Warning: Permanently added '[localhost]:4858' (ECDSA) to the list of known hosts. 2025/01/23 07:19:28 fuzzer started 2025/01/23 07:19:28 dialing manager at localhost:38529 syzkaller login: [ 69.915137] cgroup: Unknown subsys name 'net' [ 69.977078] cgroup: Unknown subsys name 'cpuset' [ 70.008767] cgroup: Unknown subsys name 'rlimit' [ 77.069967] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/23 07:19:46 syscalls: 2217 2025/01/23 07:19:46 code coverage: enabled 2025/01/23 07:19:46 comparison tracing: enabled 2025/01/23 07:19:46 extra coverage: enabled 2025/01/23 07:19:46 setuid sandbox: enabled 2025/01/23 07:19:46 namespace sandbox: enabled 2025/01/23 07:19:46 Android sandbox: enabled 2025/01/23 07:19:46 fault injection: enabled 2025/01/23 07:19:46 leak checking: enabled 2025/01/23 07:19:46 net packet injection: enabled 2025/01/23 07:19:46 net device setup: enabled 2025/01/23 07:19:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/23 07:19:46 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/23 07:19:46 USB emulation: enabled 2025/01/23 07:19:46 hci packet injection: enabled 2025/01/23 07:19:46 wifi device emulation: enabled 2025/01/23 07:19:46 802.15.4 emulation: enabled 2025/01/23 07:19:46 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/23 07:19:46 fetching corpus: 0, signal 0/4000 (executing program) 2025/01/23 07:19:46 fetching corpus: 0, signal 0/6000 (executing program) 2025/01/23 07:19:46 fetching corpus: 0, signal 0/8000 (executing program) 2025/01/23 07:19:46 fetching corpus: 0, signal 0/10000 (executing program) 2025/01/23 07:19:46 fetching corpus: 0, signal 0/10752 (executing program) 2025/01/23 07:19:46 fetching corpus: 0, signal 0/10752 (executing program) 2025/01/23 07:19:49 starting 8 fuzzer processes 07:19:49 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x624000, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000040)) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) fsync(r1) sched_yield() write$P9_RRENAMEAT(r0, &(0x7f0000000080)={0x7, 0x4b, 0x1}, 0x7) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000100)={{}, {r2, r3/1000+10000}}, &(0x7f0000000140)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0xffffff7f) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000001c0)={0x0, 0x1, {0xffffffffffffffff, 0x2, 0x4, 0x1, 0x20}, 0x1}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r1}, '.\x00'}) setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, &(0x7f0000001400)={0x5, 0x5, 0x7, 0x2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000001440)='\x00') r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001480), 0x0, 0x0) ioctl$SCSI_IOCTL_SYNC(r5, 0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f00000014c0)={0x0, 0xa6, [0x0, 0x6, 0x0, 0x200, 0xffffffff, 0x7]}) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000001500)={0xffff, {{0xa, 0x4e22, 0x200, @local, 0x2}}}, 0x88) syz_open_pts(r5, 0x2) fcntl$getownex(r0, 0x10, &(0x7f00000015c0)) 07:19:49 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x31) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40004002}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xf0, r1, 0x608, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x12}}}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x54, 0x6}, {0x0, 0x2}, {0x4, 0x5}], "8ea97581a1bc3c1e"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x2, 0x2}, {0x40, 0x1}, {0x1f, 0x4}, {0x9, 0x7}, {0x1, 0x2}, {0x0, 0x6}, {0x1f, 0x2}, {0x7}, {0x5, 0x4}, {0x51}, {0xbb, 0x3}, {0x7}, {0x62}, {0x2}, {0x40, 0x4}, {0x4}, {0x2, 0x5}], "53afe13f956cc2d3"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x8, 0x3}, {0x1f, 0x3}, {0x80, 0x6}, {0xfa, 0x6}, {0xd9}, {0x1, 0x3}, {0x8, 0x7}, {0xb6}, {0x2, 0x6}, {0x9, 0x2}, {0x8, 0x6}, {0x6, 0x4}, {0xf9, 0x4}, {0x0, 0x3}], "926246e6650c236b"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x2, 0x3}, {0x7, 0x5}, {0x1, 0x7}, {0x7f, 0x7}, {0x9, 0x6}, {0x7}, {0x2, 0x1}], "c080437c705506c2"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x68, 0x2}, {0x20, 0x1}, {0x1f, 0x2}, {0x6}, {0x49, 0x1}, {0x4, 0x6}, {0x40, 0x4}, {0x1f, 0x7}, {0x2, 0x6}, {0x3, 0x3}, {0x4, 0x2}, {0x3f, 0x6}, {0x38, 0x5}, {0x0, 0x1}], "91028f37960cf0ec"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x90, 0x1}, {0x6, 0x2}, {0x40, 0x1}, {0x7f, 0x6}, {0xff, 0x7}], "6f1f7ca2fce32671"}}]}, 0xf0}}, 0x4040081) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000240)) r2 = syz_io_uring_setup(0x366b, &(0x7f0000000280)={0x0, 0x9c2e, 0x0, 0x1, 0x183, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) flistxattr(r2, &(0x7f0000000380)=""/196, 0xc4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r3, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000005c0)={0x3, 0x1000}, 0x4) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, 0xf, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x84400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x68, r1, 0xc00, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x2d}}}}, [@NL80211_ATTR_IE={0x3d, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @channel_switch={0x25, 0x3, {0x1, 0x40, 0x6}}, @mesh_chsw={0x76, 0x6, {0x2, 0x6, 0x2b}}, @link_id={0x65, 0x12, {@random="db13b0ccbbbe"}}, @supported_rates={0x1, 0x5, [{0x36}, {0x48, 0x1}, {0x60, 0x1}, {0x36, 0x1}, {0x5a, 0x1}]}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x9c, 0x1}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x2000c050) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000bc0), 0x80100, 0x0) getsockopt$inet6_tcp_buf(r7, 0x6, 0xe, &(0x7f0000000c00)=""/192, &(0x7f0000000cc0)=0xc0) ioctl$DVD_READ_STRUCT(0xffffffffffffffff, 0x5390, &(0x7f0000000d00)=@copyright={0x1, 0x3, 0x1, 0xff}) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000001540), 0x201, 0x0) pwritev(r8, &(0x7f0000001800)=[{&(0x7f0000001580)="13fec25c00e1b7c79f2475395fc4af9dfa82938e249089e1fa1087ba7de58922a94913d26562712f8a005aded70ea286d0efb9af1c135eff05ac90e5bb3579ef1146af7a35bfb9cfcdf58ca766ee243dacd9845dc33aef0198e1c39aea2b102da009c86dfc0b2949dcc118edea507d9a5dcef23092c7af638d81759e368c2a710183fbf21124fd4ac1ffa647e744545029daa00395c1c1425f382c", 0x9b}, {&(0x7f0000001640)="c890395a47f1ba5181df694dc581652787b000c543a394bd2e31f378c5af04cd126a29beda27d60d1cba127b6a3868fd5d5bf5b6522522cf8fdead67776afa568f3aeb70a00943b30e79c5a71fcb17139db0aa1351eb6142749a171f675164b557a2899a67f6558428a0b6151f24e65543f56c01964a0524c2d0994f153968fddaef2796b1b9498cc374e5a70a522aa478ff157eb55407a722feb0ef6c5a18c5f78962f053b3bfdb70", 0xa9}, {&(0x7f0000001700)="1fdd1fa47b57f4ed596047f17dd1ed4a46ba81220ee26077b2dd97b53a1cf82fd76e47ba8c2d803ed9f1ab4371d53dd9b667983a56a7bde8aa2757583caab6eb7c2f997ba6fc72a7df1d0730b71e8ec4a3300429e90ce62668b9001e1e18e90e22b4ec3a2b8db0a795521c6637060a3c216dafc6046641056710e80cae168018c314517571f487c49dd8dae0f67d9d9f50bffc056d0c99b1aec3a22435acf2087db15cfd243fad478bfdf2b8b53269c2def58089ce1259b6c6c07b08b43cc38552c88e1b76", 0xc5}], 0x3, 0x3f, 0x240) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000001840)) 07:19:49 executing program 2: ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000000)={{0x2, 0x2}, 'port1\x00', 0xf6, 0x40, 0x4171461e, 0x5569, 0x2, 0x1, 0x10000, 0x0, 0x2, 0x9}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f00000000c0)) r0 = socket$netlink(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000100)={0x3}) r1 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x3, 0x80, 0x4d, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "72ce"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x5, 0x3a2, 0x20}, {0x6, 0x24, 0x1a, 0x8, 0x20}, [@acm={0x4, 0x24, 0x2, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x0, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x87, 0x3f, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xb7, 0x0, 0x9}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0xf5, 0x6, 0x3, 0x40, 0xbe}, 0x126, &(0x7f0000000200)={0x5, 0xf, 0x126, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x6, 0x8, 0xaa20}, @wireless={0xb, 0x10, 0x1, 0x4, 0x24, 0x1, 0x8, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x3, 0x1f, 0x7}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x9, 0x1, 0x0, 0x5}, @generic={0xf7, 0x10, 0x2, "3b416b7cb46adc0568336b0077d7c08f32058145c3fe1d87c982a620aa9ed8ed19c5638213572d1ddf2a60346655d6692d786f486c4226de6fe4e254f9ae8c88914f5f057f63e15f5d62e747054450ec05613a776a7c6ec996654b906f91ffd389a977603baf4c1470b2e082dfac8ebe2ca4221d7b75f9a9f71463a8784633e689f49e0621bdec5b60039f8a4530df4b036c7b88c189aef5971ffc1ae112fcfe247d24d4a6c540c38432d04c0ba3df7d76cbf0777d72d42c1706a197ddb633f345e7d235524afb84e843af3d6dee4316b6fd19de50cc8dcdb49708df928e3fef673336097274aadabe578ea21143719f35e17069"}]}, 0x1, [{0xe4, &(0x7f0000000340)=@string={0xe4, 0x3, "c39f38f710c345dad8d727092f6036e35b5412eb6ccdcead201f7721c1ee5d06e67375ce6d700201810bd40290bf4efea254507cfe42ec05954c919857cae0523a55a72d265b08d10e14183f00146ade67b94e6fe3686dd0a9bc6151ce8c38db35e5a6ca3b233bb8187572285a63b3c6a37ab569ea923a4b344cab06e67e237246a019b8a3b7ba90358744d2f01c1f6722befa53a5a83e6873a95c25426f36b006e3c718cec1d285deea52db12494cf25d76d26ad88e8436d7fabf823807ad0f24acf7f8b65b3737651bc061bfde8ff644b18b3cb4b38c0fd30e3cc064628071ec8c"}}]}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000540)={0x14, &(0x7f0000000480)={0x0, 0x35, 0x69, {0x69, 0x23, "0d1406f32b5904984674ca69c37f6f67cc7b04248df8d125f65b04f137105784514db591e2e10c75f8f3c6f20880456972a902aa61e631d7e9793a393af50df26e98b4ae4f9302b76901144f112e44f2368d3eb1cced831a2b6cd11faad84c5d263e5737bfa3dc"}}, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x44, &(0x7f0000000580)={0x20, 0x0, 0xfc, "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"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000740)={0x20, 0x80, 0x1c, {0xdce, 0x40, 0x2, 0x8001, 0x3d7, 0x80, 0x40, 0x5, 0x3f, 0x2, 0x926, 0x3}}, &(0x7f0000000780)={0x20, 0x85, 0x4, 0x444063c2}, &(0x7f00000007c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000800)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000840)={0x20, 0x89, 0x2}}) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'vlan0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000940)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000000a40)={&(0x7f0000000980), 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x1}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4020) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000a80)) syz_usb_ep_read(r1, 0x3f, 0x1000, &(0x7f0000000ac0)=""/4096) syz_usb_disconnect(r1) copy_file_range(r0, &(0x7f0000001ac0)=0x5, r2, &(0x7f0000001b00)=0x5, 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000001b40)={{0x1, 0x1, 0x18, r2, {0xdf2}}, './file1\x00'}) ioctl$VT_RELDISP(r3, 0x5605) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000001b80)) r4 = syz_open_pts(r3, 0x4000) ioctl$FIBMAP(r4, 0x1, &(0x7f0000001bc0)=0x4) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x10, 0x3f5, 0x2, 0x70bd2b, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40408c0}, 