last executing test programs: 16.776667822s ago: executing program 1 (id=3383): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0185648, &(0x7f0000000180)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f048, 0x0, '\x00', @string=0x0}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1) sendto$inet6(r2, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000007c0)="87", 0x1, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000240)="1a", 0x1, 0x0, 0x0, 0x0) shutdown(r2, 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x3, 0x0, 0x9}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x5420, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) r7 = signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x400, 0x6]}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x14, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0x5}]}, &(0x7f0000000400)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000440)=""/145, 0x41100, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x9, 0xffff, 0xb}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000580)=[0xffffffffffffffff, 0x1, r0], &(0x7f00000005c0)=[{0x0, 0x1, 0x9, 0x6}, {0x4, 0x3, 0xc, 0x9}, {0x0, 0x2, 0xb, 0x1}, {0x3, 0x3, 0x8, 0x2}, {0x2, 0x3, 0xe, 0x2}], 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={0x1, 0xffffffffffffffff}, 0x4) pipe(&(0x7f0000000740)={0xffffffffffffffff}) fremovexattr(r10, &(0x7f00000008c0)=@known='trusted.syz\x00') r11 = openat$dlm_plock(0xffffff9c, &(0x7f0000000780), 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x8, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000008100000000000000070000001b92ffff100000009500000000000000184d0000fdffffff000000000000000018440000030000000000000000000000181b0000", @ANYRES32, @ANYBLOB="000000000000000018130000", @ANYRES32=r4, @ANYBLOB="000000000000000018130000", @ANYRES32=r5, @ANYBLOB='\x00'/16], &(0x7f0000000240)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', r6, @fallback=0xd, r7, 0x8, &(0x7f0000000340)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0xb, 0x9, 0x100}, 0x10, 0xffffffffffffffff, r8, 0x0, &(0x7f00000007c0)=[r9, 0xffffffffffffffff, r10, r11], 0x0, 0x10, 0x10000, @void, @value}, 0x94) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0xfeab, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 14.488419115s ago: executing program 3 (id=3395): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x2, 0x30, 0x3, 0x2}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)={r1, 0xa}, &(0x7f0000000180)=0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x24, 0x2, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_MARK={0x8}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000431d1c40c9309300c6180102030309021200010000000009040000000e0101805e"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 12.760019812s ago: executing program 3 (id=3399): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) r1 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x80fe, 0x0}}], 0x1, 0x4001c00) 12.492131815s ago: executing program 3 (id=3401): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', &(0x7f0000000180)=';\xad~\xee', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000001680)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', 0x0, r3) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000840)='\x00\x9b~\xd7\xde\x91d\r\xa3e\xec=Z\xce\xb0\xdfr\xbfQ\x85n4\xf5T\xc2\x86;\x03K\x80pF\xeaK\xb4t\xef\'\n\x05\xc9\xcfc\x92\bE\xf9\xf9\xcf\x96\x99\xde\x1e3\xcdA\xf9\x1bj\xc3\x8b\xbe\xee\xb3e\xd8Mk\xf1+\xbf\xd5\x98\x8c\x13\xdc\x85\x17\xcd\xf8\xf5\a\xde9\xd1\x8b\xf0&P\x92\x99u8\xb6,#\x0f\x89\xd9ic\xb5\xba\xe7\x03\x8d-\v\xd3S\x98\x89@\x8aWLU\xb1\xc4i6\xa5\xb7\x1d\xf3s\xaf\x7f\xb16\xa2\xbe\xfa\xfa~2\x1d\xeb\xd0G\xdc\a\xa3\x93n\x82\xa7h\xd7\x83N\x8aW\xaa\xc1\xc7\xec\xea\x13\xbe\xf3fQ\xfa\x8cP\xa7\xc1O,\x83\xec\xa9\xeb\xb2 