last executing test programs: 3m40.417357914s ago: executing program 1 (id=2015): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0x7, 0xd, 0x1, '\x00', 0x4}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xfec00000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, {0x2000, 0x5000, 0xc, 0xff, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x6}, {0xeeee8000, 0xffff1000, 0x9, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x3}, {0x0, 0x3000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xca, 0x26}, {0x80a0000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x10000, 0x50, 0x0, 0xf801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) (async) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0x7, 0xd, 0x1, '\x00', 0x4}) (async) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xfec00000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, {0x2000, 0x5000, 0xc, 0xff, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x6}, {0xeeee8000, 0xffff1000, 0x9, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x3}, {0x0, 0x3000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xca, 0x26}, {0x80a0000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x10000, 0x50, 0x0, 0xf801, 0x0, [0x0, 0x0, 0x1]}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 3m40.21740038s ago: executing program 1 (id=2019): r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)=@multiplanar_userptr={0x8, 0x2, 0x4, 0xc, 0x6, {0x77359400}, {0x2, 0x2, 0x80, 0x8, 0x1, 0x5, "5b07f253"}, 0x4, 0x2, {&(0x7f00000000c0)=[{0x5, 0x6, {&(0x7f0000000040)}, 0x1}, {0x3ff, 0x800, {&(0x7f0000000080)}, 0x1}]}, 0x6}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f00000001c0)={0x80, 0x0, 0x5}) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000240)=0x3, &(0x7f0000000280)=0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f00000002c0)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xeb9f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffff}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xb6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x240040d0) r3 = accept4$netrom(r2, &(0x7f0000000480)={{0x3, @rose}, [@netrom, @remote, @netrom, @netrom, @rose, @rose, @null]}, &(0x7f0000000500)=0x48, 0x800) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000540)={0x3, 0x8, {0xffffffffffffffff}, {}, 0x3894, 0x40}) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000580)=r4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r2) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, r5, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6e3d, 0x28}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x14000000}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x241}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1d) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000740)=0x6d) recvfrom$l2tp6(r2, &(0x7f0000000780)=""/133, 0x85, 0x2001, &(0x7f0000000840)={0xa, 0x0, 0x0, @dev}, 0x20) ioctl$BTRFS_IOC_RM_DEV(r6, 0x5000940b, &(0x7f0000000880)={{r6}, "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"}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f0000001880)=0x7ff, 0x4) r8 = socket$kcm(0x29, 0x7, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000018c0)=0x0) sendmsg$kcm(r8, &(0x7f0000001bc0)={&(0x7f0000001900)=@nfc_llcp={0x27, r9, 0x1, 0x7, 0x1, 0x9, "7ee5a1cfe750ab068b88d3a355c2f8d48188bcee8ca16f2defbf3a9e35d2a445d65aa15a1f423b846cf74a2a668f467f1f03ec60e1cd87a84384d79d8ac8db", 0xf}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001980)="41fd1b1dc4f7e76ce230b268aeb98174a0922b2133eb0159231ad301526241e152849c8f0a44a6ed96a00d1d7c44d5c530b40e7f877c3204d39bcfe1e440efd3a4244be2bcd738c5b9c808df386186b043039c4153c3dd815498b6020611b9ee944ce7a302e9064e70ccbb4207de9d8a007da3f6bb17fa5df32b2b7f35153c095eb88fd84dfcf4e21b8ff2950cf2b14311a95446c95c5a6a1a917c347faabe50fde512eaa4c9e4a8901f6948db6a1a6095df60dc1c4f057549b6d6e716dd4ad189fe440769b8", 0xc6}, {&(0x7f0000001a80)="5c8598ab6a525d87549e01cf7cb719a88bc093ebc32b50208a869b7db16298c2235e93e9ed0083054f03256680184110ca7ba845ef8e948d3af9dc95c1ac11c225b4b9dd452c688f7b2f6a2c414f09298e6be222b05f61782a4b9e2dd54b0bf537def47bdfd977023204ae284cf6a2ae7dc62306e30a6d1d7f2a630269c0f418c8b3b349994b14c6f01e7835d17ac4ec7de9ca66094ab006ee6b68fe13131dc5d115beedce5794f09ee8cf038827bc3c485639bdbf8154a4eb0c4c4e699860181a3269c590", 0xc5}], 0x2}, 0x24000000) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000001c40), r2) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000001d40)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x44, r10, 0x800, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000001d80)={0x80, "dcab98bb5ba25c4e95341c7022f8cf2f6a4d31bc4becc60a3f0648b223b115ad", 0x1, 0x1}) sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x20, 0x3fa, 0x200, 0x70bd26, 0x25dfdbff, {0x1, 0x1, 0x0, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000001f00)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000001f40)={&(0x7f0000001ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, r11}) 3m40.128899064s ago: executing program 1 (id=2022): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c00000003"], 0xc8}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000002100), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc5c082c00db5bffffffffff000000060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xffbf) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000000)={0x7, [0x0, 0x8, 0xb, 0x2, 0x2, 0xe32, 0x4]}, 0x12) syz_usb_connect$uac1(0x0, 0xa6, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902940003010000000904000000010100000a2401000000020102132406000006000000400000000000000000000924030000000000000924050000f8431cfd09240300000000040004240504"], 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000040)={0x6, [0x1ff, 0x4, 0x3, 0xf, 0x3, 0x6]}, &(0x7f0000000080)=0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c00000003"], 0xc8}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000002100), 0x0, 0x0) (async) close(r1) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc5c082c00db5bffffffffff000000060300000023000000000000000000000000ac1414aa"], 0xfdef) (async) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xffbf) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000000)={0x7, [0x0, 0x8, 0xb, 0x2, 0x2, 0xe32, 0x4]}, 0x12) (async) syz_usb_connect$uac1(0x0, 0xa6, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902940003010000000904000000010100000a2401000000020102132406000006000000400000000000000000000924030000000000000924050000f8431cfd09240300000000040004240504"], 0x0) (async) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000040)={0x6, [0x1ff, 0x4, 0x3, 0xf, 0x3, 0x6]}, &(0x7f0000000080)=0x10) (async) 3m36.950165898s ago: executing program 1 (id=2031): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x9, 0x0, 0x0, 0x6}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000000)={0x18, r1, 0x1, 0x0, &(0x7f00000004c0)=[{0x81, 0xfffffffffffff801}]}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x6, r1, 0x0, &(0x7f00002c0000/0x4000)=nil, 0x4000, 0x10}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x7, 0x20, 0x0, 0xfffffffe, {{0x6, 0x4, 0x2, 0x39, 0x18, 0x65, 0x0, 0x9, 0x4, 0x0, @remote, @local, {[@generic={0x94, 0x4a, "c41ff440c5c4"}]}}}}}) sendto$packet(r2, &(0x7f0000000000)="2533ceeae3a58a0f963551ca71d983", 0xf, 0x4000008, &(0x7f00000000c0)={0x11, 0x19, r3, 0x1, 0x5, 0x6, @multicast}, 0x14) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000280)={0x8, 0x0, [{0xc0000102, 0x0, 0x7}, {0x248, 0x0, 0x200000}, {0xb79, 0x0, 0xfffffffffffffffe}, {0x25f, 0x0, 0x3}, {0x2df, 0x0, 0x2}, {0x2aa, 0x0, 0x3}, {0x2f6, 0x0, 0x100000000}, {0xab5, 0x0, 0xfffffffffffffffe}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3m36.813918591s ago: executing program 1 (id=2033): socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x1, &(0x7f0000002000)={0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') (async) chdir(&(0x7f00000000c0)='./file1\x00') symlinkat(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x1, 0x800000000000fff, 0x1ffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$l2tp6(0xa, 0x2, 0x73) (async) r6 = socket$l2tp6(0xa, 0x2, 0x73) close(r6) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x40000000, 0x3}) fcntl$lock(r1, 0x6, &(0x7f0000000000)) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) (async) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x4, [0x5, 0x2, 0x81, 0x8]}, &(0x7f0000000040)=0xc) 3m36.65874655s ago: executing program 1 (id=2034): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x8000f28, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x7f, 0xe) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) add_key(&(0x7f0000001540)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) lseek(r3, 0x2004, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) r4 = dup(r0) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) ioctl$SIOCAX25GETINFO(r2, 0x89ed, &(0x7f0000000500)) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x8102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x40, 0x50, 0x7, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0xf7, {0x9, 0x21, 0x4, 0x7, 0x1, {0x22, 0x838}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xb, 0xc2, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x7, 0x5, 0x9}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x1, 0x8, 0x0, 0x8}, 0x1a, &(0x7f00000000c0)={0x5, 0xf, 0x1a, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x7, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x15, 0x6, 0x7, 0xff66}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x7, 0x4}]}, 0x6, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xf0fb}}, {0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0xd1, &(0x7f00000002c0)=@string={0xd1, 0x3, "690976d5905782bc8289fdbc0076b1b2f49f1128746a76c2bdc10d54fd9c350607deb19396b1d4614cf436f323de3c0e00c4fb47d7b77b365d1f6ef434a2eda9fdc0431f562f92480f8f7596ce9c25535763d65a617cc94575a2130dc6937041c24277eb1d805f5f579beda505a2689f7df7469b448c99688d7a275b02a88d7a737ec3a8175ee51e38e59b4b27f59f898cae03faf3d0966288aac525ebbda4deb3fca18eaa034dc1aee1d631abb10b95421e99b547269bccf06ce1a608d696cb3c4571792aa5f2cb86efe2d7787107"}}, {0x21, &(0x7f00000001c0)=@string={0x21, 0x3, "32d4b9f95200e9f23482e82df0239a48d9df3f4bcdfac5fcd3767ca183d7e1"}}, {0x93, &(0x7f00000003c0)=ANY=[@ANYBLOB="9303b78b7d2916d69b328c841cef04791b16e1dd4db5ac533ee534fc64041b6183aef83a1fed91f3804341c0c4d6c3a00a64b17e6b8a9514d9441475c0d30297e12b1b08b54ce724f70dc6db2cae9684f9e4957fca5be2582cc9c485d568467a8675ec80d06f89531789855d658a62ed2a41fdc4d3ea7591419aaf477e17a4ea627bec49e0a79b49fbf775bf4a506ada"]}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x88e}}]}) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000003840), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000b00), 0x7, 0x2) 3m21.577439098s ago: executing program 32 (id=2034): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x8000f28, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x7f, 0xe) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) add_key(&(0x7f0000001540)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) lseek(r3, 0x2004, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) r4 = dup(r0) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) ioctl$SIOCAX25GETINFO(r2, 0x89ed, &(0x7f0000000500)) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x8102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x40, 0x50, 0x7, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0xf7, {0x9, 0x21, 0x4, 0x7, 0x1, {0x22, 0x838}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xb, 0xc2, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x7, 0x5, 0x9}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x1, 0x8, 0x0, 0x8}, 0x1a, &(0x7f00000000c0)={0x5, 0xf, 0x1a, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x7, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x15, 0x6, 0x7, 0xff66}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x7, 0x4}]}, 0x6, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xf0fb}}, {0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0xd1, &(0x7f00000002c0)=@string={0xd1, 0x3, "690976d5905782bc8289fdbc0076b1b2f49f1128746a76c2bdc10d54fd9c350607deb19396b1d4614cf436f323de3c0e00c4fb47d7b77b365d1f6ef434a2eda9fdc0431f562f92480f8f7596ce9c25535763d65a617cc94575a2130dc6937041c24277eb1d805f5f579beda505a2689f7df7469b448c99688d7a275b02a88d7a737ec3a8175ee51e38e59b4b27f59f898cae03faf3d0966288aac525ebbda4deb3fca18eaa034dc1aee1d631abb10b95421e99b547269bccf06ce1a608d696cb3c4571792aa5f2cb86efe2d7787107"}}, {0x21, &(0x7f00000001c0)=@string={0x21, 0x3, "32d4b9f95200e9f23482e82df0239a48d9df3f4bcdfac5fcd3767ca183d7e1"}}, {0x93, &(0x7f00000003c0)=ANY=[@ANYBLOB="9303b78b7d2916d69b328c841cef04791b16e1dd4db5ac533ee534fc64041b6183aef83a1fed91f3804341c0c4d6c3a00a64b17e6b8a9514d9441475c0d30297e12b1b08b54ce724f70dc6db2cae9684f9e4957fca5be2582cc9c485d568467a8675ec80d06f89531789855d658a62ed2a41fdc4d3ea7591419aaf477e17a4ea627bec49e0a79b49fbf775bf4a506ada"]}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x88e}}]}) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000003840), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000b00), 0x7, 0x2) 9.485716953s ago: executing program 3 (id=3396): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x200, 0x200, 0xf0, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@multicast1, @loopback, 0xffffff00, 0xff, 0xa, 0x9, {@empty, {[0xff, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x3, 0x401, 0x9f, 0x17, 0xfffc, 0x2, 'syz_tun\x00', 'syz_tun\x00', {}, {0xff}, 0x0, 0x1cc}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x7, 0xea4, 0x1}}}, {{@arp={@multicast1, @loopback, 0xffffffff, 0xff, 0xc, 0x10, {@empty, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0xed, 0x5, 0x0, 0x35, 0x6, 0xfffb, 'macvlan0\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x0, 0x2f}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x1}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x5, {0x5}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @remote}) r2 = syz_usb_connect(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRES32, @ANYRES64=r0, @ANYRES32=r0], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ifreq(r5, 0x894a, &(0x7f0000000040)={'batadv_slave_0\x00', @ifru_names='veth1_to_team\x00'}) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f00000000c0)={@local, r10}, 0x14) bind$packet(r8, &(0x7f0000000280)={0x11, 0x0, r10, 0x1, 0xf, 0x6, @link_local}, 0x14) syz_usb_control_io(r2, 0x0, 0x0) 6.165851164s ago: executing program 0 (id=3421): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) (async, rerun: 64) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x3, 0x9d1, &(0x7f0000003140)=ANY=[@ANYBLOB="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"], &(0x7f00000030c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x9, 0x7f, 0xf4, 0x8, 0xa}, 0xa2, &(0x7f0000000380)={0x5, 0xf, 0xa2, 0x4, [@ssp_cap={0x24, 0x10, 0xa, 0x2, 0x6, 0xd, 0x1e000, 0x3, [0x0, 0xc000, 0x3f00, 0x0, 0x3faf, 0xffc00f]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "deb20b89e0546d5e76615530d1a3aa46"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1, 0x6, 0x7ff}, @generic={0x5b, 0x10, 0x4, "474fbab4661ad1d472a0d969da5a3544db7ceff6583aba7b392634e84479e8494034127d28f550903574f598a4f83514bbd8446711a0227b2f16fe68e89a019822c56ea80e1c77900781bebeec71de31fe83afca2f2ab3d5"}]}, 0x6, [{0x8f, &(0x7f0000002ec0)=@string={0x8f, 0x3, "2a11424391873f476a717b3177a42d142aec9672eef4a8680f77fe637e6317709a11c6ac97830a1aeb4e1d24d89b643973c4ce126d0cb061c109f127352e622298c3d6b081359c6132825707c684cfd0295b0c72307876b2e4eb68ae3f50d7d8e5468ceb9fe104ec6d6f4af37be0aad69190f351c2ce0c6fbf8a4b61389736c334d9e0bd380376688d3c500f79"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000002f80)=@lang_id={0x4, 0x3, 0x809}}, {0x6e, &(0x7f0000002fc0)=@string={0x6e, 0x3, "6b7966dc90c0f6dc3a56a60d7bfc303549179e6bb0d8c19be0fce43734661b48a2b9d49022d11b98be558f5fe142e5a7c625a161f04fe0d82234687669b6d922877e81bbb55166a52a5c37a9c940783809328c5f12e3646cc4f3fc7c39bb4e39f92eeb4870638fd4af6e8f6b"}}, {0x4, &(0x7f0000003040)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000003080)=@lang_id={0x4, 0x3, 0x1809}}]}) (async) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) (async, rerun: 64) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) (async, rerun: 64) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000002060102000034e40000000000000008050005000a000000050001800600000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000000c000780080013"], 0x58}}, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYBLOB="df4800000000000000000c0000000c00038004"], 0x20}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd00028008"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async, rerun: 32) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') (async, rerun: 32) chdir(&(0x7f0000000280)='./file1\x00') (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0xee00, &(0x7f00000000c0)={0x0, 0x2000000, 0x2000200000a95c, 0xffffffffffffffff, 0x4000000201, 0x80000001, 0x48cd, 0xfffffffffffffffc, 0xfe}) (async) unlink(&(0x7f0000000040)='./file0\x00') syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) (async) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x0) 6.165426744s ago: executing program 3 (id=3422): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xa07, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfc, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101000) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000000)={0x2fe2619e3185a097, 0x5, 0x4, {0x4, 0x21, '[9'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000300)={0x0, 0xf, 0x5, "cb1c0f5133"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f00000000c0)={0x40, 0x3, 0x24, {0x24, 0xa, "ecdcb5bdfa656a24d5a462bfea37d891ee0c34b30addc06e7e93e2ceefa02b3fc775"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x82c}}, &(0x7f0000000140), &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x5, 0x1, {0x22, 0xaec}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x40, 0x8, 0x49, "8911cd471bf0816f2deb80c3eae5f4913ff62e5c77ec7991c6024938bef6f239d32d8d337e276b3f292b7971cc61195950fb3da5f632f6726d5c21e23a17ad068a78c5b33362e95c0c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x58}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000340)={0x20, 0x1, 0xe0, "7039ce52d8e576df98f0413d93f6ecfaa76ae86ebf4d777df30e8ab571eaa5651dc8207a17c1beac6cad17ee88cc17fc8c40229082b72eb2f020aef75d77610c1366c86812c1c5498eac17cee53d2d0855a4b283ca3ee9168a31be006ae6f50587458179cb07ed75747a6efc5bdd7581ced8ef9fec3b8dca3caf90f51d2ab8fd9712fa72fbae2ec73fdb02cb6b716f181af0af7e2f90e324977e2d6370daacecb78a26a800b21ab5f209cd0b688fb2b2c13570cc4ba8dd63feb5d61a19e8759832d8734192da380b55f2eff456ebd303f1e51e4e716b2f3c3542993b6d59976f"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x5e}}) 6.091347219s ago: executing program 0 (id=3425): syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) (async) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000004c0)="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", 0x141}], 0x1) (async, rerun: 64) syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014058840240400784a9f0102030109022d00010000a00009043407050a01080007ceb5090502100002fe3b800905010000040a0e09"], 0x0) (rerun: 64) 4.500630747s ago: executing program 0 (id=3438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca30000000000004005000100060000000500050002000a0005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) 4.422375878s ago: executing program 0 (id=3439): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001cc0)={'ipvlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001cc0)={'ipvlan1\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x6, r3}, 0x14) (async) bind$packet(r1, &(0x7f0000000300)={0x11, 0x6, r3}, 0x14) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/29, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') dup3(r1, r5, 0x0) (async) dup3(r1, r5, 0x0) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f00000000c0)={0x0, r5}) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a000000"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 3.065630071s ago: executing program 0 (id=3444): syz_usb_connect(0x6, 0xa96, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xdc, 0xca, 0x14, 0x8, 0x403, 0xd678, 0xfec8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa84, 0x4, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x6f, 0x9, 0xa, 0xf2, 0x87, 0xdc, 0x2, [@generic={0x9f, 0xf, "bdbc4302938205f0d2b5a20d1e402d649b30ea6f3e446bfd1ccd3457bbbab3b4e3e86987535bc4f64a2df065e79dd5b6f40ee705f187bd3477e4494835e50a34f5028da2f7e0d395a5a1d3873218dec1abe4d1786ca54c47f8d460843263a6997099daa012d8442f9d86d17044274ff6367a0131c8f109feefebc7c2eab9e89ebf856bbe78e646ce345343c8fdffa9ab2bbca24b2482590322878c1238"}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "ca"}, {0x5, 0x24, 0x0, 0x7b3}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x1, 0x1, 0x8}, {0x6, 0x24, 0x1a, 0x3, 0x2}, [@country_functional={0x12, 0x24, 0x7, 0x8, 0x5, [0x2, 0x8, 0x1ff, 0x4, 0xffff, 0x54]}, @obex={0x5, 0x24, 0x15, 0x4}, @country_functional={0x8, 0x24, 0x7, 0xe2, 0x5, [0x4]}]}], [{{0x9, 0x5, 0x5, 0x4, 0x40, 0xe, 0x6, 0x93, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x2}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0xd6, 0x6, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xf, 0x1fc0}]}}, {{0x9, 0x5, 