last executing test programs: 6m13.827936537s ago: executing program 3 (id=168): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000004400050000000000000000ac6000"/137], 0xfc}}, 0x20004055) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f001600060005", 0x2f}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0xc040) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x2c, 0x2, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x755}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TUPLE_MASTER={0x4}]}, 0x2c}}, 0x24000881) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000101010200000000000000000a00000908001a4000010000080015400000496d0c001880080003400000397d38"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x18, 0x0, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643dbb15ac869d684f395fc0977f4a323d844e9c86", @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r5, r6, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$alg(0x26, 0x5, 0x0) fremovexattr(r0, &(0x7f00000003c0)=@known='system.posix_acl_access\x00') kexec_load(0x0, 0x1, &(0x7f0000000740)=[{0x0, 0x0, 0x1, 0x3ff}], 0x1) mount$9p_fd(0x0, 0x0, 0x0, 0x2000090, &(0x7f0000000280)) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0x0, r4, {0x7, 0x2d, 0x3, 0x40008, 0x6, 0x5, 0x4, 0x62c40000, 0x0, 0x0, 0x1, 0x2}}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x3002a8d, 0x1) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) close(r9) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r11 = dup(r10) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r11, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) mmap$qrtrtun(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x5, 0x13, r7, 0x8) 6m13.597292305s ago: executing program 3 (id=171): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, 0x0, &(0x7f0000000180)) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x1dc}]}) 6m13.125667401s ago: executing program 3 (id=174): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r2, &(0x7f0000003080)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2455, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000001840)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x2e, 0x0, 0x1, 0x7}}}], 0x18}}], 0x1, 0x400c404) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000100), &(0x7f0000000180), 0x2, 0x1) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$nfc_llcp(r3, 0x118, 0x2, &(0x7f0000000000)=""/36, 0x24) ioctl$OCFS2_IOC_GROUP_ADD(r1, 0x40186f02, &(0x7f0000000080)={0x8000000000000000, 0x1, 0x4, 0x9}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 6m12.915878634s ago: executing program 3 (id=175): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, '\x00', @raw_data=[0x400, 0x9, 0xcc3, 0x6, 0xfffffffa, 0x4, 0x1, 0x0, 0xfff, 0x2, 0x8, 0x10001, 0xed, 0x6, 0x1, 0x8, 0x9, 0x8, 0x5, 0x4, 0x5, 0xa, 0x3, 0x6, 0x10, 0x8, 0xf7d, 0x69, 0x4, 0x2, 0x3, 0xfffffff7]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(0x3) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0x4, 0x102, 0x0, {0xe83, 0x400, 0xd, 0x2}}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) 6m11.429735916s ago: executing program 3 (id=177): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000cad000/0x3000)=nil, 0x3000}) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40002400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc040}, 0x80) listen(r3, 0x6) accept4$inet6(r3, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x80, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x64, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x40}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x40000002}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x80}}, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x2, 0x4a, &(0x7f0000000040)=""/74) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x280800, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r5}, './file0\x00'}) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000100)=""/41, 0x29}], 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) fstat(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r8, 0xee01) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 6m10.614359466s ago: executing program 3 (id=180): socket$packet(0x11, 0x2, 0x300) (async) r0 = gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r3 = getpgrp(0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd2d, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) (async) syz_open_dev$video4linux(0x0, 0x92e2, 0x0) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)=0x0) (async) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r5, 0x8001) r6 = accept4(r5, 0x0, 0x0, 0x80000) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x42000) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000180)=0x80000003) (async) ioctl$CEC_S_MODE(r7, 0xc05c6104, &(0x7f00000000c0)=0x7) (async) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000640)=ANY=[], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0x25cd, &(0x7f0000000200)=ANY=[@ANYRES64=r4, @ANYBLOB="b502feede97b0c811d1f85eae1f023dbe3f143fca0f18fad66570358d14bfd303f0d9d445e3a2ac31c284ff3002b92a2a1f8e29283800f813bd3396d628ed655560f37a99472db"]) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r9, 0x80108907, 0x0) setsockopt$packet_int(r6, 0x107, 0x12, &(0x7f0000000080)=0x5, 0x4) (async) ioctl$SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f0000000000)) (async) socket$packet(0x11, 0x3, 0x300) r10 = socket$kcm(0x10, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000cc0)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfeedcafe, 0x0, 0x0, 0x2, 0x3}}) (async) sendmsg$inet(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5c00000012006bab9a3fe3d86e17aa0a04a49bfc8ac0f8ffa0f7c11855406d929a6bc26c068c0819c8cf876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb76b57994eee7d14e3eacc1e571368adba1ad74aaeb5756231df995fd089ccfc25bcb862a4d75d4076abcbc1a4dbb68911bfca910bef1d51bcb47a1971122ca873802197bfe33398ea5866340b2415341c84bf93fe9c5e1fdfeab08fb8ef3a5c5556a6391ac972b542afa0bf4885abf", 0xd7}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) keyctl$set_reqkey_keyring(0xe, 0x5) r11 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r11, 0xc0845657, &(0x7f00000008c0)={0x0, @reserved}) 5m55.211509058s ago: executing program 32 (id=180): socket$packet(0x11, 0x2, 0x300) (async) r0 = gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r3 = getpgrp(0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd2d, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) (async) syz_open_dev$video4linux(0x0, 0x92e2, 0x0) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)=0x0) (async) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r5, 0x8001) r6 = accept4(r5, 0x0, 0x0, 0x80000) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x42000) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000180)=0x80000003) (async) ioctl$CEC_S_MODE(r7, 0xc05c6104, &(0x7f00000000c0)=0x7) (async) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000640)=ANY=[], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0x25cd, &(0x7f0000000200)=ANY=[@ANYRES64=r4, @ANYBLOB="b502feede97b0c811d1f85eae1f023dbe3f143fca0f18fad66570358d14bfd303f0d9d445e3a2ac31c284ff3002b92a2a1f8e29283800f813bd3396d628ed655560f37a99472db"]) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r9, 0x80108907, 0x0) setsockopt$packet_int(r6, 0x107, 0x12, &(0x7f0000000080)=0x5, 0x4) (async) ioctl$SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f0000000000)) (async) socket$packet(0x11, 0x3, 0x300) r10 = socket$kcm(0x10, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000cc0)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfeedcafe, 0x0, 0x0, 0x2, 0x3}}) (async) sendmsg$inet(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="5c00000012006bab9a3fe3d86e17aa0a04a49bfc8ac0f8ffa0f7c11855406d929a6bc26c068c0819c8cf876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb76b57994eee7d14e3eacc1e571368adba1ad74aaeb5756231df995fd089ccfc25bcb862a4d75d4076abcbc1a4dbb68911bfca910bef1d51bcb47a1971122ca873802197bfe33398ea5866340b2415341c84bf93fe9c5e1fdfeab08fb8ef3a5c5556a6391ac972b542afa0bf4885abf", 0xd7}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) keyctl$set_reqkey_keyring(0xe, 0x5) r11 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r11, 0xc0845657, &(0x7f00000008c0)={0x0, @reserved}) 5m33.804177607s ago: executing program 4 (id=371): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x40, 0x77}, {@rand_addr=0x64010102, 0x4e24, 0x1, 0x80000000, 0x12d5f, 0x7}}, 0x44) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x0}) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x3, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000240)=0x6120, 0x4) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) socket$packet(0x11, 0x2, 0x300) r5 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r5, 0xc0305710, &(0x7f0000000040)={0x1, 0x7c, 0x1f, 0x0, 0x7}) read$midi(r5, 0x0, 0x3b) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r6, 0x5100) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) r7 = fanotify_init(0x1a, 0x800) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r7, 0x441, 0x4800001a, r8, 0x0) r9 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xa0) fallocate(r9, 0x0, 0x1, 0x1001f0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@appraise_type}, {@fsmagic={'fsmagic', 0x3d, 0x983}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x88) sendto$packet(r3, &(0x7f00000002c0)="fb57975e267951722b395d37bac8", 0xe, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2000) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz '], 0x2a, 0xfffffffffffffff9) 5m33.269497745s ago: executing program 4 (id=374): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_clone(0xd1358280, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="ab4c56950c1eb380bcf7337d3dd0517a73b53cee33ffff5f0f85afec0e429afd050000009088b8f76f37c6db7c32d970cdb836063275b98582c26a25f755ede3382c8a88470ca4095a303dfcc131474cc6bb6d1202fe873debc1a3e6241da1f99cafa7060c716156b1e51a525f87ed2799c50d063603c2a34dc8205b71e291f373f0c37d612fcc1654de8e77041f65208af1cea6ddd017dc4da8a055") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYRES32=0x0, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 5m31.32416046s ago: executing program 4 (id=380): r0 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffed2, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r0, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x3c}, 0x8, 0x3000000000002, 0x0, 0x4000}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) r3 = openat$6lowpan_enable(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) close(r3) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r4, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 5m31.082381375s ago: executing program 4 (id=381): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) setxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)=@known='system.advise\x00', &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x21, 0x3) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x4) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) landlock_restrict_self(r2, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000580)={0x48, r1, 0x1, 0x70bd29, 0x25dfdc00, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xd}, @device_b, @broadcast, @from_mac, {0x3, 0x6}}, 0x41, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x2c048010) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), 0xffffffffffffffff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) setxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)=@known='system.advise\x00', &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x21, 0x3) (async) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) umount2(&(0x7f0000000380)='./file0\x00', 0x4) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) (async) landlock_restrict_self(r2, 0x8) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002480)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000580)={0x48, r1, 0x1, 0x70bd29, 0x25dfdc00, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xd}, @device_b, @broadcast, @from_mac, {0x3, 0x6}}, 0x41, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x2c048010) (async) 5m30.848275134s ago: executing program 4 (id=383): r0 = socket(0x2, 0x80805, 0x0) r1 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) fcntl$addseals(r1, 0x409, 0x8) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x2007}) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10dfe000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003000601000004000200110000", 0x5b}, {&(0x7f0000000680)='\'', 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x8013, r1, 0x117c0000) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000100)="434bcef7702b9e8aa099e962ce13a8ece34d7f7a8d47618914a2af422404a601277d25edbdfa4061658913b61d4032a2dc1b1b0c611d658cdc7f3f8ae7b13be7d28ce814fb5533d26f32470685db95998a4e4321b0aefa67be20e3a4255926147a8b3cd6f148e38a802d498f883292ae", 0x70}, {&(0x7f00000001c0)="62a4ec09d4a13dc328b9c51b2813d4f9f3575474cb48128394d7ba319db95817d60504b0a5972a8b7a0193ad62a62d0c4af334e6acfd1209d73200dd7ecf26db3d254d17079975cdbc80d79557627efe9288474c74d2a4ed2d5f7e9a5f656be47a7f9d9313a02d835a837f07c37e623392fc", 0x72}], 0x2}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359c", 0x34000}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c"], 0x30}], 0x1, 0x0) 5m29.740916594s ago: executing program 4 (id=390): prctl$PR_GET_TSC(0x3d, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0xedbfd97defece545) mount$overlay(0x0, &(0x7f0000000440)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000900)={[{@index_on}]}) 5m29.081066624s ago: executing program 33 (id=390): prctl$PR_GET_TSC(0x3d, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0xedbfd97defece545) mount$overlay(0x0, &(0x7f0000000440)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000900)={[{@index_on}]}) 14.46853891s ago: executing program 2 (id=1775): r0 = userfaultfd(0x80001) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getpid() (async) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000401000/0x2000)=nil, 0x2000}) (async, rerun: 32) r1 = syz_open_dev$sndpcmc(&(0x7f0000001180), 0x0, 0x0) (rerun: 32) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r1, 0x40044104, &(0x7f00000011c0)) (async, rerun: 32) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff4]}, 0x8) (rerun: 32) fcntl$F_SET_RW_HINT(r2, 0x40c, 0x0) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0x47, 0x16, 0x9e, 0x8, 0x55f, 0xa800, 0x352f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0xf, 0x60, 0x6, "", [{{0x9, 0x4, 0xda, 0x1, 0x0, 0xd6, 0x39, 0x94, 0x54}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 13.817676253s ago: executing program 2 (id=1780): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (async) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x3, @multicast1}}, 0x1e) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r2) (async) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) (async) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x4800003e, r3, 0x0) (async) vmsplice(r4, &(0x7f0000000240)=[{&(0x7f0000000040)='d', 0x1}], 0x1, 0xf) read$FUSE(r3, &(0x7f00000002c0)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200, 0xf0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) (async) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x5, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) listen(r6, 0x9) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x8800c4, 0x0) 13.65408251s ago: executing program 2 (id=1784): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r0, &(0x7f00000001c0)=""/95, 0x2) 13.349810123s ago: executing program 2 (id=1787): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000002030300000000000000000000000000080095f6da800000"], 0x1c}}, 0x40) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x800, &(0x7f00000007c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) (async) epoll_create(0x7) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) (async) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000010301"], 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 13.065248724s ago: executing program 2 (id=1792): syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b90"], 0x0) syz_usb_connect$uac1(0x5, 0xeb, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x534d, 0x2109, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd9, 0x3, 0x1, 0x5, 0x28, 0x89, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x40, 0x3c}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x206, 0x6, 0x0, 0x8, 0x0, 0x6c}, @processing_unit={0xa, 0x24, 0x7, 0x2, 0x0, 0xd, "ca2bf6"}, @processing_unit={0x8, 0x24, 0x7, 0x5, 0x4, 0x0, '8'}, @extension_unit={0x7, 0x24, 0x8, 0x1, 0xe, 0x1}, @extension_unit={0xd, 0x24, 0x8, 0x3, 0x400, 0x5, "297ce4ae3b23"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0x0, 0x5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xef9, 0x8, 0x0, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x3, 0xf}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x77, 0x2, 0x6, 0x13, "adc5dc94"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x2e, 0x3, {0x7, 0x25, 0x1, 0x4, 0xfa, 0x227}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0xa, 0x2, 0x40, 0x2, "9c0e00", "2b3f1f"}, @as_header={0x7, 0x24, 0x1, 0xc1, 0x7, 0x1002}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xa, 0x4, 0x10, 0x3, "9efd", "c0"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xfa, 0xc, 0x6, {0x7, 0x25, 0x1, 0x0, 0x5, 0x2}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0x23, 0x8, 0x3, 0xff, 0x88}, 0x2b, &(0x7f0000000240)={0x5, 0xf, 0x2b, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x5, 0x6, 0x730d}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0xe, 0x3}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x87, 0x0, 0x100, 0xf0f, 0x4}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x860}}]}) 12.388271278s ago: executing program 2 (id=1795): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036571a20cd0c8000fe67010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000280)={0x0, 0x14, 0x8, "ab431e809bf87af0"}, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036571a20cd0c8000fe67010203010902120001000000000904"], 0x0) (async) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000280)={0x0, 0x14, 0x8, "ab431e809bf87af0"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 8.467478205s ago: executing program 1 (id=1821): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x5af, {0xfeffffffffffffff, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0xff, 0x8000000000000, 0x0, 0x21, 0x7, 0x1, 0x8000, 0x0, r2, r3, 0x1000003, 0x7d1d}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000001340)='./file0\x00', 0x80101, 0x8c) write$FUSE_NOTIFY_RETRIEVE(r4, 0x0, 0x0) dup2(r4, r0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0x46, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r6 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="00020201"], 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x62040200) syz_usb_connect(0x2, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000084a48e08d112f74247aa000000010902"], 0x0) r7 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, &(0x7f0000000140)={'mangle\x00', 0x0, [0x800e2fa, 0x4de, 0x7fff, 0x4, 0x4]}, &(0x7f0000000280)=0x54) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f40000002c00070128bd7000ffdbdf25057c00001400f40000000000000000000000ffff7f000001cc000380c700de004d250987ae1f488ebced94423f735de9a2a61d256e2a8ed8551faa8539548db202cbc4cf82825fe3e8cadee1561b064fa39bd003d557f00debe3c37f530d27beb5bfe067f7b13529ba4ecc355fcac8b134cd592cefc9a9cffd88b439795f82ea89ca6e354bd701a9073630a357e6d3562a11be1e77a5a092f6e67d90af4c9b0b8a9bb5457cf938d96a9bb771207c89ec044328fea0402c3f34e68f2290e5f394660b3b2249bfa19b896a02a9b8f67b9fcfe347dc325d40695f8ddf8fdf63722f6aef3c00"], 0xf4}, 0x1, 0x0, 0x0, 0x4c844}, 0xc090) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x10000000}, 0x1c) r9 = dup(r6) write$P9_RGETLOCK(r9, &(0x7f00000010c0)=ANY=[], 0x28) 5.711005137s ago: executing program 1 (id=1829): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1d9}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x11b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000180)=0x264, 0x4) move_mount(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000200)='./file0\x00', 0x50) ioctl$SNDCTL_SEQ_GETTIME(r2, 0x80045113, &(0x7f0000000240)) (async) renameat(r2, &(0x7f0000000280)='./file0\x00', r2, &(0x7f00000002c0)='./file0\x00') (async) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) sendmsg$qrtr(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="b17884f428b344c323e364e8bb68d4d849d9f5b05a0be8ef618e2164de5e97726cb10fefc6de940254c602337fe4dc56c34561fbe6b78b2121043052b497df2f4638a44a5236be6e27d1e52e4332fefeea95d1626d0ee80715c10566f9a1a0bbc102", 