u\x15A\xde\f8T\x81\xccces\xfa\xef\xf4 =z\xfc\xef]~tY \xef8\r,x~\xa0,\xc7@\xc0\xef\xc1`\xec}\xa2\x8d\x95\xff0c\xcd\x02~\xb7\x1a\x93\xff\xcd\xadB7\x13\x84BPC\xa4\xa2O\xf0\xdd\xde\xc5H.y\xfc\xe9$\xf6\xa6t\xa3\xdbr\x00+\x01{\xfb-\x1f\x1b\xeb\xd9b\xf0\n\x99\x0f4\xfa_\x10\xd0%\xe7o\xc9\bO\xfe\xfb\xca\xf8\x9d]\xa1\x98(Nw\x87\xd15', &(0x7f0000000100)="8d", 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000a40)='\xcfD\xbc\xbf\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\xec\xe6\x04T\xcbn\xa5\xc3\x04[\x02\xa9[=\xf9\x8b\xf7\xc1\x9c\x83@\x1e\x99\xca\xc3\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby:\xd8\xc5\xccrun4\xe0\xca\xc1\x0f\xc3\x03D\xe1\f\xb3O\xa4\x1c\x04]8)}\x83:\x9e\xc0X\xdb\xd9\x89\x94\x9b(\x19\\\xf5!w\xbafo\xea\xe4\xb5Xe\x84\xbc\xcdw\x802\xb4\xb8\x1f\xc2\x97\xbfi\xe8\xf8\xbd\x1d,\xffUX\xbeA\x00{\"\xdbya#I\x03\xec\xed\x8b\x97\xff\x1eiq\xd1n\xf99\xc6\a\a\xed\x0f\x15x\x91\xdc\x05P\xf7\xf3\xad\xa3\xbc\xe4[\xa2\xc7\xfa\x9e\xad\xa2\xad\x86\xc4\aD\xc9\xdf\xf8\xf7\xc1\xc5\xc5.\x8a&:\x90\xb2\x8c\x86\xb2\\\xa8%!\x98TQ\x91\x00\x00\x00\x00$\x99\xbf', &(0x7f00000006c0)='\x01\x8dik\xc2\xed\xf9\x8a\xae\x86\xae)Dn<(\x02:cU\xa0d\xd4\x1f\xd4\x95\x93\xb7\xc1\xcc\x84\x8c\xdd\xbf^]~\xcf\xcb6w\xb3\xfa0b\x88\x04\x10\x9d_\x97\x9f\x89\xb7\xe35C\xf3\x1b\xafV\\wGU\xaf\xa4\f&\xe7m\xf0\xaa{\xb2\xe5\xe2\xeb\x9bN#\x99\xdc\x9f\"\xab&\x8f\x01\x17Y\xaf\xb7\xdc`r\x9c6\\\x0e\x94\xc0a\xf7\xd4u\xdf\xf0\x9b\xb0p\v\xa1\x8a\x145\x9b\xd95\xc8U\xe4V\x81-1\xb0K\x9a\xa3+\x03\xc1\xf0\xeb\xafYI&\x9e\xd0\xe1\x148\xfe\x10\x0f\xbd\xa2\xed}\xe6\x1asT\x1f\x92\xdb\xa1&\'\xc7\xe9\xa5\xd0\x89\x8d\xf1$\"\xdc\xe5\xfcT\xad\fj\xfe\'t', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='romfs\x00', &(0x7f00000004c0)='\x19\x00\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000200)='\x00', 0x0, r3) read(r3, 0x0, 0x0) close(r3) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c80)=ANY=[@ANYBLOB="1201020082222b10bd287800000000a2000f090224000100000000090d000000220500090581030000080000d77f317bf2aeaaaffc631d2b2f42809e1de37d73aa4c9bb6618cf79b77a7c04341029f59a0396bf69c9fb2d60000000000000000000084fdf62a58cfcf9db8f3971dcfb749e928732ec05f46aea166adca10b7694041b4947e5c79fd9f3de07a43d5d4e27c30450c8a3bc4bcb7a6f319aa38a61fabb57559731764f7440dd0fb77af8bf354b974cbce512a26741b084fadd985656a4f0a919539d816761b04e5a0b9591f7c9611713497c5c2e422fb"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000340)={0x14, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYRES16=r1], 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c00)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000001c0)=r5) syz_emit_ethernet(0x46, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6064cdd800100000fe0000000000007bae020000c0bd0000000000000000060000000000000000001f00c204c8"], 0x0) ptrace$setsig(0x4203, r1, 0xffffffff, &(0x7f0000000000)={0x2b, 0x9, 0xd}) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000010000107a9653db56d88f5ad9d00000000fedbdf250a000000391f7b968c36ee17806cde68737261434c5af7c50e000000"], 0x2c}}, 0x0) socket$kcm(0x29, 0x5, 0x0) 8.805544067s ago: executing program 3 (id=3416): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000020000000300000000000000000000000000000000000008"], 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={&(0x7f0000000100)='./file0\x00', r1}, 0x18) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000140)=""/203) syz_emit_ethernet(0xd0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)={0x0, 