0x20008145) [ 89.938808] audit: type=1400 audit(1737616789.184:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:19:49 executing program 3: lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)={0x0, 0xfb, 0xd6, 0x4, 0x7, "d3b82459a66386703f38e625fa4b6631", "c6e339105d02b421bdb88376153f89c101a84ec91888a1724c00a532091b5ea11e9c191527b3f91b026d3c3a81d68c851384fead1694895aa2fd8197105013e70e01a17b4a16e9fd8c4726c4404a4d112a54d78671ca794872880812939b0c4690175cd3b4cea223d8781411dbf459de72af06983aba71e29ef48abacff6f8f3cf0f27537d3f39fc0284b5e8a820d7602a6d2c540ef1e26eff013cfaf4ce7c2bd9770dc213f0ecf8b7ca700d6e3274c6b02de8aa19f210b25b40e63df3385470a7"}, 0xd6, 0x3) socketpair(0x3, 0x3, 0x400, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept(r0, &(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @local}}, &(0x7f0000000240)=0x80) mkdir(&(0x7f0000000280)='./file0\x00', 0x290) r3 = accept(r1, 0x0, &(0x7f00000002c0)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f0000000300)={0x8, 'bridge_slave_1\x00', {'gretap0\x00'}, 0xbc}) setxattr$incfs_id(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)={'0000000000000000000000000000000', 0x32}, 0x20, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, &(0x7f0000000440)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'ip6tnl0\x00', r4, 0x2f, 0x7, 0x0, 0x2, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x728, 0x0, 0xa6, 0x5}}) r5 = dup3(r2, r0, 0x0) recvfrom(r5, &(0x7f00000005c0)=""/104, 0x68, 0x80000020, &(0x7f0000000640)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x1}}, 0x80) fchmodat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0xc2) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000700)={{0x1, 0x1, 0x18, r5, {0x3}}, './file0\x00'}) execveat(r5, &(0x7f0000000740)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000780)='}\x00', &(0x7f00000007c0)='8(-\x00', &(0x7f0000000800)='trusted.overlay.upper\x00'], &(0x7f00000008c0)=[&(0x7f0000000880)='\x00'], 0x800) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0xa0, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20040094}, 0x44061) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, 0x3, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000b00)="32c207846c0f99eb5d79fa1109dd79e09035aa2a0e2eaa9109ad4b1e9d3f6be71ef5c8a5a3e268c14fa735d6bf23a6b82cd6fe38aa4cbc2d58d9b07e02a0f158d9833994897c8364d227eb38899438e2cd6868ec0315b2285d7ac21d1656e35a552320c414b1f1f06e2315ab3d35", 0x6e) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r5, {0xffffffff}}, './file0\x00'}) futimesat(r6, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c40)={{}, {0x77359400}}) 07:19:49 executing program 4: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@sco={0x1f, @none}, &(0x7f0000000080)=0x80) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000000c0)={@broadcast, @multicast1, 0x0}, &(0x7f0000000100)=0xc) r2 = getegid() chown(&(0x7f0000000140)='./file0\x00', 0x0, r2) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, @xdp={0x2c, 0x0, r1, 0x28}, @xdp={0x2c, 0xe, r1, 0x1d}, @l2={0x1f, 0x0, @any, 0x3f, 0x2}, 0xfff8, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='veth1_macvtap\x00', 0x1, 0x5, 0x6}) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xf4, 0x12, 0x400, 0x70bd27, 0x25dfdbfb, {0x13, 0x3f, 0x3f, 0x4, {0x4e22, 0x4e20, [0x10000, 0x1, 0x3ff, 0x5], [0xffff, 0x4, 0x8, 0x1], r3, [0x7, 0x6]}, 0x8, 0x2c2c}, [@INET_DIAG_REQ_BYTECODE={0xa8, 0x1, "09ffe3b0692a7aad243a3d6e07470a55c04aaa862beaa23b0d30a555e6b2808df6e57b197539c2cb5edbcc1463d2b864cbe0d41a8c7f821ba097b06bf5f017599dc94b0bcfe2178b5631ac21813602c5154d6ef548a2366c25f8a0a24faea1c93a9ba84ae1570a73e5cd6e0d338564adf73ff65bbad395c7c13d709cd6115c40457f06ba044efca30296522bd05f47778e1b20229795804e16adca395d765238fd306384"}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x404c840) r4 = eventfd2(0x2, 0x800) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000400)={{0x1, 0x1, 0x18, r4, {0x3}}, '\x00'}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000440)) write$binfmt_script(r4, &(0x7f0000000540)={'#! ', './file0/file0', [{0x20, 'veth1_macvtap\x00'}, {0x20, '\x00'}], 0xa, "7b1b4b9646a06410360bef913b64b41552543fe0c962e74b7408a2533ab6c9e8e0026b01937d79cdf3bf8044853f6ecade2137b9d3"}, 0x57) fcntl$setownex(r0, 0xf, &(0x7f00000005c0)={0x2, 0xffffffffffffffff}) utimes(&(0x7f0000000600)='./file0/file1\x00', &(0x7f0000000640)={{0x77359400}, {0x77359400}}) r6 = open(&(0x7f0000000740)='./file0\x00', 0x121400, 0x11) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x48000) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000880)={{r5}, {@val, @actul_num={@void, 0x6, 0x54}}}) r7 = syz_open_dev$vcsa(&(0x7f00000008c0), 0x6, 0x40) ioctl$LOOP_GET_STATUS(r7, 0x4c03, &(0x7f0000000900)) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f00000009c0)={0x2, 'syzkaller1\x00', 0x3}, 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000a00)) sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f0000000e00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x110, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x70, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x9}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x3d}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x29}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x8}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}]}, 0x110}}, 0x20044004) 07:19:49 executing program 6: r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x42001, 0x4, 0x2}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008084) link(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, @in={0x2, 0x4e21, @rand_addr=0x64010102}, @xdp={0x2c, 0x4, 0x0, 0x34}, @isdn={0x22, 0x0, 0x7, 0x7, 0x5}, 0x8, 0x0, 0x0, 0x0, 0xed09, &(0x7f00000002c0)='gretap0\x00', 0xfffffffffffffff7, 0x4, 0x200}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40800}, 0x40) ioctl$sock_proto_private(r0, 0x89e7, &(0x7f0000000480)="5d121bb206420a8d7f4af0b6876412102a2a8f99b272a080cc43338c04ab684a18d3d7340f6c1ee651e89461d69569d35bb8a59d2e10da8ca48930f08a816a0ff974207d50bbbaeb0d2f69d3304b4b21bb868675eb736c1f56d1eedc9fcd42be8d20f3defa6a7e2e3e9271d007bc237c2658a1b69aeb6e54e5082120f0154ab4c0753301a6b6a405ceec2317bcc2d7febbe069f503db0c7fdf2e5ffd5a1c1dc3e2871e5a164cf375a914006403e1e0a6ec13c9e1a799f7d89f9b45f19212473032da7b6068ae8a51330f9008fe235ebe16b261880c4f1d04fdb63d") r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x60400, 0x120) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000600)={0x0, @tipc=@name={0x1e, 0x2, 0x3, {{0x1, 0x4}, 0x2}}, @llc={0x1a, 0x312, 0xda, 0x1, 0x0, 0x1, @local}, @xdp={0x2c, 0x1, r2, 0x16}, 0x6, 0x0, 0x0, 0x0, 0x68b, &(0x7f00000005c0)='ipvlan1\x00', 0x3, 0x5}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8, 0x20}}, './file0\x00'}) mknodat(r5, &(0x7f00000006c0)='./file0\x00', 0x10, 0x3b25) r6 = open(&(0x7f0000000700)='./file0\x00', 0x440000, 0x12) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x8, 0x0, [@private2, @ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @local]}, 0x48) bind$packet(r3, &(0x7f00000007c0)={0x11, 0x1b, r4, 0x1, 0x7, 0x6, @random="87298b4f19f0"}, 0x14) r7 = openat(r5, &(0x7f0000000800)='./file0\x00', 0x900, 0x100) sendmsg$AUDIT_GET_FEATURE(r7, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x10, 0x3fb, 0x20, 0x70bd2a, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000050}, 0x40) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000940), 0x4902, 0x0) ioctl$CDROMEJECT_SW(r8, 0x530f, 0x0) r9 = signalfd(r5, &(0x7f0000000980)={[0x4]}, 0x8) openat$cgroup_type(r9, &(0x7f00000009c0), 0x2, 0x0) 07:19:49 executing program 5: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r0 = memfd_secret(0x80000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000040)) r1 = accept4(r0, &(0x7f0000000080)=@alg, &(0x7f0000000100)=0x80, 0x80800) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x184, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x2}}]}, 0x184}, 0x1, 0x0, 0x0, 0x24004000}, 0x80) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@loopback, @in=@empty}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f00000004c0)=0xe8) clock_gettime(0x0, &(0x7f0000008540)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f00000082c0)=[{{&(0x7f0000000500), 0x6e, &(0x7f0000000680)=[{&(0x7f0000000580)=""/196, 0xc4}], 0x1, &(0x7f00000006c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000000740), 0x6e, &(0x7f0000001b80)=[{&(0x7f00000007c0)=""/150, 0x96}, {&(0x7f0000000880)=""/189, 0xbd}, {&(0x7f0000000940)=""/38, 0x26}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/28, 0x1c}, {&(0x7f00000019c0)=""/145, 0x91}, {&(0x7f0000001a80)=""/34, 0x22}, {&(0x7f0000001ac0)=""/136, 0x88}], 0x8, &(0x7f0000001c00)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001cc0)=""/227, 0xe3}, {&(0x7f0000001dc0)=""/187, 0xbb}, {&(0x7f0000001e80)=""/32, 0x20}], 0x3, &(0x7f0000001f00)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x158}}, {{&(0x7f0000002080), 0x6e, &(0x7f00000037c0)=[{&(0x7f0000002100)=""/211, 0xd3}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/225, 0xe1}, {&(0x7f0000003300)=""/153, 0x99}, {&(0x7f00000033c0)=""/139, 0x8b}, {&(0x7f0000003480)=""/198, 0xc6}, {&(0x7f0000003580)=""/255, 0xff}, {&(0x7f0000003680)=""/53, 0x35}, {&(0x7f00000036c0)=""/233, 0xe9}], 0x9}}, {{&(0x7f0000003880)=@abs, 0x6e, &(0x7f0000004d80)=[{&(0x7f0000003900)=""/186, 0xba}, {&(0x7f00000039c0)=""/51, 0x33}, {&(0x7f0000003a00)=""/34, 0x22}, {&(0x7f0000003a40)=""/189, 0xbd}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000004b00)=""/97, 0x61}, {&(0x7f0000004b80)=""/60, 0x3c}, {&(0x7f0000004bc0)=""/144, 0x90}, {&(0x7f0000004c80)=""/205, 0xcd}], 0x9, &(0x7f0000004e40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{0x0, 0x0, &(0x7f0000004f80)=[{&(0x7f0000004ec0)=""/9, 0x9}, {&(0x7f0000004f00)=""/122, 0x7a}], 0x2, &(0x7f0000004fc0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000005080)=@abs, 0x6e, &(0x7f00000063c0)=[{&(0x7f0000005100)=""/105, 0x69}, {&(0x7f0000005180)=""/240, 0xf0}, {&(0x7f0000005280)=""/177, 0xb1}, {&(0x7f0000005340)=""/4096, 0x1000}, {&(0x7f0000006340)=""/9, 0x9}, {&(0x7f0000006380)=""/46, 0x2e}], 0x6, &(0x7f0000006440)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000006500)=@abs, 0x6e, &(0x7f0000006580)}}, {{0x0, 0x0, &(0x7f0000006a40)=[{&(0x7f00000065c0)=""/225, 0xe1}, {&(0x7f00000066c0)=""/223, 0xdf}, {&(0x7f00000067c0)=""/194, 0xc2}, {&(0x7f00000068c0)=""/165, 0xa5}, {&(0x7f0000006980)=""/124, 0x7c}, {&(0x7f0000006a00)}], 0x6, &(0x7f0000006ac0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000006b00)=@abs, 0x6e, &(0x7f0000008140)=[{&(0x7f0000006b80)=""/4096, 0x1000}, {&(0x7f0000007b80)=""/182, 0xb6}, {&(0x7f0000007c40)=""/149, 0x95}, {&(0x7f0000007d00)=""/183, 0xb7}, {&(0x7f0000007dc0)=""/56, 0x38}, {&(0x7f0000007e00)=""/167, 0xa7}, {&(0x7f0000007ec0)=""/248, 0xf8}, {&(0x7f0000007fc0)=""/94, 0x5e}, {&(0x7f0000008040)=""/90, 0x5a}, {&(0x7f00000080c0)=""/98, 0x62}], 