0xe, 0x3, 0x5df, 0x7, 0x5, 0xc}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0xe4, 0x7f, 0x9, [@generic={0x36, 0x2, "d33003ed4fcb9dd14dd67d97f0568eb3f835b818d49d0b116a480a3accd1c9e1d827d8c1a4655435592f7824a4aff8321e88f8e5"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0xa, 0x52, 0x40, [@generic={0x9c, 0x4, "bfe6dc75361896526a2ec3dfc6f9687e68b5388baae38e5b9316b426ec286e475760c4d77ffdf9ea24ed55ca0857a8e250ca1b4e56da901a6c6a2c50a5463490bd55a7488ca635f6c316fdeb9993c1ec82b05d346488bd087079c00b37deec4beb3255e7b5cebcd2698e6809da60bb34407cd496502f88fc855fdf38e138bb1e6c2c0b1d90465377df708df2ecec866a54e44eac0e69c45bd484"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x40, 0x9}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0xa, 0xfb, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0xdd0b}]}}, {{0x9, 0x5, 0xa, 0x0, 0x440, 0x2, 0x6, 0x6, [@generic={0xff, 0x23, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x9}]}}, {{0x9, 0x5, 0x9, 0x1, 0x3ff, 0xfc, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x2}]}}, {{0x9, 0x5, 0x0, 0xc, 0x200, 0xf9, 0xa, 0x4, [@generic={0x4d, 0x7, "05d6c6f2e61141e2d4580c7e4b7a0a74e7aa67c82ff18c798233c36ffb6fdf782330c212ccbed3ba4bec7195232f73806ec336ade325f7e4a4e67f1865e5af92f3e86f531152b20de9bad0"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x20, 0x4, 0xff, 0x1, [@generic={0x22, 0xb, "5acabf413bef37b0a6b8ec13df4afcf3c1eb05ec796a8819ed29ceec6e5887a7"}, @generic={0xb1, 0xc6b0634a19a2210f, "83ff89fa07a3dda82b19c3ba7016a8516417668f76570f79fffa93e854860c4e654faa4c2ec8cdeb6113a8f4f63c89c6f099490676a4ea0241b2837181aeb250fd862b17a1680d15cf0c24530da0e2fd5e459ca1dbc58570116710e46c03ab1c673e6ed7daa3105d757bec13713a8ca04db00b310e36ea8a92a94135a6bc722f8f842b2662a9121fed22e68b24cac3afa73499982988dde1894f75c41a4cac877fa634e175e4992fc1e9648d309709"}]}}]}}, {{0x9, 0x4, 0x47, 0x1, 0xa, 0x3e, 0x7e, 0x35, 0x2, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xa, 0x8, 0x7ff, 0x4}, [@mbim={0xc, 0x24, 0x1b, 0x88ab, 0x8, 0x72, 0x7, 0x2, 0xf2}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x5}, @mdlm={0x15, 0x24, 0x12, 0x9}]}], [{{0x9, 0x5, 0x3, 0x2, 0x40, 0x2, 0xf5, 0x6}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x5, 0x3, 0xd, [@generic={0x20, 0x0, "bd48576eed178e39819e118f63ba4ac50e5942eaf8b2c7d6ae6cf4fc7c20"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x9, 0x3, 0xc}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x2, 0x81, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0xb2, 0x40, 0x33, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x0, 0x9, 0xdc}}, {{0x9, 0x5, 0xd, 0x8, 0x200, 0x7f, 0x4, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xfffe}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x4, 0x1, 0x2, [@generic={0x67, 0xc, "34dc6888b764ad1a460f4708371e05dd6ca05341e62bcb74c0a93f7123ca693ebc82c309a174da908ef8e296435b7e09a901d63ad833b3a50e99fe984ad064a197650574411df81d8025d04159aa6502710db1c5f6d6991ea6e256c136f4066455b674cc00"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x8, 0xf7, 0x7}}, {{0x9, 0x5, 0x9, 0x4, 0x40, 0x60, 0x2, 0x5}}]}}, {{0x9, 0x4, 0x7a, 0x80, 0x7, 0xab, 0x35, 0x45, 0x1, [@generic={0xbd, 0x1, "20f5e191a133192a264a04eb76fa0f634ecd238ee7d390ff6b9cf4298548f65c4b48695c6a7fbb08d401bbf56dae8d7647c2e8a1f49fb27cd8d556cf29a37a275cce55df0e888948c1dfd15cc94177997de4b6fb25c3b5ca670ab16988242fd2b9d79f52147afbe929f4024bcbb0b87a24ca30a55d3f89609908baedd699f9b40e3d56b0654f6e9f11013c6379686beeb13e952716cb3755a80c74752b1fdb4174ef13e7d0922c031300706b10bce4f26191db09890da373585232"}, @uac_control={{0xa, 0x24, 0x1, 0x9, 0x8}, [@extension_unit={0xa, 0x24, 0x8, 0x2, 0x0, 0xf, "1839e9"}, @feature_unit={0x11, 0x24, 0x6, 0x6, 0x6, 0x5, [0x5, 0x8, 0x9, 0x9, 0xc], 0xd5}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x302, 0x4, 0x5, 0x40}]}], [{{0x9, 0x5, 0xc18d596b51530d7c, 0x0, 0x10, 0x6, 0xf2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x3}]}}, {{0x9, 0x5, 0x5, 0x1b, 0x10, 0x0, 0x40, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x9}, @generic={0xa2, 0x9, "c2156c3211942bdad83a2250bbf74a06d66f98a466425697db30a59ca103ffd3f24c5ff51c5cd4097382f996ff7a467212352611ebb6c654a7f8485484cb74cb6e4ac7ad7dc0f435320611840d0c3aea2bcad3132738d865cdcfb563d522513131479af2dd3d625e6160347c6b2fcb55da8e68cdf6a762be01b6c179f87d15529b8b41a485a4f2af6d54654db8839dc82bc495ee9901ad39011363494b883634"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x5, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x31, 0xfc00}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x7}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x48, 0x4, 0x1, [@generic={0xd8, 0x22, "76e47a1c4f0aabf3f9ef0e0cc502bf988da6b20e074f56546fcc46613e5d53e567b009326d03289136ecb0e096e0b247274d4e302ec095a987eaabe14003c4f2d322f3eb1410737b0097f5ddcd162fddd4839348944ac030473edfab5ed4a4a0ec2572d754c9ff7e188083c4f7d2eba3e4ba169bb5f8bc3cf4a3f388be82e2038d579ddedc40cb91302ff84a652b303b09cf28355e488292c46387b31978ca5e4c9bc682989a13a51fd9a3dc54863f89efef6dd76e510c5bc32d875ea062c3b12ddbd7f207f939d851d8e8cd80b0c489e93b3ad683fb"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x3ff, 0x2, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0x9}]}}, {{0x9, 0x5, 0x9, 0x1, 0x40, 0x4, 0x2, 0x9}}, {{0x9, 0x5, 0xc, 0xc, 0x20, 0x5, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x0, 0xba7c}, @uac_iso={0x7, 0x25, 0x1, 0xc2, 0x9, 0xff00}]}}]}}, {{0x9, 0x4, 0x55, 0x2, 0x7, 0xe, 0x36, 0x49, 0xb9, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "90114ea5f9b7"}, {0x5, 0x24, 0x0, 0xb}, {0xd, 0x24, 0xf, 0x1, 0x6a, 0x9, 0x9, 0xf8}, {0x6, 0x24, 0x1a, 0x6, 0xa}, [@obex={0x5, 0x24, 0x15, 0x3}, @obex={0x5, 0x24, 0x15, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0xf, 0x5}]}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "f17ab7d33d93"}, {0x5, 0x24, 0x0, 0x401}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x7f, 0x7, 0x6}, [@ncm={0x6, 0x24, 0x1a, 0x7, 0x10}, @mdlm={0x15}, @mdlm_detail={0x6f, 0x24, 0x13, 0x1, "fad599a376e3ab0439ea28279e31d3e6db7e859dd96f422bb34504a7fd73d53c7af625e27a7b185e2917ac7c10f28f9c4ac67b677f7368fa812f725cd689742049ddcbaf2bd758c8fb6ca058c2bbfa1db2753960e4845e51e7931a37f9a50cd2c7f68a3cd8c35e45234791"}]}], [{{0x9, 0x5, 0x2, 0x6, 0x10, 0x80, 0x9, 0x2}}, {{0x9, 0x5, 0xd, 0x4, 0x400, 0x0, 0x2, 0x6, [@generic={0x9e, 0xe, "ef7d0158013c13b0763898bc5c408a079cd6ec4e720b23084c37dda79f5ecac9638553ed572bd3aa876cc30cf01009d831edde10fb006f725958a174d7ad2c09e2d05b1e83005e00ae60edbf3fb78f70b7876b65962fa44cdabb39de30623ec4057aebe631a4c8ff316816f8489ba87afb7f1e9832878a1d2536f547fb1ec5a136625db894469471b0a1c07caa7dea3389effda64877d59ba104085d"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x66, 0x0, 0xb0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8d, 0x8}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x7, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfd, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0xe3}]}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x3, 0x5, 0x7}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x3, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8474bca4a4edd8d8, 0x7, 0x69}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x6, 0x4, 0x9, [@generic={0x23, 0x2, "98420d8dd0a0f15e3f42b878a964b0dd871da1508899aa50bf8492fe536ff66bad"}]}}]}}]}}]}}, 0x0) 2.915781908s ago: executing program 3 (id=3446): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x430, @local, 0x9}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r3, 0x10000) sendfile(r0, r2, 0x0, 0x7ffff004) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x6, 0x4) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 2.809772807s ago: executing program 3 (id=3447): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000020000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) 2.809194765s ago: executing program 3 (id=3448): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, r1, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0x2, {0x0, 0x0, 0x0, 0x7, 0x7, 0x5, {0x2, 0x0, 0x0, 0x2, 0x0, 0xffffff7ffffffffd, 0x0, 0x4, 0x0, 0x4000, 0xd, r2, r3, 0x800000, 0xfffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffff9c, &(0x7f0000000240)='./file0\x00', 0x20000, 0x1) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r2, r3, 0xf0ea, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) write$sequencer(r4, 0x0, 0x2f20) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000815000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x83}], 0x1, 0x201, 0x0, 0x0, 0x42, 0x5c}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x123201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000200)=0x12) ioctl$SNDCTL_DSP_SETTRIGGER(r7, 0x40045010, &(0x7f00000001c0)=0x1) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) 2.544666855s ago: executing program 0 (id=3449): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, 0x0) memfd_create(&(0x7f0000000180)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0K\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e\xb6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t\xe7?/C\xaa\xd9\xc4\xc9\xbe\x12\xed\xb3*f\xd1J\x14\x80Iy4\xa9\xf88C\xe3', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) semtimedop(0x0, &(0x7f0000000900)=[{0x2, 0x7, 0x1800}], 0x1, &(0x7f0000000180)) mmap(&(0x7f0000390000/0x2000)=nil, 0x2000, 0x0, 0x50, r0, 0xd7608000) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000b00)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r3, 0xd01c4813, &(0x7f0000000000)={0x2, 0x100, 0x40000, 0xad, 0x0, 0x1}) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x54}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x33d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0xb0, 0x8, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0xb9a}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0x4, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x410, 0x4, 0x7, 0x1}}]}}}]}}]}}, &(0x7f0000000c40)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x300, 0x7, 0x1, 0xa, 0x9f79ce5b5fc57ff4, 0x3}, 0xb7, &(0x7f0000000800)={0x5, 0xf, 0xb7, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "69868037aa8943e9ed7f79e421487b60"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x1, 0xa}, @generic={0x87, 0x10, 0x4, "8b646c008d88e47db685bbb71f49e008f76321ccadfbeed47c79e99487d90c843f8a6e619193294162594d54661567dd4880ab12a9ce648e26e90cc6dfd105f8f5d042d02e84cfd370bab4448705e28f7851275b85f9b41db81abd624d59ff9ac49b87bfb92b3c82b22fbe63000760c3a5fbded336bbba074f1aa9dafb02980056d38ef3"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x71, 0xff0f, 0x8, [0xc000]}]}, 0x7, [{0xf3, &(0x7f0000000940)=@string={0xf3, 0x3, "c75f2f2a927e25031d9e89cf89bfbacbc0b31b63aa006851af882083233c8a2eab222036a2b49f4c33406fee95d03d8731f980944d38030926b381d5dd73202e064d3cb5af44b2294d7e5223a19152a370b30b930f1ae5a17f209f91c3e533e3909e590ddccb3deeae217b963367fa151d02e42e487b363cff2e80096e947b94fd2c7a4cf67362790067f9103894b7f6f5cdbeb7e82dde607e162953cc7a9f3c40100603a2a5ea2c9454d7f6510f8d4ab58e7aecc9e7854e8264379fb97dd3aa74b8bf0cb72c22df4324624913c68804da3ee02848cf9b141a64405003eab483fad7c6776e9278ccace18075883f281105"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x3f, &(0x7f0000000a80)=@string={0x3f, 0x3, "1d69e997ddda06a3a4815a894f368b7753704f2b513feef2dbc21b2b87195f7b7b69128b99702ca6a3415155d4c06d89e590f6009646d8e83f93339c8c"}}, {0x2, &(0x7f0000000ac0)=@string={0x2}}, {0x92, &(0x7f0000000b40)=@string={0x92, 0x3, "cf596006a00c80f3a2163a357b01f62dab240eca595925292bfee8fed80e00b7f3965fec1cb2fa55541e2c2e2c6dafc786d7482221d0819555ad6d723169b6b5e350c884cf9e74ee14b764672f250d002d1d91dada833a74ace934aa219bbc70d8985b450d909a39cc7572032f2eceaa4ada92ad71596e53acf29bb976e37422ffdd20344157e02fb3422e6d48c04b20"}}, {0x18, &(0x7f0000000c00)=@string={0x18, 0x3, "dbf0e122bf8c3af29e00a2414d4d16e3bcba7cefa709"}}]}) chdir(&(0x7f0000000080)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0x1, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000006c0)={0x2, @win={{0x0, 0x1, 0x245be664, 0x6}, 0x0, 0x2, &(0x7f0000000140)={{0x6, 0x5d7, 0x8, 0x5}, &(0x7f00000000c0)={{0x3, 0x7, 0xa, 0x1}}}, 0x5, &(0x7f0000000640)="005da3afc020383407f1bc2aa5cdfb54e29e245a97f19bd3caf6ebfa880181308ddcf3a4f26810428f3741b341a179a35c81775f3d61263cfee0adac43f5d421db37e559698f0340ac8cf5aae70c231ff50d6b0401e86c3db8aedf46628fe066e16e6881cbb6b0b19b2de26dd85c6e0a0d0d"}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2.187473523s ago: executing program 4 (id=3453): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xb0, r2, 0x200, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x44040}, 0x20000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x50}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000800) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x5c, r4, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x50}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x811}, 0x20040810) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), r0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x4) r7 = socket$key(0xf, 0x3, 0x2) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r8) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f000000d000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r8, &(0x7f000000d100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, r9, 0x3, 0x70bd2c, 0x25dfd3fd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000814}, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) sendmsg$key(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r5, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_FAMILY={0x5}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010101}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mount$afs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000200), 0x4080, &(0x7f0000000240)={[{@dyn}]}) read$FUSE(r12, &(0x7f0000000340)={0x2020}, 0xcb0a) ioctl$SIOCX25GDTEFACILITIES(r11, 0x89ea, &(0x7f0000000080)) r13 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r13, 0x4004af61, &(0x7f0000000340)=0x1) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 2.098032869s ago: executing program 4 (id=3454): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x5, 0x5}) (async) syz_usb_connect(0x3, 0xffffffffffffff51, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x5c, 0x96, 0xec, 0x40, 0x1d19, 0x1101, 0x894d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14e, 0x1, 0x0, 0xfc, 0x20, 0x3, [{{0x9, 0x4, 0xf1, 0x0, 0x0, 0x38, 0x64, 0x1a, 0x3, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, '\x00\x00\x00\x00'}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x5d}, {0x6, 0x24, 0x1a, 0x4, 0x27}, [@obex={0x5, 0x24, 0x15, 0x793}, @dmm={0x7, 0x24, 0x14, 0x5, 0xb}, @dmm={0x7, 0x24, 0x14, 0x40, 0xc800}, @acm={0x4, 0x24, 0x2, 0x5}, @network_terminal={0x0, 0x24, 0xa, 0x9, 0xd, 0xe}, @mdlm_detail={0x100, 0x24, 0x13, 0xf5, "89c9318a0d29f156b697f90c678eb2b134dadf195572ec671721cb60fe19f80ef8103353ad8ad4857e3b210d5ef9ec4268b4cb7373f006f7cd0951310bdac0d7a5e952319b80ad746090d0a286a39458c24ae57ca7a3cb8930f83098d113b9658e35774e367414005c30fb48a0899b3133c4912c1dac425b511683a6c26e8e32d654f844bee263f9b8f6ea7a8dd769ce55bf84461b8b7ad9fa827d99e3e2141573ce73dc4eabcc5321ba018a34b3d7b6f10b770785db468cb202bc60f0ecc3456f558aa0bbcd4d7c1a4ecdeb60e799edcb5f2c1645b1186cb4e1ec44c515ba1101a23e35563e6d5aac028c045e7ad726b314c4f06a757e2e3da3523d"}]}]}}]}}]}}, 0x0) 1.891885225s ago: executing program 3 (id=3455): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xa07, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfc, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101000) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000000)={0x2fe2619e3185a097, 0x5, 0x4, {0x4, 0x21, '[9'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000300)={0x0, 0xf, 0x5, "cb1c0f5133"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.595101903s ago: executing program 2 (id=3460): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r0, &(0x7f00000047c0)={0x2020}, 0x2020) vmsplice(r1, &(0x7f0000000280)=[{&(0x7f0000001340)="ff", 0x1}], 0x1, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0xff, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000300)={0x0, 0x0, 0x3}) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) setresuid(0x0, 0xee00, 0x0) sendmmsg$inet6(r3, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@dstopts={{0x18, 0x29, 0x37, {0x88}}}], 0x18}}], 0x2, 0x40807) ioctl$BLKRASET(r1, 0x1262, &(0x7f0000000040)=0x8) 1.525820758s ago: executing program 4 (id=3461): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x73f, 0xf0bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4, 0x30}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'team0\x00'}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r5, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80) r6 = socket$inet(0x2, 0x802, 0x1) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @in6=@remote, 0x4e20, 0x9, 0x4e20, 0x1ff, 0x2, 0x20, 0x10, 0x2f}, {0x9, 0xb, 0x7, 0x2, 0x100, 0x97, 0x2, 0x7fffffff}, {0x7e, 0x4, 0xb2c1, 0x8}, 0x0, 0x6e6bb7, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x4d3, 0xff}, 0x2, @in=@local, 0x3503, 0x1, 0x2, 0x0, 0x5, 0x7, 0x6}}, 0xe8) sendto(r5, &(0x7f0000000140)="050000007a19b90c9daaeca1b1ec5719af0abbb83b0514127c8b417386b5c7cc0f676b6dac18222d5bf3b8b98708a136ddca61719a13016d", 0x38, 0x0, &(0x7f0000000080)=@phonet={0x1d, 0x0, 0xff, 0x80}, 0x80) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r7, &(0x7f00000016c0)={0x8, {"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", 0x1000}}, 0x1006) r8 = syz_usb_connect_ath9k(0x3, 0xad, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0x60, &(0x7f0000000340)={[{0x58, 0x4e00, "4db1fd5a5905bf60446a0f697b0ee04c1b4b4259673a41ba077f237785c334d27f4c998d66480bdf7a91232d92676835a944f68bac7149baa30a4ac266a57dfa5e753e07c7b54cbc4cd30a6eac17f1ea48def73bedd05c7a"}, {}]}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0xffffffffffffff0e}, 0x10) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff8000}, {0x7f, 0x7, 0x2, 0x98b7}]}) close_range(r10, 0xffffffffffffffff, 0x0) 1.479010461s ago: executing program 2 (id=3462): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2080}, 0x40) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r5 = socket$netlink(0x10, 0x3, 0x4) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 920.457726ms ago: executing program 4 (id=3463): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002cbd7000fedbdf253b0000000c009900060000005f00000008805700ffffffff0400870008005700e2070000080022018e02000008009f000200000008002201e00200000800a000046a990012352c8cb1a8070e3ba8950b3e4897421deedbc6fdb0da3f4b0836d40fb4e00592d43ff9c2043c67b77e3843400a3593758058f01e6961eac0c2b30b66f4005e7d6a3a12a2a553ebb65028be57f2ef6f9a5454507f9f"], 0x54}, 0x1, 0x0, 0x0, 0x24011}, 0x404c000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1}, 0x80, 0x0}, 0x2000c005) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000004000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0adff010000000000000dd6e4edef3d9345", 0xc3}], 0x1}, 0x20004804) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x0, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}}, [@tmpl={0x184, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x0, 0x2}, {{@in=@local, 0x0, 0x3c}, 0xa, @in6=@dev, 0x2, 0x0, 0x0, 0x0, 0x800, 0x800}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in=@loopback, 0x3503, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x0, 0x1, 0x0, 0xabf, 0x1000000}, {{@in6=@loopback, 0x4d4, 0x33}, 0x0, @in=@multicast1, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0x400}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x1, 0x2, 0x0, 0x1}]}]}, 0x23c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5000000002060500000000000c0000000000000005000100060005000200000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e657400000000"], 0x50}}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000480)={0x4, 0x1}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)={0x94, 0x9, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x68, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_to_team\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x9a}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x8, &(0x7f0000000000)=[{0x100, 0xe, 0x3, 0x5}, {0x8, 0x4, 0x4, 0x9}, {0xecd, 0x0, 0x1, 0x7}, {0x5, 0xf, 0x10, 0x5}, {0x85, 0x2, 0x2, 0x7ff}, {0xc, 0x1b, 0xe3, 0x8a000000}, {0x4, 0x9, 0x7, 0xd}, {0x800, 0x7, 0xfb, 0xd}]}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/reserved_size', 0x149a82, 0x0) write$binfmt_misc(r5, &(0x7f0000002cc0)="aa8dd15d", 0x4) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$netlink(0x10, 0x3, 0x2) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000a00)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000b80)=""/106, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/118, 0x76}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x56}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 773.313095ms ago: executing program 4 (id=3464): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000040)) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x10000, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x14000, 0xfffffffffffffffe) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x400) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f00000001c0)={0x8, 'veth0_virt_wifi\x00', {'syzkaller1\x00'}, 0x7}) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f00000002c0)) r3 = accept4(r1, 0x0, &(0x7f0000000300), 0x80800) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000340)={0x6, 