0x3, [0xa0c, 0xa38, 0x7b4, 0xc53]}) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2b) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) semctl$GETVAL(0x0, 0x1, 0xc, &(0x7f00000042c0)=""/4096) eventfd2(0x7, 0x1) unshare(0x0) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9rust\xe3c*s\xb8dn::e\x00\x00', 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000700), 0x121881, 0x0) pwritev(r3, &(0x7f00000006c0)=[{&(0x7f0000000480)="b6d283c6b925a557779bb09e0242fdee4a4af9db02eaf356d8f2fa6047eb3e383a723522f4d3f276c93de04e614c294237be3e34422f77575b9ad31a8132d5ab5116a54ca25a3a0e6232556317a5326d5f1e69ff4681b3cdaf27ede7340089314d0e8be7a37d59c480b1ce0fd6c5d6af7cdac574ff8f17af2f35fa1bdcf6f7f70012a1895bc062c37eb919440f3dbdbb31df46cd5591dd5af8848f4f35ea389a4bea151981d28fbef56b91b03afb53c23c54f3b09e43b0741883fd843f525f29da06bb324ccb93dd6a328b640ab0689e72cdce9fa97b51b8f2d9fc01336014923fb099e58fe73b02cc", 0xe9}, {&(0x7f0000000580)="16e65214a7466bc4350f542b7ee451d36aac5bba2a045e06974b5b55fed06b960289086b17db5a608188b7699987f5be17b7ad621d5f1d34dd47c05fa746c4ab522d9f4960cf387095fba170e72ee0e7bd0cf7ebbcd0ba901b174f2c8de0fd2d4d39fdccbf88ece2def636e2063b5b3442b181a5522298c4ede3", 0x7a}, {&(0x7f0000000600)="dd1f26e3326352b99e6ef1437baed11b492b7c246e65bd76cf6cf6190001b5919d4ac972719cb655ca953bc6747432424f9cdc6a3e8831d257a93e12f91294b0356f77cd1396b0c4aff35e4320dba5850c09469d677e6382a1f85f0b70286a97495d7e0de09b2c85c53cbff3ad6f3d24623f87f5c4", 0x75}, {&(0x7f00000002c0)="c3b401f5870fd59935e06cd659e48c85", 0x10}], 0x4, 0xf1e, 0x62f) openat$hwrng(0xffffffffffffff9c, 0x0, 0x28800, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) userfaultfd(0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$FUSE(r4, &(0x7f0000002280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_pidfd_open(r5, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x7041, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f00000000c0)="100c060863e57fb9b242fa6a73b1", 0xe, 0xfffffffffffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x6, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000380)={0x101, 0x0, &(0x7f0000000040), &(0x7f0000000300), 0x0, 0x0, 0x0, 0xfffffffffffffffd}) 7.241191424s ago: executing program 3 (id=3412): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @multicast, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001e40)={0x2c, &(0x7f0000001c00)={0x0, 0x0, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000d40)={0x44, &(0x7f0000000a80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000001300)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000046f5aac7e27d071ffff06181d9d18700db1e9ecac14b85848a35084fec4e05d07c1d0d2510198196dea07f6c3ca7cdd528fc663ab34adc3a47e48757fef6fa78082331e07b749c3f263caeaf366a44b9dc61b6f65d1e2303385373f12b724bd25de0d920cc6572c30fc4406a77a645abe625576c40cfa0cc80e687553a280a5db2e739b80ce51906457e8217f96316a731e42e5d082558fbf6b39a2029767d5eaef0e93bc2fa7a5809900f4237900bc5b775d2deea67843c82ef3f2757cb1faefceaa67f7d960e81990556fbfda81f1a088e73430e2a4436842de17696c1a6"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000e80)={0x24, &(0x7f0000000bc0)={0x40, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 6.479539629s ago: executing program 1 (id=3384): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x28, 0x3, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x3}, @CTA_FILTER_REPLY_FLAGS={0x8}]}]}, 0x28}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @value=0xe82}) add_key$user(&(0x7f0000000200), &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000480)="a64547f02d24ef452b126e6b4ee0848331045276a2dada029f6feb61fefcc850639a2d2217a4c525abf430b2ff722f5cebae237de618f52f93495a5cdaa00f30b4da4148d4e0cad2831de99f500b35d48bbf6a414bfbeb4c4612", 