0x62}, {&(0x7f0000000380)="dcba4d499ac0e09091b7a372858772051eeccc5475a39aab10fc0e9cd96b6b9b599c1705184adc68b467edfe256e0ba20b45088708fb60d2aa246a1b456eab379c112f466ba42936799389296e82a6416de2450d93f31a9e06195f9fed49736f2a38b1b4b9cc1f2995865269a5337d5bbb23f6de4c76273494b61c3874ecddbb0cc33d750b6baa6aa56fc87a4cceb0a99719f40b2aa95f9ebadbec5edb5a22636789a4d3851d30eaed94ad406734fa1d6e17a6274fac59518e3b82bcb7a8a4382f5f0763f2b89bec681cc1bc2bd21df1e58d", 0xd2}], 0x2}, 0x38) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$team(&(0x7f0000000540), r2) (async, rerun: 64) r3 = accept4$rose(r2, &(0x7f0000000580)=@full={0xb, @remote, @netrom, 0x0, [@remote, @null, @remote, @null, @rose, @default]}, &(0x7f00000005c0)=0x40, 0x0) (rerun: 64) r4 = dup(r3) setsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000600), 0x4) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000640)=0x1, 0x4) (async) getsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000680), &(0x7f00000006c0)=0xe) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) r5 = add_key$user(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x1}, &(0x7f0000000780)="5a588b9685ae7f2ee1a46b4524f5b91a8ad923868560a7220cefc42dca7677880c0d5e658f87e269f88a8805aa99031c64b5ecbccf33f59d2c06f4117b2a12797c3ee8a5021d4db3aac8ee0f7aa0823f02b72e00929fc8cb4ccd6186ead538090f5ecdbee9edf4c0efaef54f821225298f8d16e2475e231fe3d1ea072656051c212688a9b4b53e83727bea8b907205f517dbecbb8833fcbf4522d200", 0x9c, 0xfffffffffffffff8) (async) r6 = add_key$user(&(0x7f0000000840), &(0x7f0000000880)={'syz', 0x2}, &(0x7f00000008c0)="981e4e18fa9fbdd19d228e92ed929f4495d4ee35376e409c6ad1a162d9cccd05fb9903da34317e61fe", 0x29, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000900)={0x0, r5, r6}, &(0x7f0000000940)=""/36, 0x24, &(0x7f0000000a00)={&(0x7f0000000980)={'sha3-384-ce\x00'}, &(0x7f00000009c0)="266d79554a764017a336e93ca1b4ffa2b67232bb638cf80b667a17aa0d3664b988fd2d02b000", 0x26}) sendmsg$inet(r4, &(0x7f0000001bc0)={&(0x7f0000000a40)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001b00)=[{&(0x7f0000000a80)="a2aa1377c42e742cdc68b4c0b65e52cf3c8e4b720f39d9291a87c118085a7688a0b0d39fc13b913a9166d5b14cefaceeea6d5d9ec80deb977bf6657a7af5ffe268ae19a9aa47c84ee353167ff3559843597a7bab8f88c55819014001ae4da5b17572b4c42c706de628aaaa", 0x6b}, {&(0x7f0000000b00)="65bd900344087c445fcfdd37085f7b8d9dd575da33b37c297286a0ed6cbace162b4354d77dcbf9b3e848f4940055b04a26fcbf19714053c3f98f1f3f0be218368bc95b2910604e8a8a8c71cd5235ae053d577427a7e3423463fb9a1e3a5e4c46720aacdc6209b18fc6628e060d03626e15f4586269083cfa33082933726f18fe04bb80604c74de838f2020c1206fbdc0a9a7aa86e8a956458a4e2d8e71a457f6aad8b0f112b7b5fcf9c20fe105ae4a22f41cd6382c455806a84ec8e2b59ec995f6d1e02b46584e416972dffcabf9a7060a36c80df3e2ff702ff786402330f1f27e0befc713a8308cb1c1d96b58c118f772fcf845364bde8525f15e0e12bb2bc0c621f05e17b6e2792318ae16b924eb15336875bf03d7a8440fab9d3ebdf235b496ac3443981da171e96235963cefccf43fbbd16bb9c5291dd3cc19de9c26acb566472248c225f691476b0a0aca9b551e2ca3a548e599944a49d0ae44cea8b182b73754c20dcfabcffffbba2f7911bdebce9ba2ca2a7a03514c9800b0949ff1f50e59892c509e3fab3bcf73fad4d548e4cc09b6196327a90f01f01e2e6276e697cbc77d8881b3717b02d8d34e40603f7e1c1851063c88f7cca030ab4c82baaeedd8664e929bb93e646c236573f0ec03831df4fee2dc47f9422f448b207a1f6409644df71cc50290ce9bf846e3e69608fb5d21b5033fd8d7a5b98d298d2c0f1f6bc6af8a43b84684b8ae3f7920271b15a24867d2c3fed9f274b3b47e83c8061497041ed5d35dcce493db8ba103b838e83496ff5b4dec43646ac0ccb54b153045653799354c16494dee75edcd59e04a735267dbbad70cee9664776f16b5555d8fbbdcbda6ea5162ddf31a2708b7a34a364e582c1287758af81e559fe826ea4827e92e22732095232eec99412d010644e918f2cd72fa6da362393b5b0f7edded0bd4ae2733c77ab1b1349c73be7064107c23ef40ee256bc3e7d4779df60dad8ca6b188c9f4b30fee17be2f2e36b850e529c3e231c8b89ad8b4716d9657d8e208ea073e9d544b57baca88634f05ab9038df0db00ed4dfc51b481b1dc886b7873e8cb3d30e12c8bbf5d4d167c86f2f3b773213889de7b789104c2d0676222fbff0b00c742993181b4c1a5be792b1297d6f0c1ececd2cc8b65c3d138b62cbc533a92b664086c66ef61dd0152b99370d0c2e27b76130de6c98f5ce72e0d3fce0150b0a3a73573ad28eef68b97c2686cfda4173c324517caac1f9a6ed9fb765c6a9d8fecdfb8c6faba516fbe2808a352516b73c67a5ff8e2de5be4002b8b21fc927b2fa5060151535206334a9a54665da1a330b3877547019600ffcfb044bb78d191592335b4302fcf51792e6d031cd701f6a78754d2a941e2e123f645630dfcb5842da371d6b5d1856da84ef41e0902cad2bedb611f5b7b87200cacc79817e672276d0abd52e96559336974bf3f017c617c7bca9cb25144f50b2c175011215f2eae9650b79d72f8370c775b9516be9121bc274cd00720c6f5f148f49a072b32c49e278716cc5e9f1cb462bd80bd145b25b3ca48887f6890647cdc289a35526641d2c9aee66ec7397b21cad7db25af323fb2bae53a1461a38ac80631c6efaaa4ed6efd878e2f925da77a58d827840ba1dfe910d95cd56d95cee0a81bbae35d64b565b1c7400da4ca47632adb6ef860c00139b04612b1bec2224b6c7ac19bbfbbb38aaefe7f51e3ec17b3e0217220d025ad75064ea606ecb7887ee35e886b958b7b94754a698c04a2a425dfed8a58432e510425acd049066cbbbb814bf4a505e6e19b9ff9cde45bd326a2334673f38f2e2779f9abfecc45402197b0b0ee8eafec453be794472c0d8243d6871f1a338cb65d713ad473c428fca5b2438e24fa843cc1b06cab36a55be632a2a9df299a51e446529f0297f41a5af0d146248a19289cdf0e8f078969abe44fb1c9e2a51128562db4f40228b4ea4fca7ff4ab3f3d489b213ab38227c345f3684c7db4aaf202428bee30ea7450ec2db37b4b919e54405eec729f84d1b94c5cf7abe1fad54e643e2797e137da4df47e49945a58e89eb66220b1ed578b866ed7a118c7044d29f8bd6fcac6e133972c900bb222ba1ce87d3ac33d61d6077d019708f82d0b673bbdf6e6ef5aef9a626ed2fe9835fb78bc54d59980a92bbe21ac5862ef062b905b02b79a224f177f14f5e1e41661f39b2f6c50cf80ad3f603efc0491aac62dc3fb65b1e2fcb33c66e07df07377dcdc822830324a7b24acbb29a5ae5a5df1479c2e0d4f1f708bddca8220d3064f4f61674170d40bb35d4c557169739e6a45f5539b858a195ac91bc9dabe90ff7bd919f3d67056f4c405ab9f9bbd115c31db99b1fdde6a5758779399588a3be4b14107bbc634d6e0a37547a6d2fff8e22628dc5ea2af6612a6bb27f43a59a0c9d3d48c3027b4b600f146c7a6a1876f90147c357e97d0e614dba7276bed39e9afa74a8df3f7dee61c5d524500d5e4d40a648a5a4e289a5d13e406ceab6512d077a103e7feb490635c98a6aaed4f2ca646296394f3d98c561f59d6bbed6ce3ce93df69c7c74016b6323910ce7963011d95c447d4147b5519d5c5cf53464cf6748374f94e895976e14658371cc87b93121643555734c5468136602804f5b1965169eb99f5eca214feeaaf6a59c2166547754995c364e67f985e055f5c189ab18b0b4f1b24840387dab600ef1047c76d0277869ae34d808ccdd83f98797fc88852d39fcff094463a902ab403ae48e53eccde9e806aa21dba7b297fa60d3bc13df0ca384ab2f5774f8e6491be4491a01ea95293b679ad688dd26af4f36f8c80e141ef94bfab62c7230220d85dceeab1d092361d6bf570063a5ac44d37c6a5ed03a84f55f618ae8e8776cfb368e877e7c21a7c69abd92662e2b80b4dd080e8d1bd764aa0825c33ba3bad17fca152424c4494e76ad3b6f1b00d8671091a5455a5f30ccfb88e54cc91a6285747abc6d047e40f7ca080607a37406dc0a137c18f274e91aa5c4ede13899ae011df9be626a21a094060173a50ef59af2139c6e96eb7f8495dd74d30f2d1473f28fb34cf9b04af5325c16cdf1ff9b57ac7693d5600c5b7d07a44531d1b8db2d748fcec53a31566e2b0d4e75c1ea1854a10b681ce3069b8450c2e0ff7bc12e1c62e86cc0b8e9534cc5b003dae5e8b0158d93dbd781f50311e252badba401dbf729670a092fb39923d83bb2e71a941318a5aa87be71774fdc543771527cba4dd2afe3984eea9a5d5e5ce783254cb4df49a2d8adb6d12d1989bee40e5ec00eb18f3a94205773260415d9ab6d5f0e404a05078bf141d4f7c35e43c31e8c7aec0a619d3d34e1b2a4a7a0d615a02cc8d56eeba0c6e06573be3286bb070987f150aaaad06774c2510abdd94bb1df142a79fefba39e89b79531a70bdd8ba37de8a77a59bd841f8304c7fc59e1d95bb51ac47fb2cf4e85e7b1c817922c82f1fe63896db0bc2fe8605c193d7de23df9b87e2521ef93770f1d2053966c0ce5acac3fe23907ff97b0043e495a12d9ea1e164ee2bbb3fcb8dd2d4a64020400b7634c1a1d655c759c84e054f8c52a894b01efb3adceb87a23efa105b838c75dd43abb2b7d3e15c3e5e56b4cc5631dc63d3e1b7357610069aa446c0afd796a02e193b27dc1adc593bdbcf7d0d317afb2f94ca83549ebd83f8acb181f813b220e25a6248c81706c138d67e0edf201e6bf1982768dde91b6a670b99f3f82de2c9536772a15b04ddae7d75468e4f0dfd94c56c59ced207c2b5ead7083506ce2228353d7a24fce33cf7a6eb4addc597af5818ac61299e87fe1694e2965dd64f7c95569bfa87e342704264a0bf2ec2f080e5d3588f9a2d78f4abad0ac0052d0025822a72adbf118d4220d8c36728742f32b730d5852bb357d2c1a9b0647efbecef0f04dbd2e436255ad43af04d7de955935611785554bb67411d20971e4edaf76cccecf7dd3a78fda434848e82ad35b2663d4ab4afba544d2df202c02c972e849b4dfa63cb9dda273c4e8d66bfc565e493e1b05bb789a2dd63a596f943eecd4e4f9026cd4f1a91041143f4993fbcbb9a5145dc10cc0b89f9916179b4cd9573ccf561e316cff30dab0419a3fbea3399de13b13195bc4dff4faefb2958e2695fd7a9dbe5bb486aa9fafb7c07f04e3aa5481bbcdf1b3e5e399d43b5b6cb089a59fb8bdb8a01740ffa34a1c1e9e30dc098404cedef596887eed20c7cb07af7fb11eb5c41667bc7a4a4d825fb22f93fd0b0faa4e0902bb5554f01377c19744cba32f4dd1b6168b41f9358e3ab03a1e0b0eec17afca4c02d7f3c31525fbc896b59ff52886b85215e8dfb8663141bb69cdfe2a2d5809c888fbf9c87f6ebb5866097d6ac83248815889dedf4bd177d0304012cdfa229efebd8b9c98556f7cc604b56059624af67e51d696ff894cd6dd50e836b1ff6e45035b889e78c9bb382feb98b3048003e9977d383ef7b45dfcfc06999ebb5996935d4de05692db1aecdeabc9a1b207e31ca7cbd8858dba8eac6f8c5ffaadac2c970b04e9cf9577ef418b972465e6778fe074153f675406e8c9c34d9d7ca78677d73b16a41f9159f08dd83d6f5fe8b19a055620ac39cbc8079f2070936f91f7021adc03aa9ac779e00d22b3e36aee312da2e0a40a2488bf8ee6754520241d24cf5b7c2824297917f889da9ffc6f06b56c198af4810c1ac73b6f07bb82e4a80486bb404bb8c06e032102edbcbc9e018250ff34a47913cdea8cfaf1caee4b71953b40a1d313bf5c0b666c7e1820ffe1bdea6f5b2d01edf245991f819ee24aba8ec3617bd39c8c0b115c5548c23d98ac7ece3dc2d7031779bb12042059bff3d96855af3393237c11d7d489ffc67981e76f393cd0172a82ca57c4f057db0227eaf122e9d72066065cc813fe41ad7833dfa7ae996cfcaefa10aab738d48663de0afbd451ed35cedf016a1d83159ca5da4bfda4a9433a477fd0d2f42f4c7c770d4023c4b3601a00a133ba7a9d2d460590e92eb65dce63ad494a7e395f11065d38eba9ff1f55c688a4f8c41bfb97feeabfdddadc6f73bd28c774963696bab6a98073d59362af12726f2ce293431e866da19a6c1bed78bb960642ceb55195ebc8cb484f8c52bb89f96a2745ab243fbc6e1d98434b51cce2cd494d96bca08b89270c16908836723320c402174162b6363dd7734146167764b255f33d5218bf15c068c6058896c5bed0cb96e7766a6b29d729bb0cb1d607bd7202c8e24ea5ba40d8467b0a0e38fa5bb3c2d83ad38af50c3c5b8a35e8a03aaeb6658fa99ff14e2ae429324decb2f5f49a26c4cce3e6246d39685f0de46cce2573c5935e661a8aaf3a6033e19101f72491da5aeabed2db151e2a14243f6c7f39a08d5bc267ea298c40b33d16c6c161b83243c039c0c5f7356b44af7b8a7434952ddcaae18dde48347a924655b2188618dcb92164230fd42a1591310edae9825c4b3e373481b3b3b1f5fe989c86f7f022565d7f23dbd8047955b6fd76f16df7c5ad812ab52c21695fe18b42679ec87af00c46604620964087f82dc282a9122bf4403a8c3e87481d391be6dcf9fd876230242158143f40d47bb3c2eb1605bc3b3fd29db523e267355a7549bff64d52aa1b7cce0e2e4fcdbddb3fba04667a6a65fb49a50871595428d757f6ea4d966374d73ac276ecfee7b48cc390a8008aaf89f80b13e1d6d1033fe36013d0b4bc18fff1a1849d67e866e0033022d06d1e621821a65b311edb16aedd3d081b360d178ce53ffd556fc0a997a1c01f5aebb032bd0fb343ee7872954b5b1376", 0x1000}], 0x2, &(0x7f0000001b40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4ca4764c}}], 0x60}, 0x80800) (async) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000001c00)={0x6a, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}}, 0x0, 0x4, [{{0x2, 0x4e23, @empty}}, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e20, @remote}}]}, 0x290) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000001ec0)={'vxcan0\x00', 0x0}) connect$can_j1939(r2, &(0x7f0000001f00)={0x1d, r7, 0x0, {0x0, 0x0, 0x2}, 0xff}, 0x18) (async) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) (async) r8 = add_key$keyring(&(0x7f0000001f40), &(0x7f0000001f80)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r5, r8) 5.475296048s ago: executing program 1 (id=1831): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb100000000102000905027677ed"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="2014120000003219fad1a560da0781c2106a5bd2cb999f14", @ANYRESHEX=r0], 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r5 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x1) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0xfffffe3d, &(0x7f0000001040)={&(0x7f0000000400)=ANY=[@ANYBLOB="c71e6beccfdd10eea674b844206edd5f340a6a13f9d8ad887c6081cf3892e68a5e1291bb552e6e1af008f228bc7750e9c967349d2a264aafdf22cfbcaf07169ed4b3c3725709ff21fb02ca7ecddaaab4", @ANYBLOB="b0ff0abc9add22acd51b42f2e898507acae1f4fba2970a420e162c8c20546baf423d2c64b77ad2e01f189ee8c163de0d9f766c1f8008a2ffed87", @ANYRES8=r0, @ANYRESDEC=r3, @ANYRES16=r4, @ANYRES16=r2], 0x1c}}, 0x30008000) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 4.139266836s ago: executing program 5 (id=1840): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x20, 0x2c, 0x117, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)={0x0, 0x0, 0x100000}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000006bc0), 0x400, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x7041, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000800)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b8e1000000020e7c5dfa8b52a938bcc4af195fcdf3751ab9689caaf71053103b26697b8060621aac8e61d2a8f43fc77990ee7fddce04534ced7f8478050fa4776690d01240552890e86811be48c1ef73e1973ccd5130ebc267c3cdcd6045d2c9aae3144cb052bc5ecf49485beed0b0395d4d85c149b2dd4e981aa25a1399040c1eabb4fcd1c4fb4a0e5e71dd65287b08add41ef93c7ae497d7312b93818b8f25f5b06563cc310a76519db1116edca8fbcdac390d0b55b638"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.747686504s ago: executing program 0 (id=1841): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x100, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000180)={0x63a, 0x0, 0x0, @stepwise}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x8, 0xa6, {0xa6, 0x3, "099b0f41fd062cc6560c35376357fb498676b38e5a3f7ec283b9a403fb65f26f956e619d27ef1d138db35904106f38915899927f8532e279c0c93c2195e63622582c2eb0e93d291ea06562e42dbaf1d14f728cf90630c915a190c2ea874beaffc7c8691a4fcccc61ccada4668453c9bb0a11471e765a7ccfe39511274149ded63c0181fb02b6d4ffdf761cd4fefc52627ba8890a8bb0598c655e3773db61802f730d7f20"}}, &(0x7f00000007c0)=ANY=[@ANYBLOB="00de0000000004030f08fa2a55cd6be2b01287bb6a4800f4645d96d321489cf54f61ab5e179a3610e8a34d4c7caa17de73c38c9000021b634e4b59ffbab0ce11"], &(0x7f0000000100)={0x0, 0xf, 0x13, {0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x26, 0x6, 0x8, 0x1, 0x9}, @ptm_cap={0x3}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x18, 0x9, 0x7e, "1945daa9", "39a1919a"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x8, 0x5, 0x4, 0x9, 0x3, 0xfff2}}}, &(0x7f0000000700)={0x84, &(0x7f0000000280)={0x40, 0x5, 0x87, "12469a5028b1fefa3c365131ce4b7b9f024390db9cc5ca865eb0cd0e064627f880530c4e52d2f459c2db21e674cd9a8cb2de075ccd283be59ac10bfcc779304870ab95f873f1d389d0d52433190503917334c1b9a93c573a44059c618bf580bec41e7e12978239241a6ca37ebf36c15980751c419726ec0883b501f06a016a000d2d8cab40a984"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000003c0)={0x20, 0x0, 0x4}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x20, 0x20}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x51}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x20}, &(0x7f00000004c0)={0x40, 0xb, 0x2, '\ro'}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000540)={0x40, 0x13, 0x6, @random="ef14f4b5d52a"}, &(0x7f0000000580)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "b910"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0xa}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0xf}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x7}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x5}}) 3.225929593s ago: executing program 5 (id=1842): r0 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000104355470000000000000109022400010000a00009040000010300000009210500080122050009058103"], 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xcc) setsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000000), 0x4) syz_usb_connect(0x5, 0x466, &(0x7f0000000680)=ANY=[@ANYBLOB="120101028ddfb240490b4f06fdd4010203010902540402fa0680070904"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dfd, 0xffffffffffffffff) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000ffdbcf253800000008000300", @ANYRES32=r6, @ANYBLOB='\f\x00X'], 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x884) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0xfe, @time, {}, {}, @raw32}], 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r3}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48}) r8 = syz_open_dev$evdev(&(0x7f0000000100), 0x1ba46d70, 0xa00) ioctl$EVIOCGMASK(r8, 0x80104592, &(0x7f0000000200)={0x0, 0x88, &(0x7f0000000140)="a0bb29cde915617ad3fef1b4e0a7b85ccda07cdfba4aaa80210dddc442da9ab17e7c62a02b8dbf41ebec395bad11af34b7b4750716d78464e146351208e83579cbfcb5163ed710a166f60950766927bb226ae9930483a3375b45f4b1b8fa3c703fc6619c289a160edac28a3a5a5ecde382d613a01c753c74d9b1fa0a734f3696454ed273fc53054b"}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r9) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r10, 0x1, 0x24, &(0x7f0000000080)=0x80, 0x4) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r2], 0x0}, 0x0) 3.077663093s ago: executing program 0 (id=1843): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async) 2.812308224s ago: executing program 1 (id=1844): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r1 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='$+\x00', &(0x7f0000000180)='\x00', 0x0) (async) ftruncate(r0, 0x6) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) waitid$P_PIDFD(0x3, r2, 0x0, 0x8, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000009a00)) (rerun: 32) 2.750519356s ago: executing program 0 (id=1845): r0 = socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) (async, rerun: 32) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (rerun: 32) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000040)=""/32, &(0x7f0000000080)=0x20) (async, rerun: 64) r1 = syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) ptrace(0x10, r1) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) wait4(r1, 0x0, 0x80000000, 0x0) ptrace$cont(0x18, r1, 0xa, 0x100000001) (async) move_pages(r1, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) (async) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x0, r1}) io_setup(0x7, &(0x7f0000000280)) 2.5568152s ago: executing program 1 (id=1846): r0 = socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0) bind$nfc_llcp(r3, &(0x7f0000001040)={0x27, r5, 0x1, 0x1, 0x0, 0x0, "d92984bd1c9754bcf9f5160e8d1711a077609475b78411e8850327e4220000000001000000000002000000000019002000", 0x443a}, 0x60) (async) close(r4) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) bind$l2tp6(r0, &(0x7f0000001900)={0xa, 0x0, 0x2, @private0, 0x5, 0x3}, 0x20) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000100)="6890f182c401640f01d99ab049e300dad4260f019a00000f01c93f66b8dd0000000f23c80f21f86635080030000f23f826260faef4", 0x35}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) 2.427107761s ago: executing program 0 (id=1847): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) writev(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f0000000040)="dc127a0e", 0x4}, {&(0x7f0000000080)="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", 0x901}], 0x2) syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000056544820e105080411250102030109021b00010000000009040000012ec25d000905"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000900)={0xfffffffffffffee7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000000100000051000000", 0xfe60) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1ccb98ba63f7177d}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="08f729bd7000fcdbdf250a0000000c00038006000400080000001c00018006000100020000000600010002000000080008000a00000054000280080009004c0c0000080006000700e410db0080730873000006000e004e220000060002004e20000006000f00010000000800090008000000080007000400000008000500060000000800030001000000"], 0x90}, 0x1, 0x0, 0x0, 0x20000841}, 0x20000840) 2.229585797s ago: executing program 5 (id=1848): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x34, 0x3e, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="725eb862"]}, @typed={0x8, 0x7, 0x0, 0x0, @pid}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) ioctl$TUNATTACHFILTER(r0, 0x4020940d, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) 1.884283317s ago: executing program 1 (id=1849): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0x1000, 0xb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x1}, {0x0, 0xeeef0000, 0x3, 0x0, 0x0, 0x7, 0xf9, 0x5, 0x0, 0x0, 0x0, 0x42}, {0xeeef0000, 0x6000, 0x13, 0x8, 0x0, 0x0, 0x81, 0x0, 0x4, 0xe, 0x1, 0x3}, {0x8080000, 0x0, 0x4}, {0x1, 0x1000, 0x0, 0x0, 0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x1a}, {0x100000, 0xd000, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x84}, {0xeeee8000, 0x5000, 0x9, 0x4, 0x3, 0x0, 0x0, 0x0, 0x2}, {0x1, 0x2, 0x0, 0xf9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {0x6000}, {0x1, 0xfffe}, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x1, 0x900, [0xfffffffffffffffc, 0x0, 0x0, 0x3]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x2, 0x801) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, r2, 0xb}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x20, 0x79, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) sendmsg$sock(r5, &(0x7f0000000380)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, 0x4}, 0x80, 0x0}, 0x4000000) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x40, 