0x0, [{0xc0000000, 0x3, 0x6, [0x6, 0x6, 0xb, 0x5e2, 0x80000000, 0x7, 0x3, 0x3]}, {0x2, 0xa345, 0x8, [0xff, 0x1, 0x3, 0x5, 0x0, 0x3, 0x8000, 0x2]}, {0xfffffb28, 0x5, 0xffffffff, [0x400, 0x14, 0x2, 0x2, 0x81, 0x7, 0x7, 0x2]}, {0xfff, 0x8000, 0x4, [0x4, 0x3, 0x0, 0x81, 0x7, 0x7, 0x8000, 0x68]}, {0x2, 0x5, 0x400, [0xc, 0x7ff, 0x10001, 0x6b316172, 0x5, 0x2, 0x9, 0x3]}, {0x5, 0xffffffff, 0x2, [0x80, 0xfff, 0x1, 0x5, 0x2, 0x0, 0x87, 0x401]}]}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000480)={'vcan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r3) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r5, 0x403, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x80) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0xc) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) readlinkat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)=""/244, 0xf4) lsetxattr$security_capability(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780), &(0x7f00000007c0)=@v1={0x1000000, [{0x3, 0x573}]}, 0xc, 0x1) socket$l2tp6(0xa, 0x2, 0x73) accept4$ax25(r1, &(0x7f0000000800)={{}, [@remote, @remote, @null, @remote, @bcast, @netrom, @bcast, @bcast]}, &(0x7f0000000880)=0x48, 0x800) ioctl$KVM_SET_NR_MMU_PAGES(r6, 0xae44, 0x3) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f00000008c0)={0x1, 0x0, {0x4, 0x1, 0x5, 0x200}}) r7 = socket$igmp(0x2, 0x3, 0x2) getsockname(r7, &(0x7f0000000900)=@qipcrtr, &(0x7f0000000980)=0x80) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a00)={0x180, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0x154, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffff80000000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_ID={0x30, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8001}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x74}, @NL802154_KEY_ATTR_ID={0x38, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fffffff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "86a39dd7f0e2a487a7ef65f37a60e5628940bf0c2586e8285a41b67ec6fc4037"}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "fa01fded4bd44ca126247533ee25eac9"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x180}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000c00)=0x0) ptrace$setregs(0xf, r8, 0x3638, &(0x7f0000000c40)="e504184603022c4342cd1799e2cf74289f8d0d2d5d7599d032bace8a8bc80cff4d35c9725e562aaae5000f216047fc63c5eee6d52fdf289e5f5ffb1de3b041a23dfdad277661076de48bea12037a603131adacd91329a93e1cd712ccdbd24728b1211c3c5bb82ee8a90bb69b6993e965ec3376fe4bfc916d46f1e61e033474aea1042fe5164f21fadd12c79c641d7b491fc05c4cf7333829d7a7b6b1bff71a89d4dbec8ab618d0e095fb43f45d8f4eafa2a69a2ae7e5db35d4b2d6ed235727dee543c1ac562496ed9acdd23616df7a71a0133c4431d28f18bf5e83b7cda1134196f14dda36f65a13e6b2") mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x110, r3, 0x100000000) 765.070651ms ago: executing program 4 (id=3465): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000140)=0x42, 0x4) r2 = accept$unix(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000340)=0x6e) mmap(&(0x7f00005b4000/0x1000)=nil, 0x1000, 0x1000000, 0x4000110, r2, 0x4c81d000) sendmmsg$inet(r1, &(0x7f0000000c40)=[{{&(0x7f0000000200)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x20004004) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x10000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, 0x3ed, 0x20, 0x70bd26, 0x25dfdbfb, "cdd4452438c9c39e41cf2c53a0b619dfc6508d55fad800340a13215eba61ce8cfa5a00c2a38aab28fa5edc3271eb27e42fb5b9edaccfd24418aca0fd", ["", "", "", "", "", "", "", "", "", ""]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x1) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="002e000000000000d8c1a284bea787eee841d654a88aa970e2be439ad26039ee9b67bbd34db43035ebc40c4db51c3277e87b713acdd7ffb4f8f3b8869fc0a1979dfda10ce60d623ef23e32077874186dab3200d5ce1b9d315e32a581196a8854d856dc86e474ed5f7875f7d21bfdc0b707c1a9ea2e0bfbf26290b9df61fba4607587210fabf9ab8991a874466b4ec3b74548baa817a7dc5f7860ccfe62ff86106303744b017ddd1a8a9e85a1e6a9c99aa86cbf9f3c64768d16cbbe5c6dec5fcf8e2871b17e84cda97432d94dc2", 0xcd}, {&(0x7f00000001c0)="bef1a53679b510ac54e5f03ede9efc69df16c1f56858fd35e0bf7993af6a120cc03a0b2e71e446518c71e3d3cc7c987e683ac85a67f7309d752023c99a8737d7ca9b9f0af7786fa0d6779aca68d2d693a6ac0569d862198c4db30f5c0df32a06ec9141cf707830c4c09af544f24ade59b5352b89c9c190b7a2401ace5a69ee274b55306acaa99e467159b576145a1bab4f984641ada81ee12bf62ba6a10ab7695868d35ce4dbf2bc95a26fa11e795d15cbb271385097eafe2eecd8207e389d7cc6fc85434a027d7005c50813eedab1e4d782c91f2e03ad3d481a65eb05c76fd36b0bd11ca44603a869aaf7e586dca50bc2aad0", 0xf3}], 0x2, 0x9, 0x8000400, 0x2) 712.610387ms ago: executing program 2 (id=3466): r0 = memfd_create(&(0x7f0000000600)='[\v\xdbX\x00\x00\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2C\x8bd#S\xdd\xeeM\xbb\xce\x82\x1eb;(\xb5\xe1jS\xd6\x91%}l\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3\t\x00\x00\x00`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x83\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8\xf2\xfb\x86\xed,\x93Y\xf58\x1c\x1bQ=\xbd\x8e \xeb\xa9\xeaU\xa9za\x18\x87\xed\xb4I\x14\x8c\xb0\x18\x1dI{\x8e\v\xb7\xb6\xd3g\x7fM\xfb\x9bG\xe8\r\x93t\x01\x9f\xb9\x15\xca\xc1Mm\xe4\xca\xc8\x84\x80c\xea\xd4\x16@\x84\x1f|M\xd3]S\xca\r\xff\xac\x879\x85\xb4c\xa1\xe9\xe5\xc0\xdf\xc4\x12#\x11\xa9#HR!\xb2\x13\xd5 \x10\x9fyd \x15\xa5\xdb\xac\xc5k\xf2\xd9m\xab\x92\xd2\xb7\x00\x00^\xd2\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x37, '\xcf\xc3m\a\xc5\x00\xf0L\xd8_*p\xf4\xe9\x93\x0e^\x98\x9c\xd5\xefMQ\xf6\r\xa7X,J\x05\xc8\xf8(\xf6\x8d\xc1wM]\xe2\xe8 \x86#\x81\xf6hm\xd1\xbb\x8f\xd7\x00\x00\x00', 0x3e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c<;{\xa4\xa4\x00\xb4\xb0w\xdct\x00\x00\x00\x06\x00\x00\x00@\a\xec!\xca\xbf\xf2\x0f\x9c\x00\x89\xf9\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x12[\x93\xa5\xd4\xdb\x9a\xb2\xe0\x16He\x81\xea[\x9c\xf9\xc4\xa2\x86F\xbct@\x97\x11Y\xa7\x1b\xc0v\xb0lJ\xc4\x9e\xc7m^\x86\xea'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x13r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0xe9) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010700000c0000000000160000000c0006000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x851}, 0x40004) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) 0s ago: executing program 2 (id=3469): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x28002) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"7ffce30c", 0xfffc, 0x5, 0x2, 0x801, 0x1, '\x00\x00\x00\f\x00', '\x00', '\x00\x00:\x00', '\x00', ["8ba8e2bca7cbd6e4af000700", "8c0facddfedefff4550400", "000000ff0000000000000020", "0000000004000000001000"]}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d001c00020400bf050005001201", 0x2e}], 0x1}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc22d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xfe}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x4, 0xfc, 0x7}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="00030201"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x30, r6, 0x1, 0x70bd29, 0xa5dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8}, {0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008c80}, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10}, {@host=0x10, 0x800}, 0x400, "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"}, 0x418, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r4, 0x7ac, &(0x7f0000000180)={&(0x7f0000000980)={{@hyper, 0x8}, {@my=0x0, 0x8}, 0x400, "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"}, 0x418, 0x5}) ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40096101, &(0x7f0000000800)={{}, 0xfe}) r9 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r11, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r13, @ANYBLOB="040013000a00060008021100000100000600100080050000060012"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r9, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x9c, r12, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x9}, @NL80211_ATTR_IE={0x52, 0x2a, [@ssid={0x0, 0xf, @random="e63be57f0b34d72524d75a3c06ffc6"}, @mic={0x8c, 0x18, {0x599, "a72edcc9c71f", @long="5ffdc98878cc9d725098f919358d8399"}}, @link_id={0x65, 0x12, {@random="69081000", @device_b}}, @channel_switch={0x25, 0x3, {0x1, 0x5, 0x6}}, @chsw_timing={0x68, 0x4, {0x0, 0x1}}, @ibss={0x6, 0x2, 0xe205}]}, @NL80211_ATTR_IE={0x2a, 0x2a, [@rann={0x7e, 0x15, {{}, 0x7, 0x0, @device_b, 0x1, 0x5, 0x80}}, @mesh_config={0x71, 0x7, {0xef, 0x1, 0x0, 0x0, 0x3, 0x0, 0x8}}, @chsw_timing={0x68, 0x4, {0x4, 0xfff8}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x936d138c2849e451}, 0x80) kernel console output (not intermixed with test programs): l 4018620d 200000000040 returned -16 [ 574.607003][ T5930] usb 4-1: device descriptor read/64, error -71 [ 574.674955][T15876] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2793'. [ 574.683953][ T5921] usb 1-1: device descriptor read/64, error -71 [ 574.724663][ T5930] usb usb4-port1: attempt power cycle [ 574.803116][ T5921] usb usb1-port1: attempt power cycle [ 574.877369][T15891] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 574.883910][T15891] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 574.892469][T15891] vhci_hcd vhci_hcd.0: Device attached [ 574.894537][T15895] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2799'. [ 574.939566][T15897] netlink: 'syz.4.2800': attribute type 29 has an invalid length. [ 574.948219][T15897] netlink: 'syz.4.2800': attribute type 29 has an invalid length. [ 574.957893][T15897] netlink: 500 bytes leftover after parsing attributes in process `syz.4.2800'. [ 574.982232][T15898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.992536][T15898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.002311][T15898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.011067][T15898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.026881][T15892] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 1 [ 575.035351][ T1156] vhci_hcd vhci_hcd.2: stop threads [ 575.040564][ T1156] vhci_hcd vhci_hcd.2: release socket [ 575.049613][ T1156] vhci_hcd vhci_hcd.2: disconnect device [ 575.087671][ T6146] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 575.097048][T15909] netlink: 25 bytes leftover after parsing attributes in process `syz.4.2802'. [ 575.111975][T15909] netlink: 'syz.4.2802': attribute type 4 has an invalid length. [ 575.112083][ T5930] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 575.153366][ T5930] usb 4-1: device descriptor read/8, error -71 [ 575.195315][ T5921] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 575.216203][ T5921] usb 1-1: device descriptor read/8, error -71 [ 575.408339][ T5930] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 575.440658][ T5930] usb 4-1: device descriptor read/8, error -71 [ 575.483005][ T5921] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 575.504775][ T5921] usb 1-1: device descriptor read/8, error -71 [ 575.558118][ T5930] usb usb4-port1: unable to enumerate USB device [ 575.622072][ T5921] usb usb1-port1: unable to enumerate USB device [ 577.059880][T15938] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2887365051 (23098920408 ns) > initial count (4489357656 ns). Using initial count to start timer. [ 577.078972][T15940] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2887365051 (23098920408 ns) > initial count (4489357656 ns). Using initial count to start timer. [ 577.115681][T15940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.140567][T15940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.448988][ T6146] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 577.555774][ T5921] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 577.588061][ T6146] usb 4-1: device descriptor read/64, error -71 [ 577.737431][ T5921] usb 1-1: Using ep0 maxpacket: 8 [ 577.744436][ T5921] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.754885][ T5921] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 577.766397][ T5921] usb 1-1: New USB device found, idVendor=04cc, idProduct=8116, bcdDevice=4d.b9 [ 577.776352][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.784623][ T5921] usb 1-1: Product: syz [ 577.788816][ T5921] usb 1-1: Manufacturer: syz [ 577.793484][ T5921] usb 1-1: SerialNumber: syz [ 577.800000][ T5921] usb 1-1: config 0 descriptor?? [ 577.844317][ T6146] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 577.983551][ T6146] usb 4-1: device descriptor read/64, error -71 [ 578.046588][ T5921] usb 1-1: USB disconnect, device number 57 [ 578.104237][ T6146] usb usb4-port1: attempt power cycle [ 578.167223][T15981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.177757][T15981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.191045][T15981] Invalid source name [ 578.195050][T15981] UBIFS error (pid: 15981): cannot open "usrquota", error -22 [ 578.485402][ T6146] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 578.517838][ T6146] usb 4-1: device descriptor read/8, error -71 [ 578.788121][ T6146] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 578.812172][T16005] netlink: 'syz.4.2824': attribute type 2 has an invalid length. [ 578.826355][ T6146] usb 4-1: device descriptor read/8, error -71 [ 578.846559][T16005] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2824'. [ 578.881013][T16008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.914357][T16008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.955450][ T5930] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 578.955732][ T6146] usb usb4-port1: unable to enumerate USB device [ 579.095957][T16017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.105245][T16017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.116107][ T5930] usb 1-1: Using ep0 maxpacket: 16 [ 579.124030][ T5930] usb 1-1: config 6 has an invalid interface number: 233 but max is 0 [ 579.132776][ T5930] usb 1-1: config 6 has no interface number 0 [ 579.141269][ T5930] usb 1-1: config 6 interface 233 has no altsetting 0 [ 579.150984][ T5930] usb 1-1: New USB device found, idVendor=12d1, idProduct=10d5, bcdDevice=df.7c [ 579.160918][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.168989][ T5930] usb 1-1: Product: syz [ 579.173929][ T5930] usb 1-1: Manufacturer: syz [ 579.178561][ T5930] usb 1-1: SerialNumber: syz [ 579.505607][ T5930] huawei_cdc_ncm 1-1:6.233: CDC Union missing and no IAD found [ 579.521815][ T5930] huawei_cdc_ncm 1-1:6.233: bind() failure [ 579.552225][ T5930] usb 1-1: USB disconnect, device number 58 [ 579.686953][T16045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2830'. [ 579.697170][T16045] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 580.312504][ T6146] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 580.450680][T16074] binder: 16073:16074 ioctl c00c620f 0 returned -14 [ 580.549742][ T6146] usb 1-1: device descriptor read/64, error -71 [ 580.805197][ T6146] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 580.944589][ T6146] usb 1-1: device descriptor read/64, error -71 [ 581.071493][ T6146] usb usb1-port1: attempt power cycle [ 581.354292][T16117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.368594][T16117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.381514][T16117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.390538][T16117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.445652][ T6146] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 581.474324][T16125] kAFS: No cell specified [ 581.482091][ T6146] usb 1-1: device descriptor read/8, error -71 [ 581.520262][T16127] netlink: 'syz.3.2849': attribute type 12 has an invalid length. [ 581.655404][T16145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2852'. [ 581.744360][ T6146] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 581.766997][ T6146] usb 1-1: device descriptor read/8, error -71 [ 581.861844][ T5921] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 581.894160][ T6146] usb usb1-port1: unable to enumerate USB device [ 582.023744][ T5921] usb 4-1: config 255 has too many interfaces: 225, using maximum allowed: 32 [ 582.033124][ T5921] usb 4-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 582.046317][ T5921] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 225 [ 582.055889][ T5921] usb 4-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 582.065173][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.112262][T16162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.121853][T16162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.372046][T16162] netlink: 'syz.2.2855': attribute type 10 has an invalid length. [ 582.388302][T16162] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2855'. [ 582.411309][T16169] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2857'. [ 582.514678][T16173] fuse: Unknown parameter 'nd' [ 582.515560][T16135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.536680][T16135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.551694][T16135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.562472][T16135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.572235][ T5921] usb 4-1: string descriptor 0 read error: -71 [ 582.589650][ T5921] usb 4-1: USB disconnect, device number 36 [ 582.646517][T16188] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2859'. [ 582.858020][T16188] (syz.4.2859,16188,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 582.922266][T16192] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 582.998814][T16195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.012314][T16195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.561004][ T5921] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 583.673576][T16230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2870'. [ 583.734229][ T5921] usb 4-1: Using ep0 maxpacket: 16 [ 583.746166][ T5921] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 583.768769][ T5921] usb 4-1: config 0 interface 0 has no altsetting 0 [ 583.798153][ T5921] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 583.819972][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.831133][ T5921] usb 4-1: Product: syz [ 583.835662][ T5921] usb 4-1: Manufacturer: syz [ 583.840494][ T5921] usb 4-1: SerialNumber: syz [ 583.855916][ T5921] usb 4-1: config 0 descriptor?? [ 583.878128][T16251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.931017][T16251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.960581][T16251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.992930][T16251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.172160][ T5930] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 584.190454][T16210] overlay: Unknown parameter 'dont_hash' [ 584.197581][T16210] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2865'. [ 584.236139][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 584.258030][ T5921] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input70 [ 584.288435][ T5921] imon:send_packet: packet tx failed (-71) [ 584.312564][ T5921] imon 4-1:0.0: panel buttons/knobs setup failed [ 584.334664][ T5930] usb 1-1: device descriptor read/64, error -71 [ 584.387940][ T5921] rc_core: IR keymap rc-imon-pad not found [ 584.393793][ T5921] Registered IR keymap rc-empty [ 584.403858][ T5921] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 584.414313][ T5921] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 584.426135][ T5921] imon:send_packet: packet tx failed (-71) [ 584.452804][ T5921] imon 4-1:0.0: remote input dev register failed [ 584.459518][ T5921] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 584.487173][ T5921] imon 4-1:0.0: unable to initialize intf0, err 0 [ 584.494059][ T5921] imon:imon_probe: failed to initialize context! [ 584.501124][ T5921] imon 4-1:0.0: unable to register, err -19 [ 584.512342][ T5921] usb 4-1: USB disconnect, device number 37 [ 584.604372][ T5930] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 584.627786][T16293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.638849][T16293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.654247][T16293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.665056][T16293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.744028][ T5930] usb 1-1: device descriptor read/64, error -71 [ 584.862986][ T5930] usb usb1-port1: attempt power cycle [ 585.154081][ T5921] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 585.240436][ T5930] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 585.263546][ T5930] usb 1-1: device descriptor read/8, error -71 [ 585.313556][T16337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.313931][T16337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.334966][ T5921] usb 4-1: no configurations [ 585.339960][ T5921] usb 4-1: can't read configurations, error -22 [ 585.477991][ T5921] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 585.520967][ T5930] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 585.546539][ T5930] usb 1-1: device descriptor read/8, error -71 [ 585.640436][ T5921] usb 4-1: no configurations [ 585.645407][ T5921] usb 4-1: can't read configurations, error -22 [ 585.652632][ T5921] usb usb4-port1: attempt power cycle [ 585.673252][ T5930] usb usb1-port1: unable to enumerate USB device [ 585.774909][T16351] netlink: 'syz.4.2886': attribute type 2 has an invalid length. [ 585.784587][T16351] netlink: 'syz.4.2886': attribute type 1 has an invalid length. [ 585.973140][T16356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2888'. [ 585.985672][T16356] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2888'. [ 