608495][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 376.646540][ T106] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 376.764638][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 376.773195][ T24] usb 2-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 376.775406][ T10] usb 4-1: USB disconnect, device number 85 [ 376.782508][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.790767][ T10] ch341 4-1:0.0: device disconnected [ 376.800959][ T24] usb 2-1: Product: syz [ 376.807089][ T24] usb 2-1: Manufacturer: syz [ 376.812246][ T24] usb 2-1: SerialNumber: syz [ 376.821070][ T24] usb 2-1: config 0 descriptor?? [ 377.029132][ T24] usb 2-1: ignoring: not an USB2CAN converter [ 377.233664][ T5906] usb 2-1: USB disconnect, device number 9 [ 377.365194][ T5828] block nbd4: Receive control failed (result -32) [ 377.375667][ T9310] block nbd4: shutting down sockets [ 377.397516][ T9319] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 377.455969][ T9321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.934'. [ 377.854470][ T10] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 378.004458][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 378.018301][ T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 378.027457][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.035507][ T10] usb 4-1: Product: syz [ 378.039668][ T10] usb 4-1: Manufacturer: syz [ 378.044283][ T10] usb 4-1: SerialNumber: syz [ 378.053707][ T10] usb 4-1: config 0 descriptor?? [ 378.054477][ T5906] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 378.079032][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 378.143503][ T30] audit: type=1326 audit(2000000122.889:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9344 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e578f749 code=0x7fc00000 [ 378.220708][ T5906] usb 2-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 378.232421][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 378.240896][ T5906] usb 2-1: Product: syz [ 378.245504][ T5906] usb 2-1: Manufacturer: syz [ 378.250187][ T5906] usb 2-1: SerialNumber: syz [ 378.259430][ T5906] usb 2-1: config 0 descriptor?? [ 378.282034][ T5906] usb 2-1: selecting invalid altsetting 1 [ 378.289433][ T5906] comedi comedi4: could not switch to alternate setting 1 [ 378.297328][ T5906] usbduxfast 2-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 378.471440][ T9354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.480194][ T9354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.490947][ T5847] usb 2-1: USB disconnect, device number 10 [ 378.530186][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.539962][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.584482][ T5906] usb 1-1: new low-speed USB device number 101 using dummy_hcd [ 378.714504][ T5906] usb 1-1: device descriptor read/64, error -71 [ 378.954593][ T5906] usb 1-1: new low-speed USB device number 102 using dummy_hcd [ 379.084504][ T5906] usb 1-1: device descriptor read/64, error -71 [ 379.194854][ T5906] usb usb1-port1: attempt power cycle [ 379.265622][ T106] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 379.394475][ T106] usb 2-1: device descriptor read/64, error -71 [ 379.534503][ T5906] usb 1-1: new low-speed USB device number 103 using dummy_hcd [ 379.555411][ T5906] usb 1-1: device descriptor read/8, error -71 [ 379.634527][ T106] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 379.764506][ T106] usb 2-1: device descriptor read/64, error -71 [ 379.794496][ T5906] usb 1-1: new low-speed USB device number 104 using dummy_hcd [ 379.814931][ T5906] usb 1-1: device descriptor read/8, error -71 [ 379.874893][ T106] usb usb2-port1: attempt power cycle [ 379.925424][ T5906] usb usb1-port1: unable to enumerate USB device [ 380.214506][ T106] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 380.234949][ T106] usb 2-1: device descriptor read/8, error -71 [ 380.474484][ T106] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 380.495122][ T106] usb 2-1: device descriptor read/8, error -71 [ 380.605404][ T106] usb usb2-port1: unable to enumerate USB device [ 380.714681][ T10] gspca_sonixj: reg_w1 err -110 [ 380.754582][ T10] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 381.439168][ T5844] usb 4-1: USB disconnect, device number 86 [ 381.684502][ T5906] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 381.834452][ T5906] usb 1-1: Using ep0 maxpacket: 16 [ 381.841023][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 381.852314][ T5906] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 381.862376][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 381.874538][ T5844] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 381.882190][ T5906] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 381.891424][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.899832][ T5906] usb 1-1: Product: syz [ 381.903982][ T5906] usb 1-1: Manufacturer: syz [ 381.908608][ T5906] usb 1-1: SerialNumber: syz [ 381.915203][ T5906] usb 1-1: config 0 descriptor?? [ 381.920789][ T9369] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 381.929703][ T5906] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 382.064846][ T5844] usb 4-1: Using ep0 maxpacket: 16 [ 382.071617][ T5844] usb 4-1: config index 0 descriptor too short (expected 65, got 36) [ 382.080310][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.093263][ T5844] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 382.106866][ T5844] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 382.115961][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.127019][ T5844] usb 4-1: config 0 descriptor?? [ 382.142484][ T9376] ptrace attach of "./syz-executor exec"[6209] was attempted by "./syz-executor exec"[9376] [ 382.144284][ T5844] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input37 [ 382.164215][ T5906] usb 1-1: USB disconnect, device number 105 [ 382.353573][ T9378] netlink: 1 bytes leftover after parsing attributes in process `syz.4.951'. [ 382.363440][ T9373] random: crng reseeded on system resumption [ 382.387709][ T9373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.422083][ T9373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.435193][ T9373] Restarting kernel threads ... [ 382.441791][ T9373] Done restarting kernel threads. [ 382.451172][ T9373] syz.3.949 uses old SIOCAX25GETINFO [ 382.463547][ T9373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.479012][ T9373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.488194][ T9373] netlink: 'syz.3.949': attribute type 9 has an invalid length. [ 382.496197][ T9373] netlink: 'syz.3.949': attribute type 11 has an invalid length. [ 382.503927][ T9373] netlink: 'syz.3.949': attribute type 12 has an invalid length. [ 382.511746][ T9373] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.949'. [ 382.521111][ T9373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.949'. [ 382.575925][ T5847] usb 4-1: USB disconnect, device number 87 [ 382.583440][ T9385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.601820][ T9385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.990032][ T9400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.956'. [ 383.002869][ T9402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.021465][ T9400] nbd: illegal input index -1900544 [ 383.022193][ T9402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.264571][ T5847] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 383.414825][ T5847] usb 2-1: Using ep0 maxpacket: 32 [ 383.431250][ T5847] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 383.444567][ T5847] usb 2-1: config 0 has no interface number 0 [ 383.459185][ T5847] usb 2-1: New USB device found, idVendor=19d2, idProduct=0141, bcdDevice=36.d2 [ 383.472732][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.484275][ T5847] usb 2-1: Product: syz [ 383.489795][ T5847] usb 2-1: Manufacturer: syz [ 383.498233][ T5847] usb 2-1: SerialNumber: syz [ 383.518094][ T5847] usb 2-1: config 0 descriptor?? [ 383.547965][ T5847] option 2-1:0.2: GSM modem (1-port) converter detected [ 383.596150][ T9426] netlink: 'syz.3.961': attribute type 8 has an invalid length. [ 383.747792][ T5847] usb 2-1: USB disconnect, device number 15 [ 383.766301][ T5847] option 2-1:0.2: device disconnected [ 384.034473][ T5844] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 384.068731][ T9438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.965'. [ 384.206431][ T5844] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.216806][ T5844] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 384.227360][ T5844] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.239439][ T5844] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 384.249925][ T5844] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.260601][ T5844] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 384.271046][ T5844] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 384.280311][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 384.288551][ T5844] usb 4-1: SerialNumber: syz [ 384.501845][ T5908] usb 4-1: USB disconnect, device number 88 [ 384.614486][ T5844] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 384.744476][ T5844] usb 2-1: device descriptor read/64, error -71 [ 385.006752][ T5844] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 385.166341][ T5844] usb 2-1: device descriptor read/64, error -71 [ 385.252437][ T9461] team_slave_0: entered promiscuous mode [ 385.258552][ T9461] team_slave_1: entered promiscuous mode [ 385.279617][ T9463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.973'. [ 385.288699][ T5844] usb usb2-port1: attempt power cycle [ 385.634545][ T5844] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 385.654923][ T5844] usb 2-1: device descriptor read/8, error -71 [ 385.894497][ T5844] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 385.916448][ T5844] usb 2-1: device descriptor read/8, error -71 [ 386.026715][ T5844] usb usb2-port1: unable to enumerate USB device [ 386.484574][ T5844] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 386.644460][ T5844] usb 4-1: Using ep0 maxpacket: 32 [ 386.651028][ T5844] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.661155][ T5844] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 386.672063][ T5844] usb 4-1: New USB device found, idVendor=0424, idProduct=7520, bcdDevice=69.ee [ 386.681150][ T5844] usb 4-1: New USB device strings: Mfr=248, Product=160, SerialNumber=3 [ 386.689611][ T5844] usb 4-1: Product: syz [ 386.693778][ T5844] usb 4-1: Manufacturer: syz [ 386.698466][ T5844] usb 4-1: SerialNumber: syz [ 386.705247][ T5844] usb 4-1: config 0 descriptor?? [ 386.912100][ T5844] usb 4-1: USB disconnect, device number 89 [ 387.554568][ T5844] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 387.727005][ T5844] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 387.735115][ T5844] usb 1-1: config 0 has no interface number 0 [ 387.741214][ T5844] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 387.753330][ T5844] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 387.765850][ T5844] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 387.775025][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 387.783487][ T5844] usb 1-1: Product: syz [ 387.787841][ T5844] usb 1-1: SerialNumber: syz [ 387.794115][ T5844] usb 1-1: config 0 descriptor?? [ 387.803407][ T5844] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input38 [ 387.813421][ T5906] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 387.905281][ T5908] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 387.994860][ T5906] usb 4-1: Using ep0 maxpacket: 16 [ 388.001881][ T5906] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 388.006966][ T5907] usb 1-1: USB disconnect, device number 106 [ 388.012111][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 388.024889][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 388.034337][ T5906] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 388.043439][ T5906] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 388.054971][ T5906] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 388.066980][ T5906] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 32, changing to 7 [ 388.072705][ T5907] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 388.077998][ T5906] usb 4-1: config 1 interface 1 has no altsetting 0 [ 388.080075][ T5906] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 388.102620][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 388.107891][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.115984][ T5906] usb 4-1: Product: syz [ 388.120382][ T5906] usb 4-1: Manufacturer: syz [ 388.125588][ T5906] usb 4-1: SerialNumber: syz [ 388.130740][ T5908] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.141887][ T5908] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 388.152400][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 388.160828][ T5908] usb 2-1: Product: syz [ 388.172506][ T5908] usb 2-1: config 0 descriptor?? [ 388.182236][ T5908] gspca_main: spca501-2.14.0 probing 0000:0000 [ 388.261008][ T9460] team_slave_0: left promiscuous mode [ 388.266787][ T9460] team_slave_1: left promiscuous mode [ 388.382883][ T9493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.397722][ T9493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.448240][ T5908] gspca_spca501: reg write: error -71 [ 388.464438][ T5908] spca501 2-1:0.0: Reg write failed for 0x02,0x0f,0x05 [ 388.483509][ T5908] spca501 2-1:0.0: probe with driver spca501 failed with error -22 [ 388.494691][ T5908] usb 2-1: USB disconnect, device number 20 [ 388.612511][ T9507] netlink: 156 bytes leftover after parsing attributes in process `syz.0.986'. [ 388.637559][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.986'. [ 388.646520][ T9507] bridge_slave_1: left allmulticast mode [ 388.652164][ T9507] bridge_slave_1: left promiscuous mode [ 388.658744][ T9507] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.669097][ T9507] bridge_slave_0: left allmulticast mode [ 388.674983][ T9507] bridge_slave_0: left promiscuous mode [ 388.680827][ T9507] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.255099][ T106] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 389.417701][ T106] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.427640][ T106] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 389.440486][ T106] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 389.449562][ T106] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.460274][ T106] usb 1-1: config 0 descriptor?? [ 389.564579][ T5826] Bluetooth: hci2: command 0x2016 tx timeout [ 389.653123][ T9522] No source specified [ 389.671682][ T106] usbhid 1-1:0.0: can't add hid device: -32 [ 389.678281][ T106] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 389.868407][ T5844] usb 1-1: USB disconnect, device number 107 [ 389.894521][ T106] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 390.416706][ T9526] tipc: Started in network mode [ 390.421741][ T9526] tipc: Node identity ac14140f, cluster identity 4711 [ 390.429563][ T9526] tipc: New replicast peer: 255.255.255.32 [ 390.436192][ T9526] tipc: Enabled bearer , priority 10 [ 390.515550][ T5906] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 390.539212][ T5906] usb 4-1: 2:1 : format type 9 is not supported yet [ 390.608006][ T9533] netlink: 'syz.0.994': attribute type 21 has an invalid length. [ 390.616014][ T9533] netlink: 128 bytes leftover after parsing attributes in process `syz.0.994'. [ 390.630309][ T9533] netlink: 'syz.0.994': attribute type 4 has an invalid length. [ 390.642281][ T5906] usb 4-1: USB disconnect, device number 90 [ 390.647144][ T9533] netlink: 'syz.0.994': attribute type 3 has an invalid length. [ 390.985570][ T5906] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 391.023920][ T9546] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 391.067439][ T9546] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 391.079842][ T9546] overlayfs: failed to look up (tracing) for ino (-66) [ 391.124513][ T5906] usb 4-1: device descriptor read/64, error -71 [ 391.364529][ T5906] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 391.520676][ T5906] usb 4-1: device descriptor read/64, error -71 [ 391.566858][ T5907] tipc: Node number set to 2886997007 [ 391.646254][ T5906] usb usb4-port1: attempt power cycle [ 391.984495][ T5906] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 392.030847][ T5906] usb 4-1: device descriptor read/8, error -71 [ 392.274503][ T5906] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 392.305172][ T5906] usb 4-1: device descriptor read/8, error -71 [ 392.425021][ T5906] usb usb4-port1: unable to enumerate USB device [ 392.988811][ T9556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1001'. [ 393.986669][ T5847] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 393.994491][ T24] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 394.031787][ T9545] Set syz1 is full, maxelem 65536 reached [ 394.146205][ T5847] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 394.164026][ T5847] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.181112][ T5847] usb 2-1: config 0 has no interface number 0 [ 394.188402][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 394.198834][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.201707][ T5847] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid maxpacket 128, setting to 64 [ 394.208533][ T24] usb 4-1: Product: syz [ 394.230083][ T9585] netlink: 'syz.4.1010': attribute type 4 has an invalid length. [ 394.235783][ T24] usb 4-1: Manufacturer: syz [ 394.240930][ T5847] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 394.242415][ T24] usb 4-1: SerialNumber: syz [ 394.258284][ T5847] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 394.271021][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.280121][ T5847] usb 2-1: Product: syz [ 394.285942][ T5847] usb 2-1: Manufacturer: syz [ 394.287566][ T9585] autofs4:pid:9585:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.3), cmd(0xc0189377) [ 394.290563][ T5847] usb 2-1: SerialNumber: syz [ 394.293523][ T5847] usb 2-1: config 0 descriptor?? [ 394.324795][ T9585] autofs4:pid:9585:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189377) [ 394.519953][ T5847] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 394.541980][ T5847] usb 2-1: USB disconnect, device number 22 [ 394.554519][ T24] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 394.560745][ T24] cdc_ncm 4-1:1.0: bind() failure [ 394.582948][ T24] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 394.590745][ T24] cdc_ncm 4-1:1.1: bind() failure [ 394.635135][ T24] usb 4-1: USB disconnect, device number 95 [ 394.703898][ T9606] gfs2: Unknown parameter 'vbedicae64WȊo|¶aZS;xV' [ 394.719601][ T9612] gfs2: Unknown parameter 'vbedicae64WȊo|¶aZS;xV' [ 395.004630][ T24] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 395.154456][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 395.160848][ T24] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 395.169679][ T24] usb 1-1: config 0 has no interface number 0 [ 395.178497][ T5908] usb 4-1: new low-speed USB device number 96 using dummy_hcd [ 395.187290][ T24] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 395.199923][ T24] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 395.209007][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.217076][ T24] usb 1-1: Product: syz [ 395.221228][ T24] usb 1-1: Manufacturer: syz [ 395.225882][ T24] usb 1-1: SerialNumber: syz [ 395.232333][ T24] usb 1-1: config 0 descriptor?? [ 395.241098][ T24] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 395.252755][ T24] em28xx 1-1:0.132: Video interface 132 found: [ 395.356313][ T5908] usb 4-1: config 2 has an invalid interface number: 35 but max is 0 [ 395.364530][ T106] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 395.372150][ T5908] usb 4-1: config 2 has no interface number 0 [ 395.378419][ T5908] usb 4-1: config 2 interface 35 has no altsetting 0 [ 395.388283][ T5908] usb 4-1: string descriptor 0 read error: -22 [ 395.394648][ T5908] usb 4-1: New USB device found, idVendor=1d19, idProduct=0100, bcdDevice=7a.e9 [ 395.403714][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.544525][ T106] usb 2-1: Using ep0 maxpacket: 32 [ 395.551219][ T106] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.562189][ T106] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.571969][ T106] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 395.581060][ T106] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.592034][ T106] usb 2-1: config 0 descriptor?? [ 395.600550][ T106] hub 2-1:0.0: USB hub found [ 395.639974][ T5908] usb 4-1: USB disconnect, device number 96 [ 395.658256][ T24] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 395.662999][ T9614] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1016'. [ 395.685334][ T9614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.700365][ T9614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.816133][ T24] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 395.825492][ T24] em28xx 1-1:0.132: board has no eeprom [ 395.885050][ T24] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 395.892934][ T24] em28xx 1-1:0.132: analog set to bulk mode. [ 395.899383][ T5908] em28xx 1-1:0.132: Registering V4L2 extension [ 395.913121][ T24] usb 1-1: USB disconnect, device number 108 [ 395.921991][ T24] em28xx 1-1:0.132: Disconnecting em28xx [ 396.003982][ T9620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.005064][ T5908] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 396.013830][ T9620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.022789][ T5908] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 396.038600][ T5908] em28xx 1-1:0.132: No AC97 audio processor [ 396.045091][ T106] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 396.059121][ T5908] usb 1-1: Decoder not found [ 396.063825][ T5908] em28xx 1-1:0.132: failed to create media graph [ 396.070462][ T5908] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 396.078097][ T106] usbhid 2-1:0.0: can't add hid device: -71 [ 396.084035][ T106] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 396.093717][ T5908] em28xx 1-1:0.132: Remote control support is not available for this card. [ 396.102677][ T24] em28xx 1-1:0.132: Closing input extension [ 396.125807][ T106] usb 2-1: USB disconnect, device number 23 [ 396.132919][ T24] em28xx 1-1:0.132: Freeing device [ 396.390631][ T9636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1023'. [ 396.407033][ T9636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1023'. [ 396.675142][ T9] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 396.694471][ T24] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 396.824448][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 396.832658][ T9] usb 4-1: config 4 has an invalid interface number: 114 but max is 0 [ 396.841517][ T9] usb 4-1: config 4 has no interface number 0 [ 396.846927][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 396.849267][ T9] usb 4-1: config 4 interface 114 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 396.858778][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 396.862763][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=821f, bcdDevice=86.8d [ 