0xa, &(0x7f0000008200)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x88}}], 0xa, 0x2041, &(0x7f0000008580)={r2, r3+10000000}) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f00000085c0)={0x4, {{0x2, 0x4e22, @private=0xa010100}}, 0x1, 0x5, [{{0x2, 0x4e24, @broadcast}}, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e23, @private=0xa010101}}, {{0x2, 0x4e23, @empty}}]}, 0x310) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r7, 0xf503, 0x0) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f00000089c0)={&(0x7f0000008900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000008980)={&(0x7f0000008940)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) r9 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCMSET(r9, 0x5418, &(0x7f0000008a00)=0x6) rt_sigtimedwait(&(0x7f0000008a40)={[0x9]}, &(0x7f0000008a80), &(0x7f0000008b00), 0x8) setsockopt$inet_MCAST_LEAVE_GROUP(r6, 0x0, 0x2d, &(0x7f0000008b40)={0x1000, {{0x2, 0x4e22, @loopback}}}, 0x88) pipe2(&(0x7f0000008c00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$KDSKBLED(r10, 0x4b65, 0x6) sendmsg$IPSET_CMD_RENAME(r5, &(0x7f0000008d00)={&(0x7f0000008c40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000008cc0)={&(0x7f0000008c80)={0x2c, 0x5, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc041) r11 = pkey_alloc(0x0, 0x3) pkey_free(r11) 07:19:49 executing program 7: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) ioctl$HIDIOCGCOLLECTIONINFO(r4, 0xc0104811, &(0x7f00000000c0)={0x8ad1, 0x3, 0x8, 0x1f}) r5 = syz_open_dev$mouse(&(0x7f0000000100), 0xffffffff00000001, 0x420080) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) recvfrom$inet(r5, &(0x7f0000000180)=""/22, 0x16, 0x10020, &(0x7f00000001c0)={0x2, 0x4e24, @private=0xa010100}, 0x10) getsockname(r0, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000280)=0x80) getsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000002c0), 0x10) getpid() sendmsg$SMC_PNETID_FLUSH(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x600, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40004) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f0000000400)={0x2, 0x5}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000440)) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\'\x00') ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000004c0)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000001b00)={{0x1, 0x1, 0x18, r1, {0xd}}, './file0\x00'}) setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f0000001b40)='wg0\x00', 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000001b80)={0xfffffff9, 0x2, 0x8001, 0x1, 0x2, 0x9}) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000001c00)={@private=0xa010100, @private=0xa010100, 0x1, 0x4, [@remote, @multicast2, @multicast1, @loopback]}, 0x20) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000001c40)={{0xffffffffffffffff, 0x1, 0x0, 0x9019a9fe2e051a45, 0x3}, 0x6e3, 0x101}) [ 91.421544] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.424852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.427941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.433753] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.437800] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.440629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.477553] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.481888] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.485282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.494844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.497935] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 91.500001] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.552343] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.553769] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.558788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.572026] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.574505] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 91.579786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.632321] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.636710] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.638331] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.651735] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.655314] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 91.671082] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.686051] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.703139] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 91.705226] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.707258] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 91.717932] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 91.721052] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.723075] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.730577] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.734028] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 91.738739] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 91.742633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.763628] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 91.764143] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.802786] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.808990] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 91.829267] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 91.833839] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 91.834197] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 91.842197] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.852276] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 91.861096] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 91.899934] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 91.924694] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 91.931813] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 93.503869] Bluetooth: hci0: command tx timeout [ 93.567462] Bluetooth: hci1: command tx timeout [ 93.632512] Bluetooth: hci2: command tx timeout [ 93.824656] Bluetooth: hci5: command tx timeout [ 93.824708] Bluetooth: hci3: command tx timeout [ 93.887650] Bluetooth: hci4: command tx timeout [ 93.951621] Bluetooth: hci6: command tx timeout [ 94.016498] Bluetooth: hci7: command tx timeout [ 95.552487] Bluetooth: hci0: command tx timeout [ 95.616471] Bluetooth: hci1: command tx timeout [ 95.679434] Bluetooth: hci2: command tx timeout [ 95.871422] Bluetooth: hci3: command tx timeout [ 95.873418] Bluetooth: hci5: command tx timeout [ 95.935521] Bluetooth: hci4: command tx timeout [ 95.999428] Bluetooth: hci6: command tx timeout [ 96.063466] Bluetooth: hci7: command tx timeout [ 97.599507] Bluetooth: hci0: command tx timeout [ 97.663646] Bluetooth: hci1: command tx timeout [ 97.727533] Bluetooth: hci2: command tx timeout [ 97.919568] Bluetooth: hci5: command tx timeout [ 97.919707] Bluetooth: hci3: command tx timeout [ 97.985462] Bluetooth: hci4: command tx timeout [ 98.049610] Bluetooth: hci6: command tx timeout [ 98.111481] Bluetooth: hci7: command tx timeout [ 99.647440] Bluetooth: hci0: command tx timeout [ 99.712499] Bluetooth: hci1: command tx timeout [ 99.775536] Bluetooth: hci2: command tx timeout [ 99.967448] Bluetooth: hci3: command tx timeout [ 99.967544] Bluetooth: hci5: command tx timeout [ 100.032384] Bluetooth: hci4: command tx timeout [ 100.096515] Bluetooth: hci6: command tx timeout [ 100.159596] Bluetooth: hci7: command tx timeout [ 150.987199] syz-executor.0 (281) used greatest stack depth: 23696 bytes left [ 153.740162] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.742584] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.744997] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.748977] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.752251] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.753595] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.832466] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.834961] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.838597] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.843408] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.846876] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.848463] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.871315] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.874562] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.875544] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.878508] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.881619] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.883051] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.884555] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.888045] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.903119] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.903870] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.907208] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.918051] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 153.925534] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.926015] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.926282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.928414] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.934627] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 153.935115] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.941696] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.944893] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.948526] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 153.949689] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.953240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.961678] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.968250] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.974577] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 153.980118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.982775] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 153.983129] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.983373] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.987725] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 153.988916] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.993695] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 153.994814] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 154.001842] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 154.003043] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 155.776458] Bluetooth: hci0: command tx timeout [ 155.968933] Bluetooth: hci4: command tx timeout [ 155.969791] Bluetooth: hci1: command tx timeout [ 156.033412] Bluetooth: hci3: command tx timeout [ 156.033509] Bluetooth: hci7: command tx timeout [ 156.033691] Bluetooth: hci2: command tx timeout [ 156.095627] Bluetooth: hci5: command tx timeout [ 156.096255] Bluetooth: hci6: command tx timeout [ 157.824419] Bluetooth: hci0: command tx timeout [ 158.015581] Bluetooth: hci1: command tx timeout [ 158.015767] Bluetooth: hci4: command tx timeout [ 158.079641] Bluetooth: hci2: command tx timeout [ 158.079848] Bluetooth: hci7: command tx timeout [ 158.079991] Bluetooth: hci3: command tx timeout [ 158.143501] Bluetooth: hci6: command tx timeout [ 158.143572] Bluetooth: hci5: command tx timeout [ 159.871543] Bluetooth: hci0: command tx timeout [ 160.063813] Bluetooth: hci4: command tx timeout [ 160.063917] Bluetooth: hci1: command tx timeout [ 160.129425] Bluetooth: hci2: command tx timeout [ 160.129514] Bluetooth: hci3: command tx timeout [ 160.130806] Bluetooth: hci7: command tx timeout [ 160.191521] Bluetooth: hci6: command tx timeout [ 160.191673] Bluetooth: hci5: command tx timeout [ 161.920478] Bluetooth: hci0: command tx timeout [ 162.112501] Bluetooth: hci1: command tx timeout [ 162.112595] Bluetooth: hci4: command tx timeout [ 162.175670] Bluetooth: hci7: command tx timeout [ 162.176531] Bluetooth: hci3: command tx timeout [ 162.176593] Bluetooth: hci2: command tx timeout [ 162.239438] Bluetooth: hci5: command tx timeout [ 162.239514] Bluetooth: hci6: command tx timeout [ 215.755650] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.758129] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.759664] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.765539] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.768781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 215.770832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.889143] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.890137] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.894577] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.899578] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.903250] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 215.904449] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 216.089795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 216.093690] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 216.095927] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 216.101049] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 216.106255] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 216.108796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 216.137218] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 216.148658] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 216.150901] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 216.161859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 216.167260] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 216.169834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 216.182661] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 216.199062] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 216.200202] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 216.201078] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 216.201508] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 216.204367] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 216.208654] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 216.210740] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 216.211588] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 216.214054] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 216.216971] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 216.223967] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 216.226896] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 216.229667] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 216.232228] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 216.232922] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.242703] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 216.246307] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 216.266073] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 216.278585] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 216.297280] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 216.303177] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 216.305842] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 216.307999] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 217.856550] Bluetooth: hci0: command tx timeout [ 217.984603] Bluetooth: hci1: command tx timeout [ 218.175558] Bluetooth: hci2: command tx timeout [ 218.240477] Bluetooth: hci3: command tx timeout [ 218.303594] Bluetooth: hci4: command tx timeout [ 218.306624] Bluetooth: hci6: command tx timeout [ 218.367477] Bluetooth: hci7: command tx timeout [ 218.367976] Bluetooth: hci5: command tx timeout [ 219.903443] Bluetooth: hci0: command tx timeout [ 220.031411] Bluetooth: hci1: command tx timeout [ 220.223440] Bluetooth: hci2: command tx timeout [ 220.287561] Bluetooth: hci3: command tx timeout [ 220.351440] Bluetooth: hci6: command tx timeout [ 220.351506] Bluetooth: hci4: command tx timeout [ 220.415692] Bluetooth: hci5: command tx timeout [ 220.415810] Bluetooth: hci7: command tx timeout [ 221.952423] Bluetooth: hci0: command tx timeout [ 222.080460] Bluetooth: hci1: command tx timeout [ 222.271585] Bluetooth: hci2: command tx timeout [ 222.336443] Bluetooth: hci3: command tx timeout [ 222.399521] Bluetooth: hci6: command tx timeout [ 222.399545] Bluetooth: hci4: command tx timeout [ 222.463476] Bluetooth: hci5: command tx timeout [ 222.464405] Bluetooth: hci7: command tx timeout [ 223.999425] Bluetooth: hci0: command tx timeout [ 224.128404] Bluetooth: hci1: command tx timeout [ 224.319463] Bluetooth: hci2: command tx timeout [ 224.383479] Bluetooth: hci3: command tx timeout [ 224.448502] Bluetooth: hci6: command tx timeout [ 224.448574] Bluetooth: hci4: command tx timeout [ 224.512821] Bluetooth: hci7: command tx timeout [ 224.512902] Bluetooth: hci5: command tx timeout [ 278.480096] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 278.482990] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 278.492146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 278.499678] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 278.502881] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 278.507088] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 278.549407] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 278.551725] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 278.556238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 278.570816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 278.573694] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 278.575717] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 278.617715] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 278.621830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 278.627096] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 278.637923] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 278.640145] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 278.643938] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 278.699891] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 278.701932] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 278.704229] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 278.712634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 278.716536] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 278.718167] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 278.744561] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 278.761953] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 278.782874] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 278.788542] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 278.793824] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 278.799529] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 278.801169] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 278.803212] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 278.804625] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 278.805782] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 278.806987] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 278.814410] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 278.826651] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 278.828193] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 278.836548] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 278.879804] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 278.926741] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 278.950623] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 278.959800] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 278.986675] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 278.986882] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 279.026901] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 279.044626] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 279.049508] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 280.576598] Bluetooth: hci0: command tx timeout [ 280.641400] Bluetooth: hci1: command tx timeout [ 280.704577] Bluetooth: hci2: command tx timeout [ 280.831524] Bluetooth: hci6: command tx timeout [ 280.831564] Bluetooth: hci3: command tx timeout [ 280.895459] Bluetooth: hci7: command tx timeout [ 281.152498] Bluetooth: hci4: command tx timeout [ 281.215860] Bluetooth: hci5: command tx timeout [ 282.623532] Bluetooth: hci0: command tx timeout [ 282.687400] Bluetooth: hci1: command tx timeout [ 282.751403] Bluetooth: hci2: command tx timeout [ 282.880381] Bluetooth: hci3: command tx timeout [ 282.880404] Bluetooth: hci6: command tx timeout [ 282.943774] Bluetooth: hci7: command tx timeout [ 283.199417] Bluetooth: hci4: command tx timeout [ 283.263411] Bluetooth: hci5: command tx timeout [ 284.671585] Bluetooth: hci0: command tx timeout [ 284.735380] Bluetooth: hci1: command tx timeout [ 284.799728] Bluetooth: hci2: command tx timeout [ 284.927382] Bluetooth: hci3: command tx timeout [ 284.928438] Bluetooth: hci6: command tx timeout [ 284.992375] Bluetooth: hci7: command tx timeout [ 285.248484] Bluetooth: hci4: command tx timeout [ 285.312096] Bluetooth: hci5: command tx timeout [ 286.719444] Bluetooth: hci0: command tx timeout [ 286.783488] Bluetooth: hci1: command tx timeout [ 286.847388] Bluetooth: hci2: command tx timeout [ 286.976434] Bluetooth: hci6: command tx timeout [ 286.976479] Bluetooth: hci3: command tx timeout [ 287.042523] Bluetooth: hci7: command tx timeout [ 287.295533] Bluetooth: hci4: command tx timeout [ 287.359482] Bluetooth: hci5: command tx timeout [ 