0x5a, 0xffffffffffffffff) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r3 = epoll_create1(0x0) ppoll(&(0x7f00000002c0)=[{r3, 0x481}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000140)={0xc0000015}) keyctl$update(0x2, r1, &(0x7f0000000580)="4d629a4b08654cd71b79df34023bde6223d8ec5dee7879a4617cf48e9c8df0d04685e8f43d5ca06b4bc88489cc23069f46438c56c6890b8a03349c84718f22db6c4b586afdc5030ae3ed2ac80be47fb7c41011daa5a0e8b632462de50e681aa28dd23897440cbe21425990d9cad08c10069b3a8761be39957df04aa575e092ec852253020743a59aa519ef464597706b962eade93b018e897872fc0ec29e05dfe3f91a808f42f9e41d9a4953ed1c526d33e8c5b5f26b38a89e773952", 0xbc) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d972a440b72040150500000003010902120001000000000904000000ff000000"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0xc0, 0x31, 0x7, {0x7, 0x30, "9105a623eb"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000100)={0x0, 0x22, 0x8, {[@global=@item_4={0x3, 0x1, 0x1, "abf90e09"}, @local=@item_012={0x0, 0x2, 0x8}, @local=@item_012={0x1, 0x2, 0x4, '('}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfffb, 0x81, 0x1, {0x22, 0xa35}}}}, &(0x7f0000000400)={0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="00146200000048774b6e57fe43140e421a173e21acdc7e44b510075770a13c4d0ecc9cf47a24ad51424b7cf249c9cf23ce9b1c0aeae630baee401d033cabe27573b4264a7bb1880460d825087b8004d1bdf6b13488e3bdfa10747b4a9e1f099bd9214073c1ed12cf"], &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6b}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000300)={0x20, 0x1, 0xa5, "17f4f67eac956409723eb4f9ff6bc9dd1008668e06ea494aab3434bf922d505c71fe38c85b7b2827a968bae539b7309010ec51c5c403f3162c5e850c325fe9615d01c3da5ade143842a6d2b4a154161132b9b54d7f8867fdff5c21695a38d88c4176e5f72b081785e8665ebc7674664d7dc2bcfce9caeba4b48346c5f87fd948db8728a97e1046461bf806fb1197a87f327576bd93e21054186eeee85215695211e0aa2a4d"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x5}}) 6.179972053s ago: executing program 4 (id=3418): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local}) (async) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{}, {@host}, 0x10fe8, "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"}, 0x418}) symlink(&(0x7f0000000200)='.\x00', &(0x7f0000000040)='./file0\x00') (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000080)={0x0, 0x0, 0x10}, 0x18) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b000900000000090400"], 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, 0x0) (async) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x200440c4}, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0804124, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 5.259442717s ago: executing program 2 (id=3421): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x47, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x80, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x47, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x80, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x14, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$P9_RCREATE(r1, &(0x7f0000000000)={0x18, 0x73, 0x8001, {{0x2, 0x4, 0x4}}}, 0x18) r3 = io_uring_setup(0x429d, &(0x7f0000000040)) io_setup(0x8, &(0x7f0000000600)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) syz_emit_ethernet(0x62, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a0100002c2b0000000000000000000000000000000000fe8000000000000000000000000000aa060202", @ANYBLOB="bf"], 0x0) io_setup(0x6, &(0x7f0000000000)=0x0) io_submit(r4, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x7fff, r3, 