396.872249][ T24] usb 1-1: config 100 has an invalid interface number: 147 but max is 0 [ 396.879507][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.888114][ T24] usb 1-1: config 100 has an invalid descriptor of length 0, skipping remainder of the config [ 396.906308][ T24] usb 1-1: config 100 has no interface number 0 [ 396.912997][ T9636] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 396.917110][ T24] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 396.930681][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.939764][ T24] usb 1-1: Product: syz [ 396.944306][ T24] usb 1-1: Manufacturer: syz [ 396.950546][ T24] usb 1-1: SerialNumber: syz [ 397.147761][ T5906] usb 4-1: USB disconnect, device number 97 [ 397.171335][ T9645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.180657][ T9645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.219791][ T24] uvcvideo 1-1:100.147: Found multiple Units with ID 6 [ 397.227485][ T24] uvcvideo 1-1:100.147: Found UVC 0.02 device syz (04f2:b746) [ 397.235272][ T24] uvcvideo 1-1:100.147: No valid video chain found. [ 397.247380][ T24] usb 1-1: USB disconnect, device number 109 [ 397.538329][ T9655] netlink: 'syz.4.1030': attribute type 10 has an invalid length. [ 397.561233][ T9655] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.570791][ T9655] bond0: (slave team0): Enslaving as an active interface with an up link [ 397.685791][ T9657] hub 9-0:1.0: USB hub found [ 397.696203][ T9657] hub 9-0:1.0: 1 port detected [ 397.704766][ T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 397.844521][ T24] usb 2-1: device descriptor read/64, error -71 [ 398.094476][ T24] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 398.204730][ T5847] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 398.234505][ T24] usb 2-1: device descriptor read/64, error -71 [ 398.345260][ T24] usb usb2-port1: attempt power cycle [ 398.354473][ T5847] usb 4-1: Using ep0 maxpacket: 32 [ 398.361071][ T5847] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.372639][ T5847] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 398.385722][ T5847] usb 4-1: config 0 interface 0 has no altsetting 0 [ 398.392352][ T5847] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 398.401446][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.411930][ T5847] usb 4-1: config 0 descriptor?? [ 398.694458][ T24] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 398.715196][ T24] usb 2-1: device descriptor read/8, error -71 [ 398.824050][ T5847] isku 0003:1E7D:3264.001D: unknown main item tag 0x2 [ 398.833393][ T5847] isku 0003:1E7D:3264.001D: hidraw0: USB HID v0.00 Device [HID 1e7d:3264] on usb-dummy_hcd.3-1/input0 [ 398.954491][ T24] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 398.975082][ T24] usb 2-1: device descriptor read/8, error -71 [ 399.024020][ T5847] isku 0003:1E7D:3264.001D: couldn't init struct isku_device [ 399.032393][ T5847] isku 0003:1E7D:3264.001D: couldn't install keyboard [ 399.041061][ T5847] isku 0003:1E7D:3264.001D: probe with driver isku failed with error -32 [ 399.053802][ T5847] usb 4-1: USB disconnect, device number 98 [ 399.085611][ T24] usb usb2-port1: unable to enumerate USB device [ 399.814554][ T24] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 399.979403][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.990396][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.000192][ T24] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 400.009260][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.019332][ T24] usb 4-1: config 0 descriptor?? [ 400.631898][ T9670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.640985][ T9670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.662264][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 400.675186][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 400.688887][ T24] usb 4-1: USB disconnect, device number 99 [ 400.753146][ T9678] tc_dump_action: action bad kind [ 400.803653][ T9683] fuse: Bad value for 'fd' [ 400.874528][ T5908] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 401.058673][ T5908] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 401.069524][ T5908] usb 2-1: config 0 has no interface number 0 [ 401.076063][ T5908] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 401.086500][ T5908] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 401.099485][ T5908] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 401.108652][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.116713][ T5908] usb 2-1: Product: syz [ 401.120917][ T5908] usb 2-1: Manufacturer: syz [ 401.125574][ T5908] usb 2-1: SerialNumber: syz [ 401.131978][ T5908] usb 2-1: config 0 descriptor?? [ 401.138145][ T9672] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 401.146795][ T5908] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 401.157913][ T5908] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 401.304489][ T5847] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 401.346502][ T30] audit: type=1326 audit(2000000146.099:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9671 comm="syz.1.1036" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7febb2d8f749 code=0x0 [ 401.457077][ T5847] usb 4-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 401.467047][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.477603][ T5847] usb 4-1: config 0 descriptor?? [ 401.488299][ T5847] pwc: Philips SPC 900NC USB webcam detected. [ 401.686593][ T5847] pwc: Failed to set LED on/off time (-71) [ 401.692875][ T5847] pwc: send_video_command error -71 [ 401.699455][ T5847] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 401.707088][ T5847] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 401.718497][ T5847] usb 4-1: USB disconnect, device number 100 [ 402.232422][ T9699] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1043'. [ 402.357744][ T5847] hid-generic 0006:0004:0009.001E: unknown main item tag 0x0 [ 402.365447][ T5847] hid-generic 0006:0004:0009.001E: unknown main item tag 0x0 [ 402.372871][ T5847] hid-generic 0006:0004:0009.001E: unknown main item tag 0x0 [ 402.380318][ T5847] hid-generic 0006:0004:0009.001E: unknown main item tag 0x0 [ 402.387858][ T5847] hid-generic 0006:0004:0009.001E: unknown main item tag 0x0 [ 402.395766][ T5847] hid-generic 0006:0004:0009.001E: unknown main item tag 0x0 [ 402.403152][ T5847] hid-generic 0006:0004:0009.001E: unknown main item tag 0x0 [ 402.410645][ T5847] hid-generic 0006:0004:0009.001E: unknown main item tag 0x0 [ 402.418096][ T5847] hid-generic 0006:0004:0009.001E: unknown main item tag 0x0 [ 402.429903][ T5847] hid-generic 0006:0004:0009.001E: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 403.155244][ T9709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.165476][ T9709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.404527][ T24] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 403.499116][ T5847] usb 2-1: USB disconnect, device number 28 [ 403.513149][ T5847] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 403.528552][ T5847] cyberjack 2-1:0.69: device disconnected [ 403.554680][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 403.576043][ T24] usb 4-1: config 1 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 250, changing to 11 [ 403.576062][ T24] usb 4-1: config 1 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 403.576076][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 403.580530][ T24] usb 4-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.40 [ 403.580555][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.580568][ T24] usb 4-1: Product: syz [ 403.580575][ T24] usb 4-1: Manufacturer: Д [ 403.580583][ T24] usb 4-1: SerialNumber: syz [ 403.801305][ T24] usbhid 4-1:1.0: can't add hid device: -71 [ 403.808953][ T24] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 403.828483][ T24] usb 4-1: USB disconnect, device number 101 [ 404.104461][ T5847] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 404.271429][ T5847] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 404.282433][ T5847] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 404.295670][ T5847] usb 2-1: config 0 interface 0 has no altsetting 0 [ 404.302296][ T5847] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 404.311923][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.323516][ T5847] usb 2-1: config 0 descriptor?? [ 404.696272][ T9728] can0 (unregistered): slcan off ttyS3. [ 404.711100][ T9728] mkiss: ax0: crc mode is auto. [ 404.727282][ T9728] autofs: Unknown parameter './file0' [ 404.808148][ T5847] usbhid 2-1:0.0: can't add hid device: -71 [ 404.824360][ T5847] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 404.862437][ T5847] usb 2-1: USB disconnect, device number 29 [ 404.974796][ T9744] overlayfs: failed to resolve './file0': -2 [ 405.174565][ T9] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 405.334879][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 405.344871][ T5908] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 405.350118][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 405.366161][ T9] usb 4-1: config 179 has no interface number 0 [ 405.372474][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 405.387085][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 405.400114][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 405.412520][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 405.425902][ T9] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 405.439215][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 405.448316][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.464561][ T9741] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 405.511685][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 405.527772][ T5908] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 405.537770][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.546079][ T5908] usb 2-1: Product: syz [ 405.550379][ T5908] usb 2-1: Manufacturer: syz [ 405.555971][ T5908] usb 2-1: SerialNumber: syz [ 405.564171][ T5908] usb 2-1: config 0 descriptor?? [ 405.855512][ T5908] usb 2-1: USB disconnect, device number 30 [ 405.913302][ T7267] udevd[7267]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory [ 405.938472][ T7267] udevd[7267]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 406.119129][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input40 [ 406.625132][ T5908] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 406.776644][ T5908] usb 2-1: unable to get BOS descriptor or descriptor too short [ 406.785885][ T5908] usb 2-1: config 255 has an invalid interface number: 178 but max is 0 [ 406.794239][ T5908] usb 2-1: config 255 has no interface number 0 [ 406.803155][ T5908] usb 2-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=2a.bd [ 406.812303][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.820325][ T5908] usb 2-1: Product: syz [ 406.824630][ T5908] usb 2-1: Manufacturer: syz [ 406.829230][ T5908] usb 2-1: SerialNumber: syz [ 407.954056][ T24] usb 4-1: USB disconnect, device number 102 [ 407.954093][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 407.969700][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 408.464489][ T24] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 408.594498][ T24] usb 4-1: device descriptor read/64, error -71 [ 408.844806][ T24] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 408.984511][ T24] usb 4-1: device descriptor read/64, error -71 [ 409.094695][ T24] usb usb4-port1: attempt power cycle [ 409.366296][ T5908] ums-freecom 2-1:255.178: USB Mass Storage device detected [ 409.383387][ T9808] sg_write: data in/out 491487/136 bytes for SCSI command 