586.017924][ T5921] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 586.039765][ T5921] usb 4-1: no configurations [ 586.044398][ T5921] usb 4-1: can't read configurations, error -22 [ 586.200818][ T5921] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 586.234286][ T5921] usb 4-1: no configurations [ 586.238914][ T5921] usb 4-1: can't read configurations, error -22 [ 586.245743][ T5921] usb usb4-port1: unable to enumerate USB device [ 586.474379][T16362] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2890'. [ 586.659941][T16369] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffd [ 586.971180][T16375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.986951][T16375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.509944][T16391] sctp: [Deprecated]: syz.4.2898 (pid 16391) Use of struct sctp_assoc_value in delayed_ack socket option. [ 587.509944][T16391] Use struct sctp_sack_info instead [ 587.624418][T16398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.634419][T16398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.651173][T16398] x_tables: duplicate entry at hook 1 [ 587.798046][T16402] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 588.104633][T16410] team0: No ports can be present during mode change [ 588.352579][T16424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.361660][T16424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.658509][T16449] netlink: 'syz.3.2913': attribute type 8 has an invalid length. [ 588.800481][ T10] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 588.859793][T16462] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2916'. [ 588.962227][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 588.977577][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 588.986732][ T10] usb 1-1: config 4 interface 0 has no altsetting 0 [ 589.001886][ T10] usb 1-1: string descriptor 0 read error: -22 [ 589.005820][T16468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.023422][ T10] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 589.037868][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.053755][T16468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.085777][ T10] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 589.107487][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 589.122515][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 589.128402][T16479] dvmrp12: entered allmulticast mode [ 589.130207][ T10] usb 1-1: media controller created [ 589.163898][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 589.194960][T16489] overlayfs: failed to clone upperpath [ 589.208790][T16489] /dev/nullb0: Can't lookup blockdev [ 589.308988][T16442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.320040][T16442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.333191][T16509] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 589.343387][T16509] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 589.351986][T16509] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 589.366828][T16509] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 589.430028][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 589.477402][ T10] usb 1-1: USB disconnect, device number 67 [ 589.718094][ T5930] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 589.857372][ T5930] usb 4-1: device descriptor read/64, error -71 [ 590.004524][T16537] Invalid logical block size (9) [ 590.116158][ T5930] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 590.256939][ T5930] usb 4-1: device descriptor read/64, error -71 [ 590.364189][ T5921] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 590.375268][ T5930] usb usb4-port1: attempt power cycle [ 590.515172][ T5921] usb 1-1: device descriptor read/64, error -71 [ 590.743109][ T5930] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 590.764019][ T5930] usb 4-1: device descriptor read/8, error -71 [ 590.774556][ T5921] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 590.914096][ T5921] usb 1-1: device descriptor read/64, error -71 [ 591.033216][ T5930] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 591.040984][ T5921] usb usb1-port1: attempt power cycle [ 591.076806][ T5930] usb 4-1: device descriptor read/8, error -71 [ 591.194792][ T5930] usb usb4-port1: unable to enumerate USB device [ 591.420932][ T5921] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 591.443233][ T5921] usb 1-1: device descriptor read/8, error -71 [ 591.701314][ T5921] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 591.723564][ T5921] usb 1-1: device descriptor read/8, error -71 [ 591.853162][ T5921] usb usb1-port1: unable to enumerate USB device [ 592.281647][T16490] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 592.597611][T16578] batadv_slave_0: entered promiscuous mode [ 592.638380][T16571] batadv_slave_0: left promiscuous mode [ 592.720730][T16589] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2935'. [ 592.872730][T16601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2937'. [ 593.396720][T16624] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2943'. [ 593.728048][ T5921] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 593.802525][T16634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.812356][T16634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.823555][T16634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.832948][T16634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.900542][ T5921] usb 1-1: Using ep0 maxpacket: 16 [ 593.907289][ T5921] usb 1-1: config 5 has an invalid interface number: 168 but max is 0 [ 593.915646][ T5921] usb 1-1: config 5 has no interface number 0 [ 593.922065][ T5921] usb 1-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 593.934142][ T5921] usb 1-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 593.944832][ T5921] usb 1-1: config 5 interface 168 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 1023 [ 593.955203][ T5921] usb 1-1: config 5 interface 168 has no altsetting 0 [ 593.964175][ T5921] usb 1-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 593.973710][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.982239][ T5921] usb 1-1: Product: syz [ 594.003485][ T5921] usb 1-1: Manufacturer: syz [ 594.008340][ T5921] usb 1-1: SerialNumber: syz [ 594.017563][T16617] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 594.026185][T16617] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 594.072028][T16644] 9p: Bad value for 'wfdno' [ 594.374992][ T10] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 594.475885][T16656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.488330][T16656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.491279][ C1] usb 1-1: NFC: Urb failure (status -71) [ 594.509755][ C1] usb 1-1: NFC: Urb failure (status -71) [ 594.516709][ T5921] usb 1-1: NFC: Unable to get FW version [ 594.530057][ T5921] pn533_usb 1-1:5.168: probe with driver pn533_usb failed with error -71 [ 594.542094][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 594.549306][ T5921] usb 1-1: USB disconnect, device number 72 [ 594.551780][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 594.565144][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 594.577289][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 594.589703][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 594.599048][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.607580][ T10] usb 4-1: Product: syz [ 594.612009][ T10] usb 4-1: Manufacturer: 㝖徑렽䬧뽮ॢ쪊ﻪ皌圸品䴸概㻊쩑돛拼ᕣἣ䲩ቨ肻ᬵ竣Ờ菤꒟䮘鴹懫曘門㚛퉬큃ᆕ蜯䮣鮫ꬵ⊌ࡍ찊飥샰ҫJ鷇層읱ݳ淿쫷壟絜⋹忼諸䑹⍘些鈫 [ 594.634884][ T10] usb 4-1: SerialNumber: syz [ 595.087452][ T10] usb 4-1: 0:2 : does not exist [ 595.097676][ T10] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 595.124120][ T10] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 595.149213][ T10] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 595.164731][ T10] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 595.167389][T16679] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 595.183559][T16679] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 595.195850][T16679] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 595.201081][ T10] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 595.225860][ T10] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 595.254183][ T10] usb 4-1: USB disconnect, device number 46 [ 595.286605][ T8636] udevd[8636]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 595.581973][ T5921] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 595.744162][ T5921] usb 1-1: Using ep0 maxpacket: 16 [ 595.756773][ T5921] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.768354][ T5921] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.778894][ T5921] usb 1-1: config 0 interface 0 has no altsetting 0 [ 595.785532][ T5921] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 595.797081][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.809251][ T5921] usb 1-1: config 0 descriptor?? [ 595.813997][T16710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.826003][T16710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.844399][T16710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.854562][T16710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.923934][T16720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2964'. [ 595.959419][ T10] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 596.042897][T16695] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2958'. [ 596.123569][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 596.130532][ T10] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.142152][ T10] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.155347][ T10] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 596.168931][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 596.175959][ T10] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 596.185309][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.198022][ T10] usb 4-1: config 0 descriptor?? [ 596.295463][ T5921] cougar 0003:060B:500A.0035: unexpected long global item [ 596.303336][ T5921] cougar 0003:060B:500A.0035: parse failed [ 596.309737][ T5921] cougar 0003:060B:500A.0035: probe with driver cougar failed with error -22 [ 596.431090][T16702] veth1_macvtap: left promiscuous mode [ 596.437430][T16702] macsec0: entered allmulticast mode [ 596.451690][T16702] veth1_macvtap: entered promiscuous mode [ 596.459914][T16702] veth1_macvtap: entered allmulticast mode [ 596.469101][T16702] macsec0: left allmulticast mode [ 596.474640][T16702] veth1_macvtap: left allmulticast mode [ 596.511340][ T5921] usb 1-1: USB disconnect, device number 73 [ 596.681911][T16776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.690801][T16776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.707396][T16702] tmpfs: Bad value for 'mpol' [ 596.736970][ T10] lenovo 0003:17EF:6047.0036: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 596.961444][ T5921] usb 1-1: new low-speed USB device number 74 using dummy_hcd [ 596.964087][ T10] usb 4-1: USB disconnect, device number 47 [ 597.145253][ T5921] usb 1-1: Invalid ep0 maxpacket: 32 [ 597.284791][ T5921] usb 1-1: new low-speed USB device number 75 using dummy_hcd [ 597.457050][ T5921] usb 1-1: Invalid ep0 maxpacket: 32 [ 597.462901][ T5921] usb usb1-port1: attempt power cycle [ 597.575846][T16800] syzkaller1: entered promiscuous mode [ 597.581432][T16800] syzkaller1: entered allmulticast mode [ 597.807180][T16816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.834314][ T5921] usb 1-1: new low-speed USB device number 76 using dummy_hcd [ 597.839698][T16816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.857573][ T5921] usb 1-1: Invalid ep0 maxpacket: 32 [ 597.994987][T16839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2986'. [ 598.004227][T16839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2986'. [ 598.007501][ T5921] usb 1-1: new low-speed USB device number 77 using dummy_hcd [ 598.013901][T16839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2986'. [ 598.031069][T16839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2986'. [ 598.040216][T16839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2986'. [ 598.049232][T16839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2986'. [ 598.050602][ T5921] usb 1-1: Invalid ep0 maxpacket: 32 [ 598.058991][T16839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2986'. [ 598.064138][ T5921] usb usb1-port1: unable to enumerate USB device [ 598.076906][T16839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2986'. [ 598.136901][ T5832] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 598.297514][ T5832] usb 4-1: Using ep0 maxpacket: 32 [ 598.304091][ T5832] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 598.312498][ T5832] usb 4-1: config 0 has no interface number 0 [ 598.318602][ T5832] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 598.328870][ T5832] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 598.339158][ T5832] usb 4-1: config 0 interface 126 has no altsetting 0 [ 598.348057][ T5832] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 598.357181][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.365697][ T5832] usb 4-1: Product: syz [ 598.369877][ T5832] usb 4-1: Manufacturer: syz [ 598.374687][ T5832] usb 4-1: SerialNumber: syz [ 598.382049][ T5832] usb 4-1: config 0 descriptor?? [ 598.388530][T16826] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 598.396149][T16826] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 598.613869][T16852] x_tables: unsorted underflow at hook 1 [ 598.697771][T16855] netlink: 'syz.2.2991': attribute type 1 has an invalid length. [ 598.834582][T16859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.851682][ T5832] ir_usb 4-1:0.126: IR Dongle converter detected [ 598.856576][T16859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.897452][T16859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.910361][T16859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.061582][ T5832] usb 4-1: IRDA class descriptor not found, device not bound [ 599.283095][ T5832] usb 4-1: USB disconnect, device number 48 [ 599.867903][T16893] netlink: 'syz.3.3000': attribute type 58 has an invalid length. [ 600.193762][ T10] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 600.333789][ T5832] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 600.355286][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 600.370432][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0060, bcdDevice=67.fe [ 600.379890][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.399923][ T10] usb 4-1: Product: syz [ 600.404149][ T10] usb 4-1: Manufacturer: syz [ 600.408770][ T10] usb 4-1: SerialNumber: syz [ 600.416762][ T10] usb 4-1: config 0 descriptor?? [ 600.500136][ T5832] usb 1-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 1024 [ 600.510488][ T5832] usb 1-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 64 [ 600.521409][ T5832] usb 1-1: config 1 interface 0 has no altsetting 0 [ 600.531149][ T5832] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 600.549211][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.557351][ T5832] usb 1-1: Product: syz [ 600.562183][ T5832] usb 1-1: Manufacturer: 㮉ⳛ贯㳪㣣眀䐑䴋⠖讦沒縤흈袞囹뫕ꪻ梤䰾畁ʺ嬪쭆䛎빟匫óᘟ䜎☝꒬ਣw浕鲜촸쬶ꎇ妢ﾚ퇩怔춾맟疗佴米벃ꞽ䓄诪ṝ擤醮摀녁ה턹떎齘鎕㝈匏쎫傅￳ẋ⡨⍹ꖗ쳣镫疞毬蔑쫐儆⟹㜬䅰㰄㯜욨䎵팇ꨅ镓뀱噎૝ꉝ振᧱߾䋞᱓인 [ 600.595833][ T5832] usb 1-1: SerialNumber: syz [ 600.605137][T16901] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 600.612412][T16901] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 600.696655][ T10] dvb-usb: found a 'Terratec Cinergy HT Express' in warm state. [ 600.712687][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 600.723452][ T10] dvbdev: DVB: registering new adapter (Terratec Cinergy HT Express) [ 600.731760][ T10] usb 4-1: media controller created [ 600.765182][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 600.792615][T16939] tipc: Can't bind to reserved service type 2 [ 600.799635][T16939] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 600.824299][ T10] DVB: Unable to find symbol dib7000p_attach() [ 600.837452][ T10] dvb-usb: no frontend was attached by 'Terratec Cinergy HT Express' [ 600.890522][T16945] tipc: Started in network mode [ 600.913148][T16934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.937384][T16934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.948573][T16945] tipc: Node identity fc, cluster identity 4711 [ 600.954914][T16945] tipc: Enabling of bearer rejected, failed to enable media [ 600.971017][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 600.977161][ T5832] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 600.977381][ T10] Registered IR keymap rc-empty [ 601.002074][ T10] dvb-usb: could not initialize remote control. [ 601.009034][ T10] dvb-usb: Terratec Cinergy HT Express successfully initialized and connected. [ 601.015659][ T5832] usb 1-1: USB disconnect, device number 78 [ 601.019497][T16945] netlink: 'syz.2.3008': attribute type 2 has an invalid length. [ 601.055103][T16945] !: entered promiscuous mode [ 601.108294][ T10] usb 4-1: USB disconnect, device number 49 [ 601.183485][ T10] dvb-usb: Terratec Cinergy HT Express successfully deinitialized and disconnected. [ 601.237318][T16992] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 601.237553][T16991] IPVS: stopping backup sync thread 16992 ... [ 601.377361][T17002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.388229][T17002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.403146][T17002] fuse: Bad value for 'user_id' [ 601.408714][T17002] fuse: Bad value for 'user_id' [ 601.545091][ T5832] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 601.633838][T17015] netlink: 'syz.3.3018': attribute type 10 has an invalid length. [ 601.716452][ T5832] usb 1-1: Using ep0 maxpacket: 16 [ 601.724156][ T5832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.735461][ T5832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.745490][ T5832] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 601.759217][ T5832] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 601.768286][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.784794][ T5832] usb 1-1: config 0 descriptor?? [ 602.235508][ T5832] hid-multitouch 0003:0457:07DA.0037: unknown main item tag 0x0 [ 602.245968][ T5832] hid-multitouch 0003:0457:07DA.0037: unknown main item tag 0x0 [ 602.254113][ T5832] hid-multitouch 0003:0457:07DA.0037: unknown main item tag 0x0 [ 602.262390][ T5832] hid-multitouch 0003:0457:07DA.0037: unknown main item tag 0x0 [ 602.270232][ T5832] hid-multitouch 0003:0457:07DA.0037: unknown main item tag 0x0 [ 602.293276][ T5832] hid-multitouch 0003:0457:07DA.0037: unknown main item tag 0x0 [ 602.301084][ T5832] hid-multitouch 0003:0457:07DA.0037: unknown main item tag 0x0 [ 602.309138][ T5832] hid-multitouch 0003:0457:07DA.0037: unknown main item tag 0x0 [ 602.317132][ T5832] hid-multitouch 0003:0457:07DA.0037: unknown main item tag 0x0 [ 602.325676][ T5832] hid-multitouch 0003:0457:07DA.0037: unknown main item tag 0x0 [ 602.337700][ T5832] hid-multitouch 0003:0457:07DA.0037: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.0-1/input0 [ 602.509848][ T5887] usb 1-1: USB disconnect, device number 79 [ 602.945612][ T5832] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 603.107406][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.118511][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 603.129891][ T5832] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 603.139788][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 603.147949][ T5832] usb 4-1: Manufacturer: syz [ 603.158741][ T5832] usb 4-1: config 0 descriptor?? [ 603.169221][ T5832] uvcvideo 4-1:0.0: Found UVC 0.00 device (18ec:3288) [ 603.177178][ T5832] uvcvideo 4-1:0.0: No valid video chain found. [ 603.196767][T17095] netlink: 'syz.0.3030': attribute type 4 has an invalid length. [ 603.384783][ T5832] usb 4-1: USB disconnect, device number 50 [ 603.571391][T17116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.595426][T17116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.929483][ T5832] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 604.102750][ T5832] usb 1-1: Using ep0 maxpacket: 32 [ 604.123675][ T5832] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 604.150472][ T5832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 604.176494][ T5832] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 604.208555][ T5832] usb 1-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 604.221268][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.241238][ T5832] usb 1-1: config 0 descriptor?? [ 604.697110][T17122] netlink: 'syz.0.3034': attribute type 2 has an invalid length. [ 604.715914][ T5832] input: HID 28bd:0909 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0909.0038/input/input73 [ 604.802997][ T5832] uclogic 0003:28BD:0909.0038: input,hidraw0: USB HID v20.