0x17, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r4, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="e01506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, &(0x7f00000008c0)={0x2c, &(0x7f00000006c0)={0x40, 0x16, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c5, 0x1000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.783819085s ago: executing program 5 (id=1850): timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}}, &(0x7f0000000040)) r0 = timerfd_create(0x1e, 0x80800) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timerfd_settime(r0, 0x3, &(0x7f00000000c0)={{r1, r2+60000000}, {0x0, 0x3938700}}, &(0x7f0000000100)) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000140), 0x40) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)={0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200)={0x0, 0xfffffffd}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000280)={r6, 0x2, 0x7, 0x9, 0x3785, 0x9, 0xa, 0x5, {0x0, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x2}}, 0xfffffffc, 0x48, 0xe, 0x8001, 0xfff}}, &(0x7f0000000340)=0xb0) timer_create(0x4, &(0x7f0000000540)={0x0, 0x0, 0x4, @thr={&(0x7f0000000380)="413cacb63057fcd019eac96dd0c13743d4885f8a66b541e0998ca6c5edc88a62633f43de6b4dd6641d9a11139cfc6420564d5af2c7e1dcc7b16d2918eb6ce5d1128e92f56e4ea02e5fcb3b1ed0e8394b0eaadecc4a070ea941a0c195fb1dc4663ef1f32d1fbc68fe49508e73b66c74c7d7954befce10d5369253c5a54bb09a3dd06ba42220ee47ae66f4ae9b798b6ea20acb2911e3762698b4b738ccc3a0838f545f51bb967a66d3053fc6813074b5bf4c5f0fc49c9c64e6bc176ab42a97848b6f4e4c59912c853f359aa348b330771f409e512318e6b1c285d17184a60235b1", &(0x7f0000000480)="d3ca31210fa23fd9cadba7a67446cd1d14d8674114535330978d0dd892661af574954926281e208c3dfae2f0e5e0f639230ede067945d58fe75b5d7aed8291a45702fa68b6425a5ec2dcf2fe34011a89941b3ffb3e7507cc62bb0984ade0e7098d479524b812927dfbe85c17382cdfce1bca9eb79b968303015b234a65ab12ef444243995d9a349741"}}, &(0x7f0000000580)=0x0) timer_delete(r7) write$qrtrtun(r3, &(0x7f00000005c0)="5a967b74aa39ce6ad18691bdcbeb122830bd79642d60c548cc8a0472d14032b76c4ad4e093e08c81db75ea5549b1cf80fc7508aee4e5ee52fa8a94d41f840a", 0x3f) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000600)={0x80, 0x4, 0x30, "bf988ac7f54b9fcd0212f73820009e0718cc17e9c0fa87773f70781d5fd61f20", 0x32314d54}) epoll_pwait2(r4, &(0x7f0000000640), 0x0, &(0x7f0000000680)={0x77359400}, &(0x7f00000006c0)={[0x5]}, 0x8) timer_create(0x7, &(0x7f0000000840)={0x0, 0x18, 0x1, @thr={&(0x7f0000000700)="97706b8bff80253125a16de299a39d54b7651b8e79759ebdd1835c7c46c819add42f74451d9c4066be395e8288bff77a688b854c219a88b4814c71d21d5a8e3933717aaaf88479f626da5c2e43d15ef95d2b1ac5b620b874933a75db3cbeb7d2c2042b954cad4e432bf503fd95168e8cf2c05533976db9633d0c5e02a0a695e38a72acd788ea1f2cf60a47cb9ec1dc47a0d8130d0e6288dd24aef8c11c0c2c06ec163efaa4ae652a246bd8bd4fe4b945d26d3fd4c8", &(0x7f00000007c0)="ed75093923f9690017c8dfe5891ed0d4b8d6d3db6c9a79155ad932d6ebdff06416e5a225068a40f9ff58dd0b18f68024e0c8e9ac92d417c1eb11bebe62428a3c7c00aecfd5699af5388079a644c2db982c4a"}}, &(0x7f0000000880)) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) read(r8, &(0x7f0000000900)=""/239, 0xef) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000a00)={'wg0\x00'}) r9 = accept4(r8, 0x0, &(0x7f0000000a40), 0x80800) close_range(r0, r9, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r8, 0xc08c5336, &(0x7f0000000a80)={0x7, 0x3, 0x0, 'queue0\x00', 0x3de}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r8) sendmsg$NL80211_CMD_DEL_INTERFACE(r9, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x9000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, r10, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040854}, 0x4000000) r11 = getpgid(0x0) r12 = syz_open_procfs(r11, &(0x7f0000000c80)='attr/sockcreate\x00') mq_notify(r8, &(0x7f0000000dc0)={0x0, 0x2, 0x4, @thr={&(0x7f0000000cc0)="f2c07490491673f438e0ec76c2cb50f1cacb8bde9e80c0cf5eb267429e713c47799674cf5094695dfa6c7e1a1ea8661f0c48abf9e05aac8d74e7848ad81185dcdb4085194c79ad75eadcab2e1f66c761272c3df09ebff87d19daeeebb43f2a11106a43db6b50cdbdcf7a97261a342a1f09563ca8facb4c79193072ccf022cd1b19da646f8e7ad3a57a9f6a24ce53f5912ebcea360d563a8fea5cd7bee2e2b148b63dce2287259164a0dbed922f", &(0x7f0000000d80)="e24c0d4d1e74b4faeda028c6b375bb3200cacb02a2201c"}}) sendmsg$nl_netfilter(r12, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14, 0x13, 0xb, 0x401, 0x70bd28, 0x25dfdbfd, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x49}, 0x4000000) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000fc0)={0x16, 0x98, 0xfa00, {&(0x7f0000000f00), 0x3, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x6, 0xff, {"7a49f86277b14a33edb77f7c5697b234"}, 0x4, 0x3}}}, 0xa0) 1.521445435s ago: executing program 5 (id=1851): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x10}, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000440)=[{&(0x7f00000000c0)="88", 0x1}, {0x0}], 0x2}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x34, r3, 0x633d41a77d0888ff, 0x70bd26, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044000}, 0x20048844) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) fadvise64(r5, 0x2, 0xc, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000002340)="6507060082762422f9a302dd5ddbd0cc97b8afb765d58b4137e8b350a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x40) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1f00, 0x12) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140), 0x111, 0x2}}, 0x20) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x8}}, 0x20) write$P9_RSETATTR(r4, &(0x7f0000000480)={0x7, 0x1b, 0x2}, 0x7) read(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000380)={0x7, 0x1b, 0x2}, 0x7) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0xf}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) 461.349933ms ago: executing program 5 (id=1852): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x260081, 0x0) fcntl$getflags(r2, 0x3) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000340)={0xf979e10e54c49671, 0x0, @raw_data}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x346f, 0x40000060, 0x100007f, 0x1a, "9f940b3491d052d172e0e573229ac6de50806c"}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000140)="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"/297, 0x3accf8d5) vmsplice(r3, &(0x7f0000000440)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x100000000000000) r4 = epoll_create(0x7) r5 = epoll_create1(0x0) r6 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000100)) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r8, &(0x7f0000000080)={0x1008}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x2}}, './cgroup\x00'}) fstat(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, '\x9e\x01h\n\xcd\xf1\x833g\x91\xabP\x99\xf4V\xbaP\xa99\xa8N\t.\xf5\v\x97\xc5\xc4\xf4~\xe2\xa6^\\\x1a \x84\xc7*\xe3\xf2Y\xc6\xb8\xa0\xa4`&\a\x91/\x9dq\xb5\xc2S\xef\xcf\x12\x96+\xe8\xd0\xff\xff\x1d\xc6\x84\xcf\xcb\xabq\xcaF!3'}}], [{@fowner_lt={'fowner<', r9}}, {@appraise}, {@euid_gt={'euid>', r9}}]}}) 202.219925ms ago: executing program 0 (id=1853): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x1, 0x6, 0x4000000) bind$packet(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0xe, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3ff}], 0x1c) 0s ago: executing program 0 (id=1854): msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/106) r0 = msgget$private(0x0, 0x220) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000080)=""/4096) msgrcv(r0, &(0x7f0000001080)={0x0, ""/119}, 0x7f, 0x2, 0x0) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000001100)) r1 = msgget$private(0x0, 0x100) statx(0xffffffffffffffff, &(0x7f0000001140)='./file0\x00', 0x800, 0x4, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getegid() read$FUSE(0xffffffffffffffff, &(0x7f0000001280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000032c0)={0x0, 0x0, 0x0}, &(0x7f0000003300)=0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000003340)=0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000003380)={{0x0, r2, r3, r4, r7, 0x40, 0x3f09}, 0x0, 0x0, 0x5, 0xff, 0x3a, 0x5, 0x8, 0x8000, 0x8af, 0x5e1f, 0x0, r8}) msgsnd(r1, &(0x7f0000003400)={0x0, "57ec81c2ecc92d876cc1efabfb565e095900dcdf17a7b6e27dd1a99ce87abbc8c19aab50fd3d6fec17f35b2e89a41d0380236841c7c7e6da34df523675e837ea1820e37319d403fc52d5a8668c5fb1b9c513996c5172f0ad962d5924b3acc5bfb079614f6fcbc01f149fb27665b36c633049b291b700a79fd6eaae7b2f3cff6e94b91e33317fc37e1e0dc32b1d6f84560924ea0b0805e28659314b94ac4b3df1cef88b8d8589e6b99b054c873f4c6f088e28e338ba4c3e0d1234f4968bd8725ae9a8da837d6b461cc33ff45162f883fdb10f08e769b8b61d246c1a56ebf50b51b9d768"}, 0xeb, 0x0) r9 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000003500), 0x2) r10 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r11 = signalfd4(0xffffffffffffffff, &(0x7f0000003540)={[0x4]}, 0x8, 0x800) r12 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000003580), 0x80000) r13 = socket$l2tp6(0xa, 0x2, 0x73) r14 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000003600)={0x0, 0x0}) ppoll(&(0x7f00000035c0)=[{r9, 0x618}, {r10, 0x400}, {r11, 0x2001}, {r12, 0x3010}, {r13, 0x4280}, {0xffffffffffffffff, 0x1109}, {r14, 0x2046}], 0x7, &(0x7f0000003640)={r15, r16+10000000}, &(0x7f0000003680)={[0x1]}, 0x8) msgctl$IPC_RMID(r0, 0x0) r17 = msgget(0x2, 0x4) msgctl$IPC_INFO(r17, 0x3, &(0x7f00000036c0)=""/159) r18 = msgget(0x3, 0x80) msgsnd(r18, &(0x7f0000003780)={0x2, "cbf2c596308738ad8551bf3c74284460ed788e895474485968d4f38b9a31b5292fb6c3517e413c65197ff755acdf09302ae4ef09b3770fe1b508719ca88c6a4d2c0b9f62d4864e98e4ccd1b9938776cbad257b83d54267990d"}, 0x61, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r14, 0xc0286405, &(0x7f0000003800)={0x4, 0x4, {r5}, {r6}, 0x78, 0x9}) msgctl$IPC_SET(r1, 0x1, &(0x7f0000003840)={{0x0, r4, r3, r6, r7, 0x40, 0x4}, 0x0, 0x0, 0x0, 0x3, 0xd8e9, 0x4, 0x1ff, 0x1, 0x9, 0x0, r19, r8}) r20 = signalfd4(r11, &(0x7f00000038c0)={[0x8]}, 0x8, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r20, 0x8933, &(0x7f0000003900)={'wlan1\x00'}) kernel console output (not intermixed with test programs): .990504][ T24] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 366.998983][ T24] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 367.008881][ T24] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 367.018511][ T24] dvb_usb_af9035 2-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 367.398379][T11655] bond0: entered promiscuous mode [ 367.403846][T11655] rose0: entered promiscuous mode [ 367.422647][T11655] bond0: entered allmulticast mode [ 367.436280][T11655] rose0: entered allmulticast mode [ 367.873048][ T29] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 367.907927][T11678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.925460][T11678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.938482][T11678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.953082][T11678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.004138][T11678] can0: slcan on pty24. [ 368.037621][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 368.052137][ T29] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 368.074562][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.101879][ T29] usb 6-1: Product: syz [ 368.116981][ T29] usb 6-1: Manufacturer: syz [ 368.128689][ T29] usb 6-1: SerialNumber: syz [ 368.157765][ T29] usb 6-1: config 0 descriptor?? [ 368.177991][ T29] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 368.262832][T11678] can0 (unregistered): slcan off pty24. [ 368.373410][T11689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.397289][T11690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.399746][T11689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.419533][T11690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.444128][T11688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.484116][T11688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.698022][ T29] gspca_ov534_9: reg_w failed -110 [ 368.936359][ T24] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 369.108829][ T29] gspca_ov534_9: Unknown sensor 0000 [ 369.108939][ T29] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 369.122453][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 369.138609][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 369.153991][ T24] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 369.186626][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 369.200690][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.223312][ T24] usb 1-1: Product: syz [ 369.228461][ T24] usb 1-1: Manufacturer: syz [ 369.233371][ T24] usb 1-1: SerialNumber: syz [ 369.434218][ T5934] usb 2-1: USB disconnect, device number 37 [ 369.462220][T11696] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 370.034889][T11726] sctp: [Deprecated]: syz.1.1513 (pid 11726) Use of struct sctp_assoc_value in delayed_ack socket option. [ 370.034889][T11726] Use struct sctp_sack_info instead [ 370.128018][T11735] openvswitch: netlink: Unknown key attributes 2 [ 370.305068][ T24] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed [ 370.343806][ T24] cdc_ncm 1-1:1.0: bind() failure [ 370.361910][ T24] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 370.369095][ T24] cdc_ncm 1-1:1.1: bind() failure [ 370.385935][ T24] usb 1-1: USB disconnect, device number 28 [ 370.409794][ T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 370.566720][ T5908] usb 6-1: USB disconnect, device number 105 [ 370.596351][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 370.604788][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 370.613760][ T9] usb 2-1: can't read configurations, error -61 [ 370.757141][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 370.855253][T11751] netlink: 'syz.2.1520': attribute type 3 has an invalid length. [ 370.918758][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 370.939256][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 370.960724][ T9] usb 2-1: can't read configurations, error -61 [ 370.978873][ T9] usb usb2-port1: attempt power cycle [ 371.026756][T11761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.036799][T11761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.049892][T11761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.061242][T11761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.256383][ T5934] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 371.276369][ T5908] usb 6-1: new full-speed USB device number 106 using dummy_hcd [ 371.336944][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 371.366917][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 371.374429][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 371.382205][ T9] usb 2-1: can't read configurations, error -61 [ 371.416263][ T5934] usb 1-1: Using ep0 maxpacket: 16 [ 371.423602][ T5934] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.428768][ T5908] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 371.444769][ T5934] usb 1-1: config 0 interface 0 has no altsetting 0 [ 371.446527][ T5908] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 371.464646][ T5934] usb 1-1: New USB device found, idVendor=046d, idProduct=0a87, bcdDevice= 0.00 [ 371.466827][ T5908] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 371.476467][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.483317][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 371.499500][ T5908] usb 6-1: SerialNumber: syz [ 371.503713][ T5934] usb 1-1: config 0 descriptor?? [ 371.520342][ T5908] cdc_ether 6-1:1.0: skipping garbage [ 371.525917][ T5908] usb 6-1: No union descriptors [ 371.532605][ T5908] usb-storage 6-1:1.0: USB Mass Storage device detected [ 371.536367][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 371.551913][ T5908] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 371.568083][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 371.575441][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 371.594770][ T9] usb 2-1: can't read configurations, error -61 [ 371.602191][ T9] usb usb2-port1: unable to enumerate USB device [ 371.661509][T11766] Invalid ELF header magic: != ELF [ 371.669660][T11766] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0) [ 371.725901][T11770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.739108][T11770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.745959][T11762] Bluetooth: MGMT ver 1.23 [ 371.756997][ T9] usb 6-1: USB disconnect, device number 106 [ 371.918791][ T5934] hid_parser_main: 283 callbacks suppressed [ 371.918818][ T5934] logitech-hidpp-device 0003:046D:0A87.001D: unknown main item tag 0x0 [ 371.933565][ T5934] logitech-hidpp-device 0003:046D:0A87.001D: unknown main item tag 0x0 [ 371.942050][ T5934] logitech-hidpp-device 0003:046D:0A87.001D: unknown main item tag 0x0 [ 371.950607][ T5934] logitech-hidpp-device 0003:046D:0A87.001D: unknown main item tag 0x0 [ 371.959151][ T5934] logitech-hidpp-device 0003:046D:0A87.001D: unknown main item tag 0x0 [ 371.968613][ T5934] logitech-hidpp-device 0003:046D:0A87.001D: unknown main item tag 0x0 [ 371.977678][ T5934] logitech-hidpp-device 0003:046D:0A87.001D: unknown main item tag 0x0 [ 371.986005][ T5934] logitech-hidpp-device 0003:046D:0A87.001D: unknown main item tag 0x0 [ 371.994516][ T5934] logitech-hidpp-device 0003:046D:0A87.001D: unknown main item tag 0x0 [ 372.003140][ T5934] logitech-hidpp-device 0003:046D:0A87.001D: unknown main item tag 0x0 [ 372.016220][ T5934] logitech-hidpp-device 0003:046D:0A87.001D: hidraw0: USB HID v0.08 Device [HID 046d:0a87] on usb-dummy_hcd.0-1/input0 [ 372.115143][T11758] netlink: 'syz.0.1522': attribute type 46 has an invalid length. [ 372.123819][T11758] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1522'. [ 372.147871][ T5934] usb 1-1: USB disconnect, device number 29 [ 372.364380][T11784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.378229][T11784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.393251][T11787] netlink: 'syz.5.1529': attribute type 10 has an invalid length. [ 372.403488][T11784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.422899][T11787] team0: Device xfrm0 is of different type [ 372.430678][T11784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.473557][T11787] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 372.847766][T11806] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1531'. [ 372.887660][ T5929] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 372.946631][T11811] netlink: 'syz.0.1532': attribute type 46 has an invalid length. [ 373.057771][ T5929] usb 6-1: Using ep0 maxpacket: 32 [ 373.063680][ T5929] usb 6-1: too many configurations: 17, using maximum allowed: 8 [ 373.075296][ T5929] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 373.084131][ T5929] usb 6-1: config 0 has no interface number 0 [ 373.093363][ T5929] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 373.101891][ T5929] usb 6-1: config 0 has no interface number 0 [ 373.110198][ T5929] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 373.118657][ T5929] usb 6-1: config 0 has no interface number 0 [ 373.125818][ T5929] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 373.134209][ T5929] usb 6-1: config 0 has no interface number 0 [ 373.149614][ T5929] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 373.158284][ T5929] usb 6-1: config 0 has no interface number 0 [ 373.167735][ T5929] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 373.176826][ T5929] usb 6-1: config 0 has no interface number 0 [ 373.184782][ T5929] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 373.193363][ T5929] usb 6-1: config 0 has no interface number 0 [ 373.201777][ T5929] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 373.208802][T11819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.211419][ T5929] usb 6-1: config 0 has no interface number 0 [ 373.219393][T11819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.230551][ T5929] usb 6-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 373.242099][ T5929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.245506][T11819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.259506][ T5929] usb 6-1: Product: syz [ 373.262063][T11819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.263760][ T5929] usb 6-1: Manufacturer: syz [ 373.276421][ T5908] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 373.285622][ T5929] usb 6-1: SerialNumber: syz [ 373.293262][ T5929] usb 6-1: config 0 descriptor?? [ 373.301506][ T5929] etas_es58x 6-1:0.2: Starting syz syz (Serial Number syz) [ 373.428774][ T5908] usb 2-1: unable to get BOS descriptor or descriptor too short [ 373.440644][ T5908] usb 2-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 373.450626][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.458739][ T5908] usb 2-1: Product: syz [ 373.462970][ T5908] usb 2-1: Manufacturer: syz [ 373.467665][ T5908] usb 2-1: SerialNumber: syz [ 373.482296][ T5908] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 373.506478][ T5929] etas_es58x 6-1:0.2: could not parse product info: '424242424242' [ 373.678873][ T5908] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 373.696287][ T5908] usb 2-1: unable to issue vendor read request (ret = -71) [ 373.715296][ T5908] usb 2-1: unable to issue vendor read request (ret = -71) [ 373.741475][ T5908] usb 2-1: unable to issue vendor read request (ret = -71) [ 373.751031][ T5908] usb 2-1: unable to issue vendor read request (ret = -71) [ 373.761137][ T5908] usb 2-1: unable to issue vendor read request (ret = -71) [ 373.773726][ T5908] usb 2-1: unable to issue vendor read request (ret = -71) [ 373.787895][ T5908] usb 2-1: unable to issue vendor read request (ret = -71) [ 373.806383][ T5908] usb 2-1: unable to issue vendor read request (ret = -71) [ 373.917530][ T5908] usb 2-1: USB disconnect, device number 42 [ 373.942429][ T5929] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 374.028777][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 374.109794][ T5929] usb 1-1: Using ep0 maxpacket: 32 [ 374.128015][ T5929] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 374.159128][ T5929] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 374.179407][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 374.198996][ T5929] usb 1-1: Product: syz [ 374.204916][ T5929] usb 1-1: Manufacturer: syz [ 374.221485][ T5929] usb 1-1: SerialNumber: syz [ 374.233277][T11843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1540'. [ 374.251577][ T5929] usb 1-1: config 0 descriptor?? [ 374.271390][T11826] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 374.299196][ T5929] hub 1-1:0.0: bad descriptor, ignoring hub [ 374.313777][ T5929] hub 1-1:0.0: probe with driver hub failed with error -5 [ 374.332987][ T30] audit: type=1326 audit(1775997340.115:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11848 comm="syz.2.