335.756252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.756421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.173889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.173974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.362372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.362456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.542869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.542951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.721868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.721954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.848902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.848971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.917774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.917859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.025772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.025854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.153971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.155482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.306227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.306410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.480409] [ 337.480684] ====================================================== [ 337.481262] WARNING: possible circular locking dependency detected [ 337.481837] 6.13.0-next-20250122 #1 Not tainted [ 337.482295] ------------------------------------------------------ [ 337.484928] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht' [ 337.487006] kworker/u8:0/11 is trying to acquire lock: [ 337.487509] ffffffff8621ece8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.488527] [ 337.488527] but task is already holding lock: [ 337.489094] ffff88802a1c0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 337.490052] [ 337.490052] which lock already depends on the new lock. [ 337.490052] [ 337.490804] [ 337.490804] the existing dependency chain (in reverse order) is: [ 337.491502] [ 337.491502] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 337.492151] __mutex_lock+0x13d/0xb50 [ 337.492627] wiphy_register+0x1b2e/0x25d0 [ 337.493118] ieee80211_register_hw+0x23a4/0x3d60 [ 337.493660] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 337.494226] init_mac80211_hwsim+0x389/0x870 [ 337.494747] do_one_initcall+0xf9/0x640 [ 337.495227] kernel_init_freeable+0x53d/0x7a0 [ 337.495747] kernel_init+0x1e/0x2d0 [ 337.496180] ret_from_fork+0x48/0x80 [ 337.496614] ret_from_fork_asm+0x1a/0x30 [ 337.497099] [ 337.497099] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 337.497715] __lock_acquire+0x29fd/0x4580 [ 337.498194] lock_acquire+0x19b/0x520 [ 337.498636] __mutex_lock+0x13d/0xb50 [ 337.499091] unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.499705] unregister_netdevice_queue+0x224/0x2e0 [ 337.500252] _cfg80211_unregister_wdev+0x57b/0x700 [ 337.500815] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 337.501357] ieee80211_unregister_hw+0x55/0x3a0 [ 337.501880] hwsim_exit_net+0x3a0/0x730 [ 337.502338] ops_exit_list+0xb3/0x180 [ 337.502783] cleanup_net+0x546/0xad0 [ 337.503221] process_one_work+0x8ee/0x1a10 [ 337.503719] worker_thread+0x674/0xe70 [ 337.504182] kthread+0x3ab/0x720 [ 337.504612] ret_from_fork+0x48/0x80 [ 337.505037] ret_from_fork_asm+0x1a/0x30 [ 337.505521] [ 337.505521] other info that might help us debug this: [ 337.505521] [ 337.506269] Possible unsafe locking scenario: [ 337.506269] [ 337.506840] CPU0 CPU1 [ 337.507281] ---- ---- [ 337.507724] lock(&rdev->wiphy.mtx); [ 337.508121] lock(rtnl_mutex); [ 337.508703] lock(&rdev->wiphy.mtx); [ 337.509320] lock(rtnl_mutex); [ 337.509670] [ 337.509670] *** DEADLOCK *** [ 337.509670] [ 337.510230] 4 locks held by kworker/u8:0/11: [ 337.510665] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 337.511669] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 337.512636] #2: ffffffff86212d10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 337.513531] #3: ffff88802a1c0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 337.514552] [ 337.514552] stack backtrace: [ 337.514981] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250122 #1 [ 337.515753] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 337.516529] Workqueue: netns cleanup_net [ 337.516942] Call Trace: [ 337.517199] [ 337.517422] dump_stack_lvl+0xca/0x120 [ 337.517837] print_circular_bug+0x47b/0x750 [ 337.518274] check_noncircular+0x2e9/0x3c0 [ 337.518694] ? srso_return_thunk+0x5/0x5f [ 337.519130] ? __pfx_check_noncircular+0x10/0x10 [ 337.519590] ? hlock_class+0x4e/0x130 [ 337.519971] ? mark_lock+0xac/0xed0 [ 337.520345] ? srso_return_thunk+0x5/0x5f [ 337.520789] ? sched_clock+0x37/0x60 [ 337.521191] ? lockdep_lock+0xba/0x1b0 [ 337.521599] ? __pfx_lockdep_lock+0x10/0x10 [ 337.522050] __lock_acquire+0x29fd/0x4580 [ 337.522481] ? __pfx___lock_acquire+0x10/0x10 [ 337.522928] ? lock_release+0x20f/0x6f0 [ 337.523330] ? __pfx_lock_release+0x10/0x10 [ 337.523770] lock_acquire+0x19b/0x520 [ 337.524159] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.524758] ? __pfx_lock_acquire+0x10/0x10 [ 337.525201] ? srso_return_thunk+0x5/0x5f [ 337.525632] ? lock_release+0x20f/0x6f0 [ 337.526037] ? srso_return_thunk+0x5/0x5f [ 337.526473] ? lock_is_held_type+0x9e/0x120 [ 337.526918] ? srso_return_thunk+0x5/0x5f [ 337.527356] __mutex_lock+0x13d/0xb50 [ 337.527757] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.528336] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.528919] ? srso_return_thunk+0x5/0x5f [ 337.529355] ? synchronize_rcu_expedited+0x38a/0x420 [ 337.529858] ? __pfx___mutex_lock+0x10/0x10 [ 337.530301] ? __pfx_autoremove_wake_function+0x10/0x10 [ 337.530828] ? srso_return_thunk+0x5/0x5f [ 337.531255] ? kasan_quarantine_put+0x84/0x1e0 [ 337.531734] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 337.532181] ? srso_return_thunk+0x5/0x5f [ 337.532631] unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.533184] ? __virt_addr_valid+0x2e8/0x5d0 [ 337.533640] ? __pfx_lock_release+0x10/0x10 [ 337.534075] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 337.534663] ? find_held_lock+0x2c/0x110 [ 337.535087] ? srso_return_thunk+0x5/0x5f [ 337.535522] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 337.536027] ? srso_return_thunk+0x5/0x5f [ 337.536471] ? lock_release+0x20f/0x6f0 [ 337.536876] ? __pfx_lock_release+0x10/0x10 [ 337.537307] ? srso_return_thunk+0x5/0x5f [ 337.537738] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 337.538265] ? srso_return_thunk+0x5/0x5f [ 337.538700] unregister_netdevice_queue+0x224/0x2e0 [ 337.539201] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 337.539746] ? up_write+0x195/0x520 [ 337.540133] _cfg80211_unregister_wdev+0x57b/0x700 [ 337.540638] ? srso_return_thunk+0x5/0x5f [ 337.541070] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 337.541576] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 337.542119] ? srso_return_thunk+0x5/0x5f [ 337.542549] ? srso_return_thunk+0x5/0x5f [ 337.542980] ? synchronize_rcu+0x1ff/0x260 [ 337.543407] ieee80211_unregister_hw+0x55/0x3a0 [ 337.543874] hwsim_exit_net+0x3a0/0x730 [ 337.544279] ? __pfx_hwsim_exit_net+0x10/0x10 [ 337.544738] ? srso_return_thunk+0x5/0x5f [ 337.545177] ? netdev_run_todo+0x788/0x1040 [ 337.545611] ? __pfx_hwsim_exit_net+0x10/0x10 [ 337.546066] ops_exit_list+0xb3/0x180 [ 337.546458] cleanup_net+0x546/0xad0 [ 337.546844] ? __pfx_cleanup_net+0x10/0x10 [ 337.547282] process_one_work+0x8ee/0x1a10 [ 337.547730] ? __pfx_lock_acquire+0x10/0x10 [ 337.548171] ? __pfx_process_one_work+0x10/0x10 [ 337.548659] ? srso_return_thunk+0x5/0x5f [ 337.549100] ? move_linked_works+0x172/0x270 [ 337.549542] ? srso_return_thunk+0x5/0x5f [ 337.549971] ? assign_work+0x196/0x240 [ 337.550381] worker_thread+0x674/0xe70 [ 337.550790] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 337.551320] ? __pfx_worker_thread+0x10/0x10 [ 337.551777] kthread+0x3ab/0x720 [ 337.552145] ? __pfx_kthread+0x10/0x10 [ 337.552554] ? srso_return_thunk+0x5/0x5f [ 337.552988] ? finish_task_switch.isra.0+0x206/0x840 [ 337.553490] ? __pfx_kthread+0x10/0x10 [ 337.553894] ret_from_fork+0x48/0x80 [ 337.554262] ? __pfx_kthread+0x10/0x10 [ 337.554669] ret_from_fork_asm+0x1a/0x30 [ 337.555100] [ 337.918907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.920608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 07:23:57 executing program 2: ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000000)={{0x2, 0x2}, 'port1\x00', 0xf6, 0x40, 0x4171461e, 0x5569, 0x2, 0x1, 0x10000, 0x0, 0x2, 0x9}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f00000000c0)) r0 = socket$netlink(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000100)={0x3}) r1 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x3, 0x80, 0x4d, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "72ce"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x5, 0x3a2, 0x20}, {0x6, 0x24, 0x1a, 0x8, 0x20}, [@acm={0x4, 0x24, 0x2, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x0, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x87, 0x3f, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xb7, 0x0, 0x9}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0xf5, 0x6, 0x3, 0x40, 0xbe}, 0x126, &(0x7f0000000200)={0x5, 0xf, 0x126, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x6, 0x8, 0xaa20}, @wireless={0xb, 0x10, 0x1, 0x4, 0x24, 0x1, 0x8, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x3, 0x1f, 0x7}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x9, 0x1, 0x0, 0x5}, @generic={0xf7, 0x10, 0x2, "3b416b7cb46adc0568336b0077d7c08f32058145c3fe1d87c982a620aa9ed8ed19c5638213572d1ddf2a60346655d6692d786f486c4226de6fe4e254f9ae8c88914f5f057f63e15f5d62e747054450ec05613a776a7c6ec996654b906f91ffd389a977603baf4c1470b2e082dfac8ebe2ca4221d7b75f9a9f71463a8784633e689f49e0621bdec5b60039f8a4530df4b036c7b88c189aef5971ffc1ae112fcfe247d24d4a6c540c38432d04c0ba3df7d76cbf0777d72d42c1706a197ddb633f345e7d235524afb84e843af3d6dee4316b6fd19de50cc8dcdb49708df928e3fef673336097274aadabe578ea21143719f35e17069"}]}, 0x1, [{0xe4, &(0x7f0000000340)=@string={0xe4, 0x3, "c39f38f710c345dad8d727092f6036e35b5412eb6ccdcead201f7721c1ee5d06e67375ce6d700201810bd40290bf4efea254507cfe42ec05954c919857cae0523a55a72d265b08d10e14183f00146ade67b94e6fe3686dd0a9bc6151ce8c38db35e5a6ca3b233bb8187572285a63b3c6a37ab569ea923a4b344cab06e67e237246a019b8a3b7ba90358744d2f01c1f6722befa53a5a83e6873a95c25426f36b006e3c718cec1d285deea52db12494cf25d76d26ad88e8436d7fabf823807ad0f24acf7f8b65b3737651bc061bfde8ff644b18b3cb4b38c0fd30e3cc064628071ec8c"}}]}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000540)={0x14, &(0x7f0000000480)={0x0, 0x35, 0x69, {0x69, 0x23, "0d1406f32b5904984674ca69c37f6f67cc7b04248df8d125f65b04f137105784514db591e2e10c75f8f3c6f20880456972a902aa61e631d7e9793a393af50df26e98b4ae4f9302b76901144f112e44f2368d3eb1cced831a2b6cd11faad84c5d263e5737bfa3dc"}}, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x44, &(0x7f0000000580)={0x20, 0x0, 0xfc, "5ae74e198d5603589ecd47a4d824c5a983a7acf5f021d12f2ad9a1c96bb05f0002bc1b6c87dc37f79d6df30d3d84a0d11df70b281705d4220cfc4866c1a5a8af9782cd07d13d6137fb9713a90c96a9ba8e91045986b7e2ff5a55e191b90ab6f2f29fbcf8bf233da72a16f5cc291bc5661ffb32bcd727665fb3dc600dc47658acc93b648e178200e4970ec73d1d8da27453d5f9e50b4b52f73b3bff71e2411ef9cdf0e14e7a68105195b4c1b2c700ec673d363e133971bbee50eea750de1b6929eac19e0337e22e253f89b8dd1d83c102f088431b5a18701aaa5e85e44e4b020a13333aaf79c55929ea066cfc65ed75942741950597399fcccaf8c37f"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000740)={0x20, 