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.0-1/input0 [ 604.913550][T12740] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 604.932359][ T5832] usb 1-1: USB disconnect, device number 80 [ 605.105972][T12740] usb 4-1: Using ep0 maxpacket: 16 [ 605.113971][T12740] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 605.126065][T12740] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 605.126368][T17163] __nla_validate_parse: 29 callbacks suppressed [ 605.126382][T17163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3038'. [ 605.139372][T12740] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 605.163175][T12740] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.172367][T12740] usb 4-1: Product: syz [ 605.176543][T12740] usb 4-1: Manufacturer: syz [ 605.182226][T12740] usb 4-1: SerialNumber: syz [ 605.202764][T12740] usb 4-1: config 0 descriptor?? [ 605.211451][T12740] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 605.224548][T12740] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 605.232019][T17168] trusted_key: encrypted_key: insufficient parameters specified [ 605.324443][T17175] netlink: 372 bytes leftover after parsing attributes in process `syz.4.3041'. [ 605.859235][T12740] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 605.860264][T17136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.875753][T17203] team_slave_0: entered promiscuous mode [ 605.877176][T17136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.881737][T17203] team_slave_1: entered promiscuous mode [ 605.902644][T17203] netlink: 'syz.0.3046': attribute type 10 has an invalid length. [ 605.904691][T17136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.917068][T17203] team_slave_0: left promiscuous mode [ 605.924908][T17203] team_slave_1: left promiscuous mode [ 605.944073][T17136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.961799][T12740] em28xx 4-1:0.0: Config register raw data: 0x4a [ 606.092639][T17203] team0 (unregistering): Port device team_slave_0 removed [ 606.104111][T17203] team0 (unregistering): Port device team_slave_1 removed [ 606.688983][ T6146] usb 1-1: new low-speed USB device number 81 using dummy_hcd [ 606.881517][ T6146] usb 1-1: Invalid ep0 maxpacket: 32 [ 606.926517][T17270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.935556][T17270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.020507][ T6146] usb 1-1: new low-speed USB device number 82 using dummy_hcd [ 607.180809][ T6146] usb 1-1: Invalid ep0 maxpacket: 32 [ 607.186397][ T6146] usb usb1-port1: attempt power cycle [ 607.351387][T17278] xt_l2tp: missing protocol rule (udp|l2tpip) [ 607.387346][ T30] audit: type=1326 audit(2000000006.021:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17279 comm="syz.4.3057" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb20e58f749 code=0x0 [ 607.459816][T17270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.478990][T17270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.499509][T17290] tmpfs: Unknown parameter 'usrquotafs/binder0' [ 607.555234][ T6146] usb 1-1: new low-speed USB device number 83 using dummy_hcd [ 607.595309][ T6146] usb 1-1: Invalid ep0 maxpacket: 32 [ 607.737017][ T6146] usb 1-1: new low-speed USB device number 84 using dummy_hcd [ 607.769690][ T6146] usb 1-1: Invalid ep0 maxpacket: 32 [ 607.780116][ T6146] usb usb1-port1: unable to enumerate USB device [ 608.354135][T17303] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3061'. [ 608.625417][T12740] usb 4-1: USB disconnect, device number 51 [ 608.651526][T12740] em28xx 4-1:0.0: Disconnecting em28xx [ 608.684834][T12740] em28xx 4-1:0.0: Freeing device [ 608.850760][T17328] netlink: 'syz.2.3066': attribute type 2 has an invalid length. [ 608.925002][T17341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.933672][T17341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.950063][T17341] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3069'. [ 608.969679][T17346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.979927][T17341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.992359][T17346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.004266][T17341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.042045][T12740] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 609.231282][T12740] usb 4-1: config 0 has an invalid interface number: 182 but max is 0 [ 609.249488][T12740] usb 4-1: config 0 has an invalid descriptor of length 91, skipping remainder of the config [ 609.261156][T12740] usb 4-1: config 0 has no interface number 0 [ 609.269029][T12740] usb 4-1: too many endpoints for config 0 interface 182 altsetting 96: 185, using maximum allowed: 30 [ 609.280382][T12740] usb 4-1: config 0 interface 182 altsetting 96 has 0 endpoint descriptors, different from the interface descriptor's value: 185 [ 609.294013][T12740] usb 4-1: config 0 interface 182 has no altsetting 0 [ 609.304783][T12740] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 609.316849][T12740] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.325169][T12740] usb 4-1: Product: syz [ 609.329918][T12740] usb 4-1: Manufacturer: syz [ 609.334938][T12740] usb 4-1: SerialNumber: syz [ 609.352481][T12740] usb 4-1: config 0 descriptor?? [ 609.585366][T12740] imon 4-1:0.182: unable to register, err -19 [ 609.629428][T12740] usb 4-1: USB disconnect, device number 52 [ 609.720159][T17387] netlink: 'syz.2.3071': attribute type 1 has an invalid length. [ 610.068504][T12740] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 610.262032][T12740] usb 1-1: Using ep0 maxpacket: 32 [ 610.269105][T12740] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 610.286051][T12740] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 610.301493][T12740] usb 1-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 610.311451][T12740] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.320247][T12740] usb 1-1: Product: syz [ 610.324551][T12740] usb 1-1: Manufacturer: syz [ 610.330161][T12740] usb 1-1: SerialNumber: syz [ 610.338808][T12740] usb 1-1: config 0 descriptor?? [ 610.359485][T12740] qmi_wwan 1-1:0.0: probe with driver qmi_wwan failed with error -22 [ 610.496541][ T5914] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 610.570463][T12740] usb 1-1: USB disconnect, device number 85 [ 610.670865][ T5914] usb 4-1: unable to get BOS descriptor or descriptor too short [ 610.681529][ T5914] usb 4-1: not running at top speed; connect to a high speed hub [ 610.693870][ T5914] usb 4-1: New USB device found, idVendor=1235, idProduct=4661, bcdDevice=ae.13 [ 610.710261][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.720718][ T5914] usb 4-1: Product: syz [ 610.725018][ T5914] usb 4-1: Manufacturer: syz [ 610.729620][ T5914] usb 4-1: SerialNumber: syz [ 610.858799][T17484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.876330][T17484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.995246][ T5914] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 611.047339][ T5914] snd-usb-audio 4-1:8.0: probe with driver snd-usb-audio failed with error -2 [ 611.082576][ T5914] usb 4-1: USB disconnect, device number 53 [ 611.136971][ T8636] udevd[8636]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 611.205876][T17527] misc userio: Invalid payload size [ 611.473565][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 611.491177][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 611.504021][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 611.511999][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 611.524884][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 611.706065][T17547] netlink: 'syz.3.3086': attribute type 1 has an invalid length. [ 611.724102][T17547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3086'. [ 611.857034][T17555] netlink: 'syz.2.3088': attribute type 1 has an invalid length. [ 611.864823][T17555] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3088'. [ 612.093300][T17568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.113662][T17568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.173974][T17577] netlink: 740 bytes leftover after parsing attributes in process `syz.4.3093'. [ 612.407868][T17532] chnl_net:caif_netlink_parms(): no params data found [ 612.591007][T17532] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.601147][T17532] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.610350][T17532] bridge_slave_0: entered allmulticast mode [ 612.618063][T17532] bridge_slave_0: entered promiscuous mode [ 612.626492][T17532] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.633782][T17532] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.642024][T17532] bridge_slave_1: entered allmulticast mode [ 612.650304][T17532] bridge_slave_1: entered promiscuous mode [ 612.702219][T17532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.715839][T17532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.718628][T17756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.767354][T17756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.799396][T17532] team0: Port device team_slave_0 added [ 612.807668][ T5914] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 612.827002][T17532] team0: Port device team_slave_1 added [ 612.830350][T17756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.847815][T17756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.889692][T17532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.897327][T17532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.924941][T17532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.938260][T17532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.945565][T17532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.972959][T17532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.001387][ T5914] usb 4-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 613.012239][ T5914] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 613.024139][ T5914] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 613.034531][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.043024][ T5914] usb 4-1: Product: syz [ 613.047640][ T5914] usb 4-1: Manufacturer: syz [ 613.052993][ T5914] usb 4-1: SerialNumber: syz [ 613.071116][T17532] hsr_slave_0: entered promiscuous mode [ 613.079193][T17532] hsr_slave_1: entered promiscuous mode [ 613.087064][T17532] debugfs: 'hsr0' already exists in 'hsr' [ 613.092835][T17532] Cannot create hsr debugfs directory [ 613.266647][T17532] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.312212][T17699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.323702][T17699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.359827][T17532] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.363165][T17699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.381027][T17699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.413801][ T5914] usb 4-1: 0:2 : does not exist [ 613.437102][ T5914] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 613.466246][ T5914] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 613.493343][ T5914] usb 4-1: USB disconnect, device number 54 [ 613.509990][T17532] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.537949][ T8636] udevd[8636]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 613.618698][T17532] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.643975][T17932] binder: Unknown parameter 'euid<00000000000000000000' [ 613.677598][T17936] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 613.684447][T17936] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 613.747963][ T5833] Bluetooth: hci3: command tx timeout [ 613.820382][T17532] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 613.837738][T17532] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 613.858946][T17532] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 613.871762][T17944] sctp: [Deprecated]: syz.2.3100 (pid 17944) Use of int in max_burst socket option deprecated. [ 613.871762][T17944] Use struct sctp_assoc_value instead [ 613.875567][T17532] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 614.023554][T17532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.038138][T17966] lo speed is unknown, defaulting to 1000 [ 614.060938][T17966] lo speed is unknown, defaulting to 1000 [ 614.065658][T17532] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.087436][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.094756][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.102979][T17966] lo speed is unknown, defaulting to 1000 [ 614.124223][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.131524][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.183526][T17967] : renamed from lo (while UP) [ 614.198621][T17971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.242197][T17971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.370678][T17982] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3106'. [ 614.466490][T17966] infiniband sz1: set active [ 614.471336][ T5914] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 614.471375][ T6146] speed is unknown, defaulting to 1000 [ 614.488303][T17966] infiniband sz1: added [ 614.552739][T17532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.561295][T17966] RDS/IB: sz1: added [ 614.567513][T17966] smc: adding ib device sz1 with port count 1 [ 614.574329][T17966] smc: ib device sz1 port 1 has no pnetid [ 614.584418][ T6146] speed is unknown, defaulting to 1000 [ 614.595701][T17966] speed is unknown, defaulting to 1000 [ 614.610539][T17532] veth0_vlan: entered promiscuous mode [ 614.627968][T17532] veth1_vlan: entered promiscuous mode [ 614.646214][ T5914] usb 4-1: Using ep0 maxpacket: 32 [ 614.655220][ T5914] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 614.674066][ T5914] usb 4-1: config 0 has no interface number 0 [ 614.683746][T17532] veth0_macvtap: entered promiscuous mode [ 614.689624][ T5914] usb 4-1: config 0 interface 230 has no altsetting 0 [ 614.701423][ T5914] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 614.709957][T17532] veth1_macvtap: entered promiscuous mode [ 614.710759][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.724989][ T5914] usb 4-1: Product: syz [ 614.729162][ T5914] usb 4-1: Manufacturer: syz [ 614.734204][ T5914] usb 4-1: SerialNumber: syz [ 614.741768][ T5914] usb 4-1: config 0 descriptor?? [ 614.749940][ T5914] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 614.773284][ T5914] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 614.779979][T17532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 614.820034][T17532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 614.837531][ T152] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.848126][ T152] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.871675][ T152] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.880695][ T152] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.039111][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.047786][T17966] speed is unknown, defaulting to 1000 [ 615.057478][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.118686][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.127669][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.392647][T17966] speed is unknown, defaulting to 1000 [ 615.544553][ T5832] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 615.618006][T17966] speed is unknown, defaulting to 1000 [ 615.716253][ T5832] usb 1-1: Using ep0 maxpacket: 8 [ 615.728944][ T5832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 615.749993][ T5832] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 615.769398][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.791827][ T5832] usb 1-1: config 0 descriptor?? [ 615.895168][T17966] speed is unknown, defaulting to 1000 [ 615.974410][ T5833] Bluetooth: hci3: command tx timeout [ 616.032311][ T5832] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 616.190287][T17966] speed is unknown, defaulting to 1000 [ 616.253930][ T5873] usb 1-1: USB disconnect, device number 86 [ 616.462028][T17966] speed is unknown, defaulting to 1000 [ 616.720564][T18043] netlink: 'syz.3.3104': attribute type 2 has an invalid length. [ 616.734205][T18043] !: entered promiscuous mode [ 617.311397][T18055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.326070][T18055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.407976][T18064] usb usb8: usbfs: process 18064 (syz.2.3117) did not claim interface 7 before use [ 617.849022][T18082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.860188][T18082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.977323][T18099] netlink: 1030 bytes leftover after parsing attributes in process `syz.4.3125'. [ 617.987850][T18099] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 618.043232][T18104] overlayfs: failed to clone upperpath [ 618.186232][ T5832] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 618.197426][ T5833] Bluetooth: hci3: command tx timeout [ 618.358875][ T5832] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 618.370445][ T5832] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 618.380666][ T5832] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 618.389839][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.407251][T18087] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 618.419090][ T5832] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 618.561430][ T5914] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 618.581049][ T5914] usb 4-1: USB disconnect, device number 55 [ 618.672664][ T10] usb 1-1: USB disconnect, device number 87 [ 618.811818][T18157] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3133'. [ 618.848143][T18162] openvswitch: netlink: Key type 31 is not supported [ 618.875138][T18164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.888409][T18164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.947604][T18171] overlayfs: missing 'lowerdir' [ 619.008703][T18176] netlink: 'syz.4.3137': attribute type 27 has an invalid length. [ 619.074320][ T5873] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 619.238753][ T5873] usb 4-1: unable to get BOS descriptor or descriptor too short [ 619.247314][ T5873] usb 4-1: not running at top speed; connect to a high speed hub [ 619.256542][ T5873] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 619.266809][ T5873] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 619.282192][ T5873] usb 4-1: string descriptor 0 read error: -22 [ 619.290268][ T5873] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 619.300372][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.321387][ T5873] usb 4-1: 0:2 : does not exist [ 619.545794][T18200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.554925][T18200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.843933][T12740] usb 1-1: new low-speed USB device number 88 using dummy_hcd [ 620.004393][T12740] usb 1-1: Invalid ep0 maxpacket: 32 [ 620.143401][T12740] usb 1-1: new low-speed USB device number 89 using dummy_hcd [ 620.188151][T18215] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3145'. [ 620.270772][T18218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.283239][T18218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.303850][T12740] usb 1-1: Invalid ep0 maxpacket: 32 [ 620.312763][T18218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.315350][T12740] usb usb1-port1: attempt power cycle [ 620.329813][T18218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.422456][ T5833] Bluetooth: hci3: command tx timeout [ 620.699572][T12740] usb 1-1: new low-speed USB device number 90 using dummy_hcd [ 620.744964][T12740] usb 1-1: Invalid ep0 maxpacket: 32 [ 620.881415][T12740] usb 1-1: new low-speed USB device number 91 using dummy_hcd [ 620.924779][T12740] usb 1-1: Invalid ep0 maxpacket: 32 [ 620.930372][T12740] usb usb1-port1: unable to enumerate USB device [ 621.040570][ T5873] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 621.054620][ T5873] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 621.101864][ T5873] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 621.126056][ T5873] usb 4-1: USB disconnect, device number 56 [ 621.635333][ T5833] Bluetooth: hci1: unexpected event for opcode 0x1002 [ 622.027080][ T5873] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 622.208668][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 622.219368][ T5873] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 622.228754][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.237426][ T5873] usb 4-1: Product: syz [ 622.242191][ T5873] usb 4-1: Manufacturer: syz [ 622.246916][ T5873] usb 4-1: SerialNumber: syz [ 622.259575][ T5873] usb 4-1: config 0 descriptor?? [ 622.487713][T18262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.502467][T18262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.516037][ T5873] usb 4-1: USB disconnect, device number 57 [ 623.202212][ T5873] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 623.232158][T18298] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3160'. [ 623.266549][T18298] 0: renamed from hsr_slave_1 (while UP) [ 623.289180][T18298] 0: entered allmulticast mode [ 623.298926][T18298] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 623.321817][T18299] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 623.402406][ T5873] usb 1-1: Using ep0 maxpacket: 8 [ 623.415955][ T5873] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 623.427937][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.442185][ T5873] usb 1-1: Product: syz [ 623.447604][ T5873] usb 1-1: Manufacturer: syz [ 623.460812][ T5873] usb 1-1: SerialNumber: syz [ 623.473278][T18308] overlayfs: failed to clone upperpath [ 623.479320][ T5873] usb 1-1: config 0 descriptor?? [ 623.489296][T18308] netlink: 'syz.4.3162': attribute type 2 has an invalid length. [ 623.498246][T18308] netlink: 'syz.4.3162': attribute type 6 has an invalid length. [ 623.500435][ T5873] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 623.597926][ T5887] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 623.689869][T18313] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 623.792356][ T5887] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 623.795118][T18331] program syz.2.3166 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 623.800576][ T5887] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.813548][T18331] program syz.2.3166 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 623.844070][ T5887] usb 4-1: config 0 has no interface number 0 [ 623.850360][ T5887] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 623.865861][T18330] netlink: 679 bytes leftover after parsing attributes in process `syz.4.3167'. [ 623.887913][ T5887] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 623.908940][ T5887] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 623.918026][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.934254][ T5887] usb 4-1: Product: syz [ 623.940234][ T5887] usb 4-1: Manufacturer: syz [ 623.944932][ T5887] usb 4-1: SerialNumber: syz [ 623.957995][ T5887] usb 4-1: config 0 descriptor?? [ 624.389983][T18353] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3173'. [ 624.588425][T18366] can0: slcan on ttyS3. [ 624.607633][T18366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.617901][T18366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.624253][ T5887] usbtouchscreen 4-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 624.640569][T18366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.667019][ T5887] usb 4-1: USB disconnect, device number 58 [ 624.668936][T18366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.778594][T18366] can0 (unregistered): slcan off ttyS3. [ 624.874242][T18392] 9p: Bad value for 'rfdno' [ 624.891488][T18392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3178'. [ 624.975206][T18395] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3178'. [ 625.500490][T18415] autofs4:pid:18415:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.3), cmd(0xc0189377) [ 625.526998][T18415] autofs4:pid:18415:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189377) [ 625.664737][ T5873] gspca_sonixj: reg_w1 err -71 [ 625.672973][ T5873] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 625.687586][ T5873] usb 1-1: USB disconnect, device number 92 [ 625.784831][T18438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.823346][T18438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.934279][T18438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3184'. [ 625.987211][ T5887] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 626.189736][ T5887] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 626.218290][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.226316][ T5887] usb 4-1: Product: syz [ 626.230705][ T5887] usb 4-1: Manufacturer: syz [ 626.251277][ T5887] usb 4-1: SerialNumber: syz [ 626.258877][ T5887] usb 4-1: config 0 descriptor?? [ 626.528503][ T5914] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 626.653752][T18454] netlink: 'syz.2.3186': attribute type 29 has an invalid length. [ 626.699511][ T5914] usb 1-1: Using ep0 maxpacket: 32 [ 626.706652][ T5914] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.719096][ T5914] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.730901][ T5914] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 626.741351][ T5914] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 626.749812][ T5914] usb 1-1: Product: syz [ 626.754722][ T5914] usb 1-1: Manufacturer: syz [ 626.770539][ T5914] hub 1-1:4.0: USB hub found [ 626.984796][ T5887] usb 4-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 626.991690][ T5887] f81604 4-1:0.0: Setting termination of CH#1 failed: -EREMOTEIO [ 627.000112][ T5887] f81604 4-1:0.0: probe with driver f81604 failed with error -121 [ 627.004943][T18448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.019592][T18448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.031830][ T5914] hub 1-1:4.0: 5 ports detected [ 627.037144][ T5914] hub 1-1:4.0: insufficient power available to use all downstream ports [ 627.251462][ T5914] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 627.258634][ T5914] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 627.288883][ T5914] usb 1-1: USB disconnect, device number 93 [ 627.917454][ T5833] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 627.928807][ T5833] CPU: 1 UID: 0 PID: 5833 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 627.928827][ T5833] Tainted: [L]=SOFTLOCKUP [ 627.928832][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 627.928839][ T5833] Workqueue: hci3 hci_rx_work [ 627.928856][ T5833] Call Trace: [ 627.928861][ T5833] [ 627.928867][ T5833] dump_stack_lvl+0x189/0x250 [ 627.928882][ T5833] ? __pfx_dump_stack_lvl+0x10/0x10 [ 627.928892][ T5833] ? __pfx__printk+0x10/0x10 [ 627.928910][ T5833] ? kernfs_path_from_node+0x250/0x290 [ 627.928924][ T5833] ? kernfs_path_from_node+0x2f/0x290 [ 627.928940][ T5833] sysfs_create_dir_ns+0x259/0x280 [ 627.928956][ T5833] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 627.928970][ T5833] ? do_raw_spin_unlock+0x122/0x240 [ 627.928985][ T5833] kobject_add_internal+0x6ab/0xcc0 [ 627.929002][ T5833] kobject_add+0x155/0x220 [ 627.929017][ T5833] ? __pfx_kobject_add+0x10/0x10 [ 627.929029][ T5833] ? _raw_spin_unlock+0x28/0x50 [ 627.929041][ T5833] ? get_device_parent+0x366/0x3a0 [ 627.929056][ T5833] device_add+0x408/0xb80 [ 627.929071][ T5833] hci_conn_add_sysfs+0xd5/0x210 [ 627.929083][ T5833] le_conn_complete_evt+0xf1d/0x1420 [ 627.929102][ T5833] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 627.929115][ T5833] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 627.929127][ T5833] ? __asan_memcpy+0x40/0x70 [ 627.929142][ T5833] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 627.929152][ T5833] ? skb_pull_data+0xfb/0x200 [ 627.929168][ T5833] hci_le_conn_complete_evt+0x187/0x480 [ 627.929185][ T5833] hci_event_packet+0x78f/0x1260 [ 627.929198][ T5833] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 627.929212][ T5833] ? __pfx_hci_event_packet+0x10/0x10 [ 627.929225][ T5833] ? kcov_remote_start+0x4d3/0x7f0 [ 627.929236][ T5833] ? lockdep_hardirqs_on+0x98/0x140 [ 627.929249][ T5833] ? hci_send_to_monitor+0xe2/0x590 [ 627.929265][ T5833] hci_rx_work+0x3ee/0x1060 [ 627.929281][ T5833] ? process_one_work+0x868/0x15a0 [ 627.929297][ T5833] process_one_work+0x93a/0x15a0 [ 627.929338][ T5833] ? __pfx_process_one_work+0x10/0x10 [ 627.929364][ T5833] ? assign_work+0x3a1/0x410 [ 627.929389][ T5833] worker_thread+0x9b0/0xee0 [ 627.929434][ T5833] kthread+0x711/0x8a0 [ 627.929454][ T5833] ? __pfx_worker_thread+0x10/0x10 [ 627.929475][ T5833] ? __pfx_kthread+0x10/0x10 [ 627.929495][ T5833] ? _raw_spin_unlock_irq+0x23/0x50 [ 627.929511][ T5833] ? lockdep_hardirqs_on+0x98/0x140 [ 627.929538][ T5833] ? __pfx_kthread+0x10/0x10 [ 627.929557][ T5833] ret_from_fork+0x599/0xb30 [ 627.929583][ T5833] ? __pfx_ret_from_fork+0x10/0x10 [ 627.929617][ T5833] ? __switch_to_asm+0x39/0x70 [ 627.929635][ T5833] ? __switch_to_asm+0x33/0x70 [ 627.929652][ T5833] ? __pfx_kthread+0x10/0x10 [ 627.929672][ T5833] ret_from_fork_asm+0x1a/0x30 [ 627.929708][ T5833] [ 628.202857][ T5833] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 628.217771][ T5833] Bluetooth: hci3: failed to register connection device [ 628.699649][ T5914] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 628.849950][ T5914] usb 1-1: device descriptor read/64, error -71 [ 628.926124][T18334] usb 4-1: USB disconnect, device number 59 [ 629.127333][ T5914] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 629.266467][ T5914] usb 1-1: device descriptor read/64, error -71 [ 629.309145][T18334] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 629.385335][ T5914] usb usb1-port1: attempt power cycle [ 629.448554][T18334] usb 4-1: device descriptor read/64, error -71 [ 629.715702][T18334] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 629.747881][ T5914] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 629.769506][ T5914] usb 1-1: device descriptor read/8, error -71 [ 629.854653][T18334] usb 4-1: device descriptor read/64, error -71 [ 629.927912][T18537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.937128][T18537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.948572][T18537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.958430][T18537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.983397][T18334] usb usb4-port1: attempt power cycle [ 630.026217][ T5914] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 630.047928][ T5914] usb 1-1: device descriptor read/8, error -71 [ 630.157696][ T30] audit: type=1326 audit(2000000027.311:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18542 comm="syz.4.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20e58f749 code=0x7ffc0000 [ 630.183227][ T5914] usb usb1-port1: unable to enumerate USB device [ 630.190089][ T30] audit: type=1326 audit(2000000027.311:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18542 comm="syz.4.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20e58f749 code=0x7ffc0000 [ 630.216092][ T30] audit: type=1326 audit(2000000027.311:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18542 comm="syz.4.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb20e58f749 code=0x7ffc0000 [ 630.239830][ T30] audit: type=1326 audit(2000000027.348:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18542 comm="syz.4.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20e58f749 code=0x7ffc0000 [ 630.263873][ T30] audit: type=1326 audit(2000000027.367:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18542 comm="syz.4.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20e58f749 code=0x7ffc0000 [ 630.303832][ T30] audit: type=1326 audit(2000000027.367:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18542 comm="syz.4.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb20e58f749 code=0x7ffc0000 [ 630.330789][ T30] audit: type=1326 audit(2000000027.367:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18542 comm="syz.4.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20e58f749 code=0x7ffc0000 [ 630.356388][ T30] audit: type=1326 audit(2000000027.367:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18542 comm="syz.4.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20e58f749 code=0x7ffc0000 [ 630.380948][ T30] audit: type=1326 audit(2000000027.442:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18542 comm="syz.4.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fb20e58f749 code=0x7ffc0000 [ 630.389572][T18334] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 630.403796][ T30] audit: type=1326 audit(2000000027.442:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18542 comm="syz.4.3208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb20e52b829 code=0x7ffc0000 [ 630.443645][T18334] usb 4-1: device descriptor read/8, error -71 [ 630.568847][T18549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.578228][T18549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.700546][T18334] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 630.721621][T18334] usb 4-1: device descriptor read/8, error -71 [ 630.838877][T18334] usb usb4-port1: unable to enumerate USB device [ 631.276603][T18553] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 631.741388][T18582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.750901][T18582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.248793][T18631] netlink: 'syz.3.3223': attribute type 3 has an invalid length. [ 632.257213][T18334] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 632.261176][T18631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3223'. [ 632.423835][T18334] usb 1-1: Using ep0 maxpacket: 16 [ 632.436457][T18334] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 632.452422][T18334] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 632.464085][T18644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.475404][T18334] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 632.488388][T18644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.489666][T18334] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 632.506365][T18334] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 632.519088][T18334] usb 1-1: config 1 interface 1 has no altsetting 0 [ 632.520577][T18644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.542489][T18644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.563709][T18334] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 632.577783][T18334] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.598057][T18334] usb 1-1: Product: syz [ 632.605980][T18334] usb 1-1: Manufacturer: syz [ 632.616743][T18334] usb 1-1: SerialNumber: syz [ 632.861253][T18334] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 632.872414][T18334] usb 1-1: 2:1 : format type 9 is not supported yet [ 632.913717][T18334] usb 1-1: USB disconnect, device number 98 [ 633.240173][T18694] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3230'. [ 633.276037][T18695] netlink: 'syz.4.3230': attribute type 1 has an invalid length. [ 633.276807][T18694] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3230'. [ 633.295368][T18694] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3230'. [ 633.306490][T18694] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3230'. [ 633.342193][T18703] pim6reg: left allmulticast mode [ 633.347320][T18703] bridge0: left allmulticast mode [ 633.605657][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 633.929475][ T5873] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 634.111590][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 634.118737][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 634.130895][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.140782][ T5873] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 634.153812][ T5873] usb 4-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 634.163125][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.174894][ T5873] usb 4-1: config 0 descriptor?? [ 634.694181][ T5873] hid-alps 0003:044E:120C.0039: hidraw0: USB HID v0.00 Device [HID 044e:120c] on usb-dummy_hcd.3-1/input0 [ 634.732719][T18334] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 634.893643][T18334] usb 1-1: Using ep0 maxpacket: 8 [ 634.910640][T18334] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 634.918423][T18334] usb 1-1: can't read configurations, error -61 [ 634.949023][ T5914] usb 4-1: USB disconnect, device number 64 [ 635.063257][T18334] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 635.223680][T18334] usb 1-1: Using ep0 maxpacket: 8 [ 635.231078][T18334] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 635.238972][T18334] usb 1-1: can't read configurations, error -61 [ 635.246134][T18334] usb usb1-port1: attempt power cycle [ 635.609209][T18334] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 635.652051][T18334] usb 1-1: Using ep0 maxpacket: 8 [ 635.661854][T18334] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 635.671937][T18334] usb 1-1: can't read configurations, error -61 [ 635.811869][T18334] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 635.833951][T18334] usb 1-1: Using ep0 maxpacket: 8 [ 635.841114][T18334] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 635.849024][T18334] usb 1-1: can't read configurations, error -61 [ 635.856221][T18334] usb usb1-port1: unable to enumerate USB device [ 635.961988][ T5873] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 636.126022][ T5873] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 636.135488][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.143573][ T5873] usb 4-1: Product: syz [ 636.147758][ T5873] usb 4-1: Manufacturer: syz [ 636.152348][ T5873] usb 4-1: SerialNumber: syz [ 636.597445][ T5873] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 636.611004][ T5873] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 636.622352][ T5873] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 636.634328][ T5873] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 636.644539][ T5873] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 636.658560][ T5873] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 636.670832][ T5873] usb 4-1: USB disconnect, device number 65 [ 636.915856][T18793] netlink: 'syz.2.3250': attribute type 1 has an invalid length. [ 636.923689][T18793] netlink: 'syz.2.3250': attribute type 4 has an invalid length. [ 636.931976][T18793] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3250'. [ 636.973825][T18795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.983838][T18795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.940184][ T5873] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 638.102897][ T5873] usb 4-1: not running at top speed; connect to a high speed hub [ 638.112087][ T5873] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 638.123827][ T5873] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 638.134120][ T5873] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 104, setting to 64 [ 638.147017][ T5873] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 638.156317][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.164311][ T5873] usb 4-1: Product: 顎ৢ䴩歂綐ꉂ˕蛖짣媅㍾搂ꕉꦠ쒃漅ﲾ邥 [ 638.174284][ T5873] usb 4-1: Manufacturer: Љ [ 638.178861][ T5873] usb 4-1: SerialNumber: 阙溓擨囿毨Ｈ鞯魮稗쁗ㄾ㞑ӑ㙱凯넴ᘊ૘兤䩹㒿䷀Ԅ飵撱辰舌ꃣ䵶㕞葦稷탌ⷷᚠꤋ퓧簥숲툙뻥䠢뽬쉎␟삣䳤鎡䜈평뱱늗⤗ [ 638.209048][T18821] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 638.652082][ T5873] cdc_ncm 4-1:1.0: bind() failure [ 638.664163][ T5873] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 638.671352][ T5873] cdc_ncm 4-1:1.1: bind() failure [ 638.681552][ T5873] usb 4-1: USB disconnect, device number 66 [ 639.298643][ T5873] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 639.443149][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 639.455271][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 639.463437][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 639.471481][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 639.479080][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 639.507706][ T5873] usb 1-1: config 0 has an invalid interface number: 49 but max is 0 [ 639.529106][ T5873] usb 1-1: config 0 has no interface number 0 [ 639.546346][ T5873] usb 1-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 639.576768][ T5873] usb 1-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 639.611718][ T5873] usb 1-1: config 0 interface 49 has no altsetting 0 [ 639.635001][ T5873] usb 1-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 639.666008][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.694290][ T5873] usb 1-1: Product: syz [ 639.698484][ T5873] usb 1-1: Manufacturer: syz [ 639.703074][ T5873] usb 1-1: SerialNumber: syz [ 639.734106][ T5873] usb 1-1: config 0 descriptor?? [ 639.889663][T18877] speed is unknown, defaulting to 1000 [ 639.962237][T18894] netlink: 'syz.2.3273': attribute type 1 has an invalid length. [ 639.965071][T18872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.970348][T18894] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3273'. [ 640.006016][T18872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.049374][T18872] C: renamed from team_slave_0 (while UP) [ 640.072481][T18872] netlink: 'syz.0.3270': attribute type 4 has an invalid length. [ 640.101168][T18872] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3270'. [ 640.121469][T18872] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 640.188375][ T5873] usb 1-1: USB disconnect, device number 103 [ 640.311712][T18914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.362894][T18914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.703846][T18877] chnl_net:caif_netlink_parms(): no params data found [ 640.847251][T18877] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.858328][T18877] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.867347][T18877] bridge_slave_0: entered allmulticast mode [ 640.876593][T18877] bridge_slave_0: entered promiscuous mode [ 640.885799][T18877] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.895315][T18877] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.902731][T18877] bridge_slave_1: entered allmulticast mode [ 640.910906][T18877] bridge_slave_1: entered promiscuous mode [ 640.953315][T18877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.966071][T18877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 641.011418][T18877] team0: Port device team_slave_0 added [ 641.019987][T18877] team0: Port device team_slave_1 added [ 641.076261][T18877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.083230][T18877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.110515][T18877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.123450][T18877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.132494][T18877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.161878][T18877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.298464][ T5832] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 641.332936][T18877] hsr_slave_0: entered promiscuous mode [ 641.349228][T18877] hsr_slave_1: entered promiscuous mode [ 641.363818][T18877] debugfs: 'hsr0' already exists in 'hsr' [ 641.369577][T18877] Cannot create hsr debugfs directory [ 641.469979][ T5832] usb 1-1: Using ep0 maxpacket: 16 [ 641.480833][ T5832] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.503085][ T5832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 641.523820][ T5832] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 641.570179][T19224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.586587][ T5832] usb 1-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 641.602414][T19224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.616961][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.638211][ T5832] usb 1-1: Product: syz [ 641.646254][ T5832] usb 1-1: Manufacturer: syz [ 641.650884][ T5832] usb 1-1: SerialNumber: syz [ 641.681354][ T5832] usb 1-1: config 0 descriptor?? [ 641.728297][ T5840] Bluetooth: hci2: command tx timeout [ 641.814910][T19261] : renamed from vlan0 (while UP) [ 641.920877][T19110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.950159][T19110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.984416][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 641.984434][ T30] audit: type=1326 audit(2000000038.363:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19272 comm="syz.4.