0xe0-- guessing data in; [ 409.383387][ T9808] program syz.1.1061 not setting count and/or reply_len properly [ 409.453115][ T24] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 409.469251][ T5908] usb 2-1: USB disconnect, device number 31 [ 409.495143][ T24] usb 4-1: device descriptor read/8, error -71 [ 409.754543][ T24] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 409.784638][ T5908] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 409.792803][ T24] usb 4-1: device descriptor read/8, error -71 [ 409.915933][ T24] usb usb4-port1: unable to enumerate USB device [ 409.964529][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 409.970906][ T5908] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 409.981770][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 221, changing to 11 [ 409.992916][ T5908] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 410.005970][ T5908] usb 2-1: New USB device found, idVendor=056a, idProduct=0307, bcdDevice= 0.00 [ 410.015013][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.024836][ T5908] usb 2-1: config 0 descriptor?? [ 410.509189][ T5908] usbhid 2-1:0.0: can't add hid device: -71 [ 410.515263][ T5908] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 410.531437][ T5908] usb 2-1: USB disconnect, device number 32 [ 411.177833][ T9821] 9p: Bad value for 'wfdno' [ 411.224017][ T9822] Bluetooth: MGMT ver 1.23 [ 411.354482][ T5908] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 411.526197][ T5908] usb 2-1: not running at top speed; connect to a high speed hub [ 411.535194][ T5908] usb 2-1: config 6 has an invalid interface number: 92 but max is 2 [ 411.543295][ T5908] usb 2-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 411.552211][ T5908] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 411.562402][ T5908] usb 2-1: config 6 has 1 interface, different from the descriptor's value: 3 [ 411.571376][ T5908] usb 2-1: config 6 has no interface number 0 [ 411.577746][ T5908] usb 2-1: config 6 interface 92 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 411.590825][ T5908] usb 2-1: config 6 interface 92 has no altsetting 0 [ 411.600244][ T5908] usb 2-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=3b.ab [ 411.609320][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.617336][ T5908] usb 2-1: Product: Г [ 411.621385][ T5908] usb 2-1: Manufacturer: Н [ 411.625907][ T5908] usb 2-1: SerialNumber: 帀ﴂ叔욞儅촬隀萼ˋ醊妡쨈辕 [ 411.839062][ T9818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.847917][ T9818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.857093][ T9818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.865946][ T9818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.935321][ T5908] cypress_m8 2-1:6.92: HID->COM RS232 Adapter converter detected [ 411.943926][ T5908] cyphidcom ttyUSB0: required endpoint is missing [ 411.954620][ T5908] usb 2-1: USB disconnect, device number 33 [ 411.961460][ T5908] cypress_m8 2-1:6.92: device disconnected [ 412.174953][ T9831] gfs2: error -5 reading superblock [ 412.525537][ T9835] netlink: 328 bytes leftover after parsing attributes in process `syz.1.1070'. [ 412.550590][ T9835] netlink: 328 bytes leftover after parsing attributes in process `syz.1.1070'. [ 412.579429][ T9835] netlink: 328 bytes leftover after parsing attributes in process `syz.1.1070'. [ 412.610838][ T9835] netlink: 328 bytes leftover after parsing attributes in process `syz.1.1070'. [ 412.633488][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 412.646102][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 412.653837][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 412.661308][ T9835] netlink: 328 bytes leftover after parsing attributes in process `syz.1.1070'. [ 412.671444][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 412.679766][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 412.686479][ T9835] netlink: 328 bytes leftover after parsing attributes in process `syz.1.1070'. [ 412.715308][ T9835] netlink: 328 bytes leftover after parsing attributes in process `syz.1.1070'. [ 412.726463][ T9835] netlink: 328 bytes leftover after parsing attributes in process `syz.1.1070'. [ 412.737169][ T9835] netlink: 328 bytes leftover after parsing attributes in process `syz.1.1070'. [ 412.746630][ T9836] virt_wifi0 speed is unknown, defaulting to 1000 [ 412.754322][ T9835] netlink: 328 bytes leftover after parsing attributes in process `syz.1.1070'. [ 412.968797][ T9836] chnl_net:caif_netlink_parms(): no params data found [ 413.104912][ T5907] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 413.208148][ T9836] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.215477][ T9836] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.222646][ T9836] bridge_slave_0: entered allmulticast mode [ 413.247716][ T9836] bridge_slave_0: entered promiscuous mode [ 413.294558][ T5907] usb 2-1: config 1 interface 0 has no altsetting 0 [ 413.306061][ T5907] usb 2-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.40 [ 413.320436][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.329259][ T5907] usb 2-1: Product: syz [ 413.333427][ T5907] usb 2-1: Manufacturer: 맚톍䛂쥬퇍族寨珡뫙젨㜐眎嫺΋⻽傗纸ꟹ橮봴攺룬ꖜ䴾㙭ퟀ煫呠タ䣅⯻︦㿓࡜垤⋲蜣栁恩╄畹莈焎뱹鉷ﲎ앐☾湫ቫᲢ˵넦䞵ử芘䑇շꭶ戫茛쩭ﲬ쪳匢꒥뒞す쁟謒鈃謙꥽ς㼹☁ɧ묃鞓㼋嶒᥆䜻៏ⅇ [ 413.364686][ T5907] usb 2-1: SerialNumber: syz [ 413.424633][ T5908] usb 4-1: new low-speed USB device number 107 using dummy_hcd [ 413.495830][ T9836] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.504657][ T9836] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.511940][ T9836] bridge_slave_1: entered allmulticast mode [ 413.526615][ T9836] bridge_slave_1: entered promiscuous mode [ 413.562779][ T3506] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.586073][ T5908] usb 4-1: Invalid ep0 maxpacket: 32 [ 413.651610][ T3506] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.671941][ T9836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.685987][ T9836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.720660][ T3506] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.731278][ T5908] usb 4-1: new low-speed USB device number 108 using dummy_hcd [ 413.760579][ T9836] team0: Port device team_slave_0 added [ 413.770368][ T9836] team0: Port device team_slave_1 added [ 413.800381][ T9841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.810968][ T9841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.812976][ T9836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.830535][ T9836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.837882][ T5907] usbhid 2-1:1.0: can't add hid device: -71 [ 413.862985][ T9836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.869005][ T5907] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 413.894330][ T5907] usb 2-1: USB disconnect, device number 34 [ 413.904881][ T5908] usb 4-1: Invalid ep0 maxpacket: 32 [ 413.912782][ T3506] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.924809][ T5908] usb usb4-port1: attempt power cycle [ 413.931351][ T9836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.939036][ T9836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.965281][ T9836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.018614][ T9836] hsr_slave_0: entered promiscuous mode [ 414.025490][ T9836] hsr_slave_1: entered promiscuous mode [ 414.032083][ T9836] debugfs: 'hsr0' already exists in 'hsr' [ 414.038224][ T9836] Cannot create hsr debugfs directory [ 414.274737][ T5908] usb 4-1: new low-speed USB device number 109 using dummy_hcd [ 414.295087][ T5908] usb 4-1: Invalid ep0 maxpacket: 32 [ 414.425081][ T5908] usb 4-1: new low-speed USB device number 110 using dummy_hcd [ 414.465434][ T5908] usb 4-1: Invalid ep0 maxpacket: 32 [ 414.471253][ T5908] usb usb4-port1: unable to enumerate USB device [ 414.556058][ T3506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.597593][ T3506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.637540][ T3506] bond0 (unregistering): Released all slaves [ 414.669962][ T9836] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 414.682952][ T9836] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 414.713842][ T3506] tipc: Disabling bearer [ 414.714536][ T5844] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 414.729186][ T3506] tipc: Left network mode [ 414.729270][ T9836] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 414.751175][ T9836] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 414.764820][ T5828] Bluetooth: hci4: command tx timeout [ 414.856258][ T5844] usb 2-1: device descriptor read/64, error -71 [ 414.896430][ T9836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.979882][ T9836] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.996501][ T450] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.003721][ T450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.022197][ T450] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.029371][ T450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.078063][ T3506] hsr_slave_0: left promiscuous mode [ 415.084912][ T3506] hsr_slave_1: left promiscuous mode [ 415.091393][ T3506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.100416][ T3506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.107722][ T5844] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 415.120482][ T3506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.131684][ T3506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.152333][ T3506] veth1_macvtap: left promiscuous mode [ 415.158148][ T3506] veth0_macvtap: left promiscuous mode [ 415.163957][ T3506] veth0_vlan: left promiscuous mode [ 415.247880][ T5844] usb 2-1: device descriptor read/64, error -71 [ 415.355952][ T5844] usb usb2-port1: attempt power cycle [ 415.577750][ T3506] team0 (unregistering): Port device team_slave_1 removed [ 415.610688][ T3506] team0 (unregistering): Port device team_slave_0 removed [ 415.708813][ T5844] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 415.742576][ T5844] usb 2-1: device descriptor read/8, error -71 [ 415.984807][ T5844] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 416.016977][ T5844] usb 2-1: device descriptor read/8, error -71 [ 416.125037][ T5844] usb usb2-port1: unable to enumerate USB device [ 416.322572][ T3506] IPVS: stop unused estimator thread 0... [ 416.382094][ T9836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.467265][ T9898] binder: BINDER_SET_CONTEXT_MGR already set [ 416.473415][ T9898] binder: 9897:9898 ioctl 4018620d 200000004a80 returned -16 [ 416.845131][ T5828] Bluetooth: hci4: command tx timeout [ 416.949092][ T9836] veth0_vlan: entered promiscuous mode [ 416.962665][ T9836] veth1_vlan: entered promiscuous mode [ 417.023014][ T9836] veth0_macvtap: entered promiscuous mode [ 417.045928][ T9836] veth1_macvtap: entered promiscuous mode [ 417.089473][ T9836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.106411][ T9836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.146820][ T5983] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.160907][ T5983] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.205253][ T60] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.214014][ T60] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.314333][ T2035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.332630][ T2035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.371098][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.379684][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.444525][ T9] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 417.614897][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 417.623647][ T9] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 417.636340][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.648277][ T9] usb 4-1: Product: syz [ 417.652450][ T9] usb 4-1: Manufacturer: syz [ 417.658893][ T9] usb 4-1: SerialNumber: syz [ 417.666305][ T9] usb 4-1: config 0 descriptor?? [ 417.682206][ T9] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 417.735722][ T9937] netlink: 'syz.5.1082': attribute type 21 has an invalid length. [ 417.743785][ T9937] netlink: 'syz.5.1082': attribute type 1 has an invalid length. [ 417.934457][ T5908] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 417.989349][ T9] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 418.010090][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 418.032809][ T9] usb 4-1: USB disconnect, device number 111 [ 418.097336][ T5908] usb 2-1: config 201 has an invalid interface number: 249 but max is 0 [ 418.107267][ T5908] usb 2-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config [ 418.144543][ T5908] usb 2-1: config 201 has no interface number 0 [ 418.150840][ T5908] usb 2-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 418.204540][ T5908] usb 2-1: config 201 interface 249 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 418.225236][ T5908] usb 2-1: config 201 interface 249 altsetting 4 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 418.236480][ T5908] usb 2-1: config 201 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 418.250179][ T5908] usb 2-1: config 201 interface 249 has no altsetting 0 [ 418.263753][ T5908] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 418.272860][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.282844][ T5908] usb 2-1: Product: syz [ 418.287205][ T5908] usb 2-1: Manufacturer: syz [ 418.291869][ T5908] usb 2-1: SerialNumber: syz [ 418.315874][ T9929] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 418.372943][ T9958] nbd: must specify an index to disconnect [ 418.513786][ T9963] __nla_validate_parse: 55 callbacks suppressed [ 418.513802][ T9963] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1088'. [ 418.547283][ T9929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.585974][ T9929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.605702][ T9] usb 4-1: new low-speed USB device number 112 using dummy_hcd [ 418.622818][ T9929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.634080][ T9929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.667562][ T9929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1081'. [ 418.731336][ T9971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.775336][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 418.776649][ T9971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.789258][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.813485][ T9] usb 4-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 418.822650][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.841775][ T9] usb 4-1: config 0 descriptor?? [ 418.935406][ T5828] Bluetooth: hci4: command tx timeout [ 419.005587][ T5844] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 419.039519][ T9929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.056693][ T9929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.112369][ T5908] ath6kl: Failed to submit usb control message: -71 [ 419.119539][ T5908] ath6kl: unable to send the bmi data to the device: -71 [ 419.126929][ T5908] ath6kl: Unable to send get target info: -71 [ 419.143863][ T5908] ath6kl: Failed to init ath6kl core: -71 [ 419.151913][ T5908] ath6kl_usb 2-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 419.164587][ T5844] usb 6-1: Using ep0 maxpacket: 8 [ 419.170104][ T5908] usb 2-1: USB disconnect, device number 39 [ 419.183101][ T5844] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 419.193507][ T5844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.201603][ T5844] usb 6-1: Product: syz [ 419.205998][ T5844] usb 6-1: Manufacturer: syz [ 419.210589][ T5844] usb 6-1: SerialNumber: syz [ 419.220997][ T5844] usb 6-1: config 0 descriptor?? [ 419.283912][ T9] glorious 0003:258A:0036.001F: item fetching failed at offset 0/2 [ 419.293175][ T9] glorious 0003:258A:0036.001F: probe with driver glorious failed with error -22 [ 419.430190][ T5844] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 419.484202][ T9961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.494542][ T9961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.555387][ T9] usb 4-1: USB disconnect, device number 112 [ 419.914614][ T106] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 419.970456][ T9987] netlink: 'syz.4.1091': attribute type 10 has an invalid length. [ 419.979672][ T9987] batman_adv: batadv0: Removing interface: netdevsim0 [ 419.991601][ T9987] team0: Port device netdevsim0 added [ 420.026951][ T5844] usb write operation failed. (-71) [ 420.040209][ T5844] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 420.052118][ T5844] dvbdev: DVB: registering new adapter (Terratec H7) [ 420.058974][ T5844] usb 6-1: media controller created [ 420.066419][ T5844] usb read operation failed. (-71) [ 420.071923][ T5844] usb write operation failed. (-71) [ 420.084104][ T5844] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 420.097318][ T106] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.110124][ T106] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.121736][ T5844] usb 6-1: USB disconnect, device number 2 [ 420.129084][ T106] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 420.147502][ T106] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.160861][ T106] usb 2-1: config 0 descriptor?? [ 420.581246][T10006] comedi comedi3: comedi_config --init_data is deprecated [ 420.582652][ T106] hid_parser_main: 9 callbacks suppressed [ 420.582670][ T106] playstation 0003:054C:0DF2.0020: unknown main item tag 0x0 [ 420.617276][ T106] playstation 0003:054C:0DF2.0020: unknown main item tag 0x0 [ 420.627875][ T106] playstation 0003:054C:0DF2.0020: unknown main item tag 0x0 [ 420.637232][ T106] playstation 0003:054C:0DF2.0020: unknown main item tag 0x0 [ 420.645328][ T106] playstation 0003:054C:0DF2.0020: unknown main item tag 0x0 [ 420.658928][ T106] playstation 0003:054C:0DF2.0020: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 420.743627][T10016] tmpfs: User quota block hardlimit too large. [ 420.753098][T10015] tmpfs: User quota block hardlimit too large. [ 420.754841][ T5908] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 420.778926][ T106] playstation 0003:054C:0DF2.0020: Invalid byte count transferred, expected 20 got 0 [ 420.809398][ T106] playstation 0003:054C:0DF2.0020: Failed to retrieve DualSense pairing info: -22 [ 420.822360][ T106] playstation 0003:054C:0DF2.0020: Failed to get MAC address from DualSense [ 420.831457][ T106] playstation 0003:054C:0DF2.0020: Failed to create dualsense. [ 420.846813][ T106] playstation 0003:054C:0DF2.0020: probe with driver playstation failed with error -22 [ 420.959158][ T5908] usb 4-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 420.984823][ T5908] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 421.002297][ T9983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.013846][ T5828] Bluetooth: hci4: command tx timeout [ 421.021508][ T5908] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 421.032337][ T9983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.043129][ T9] usb 2-1: USB disconnect, device number 40 [ 421.043517][ T5908] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 421.058634][ T5908] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 421.067119][ T5908] usb 4-1: Manufacturer: syz [ 421.071869][ T5908] usb 4-1: SerialNumber: syz [ 421.295365][ T5908] yealink 4-1:36.0: invalid payload size 0, expected 16 [ 421.310454][ T5908] input: Yealink usb-p1k as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:36.0/input/input41 [ 421.324212][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 421.331795][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 421.339570][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 421.346585][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 421.353614][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 421.360584][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 421.367542][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 421.374500][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 421.381278][ C1] yealink 4-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 421.415077][ T5908] usb 4-1: USB disconnect, device number 113 [ 421.884513][ T5844] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 422.044744][ T5844] usb 2-1: Using ep0 maxpacket: 8 [ 422.051534][ T5844] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 422.060801][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.077722][ T5844] pvrusb2: Hardware description: Terratec Grabster AV400 [ 422.084957][ T5844] pvrusb2: ********** [ 422.089015][ T5844] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 422.099187][ T5844] pvrusb2: Important functionality might not be entirely working. [ 422.107090][ T5844] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 422.118496][ T5844] pvrusb2: ********** [ 422.277024][ T2343] pvrusb2: Invalid write control endpoint [ 422.283772][ T5844] usb 2-1: USB disconnect, device number 41 [ 422.387711][T10068] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1106'. [ 422.397303][ T2343] pvrusb2: Invalid write control endpoint [ 422.403040][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 422.423308][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 422.434260][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 422.445579][ T2343] pvrusb2: Device being rendered inoperable [ 422.451723][ T2343] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 422.460198][ T2343] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 422.473556][ T2343] pvrusb2: Attached sub-driver cx25840 [ 422.488941][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 422.499367][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 422.709192][T10081] loop9: detected capacity change from 0 to 7 [ 422.716568][T10081] Buffer I/O error on dev loop9, logical block 0, async page read [ 422.724466][T10081] Buffer I/O error on dev loop9, logical block 0, async page read [ 422.732323][T10081] Buffer I/O error on dev loop9, logical block 0, async page read [ 422.740250][T10081] Buffer I/O error on dev loop9, logical block 0, async page read [ 422.748171][T10081] Buffer I/O error on dev loop9, logical block 0, async page read [ 422.756111][T10081] Buffer I/O error on dev loop9, logical block 0, async page read [ 422.763934][T10081] Buffer I/O error on dev loop9, logical block 0, async page read [ 422.773413][T10081] ldm_validate_partition_table(): Disk read failed. [ 422.778100][T10082] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 422.780432][T10081] Buffer I/O error on dev loop9, logical block 0, async page read [ 422.805384][T10081] Buffer I/O error on dev loop9, logical block 0, async page read [ 422.824602][T10081] Buffer I/O error on dev loop9, logical block 0, async page read [ 422.832955][T10082] batadv_slave_0: entered promiscuous mode [ 422.838966][T10081] Dev loop9: unable to read RDB block 0 [ 422.853155][T10081] loop9: unable to read partition table [ 422.861762][T10081] loop9: partition table beyond EOD, truncated [ 422.868804][T10081] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 422.868804][T10081] ) failed (rc=-5) [ 422.888554][T10080] batadv_slave_0: left promiscuous mode [ 422.914495][ T106] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 423.019097][ T30] audit: type=1326 audit(2000000167.769:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10085 