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa001d9c819 code=0x7ffc0000 [ 374.381605][ T30] audit: type=1326 audit(1775997340.145:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11848 comm="syz.2.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa001d9c819 code=0x7ffc0000 [ 374.391809][T11849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.405639][ T30] audit: type=1326 audit(1775997340.145:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11848 comm="syz.2.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa001d9c819 code=0x7ffc0000 [ 374.459354][ T30] audit: type=1326 audit(1775997340.145:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11848 comm="syz.2.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa001d9c819 code=0x7ffc0000 [ 374.476428][T11849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.547192][ T30] audit: type=1326 audit(1775997340.145:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11848 comm="syz.2.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fa001d9c819 code=0x7ffc0000 [ 374.570365][ T30] audit: type=1326 audit(1775997340.145:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11848 comm="syz.2.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa001d9c819 code=0x7ffc0000 [ 374.599551][ T30] audit: type=1326 audit(1775997340.145:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11848 comm="syz.2.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa001d9c819 code=0x7ffc0000 [ 374.624200][ T30] audit: type=1326 audit(1775997340.145:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11848 comm="syz.2.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa001d9c819 code=0x7ffc0000 [ 374.647877][ T5929] usb 1-1: USB disconnect, device number 30 [ 374.674021][ T30] audit: type=1326 audit(1775997340.145:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11848 comm="syz.2.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa001d9c819 code=0x7ffc0000 [ 374.686434][ C1] etas_es58x 6-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x3831. [ 374.707911][ C1] etas_es58x 6-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 374.713582][ T30] audit: type=1326 audit(1775997340.145:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11848 comm="syz.2.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fa001d9c819 code=0x7ffc0000 [ 374.715960][ C1] etas_es58x 6-1:0.2: es58x_split_urb() returned error -EBADMSG [ 374.748279][ C1] etas_es58x 6-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 374.756537][ T5934] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 374.759366][ C1] etas_es58x 6-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 374.759390][ C1] etas_es58x 6-1:0.2: es58x_split_urb() returned error -EBADMSG [ 374.783841][ C1] etas_es58x 6-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 374.794936][ C1] etas_es58x 6-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 374.803037][ C1] etas_es58x 6-1:0.2: es58x_split_urb() returned error -EBADMSG [ 374.811234][ C1] etas_es58x 6-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 374.822243][ C1] etas_es58x 6-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 374.830259][ C1] etas_es58x 6-1:0.2: es58x_split_urb() returned error -EBADMSG [ 374.838812][ C1] etas_es58x 6-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 374.849913][ C1] etas_es58x 6-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 374.856178][ T5505] etas_es58x 6-1:0.2 can1: bit-timing not yet defined [ 374.857930][ C1] etas_es58x 6-1:0.2: es58x_split_urb() returned error -EBADMSG [ 374.858470][ C1] etas_es58x 6-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 374.883518][ C1] etas_es58x 6-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 374.891511][ C1] etas_es58x 6-1:0.2: es58x_split_urb() returned error -EBADMSG [ 374.899494][ C1] etas_es58x 6-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 374.910830][ C1] etas_es58x 6-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 374.918813][ C1] etas_es58x 6-1:0.2: es58x_split_urb() returned error -EBADMSG [ 374.926555][ C1] etas_es58x 6-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 374.937608][ C1] etas_es58x 6-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 374.945591][ C1] etas_es58x 6-1:0.2: es58x_split_urb() returned error -EBADMSG [ 374.968400][ T5934] usb 2-1: Using ep0 maxpacket: 16 [ 374.984961][ T5934] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 374.994896][ T5934] usb 2-1: config 0 has no interface number 0 [ 375.012091][ T5934] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 375.031777][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.052015][ T5934] usb 2-1: Product: syz [ 375.066237][ T5934] usb 2-1: Manufacturer: syz [ 375.082102][ T5934] usb 2-1: SerialNumber: syz [ 375.098058][ T5934] usb 2-1: config 0 descriptor?? [ 375.130227][ T5934] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 375.180456][ C1] etas_es58x 6-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 375.180927][ T5909] usb 6-1: USB disconnect, device number 107 [ 375.189732][ C1] etas_es58x 6-1:0.2 can0: es58x_write_bulk_callback: error -EPROTO [ 375.191486][ C1] etas_es58x 6-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 375.213826][ C1] etas_es58x 6-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 375.223294][ C1] etas_es58x 6-1:0.2: es58x_read_bulk_callback: error -ENOENT [ 375.230943][ T5505] etas_es58x 6-1:0.2 can1: es58x_open: Could not open the network device: -EINVAL [ 375.231384][ C1] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 375.252200][ T5909] etas_es58x 6-1:0.2: Disconnecting syz syz [ 375.514954][T11883] netlink: 1328 bytes leftover after parsing attributes in process `syz.2.1550'. [ 375.528035][T11883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.538529][T11883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.550495][T11883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.560858][T11883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.751078][ T5934] gspca_spca1528: reg_w err -71 [ 375.779026][ T5934] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 375.793934][ T5934] usb 2-1: USB disconnect, device number 43 [ 375.906722][ T5909] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 376.076279][ T5909] usb 1-1: Using ep0 maxpacket: 8 [ 376.086943][ T5909] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 376.097076][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.120305][ T5909] usb 1-1: Product: syz [ 376.124785][ T5909] usb 1-1: Manufacturer: syz [ 376.130153][ T5909] usb 1-1: SerialNumber: syz [ 376.141984][ T5909] usb 1-1: config 0 descriptor?? [ 376.170472][T11904] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 376.276399][ T5934] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 376.354047][ T5909] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 376.372687][T11906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.402567][T11906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.460114][ T5934] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 376.468383][ T5934] usb 6-1: config 0 has no interface number 0 [ 376.473622][T11917] netlink: 'syz.1.1558': attribute type 12 has an invalid length. [ 376.480235][ T5934] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 376.491778][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.500629][ T5934] usb 6-1: Product: syz [ 376.504954][ T5934] usb 6-1: Manufacturer: syz [ 376.511452][ T5934] usb 6-1: SerialNumber: syz [ 376.519165][ T5934] usb 6-1: config 0 descriptor?? [ 376.581492][ T5909] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 376.601996][ T5909] usb 1-1: USB disconnect, device number 31 [ 376.726314][ T6264] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 376.736201][ T5934] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 376.751065][ T5934] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 376.761964][ T5934] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 376.777929][ T5934] usb 6-1: media controller created [ 376.810742][ T5934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 376.859368][ T5934] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 376.886249][ T6264] usb 2-1: Using ep0 maxpacket: 16 [ 376.890422][ T5934] usb 6-1: USB disconnect, device number 108 [ 376.898044][ T6264] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 376.912084][ T6264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 376.938480][ T6264] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 376.957398][ T6264] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.965837][ T6264] usb 2-1: Product: syz [ 376.975945][ T6264] usb 2-1: Manufacturer: syz [ 376.980871][ T6264] usb 2-1: SerialNumber: syz [ 376.990179][ T6264] usb 2-1: config 0 descriptor?? [ 377.002242][ T6264] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 377.011711][ T6264] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 377.029920][T11924] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1560'. [ 377.102956][ T5908] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 377.111743][ T5908] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 377.129814][ T5908] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 377.159130][ T5908] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 377.173141][ T5908] rtc rtc0: __rtc_set_alarm: err=-22 [ 377.216293][ T5934] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 377.370196][ T5934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 377.381697][ T5934] usb 6-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 377.388065][ T24] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 377.391388][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.413636][ T5934] usb 6-1: config 0 descriptor?? [ 377.424211][T11922] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 377.556404][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 377.569041][ T24] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 377.579283][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.587831][ T24] usb 1-1: Product: syz [ 377.592058][ T24] usb 1-1: Manufacturer: syz [ 377.600039][ T24] usb 1-1: SerialNumber: syz [ 377.609252][ T6264] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 377.615743][ T24] usb 1-1: config 0 descriptor?? [ 377.621625][ T6264] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 377.631372][ T24] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 377.835889][ T24] ssu100 1-1:0.0: probe with driver ssu100 failed with error -71 [ 377.855485][ T24] usb 1-1: USB disconnect, device number 32 [ 377.894231][ T5934] hid_parser_main: 28 callbacks suppressed [ 377.894257][ T5934] magicmouse 0003:05AC:0324.001E: unknown main item tag 0x0 [ 377.912599][ T5934] magicmouse 0003:05AC:0324.001E: unknown main item tag 0x0 [ 377.920908][ T5934] magicmouse 0003:05AC:0324.001E: unknown main item tag 0x0 [ 377.931875][ T5934] magicmouse 0003:05AC:0324.001E: unknown main item tag 0x0 [ 377.940196][ T5934] magicmouse 0003:05AC:0324.001E: unknown main item tag 0x0 [ 377.947902][ T5934] magicmouse 0003:05AC:0324.001E: unknown main item tag 0x0 [ 377.956559][ T5934] magicmouse 0003:05AC:0324.001E: unknown main item tag 0x0 [ 377.965327][ T5934] magicmouse 0003:05AC:0324.001E: unknown main item tag 0x0 [ 377.972987][ T5934] magicmouse 0003:05AC:0324.001E: unknown main item tag 0x0 [ 377.980872][ T5934] magicmouse 0003:05AC:0324.001E: unknown main item tag 0x0 [ 377.991314][ T5934] magicmouse 0003:05AC:0324.001E: collection stack underflow [ 377.998876][ T5934] magicmouse 0003:05AC:0324.001E: item 0 1 0 12 parsing failed [ 378.007493][ T5934] magicmouse 0003:05AC:0324.001E: magicmouse hid parse failed [ 378.015133][ T5934] magicmouse 0003:05AC:0324.001E: probe with driver magicmouse failed with error -22 [ 378.082385][ T5934] usb 6-1: USB disconnect, device number 109 [ 378.246038][ T6264] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 378.770515][T11945] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1565'. [ 378.831786][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.841665][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.860382][T11917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.875668][T11917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.146494][ T5844] Bluetooth: hci4: command 0x1003 tx timeout [ 379.157975][ T5851] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 379.176379][ T24] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 379.335950][T11954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.348261][T11954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.361902][ T24] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 379.371509][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.379701][ T24] usb 6-1: Product: syz [ 379.379898][T11954] hfs: can't find a HFS filesystem on dev nbd2 [ 379.384103][ T24] usb 6-1: Manufacturer: syz [ 379.384122][ T24] usb 6-1: SerialNumber: syz [ 379.639562][ T24] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 379.654988][ T24] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 379.667931][ T24] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 379.680341][ T24] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 379.695821][ T24] usb 6-1: USB disconnect, device number 110 [ 379.706625][ T6264] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 379.720480][ T6264] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 379.727501][ T6264] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 379.734436][ T6264] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 379.748488][ T5934] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 379.916383][ T5934] usb 1-1: Using ep0 maxpacket: 8 [ 379.923913][ T5934] usb 1-1: unable to get BOS descriptor or descriptor too short [ 379.932881][ T5934] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.945751][ T5934] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 379.968361][ T24] usb 2-1: USB disconnect, device number 44 [ 379.975310][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 379.996521][ T5934] usb 1-1: Product: syz [ 380.004944][ T5934] usb 1-1: Manufacturer: syz [ 380.009722][ T5934] usb 1-1: SerialNumber: syz [ 380.034606][ T5934] usb 1-1: config 0 descriptor?? [ 380.104730][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 380.104783][ T30] audit: type=1326 audit(1775997345.885:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11958 comm="syz.1.1571" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa792b9c819 code=0x0 [ 380.213429][T11970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.234458][T11970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.252429][T11972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.261711][T11972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.273512][ T5934] usb 1-1: USB disconnect, device number 33 [ 380.299047][T11974] overlayfs: missing 'lowerdir' [ 380.304547][T11973] overlayfs: missing 'lowerdir' [ 380.861714][ T29] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 381.026561][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 381.035679][ T29] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 381.045182][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.053956][ T29] usb 6-1: Product: syz [ 381.060107][ T29] usb 6-1: Manufacturer: syz [ 381.064751][ T29] usb 6-1: SerialNumber: syz [ 381.073245][ T29] usb 6-1: config 0 descriptor?? [ 381.086352][ T5934] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 381.236445][ T24] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 381.247092][ T5934] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.257295][ T5934] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 381.270450][ T5934] usb 1-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 381.280777][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.292981][ T5934] usb 1-1: config 0 descriptor?? [ 381.305441][ T5934] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 381.396273][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 381.403616][ T24] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 381.412093][ T24] usb 2-1: config 1 has no interface number 0 [ 381.418549][ T24] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 381.428562][ T24] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 381.439003][ T24] usb 2-1: config 1 interface 105 has no altsetting 0 [ 381.448420][ T24] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 381.457798][ T24] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 381.465956][ T24] usb 2-1: Product: syz [ 381.470249][ T24] usb 2-1: Manufacturer: syz [ 381.474906][ T24] usb 2-1: SerialNumber: syz [ 381.483728][T11990] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 381.491161][T11990] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 381.714806][ T29] peak_usb 6-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 381.734154][ T24] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 381.767607][ T24] usb 2-1: USB disconnect, device number 45 [ 381.806364][T11995] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1581'. [ 381.847829][ T29] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -71 [ 381.859570][T11999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.865307][ T29] usb 6-1: USB disconnect, device number 111 [ 381.881827][T11999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.166353][ T24] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 382.283848][T12003] netlink: 190972 bytes leftover after parsing attributes in process `syz.5.1583'. [ 382.318780][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 382.327560][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 382.337144][ T24] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 382.348378][ T24] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 382.363270][ T24] usb 2-1: string descriptor 0 read error: -22 [ 382.369798][ T24] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 382.378963][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.536267][ T5934] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 382.661729][ T24] usb 2-1: USB disconnect, device number 46 [ 382.698555][ T5934] usb 6-1: config 0 has an invalid interface number: 53 but max is 0 [ 382.713323][ T5934] usb 6-1: config 0 has no interface number 0 [ 382.721690][ T5934] usb 6-1: too many endpoints for config 0 interface 53 altsetting 130: 193, using maximum allowed: 30 [ 382.739602][ T5934] usb 6-1: config 0 interface 53 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 193 [ 382.753453][ T5934] usb 6-1: config 0 interface 53 has no altsetting 0 [ 382.761013][ T5934] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 382.771152][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.782713][ T5934] usb 6-1: config 0 descriptor?? [ 382.994257][ T5934] usb 6-1: string descriptor 0 read error: -71 [ 383.002107][ T5934] cp210x 6-1:0.53: cp210x converter detected [ 383.008737][ T5934] cp210x 6-1:0.53: failed to get vendor val 0x370b size 1: -71 [ 383.017223][ T5934] cp210x 6-1:0.53: querying part number failed [ 383.026366][ T5934] usb 6-1: cp210x converter now attached to ttyUSB0 [ 383.040002][ T5934] usb 6-1: USB disconnect, device number 112 [ 383.051642][ T5934] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 