0x80, 0x1c, {0xdce, 0x40, 0x2, 0x8001, 0x3d7, 0x80, 0x40, 0x5, 0x3f, 0x2, 0x926, 0x3}}, &(0x7f0000000780)={0x20, 0x85, 0x4, 0x444063c2}, &(0x7f00000007c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000800)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000840)={0x20, 0x89, 0x2}}) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'vlan0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000940)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000000a40)={&(0x7f0000000980), 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x1}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4020) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000a80)) syz_usb_ep_read(r1, 0x3f, 0x1000, &(0x7f0000000ac0)=""/4096) syz_usb_disconnect(r1) copy_file_range(r0, &(0x7f0000001ac0)=0x5, r2, &(0x7f0000001b00)=0x5, 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000001b40)={{0x1, 0x1, 0x18, r2, {0xdf2}}, './file1\x00'}) ioctl$VT_RELDISP(r3, 0x5605) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000001b80)) r4 = syz_open_pts(r3, 0x4000) ioctl$FIBMAP(r4, 0x1, &(0x7f0000001bc0)=0x4) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x10, 0x3f5, 0x2, 0x70bd2b, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40408c0}, 0x20008145) [ 338.221094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.222386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 07:23:58 executing program 2: ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000000)={{0x2, 0x2}, 'port1\x00', 0xf6, 0x40, 0x4171461e, 0x5569, 0x2, 0x1, 0x10000, 0x0, 0x2, 0x9}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f00000000c0)) r0 = socket$netlink(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000100)={0x3}) r1 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x3, 0x80, 0x4d, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "72ce"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x5, 0x3a2, 0x20}, {0x6, 0x24, 0x1a, 0x8, 0x20}, [@acm={0x4, 0x24, 0x2, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x0, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x87, 0x3f, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xb7, 0x0, 0x9}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0xf5, 0x6, 0x3, 0x40, 0xbe}, 0x126, &(0x7f0000000200)={0x5, 0xf, 0x126, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x6, 0x8, 0xaa20}, @wireless={0xb, 0x10, 0x1, 0x4, 0x24, 0x1, 0x8, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x3, 0x1f, 0x7}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x9, 0x1, 0x0, 0x5}, @generic={0xf7, 0x10, 0x2, "3b416b7cb46adc0568336b0077d7c08f32058145c3fe1d87c982a620aa9ed8ed19c5638213572d1ddf2a60346655d6692d786f486c4226de6fe4e254f9ae8c88914f5f057f63e15f5d62e747054450ec05613a776a7c6ec996654b906f91ffd389a977603baf4c1470b2e082dfac8ebe2ca4221d7b75f9a9f71463a8784633e689f49e0621bdec5b60039f8a4530df4b036c7b88c189aef5971ffc1ae112fcfe247d24d4a6c540c38432d04c0ba3df7d76cbf0777d72d42c1706a197ddb633f345e7d235524afb84e843af3d6dee4316b6fd19de50cc8dcdb49708df928e3fef673336097274aadabe578ea21143719f35e17069"}]}, 0x1, [{0xe4, &(0x7f0000000340)=@string={0xe4, 0x3, "c39f38f710c345dad8d727092f6036e35b5412eb6ccdcead201f7721c1ee5d06e67375ce6d700201810bd40290bf4efea254507cfe42ec05954c919857cae0523a55a72d265b08d10e14183f00146ade67b94e6fe3686dd0a9bc6151ce8c38db35e5a6ca3b233bb8187572285a63b3c6a37ab569ea923a4b344cab06e67e237246a019b8a3b7ba90358744d2f01c1f6722befa53a5a83e6873a95c25426f36b006e3c718cec1d285deea52db12494cf25d76d26ad88e8436d7fabf823807ad0f24acf7f8b65b3737651bc061bfde8ff644b18b3cb4b38c0fd30e3cc064628071ec8c"}}]}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000540)={0x14, &(0x7f0000000480)={0x0, 0x35, 0x69, {0x69, 0x23, "0d1406f32b5904984674ca69c37f6f67cc7b04248df8d125f65b04f137105784514db591e2e10c75f8f3c6f20880456972a902aa61e631d7e9793a393af50df26e98b4ae4f9302b76901144f112e44f2368d3eb1cced831a2b6cd11faad84c5d263e5737bfa3dc"}}, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x44, &(0x7f0000000580)={0x20, 0x0, 0xfc, "5ae74e198d5603589ecd47a4d824c5a983a7acf5f021d12f2ad9a1c96bb05f0002bc1b6c87dc37f79d6df30d3d84a0d11df70b281705d4220cfc4866c1a5a8af9782cd07d13d6137fb9713a90c96a9ba8e91045986b7e2ff5a55e191b90ab6f2f29fbcf8bf233da72a16f5cc291bc5661ffb32bcd727665fb3dc600dc47658acc93b648e178200e4970ec73d1d8da27453d5f9e50b4b52f73b3bff71e2411ef9cdf0e14e7a68105195b4c1b2c700ec673d363e133971bbee50eea750de1b6929eac19e0337e22e253f89b8dd1d83c102f088431b5a18701aaa5e85e44e4b020a13333aaf79c55929ea066cfc65ed75942741950597399fcccaf8c37f"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000740)={0x20, 0x80, 0x1c, {0xdce, 0x40, 0x2, 0x8001, 0x3d7, 0x80, 0x40, 0x5, 0x3f, 0x2, 0x926, 0x3}}, &(0x7f0000000780)={0x20, 0x85, 0x4, 0x444063c2}, &(0x7f00000007c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000800)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000840)={0x20, 0x89, 0x2}}) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'vlan0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000940)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000000a40)={&(0x7f0000000980), 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x1}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4020) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000a80)) syz_usb_ep_read(r1, 0x3f, 0x1000, &(0x7f0000000ac0)=""/4096) syz_usb_disconnect(r1) copy_file_range(r0, &(0x7f0000001ac0)=0x5, r2, &(0x7f0000001b00)=0x5, 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000001b40)={{0x1, 0x1, 0x18, r2, {0xdf2}}, './file1\x00'}) ioctl$VT_RELDISP(r3, 0x5605) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000001b80)) r4 = syz_open_pts(r3, 0x4000) ioctl$FIBMAP(r4, 0x1, &(0x7f0000001bc0)=0x4) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x10, 0x3f5, 0x2, 0x70bd2b, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40408c0}, 0x20008145) [ 339.055721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.058102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.532114] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 339.534133] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 339.536508] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 339.542522] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 339.546007] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 339.548863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 339.717182] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 339.717831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 339.718452] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 339.722055] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 339.723589] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 339.724115] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 07:23:59 executing program 2: ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000000)={{0x2, 0x2}, 'port1\x00', 0xf6, 0x40, 0x4171461e, 0x5569, 0x2, 0x1, 0x10000, 0x0, 0x2, 0x9}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f00000000c0)) r0 = socket$netlink(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000100)={0x3}) r1 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x3, 0x80, 0x4d, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "72ce"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x5, 0x3a2, 0x20}, {0x6, 0x24, 0x1a, 0x8, 0x20}, [@acm={0x4, 0x24, 0x2, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x0, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x87, 0x3f, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xb7, 0x0, 0x9}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0xf5, 0x6, 0x3, 0x40, 0xbe}, 0x126, &(0x7f0000000200)={0x5, 0xf, 0x126, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x6, 0x8, 0xaa20}, @wireless={0xb, 0x10, 0x1, 0x4, 0x24, 0x1, 0x8, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x3, 0x1f, 0x7}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x9, 0x1, 0x0, 0x5}, @generic={0xf7, 0x10, 0x2, "3b416b7cb46adc0568336b0077d7c08f32058145c3fe1d87c982a620aa9ed8ed19c5638213572d1ddf2a60346655d6692d786f486c4226de6fe4e254f9ae8c88914f5f057f63e15f5d62e747054450ec05613a776a7c6ec996654b906f91ffd389a977603baf4c1470b2e082dfac8ebe2ca4221d7b75f9a9f71463a8784633e689f49e0621bdec5b60039f8a4530df4b036c7b88c189aef5971ffc1ae112fcfe247d24d4a6c540c38432d04c0ba3df7d76cbf0777d72d42c1706a197ddb633f345e7d235524afb84e843af3d6dee4316b6fd19de50cc8dcdb49708df928e3fef673336097274aadabe578ea21143719f35e17069"}]}, 0x1, [{0xe4, &(0x7f0000000340)=@string={0xe4, 0x3, "c39f38f710c345dad8d727092f6036e35b5412eb6ccdcead201f7721c1ee5d06e67375ce6d700201810bd40290bf4efea254507cfe42ec05954c919857cae0523a55a72d265b08d10e14183f00146ade67b94e6fe3686dd0a9bc6151ce8c38db35e5a6ca3b233bb8187572285a63b3c6a37ab569ea923a4b344cab06e67e237246a019b8a3b7ba90358744d2f01c1f6722befa53a5a83e6873a95c25426f36b006e3c718cec1d285deea52db12494cf25d76d26ad88e8436d7fabf823807ad0f24acf7f8b65b3737651bc061bfde8ff644b18b3cb4b38c0fd30e3cc064628071ec8c"}}]}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000540)={0x14, &(0x7f0000000480)={0x0, 0x35, 0x69, {0x69, 0x23, "0d1406f32b5904984674ca69c37f6f67cc7b04248df8d125f65b04f137105784514db591e2e10c75f8f3c6f20880456972a902aa61e631d7e9793a393af50df26e98b4ae4f9302b76901144f112e44f2368d3eb1cced831a2b6cd11faad84c5d263e5737bfa3dc"}}, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x44, &(0x7f0000000580)={0x20, 0x0, 0xfc, "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"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000740)={0x20, 0x80, 0x1c, {0xdce, 0x40, 0x2, 0x8001, 0x3d7, 0x80, 0x40, 0x5, 0x3f, 0x2, 0x926, 0x3}}, &(0x7f0000000780)={0x20, 0x85, 0x4, 0x444063c2}, &(0x7f00000007c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000800)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000840)={0x20, 0x89, 0x2}}) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'vlan0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000940)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000000a40)={&(0x7f0000000980), 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x1}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4020) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000a80)) syz_usb_ep_read(r1, 0x3f, 0x1000, &(0x7f0000000ac0)=""/4096) syz_usb_disconnect(r1) copy_file_range(r0, &(0x7f0000001ac0)=0x5, r2, &(0x7f0000001b00)=0x5, 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000001b40)={{0x1, 0x1, 0x18, r2, {0xdf2}}, './file1\x00'}) ioctl$VT_RELDISP(r3, 0x5605) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000001b80)) r4 = syz_open_pts(r3, 0x4000) ioctl$FIBMAP(r4, 0x1, &(0x7f0000001bc0)=0x4) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x10, 0x3f5, 0x2, 0x70bd2b, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40408c0}, 0x20008145) [ 339.917442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.917956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 07:23:59 executing program 2: ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000000)={{0x2, 0x2}, 'port1\x00', 0xf6, 0x40, 0x4171461e, 0x5569, 0x2, 0x1, 0x10000, 0x0, 0x2, 0x9}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f00000000c0)) r0 = socket$netlink(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000100)={0x3}) r1 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x3, 0x80, 0x4d, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "72ce"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x5, 0x3a2, 0x20}, {0x6, 0x24, 0x1a, 0x8, 0x20}, [@acm={0x4, 0x24, 0x2, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x0, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x87, 0x3f, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xb7, 0x0, 0x9}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0xf5, 0x6, 0x3, 0x40, 0xbe}, 0x126, &(0x7f0000000200)={0x5, 0xf, 0x126, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x6, 0x8, 0xaa20}, @wireless={0xb, 0x10, 0x1, 0x4, 0x24, 0x1, 0x8, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x3, 0x1f, 0x7}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x9, 0x1, 0x0, 0x5}, @generic={0xf7, 0x10, 0x2, "3b416b7cb46adc0568336b0077d7c08f32058145c3fe1d87c982a620aa9ed8ed19c5638213572d1ddf2a60346655d6692d786f486c4226de6fe4e254f9ae8c88914f5f057f63e15f5d62e747054450ec05613a776a7c6ec996654b906f91ffd389a977603baf4c1470b2e082dfac8ebe2ca4221d7b75f9a9f71463a8784633e689f49e0621bdec5b60039f8a4530df4b036c7b88c189aef5971ffc1ae112fcfe247d24d4a6c540c38432d04c0ba3df7d76cbf0777d72d42c1706a197ddb633f345e7d235524afb84e843af3d6dee4316b6fd19de50cc8dcdb49708df928e3fef673336097274aadabe578ea21143719f35e17069"}]}, 0x1, [{0xe4, &(0x7f0000000340)=@string={0xe4, 0x3, "c39f38f710c345dad8d727092f6036e35b5412eb6ccdcead201f7721c1ee5d06e67375ce6d700201810bd40290bf4efea254507cfe42ec05954c919857cae0523a55a72d265b08d10e14183f00146ade67b94e6fe3686dd0a9bc6151ce8c38db35e5a6ca3b233bb8187572285a63b3c6a37ab569ea923a4b344cab06e67e237246a019b8a3b7ba90358744d2f01c1f6722befa53a5a83e6873a95c25426f36b006e3c718cec1d285deea52db12494cf25d76d26ad88e8436d7fabf823807ad0f24acf7f8b65b3737651bc061bfde8ff644b18b3cb4b38c0fd30e3cc064628071ec8c"}}]}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000540)={0x14, &(0x7f0000000480)={0x0, 0x35, 0x69, {0x69, 0x23, "0d1406f32b5904984674ca69c37f6f67cc7b04248df8d125f65b04f137105784514db591e2e10c75f8f3c6f20880456972a902aa61e631d7e9793a393af50df26e98b4ae4f9302b76901144f112e44f2368d3eb1cced831a2b6cd11faad84c5d263e5737bfa3dc"}}, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x44, &(0x7f0000000580)={0x20, 0x0, 0xfc, "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"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000740)={0x20, 0x80, 0x1c, {0xdce, 0x40, 0x2, 0x8001, 0x3d7, 0x80, 0x40, 0x5, 0x3f, 0x2, 0x926, 0x3}}, &(0x7f0000000780)={0x20, 0x85, 0x4, 0x444063c2}, &(0x7f00000007c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000800)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000840)={0x20, 0x89, 0x2}}) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'vlan0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000940)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000000a40)={&(0x7f0000000980), 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x1}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4020) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000a80)) syz_usb_ep_read(r1, 0x3f, 0x1000, &(0x7f0000000ac0)=""/4096) syz_usb_disconnect(r1) copy_file_range(r0, &(0x7f0000001ac0)=0x5, r2, &(0x7f0000001b00)=0x5, 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000001b40)={{0x1, 0x1, 0x18, r2, {0xdf2}}, './file1\x00'}) ioctl$VT_RELDISP(r3, 0x5605) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000001b80)) r4 = syz_open_pts(r3, 0x4000) ioctl$FIBMAP(r4, 0x1, &(0x7f0000001bc0)=0x4) [ 340.771055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.774418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.567420] Bluetooth: hci0: command tx timeout 07:24:00 executing program 2: ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000000)={{0x2, 0x2}, 'port1\x00', 0xf6, 0x40, 0x4171461e, 0x5569, 0x2, 0x1, 0x10000, 0x0, 0x2, 0x9}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f00000000c0)) r0 = socket$netlink(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000100)={0x3}) r1 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x3, 0x80, 0x4d, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "72ce"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x5, 0x3a2, 0x20}, {0x6, 0x24, 0x1a, 0x8, 0x20}, [@acm={0x4, 0x24, 0x2, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x0, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x87, 0x3f, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xb7, 0x0, 0x9}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0xf5, 0x6, 0x3, 0x40, 0xbe}, 0x126, &(0x7f0000000200)={0x5, 0xf, 0x126, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x6, 0x8, 0xaa20}, @wireless={0xb, 0x10, 0x1, 0x4, 0x24, 0x1, 0x8, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x3, 0x1f, 0x7}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x9, 0x1, 0x0, 0x5}, @generic={0xf7, 0x10, 0x2, "3b416b7cb46adc0568336b0077d7c08f32058145c3fe1d87c982a620aa9ed8ed19c5638213572d1ddf2a60346655d6692d786f486c4226de6fe4e254f9ae8c88914f5f057f63e15f5d62e747054450ec05613a776a7c6ec996654b906f91ffd389a977603baf4c1470b2e082dfac8ebe2ca4221d7b75f9a9f71463a8784633e689f49e0621bdec5b60039f8a4530df4b036c7b88c189aef5971ffc1ae112fcfe247d24d4a6c540c38432d04c0ba3df7d76cbf0777d72d42c1706a197ddb633f345e7d235524afb84e843af3d6dee4316b6fd19de50cc8dcdb49708df928e3fef673336097274aadabe578ea21143719f35e17069"}]}, 0x1, [{0xe4, &(0x7f0000000340)=@string={0xe4, 0x3, "c39f38f710c345dad8d727092f6036e35b5412eb6ccdcead201f7721c1ee5d06e67375ce6d700201810bd40290bf4efea254507cfe42ec05954c919857cae0523a55a72d265b08d10e14183f00146ade67b94e6fe3686dd0a9bc6151ce8c38db35e5a6ca3b233bb8187572285a63b3c6a37ab569ea923a4b344cab06e67e237246a019b8a3b7ba90358744d2f01c1f6722befa53a5a83e6873a95c25426f36b006e3c718cec1d285deea52db12494cf25d76d26ad88e8436d7fabf823807ad0f24acf7f8b65b3737651bc061bfde8ff644b18b3cb4b38c0fd30e3cc064628071ec8c"}}]}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000540)={0x14, &(0x7f0000000480)={0x0, 0x35, 0x69, {0x69, 0x23, "0d1406f32b5904984674ca69c37f6f67cc7b04248df8d125f65b04f137105784514db591e2e10c75f8f3c6f20880456972a902aa61e631d7e9793a393af50df26e98b4ae4f9302b76901144f112e44f2368d3eb1cced831a2b6cd11faad84c5d263e5737bfa3dc"}}, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x44, &(0x7f0000000580)={0x20, 0x0, 0xfc, "5ae74e198d5603589ecd47a4d824c5a983a7acf5f021d12f2ad9a1c96bb05f0002bc1b6c87dc37f79d6df30d3d84a0d11df70b281705d4220cfc4866c1a5a8af9782cd07d13d6137fb9713a90c96a9ba8e91045986b7e2ff5a55e191b90ab6f2f29fbcf8bf233da72a16f5cc291bc5661ffb32bcd727665fb3dc600dc47658acc93b648e178200e4970ec73d1d8da27453d5f9e50b4b52f73b3bff71e2411ef9cdf0e14e7a68105195b4c1b2c700ec673d363e133971bbee50eea750de1b6929eac19e0337e22e253f89b8dd1d83c102f088431b5a18701aaa5e85e44e4b020a13333aaf79c55929ea066cfc65ed75942741950597399fcccaf8c37f"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000740)={0x20, 0x80, 0x1c, {0xdce, 0x40, 0x2, 0x8001, 0x3d7, 0x80, 0x40, 0x5, 0x3f, 0x2, 0x926, 0x3}}, &(0x7f0000000780)={0x20, 0x85, 0x4, 0x444063c2}, &(0x7f00000007c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000800)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000840)={0x20, 0x89, 0x2}}) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'vlan0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000940)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000000a40)={&(0x7f0000000980), 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x1}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4020) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000a80)) syz_usb_ep_read(r1, 0x3f, 0x1000, &(0x7f0000000ac0)=""/4096) syz_usb_disconnect(r1) copy_file_range(r0, &(0x7f0000001ac0)=0x5, r2, &(0x7f0000001b00)=0x5, 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000001b40)={{0x1, 0x1, 0x18, r2, {0xdf2}}, './file1\x00'}) ioctl$VT_RELDISP(r3, 0x5605) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000001b80)) syz_open_pts(r3, 0x4000) [ 341.618637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.619486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.759390] Bluetooth: hci1: command tx timeout 07:24:01 executing program 2: ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000000)={{0x2, 0x2}, 'port1\x00', 0xf6, 0x40, 0x4171461e, 0x5569, 0x2, 0x1, 0x10000, 0x0, 0x2, 0x9}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f00000000c0)) r0 = socket$netlink(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000100)={0x3}) r1 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x3, 0x80, 0x4d, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "72ce"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x5, 0x3a2, 0x20}, {0x6, 0x24, 0x1a, 0x8, 0x20}, [@acm={0x4, 0x24, 0x2, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x0, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x87, 0x3f, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xb7, 0x0, 0x9}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0xf5, 0x6, 0x3, 0x40, 0xbe}, 0x126, &(0x7f0000000200)={0x5, 0xf, 0x126, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x6, 0x8, 0xaa20}, @wireless={0xb, 0x10, 0x1, 0x4, 0x24, 0x1, 0x8, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x3, 0x1f, 0x7}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x9, 0x1, 0x0, 0x5}, @generic={0xf7, 0x10, 0x2, "3b416b7cb46adc0568336b0077d7c08f32058145c3fe1d87c982a620aa9ed8ed19c5638213572d1ddf2a60346655d6692d786f486c4226de6fe4e254f9ae8c88914f5f057f63e15f5d62e747054450ec05613a776a7c6ec996654b906f91ffd389a977603baf4c1470b2e082dfac8ebe2ca4221d7b75f9a9f71463a8784633e689f49e0621bdec5b60039f8a4530df4b036c7b88c189aef5971ffc1ae112fcfe247d24d4a6c540c38432d04c0ba3df7d76cbf0777d72d42c1706a197ddb633f345e7d235524afb84e843af3d6dee4316b6fd19de50cc8dcdb49708df928e3fef673336097274aadabe578ea21143719f35e17069"}]}, 0x1, [{0xe4, &(0x7f0000000340)=@string={0xe4, 0x3, "c39f38f710c345dad8d727092f6036e35b5412eb6ccdcead201f7721c1ee5d06e67375ce6d700201810bd40290bf4efea254507cfe42ec05954c919857cae0523a55a72d265b08d10e14183f00146ade67b94e6fe3686dd0a9bc6151ce8c38db35e5a6ca3b233bb8187572285a63b3c6a37ab569ea923a4b344cab06e67e237246a019b8a3b7ba90358744d2f01c1f6722befa53a5a83e6873a95c25426f36b006e3c718cec1d285deea52db12494cf25d76d26ad88e8436d7fabf823807ad0f24acf7f8b65b3737651bc061bfde8ff644b18b3cb4b38c0fd30e3cc064628071ec8c"}}]}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000540)={0x14, &(0x7f0000000480)={0x0, 0x35, 0x69, {0x69, 0x23, "0d1406f32b5904984674ca69c37f6f67cc7b04248df8d125f65b04f137105784514db591e2e10c75f8f3c6f20880456972a902aa61e631d7e9793a393af50df26e98b4ae4f9302b76901144f112e44f2368d3eb1cced831a2b6cd11faad84c5d263e5737bfa3dc"}}, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x44, &(0x7f0000000580)={0x20, 