comm="syz.5.1112" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc9118f749 code=0x0 [ 423.077093][T10087] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1112'. [ 423.087884][ T106] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 423.103999][ T106] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.104534][ T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 423.114076][ T106] usb 4-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 423.137793][ T106] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.176146][ T106] usb 4-1: config 0 descriptor?? [ 423.248626][T10087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.294456][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 423.306228][T10087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.326811][ T10] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 423.339514][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.351136][ T10] usb 2-1: config 0 descriptor?? [ 423.368839][T10087] bond0 (unregistering): Released all slaves [ 423.380679][ T10] as10x_usb: device has been detected [ 423.395573][ T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 423.424910][ T10] usb 2-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 423.470653][ T10] as10x_usb: error during firmware upload part1 [ 423.478177][ T10] Registered device nBox DVB-T Dongle [ 423.577931][ T10] usb 2-1: USB disconnect, device number 42 [ 423.613489][ T10] Unregistered device nBox DVB-T Dongle [ 423.616871][ T10] as10x_usb: device has been disconnected [ 423.647265][ T106] smartjoyplus 0003:0B43:0003.0021: hidraw0: USB HID v0.00 Device [HID 0b43:0003] on usb-dummy_hcd.3-1/input0 [ 423.661626][ T106] smartjoyplus 0003:0B43:0003.0021: Force feedback for SmartJoy PLUS PS2/USB adapter [ 423.905740][ T5908] usb 4-1: USB disconnect, device number 114 [ 424.010025][T10109] virt_wifi0 speed is unknown, defaulting to 1000 [ 424.104524][ T10] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 424.254465][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 424.261182][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 424.269992][ T10] usb 2-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 424.279127][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.287279][ T10] usb 2-1: Product: syz [ 424.291452][ T10] usb 2-1: Manufacturer: syz [ 424.296081][ T10] usb 2-1: SerialNumber: syz [ 424.305920][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 424.446976][ T9] usb 6-1: device descriptor read/64, error -71 [ 424.486711][T10115] netlink: 187320 bytes leftover after parsing attributes in process `syz.3.1121'. [ 424.496171][T10115] openvswitch: netlink: Key 9 has unexpected len 21752 expected 4 [ 424.506137][ T10] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 424.526226][ T10] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 424.539772][ T10] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 424.600396][T10119] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 424.684556][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 424.729335][ T5908] usb 2-1: USB disconnect, device number 43 [ 424.751314][ T5908] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 424.766068][ T5908] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 424.776536][ T5908] visor 2-1:1.0: device disconnected [ 424.814471][ T9] usb 6-1: device descriptor read/64, error -71 [ 424.924962][ T9] usb usb6-port1: attempt power cycle [ 425.264467][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 425.285910][ T9] usb 6-1: device descriptor read/8, error -71 [ 425.534526][ T5908] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 425.546682][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 425.574885][ T9] usb 6-1: device descriptor read/8, error -71 [ 425.684538][ T5908] usb 2-1: device descriptor read/64, error -71 [ 425.684893][ T9] usb usb6-port1: unable to enumerate USB device [ 425.764523][ T10] usb 4-1: new low-speed USB device number 115 using dummy_hcd [ 425.894472][ T10] usb 4-1: device descriptor read/64, error -71 [ 425.924545][ T5908] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 426.054476][ T5908] usb 2-1: device descriptor read/64, error -71 [ 426.134471][ T10] usb 4-1: new low-speed USB device number 116 using dummy_hcd [ 426.164744][ T5908] usb usb2-port1: attempt power cycle [ 426.264462][ T10] usb 4-1: device descriptor read/64, error -71 [ 426.375917][ T10] usb usb4-port1: attempt power cycle [ 426.514497][ T5908] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 426.535123][ T5908] usb 2-1: device descriptor read/8, error -71 [ 426.724684][ T10] usb 4-1: new low-speed USB device number 117 using dummy_hcd [ 426.744850][ T10] usb 4-1: device descriptor read/8, error -71 [ 426.774609][ T5908] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 426.795913][ T5908] usb 2-1: device descriptor read/8, error -71 [ 426.904840][ T5908] usb usb2-port1: unable to enumerate USB device [ 426.984475][ T10] usb 4-1: new low-speed USB device number 118 using dummy_hcd [ 427.009269][ T10] usb 4-1: device descriptor read/8, error -71 [ 427.125434][ T10] usb usb4-port1: unable to enumerate USB device [ 427.161808][ T30] audit: type=1326 audit(2000000171.909:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10136 comm="syz.5.1128" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc9118f749 code=0x0 [ 427.218828][T10138] loop8: detected capacity change from 0 to 8 [ 427.229830][ T9603] Dev loop8: unable to read RDB block 8 [ 427.235780][ T9603] loop8: unable to read partition table [ 427.241546][ T9603] loop8: partition table beyond EOD, truncated [ 427.250348][T10138] Dev loop8: unable to read RDB block 8 [ 427.258343][T10138] loop8: unable to read partition table [ 427.264084][T10138] loop8: partition table beyond EOD, truncated [ 427.274624][T10138] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 427.675585][ T106] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 427.845686][ T106] usb 6-1: not running at top speed; connect to a high speed hub [ 427.854437][ T106] usb 6-1: config 1 has an invalid descriptor of length 130, skipping remainder of the config [ 427.864707][ T106] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 427.876285][ T106] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 427.885685][ T106] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.893670][ T106] usb 6-1: Product: syz [ 427.897898][ T106] usb 6-1: Manufacturer: syz [ 427.902490][ T106] usb 6-1: SerialNumber: syz [ 428.117685][T10142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.128638][T10142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.143245][ T106] usb 6-1: 0:2 : does not exist [ 428.168713][ T106] usb 6-1: USB disconnect, device number 7 [ 428.194242][ T9603] udevd[9603]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 428.590408][T10159] binder: BINDER_SET_CONTEXT_MGR already set [ 428.597914][T10159] binder: 10158:10159 ioctl 4018620d 200000000040 returned -16 [ 428.658190][ T30] audit: type=1326 audit(2000000173.409:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.1.1134" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7febb2d8f749 code=0x0 [ 428.798451][T10171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1136'. [ 428.816578][T10173] sg_write: process 815 (syz.1.1137) changed security contexts after opening file descriptor, this is not allowed. [ 429.016345][ T106] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 429.187559][ T106] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 429.196736][ T106] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.204755][ T106] usb 6-1: Product: syz [ 429.208929][ T106] usb 6-1: Manufacturer: syz [ 429.213514][ T106] usb 6-1: SerialNumber: syz [ 429.294464][ T10] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 429.444471][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 429.451474][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 429.473432][ T10] usb 2-1: config 9 has an invalid interface number: 33 but max is 0 [ 429.490493][ T10] usb 2-1: config 9 has no interface number 0 [ 429.496652][ T10] usb 2-1: config 9 interface 33 has no altsetting 0 [ 429.506460][ T10] usb 2-1: string descriptor 0 read error: -22 [ 429.512742][ T10] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=c5.a8 [ 429.522001][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.635107][T10169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.649368][T10169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.735994][ T9] usb 2-1: USB disconnect, device number 48 [ 429.860311][ T106] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 429.867354][ T106] cdc_ncm 6-1:1.0: bind() failure [ 429.883575][ T106] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 429.893233][ T106] cdc_ncm 6-1:1.1: bind() failure [ 430.215569][T10169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.224310][T10169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.257423][T10215] netlink: 'syz.3.1142': attribute type 1 has an invalid length. [ 430.554491][ T9] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 430.706510][ T9] usb 2-1: config 7 has an invalid interface number: 119 but max is 0 [ 430.731515][ T9] usb 2-1: config 7 has no interface number 0 [ 430.744497][ T5908] usb 4-1: new full-speed USB device number 119 using dummy_hcd [ 430.744727][ T9] usb 2-1: New USB device found, idVendor=0923, idProduct=010f, bcdDevice=2f.c8 [ 430.761904][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.770030][ T9] usb 2-1: Product: syz [ 430.778453][ T9] usb 2-1: Manufacturer: syz [ 430.783059][ T9] usb 2-1: SerialNumber: syz [ 430.912718][ T5908] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 430.942563][ T5908] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 430.953894][ T5908] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 430.970154][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.981847][T10231] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 430.994788][T10231] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 431.002322][T10219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.008897][ T5908] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 431.028260][T10219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.056130][ T9] gspca_main: tv8532-2.14.0 probing 0923:010f [ 431.134144][ T9] usb 2-1: USB disconnect, device number 49 [ 431.231483][ T5907] usb 4-1: USB disconnect, device number 119 [ 431.784171][ T5844] usb 6-1: USB disconnect, device number 8 [ 431.840435][T10271] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1148'. [ 431.865054][ T5907] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 431.900564][T10274] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1149'. [ 431.909492][T10274] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1149'. [ 432.022295][T10277] netlink: 'syz.5.1150': attribute type 9 has an invalid length. [ 432.031006][T10277] netlink: 'syz.5.1150': attribute type 11 has an invalid length. [ 432.039036][ T5907] usb 2-1: Using ep0 maxpacket: 32 [ 432.044287][T10277] netlink: 'syz.5.1150': attribute type 12 has an invalid length. [ 432.054299][T10277] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.1150'. [ 432.066456][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.077627][ T5907] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 432.091895][ T5907] usb 2-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 432.101055][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.110883][ T5907] usb 2-1: config 0 descriptor?? [ 432.384464][ T5844] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 432.514455][ T5844] usb 6-1: device descriptor read/64, error -71 [ 432.524954][ T5907] gembird 0003:11FF:3331.0022: unknown main item tag 0x0 [ 432.532046][ T5907] gembird 0003:11FF:3331.0022: unknown main item tag 0x0 [ 432.539382][ T5907] gembird 0003:11FF:3331.0022: unknown main item tag 0x0 [ 432.546495][ T5907] gembird 0003:11FF:3331.0022: unknown main item tag 0x0 [ 432.553640][ T5907] gembird 0003:11FF:3331.0022: unknown main item tag 0x0 [ 432.563062][ T5907] gembird 0003:11FF:3331.0022: hidraw0: USB HID v0.00 Device [HID 11ff:3331] on usb-dummy_hcd.1-1/input0 [ 432.764561][ T5844] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 432.851372][T10281] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1151'. [ 432.902993][ T5844] usb 6-1: device descriptor read/64, error -71 [ 433.024830][ T5844] usb usb6-port1: attempt power cycle [ 433.041204][T10289] 9p: Bad value for 'rfdno' [ 433.136293][T10292] kvm: apic: phys broadcast and lowest prio [ 433.142541][T10292] kvm: Disabled LAPIC found during irq injection [ 433.374745][ T5844] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 433.397246][ T5844] usb 6-1: device descriptor read/8, error -71 [ 433.634454][ T5844] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 433.655080][ T5844] usb 6-1: device descriptor read/8, error -71 [ 433.764671][ T5907] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 433.766087][ T5844] usb usb6-port1: unable to enumerate USB device [ 433.914441][ T5907] usb 4-1: Using ep0 maxpacket: 8 [ 433.922753][ T5907] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 433.932577][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.940681][ T5907] usb 4-1: Product: syz [ 433.944923][ T5907] usb 4-1: Manufacturer: syz [ 433.949510][ T5907] usb 4-1: SerialNumber: syz [ 434.172909][ T5907] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 120 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 434.598013][ T5907] usb 4-1: USB disconnect, device number 120 [ 434.609799][ T5907] usblp0: removed [ 434.630450][ T5844] usb 2-1: USB disconnect, device number 50 [ 434.994531][ T5844] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 435.144729][ T5844] usb 2-1: Using ep0 maxpacket: 16 [ 435.155944][ T5844] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 435.165480][ T5844] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 435.175752][ T5844] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 435.203979][ T5844] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 435.222190][T10314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1163'. [ 435.225601][ T5844] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 435.237736][T10314] openvswitch: netlink: Key type 13084 is out of range max 32 [ 435.251003][ T5844] usb 2-1: config 1 interface 0 has no altsetting 0 [ 435.259173][ T5844] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 435.268263][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.292512][ T5844] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 435.434492][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 435.550134][ T5844] ums-sddr09 2-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 435.564227][ T5844] usb 2-1: USB disconnect, device number 51 [ 435.597213][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 435.605454][ T9] usb 6-1: can't read configurations, error -61 [ 435.744464][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 435.896733][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 435.904488][ T9] usb 6-1: can't read configurations, error -61 [ 435.910934][ T9] usb usb6-port1: attempt power cycle [ 436.224486][ T5844] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 436.255737][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 436.277951][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 436.285995][ T9] usb 6-1: can't read configurations, error -61 [ 436.294481][ T5907] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 436.376215][ T5844] usb 4-1: unable to get BOS descriptor or descriptor too short [ 436.385612][ T5844] usb 4-1: config 14 has an invalid interface number: 21 but max is 0 [ 436.393768][ T5844] usb 4-1: config 14 has no interface number 0 [ 436.400049][ T5844] usb 4-1: config 14 interface 21 has no altsetting 0 [ 436.409502][ T5844] usb 4-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc [ 436.418584][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.424512][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 436.426614][ T5844] usb 4-1: Product: syz [ 436.438281][ T5844] usb 4-1: Manufacturer: syz [ 436.442859][ T5844] usb 4-1: SerialNumber: syz [ 436.457247][ T5907] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 436.466193][ T5907] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 436.477219][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 436.484861][ T9] usb 6-1: can't read configurations, error -61 [ 436.491372][ T5907] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 436.503016][ T9] usb usb6-port1: unable to enumerate USB device [ 436.512671][ T5907] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 436.522049][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.530271][ T5907] usb 2-1: Product: syz [ 436.534646][ T5907] usb 2-1: Manufacturer: syz [ 436.539325][ T5907] usb 2-1: SerialNumber: syz [ 436.818495][ T5844] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 436.819733][ T5907] usb 2-1: USB disconnect, device number 52 [ 436.831440][ T5844] usb 4-1: MIDIStreaming interface descriptor not found [ 436.906794][ T5844] usb 4-1: USB disconnect, device number 121 [ 436.978411][ T7264] udevd[7264]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:14.21/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 437.214082][ T5907] IPVS: starting estimator thread 0... [ 437.304496][T10339] IPVS: using max 26 ests per chain, 62400 per kthread [ 437.454475][ T5844] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 437.534487][ T5907] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 437.624467][ T5844] usb 4-1: Using ep0 maxpacket: 8 [ 437.632860][ T5844] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 437.642128][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.650559][ T5844] usb 4-1: Product: syz [ 437.654761][ T5844] usb 4-1: Manufacturer: syz [ 437.659347][ T5844] usb 4-1: SerialNumber: syz [ 437.666170][ T5844] usb 4-1: config 0 descriptor?? [ 437.684518][ T5907] usb 2-1: Using ep0 maxpacket: 16 [ 437.690272][ T5907] usb 2-1: too many configurations: 72, using maximum allowed: 8 [ 437.699428][ T5907] usb 2-1: config 0 has no interfaces? [ 437.706275][ T5907] usb 2-1: config 0 has no interfaces? [ 437.713179][ T5907] usb 2-1: config 0 has no interfaces? [ 437.719994][ T5907] usb 2-1: config 0 has no interfaces? [ 437.726480][ T5907] usb 2-1: config 0 has no interfaces? [ 437.732825][ T5907] usb 2-1: config 0 has no interfaces? [ 437.739461][ T5907] usb 2-1: config 0 has no interfaces? [ 437.746109][ T5907] usb 2-1: config 0 has no interfaces? [ 437.756659][T10341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.765562][T10341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.774959][ T5907] usb 2-1: string descriptor 0 read error: -71 [ 437.782071][ T5907] usb 2-1: New USB device found, idVendor=1708, idProduct=000e, bcdDevice=ad.b1 [ 437.791226][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=70 [ 437.802375][ T5907] usb 2-1: config 0 descriptor?? [ 437.808055][ T5907] usb 2-1: can't set config #0, error -71 [ 437.816832][ T5907] usb 2-1: USB disconnect, device number 53 [ 437.874558][ T5844] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 438.275072][ T5844] gspca_sunplus: reg_w_riv err -71 [ 438.282351][ T5844] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 438.292971][ T5844] usb 4-1: USB disconnect, device number 122 [ 438.474486][ T5907] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 438.574557][ T5908] usb 2-1: new low-speed USB device number 54 using dummy_hcd [ 438.635871][ T5907] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 438.646422][ T5907] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 438.658084][ T5907] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 438.667732][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.675764][ T5907] usb 6-1: Product: syz [ 438.679915][ T5907] usb 6-1: Manufacturer: syz [ 438.687882][ T5907] usb 6-1: SerialNumber: syz [ 438.704484][ T5908] usb 2-1: device descriptor read/64, error -71 [ 438.897135][T10346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.906766][T10346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.917754][ T5907] usb 6-1: 0:2 : does not exist [ 438.931188][ T5907] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 438.945551][ T5908] usb 2-1: new low-speed USB device number 55 using dummy_hcd [ 439.013044][ T5907] usb 6-1: USB disconnect, device number 17 [ 439.042755][ T9603] udevd[9603]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 439.084592][ T5908] usb 2-1: device descriptor read/64, error -71 [ 439.194647][ T5908] usb usb2-port1: attempt power cycle [ 439.254450][ T5844] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 439.394476][ T5844] usb 4-1: device descriptor read/64, error -71 [ 439.470519][T10357] binder: 10356:10357 ioctl c0306201 200000000640 returned -22 [ 439.478515][T10357] binder: 10356:10357 ioctl 4008af74 200000000000 returned -22 [ 439.544915][ T5908] usb 2-1: new low-speed USB device number 56 using dummy_hcd [ 439.577211][ T5908] usb 2-1: device descriptor read/8, error -71 [ 439.634491][ T5844] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 439.774484][ T5844] usb 4-1: device descriptor read/64, error -71 [ 439.814585][ T5908] usb 2-1: new low-speed USB device number 57 using dummy_hcd [ 439.845362][ T5908] usb 2-1: device descriptor read/8, error -71 [ 439.885563][ T5844] usb usb4-port1: attempt power cycle [ 439.955065][ T5908] usb usb2-port1: unable to enumerate USB device [ 439.970845][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.977328][ T5907] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 439.985043][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.224466][ T5844] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 440.255726][ T5844] usb 4-1: device descriptor read/8, error -71 [ 440.504470][ T5844] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 440.530713][ T5844] usb 4-1: device descriptor read/8, error -71 [ 440.645337][ T5844] usb usb4-port1: unable to enumerate USB device [ 442.424475][ T5844] usb 4-1: new low-speed USB device number 127 using dummy_hcd [ 442.578262][ T5844] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 442.586732][ T5844] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 442.595305][ T5844] usb 4-1: config 0 has no interface number 0 [ 442.601410][ T5844] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 442.617521][ T5844] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 442.627723][ T5844] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 442.637697][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.655188][ T5844] usb 4-1: config 0 descriptor?? [ 442.890642][T10373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.903552][T10373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.377225][T10381] netlink: 'syz.4.1189': attribute type 6 has an invalid length. [ 454.475472][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 454.489027][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 454.496880][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 454.505121][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 454.513241][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 456.524572][ T5828] Bluetooth: hci1: command tx timeout [ 457.350839][ T1299] ================================================================== [ 