383.060997][ T5934] cp210x 6-1:0.53: device disconnected [ 383.386525][ T24] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 383.536602][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 383.549261][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 383.560233][ T24] usb 2-1: too many endpoints for config 1 interface 0 altsetting 75: 130, using maximum allowed: 30 [ 383.572252][ T24] usb 2-1: config 1 interface 0 altsetting 75 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 383.604129][ T24] usb 2-1: config 1 interface 0 has no altsetting 0 [ 383.618095][ T24] usb 2-1: string descriptor 0 read error: -22 [ 383.624789][ T24] usb 2-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.40 [ 383.637785][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.860697][ T5909] usb 1-1: USB disconnect, device number 34 [ 383.868100][ T5934] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 384.027590][ T5934] usb 6-1: Using ep0 maxpacket: 8 [ 384.037524][ T5934] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 384.046690][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 384.054974][ T5934] usb 6-1: Product: syz [ 384.059288][ T5934] usb 6-1: Manufacturer: syz [ 384.064054][ T5934] usb 6-1: SerialNumber: syz [ 384.072127][ T5934] usb 6-1: config 0 descriptor?? [ 384.087098][ T5934] gspca_main: sq905-2.14.0 probing 2770:9120 [ 384.111112][ T24] hid_parser_main: 319 callbacks suppressed [ 384.111140][ T24] wacom 0003:056A:0318.001F: unknown main item tag 0x0 [ 384.125338][ T24] wacom 0003:056A:0318.001F: unknown main item tag 0x0 [ 384.132533][ T24] wacom 0003:056A:0318.001F: unknown main item tag 0x0 [ 384.140792][ T24] wacom 0003:056A:0318.001F: unknown main item tag 0x0 [ 384.147896][ T24] wacom 0003:056A:0318.001F: unknown main item tag 0x0 [ 384.154810][ T24] wacom 0003:056A:0318.001F: unknown main item tag 0x0 [ 384.162225][ T24] wacom 0003:056A:0318.001F: unknown main item tag 0x0 [ 384.169357][ T24] wacom 0003:056A:0318.001F: unknown main item tag 0x0 [ 384.176325][ T24] wacom 0003:056A:0318.001F: unknown main item tag 0x0 [ 384.183223][ T24] wacom 0003:056A:0318.001F: unknown main item tag 0x0 [ 384.236375][ T5909] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 384.267358][ T5841] usb 2-1: USB disconnect, device number 47 [ 384.408320][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 384.419561][ T5909] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 384.429479][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.441479][ T5909] usb 1-1: config 0 descriptor?? [ 384.448469][T12013] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 384.489520][ T5934] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 384.498804][ T5934] sq905 6-1:0.0: probe with driver sq905 failed with error -71 [ 384.511516][ T5934] usb 6-1: USB disconnect, device number 113 [ 384.811883][T12018] netlink: 'syz.1.1588': attribute type 6 has an invalid length. [ 384.990367][ T5909] usbhid 1-1:0.0: can't add hid device: -71 [ 384.996538][ T5909] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 385.007611][ T5909] usb 1-1: USB disconnect, device number 35 [ 385.066383][ T5934] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 385.227853][ T5934] usb 2-1: Using ep0 maxpacket: 8 [ 385.235629][ T5934] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 385.244584][ T5934] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.258227][ T5934] usb 2-1: config 0 has no interface number 0 [ 385.264420][ T5934] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 385.285471][ T5934] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 385.300685][ T5934] usb 2-1: config 0 interface 255 has no altsetting 0 [ 385.311827][ T5934] usb 2-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= d.68 [ 385.321183][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.329855][ T5934] usb 2-1: Product: syz [ 385.334855][ T5934] usb 2-1: Manufacturer: syz [ 385.339547][ T5934] usb 2-1: SerialNumber: syz [ 385.346312][ T5934] usb 2-1: config 0 descriptor?? [ 385.563618][T12018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.572588][T12018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.582403][ T5908] usb 2-1: USB disconnect, device number 48 [ 385.756525][ T24] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 385.786305][ T29] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 385.908780][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 385.917822][ T24] usb 6-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 385.930869][ T24] usb 6-1: config 1 interface 0 has no altsetting 0 [ 385.938940][ T29] usb 1-1: not running at top speed; connect to a high speed hub [ 385.949135][ T29] usb 1-1: config 55 has an invalid interface number: 173 but max is 1 [ 385.957817][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice= 0.40 [ 385.967173][ T29] usb 1-1: config 55 has an invalid interface number: 173 but max is 1 [ 385.975484][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.983619][ T29] usb 1-1: config 55 has 1 interface, different from the descriptor's value: 2 [ 385.992758][ T24] usb 6-1: Product: syz [ 385.997149][ T24] usb 6-1: Manufacturer: syz [ 386.001834][ T29] usb 1-1: config 55 has no interface number 0 [ 386.008123][ T24] usb 6-1: SerialNumber: syz [ 386.013871][ T29] usb 1-1: config 55 interface 173 has no altsetting 0 [ 386.023283][ T29] usb 1-1: language id specifier not provided by device, defaulting to English [ 386.034900][ T29] usb 1-1: New USB device found, idVendor=1199, idProduct=0025, bcdDevice=be.2f [ 386.044495][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.052644][ T29] usb 1-1: Product: syz [ 386.056893][ T29] usb 1-1: Manufacturer: syz [ 386.061633][ T29] usb 1-1: SerialNumber: syz [ 386.243887][ T24] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input54 [ 386.256429][ T5195] bcm5974 6-1:1.0: could not read from device [ 386.267224][ T5195] bcm5974 6-1:1.0: could not read from device [ 386.275547][T12026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.285730][ T24] usb 6-1: USB disconnect, device number 114 [ 386.291193][ T5195] bcm5974 6-1:1.0: could not read from device [ 386.296973][T12026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.315178][T12026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.331220][T12026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.348930][T12026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.360189][T12026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.379970][T12026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.390275][T12026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.400190][T12026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.412313][T12026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.434252][ T29] sierra 1-1:55.173: Sierra USB modem converter detected [ 386.448784][ T29] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 386.463157][ T29] usb 1-1: USB disconnect, device number 36 [ 386.480914][ T29] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 386.490788][ T29] sierra 1-1:55.173: device disconnected [ 387.261404][ T29] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 387.396658][ T29] usb 6-1: device descriptor read/64, error -71 [ 387.526829][ T24] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 387.636337][ T29] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 387.699442][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 387.713110][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 387.722552][ T24] usb 1-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 387.731317][ T24] usb 1-1: Product: syz [ 387.742191][ T24] usb 1-1: config 0 descriptor?? [ 387.758270][ T24] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 387.797091][ T29] usb 6-1: device descriptor read/64, error -71 [ 387.803490][ T5908] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 387.916732][ T29] usb usb6-port1: attempt power cycle [ 387.956437][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 387.962281][ T5934] usb 1-1: USB disconnect, device number 37 [ 387.981997][ T5908] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 388.008797][ T5908] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 388.021882][ T5908] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 388.031906][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.042479][ T5908] usb 2-1: Product: syz [ 388.048454][ T5908] usb 2-1: Manufacturer: syz [ 388.053292][ T5908] usb 2-1: SerialNumber: syz [ 388.077122][ T5908] usb 2-1: 0:2 : does not exist [ 388.266451][ T29] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 388.292760][ T5908] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 388.305883][ T29] usb 6-1: device descriptor read/8, error -71 [ 388.373308][ T5908] usb 2-1: USB disconnect, device number 49 [ 388.437012][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 388.549517][ T29] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 388.587227][ T29] usb 6-1: device descriptor read/8, error -71 [ 388.707808][ T29] usb usb6-port1: unable to enumerate USB device [ 388.876430][ T5934] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 389.026356][ T5934] usb 1-1: Using ep0 maxpacket: 8 [ 389.033715][ T5934] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.048554][ T5934] usb 1-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 389.059054][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.087854][ T5934] usb 1-1: Product: syz [ 389.102647][ T5934] usb 1-1: Manufacturer: syz [ 389.111838][ T5934] usb 1-1: SerialNumber: syz [ 389.128848][ T5934] usb 1-1: config 0 descriptor?? [ 389.150322][ T5934] cdc_ether 1-1:0.0: skipping garbage [ 389.166317][ T5934] cdc_ether 1-1:0.0: bad CDC descriptors [ 389.179741][ T5934] usb 1-1: unsupported MDLM descriptors [ 389.188836][T12071] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1607'. [ 389.193306][ T5934] cdc_acm 1-1:0.0: skipping garbage [ 389.456343][ T5934] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 389.619610][ T5934] usb 2-1: config 2 has an invalid interface number: 237 but max is 3 [ 389.629318][ T5934] usb 2-1: config 2 has an invalid interface number: 105 but max is 3 [ 389.637815][ T5934] usb 2-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 389.646731][ T5934] usb 2-1: config 2 has an invalid interface number: 171 but max is 3 [ 389.655140][ T5934] usb 2-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 389.664069][ T5934] usb 2-1: config 2 has an invalid interface number: 55 but max is 3 [ 389.672244][ T5934] usb 2-1: config 2 has no interface number 0 [ 389.678492][ T5934] usb 2-1: config 2 has no interface number 1 [ 389.684620][ T5934] usb 2-1: config 2 has no interface number 2 [ 389.690826][ T5934] usb 2-1: config 2 has no interface number 3 [ 389.697052][ T5934] usb 2-1: config 2 interface 237 altsetting 3 endpoint 0x1 has invalid maxpacket 1983, setting to 64 [ 389.709466][ T5934] usb 2-1: config 2 interface 237 altsetting 3 endpoint 0x5 has invalid maxpacket 136, setting to 64 [ 389.709809][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 389.720578][ T5934] usb 2-1: config 2 interface 237 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 389.720607][ T5934] usb 2-1: config 2 interface 237 altsetting 3 has an endpoint descriptor with address 0x23, changing to 0x3 [ 389.720634][ T5934] usb 2-1: config 2 interface 237 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 389.720657][ T5934] usb 2-1: config 2 interface 237 altsetting 3 bulk endpoint 0x4 has invalid maxpacket 8 [ 389.775626][ T5934] usb 2-1: config 2 interface 237 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 389.786513][ T5934] usb 2-1: config 2 interface 105 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 389.797888][ T5934] usb 2-1: config 2 interface 105 altsetting 4 has a duplicate endpoint with address 0x85, skipping [ 389.808845][ T5934] usb 2-1: config 2 interface 105 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 389.819919][ T5934] usb 2-1: config 2 interface 105 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 389.830876][ T5934] usb 2-1: config 2 interface 105 altsetting 4 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 389.842809][ T5934] usb 2-1: config 2 interface 105 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 389.853912][ T5934] usb 2-1: config 2 interface 105 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 389.864690][ T5934] usb 2-1: config 2 interface 105 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 389.878917][ T5934] usb 2-1: config 2 interface 105 altsetting 4 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 389.889892][ T5934] usb 2-1: config 2 interface 105 altsetting 4 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 389.900848][ T5934] usb 2-1: config 2 interface 171 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 389.912070][ T5934] usb 2-1: config 2 interface 55 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 389.923556][ T5934] usb 2-1: config 2 interface 55 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 389.935075][ T5934] usb 2-1: config 2 interface 55 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 389.956240][ T5934] usb 2-1: config 2 interface 237 has no altsetting 0 [ 389.969004][ T5934] usb 2-1: config 2 interface 105 has no altsetting 0 [ 389.987990][ T5934] usb 2-1: config 2 interface 171 has no altsetting 0 [ 390.007140][ T5934] usb 2-1: config 2 interface 55 has no altsetting 0 [ 390.022745][ T5934] usb 2-1: New USB device found, idVendor=0471, idProduct=2088, bcdDevice=ff.5c [ 390.032405][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.045633][ T5934] usb 2-1: Product: syz [ 390.046551][T12081] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1609'. [ 390.051165][ T5934] usb 2-1: Manufacturer: syz [ 390.064512][ T5934] usb 2-1: SerialNumber: syz [ 390.087190][T12072] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 390.483835][ T5934] usb 2-1: USB disconnect, device number 50 [ 390.756252][ T5909] usb 6-1: new full-speed USB device number 119 using dummy_hcd [ 390.909635][ T5909] usb 6-1: config 0 has no interfaces? [ 390.916123][ T5909] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 390.922665][T12096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.928983][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.937104][T12096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.943779][T12097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.964507][ T5909] usb 6-1: config 0 descriptor?? [ 390.986800][T12097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.023906][T12099] netlink: 'syz.1.1615': attribute type 1 has an invalid length. [ 391.203016][T12095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.215381][T12095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.219051][T12088] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 391.227815][T12096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.241932][T12096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.250814][T12088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.260113][T12088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.272368][ T5909] usb 6-1: USB disconnect, device number 119 [ 391.426432][ T29] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 391.578208][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.588578][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 391.599531][ T29] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 391.612814][ T29] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 391.621947][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.631816][ T5909] usb 1-1: USB disconnect, device number 38 [ 391.642269][ T29] usb 2-1: config 0 descriptor?? [ 391.865382][ T24] usb 2-1: USB disconnect, device number 51 [ 392.096458][ T29] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 392.116422][ T5909] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 392.246278][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 392.248168][ T29] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 392.248203][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.250467][ T29] usb 6-1: config 0 descriptor?? [ 392.259822][ T29] gspca_main: sunplus-2.14.0 probing 041e:400b [ 392.269697][ T5909] usb 1-1: unable to get BOS descriptor or descriptor too short [ 392.271354][ T5909] usb 1-1: config 12 has an invalid interface number: 239 but max is 0 [ 392.321913][ T5909] usb 1-1: config 12 has no interface number 0 [ 392.324851][ T5909] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice=11.d1 [ 392.324883][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.324905][ T5909] usb 1-1: Product: syz [ 392.324921][ T5909] usb 1-1: Manufacturer: syz [ 392.324936][ T5909] usb 1-1: SerialNumber: syz [ 392.465096][T12125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.468166][T12125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.556725][ T5909] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:12.239/input/input55 [ 392.561193][ T5195] bcm5974 1-1:12.239: could not read from device [ 392.568549][ T5195] bcm5974 1-1:12.239: could not read from device [ 392.577161][ T5909] usb 1-1: USB disconnect, device number 39 [ 392.601406][ T5195] bcm5974 1-1:12.239: could not read from device [ 392.606597][ T5195] bcm5974 1-1:12.239: could not read from device [ 392.731359][ T29] gspca_sunplus: reg_r err -71 [ 392.731462][ T29] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 392.736858][ T29] usb 6-1: USB disconnect, device number 120 [ 392.991160][T12143] fuse: Bad value for 'group_id' [ 392.997954][T12143] fuse: Bad value for 'group_id' [ 393.044335][T12145] netlink: 'syz.1.1630': attribute type 10 has an invalid length. [ 393.071946][T12145] veth0_vlan: left promiscuous mode [ 393.089649][T12145] veth0_vlan: entered promiscuous mode [ 393.110488][T12145] team0: Device veth0_vlan failed to register rx_handler [ 393.188127][ T29] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 393.376261][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 393.398711][ T29] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 393.428405][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.454122][ T29] usb 6-1: Product: syz [ 393.467753][ T29] usb 6-1: Manufacturer: syz [ 393.476942][ T29] usb 6-1: SerialNumber: syz [ 393.495652][ T29] usb 6-1: config 0 descriptor?? [ 393.508524][ T5909] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 393.518271][ T29] gspca_main: sq930x-2.14.0 probing 2770:930c [ 393.699066][ T5909] usb 1-1: config 160 has an invalid interface number: 200 but max is 0 [ 393.710712][ T5909] usb 1-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config [ 393.721387][ T5909] usb 1-1: config 160 has no interface number 0 [ 393.730957][ T5909] usb 1-1: config 160 interface 200 altsetting 30 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 393.756989][ T5909] usb 1-1: config 160 interface 200 altsetting 30 endpoint 0x8 has invalid wMaxPacketSize 0 [ 393.782784][ T5909] usb 1-1: config 160 interface 200 has no altsetting 0 [ 393.802222][ T5909] usb 1-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 393.823836][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.843944][ T5909] usb 1-1: Product: syz [ 393.854753][ T5909] usb 1-1: Manufacturer: syz [ 393.867926][ T5909] usb 1-1: SerialNumber: syz [ 393.943744][T12156] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.1633'. [ 394.103935][ T5909] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 394.115832][ T5909] usb 1-1: MIDIStreaming interface descriptor not found [ 394.259042][ T29] gspca_sq930x: ucbus_write failed -71 [ 394.296518][ T5929] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 394.337358][ T5909] usb 1-1: USB disconnect, device number 40 [ 394.430048][ T6068] udevd[6068]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 394.477997][ T5929] usb 2-1: Using ep0 maxpacket: 16 [ 394.490320][ T5929] usb 2-1: config 1 has too many interfaces: 129, using maximum allowed: 32 [ 394.506287][ T29] gspca_sq930x: Sensor ov9630 not yet treated [ 394.518464][ T5929] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 129 [ 394.522259][ T29] sq930x 6-1:0.0: probe with driver sq930x failed with error -22 [ 394.552918][ T5929] usb 2-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.580806][ T5929] usb 2-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 394.593095][ T29] usb 6-1: USB disconnect, device number 121 [ 394.602760][ T5929] usb 2-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 394.651396][ T5929] usb 2-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 394.699511][ T5929] usb 2-1: config 1 interface 0 has no altsetting 0 [ 394.724982][ T5929] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 394.752959][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 394.776279][ T5929] usb 2-1: SerialNumber: syz [ 394.790831][T12158] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 394.820530][T12158] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 