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20e58f749 code=0x7ffc0000 [ 642.002406][T18877] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.014203][ T30] audit: type=1326 audit(2000000038.372:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19272 comm="syz.4.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20e58f749 code=0x7ffc0000 [ 642.047503][ T30] audit: type=1326 audit(2000000038.409:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19272 comm="syz.4.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb20e58df90 code=0x7ffc0000 [ 642.076618][ T30] audit: type=1326 audit(2000000038.409:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19272 comm="syz.4.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20e58f749 code=0x7ffc0000 [ 642.099573][ T30] audit: type=1326 audit(2000000038.409:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19272 comm="syz.4.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20e58f749 code=0x7ffc0000 [ 642.109517][ T5832] peak_usb 1-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -8 [ 642.124059][ T30] audit: type=1326 audit(2000000038.428:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19272 comm="syz.4.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb20e591667 code=0x7ffc0000 [ 642.152602][ T5832] peak_usb 1-1:0.0: unable to read PCAN-USB serial number (err -8) [ 642.162160][ T30] audit: type=1326 audit(2000000038.437:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19272 comm="syz.4.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb20e5915dc code=0x7ffc0000 [ 642.207655][ T30] audit: type=1326 audit(2000000038.437:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19272 comm="syz.4.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb20e591514 code=0x7ffc0000 [ 642.234290][ T30] audit: type=1326 audit(2000000038.437:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19272 comm="syz.4.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb20e591514 code=0x7ffc0000 [ 642.257302][ T5832] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -8 [ 642.264646][T18877] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.271550][ T5832] usb 1-1: USB disconnect, device number 104 [ 642.293466][ T30] audit: type=1326 audit(2000000038.437:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19272 comm="syz.4.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb20e58e3aa code=0x7ffc0000 [ 642.385580][T18877] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.430482][T18877] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.480391][T19305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.494819][T19305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.517833][T19305] fuse: Bad value for 'fd' [ 642.534652][T19305] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 642.639092][T18877] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 642.650829][T18877] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 642.664276][T18877] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 642.677272][T18877] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 642.794308][T18877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.796363][T19335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3295'. [ 642.819016][T18877] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.826888][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.827044][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.854563][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.861884][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.146937][T19354] overlayfs: failed to clone upperpath [ 643.229458][T18877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.236742][T19356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.237147][T19356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.347281][T18877] veth0_vlan: entered promiscuous mode [ 643.371975][T18877] veth1_vlan: entered promiscuous mode [ 643.386951][T19365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.403081][T19365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.429388][T18877] veth0_macvtap: entered promiscuous mode [ 643.444223][T18877] veth1_macvtap: entered promiscuous mode [ 643.479177][T18877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.504272][T18877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.518113][T19372] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 643.524652][T19372] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 643.529395][ T66] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.533235][T19372] vhci_hcd vhci_hcd.0: Device attached [ 643.548965][T19372] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(7) [ 643.555490][T19372] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 643.559035][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.563474][T19372] vhci_hcd vhci_hcd.0: Device attached [ 643.579539][T19372] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(40) [ 643.586144][T19372] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 643.594102][T19372] vhci_hcd vhci_hcd.0: Device attached [ 643.602205][T19372] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(42) [ 643.604083][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.608805][T19372] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 643.609920][T19372] vhci_hcd vhci_hcd.0: Device attached [ 643.636730][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.647009][T19372] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(44) [ 643.653713][T19372] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 643.669830][T19372] vhci_hcd vhci_hcd.0: Device attached [ 643.686980][T19372] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(46) [ 643.693590][T19372] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 643.697854][T19372] vhci_hcd vhci_hcd.0: Device attached [ 643.728506][T19372] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(48) [ 643.735142][T19372] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 643.748979][T19372] vhci_hcd vhci_hcd.0: Device attached [ 643.754803][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.767331][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.786149][T19372] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(50) [ 643.792851][T19372] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 643.805175][T19372] vhci_hcd vhci_hcd.0: Device attached [ 643.814050][T19372] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(52) [ 643.820663][T19372] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 643.822738][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.829192][ T5832] usb 34-1: SetAddress Request (2) to port 0 [ 643.836829][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.850214][ T5832] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 643.862418][T19372] vhci_hcd vhci_hcd.0: Device attached [ 643.920681][T19374] vhci_hcd: connection reset by peer [ 643.932058][ T152] vhci_hcd vhci_hcd.0: stop threads [ 643.937702][ T152] vhci_hcd vhci_hcd.0: release socket [ 643.948321][ T152] vhci_hcd vhci_hcd.0: disconnect device [ 643.961982][ T5840] Bluetooth: hci2: command tx timeout [ 644.143447][T12740] usb 36-1: SetAddress Request (2) to port 0 [ 644.149520][T12740] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 644.235159][ T5880] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 644.400435][ T5880] usb 4-1: Using ep0 maxpacket: 32 [ 644.408649][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.436929][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 644.448184][ T5880] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 644.458828][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.476951][ T5880] usb 4-1: config 0 descriptor?? [ 644.516186][T19400] vhci_hcd: connection reset by peer [ 644.521854][T19395] vhci_hcd: connection closed [ 644.522124][ T152] vhci_hcd vhci_hcd.0: stop threads [ 644.536714][T19382] vhci_hcd: connection closed [ 644.537536][T19380] vhci_hcd: connection closed [ 644.543574][ T152] vhci_hcd vhci_hcd.0: release socket [ 644.550793][T19378] vhci_hcd: connection closed [ 644.553709][T19376] vhci_hcd: connection closed [ 644.558766][T19384] vhci_hcd: connection closed [ 644.567306][ T152] vhci_hcd vhci_hcd.0: disconnect device [ 644.568107][T19390] vhci_hcd: connection closed [ 644.595712][ T152] vhci_hcd vhci_hcd.0: stop threads [ 644.646089][ T152] vhci_hcd vhci_hcd.0: release socket [ 644.653576][ T152] vhci_hcd vhci_hcd.0: disconnect device [ 644.670231][ T152] vhci_hcd vhci_hcd.1: stop threads [ 644.682400][ T152] vhci_hcd vhci_hcd.1: release socket [ 644.688102][ T152] vhci_hcd vhci_hcd.1: disconnect device [ 644.694637][ T152] vhci_hcd vhci_hcd.0: stop threads [ 644.708914][ T152] vhci_hcd vhci_hcd.0: release socket [ 644.718355][ T152] vhci_hcd vhci_hcd.0: disconnect device [ 644.728711][ T152] vhci_hcd vhci_hcd.0: stop threads [ 644.751365][ T152] vhci_hcd vhci_hcd.0: release socket [ 644.770958][ T152] vhci_hcd vhci_hcd.0: disconnect device [ 644.784533][ T152] vhci_hcd vhci_hcd.0: stop threads [ 644.796791][ T152] vhci_hcd vhci_hcd.0: release socket [ 644.811415][ T152] vhci_hcd vhci_hcd.0: disconnect device [ 644.830967][ T152] vhci_hcd vhci_hcd.0: stop threads [ 644.851536][ T152] vhci_hcd vhci_hcd.0: release socket [ 644.872401][ T152] vhci_hcd vhci_hcd.0: disconnect device [ 644.898602][ T152] vhci_hcd vhci_hcd.0: stop threads [ 644.917655][ T152] vhci_hcd vhci_hcd.0: release socket [ 644.937503][ T152] vhci_hcd vhci_hcd.0: disconnect device [ 644.954167][ T5880] savu 0003:1E7D:2D5A.003A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 645.140799][ T5887] usb 4-1: USB disconnect, device number 67 [ 645.278147][T19474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.299463][T19474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.319198][T19474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.339609][T19474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.750886][T19460] fuse: Unknown parameter 'E_QCѽiΧE' [ 645.923902][T19507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.941681][T19507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.957545][T19507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.967276][T19507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.993642][ T5880] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 646.154482][ T5880] usb 1-1: Using ep0 maxpacket: 16 [ 646.161192][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.172690][ T5880] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 646.186474][ T5840] Bluetooth: hci2: command tx timeout [ 646.196912][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.207773][ T5880] usb 1-1: config 0 descriptor?? [ 646.648729][ T5840] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 646.669796][ T5880] mcp2221 0003:04D8:00DD.003B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 646.681588][ T5840] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 647.083014][ T10] usb 1-1: USB disconnect, device number 105 [ 647.580549][T19582] Bluetooth: MGMT ver 1.23 [ 647.651832][ T10] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 647.660052][T19587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.660456][T19587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.696652][T19587] syzkaller1: entered promiscuous mode [ 647.702634][T19587] syzkaller1: entered allmulticast mode [ 647.714912][T19587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.732047][T19587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.845804][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 647.856787][ T10] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.877753][ T5887] IPVS: starting estimator thread 0... [ 647.894220][ T10] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 647.915127][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 647.922586][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 647.935249][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.951742][ T10] usb 4-1: config 0 descriptor?? [ 647.983032][T19609] IPVS: using max 35 ests per chain, 84000 per kthread [ 648.304199][ T5887] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 648.395326][ T10] hid_parser_main: 1 callbacks suppressed [ 648.395346][ T10] lg-g15 0003:046D:0A07.003C: unknown main item tag 0x2 [ 648.409388][ T5840] Bluetooth: hci2: command tx timeout [ 648.420539][ T10] lg-g15 0003:046D:0A07.003C: hidraw0: USB HID v0.00 Device [HID 046d:0a07] on usb-dummy_hcd.3-1/input0 [ 648.456349][T19627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.468914][T19627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.487604][ T5887] usb 1-1: config 0 interface 0 has no altsetting 0 [ 648.494304][ T5887] usb 1-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 648.514812][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.525954][ T5887] usb 1-1: config 0 descriptor?? [ 648.967120][ T5887] elecom 0003:056E:00FD.003D: unknown main item tag 0x0 [ 648.974645][ T5887] elecom 0003:056E:00FD.003D: item fetching failed at offset 3/5 [ 648.983996][ T5887] elecom 0003:056E:00FD.003D: probe with driver elecom failed with error -22 [ 649.149605][T19649] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3346'. [ 649.185787][ T5880] usb 1-1: USB disconnect, device number 106 [ 649.342393][ T5832] usb 34-1: device descriptor read/8, error -110 [ 649.598355][T12740] usb 36-1: device descriptor read/8, error -110 [ 649.757278][T19666] netlink: 'syz.0.3350': attribute type 5 has an invalid length. [ 649.770327][ T5832] usb usb34-port1: attempt power cycle [ 650.036806][T12740] usb usb36-port1: attempt power cycle [ 650.116016][T19684] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3354'. [ 650.239657][ T5887] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 650.370536][ T5832] usb usb34-port1: unable to enumerate USB device [ 650.400039][ T5887] usb 1-1: Using ep0 maxpacket: 16 [ 650.411568][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 650.428903][ T5887] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 650.439031][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.447991][ T5887] usb 1-1: Product: syz [ 650.452165][ T5887] usb 1-1: Manufacturer: syz [ 650.457265][ T5887] usb 1-1: SerialNumber: syz [ 650.465188][ T5887] usb 1-1: config 0 descriptor?? [ 650.481896][ T5887] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 650.491470][ T5887] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 650.610079][ T5880] usb 4-1: USB disconnect, device number 68 [ 650.649822][T12740] usb usb36-port1: unable to enumerate USB device [ 650.775307][ T5887] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 650.793346][T19728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3360'. [ 650.793346][T19729] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3360'. [ 650.856311][ T5887] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 650.864729][ T5887] em28xx 1-1:0.0: board has no eeprom [ 650.946327][ T5887] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 650.954315][ T5887] em28xx 1-1:0.0: dvb set to bulk mode. [ 650.965241][ T5873] em28xx 1-1:0.0: Binding DVB extension [ 650.971043][ T5840] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 650.981178][ T5840] Bluetooth: hci0: Injecting HCI hardware error event [ 650.989798][T19746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3364'. [ 650.991299][ T5840] Bluetooth: hci0: hardware error 0x00 [ 651.016495][ T5887] usb 1-1: USB disconnect, device number 107 [ 651.026635][ T5887] em28xx 1-1:0.0: Disconnecting em28xx [ 651.068290][ T5873] em28xx 1-1:0.0: Registering input extension [ 651.075042][ T5887] em28xx 1-1:0.0: Closing input extension [ 651.092877][ T5887] em28xx 1-1:0.0: Freeing device [ 651.405470][ T5887] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 651.566776][ T5887] usb 1-1: too many configurations: 31, using maximum allowed: 8 [ 651.575943][ T5887] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 651.584198][ T5887] usb 1-1: can't read configurations, error -22 [ 651.737683][ T5887] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 651.777992][T19769] overlayfs: failed to clone upperpath [ 651.909167][ T5887] usb 1-1: too many configurations: 31, using maximum allowed: 8 [ 651.953557][ T5887] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 651.961758][ T5887] usb 1-1: can't read configurations, error -22 [ 651.968464][ T5887] usb usb1-port1: attempt power cycle [ 651.987870][T19784] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3372'. [ 652.341199][ T5887] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 652.369028][ T5887] usb 1-1: too many configurations: 31, using maximum allowed: 8 [ 652.378117][ T5887] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 652.386156][ T5887] usb 1-1: can't read configurations, error -22 [ 652.539270][ T5887] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 652.572492][ T5887] usb 1-1: too many configurations: 31, using maximum allowed: 8 [ 652.583043][ T5887] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 652.591172][ T5887] usb 1-1: can't read configurations, error -22 [ 652.598265][ T5887] usb usb1-port1: unable to enumerate USB device [ 653.191791][ T5840] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 653.365144][T19794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.376639][T19792] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3383'. [ 653.396677][T19794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.495234][T19809] netlink: 'syz.4.3379': attribute type 5 has an invalid length. [ 653.801136][ T5832] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 653.961759][ T5832] usb 4-1: Using ep0 maxpacket: 16 [ 653.968872][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.980055][ T5832] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 653.989222][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.000258][ T5832] usb 4-1: config 0 descriptor?? [ 654.217765][T19838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3385'. [ 654.237771][T19814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.252521][T19814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.270116][T19838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.280605][T19838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.481503][ T5832] hid-steam 0003:28DE:1102.003E: unknown main item tag 0x0 [ 654.489326][ T5832] hid-steam 0003:28DE:1102.003E: unknown main item tag 0x0 [ 654.497920][ T5832] hid-steam 0003:28DE:1102.003E: unknown main item tag 0x0 [ 654.505157][ T5832] hid-steam 0003:28DE:1102.003E: unknown main item tag 0x0 [ 654.512692][ T5832] hid-steam 0003:28DE:1102.003E: unknown main item tag 0x0 [ 654.522098][ T5832] hid-steam 0003:28DE:1102.003E: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 654.539322][T18334] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 654.696607][ T5887] usb 4-1: USB disconnect, device number 69 [ 654.721412][T18334] usb 1-1: Using ep0 maxpacket: 8 [ 654.733331][T18334] usb 1-1: config 0 has an invalid interface number: 193 but max is 1 [ 654.741719][T18334] usb 1-1: config 0 has an invalid interface number: 4 but max is 1 [ 654.750466][T18334] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 654.762731][T18334] usb 1-1: config 0 has no interface number 0 [ 654.769118][T18334] usb 1-1: config 0 has no interface number 1 [ 654.775316][T18334] usb 1-1: config 0 interface 193 altsetting 147 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 654.789036][T18334] usb 1-1: config 0 interface 4 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 654.799211][T18334] usb 1-1: config 0 interface 4 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 654.813053][T18334] usb 1-1: config 0 interface 193 has no altsetting 0 [ 654.822008][T18334] usb 1-1: config 0 interface 4 has no altsetting 0 [ 654.831512][T18334] usb 1-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=7d.6a [ 654.840672][T18334] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.848831][T18334] usb 1-1: Product: syz [ 654.853773][T18334] usb 1-1: Manufacturer: syz [ 654.858529][T18334] usb 1-1: SerialNumber: syz [ 654.865345][T18334] usb 1-1: config 0 descriptor?? [ 654.999551][T19864] tmpfs: Bad value for 'mpol' [ 655.013967][T19864] 9p: Bad value for 'rfdno' [ 655.108846][T18334] usb 1-1: unknown interface protocol 0x4f, assuming v1 [ 655.124673][T18334] usb 1-1: 193:2 : does not exist [ 655.132057][T19874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.135345][T18334] usb 