457.358942][ T1299] BUG: KASAN: slab-use-after-free in handle_tx+0x466/0x610 [ 457.366176][ T1299] Read of size 1 at addr ffff888032a1e490 by task aoe_tx0/1299 [ 457.373715][ T1299] [ 457.376054][ T1299] CPU: 0 UID: 0 PID: 1299 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 457.376079][ T1299] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 457.376086][ T1299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 457.376102][ T1299] Call Trace: [ 457.376109][ T1299] [ 457.376116][ T1299] dump_stack_lvl+0x189/0x250 [ 457.376135][ T1299] ? __virt_addr_valid+0x1c8/0x5c0 [ 457.376154][ T1299] ? rcu_is_watching+0x15/0xb0 [ 457.376178][ T1299] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.376193][ T1299] ? rcu_is_watching+0x15/0xb0 [ 457.376209][ T1299] ? lock_release+0x4b/0x3b0 [ 457.376230][ T1299] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 457.376248][ T1299] ? __virt_addr_valid+0x1c8/0x5c0 [ 457.376264][ T1299] ? __virt_addr_valid+0x4a5/0x5c0 [ 457.376280][ T1299] print_report+0xca/0x240 [ 457.376296][ T1299] ? handle_tx+0x466/0x610 [ 457.376315][ T1299] kasan_report+0x118/0x150 [ 457.376332][ T1299] ? handle_tx+0x466/0x610 [ 457.376356][ T1299] handle_tx+0x466/0x610 [ 457.376382][ T1299] dev_hard_start_xmit+0x2cd/0x800 [ 457.376408][ T1299] __dev_queue_xmit+0x1493/0x3140 [ 457.376431][ T1299] ? __dev_queue_xmit+0x289/0x3140 [ 457.376450][ T1299] ? ksys_unshare+0x4c8/0x8c0 [ 457.376468][ T1299] ? __pfx___dev_queue_xmit+0x10/0x10 [ 457.376487][ T1299] ? do_raw_spin_lock+0x121/0x290 [ 457.376511][ T1299] ? do_raw_spin_unlock+0x122/0x240 [ 457.376530][ T1299] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 457.376551][ T1299] ? _raw_spin_unlock_irq+0x23/0x50 [ 457.376567][ T1299] ? lockdep_hardirqs_on+0x98/0x140 [ 457.376585][ T1299] tx+0x6b/0x190 [ 457.376598][ T1299] ? __pfx_tx+0x10/0x10 [ 457.376612][ T1299] kthread+0x1d0/0x3e0 [ 457.376637][ T1299] ? __pfx_kthread+0x10/0x10 [ 457.376657][ T1299] ? __pfx_default_wake_function+0x10/0x10 [ 457.376680][ T1299] ? __kthread_parkme+0x7b/0x200 [ 457.376705][ T1299] ? __kthread_parkme+0x1a1/0x200 [ 457.376730][ T1299] kthread+0x711/0x8a0 [ 457.376749][ T1299] ? __pfx_kthread+0x10/0x10 [ 457.376770][ T1299] ? __pfx_kthread+0x10/0x10 [ 457.376788][ T1299] ? _raw_spin_unlock_irq+0x23/0x50 [ 457.376804][ T1299] ? lockdep_hardirqs_on+0x98/0x140 [ 457.376820][ T1299] ? __pfx_kthread+0x10/0x10 [ 457.376837][ T1299] ret_from_fork+0x599/0xb30 [ 457.376857][ T1299] ? __pfx_ret_from_fork+0x10/0x10 [ 457.376882][ T1299] ? __switch_to_asm+0x39/0x70 [ 457.376899][ T1299] ? __switch_to_asm+0x33/0x70 [ 457.376917][ T1299] ? __pfx_kthread+0x10/0x10 [ 457.376934][ T1299] ret_from_fork_asm+0x1a/0x30 [ 457.376959][ T1299] [ 457.376965][ T1299] [ 457.619409][ T1299] Allocated by task 8597: [ 457.623720][ T1299] kasan_save_track+0x3e/0x80 [ 457.628384][ T1299] __kasan_kmalloc+0x93/0xb0 [ 457.632957][ T1299] __kmalloc_cache_noprof+0x3e2/0x700 [ 457.638313][ T1299] alloc_tty_struct+0xa6/0x780 [ 457.643054][ T1299] tty_init_dev+0x59/0x4d0 [ 457.647449][ T1299] tty_open+0x5a6/0xd10 [ 457.651587][ T1299] chrdev_open+0x4cc/0x5e0 [ 457.655981][ T1299] do_dentry_open+0x785/0x14e0 [ 457.660725][ T1299] vfs_open+0x3b/0x340 [ 457.664773][ T1299] path_openat+0x2de0/0x3840 [ 457.669344][ T1299] do_filp_open+0x1fa/0x410 [ 457.673831][ T1299] do_sys_openat2+0x121/0x200 [ 457.678487][ T1299] __x64_sys_openat+0x138/0x170 [ 457.683319][ T1299] do_syscall_64+0xfa/0xf80 [ 457.687806][ T1299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.693681][ T1299] [ 457.695983][ T1299] Freed by task 5908: [ 457.699939][ T1299] kasan_save_track+0x3e/0x80 [ 457.704602][ T1299] kasan_save_free_info+0x46/0x50 [ 457.709619][ T1299] __kasan_slab_free+0x5c/0x80 [ 457.714361][ T1299] kfree+0x1c0/0x660 [ 457.718249][ T1299] process_one_work+0x93a/0x15a0 [ 457.723171][ T1299] worker_thread+0x9b0/0xee0 [ 457.727741][ T1299] kthread+0x711/0x8a0 [ 457.731785][ T1299] ret_from_fork+0x599/0xb30 [ 457.736358][ T1299] ret_from_fork_asm+0x1a/0x30 [ 457.741108][ T1299] [ 457.743411][ T1299] Last potentially related work creation: [ 457.749104][ T1299] kasan_save_stack+0x3e/0x60 [ 457.753764][ T1299] kasan_record_aux_stack+0xbd/0xd0 [ 457.758945][ T1299] insert_work+0x3d/0x330 [ 457.763258][ T1299] __queue_work+0xcd0/0xf90 [ 457.767742][ T1299] queue_work_on+0x181/0x270 [ 457.772312][ T1299] tty_release_struct+0xb8/0xd0 [ 457.777141][ T1299] tty_release+0xcb0/0x1720 [ 457.781625][ T1299] __fput+0x44c/0xa70 [ 457.785588][ T1299] task_work_run+0x1d4/0x260 [ 457.790159][ T1299] do_exit+0x8bd/0x25b0 [ 457.794293][ T1299] do_group_exit+0x21c/0x2d0 [ 457.798862][ T1299] get_signal+0x1285/0x1340 [ 457.803347][ T1299] arch_do_signal_or_restart+0x9a/0x7a0 [ 457.808878][ T1299] irqentry_exit+0x177/0x660 [ 457.813452][ T1299] exc_page_fault+0xab/0x100 [ 457.818019][ T1299] asm_exc_page_fault+0x26/0x30 [ 457.822847][ T1299] [ 457.825151][ T1299] The buggy address belongs to the object at ffff888032a1e000 [ 457.825151][ T1299] which belongs to the cache kmalloc-cg-2k of size 2048 [ 457.839441][ T1299] The buggy address is located 1168 bytes inside of [ 457.839441][ T1299] freed 2048-byte region [ffff888032a1e000, ffff888032a1e800) [ 457.853389][ T1299] [ 457.855693][ T1299] The buggy address belongs to the physical page: [ 457.862090][ T1299] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888032a19000 pfn:0x32a18 [ 457.872136][ T1299] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 457.880608][ T1299] memcg:ffff888024d4c181 [ 457.884823][ T1299] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 457.893302][ T1299] page_type: f5(slab) [ 457.897267][ T1299] raw: 00fff00000000240 ffff88813fe303c0 ffffea0001fb7210 ffffea0000d30a10 [ 457.905835][ T1299] raw: ffff888032a19000 0000000000080007 00000000f5000000 ffff888024d4c181 [ 457.914405][ T1299] head: 00fff00000000240 ffff88813fe303c0 ffffea0001fb7210 ffffea0000d30a10 [ 457.923057][ T1299] head: ffff888032a19000 0000000000080007 00000000f5000000 ffff888024d4c181 [ 457.931708][ T1299] head: 00fff00000000003 ffffea0000ca8601 00000000ffffffff 00000000ffffffff [ 457.940360][ T1299] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 457.949006][ T1299] page dumped because: kasan: bad access detected [ 457.955407][ T1299] page_owner tracks the page as allocated [ 457.961101][ T1299] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5823, tgid 5823 (syz-executor), ts 72079581570, free_ts 72040728710 [ 457.982442][ T1299] post_alloc_hook+0x234/0x290 [ 457.987199][ T1299] get_page_from_freelist+0x2365/0x2440 [ 457.992726][ T1299] __alloc_frozen_pages_noprof+0x181/0x370 [ 457.998515][ T1299] alloc_pages_mpol+0x232/0x4a0 [ 458.003347][ T1299] allocate_slab+0x86/0x3b0 [ 458.007834][ T1299] ___slab_alloc+0xf2b/0x1960 [ 458.012489][ T1299] __slab_alloc+0x65/0x100 [ 458.016883][ T1299] __kmalloc_noprof+0x47d/0x800 [ 458.021715][ T1299] __register_sysctl_table+0x72/0x1340 [ 458.027152][ T1299] __devinet_sysctl_register+0x37f/0x470 [ 458.032764][ T1299] devinet_sysctl_register+0x187/0x200 [ 458.038199][ T1299] inetdev_init+0x2b1/0x4f0 [ 458.042679][ T1299] inetdev_event+0x2f1/0x15b0 [ 458.047335][ T1299] notifier_call_chain+0x19d/0x3a0 [ 458.052426][ T1299] register_netdevice+0x15bd/0x1a70 [ 458.057606][ T1299] nsim_create+0xb3f/0x1050 [ 458.062100][ T1299] page last free pid 5848 tgid 5848 stack trace: [ 458.068402][ T1299] __free_frozen_pages+0xbc8/0xd30 [ 458.073496][ T1299] __put_partials+0x146/0x170 [ 458.078151][ T1299] put_cpu_partial+0x1f2/0x2d0 [ 458.082893][ T1299] __slab_free+0x288/0x2a0 [ 458.087289][ T1299] qlist_free_all+0x97/0x100 [ 458.091863][ T1299] kasan_quarantine_reduce+0x148/0x160 [ 458.097311][ T1299] __kasan_slab_alloc+0x22/0x80 [ 458.102151][ T1299] kmem_cache_alloc_node_noprof+0x43c/0x720 [ 458.108027][ T1299] __alloc_skb+0x255/0x430 [ 458.112423][ T1299] netlink_ack+0x146/0xa50 [ 458.116820][ T1299] netlink_rcv_skb+0x28c/0x470 [ 458.121563][ T1299] netlink_unicast+0x82f/0x9e0 [ 458.126308][ T1299] netlink_sendmsg+0x805/0xb30 [ 458.131065][ T1299] sock_sendmsg_nosec+0x18f/0x1d0 [ 458.136085][ T1299] __sys_sendto+0x3ce/0x540 [ 458.140571][ T1299] __x64_sys_sendto+0xde/0x100 [ 458.145313][ T1299] [ 458.147618][ T1299] Memory state around the buggy address: [ 458.153227][ T1299] ffff888032a1e380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 458.161269][ T1299] ffff888032a1e400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 458.169309][ T1299] >ffff888032a1e480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 458.177346][ T1299] ^ [ 458.181910][ T1299] ffff888032a1e500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 458.189948][ T1299] ffff888032a1e580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 458.197985][ T1299] ================================================================== [ 458.206125][ T1299] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 458.213308][ T1299] CPU: 0 UID: 0 PID: 1299 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 458.223874][ T1299] Tainted: [L]=SOFTLOCKUP [ 458.228178][ T1299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 458.238213][ T1299] Call Trace: [ 458.241478][ T1299] [ 458.244396][ T1299] dump_stack_lvl+0x99/0x250 [ 458.248970][ T1299] ? __asan_memcpy+0x40/0x70 [ 458.253545][ T1299] ? __pfx_dump_stack_lvl+0x10/0x10 [ 458.258724][ T1299] ? __pfx__printk+0x10/0x10 [ 458.263303][ T1299] vpanic+0x237/0x6d0 [ 458.267272][ T1299] ? __pfx_vpanic+0x10/0x10 [ 458.271760][ T1299] panic+0xb9/0xc0 [ 458.275465][ T1299] ? __pfx_panic+0x10/0x10 [ 458.279863][ T1299] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 458.285736][ T1299] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 458.291609][ T1299] ? is_module_address+0x17/0xf0 [ 458.296533][ T1299] ? handle_tx+0x466/0x610 [ 458.300935][ T1299] check_panic_on_warn+0x89/0xb0 [ 458.305857][ T1299] ? handle_tx+0x466/0x610 [ 458.310262][ T1299] end_report+0x6f/0x140 [ 458.314488][ T1299] kasan_report+0x129/0x150 [ 458.318975][ T1299] ? handle_tx+0x466/0x610 [ 458.323378][ T1299] handle_tx+0x466/0x610 [ 458.327609][ T1299] dev_hard_start_xmit+0x2cd/0x800 [ 458.332710][ T1299] __dev_queue_xmit+0x1493/0x3140 [ 458.337720][ T1299] ? __dev_queue_xmit+0x289/0x3140 [ 458.342812][ T1299] ? ksys_unshare+0x4c8/0x8c0 [ 458.347475][ T1299] ? __pfx___dev_queue_xmit+0x10/0x10 [ 458.352830][ T1299] ? do_raw_spin_lock+0x121/0x290 [ 458.357839][ T1299] ? do_raw_spin_unlock+0x122/0x240 [ 458.363019][ T1299] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 458.368898][ T1299] ? _raw_spin_unlock_irq+0x23/0x50 [ 458.374087][ T1299] ? lockdep_hardirqs_on+0x98/0x140 [ 458.379265][ T1299] tx+0x6b/0x190 [ 458.382792][ T1299] ? __pfx_tx+0x10/0x10 [ 458.386925][ T1299] kthread+0x1d0/0x3e0 [ 458.390980][ T1299] ? __pfx_kthread+0x10/0x10 [ 458.395556][ T1299] ? __pfx_default_wake_function+0x10/0x10 [ 458.401348][ T1299] ? __kthread_parkme+0x7b/0x200 [ 458.406275][ T1299] ? __kthread_parkme+0x1a1/0x200 [ 458.411287][ T1299] kthread+0x711/0x8a0 [ 458.415340][ T1299] ? __pfx_kthread+0x10/0x10 [ 458.419915][ T1299] ? __pfx_kthread+0x10/0x10 [ 458.424485][ T1299] ? _raw_spin_unlock_irq+0x23/0x50 [ 458.429662][ T1299] ? lockdep_hardirqs_on+0x98/0x140 [ 458.434840][ T1299] ? __pfx_kthread+0x10/0x10 [ 458.439410][ T1299] ret_from_fork+0x599/0xb30 [ 458.443986][ T1299] ? __pfx_ret_from_fork+0x10/0x10 [ 458.449087][ T1299] ? __switch_to_asm+0x39/0x70 [ 458.453833][ T1299] ? __switch_to_asm+0x33/0x70 [ 458.458580][ T1299] ? __pfx_kthread+0x10/0x10 [ 458.463154][ T1299] ret_from_fork_asm+0x1a/0x30 [ 458.467906][ T1299] [ 458.471249][ T1299] Kernel Offset: disabled [ 458.475555][ T1299] Rebooting in 86400 seconds..