394.856327][ T5929] cdc_ether 2-1:1.0: missing cdc header descriptor [ 395.018313][T12168] netlink: 4356 bytes leftover after parsing attributes in process `syz.5.1637'. [ 395.046554][T12168] netlink: 4356 bytes leftover after parsing attributes in process `syz.5.1637'. [ 395.060461][T12158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.088291][T12158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.118969][T12158] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 395.126945][T12158] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 395.170489][ T5929] cdc_subset 2-1:1.0 usb0: register 'cdc_subset' at usb-dummy_hcd.1-1, Linux Device, ae:f6:07:a5:28:63 [ 395.206433][ T5909] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 395.326352][ T24] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 395.343500][ T5929] usb 2-1: USB disconnect, device number 52 [ 395.372161][ T5929] cdc_subset 2-1:1.0 usb0: unregister 'cdc_subset' usb-dummy_hcd.1-1, Linux Device [ 395.386503][ T5909] usb 1-1: Using ep0 maxpacket: 16 [ 395.401375][ T5909] usb 1-1: unable to get BOS descriptor or descriptor too short [ 395.430792][ T5909] usb 1-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 395.459156][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.480800][ T5909] usb 1-1: Product: syz [ 395.491682][ T5909] usb 1-1: Manufacturer: syz [ 395.498238][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 395.502083][ T5909] usb 1-1: SerialNumber: syz [ 395.520749][ T24] usb 6-1: config 168 has an invalid descriptor of length 79, skipping remainder of the config [ 395.552120][ T24] usb 6-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 395.573025][ T24] usb 6-1: config 168 interface 0 has no altsetting 0 [ 395.582182][ T24] usb 6-1: config 168 has an invalid descriptor of length 79, skipping remainder of the config [ 395.594039][ T24] usb 6-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 395.607901][ T24] usb 6-1: config 168 interface 0 has no altsetting 0 [ 395.617720][ T24] usb 6-1: config 168 has an invalid descriptor of length 79, skipping remainder of the config [ 395.628333][ T24] usb 6-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 395.642392][ T24] usb 6-1: config 168 interface 0 has no altsetting 0 [ 395.654979][ T24] usb 6-1: string descriptor 0 read error: -22 [ 395.662956][ T24] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 395.672833][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.701210][ T24] adutux 6-1:168.0: interrupt endpoints not found [ 395.856672][ T5909] usb 1-1: USB disconnect, device number 41 [ 395.932579][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 396.010243][ T5929] usb 6-1: USB disconnect, device number 122 [ 396.444665][ T30] audit: type=1400 audit(1775997362.225:2376): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147C8A3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F0 [ 396.455950][T12202] netlink: 'syz.1.1642': attribute type 10 has an invalid length. [ 396.506756][ T5929] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 396.576054][T12202] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1642'. [ 396.618435][T12202] batman_adv: batadv0: Adding interface:  [ 396.624879][T12202] batman_adv: batadv0: The MTU of interface  is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.736961][T12202] batman_adv: batadv0: Interface activated:  [ 396.757068][ T29]  speed is unknown, defaulting to 1000 [ 396.815334][ T5929] usb 6-1: Using ep0 maxpacket: 32 [ 396.850719][ T5929] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 396.860469][T12222] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1646'. [ 396.866272][ T5929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.900867][ T5929] usb 6-1: Product: syz [ 396.905235][ T5929] usb 6-1: Manufacturer: syz [ 396.911693][ T5929] usb 6-1: SerialNumber: syz [ 396.923296][ T5929] usb 6-1: config 0 descriptor?? [ 396.956834][ T5929] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 396.970966][ T5929] dvb-usb: bulk message failed: -22 (4/0) [ 396.986202][ T5929] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 397.003890][ T5929] dvb-usb: bulk message failed: -22 (5/0) [ 397.025425][ T5929] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 397.061742][ T5929] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 397.085393][ T5929] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 397.094713][ T5929] usb 6-1: media controller created [ 397.126226][ T5909] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 397.150780][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 397.156809][T12234] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 397.204919][T12191] em28xx 3-1:0.89: reading from i2c device at 0xa failed (error=-5) [ 397.264437][ T5929] usb 6-1: selecting invalid altsetting 3 [ 397.271186][ T5929] ttusb2: set interface to alts=3 failed [ 397.280750][ T5909] usb 1-1: Using ep0 maxpacket: 32 [ 397.288569][ T5909] usb 1-1: unable to get BOS descriptor or descriptor too short [ 397.302648][ T5909] usb 1-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config [ 397.325078][ T5909] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 397.345901][ T5909] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 83, changing to 7 [ 397.380413][ T5909] usb 1-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 397.392007][ T5929] DVB: Unable to find symbol tda10086_attach() [ 397.398271][ T5929] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 397.406467][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.415086][ T5909] usb 1-1: Product: syz [ 397.430753][ T5929] dvb-usb: bulk message failed: -22 (4/0) [ 397.432013][ T29] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 397.438565][ T5909] usb 1-1: Manufacturer: syz [ 397.450751][ T5929] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 397.472973][ T5909] usb 1-1: SerialNumber: syz [ 397.478352][ T5929] dvb-usb: bulk message failed: -22 (5/0) [ 397.490299][ T5929] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 397.505117][ T5929] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 397.529650][T12242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.529865][ T5929] usb 6-1: USB disconnect, device number 123 [ 397.540676][T12242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.574359][T12242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.602542][T12242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.609272][ T5929] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 397.619828][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 397.625579][ T29] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 397.643790][T12243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.653173][ T29] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 397.655147][T12243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.673905][ T29] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 397.689517][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.710239][ T29] usb 2-1: config 0 descriptor?? [ 397.718187][ T5909] usb 1-1: unknown sample rate [ 397.730143][ T29] qmi_wwan 2-1:0.0: bogus CDC Union: master=25, slave=0 [ 397.825353][ T5909] usb 1-1: USB disconnect, device number 42 [ 397.866394][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 397.910134][T12250] netlink: 'syz.5.1655': attribute type 17 has an invalid length. [ 397.919540][T12250] netlink: 'syz.5.1655': attribute type 16 has an invalid length. [ 397.928932][T12250] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1655'. [ 397.947063][ T29] usb 2-1: string descriptor 0 read error: -71 [ 397.965498][ T29] qmi_wwan 2-1:0.0: probe with driver qmi_wwan failed with error -22 [ 398.000103][ T29] usb 2-1: USB disconnect, device number 53 [ 398.194085][T12263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.203536][T12263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.214385][T12263] ucma_write: process 1671 (syz.2.1660) changed security contexts after opening file descriptor, this is not allowed. [ 398.391641][T12269] sctp: [Deprecated]: syz.2.1661 (pid 12269) Use of int in max_burst socket option deprecated. [ 398.391641][T12269] Use struct sctp_assoc_value instead [ 398.986405][ T29] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 399.174112][ T29] usb 2-1: unable to get BOS descriptor or descriptor too short [ 399.200305][T12302] em28xx 3-1:0.89: reading from i2c device at 0x1dc failed (error=-5) [ 399.200840][ T29] usb 2-1: not running at top speed; connect to a high speed hub [ 399.235821][ T29] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 219, changing to 4 [ 399.240178][T12297] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1669'. [ 399.252882][ T29] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 399.271913][ T29] usb 2-1: New USB device found, idVendor=2b73, idProduct=000e, bcdDevice= 0.40 [ 399.284535][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.291189][T12297] bridge_slave_1: default FDB implementation only supports local addresses [ 399.294645][T12304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.330628][ T29] usb 2-1: Product: ㅳ⭘哃℠ﻉ툠靆⽭㟈雵牀个ꈞᘘຌ춳⬙ﱛ໇厤燆瓷鵃ཟ嘤饢粎낚䡳槮ᤥ塒䎘萢ⱉ₤뺎ᐧ猬᪥㷴㫝鋅蘱巡횓嬓僟䍓喊可⋞ꌞ䎷邇밲넖咚珍緶㱖篵䄐칈櫱㯒녔瘕빽蕇꬗䃍匘鰄䒛䇴롉砒髡 [ 399.346524][T12304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.367235][ T5846] usb 6-1: [UEAGLE-ATM] firmware is not available [ 399.379273][ T5895] usb 6-1: [UEAGLE-ATM] firmware is not available [ 399.386096][ T29] usb 2-1: Manufacturer: ᎋ⽤嵀鍱書ゟ֑래숇댭ᴣꭇ뿛藚 [ 399.390299][T12297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.394583][ T29] usb 2-1: SerialNumber: 삺霘䤬ẻ퉣 [ 399.404875][T12297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.631563][ T29] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 399.639162][ T29] usb 2-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 399.647966][ T29] usb 2-1: 2:1 : sample bitwidth 128 in over sample bytes 7 [ 399.655369][ T29] usb 2-1: 2:1 : unsupported sample bitwidth 128 in 7 bytes [ 399.667694][ T24] usb 6-1: new full-speed USB device number 124 using dummy_hcd [ 399.703792][ T29] usb 2-1: USB disconnect, device number 54 [ 399.837968][ T24] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 399.850714][ T24] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 399.861614][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.871208][ T24] usb 6-1: Product: syz [ 399.875511][ T24] usb 6-1: Manufacturer: syz [ 399.880522][ T24] usb 6-1: SerialNumber: syz [ 399.904807][ T24] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 400.156499][ T5934] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 400.312569][T12306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.327115][ T24] usb 6-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 400.330781][ T5934] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 400.340032][T12306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.371515][ T5934] usb 1-1: config 0 has no interface number 0 [ 400.382936][ T5934] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.395791][ T5934] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.407513][ T5934] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 400.420817][ T5934] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 400.431393][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.443194][ T5934] usb 1-1: config 0 descriptor?? [ 400.674348][T12308] syzkaller1: entered promiscuous mode [ 400.688321][T12308] syzkaller1: entered allmulticast mode [ 400.790593][T12318] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.906768][ T24] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 400.906960][T12318] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.022198][T12318] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.036341][ T24] usb 2-1: device descriptor read/64, error -71 [ 401.111093][T12308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.122668][T12308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.130244][T12318] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.193080][ T5934] usbhid 1-1:0.1: can't add hid device: -71 [ 401.206054][ T5934] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 401.218761][ T5934] usb 1-1: USB disconnect, device number 43 [ 401.276347][ T24] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 401.291789][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.300639][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.321367][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.336711][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.347375][T12319] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.412488][T12319] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.416335][ T24] usb 2-1: device descriptor read/64, error -71 [ 401.464730][T12319] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.503430][T12319] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.536793][ T24] usb usb2-port1: attempt power cycle [ 401.855061][T12327] overlay: Bad value for 'workdir' [ 401.876278][ T24] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 401.916948][ T24] usb 2-1: device descriptor read/8, error -71 [ 402.167542][ T24] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 402.176391][ T5909] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 402.186782][ T24] usb 2-1: device descriptor read/8, error -71 [ 402.296857][ T24] usb usb2-port1: unable to enumerate USB device [ 402.337709][ T24] usb 6-1: USB disconnect, device number 124 [ 402.357599][ T5909] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 402.379245][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.393712][ T5909] usb 1-1: Product: syz [ 402.401190][ T5909] usb 1-1: Manufacturer: syz [ 402.405967][ T5909] usb 1-1: SerialNumber: syz [ 402.624163][ T5909] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 402.638413][ T5909] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 402.649120][ T5909] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 402.660924][ T5909] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 402.676558][ T5909] usb 1-1: USB disconnect, device number 44 [ 403.287667][T12336] netlink: 'syz.0.1680': attribute type 39 has an invalid length. [ 403.333361][T12336] hsr_slave_0 (unregistering): left promiscuous mode [ 404.224930][T12376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1688'. [ 404.234806][T12376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1688'. [ 404.316470][ T5909] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 404.407409][ T5934] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 404.477212][ T5909] usb 6-1: device descriptor read/64, error -71 [ 404.566594][ T5934] usb 2-1: Using ep0 maxpacket: 8 [ 404.580145][ T5934] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 404.588642][ T5934] usb 2-1: can't read configurations, error -22 [ 404.726376][ T5909] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 404.734163][ T5934] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 404.886278][ T5909] usb 6-1: device descriptor read/64, error -71 [ 404.906838][ T5934] usb 2-1: Using ep0 maxpacket: 8 [ 404.917805][ T5934] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 404.936250][ T5934] usb 2-1: can't read configurations, error -22 [ 404.942889][ T5934] usb usb2-port1: attempt power cycle [ 404.973023][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.004072][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.026825][ T5909] usb usb6-port1: attempt power cycle [ 405.034437][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.071777][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.207703][T12398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.218158][T12398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.229453][T12398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.240353][T12398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.250178][T12398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.269920][T12400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.270327][T12398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.288801][T12400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.303055][ T5934] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 405.337506][ T5934] usb 2-1: Using ep0 maxpacket: 8 [ 405.345430][ T5934] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 405.353860][ T5934] usb 2-1: can't read configurations, error -22 [ 405.378799][ T5909] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 405.407251][ T5909] usb 6-1: device descriptor read/8, error -71 [ 405.458098][T12405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.473773][T12405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.486250][ T5934] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 405.539842][ T5934] usb 2-1: Using ep0 maxpacket: 8 [ 405.548157][ T5934] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 405.556351][ T5934] usb 2-1: can't read configurations, error -22 [ 405.563234][ T5934] usb usb2-port1: unable to enumerate USB device [ 405.666297][ T5909] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 405.697080][ T5909] usb 6-1: device descriptor read/8, error -71 [ 405.806742][ T5909] usb usb6-port1: unable to enumerate USB device [ 407.043113][T12368] delete_channel: no stack [ 421.066565][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 440.279556][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.285962][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 452.426277][ T33] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 471.478488][T12417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.487579][T12417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.499498][T12417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.509015][T12417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.549216][T12424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.559526][T12424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.570090][T12424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.578452][T12424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.779392][ T5934] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 471.916336][ T24] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 471.936269][ T5934] usb 2-1: Using ep0 maxpacket: 16 [ 471.943245][ T5934] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 511 [ 471.955797][ T5934] usb 2-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 471.965177][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.973265][ T5934] usb 2-1: Product: syz [ 471.977821][ T5934] usb 2-1: Manufacturer: syz [ 471.982753][ T5934] usb 2-1: SerialNumber: syz [ 471.990416][T12426] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 472.036581][ T5841] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 472.046419][ T24] usb 1-1: device descriptor read/64, error -71 [ 472.213649][ T5841] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 472.225043][ T5934] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 472.242074][ T5841] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 472.251777][ T5934] usb 2-1: MIDIStreaming interface descriptor not found [ 472.260665][ T5841] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 472.279528][ T5841] usb 6-1: config 220 has no interface number 2 [ 472.286758][ T24] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 472.289375][ T5841] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 472.321548][ T5841] usb 6-1: config 220 interface 0 has no altsetting 0 [ 472.333440][ T5841] usb 6-1: config 220 interface 76 has no altsetting 0 [ 472.366320][ T5841] usb 6-1: config 220 interface 1 has no altsetting 0 [ 472.379292][ T5841] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 472.395846][ T5841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.409135][ T5934] usb 2-1: USB disconnect, device number 63 [ 472.421216][ T5841] usb 6-1: Product: syz [ 472.426234][ T24] usb 1-1: device descriptor read/64, error -71 [ 472.431970][ T5841] usb 6-1: Manufacturer: syz [ 472.440728][ T5841] usb 6-1: SerialNumber: syz [ 472.529190][T12446] udevd[12446]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 472.548246][ T24] usb usb1-port1: attempt power cycle [ 472.677053][T12449] syzkaller1: entered promiscuous mode [ 472.682590][T12449] syzkaller1: entered allmulticast mode [ 472.735423][ T5841] usb 6-1: selecting invalid altsetting 0 [ 472.758255][ T5841] usb 6-1: selecting invalid altsetting 0 [ 472.773000][ T5841] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 472.781009][ T5841] uvcvideo 6-1:220.0: No valid video chain found. [ 472.816992][ T5841] usb 6-1: selecting invalid altsetting 0 [ 472.830981][ T5841] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 472.856706][ T5841] usb 6-1: USB disconnect, device number 3 [ 472.896415][ T24] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 472.920790][ T24] usb 1-1: device descriptor read/8, error -71 [ 473.066543][ T5846] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 473.167427][ T24] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 473.187155][ T24] usb 1-1: device descriptor read/8, error -71 [ 473.226371][ T5846] usb 2-1: Using ep0 maxpacket: 32 [ 473.235227][ T5846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.249883][ T5846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.268890][ T5846] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 473.279758][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.295549][ T5846] usb 2-1: config 0 descriptor?? [ 473.301678][ T24] usb usb1-port1: unable to enumerate USB device [ 473.383014][T12459] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 473.510448][T12459] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 473.525436][T12459] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 473.543606][T12459] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 473.743283][ T5846] hid_parser_main: 4007 callbacks suppressed [ 473.743309][ T5846] ft260 0003:0403:6030.0020: unknown main item tag 0x0 [ 473.771779][ T5846] ft260 0003:0403:6030.0020: unknown main item tag 0x0 [ 473.930463][ T5846] ft260 0003:0403:6030.0020: chip code: 0000 0000 [ 474.132556][ T5846] ft260 0003:0403:6030.0020: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 474.146320][ T5934] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 474.276447][ T5934] usb 6-1: device descriptor read/64, error -71 [ 474.332603][ T5846] ft260 0003:0403:6030.0020: failed to retrieve status: -32, no wakeup [ 474.516329][ T5934] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 474.551052][T12451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.574260][T12451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.609830][ T5846] ft260 0003:0403:6030.0020: failed to reset I2C controller: -71 [ 474.663853][ T5846] usb 2-1: USB disconnect, device number 64 [ 474.677182][ T5934] usb 6-1: device descriptor read/64, error -71 [ 474.812536][ T5934] usb usb6-port1: attempt power cycle [ 474.862035][T12482] A٨ speed is unknown, defaulting to 1000 [ 475.121409][T12482]  speed is unknown, defaulting to 1000 [ 475.127329][ T29] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 475.166328][ T5934] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 475.197124][ T5934] usb 6-1: device descriptor read/8, error -71 [ 475.258327][T12487] bad cache= option: none[()bvتr [ 475.258327][T12487] ٟ 9;^d!