1-1: unknown interface protocol 0x5, assuming v1 [ 655.145994][T19874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.151904][T18334] usb 1-1: 4:2 : does not exist [ 655.163883][T19874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.175010][T19874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.195482][T19874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.202806][T18334] usb 1-1: USB disconnect, device number 112 [ 655.209545][T19874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.275801][ T8636] udevd[8636]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.193/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 655.553342][T19901] netlink: 'syz.3.3389': attribute type 5 has an invalid length. [ 655.923665][T19920] netlink: 'syz.3.3394': attribute type 23 has an invalid length. [ 656.017723][T18334] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 656.048383][T19927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.068575][T19927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.083136][T19927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.097942][T19927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.165299][T19927] ceph: No mds server is up or the cluster is laggy [ 656.198480][T18334] usb 1-1: Using ep0 maxpacket: 32 [ 656.206571][T18334] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.226910][T18334] usb 1-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 656.247999][T18334] usb 1-1: config 0 interface 0 has no altsetting 0 [ 656.262661][T18334] usb 1-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 656.285844][T18334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.298795][T18334] usb 1-1: config 0 descriptor?? [ 656.421452][ T5880] usb 4-1: new low-speed USB device number 70 using dummy_hcd [ 656.571612][ T5880] usb 4-1: device descriptor read/64, error -71 [ 656.752731][T18334] lg-g15 0003:046D:0A07.003F: unknown main item tag 0x2 [ 656.770589][T18334] lg-g15 0003:046D:0A07.003F: hidraw0: USB HID v0.00 Device [HID 046d:0a07] on usb-dummy_hcd.0-1/input0 [ 656.829960][ T5880] usb 4-1: new low-speed USB device number 71 using dummy_hcd [ 656.960266][T19954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.990101][ T5880] usb 4-1: device descriptor read/64, error -71 [ 657.010889][T19954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.034124][T19959] 9p: Bad value for 'rfdno' [ 657.121151][ T5880] usb usb4-port1: attempt power cycle [ 657.490964][ T5880] usb 4-1: new low-speed USB device number 72 using dummy_hcd [ 657.512899][ T5880] usb 4-1: device descriptor read/8, error -71 [ 657.615992][T19976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.626310][T19976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.769123][ T5880] usb 4-1: new low-speed USB device number 73 using dummy_hcd [ 657.802290][ T5880] usb 4-1: device descriptor read/8, error -71 [ 657.919673][ T5880] usb usb4-port1: unable to enumerate USB device [ 657.925803][T19998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.936717][T19998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.533158][T20005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.545235][T20005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.990422][ T10] usb 1-1: USB disconnect, device number 113 [ 659.190523][T20037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3416'. [ 659.258686][T20040] openvswitch: netlink: Key type 31 is not supported [ 659.263357][T20041] fuse: blksize only supported for fuseblk [ 659.546776][T20076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.566597][T20076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.581411][T20076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.594249][T20076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.612466][T20076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.623853][T20076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.639367][T20076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.656028][T20076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.667706][T20076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.679299][T20076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.689293][T20090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.700502][T20090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.812281][ T10] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 659.886835][T18334] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 659.972218][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 659.979075][ T10] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.993776][ T10] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 660.024086][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 660.031317][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 660.041208][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.049735][T18334] usb 1-1: Using ep0 maxpacket: 8 [ 660.059876][T18334] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 660.069312][T18334] usb 1-1: config 0 has no interface number 0 [ 660.077129][ T10] usb 4-1: config 0 descriptor?? [ 660.082203][T18334] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 660.093193][T18334] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 660.105497][T18334] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 660.117695][T18334] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 660.136453][T18334] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 660.147623][T18334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.211408][T18334] usb 1-1: config 0 descriptor?? [ 660.229949][T18334] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 660.431547][T20123] sp0: Synchronizing with TNC [ 660.439890][T18334] usb 1-1: USB disconnect, device number 114 [ 660.463312][T18334] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 660.576013][ T10] lg-g15 0003:046D:0A07.0040: unknown main item tag 0x2 [ 660.616479][ T10] lg-g15 0003:046D:0A07.0040: hidraw0: USB HID v0.00 Device [HID 046d:0a07] on usb-dummy_hcd.3-1/input0 [ 660.665403][T20153] efs: device does not support 512 byte blocks [ 660.679784][T20153] device does not support 512 byte blocks [ 660.679784][T20153] [ 660.976977][T20172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.999530][T20172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.228501][T20190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3439'. [ 661.322877][T20199] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3440'. [ 661.501693][T12740] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 661.666285][T12740] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 661.677417][T12740] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.686230][T12740] usb 1-1: Product: syz [ 661.690475][T12740] usb 1-1: Manufacturer: syz [ 661.695105][T12740] usb 1-1: SerialNumber: syz [ 661.923749][T12740] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 661.938954][T12740] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 661.949598][T12740] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 661.959850][T12740] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 661.992125][T12740] usb 1-1: USB disconnect, device number 115 [ 662.024028][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 662.024046][ T30] audit: type=1800 audit(2000000057.100:113): pid=20220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3441" name="bus" dev="tmpfs" ino=2169 res=0 errno=0 [ 662.673089][ T10] usb 4-1: USB disconnect, device number 74 [ 662.762256][T20247] netlink: 'syz.3.3447': attribute type 4 has an invalid length. [ 662.973300][T20249] orangefs_devreq_write_iter: failed to copy head. [ 663.150456][T20259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.164280][T20262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.166583][T20259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.175650][T20262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.330837][T12740] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 663.346460][T20269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3452'. [ 663.480281][T12740] usb 1-1: device descriptor read/64, error -71 [ 663.738991][T12740] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 663.888111][T12740] usb 1-1: device descriptor read/64, error -71 [ 663.983062][ T5880] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 664.005873][T12740] usb usb1-port1: attempt power cycle [ 664.154339][ T5880] usb 4-1: Using ep0 maxpacket: 32 [ 664.161395][ T5880] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.171379][T20314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.174915][ T5880] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 664.194199][ T5880] usb 4-1: config 0 interface 0 has no altsetting 0 [ 664.196382][T20314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.203558][ T5880] usb 4-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 664.218010][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.242408][ T5880] usb 4-1: config 0 descriptor?? [ 664.378760][T12740] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 664.400820][T12740] usb 1-1: device descriptor read/8, error -71 [ 664.656769][T12740] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 664.679052][T12740] usb 1-1: device descriptor read/8, error -71 [ 664.695547][ T5880] lg-g15 0003:046D:0A07.0041: unknown main item tag 0x2 [ 664.710581][ T5880] lg-g15 0003:046D:0A07.0041: hidraw0: USB HID v0.00 Device [HID 046d:0a07] on usb-dummy_hcd.3-1/input0 [ 664.717820][T20324] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3463'. [ 664.809256][T12740] usb usb1-port1: unable to enumerate USB device [ 664.985247][T20339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.995472][T20339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.617252][T20346] netlink: 'syz.2.3469': attribute type 28 has an invalid length. [ 665.627758][T20346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.637628][T20346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.650011][T20346] QAT: Stopping all acceleration devices. [ 665.659249][T20346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3469'. [ 665.669674][T20346] ------------[ cut here ]------------ [ 665.675829][T20346] intf 08:02:11:00:00:00 [link=0]: bad STA 08:02:11:00:00:01 bandwidth 20 MHz (0) > channel config 10 MHz (7) [ 665.687633][T20346] WARNING: drivers/net/wireless/virtual/mac80211_hwsim.c:2696 at 0x0, CPU#0: syz.2.3469/20346 [ 665.698375][T20346] Modules linked in: [ 665.702574][T20346] CPU: 0 UID: 0 PID: 20346 Comm: syz.2.3469 Tainted: G L syzkaller #0 PREEMPT(full) [ 665.713601][T20346] Tainted: [L]=SOFTLOCKUP [ 665.717981][T20346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 665.728129][T20346] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f4/0x860 [ 665.735082][T20346] Code: 85 d2 00 00 00 45 8b 36 44 89 f7 e8 a6 20 00 00 48 8b 7c 24 28 48 8b 74 24 30 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 <67> 48 0f b9 3a 48 83 c4 10 e9 08 ff ff ff e8 a9 5e e8 fa 90 0f 0b [ 665.755198][T20346] RSP: 0018:ffffc90003846df8 EFLAGS: 00010287 [ 665.761324][T20346] RAX: 000000000000000a RBX: 0000000000000014 RCX: ffff888032e30ec0 [ 665.769528][T20346] RDX: 0000000000000000 RSI: ffff8880483b7012 RDI: ffffffff8fd02740 [ 665.777777][T20346] RBP: 0000000000000000 R08: 0000000000000014 R09: 0000000000000000 [ 665.786253][T20346] R10: 000000000000000d R11: 0000000000000002 R12: 0000000000000000 [ 665.794293][T20346] R13: dffffc0000000000 R14: 0000000000000007 R15: 0000000000000000 [ 665.802371][T20346] FS: 00007f8b204456c0(0000) GS:ffff8881259f0000(0000) knlGS:0000000000000000 [ 665.811317][T20346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 665.818004][T20346] CR2: 00007f8b20443fe0 CR3: 00000000af1d2000 CR4: 00000000003526f0 [ 665.826045][T20346] Call Trace: [ 665.829336][T20346] [ 665.832269][T20346] ? mac80211_hwsim_sta_rc_update+0x73/0x860 [ 665.838351][T20346] mac80211_hwsim_sta_add+0xa4/0x350 [ 665.843892][T20346] drv_sta_state+0x86a/0x1770 [ 665.848740][T20346] sta_info_insert_rcu+0x1a30/0x2840 [ 665.854056][T20346] ? sta_info_insert_rcu+0x349/0x2840 [ 665.859533][T20346] ? __pfx_sta_info_insert_rcu+0x10/0x10 [ 665.865226][T20346] ? rate_control_rate_init_all_links+0x186/0x1a0 [ 665.871714][T20346] ? ieee80211_add_station+0x4f1/0x6a0 [ 665.877235][T20346] sta_info_insert+0x16/0xc0 [ 665.882134][T20346] rdev_add_station+0xfc/0x270 [ 665.887401][T20346] nl80211_new_station+0x1755/0x1b70 [ 665.892711][T20346] ? __pfx_nl80211_new_station+0x10/0x10 [ 665.898423][T20346] ? netlink_rcv_skb+0x208/0x470 [ 665.903382][T20346] ? nl80211_pre_doit+0x4d5/0x8e0 [ 665.908527][T20346] genl_family_rcv_msg_doit+0x215/0x300 [ 665.914089][T20346] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 665.920215][T20346] ? bpf_lsm_capable+0x9/0x20 [ 665.924921][T20346] ? security_capable+0x7e/0x2e0 [ 665.929956][T20346] genl_rcv_msg+0x60e/0x790 [ 665.934493][T20346] ? __pfx_genl_rcv_msg+0x10/0x10 [ 665.939516][T20346] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 665.945087][T20346] ? __pfx_nl80211_new_station+0x10/0x10 [ 665.951025][T20346] ? __pfx_nl80211_post_doit+0x10/0x10 [ 665.956801][T20346] netlink_rcv_skb+0x208/0x470 [ 665.961697][T20346] ? __pfx_genl_rcv_msg+0x10/0x10 [ 665.966742][T20346] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 665.972081][T20346] ? down_read+0x274/0x2e0 [ 665.976598][T20346] ? genl_rcv+0xd/0x40 [ 665.980673][T20346] genl_rcv+0x28/0x40 [ 665.984746][T20346] netlink_unicast+0x82f/0x9e0 [ 665.990018][T20346] ? __pfx_netlink_unicast+0x10/0x10 [ 665.995907][T20346] ? netlink_sendmsg+0x642/0xb30 [ 666.000866][T20346] ? skb_put+0x11b/0x210 [ 666.005182][T20346] netlink_sendmsg+0x805/0xb30 [ 666.009958][T20346] ? aa_sk_perm+0x15f/0x920 [ 666.014474][T20346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 666.019826][T20346] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 666.026614][T20346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 666.032039][T20346] sock_sendmsg_nosec+0x18f/0x1d0 [ 666.037142][T20346] ____sys_sendmsg+0x577/0x880 [ 666.041926][T20346] ? __pfx_____sys_sendmsg+0x10/0x10 [ 666.047323][T20346] ? import_iovec+0x74/0xa0 [ 666.051834][T20346] ___sys_sendmsg+0x21f/0x2a0 [ 666.056512][T20346] ? __pfx____sys_sendmsg+0x10/0x10 [ 666.062019][T20346] ? futex_wait+0x285/0x360 [ 666.066748][T20346] ? __fget_files+0x2a/0x420 [ 666.071389][T20346] ? __fget_files+0x3a0/0x420 [ 666.076080][T20346] __x64_sys_sendmsg+0x19b/0x260 [ 666.081094][T20346] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 666.086598][T20346] ? do_syscall_64+0xbe/0xf80 [ 666.091373][T20346] do_syscall_64+0xfa/0xf80 [ 666.095887][T20346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.102845][T20346] ? clear_bhb_loop+0x60/0xb0 [ 666.107547][T20346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.113563][T20346] RIP: 0033:0x7f8b1f58f749 [ 666.118071][T20346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 666.137962][T20346] RSP: 002b:00007f8b20445038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 666.146456][T20346] RAX: ffffffffffffffda RBX: 00007f8b1f7e5fa0 RCX: 00007f8b1f58f749 [ 666.154551][T20346] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 000000000000000e [ 666.162534][T20346] RBP: 00007f8b1f613f91 R08: 0000000000000000 R09: 0000000000000000 [ 666.170808][T20346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 666.179161][T20346] R13: 00007f8b1f7e6038 R14: 00007f8b1f7e5fa0 R15: 00007ffd8fcca388 [ 666.187195][T20346] [ 666.190226][T20346] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 666.197491][T20346] CPU: 0 UID: 0 PID: 20346 Comm: syz.2.3469 Tainted: G L syzkaller #0 PREEMPT(full) [ 666.208409][T20346] Tainted: [L]=SOFTLOCKUP [ 666.212721][T20346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 666.222772][T20346] Call Trace: [ 666.226061][T20346] [ 666.228982][T20346] dump_stack_lvl+0x99/0x250 [ 666.233563][T20346] ? __asan_memcpy+0x40/0x70 [ 666.238160][T20346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 666.243348][T20346] ? __pfx__printk+0x10/0x10 [ 666.247941][T20346] vpanic+0x237/0x6d0 [ 666.251920][T20346] ? __pfx_vpanic+0x10/0x10 [ 666.256414][T20346] ? is_bpf_text_address+0x292/0x2b0 [ 666.261696][T20346] ? is_bpf_text_address+0x26/0x2b0 [ 666.266897][T20346] panic+0xb9/0xc0 [ 666.270611][T20346] ? __pfx_panic+0x10/0x10 [ 666.275032][T20346] __warn+0x317/0x4b0 [ 666.279016][T20346] __report_bug+0x288/0x500 [ 666.283518][T20346] ? __pfx___report_bug+0x10/0x10 [ 666.288546][T20346] ? __lock_acquire+0x6b6/0x2cf0 [ 666.293484][T20346] report_bug_entry+0x16a/0x220 [ 666.298320][T20346] ? mac80211_hwsim_sta_rc_update+0x6f4/0x860 [ 666.304380][T20346] ? mac80211_hwsim_sta_rc_update+0x6f9/0x860 [ 666.310470][T20346] handle_bug+0xca/0x200 [ 666.314707][T20346] exc_invalid_op+0x1a/0x50 [ 666.319202][T20346] asm_exc_invalid_op+0x1a/0x20 [ 666.324036][T20346] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f4/0x860 [ 666.330716][T20346] Code: 85 d2 00 00 00 45 8b 36 44 89 f7 e8 a6 20 00 00 48 8b 7c 24 28 48 8b 74 24 30 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 <67> 48 0f b9 3a 48 83 c4 10 e9 08 ff ff ff e8 a9 5e e8 fa 90 0f 0b [ 666.350314][T20346] RSP: 0018:ffffc90003846df8 EFLAGS: 00010287 [ 666.356374][T20346] RAX: 000000000000000a RBX: 0000000000000014 RCX: ffff888032e30ec0 [ 666.364328][T20346] RDX: 0000000000000000 RSI: ffff8880483b7012 RDI: ffffffff8fd02740 [ 666.372294][T20346] RBP: 0000000000000000 R08: 0000000000000014 R09: 0000000000000000 [ 666.380253][T20346] R10: 000000000000000d R11: 0000000000000002 R12: 0000000000000000 [ 666.388210][T20346] R13: dffffc0000000000 R14: 0000000000000007 R15: 0000000000000000 [ 666.396185][T20346] ? hwsim_get_chanwidth+0x15b/0x1a0 [ 666.401472][T20346] ? mac80211_hwsim_sta_rc_update+0x73/0x860 [ 666.407446][T20346] mac80211_hwsim_sta_add+0xa4/0x350 [ 666.412736][T20346] drv_sta_state+0x86a/0x1770 [ 666.417414][T20346] sta_info_insert_rcu+0x1a30/0x2840 [ 666.422703][T20346] ? sta_info_insert_rcu+0x349/0x2840 [ 666.428084][T20346] ? __pfx_sta_info_insert_rcu+0x10/0x10 [ 666.434060][T20346] ? rate_control_rate_init_all_links+0x186/0x1a0 [ 666.440469][T20346] ? ieee80211_add_station+0x4f1/0x6a0 [ 666.445924][T20346] sta_info_insert+0x16/0xc0 [ 666.450506][T20346] rdev_add_station+0xfc/0x270 [ 666.455264][T20346] nl80211_new_station+0x1755/0x1b70 [ 666.460555][T20346] ? __pfx_nl80211_new_station+0x10/0x10 [ 666.466182][T20346] ? netlink_rcv_skb+0x208/0x470 [ 666.471145][T20346] ? nl80211_pre_doit+0x4d5/0x8e0 [ 666.476204][T20346] genl_family_rcv_msg_doit+0x215/0x300 [ 666.481746][T20346] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 666.487809][T20346] ? bpf_lsm_capable+0x9/0x20 [ 666.492471][T20346] ? security_capable+0x7e/0x2e0 [ 666.497404][T20346] genl_rcv_msg+0x60e/0x790 [ 666.501905][T20346] ? __pfx_genl_rcv_msg+0x10/0x10 [ 666.506916][T20346] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 666.512275][T20346] ? __pfx_nl80211_new_station+0x10/0x10 [ 666.517896][T20346] ? __pfx_nl80211_post_doit+0x10/0x10 [ 666.523370][T20346] netlink_rcv_skb+0x208/0x470 [ 666.528129][T20346] ? __pfx_genl_rcv_msg+0x10/0x10 [ 666.533140][T20346] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 666.538428][T20346] ? down_read+0x274/0x2e0 [ 666.542838][T20346] ? genl_rcv+0xd/0x40 [ 666.546895][T20346] genl_rcv+0x28/0x40 [ 666.550913][T20346] netlink_unicast+0x82f/0x9e0 [ 666.555672][T20346] ? __pfx_netlink_unicast+0x10/0x10 [ 666.560951][T20346] ? netlink_sendmsg+0x642/0xb30 [ 666.565881][T20346] ? skb_put+0x11b/0x210 [ 666.570111][T20346] netlink_sendmsg+0x805/0xb30 [ 666.574864][T20346] ? aa_sk_perm+0x15f/0x920 [ 666.579364][T20346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 666.584639][T20346] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 666.591062][T20346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 666.596337][T20346] sock_sendmsg_nosec+0x18f/0x1d0 [ 666.601357][T20346] ____sys_sendmsg+0x577/0x880 [ 666.606123][T20346] ? __pfx_____sys_sendmsg+0x10/0x10 [ 666.611404][T20346] ? import_iovec+0x74/0xa0 [ 666.615898][T20346] ___sys_sendmsg+0x21f/0x2a0 [ 666.620569][T20346] ? __pfx____sys_sendmsg+0x10/0x10 [ 666.625766][T20346] ? futex_wait+0x285/0x360 [ 666.630279][T20346] ? __fget_files+0x2a/0x420 [ 666.634854][T20346] ? __fget_files+0x3a0/0x420 [ 666.639524][T20346] __x64_sys_sendmsg+0x19b/0x260 [ 666.644452][T20346] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 666.649911][T20346] ? do_syscall_64+0xbe/0xf80 [ 666.654584][T20346] do_syscall_64+0xfa/0xf80 [ 666.659076][T20346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.665131][T20346] ? clear_bhb_loop+0x60/0xb0 [ 666.669795][T20346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.675671][T20346] RIP: 0033:0x7f8b1f58f749 [ 666.680080][T20346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 666.699674][T20346] RSP: 002b:00007f8b20445038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 666.708080][T20346] RAX: ffffffffffffffda RBX: 00007f8b1f7e5fa0 RCX: 00007f8b1f58f749 [ 666.716039][T20346] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 000000000000000e [ 666.724087][T20346] RBP: 00007f8b1f613f91 R08: 0000000000000000 R09: 0000000000000000 [ 666.732055][T20346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 666.740020][T20346] R13: 00007f8b1f7e6038 R14: 00007f8b1f7e5fa0 R15: 00007ffd8fcca388 [ 666.747995][T20346] [ 666.751376][T20346] Kernel Offset: disabled [ 666.755683][T20346] Rebooting in 86400 seconds..