0x0, 0xfc, "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"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000740)={0x20, 0x80, 0x1c, {0xdce, 0x40, 0x2, 0x8001, 0x3d7, 0x80, 0x40, 0x5, 0x3f, 0x2, 0x926, 0x3}}, &(0x7f0000000780)={0x20, 0x85, 0x4, 0x444063c2}, &(0x7f00000007c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000800)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000840)={0x20, 0x89, 0x2}}) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'vlan0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000940)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000000a40)={&(0x7f0000000980), 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x1}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4020) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000a80)) syz_usb_ep_read(r1, 0x3f, 0x1000, &(0x7f0000000ac0)=""/4096) syz_usb_disconnect(r1) copy_file_range(r0, &(0x7f0000001ac0)=0x5, r2, &(0x7f0000001b00)=0x5, 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000001b40)={{0x1, 0x1, 0x18, r2, {0xdf2}}, './file1\x00'}) ioctl$VT_RELDISP(r3, 0x5605) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000001b80)) [ 342.443776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.445174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 07:24:02 executing program 2: ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000000)={{0x2, 0x2}, 'port1\x00', 0xf6, 0x40, 0x4171461e, 0x5569, 0x2, 0x1, 0x10000, 0x0, 0x2, 0x9}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f00000000c0)) r0 = socket$netlink(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000100)={0x3}) r1 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x3, 0x80, 0x4d, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "72ce"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x5, 0x3a2, 0x20}, {0x6, 0x24, 0x1a, 0x8, 0x20}, [@acm={0x4, 0x24, 0x2, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x0, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x87, 0x3f, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xb7, 0x0, 0x9}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0xf5, 0x6, 0x3, 0x40, 0xbe}, 0x126, &(0x7f0000000200)={0x5, 0xf, 0x126, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x6, 0x8, 0xaa20}, @wireless={0xb, 0x10, 0x1, 0x4, 0x24, 0x1, 0x8, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x3, 0x1f, 0x7}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x9, 0x1, 0x0, 0x5}, @generic={0xf7, 0x10, 0x2, "3b416b7cb46adc0568336b0077d7c08f32058145c3fe1d87c982a620aa9ed8ed19c5638213572d1ddf2a60346655d6692d786f486c4226de6fe4e254f9ae8c88914f5f057f63e15f5d62e747054450ec05613a776a7c6ec996654b906f91ffd389a977603baf4c1470b2e082dfac8ebe2ca4221d7b75f9a9f71463a8784633e689f49e0621bdec5b60039f8a4530df4b036c7b88c189aef5971ffc1ae112fcfe247d24d4a6c540c38432d04c0ba3df7d76cbf0777d72d42c1706a197ddb633f345e7d235524afb84e843af3d6dee4316b6fd19de50cc8dcdb49708df928e3fef673336097274aadabe578ea21143719f35e17069"}]}, 0x1, [{0xe4, &(0x7f0000000340)=@string={0xe4, 0x3, "c39f38f710c345dad8d727092f6036e35b5412eb6ccdcead201f7721c1ee5d06e67375ce6d700201810bd40290bf4efea254507cfe42ec05954c919857cae0523a55a72d265b08d10e14183f00146ade67b94e6fe3686dd0a9bc6151ce8c38db35e5a6ca3b233bb8187572285a63b3c6a37ab569ea923a4b344cab06e67e237246a019b8a3b7ba90358744d2f01c1f6722befa53a5a83e6873a95c25426f36b006e3c718cec1d285deea52db12494cf25d76d26ad88e8436d7fabf823807ad0f24acf7f8b65b3737651bc061bfde8ff644b18b3cb4b38c0fd30e3cc064628071ec8c"}}]}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000540)={0x14, &(0x7f0000000480)={0x0, 0x35, 0x69, {0x69, 0x23, "0d1406f32b5904984674ca69c37f6f67cc7b04248df8d125f65b04f137105784514db591e2e10c75f8f3c6f20880456972a902aa61e631d7e9793a393af50df26e98b4ae4f9302b76901144f112e44f2368d3eb1cced831a2b6cd11faad84c5d263e5737bfa3dc"}}, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x44, &(0x7f0000000580)={0x20, 0x0, 0xfc, "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"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000740)={0x20, 0x80, 0x1c, {0xdce, 0x40, 0x2, 0x8001, 0x3d7, 0x80, 0x40, 0x5, 0x3f, 0x2, 0x926, 0x3}}, &(0x7f0000000780)={0x20, 0x85, 0x4, 0x444063c2}, &(0x7f00000007c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000800)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000840)={0x20, 0x89, 0x2}}) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'vlan0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000940)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000000a40)={&(0x7f0000000980), 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x1}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4020) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000a80)) syz_usb_ep_read(r1, 0x3f, 0x1000, &(0x7f0000000ac0)=""/4096) syz_usb_disconnect(r1) copy_file_range(r0, &(0x7f0000001ac0)=0x5, r2, &(0x7f0000001b00)=0x5, 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000001b40)={{0x1, 0x1, 0x18, r2, {0xdf2}}, './file1\x00'}) ioctl$VT_RELDISP(r3, 0x5605) [ 343.285901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.289802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.615426] Bluetooth: hci0: command tx timeout [ 343.807418] Bluetooth: hci1: command tx timeout 07:24:03 executing program 2: ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000000)={{0x2, 0x2}, 'port1\x00', 0xf6, 0x40, 0x4171461e, 0x5569, 0x2, 0x1, 0x10000, 0x0, 0x2, 0x9}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f00000000c0)) r0 = socket$netlink(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000100)={0x3}) r1 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x3, 0x80, 0x4d, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "72ce"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x5, 0x3a2, 0x20}, {0x6, 0x24, 0x1a, 0x8, 0x20}, [@acm={0x4, 0x24, 0x2, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x0, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x87, 0x3f, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xb7, 0x0, 0x9}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0xf5, 0x6, 0x3, 0x40, 0xbe}, 0x126, &(0x7f0000000200)={0x5, 0xf, 0x126, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x6, 0x8, 0xaa20}, @wireless={0xb, 0x10, 0x1, 0x4, 0x24, 0x1, 0x8, 0x4, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x3, 0x1f, 0x7}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x9, 0x1, 0x0, 0x5}, @generic={0xf7, 0x10, 0x2, "3b416b7cb46adc0568336b0077d7c08f32058145c3fe1d87c982a620aa9ed8ed19c5638213572d1ddf2a60346655d6692d786f486c4226de6fe4e254f9ae8c88914f5f057f63e15f5d62e747054450ec05613a776a7c6ec996654b906f91ffd389a977603baf4c1470b2e082dfac8ebe2ca4221d7b75f9a9f71463a8784633e689f49e0621bdec5b60039f8a4530df4b036c7b88c189aef5971ffc1ae112fcfe247d24d4a6c540c38432d04c0ba3df7d76cbf0777d72d42c1706a197ddb633f345e7d235524afb84e843af3d6dee4316b6fd19de50cc8dcdb49708df928e3fef673336097274aadabe578ea21143719f35e17069"}]}, 0x1, [{0xe4, &(0x7f0000000340)=@string={0xe4, 0x3, "c39f38f710c345dad8d727092f6036e35b5412eb6ccdcead201f7721c1ee5d06e67375ce6d700201810bd40290bf4efea254507cfe42ec05954c919857cae0523a55a72d265b08d10e14183f00146ade67b94e6fe3686dd0a9bc6151ce8c38db35e5a6ca3b233bb8187572285a63b3c6a37ab569ea923a4b344cab06e67e237246a019b8a3b7ba90358744d2f01c1f6722befa53a5a83e6873a95c25426f36b006e3c718cec1d285deea52db12494cf25d76d26ad88e8436d7fabf823807ad0f24acf7f8b65b3737651bc061bfde8ff644b18b3cb4b38c0fd30e3cc064628071ec8c"}}]}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000540)={0x14, &(0x7f0000000480)={0x0, 0x35, 0x69, {0x69, 0x23, "0d1406f32b5904984674ca69c37f6f67cc7b04248df8d125f65b04f137105784514db591e2e10c75f8f3c6f20880456972a902aa61e631d7e9793a393af50df26e98b4ae4f9302b76901144f112e44f2368d3eb1cced831a2b6cd11faad84c5d263e5737bfa3dc"}}, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x44, &(0x7f0000000580)={0x20, 0x0, 0xfc, "5ae74e198d5603589ecd47a4d824c5a983a7acf5f021d12f2ad9a1c96bb05f0002bc1b6c87dc37f79d6df30d3d84a0d11df70b281705d4220cfc4866c1a5a8af9782cd07d13d6137fb9713a90c96a9ba8e91045986b7e2ff5a55e191b90ab6f2f29fbcf8bf233da72a16f5cc291bc5661ffb32bcd727665fb3dc600dc47658acc93b648e178200e4970ec73d1d8da27453d5f9e50b4b52f73b3bff71e2411ef9cdf0e14e7a68105195b4c1b2c700ec673d363e133971bbee50eea750de1b6929eac19e0337e22e253f89b8dd1d83c102f088431b5a18701aaa5e85e44e4b020a13333aaf79c55929ea066cfc65ed75942741950597399fcccaf8c37f"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000740)={0x20, 0x80, 0x1c, {0xdce, 0x40, 0x2, 0x8001, 0x3d7, 0x80, 0x40, 0x5, 0x3f, 0x2, 0x926, 0x3}}, &(0x7f0000000780)={0x20, 0x85, 0x4, 0x444063c2}, &(0x7f00000007c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000800)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000840)={0x20, 0x89, 0x2}}) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'vlan0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000940)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000000a40)={&(0x7f0000000980), 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x1}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4020) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000a80)) syz_usb_ep_read(r1, 0x3f, 0x1000, &(0x7f0000000ac0)=""/4096) syz_usb_disconnect(r1) copy_file_range(r0, &(0x7f0000001ac0)=0x5, r2, &(0x7f0000001b00)=0x5, 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000001b40)={{0x1, 0x1, 0x18, r2, {0xdf2}}, './file1\x00'}) [ 344.121607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.122119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.663494] Bluetooth: hci0: command tx timeout [ 345.855405] Bluetooth: hci1: command tx timeout VM DIAGNOSIS: 07:23:56 Registers: info registers vcpu 0 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283e865 RDI=ffffffff886990a0 RBP=ffffffff88699060 RSP=ffff8880095debb8 R8 =0000000000000001 R9 =ffffed10012bbd67 R10=000000000000002d R11=2d2d2d2d2d2d2d2d R12=000000000000002d R13=0000000000000001 R14=ffff888008fea03b R15=ffff8880095deeb8 RIP=ffffffff8283e8bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055b118ec3130 CR3=0000000015594000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff0000000000000000000000000000 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=00000000000000000000000000000000 XMM05=000055b118e8f160000055b118e8f080 XMM06=00000000000000000032316d69737768 XMM07=00000000000000000000000000000000 XMM08=7269762f736563697665642f7379732f XMM09=00000000000000000000000000000000 XMM10=00000000000020000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81528282 RDX=ffff8880095ed340 RSI=0000000000000000 RDI=0000000000000005 RBP=fffffbfff0be1bf1 RSP=ffff888009617d50 R8 =0000000000000000 R9 =fffffbfff0c80afa R10=0000000000000000 R11=fffffffffffce890 R12=0000000000000001 R13=ffffed10012bdd0d R14=0000000000000000 R15=ffff8880095ed340 RIP=ffffffff81528284 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055b11527d710 CR3=000000002afca000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00524f52524500400000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000