/7u\ݴMDҏeYo P50eB>KX/TJ*)J()ՀKf5&Lqq2WhWd0 [ 475.258327][T12487] [ 475.306704][T12487] CIFS: VFS: bad cache= option: none[()bvتr [ 475.306704][T12487] ٟ 9;^d!/7u\ݴMDҏeYo P50eB>KX/TJ*)J()ՀKf5&Lqq2WhWd0 [ 475.476516][ T5934] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 475.507161][ T5934] usb 6-1: device descriptor read/8, error -71 [ 475.546661][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout [ 475.553600][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 475.560007][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 475.630453][ T5934] usb usb6-port1: unable to enumerate USB device [ 476.014725][ T30] audit: type=1326 audit(1775997441.795:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12498 comm="syz.1.1716" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa792b9c819 code=0x0 [ 476.430213][T12502] fuse: Unknown parameter '' [ 476.792587][T12506] efs: cannot read volume header [ 476.956730][ T29] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 477.060227][T12518] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1722'. [ 477.060250][T12515] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1722'. [ 477.086298][ T24] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 477.098158][ T29] usb 1-1: device descriptor read/64, error -71 [ 477.222886][ T29] usb usb1-port1: attempt power cycle [ 477.235024][T12523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.252402][T12523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.259574][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 477.266032][T12523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.281549][ T24] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 477.281893][T12523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.299043][ T24] usb 2-1: config 0 has no interface number 0 [ 477.318365][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 477.336433][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.347401][ T24] usb 2-1: Product: syz [ 477.351967][ T24] usb 2-1: Manufacturer: syz [ 477.358417][ T24] usb 2-1: SerialNumber: syz [ 477.368354][ T24] usb 2-1: config 0 descriptor?? [ 477.394475][T12530] netlink: 'syz.5.1726': attribute type 1 has an invalid length. [ 477.566230][ T29] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 477.580241][T12508] Invalid source name [ 477.584358][T12508] UBIFS error (pid: 12508): cannot open "/dev/sr0", error -22 [ 477.585897][ T24] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 477.602829][ T29] usb 1-1: device descriptor read/8, error -71 [ 477.616948][ T24] usb 2-1: USB disconnect, device number 65 [ 477.648036][ T5929] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 477.831611][ T5929] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 477.846702][ T5929] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 477.847879][ T29] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 477.856180][ T5929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.874247][ T5929] usb 6-1: Product: ш [ 477.878983][ T5929] usb 6-1: Manufacturer: 픊訂ഴ᳇✳ꁺ슡뫧ཝ댧濟뚀讂捷渧懾㦉濞ꪅ㽥❊拪栭Ԩ᩸鈂挩﯍쭆⿯붶鸦໵맣ⴍߔ숀練樥㻅猣䷣珃狟窋ﭦ뗗Ჟ帔鱖ᘨ︶㊄稹䙡ᮬ㠢疐䓪빴춸㩎勺潼ⲣｏ㶅틠ᢥ暳錽ꋪḉ开扬⚴阢⤅뾄ꡱ塩᫷彘⬄ጠ㢂藇䠶㨎㻾ऍꎭ샮⹘멥ᇮꩋ䋁꽮꟠ﲱ萵⫛퍱䈖瑻澦뵆 [ 477.881702][T12532] random: crng reseeded on system resumption [ 477.916791][ T5929] usb 6-1: SerialNumber: ൘㕦뤎䖘淦枎沍 [ 477.926006][ T29] usb 1-1: device descriptor read/8, error -71 [ 478.036744][ T29] usb usb1-port1: unable to enumerate USB device [ 478.151024][T12530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.160986][T12530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.224650][ T5929] usb 6-1: 1:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 478.233279][ T5929] usb 6-1: found format II with max.bitrate = 79, frame size=0 [ 478.241478][ T5929] usb 6-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 478.250429][ T5929] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 478.340686][ T5929] usb 6-1: USB disconnect, device number 8 [ 478.406603][ T5909] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 478.463665][T12544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.477088][T12544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.516851][T12544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.529432][T12544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.546620][ T5909] usb 2-1: device descriptor read/64, error -71 [ 478.816358][ T5909] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 478.917524][ T5929] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 478.956330][ T5909] usb 2-1: device descriptor read/64, error -71 [ 479.077864][ T5909] usb usb2-port1: attempt power cycle [ 479.086994][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.087768][T12554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.100326][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.114463][T12554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.118629][ T5929] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 479.140503][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.153212][T12554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.154051][ T5929] usb 6-1: config 0 descriptor?? [ 479.163664][T12554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.379553][ T5929] playstation 0003:054C:0DF2.0021: unknown main item tag 0x0 [ 479.392029][ T5929] playstation 0003:054C:0DF2.0021: unknown main item tag 0x0 [ 479.412538][ T5929] playstation 0003:054C:0DF2.0021: unknown main item tag 0x0 [ 479.430468][ T5929] playstation 0003:054C:0DF2.0021: unknown main item tag 0x0 [ 479.449338][ T5909] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 479.459581][ T5929] playstation 0003:054C:0DF2.0021: unknown main item tag 0x0 [ 479.472190][ T5929] playstation 0003:054C:0DF2.0021: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 479.496959][ T5909] usb 2-1: device descriptor read/8, error -71 [ 479.548160][ T5929] playstation 0003:054C:0DF2.0021: Failed to retrieve feature with reportID 9: -71 [ 479.576600][ T5929] playstation 0003:054C:0DF2.0021: Failed to retrieve DualSense pairing info: -71 [ 479.600159][ T5929] playstation 0003:054C:0DF2.0021: Failed to get MAC address from DualSense [ 479.626324][ T5929] playstation 0003:054C:0DF2.0021: Failed to create dualsense. [ 479.645847][ T5929] playstation 0003:054C:0DF2.0021: probe with driver playstation failed with error -71 [ 479.663320][ T5929] usb 6-1: USB disconnect, device number 9 [ 479.767326][ T5909] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 479.796706][T12567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.797513][ T5909] usb 2-1: device descriptor read/8, error -71 [ 479.812495][T12567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.928260][ T5909] usb usb2-port1: unable to enumerate USB device [ 479.956330][ T5934] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 479.982820][T12573] kvm: pic: non byte write [ 479.991345][T12573] bridge0: port 3(syz_tun) entered blocking state [ 479.998290][T12573] bridge0: port 3(syz_tun) entered disabled state [ 480.006662][T12573] syz_tun: entered allmulticast mode [ 480.014017][T12573] syz_tun: entered promiscuous mode [ 480.020221][T12573] bridge0: port 3(syz_tun) entered blocking state [ 480.028887][T12573] bridge0: port 3(syz_tun) entered forwarding state [ 480.045842][T12573] netlink: 'syz.2.1738': attribute type 10 has an invalid length. [ 480.055739][T12573] bridge0: port 3(syz_tun) entered disabled state [ 480.064272][T12573] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.071855][T12573] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.099510][T12573] bridge0: port 3(syz_tun) entered blocking state [ 480.108002][T12573] bridge0: port 3(syz_tun) entered forwarding state [ 480.114940][T12573] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.122234][T12573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.129830][T12573] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.137078][T12573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.138800][ T5934] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.157290][ T5934] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 480.166405][ T5929] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 480.171775][T12573] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 480.174359][ T5934] usb 1-1: config 1 has no interface number 0 [ 480.192655][ T5934] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 480.210707][ T5934] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 480.221737][ T5934] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 480.235567][ T5934] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 480.245047][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.254240][ T5934] usb 1-1: Product: syz [ 480.259689][ T5934] usb 1-1: Manufacturer: syz [ 480.264475][ T5934] usb 1-1: SerialNumber: syz [ 480.281590][T12563] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 480.336580][ T5929] usb 6-1: Using ep0 maxpacket: 8 [ 480.348338][ T5929] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 480.363652][ T5929] usb 6-1: config 179 has no interface number 0 [ 480.371334][ T5929] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 480.383324][ T5929] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 480.394951][ T5929] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 480.406549][ T5929] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 480.420184][ T5929] usb 6-1: config 179 interface 65 has no altsetting 0 [ 480.427313][ T5929] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 480.437180][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.518996][ T5929] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input56 [ 480.586587][ T5195] input input56: unable to receive magic message: -110 [ 480.600956][ T5195] input input56: unable to receive magic message: -32 [ 480.640775][ T5195] input input56: unable to receive magic message: -32 [ 480.642834][T12581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.659192][T12581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.662098][ T5195] input input56: unable to receive magic message: -32 [ 480.686869][T12565] netlink: zone id is out of range [ 480.693377][ T5195] input input56: unable to receive magic message: -32 [ 480.706582][T12563] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 480.717557][ T5195] input input56: unable to receive magic message: -32 [ 480.744552][T12565] netlink: set zone limit has 4 unknown bytes [ 480.943164][ T24] usb 6-1: USB disconnect, device number 10 [ 480.943221][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 481.134088][ T5934] cdc_ncm 1-1:1.1: bind() failure [ 481.321445][T12590] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 481.342520][ T5934] usb 1-1: USB disconnect, device number 53 [ 481.566941][ T24] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 481.738863][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 481.759806][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 481.779152][ T24] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 481.808981][ T24] usb 2-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 481.819678][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.828234][ T24] usb 2-1: Product: syz [ 481.832455][ T24] usb 2-1: Manufacturer: syz [ 481.837789][ T24] usb 2-1: SerialNumber: syz [ 481.889204][T12600] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1748'. [ 481.904064][T12600] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1748'. [ 482.060752][ T24] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 482.128446][ T24] hub 2-1:1.2: Invalid hub with more than one config or interface [ 482.136779][ T24] hub 2-1:1.2: probe with driver hub failed with error -22 [ 482.153347][ T24] usb 2-1: USB disconnect, device number 70 [ 482.201986][T12430] udevd[12430]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 482.253947][T12592] ceph: No mds server is up or the cluster is laggy [ 482.641502][T12614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.658349][T12616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.659280][T12614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.676864][T12616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.806287][ T24] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 482.906291][ T29] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 482.969574][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.981239][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.991350][ T24] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 483.000500][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.011328][ T24] usb 1-1: config 0 descriptor?? [ 483.036322][ T29] usb 2-1: device descriptor read/64, error -71 [ 483.271412][T12627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.284253][T12627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.292460][ T29] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 483.428851][ T24] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 483.437703][ T29] usb 2-1: device descriptor read/64, error -71 [ 483.444869][ T24] cp2112 0003:10C4:EA90.0022: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 483.547731][ T29] usb usb2-port1: attempt power cycle [ 483.627006][ T24] cp2112 0003:10C4:EA90.0022: Part Number: 0x47 Device Version: 0xD0 [ 483.846398][T12636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.858350][T12636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.886333][ T29] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 483.909012][ T29] usb 2-1: device descriptor read/8, error -71 [ 484.146324][ T29] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 484.167286][ T29] usb 2-1: device descriptor read/8, error -71 [ 484.229988][ T24] cp2112 0003:10C4:EA90.0022: error reading lock byte: -71 [ 484.242817][ T24] usb 1-1: USB disconnect, device number 54 [ 484.278061][ T29] usb usb2-port1: unable to enumerate USB device [ 484.426303][ T1020] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 484.489710][T12641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.499159][T12641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.046254][ T24] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 485.206322][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 485.219697][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 485.233747][ T24] usb 1-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=d4.05 [ 485.255932][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.264144][ T24] usb 1-1: Product: syz [ 485.270024][ T24] usb 1-1: Manufacturer: syz [ 485.278965][ T24] usb 1-1: SerialNumber: syz [ 485.513582][ T24] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 485.520589][ T24] gspca_vc032x: reg_w err -71 [ 485.525295][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.530772][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.536441][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.541787][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.547591][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.553014][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.559508][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.564844][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.570218][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.575741][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.581088][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.586449][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.591761][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.597216][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.602576][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.608037][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.613348][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.618723][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.624109][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.629609][ T24] gspca_vc032x: Unknown sensor... [ 485.634737][ T24] vc032x 1-1:12.0: probe with driver vc032x failed with error -22 [ 485.645481][ T24] usb 1-1: USB disconnect, device number 55 [ 485.899256][T12695] QAT: failed to copy from user cfg_data. [ 486.286793][T12722] sg_write: data in/out 524300/98 bytes for SCSI command 0x14-- guessing data in; [ 486.286793][T12722] program syz.0.1782 not setting count and/or reply_len properly [ 486.469377][T12726] fuse: Bad value for 'fd' [ 486.484575][T12729] 9p: Bad value for 'rfdno' [ 486.548558][T12729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1787'. [ 486.817142][T12749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.841016][T12749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.872528][T12749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.885135][T12749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.932390][T12751] overlay: Unknown parameter '0" Xi9./file0' [ 487.006946][ T24] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 487.158741][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 487.169640][ T24] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 487.179094][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.187321][ T24] usb 2-1: Product: syz [ 487.191515][ T24] usb 2-1: Manufacturer: syz [ 487.196351][ T24] usb 2-1: SerialNumber: syz [ 487.206266][ T5929] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 487.368214][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 487.378084][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 487.391350][ T5929] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 487.406172][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.424066][ T5929] usb 1-1: Product: syz [ 487.428438][ T5929] usb 1-1: Manufacturer: syz [ 487.433113][ T5929] usb 1-1: SerialNumber: syz [ 487.441176][ T5929] usb 1-1: config 0 descriptor?? [ 487.474828][T12755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.485466][T12755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.522338][T12755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.531448][T12755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.013008][ T24] usb 2-1: 1:1: cannot get freq at ep 0x1 [ 488.089014][T12760] overlayfs: failed to clone upperpath [ 488.136982][ T5929] usb 1-1: USB disconnect, device number 56 [ 488.289023][ T5846] usb 3-1: USB disconnect, device number 20 [ 488.365739][ T5846] em28xx 3-1:0.89: Disconnecting em28xx [ 488.401451][ T5846] em28xx 3-1:0.89: Closing input extension [ 488.466316][ T5846] em28xx 3-1:0.89: Deregistering snapshot button [ 488.510143][ T24] usb 2-1: USB disconnect, device number 75 [ 488.676730][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 488.695314][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 488.713854][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 488.728741][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 488.745508][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 488.818229][T12775] program syz.1.1800 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 489.036873][T12769] A٨ speed is unknown, defaulting to 1000 [ 489.455716][ T7241] bridge0: port 3(syz_tun) entered disabled state [ 489.540999][ T7241] syz_tun (unregistering): left allmulticast mode [ 489.582291][ T7241] syz_tun (unregistering): left promiscuous mode [ 489.611720][ T7241] bridge0: port 3(syz_tun) entered disabled state [ 489.635233][T12797] netlink: 184 bytes leftover after parsing attributes in process `syz.5.1808'. [ 489.660648][ T5846] em28xx 3-1:0.89: Freeing device [ 489.683963][T12425] udevd[12425]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 489.720724][T12797] xt_socket: unknown flags 0xd0 [ 489.874525][T12810] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1811'. [ 489.903605][T12815] 9pnet_virtio: no channels available for device /dev/nullb0 [ 489.966232][ T5929] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 490.038210][ T33] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.099245][T12769]  speed is unknown, defaulting to 1000 [ 490.146189][ T5929] usb 1-1: Using ep0 maxpacket: 8 [ 490.155650][ T5929] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 490.165643][ T5929] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 490.169720][ T33] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.175604][ T5929] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 490.175637][ T5929] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 490.175690][ T5929] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 490.175713][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.310984][ T33] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.385036][T12801] netlink: 'syz.0.1810': attribute type 11 has an invalid length. [ 490.407827][ T33] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.425917][T12769] chnl_net:caif_netlink_parms(): no params data found [ 490.434752][ T5929] usb 1-1: GET_CAPABILITIES returned 0 [ 490.441660][ T5929] usbtmc 1-1:16.0: can't read capabilities [ 490.616503][T12769] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.628788][T12769] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.648201][ T24] usb 1-1: USB disconnect, device number 57 [ 490.659579][T12769] bridge_slave_0: entered allmulticast mode [ 490.707346][T12769] bridge_slave_0: entered promiscuous mode [ 490.762103][T12769] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.774369][T12769] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.788181][T12769] bridge_slave_1: entered allmulticast mode [ 490.795742][T12769] bridge_slave_1: entered promiscuous mode [ 490.827688][ T5842] Bluetooth: hci4: command tx timeout [ 490.917501][T12769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.945335][T12769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.979964][ T33] bridge_slave_1: left allmulticast mode [ 490.986037][ T33] bridge_slave_1: left promiscuous mode [ 490.992775][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.005867][ T33] bridge_slave_0: left promiscuous mode [ 491.012313][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.027114][ T33] dvmrp0: left allmulticast mode [ 491.307390][ T33] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 491.410101][ T33] team0: Port device bond0 removed [ 491.420876][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.435108][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.450402][ T33] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 491.463172][ T33] bond0 (unregistering): Released all slaves [ 491.487854][T12843] kthread_run failed with err -4 [ 491.515436][T12769] team0: Port device team_slave_0 added [ 491.547721][T12769] team0: Port device team_slave_1 added [ 491.566725][ T5929] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 491.643088][ T33] : left promiscuous mode [ 491.674714][T12769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.682075][T12769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.708667][T12769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.721810][T12769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.729956][T12769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.746316][ T24] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 491.765250][T12769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.774008][ T5929] usb 1-1: unable to get BOS descriptor or descriptor too short [ 491.785824][ T5929] usb 1-1: not running at top speed; connect to a high speed hub [ 491.789758][T12851] A٨ speed is unknown, defaulting to 1000 [ 491.815176][ T5929] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 491.847665][ T5929] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 491.871515][ T5929] usb 1-1: string descriptor 0 read error: -22 [ 491.904388][ T5929] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 491.916602][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.963276][ T24] usb 2-1: config 0 has no interfaces? [ 491.967056][ T5929] usb 1-1: 0:2 : does not exist [ 491.983350][ T24] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 492.025135][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.070174][ T24] usb 2-1: config 0 descriptor?? [ 492.078720][ T33] IPVS: stopping backup sync thread 10878 ... [ 492.089431][T12769] hsr_slave_0: entered promiscuous mode [ 492.121487][T12769] hsr_slave_1: entered promiscuous mode [ 492.145385][T12769] debugfs: 'hsr0' already exists in 'hsr' [ 492.166195][T12769] Cannot create hsr debugfs directory [ 492.590440][T12851]  speed is unknown, defaulting to 1000 [ 492.602900][T12861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.626253][T12871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.635460][T12861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.664370][T12871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.705781][T12871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.720553][T12871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.731355][T12871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.744653][T12871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.768258][T12871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.789238][T12871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.906529][ T5842] Bluetooth: hci4: command tx timeout [ 492.920108][ T5929] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 492.947095][ T5929] usb 1-1: Warning! Unlikely big volume step count (=27221), linear volume or wrong cval->res? [ 492.994871][ T5929] usb 1-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/27221/1 [ 493.031037][ T5929] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 493.058834][ T5929] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 493.296446][T12887] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1825'. [ 493.299686][ T5929] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 493.343903][ T5929] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 493.409313][ T5929] usb 1-1: USB disconnect, device number 58 [ 493.507414][ T24] usb 2-1: USB disconnect, device number 76 [ 493.680462][T12892] cgroup: Unknown subsys name 'hash' [ 493.815490][ T33] hsr_slave_0: left promiscuous mode [ 493.834282][ T33] hsr_slave_1: left promiscuous mode [ 493.847114][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.858986][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.873180][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.880781][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.896918][ T33] veth1_macvtap: left promiscuous mode [ 493.902597][ T33] veth1_vlan: left promiscuous mode [ 493.908252][ T33] veth0_vlan: left promiscuous mode [ 494.252274][T12907] could not allocate digest TFM handle sha3-384-ce [ 494.634997][ T33] team0 (unregistering): Port device team_slave_1 removed [ 494.660434][ T33] team0 (unregistering): Port device team_slave_0 removed [ 494.678918][ T24] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 494.798438][ T12] smc: removing ib device syz0 [ 494.819075][ T5934] A٨ speed is unknown, defaulting to 1000 [ 494.837051][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 494.841110][ T5934] syz0: Port: 1 Link DOWN [ 494.858772][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.893201][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 494.949888][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 60791, setting to 1024 [ 494.987815][ T5842] Bluetooth: hci4: command tx timeout [ 495.000146][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 495.080943][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 495.128958][ T12] smbdirect: ib_dev[syz0] removed [ 495.134606][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 495.169302][ T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 495.193915][ T24] usb 2-1: Manufacturer: syz [ 495.284025][ T24] usb 2-1: config 0 descriptor?? [ 495.512366][T12941] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.542023][T12941] overlayfs: failed to clone upperpath [ 495.776218][ T24] rc_core: IR keymap rc-hauppauge not found [ 495.795110][ T24] Registered IR keymap rc-empty [ 495.813973][ T24] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 495.863398][ T24] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 495.910473][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 495.964265][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input57 [ 496.041153][ T24] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 496.051437][ C1] mceusb 2-1:0.0: long-range (0x30) receiver active [ 496.116737][ T24] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 496.147286][ T24] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 496.171068][ T24] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 496.208079][ T24] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 496.246447][ T24] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 496.280267][ T24] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 496.309239][ T24] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 496.347162][ T24] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 496.388796][ T24] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 496.438358][ T24] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 496.466157][ T24] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x30 active) [ 496.528758][T12769] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 496.578242][T12769] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 496.604898][ T24] usb 2-1: USB disconnect, device number 77 [ 496.612917][T12769] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 496.679142][T12769] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 496.740039][T12971] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1842'. [ 496.849403][T12978] netlink: 'syz.0.1843': attribute type 10 has an invalid length. [ 496.914216][T12980] netlink: 'syz.0.1843': attribute type 10 has an invalid length. [ 497.066551][ T5842] Bluetooth: hci4: command tx timeout [ 497.189377][T12769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.294446][T12769] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.341474][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.348827][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.403572][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.410845][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.735960][T12769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 497.906274][ T5909] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 497.942701][T13015] : entered promiscuous mode [ 498.070143][ T5909] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 498.114663][ T5909] usb 1-1: config 0 has no interface number 0 [ 498.141186][ T5909] usb 1-1: config 0 interface 41 has no altsetting 0 [ 498.159568][ T5909] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 498.187456][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.205775][ T5909] usb 1-1: Product: syz [ 498.217506][ T5909] usb 1-1: Manufacturer: syz [ 498.222439][ T5909] usb 1-1: SerialNumber: syz [ 498.257906][ T5909] usb 1-1: config 0 descriptor?? [ 498.366310][ T5934] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 498.479090][T13036] overlayfs: failed to clone upperpath [ 498.510997][T13010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.570501][ T5934] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 498.605503][T12769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.606804][T13010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.621132][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.643640][ T5934] usb 2-1: Product: syz [ 498.662415][ T5934] usb 2-1: Manufacturer: syz [ 498.679799][ T5934] usb 2-1: SerialNumber: syz [ 498.759029][ T5934] usb 2-1: config 0 descriptor?? [ 498.803718][T12769] veth0_vlan: entered promiscuous mode [ 498.828532][T12769] veth1_vlan: entered promiscuous mode [ 498.999859][T12769] veth0_macvtap: entered promiscuous mode [ 499.008869][T13021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.080432][T12769] veth1_macvtap: entered promiscuous mode [ 499.100836][T13021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.162618][T12769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.221040][T12769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.279157][ T1020] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.319387][ T1020] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.370754][ T1020] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.414940][ T1020] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.554977][ T5909] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 499.648370][ T5909] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 499.740657][ T5909] usb 1-1: USB disconnect, device number 59 [ 499.839076][ T12] ================================================================== [ 499.847216][ T12] BUG: KASAN: invalid-free in gid_table_release_one+0x384/0x470 [ 499.854893][ T12] Free of addr ffff8880327300d8 by task kworker/u8:0/12 [ 499.861859][ T12] [ 499.864309][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 499.864340][ T12] Tainted: [L]=SOFTLOCKUP [ 499.864348][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 499.864369][ T12] Workqueue: ib-unreg-wq ib_unregister_work [ 499.864399][ T12] Call Trace: [ 499.864407][ T12] [ 499.864416][ T12] dump_stack_lvl+0xe8/0x150 [ 499.864445][ T12] print_address_description+0x55/0x1e0 [ 499.864470][ T12] print_report+0x58/0x70 [ 499.864493][ T12] ? gid_table_release_one+0x384/0x470 [ 499.864512][ T12] kasan_report_invalid_free+0xea/0x110 [ 499.864533][ T12] ? gid_table_release_one+0x384/0x470 [ 499.864557][ T12] free_large_kmalloc+0x3c/0x110 [ 499.864575][ T12] gid_table_release_one+0x384/0x470 [ 499.864600][ T12] ib_device_release+0xd2/0x1c0 [ 499.864629][ T12] ? __pfx_ib_device_release+0x10/0x10 [ 499.864656][ T12] device_release+0xc4/0x1f0 [ 499.864678][ T12] kobject_put+0x228/0x560 [ 499.864706][ T12] ? process_scheduled_works+0xa70/0x1860 [ 499.864734][ T12] process_scheduled_works+0xb5d/0x1860 [ 499.864774][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 499.864804][ T12] ? assign_work+0x3d5/0x5e0 [ 499.864832][ T12] worker_thread+0xa53/0xfc0 [ 499.864871][ T12] kthread+0x388/0x470 [ 499.864892][ T12] ? __pfx_worker_thread+0x10/0x10 [ 499.864915][ T12] ? __pfx_kthread+0x10/0x10 [ 499.864935][ T12] ret_from_fork+0x514/0xb70 [ 499.864958][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 499.864979][ T12] ? __switch_to+0xc79/0x1410 [ 499.864998][ T12] ? __pfx_kthread+0x10/0x10 [ 499.865014][ T12] ret_from_fork_asm+0x1a/0x30 [ 499.865034][ T12] [ 499.865041][ T12] [ 500.032460][ T12] The buggy address belongs to the physical page: [ 500.038872][ T12] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880327330c0 pfn:0x32730 [ 500.048942][ T12] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 500.057539][ T12] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 500.065125][ T12] page_type: f8(unknown) [ 500.069600][ T12] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 500.078188][ T12] raw: ffff8880327330c0 0000000000000000 00000000f8000000 0000000000000000 [ 500.086861][ T12] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 500.095542][ T12] head: ffff8880327330c0 0000000000000000 00000000f8000000 0000000000000000 [ 500.104224][ T12] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 500.112934][ T12] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 500.121604][ T12] page dumped because: kasan: bad access detected [ 500.128014][ T12] page_owner tracks the page as allocated [ 500.133726][ T12] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 7665, tgid 7659 (syz.2.416), ts 176611732428, free_ts 156994168986 [ 500.151870][ T12] post_alloc_hook+0x231/0x280 [ 500.156649][ T12] get_page_from_freelist+0x24ba/0x2540 [ 500.162201][ T12] __alloc_frozen_pages_noprof+0x18d/0x380 [ 500.168008][ T12] alloc_pages_mpol+0x235/0x490 [ 500.172864][ T12] ___kmalloc_large_node+0x4e/0x120 [ 500.178080][ T12] __kmalloc_large_node_noprof+0x18/0x90 [ 500.183894][ T12] __kmalloc_noprof+0x3e8/0x760 [ 500.188752][ T12] ib_cache_setup_one+0x198/0x570 [ 500.193775][ T12] ib_register_device+0xfbd/0x13e0 [ 500.198887][ T12] rxe_register_device+0x1e3/0x350 [ 500.204005][ T12] rxe_net_add+0x81/0x110 [ 500.208347][ T12] rxe_newlink+0xf4/0x1c0 [ 500.212688][ T12] nldev_newlink+0x5bc/0x650 [ 500.217283][ T12] rdma_nl_rcv+0x6d1/0xa10 [ 500.221713][ T12] netlink_unicast+0x80f/0x9b0 [ 500.226487][ T12] netlink_sendmsg+0x813/0xb40 [ 500.231284][ T12] page last free pid 5210 tgid 5210 stack trace: [ 500.237624][ T12] __free_frozen_pages+0xbc7/0xd30 [ 500.242766][ T12] __slab_free+0x274/0x2c0 [ 500.247219][ T12] qlist_free_all+0x99/0x100 [ 500.251926][ T12] kasan_quarantine_reduce+0x148/0x160 [ 500.257582][ T12] __kasan_slab_alloc+0x22/0x80 [ 500.262437][ T12] __kmalloc_noprof+0x316/0x760 [ 500.267296][ T12] tomoyo_realpath_from_path+0xe3/0x5d0 [ 500.272945][ T12] tomoyo_path_perm+0x283/0x560 [ 500.277816][ T12] security_inode_getattr+0x12b/0x310 [ 500.283211][ T12] __x64_sys_newfstat+0x13b/0x270 [ 500.288238][ T12] do_syscall_64+0x15f/0xf80 [ 500.292836][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.298736][ T12] [ 500.301063][ T12] Memory state around the buggy address: [ 500.306693][ T12] ffff88803272ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 500.314757][ T12] ffff888032730000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.322835][ T12] >ffff888032730080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.330996][ T12] ^ [ 500.337936][ T12] ffff888032730100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.346001][ T12] ffff888032730180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 500.354064][ T12] ================================================================== [ 500.407600][ T12] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 500.414878][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 500.425756][ T12] Tainted: [L]=SOFTLOCKUP [ 500.430175][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 500.440269][ T12] Workqueue: ib-unreg-wq ib_unregister_work [ 500.446185][ T12] Call Trace: [ 500.449474][ T12] [ 500.452428][ T12] vpanic+0x56c/0xa60 [ 500.456439][ T12] ? __pfx_vpanic+0x10/0x10 [ 500.460961][ T12] ? __pfx___schedule+0x10/0x10 [ 500.465850][ T12] panic+0xc5/0xd0 [ 500.469600][ T12] ? __pfx_panic+0x10/0x10 [ 500.474057][ T12] ? preempt_schedule_common+0x82/0xd0 [ 500.479536][ T12] check_panic_on_warn+0x89/0xb0 [ 500.484484][ T12] end_report+0x73/0x170 [ 500.488731][ T12] ? gid_table_release_one+0x384/0x470 [ 500.494198][ T12] kasan_report_invalid_free+0xfa/0x110 [ 500.499744][ T12] ? gid_table_release_one+0x384/0x470 [ 500.505397][ T12] free_large_kmalloc+0x3c/0x110 [ 500.510342][ T12] gid_table_release_one+0x384/0x470 [ 500.515633][ T12] ib_device_release+0xd2/0x1c0 [ 500.520502][ T12] ? __pfx_ib_device_release+0x10/0x10 [ 500.525974][ T12] device_release+0xc4/0x1f0 [ 500.530741][ T12] kobject_put+0x228/0x560 [ 500.535181][ T12] ? process_scheduled_works+0xa70/0x1860 [ 500.540908][ T12] process_scheduled_works+0xb5d/0x1860 [ 500.546560][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 500.552553][ T12] ? assign_work+0x3d5/0x5e0 [ 500.557153][ T12] worker_thread+0xa53/0xfc0 [ 500.561852][ T12] kthread+0x388/0x470 [ 500.565930][ T12] ? __pfx_worker_thread+0x10/0x10 [ 500.571053][ T12] ? __pfx_kthread+0x10/0x10 [ 500.575661][ T12] ret_from_fork+0x514/0xb70 [ 500.580300][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 500.585421][ T12] ? __switch_to+0xc79/0x1410 [ 500.590194][ T12] ? __pfx_kthread+0x10/0x10 [ 500.594880][ T12] ret_from_fork_asm+0x1a/0x30 [ 500.599649][ T12] [ 500.603462][ T12] Kernel Offset: disabled [ 500.607791][ T12] Rebooting in 86400 seconds..