0x0}]) close_range(r3, 0xffffffffffffffff, 0x0) 4.807170809s ago: executing program 0 (id=3423): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000fd9e1a40f30c74933bbc0000000109021b0001040000000904000065d4695e000905", @ANYBLOB="e1ce74"], 0x0) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r1, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0) mlockall(0x1) prctl$PR_CAPBSET_DROP(0x18, 0x401) r2 = syz_open_dev$dri(&(0x7f0000000a80), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xff19, 0x0}) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e501000000000000000007000000", @ANYRES32=r4, @ANYBLOB=' \x00', @ANYRES32=r4, @ANYBLOB="01000000ffffffff0000000000f8ff00e1ffffffffffffff"], 0x38}}, 0x0) syz_extract_tcp_res(&(0x7f0000000100)={0x41424344}, 0x8, 0x2) syz_emit_ethernet(0xd2, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x1, 0x22, 0xc4, 0x66, 0x0, 0x80, 0x6, 0x0, @multicast2, @empty, {[@timestamp={0x44, 0x10, 0xd1, 0x0, 0x0, [0x3, 0x6, 0x400]}]}}, {{0x4e20, 0x4e23, 0x41424344, r5, 0x0, 0x0, 0x7, 0x80, 0x6, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @fastopen={0x22, 0x4, 'o`'}]}}, {"7cb6fda93b8b66896aaa7a3b09663384ff56db0bbac23d6e69646d2e222df6099957b01157a0870dc54866b39711bb7cdbb9f9d0196ef801e1ca1afed75d436629075e847fc8fba4ac2c97774b9d2a83ebd4b666bd1859070f642b32219659087f972e8966c284284f0a5117d21d3dc767d9049d96b8535e19cd6fad635411b16baffd05"}}}}}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[], 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000040)=0x8) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3", 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005080)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="09de", 0x2}, {&(0x7f0000000340)="d5bb69fd2ec3a88c5df48b69469a", 0xe}], 0x2}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/166, 0xa6}], 0x1}}], 0x1, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000380)='|', 0x1, 0x0, 0x0, 0x0) 4.187124705s ago: executing program 1 (id=3424): r0 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="c2f624", 0x3, 0xffffffffffffffff) keyctl$update(0x2, r0, &(0x7f00000000c0)="ae74b5a2", 0x4) 4.128097682s ago: executing program 4 (id=3425): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)={0x14, r0, 0x48212b8952c3affd}, 0x14}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x20000007}, 0x1c) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet_int(r3, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r6) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000140)=0x80000) r7 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x10, 0x0) landlock_restrict_self(r7, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x83a5800dcf1e32db}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x0, 0x30, 0x800000000000000}}]}}}]}, 0x84}}, 0x0) 4.112132481s ago: executing program 1 (id=3426): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201fb0019b40320d812010079de01ec020109021b0001000003000904000001785e4c00090585020004"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000080)=""/145, 0x91}], 0x2, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040), 0x10) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000406d0426c600000000000109022400010000000009040000010300000009210010000122070009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000380)={0x14, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x22, 0x6, {[@local=@item_012={0x0, 0x2, 0x8}, @global=@item_4={0x3, 0x1, 0x5, "41a3edaf"}]}}, 0x0}, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x0, 0x2}, 0x10, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r7 = accept4$alg(r6, 0x0, 0x0, 0x0) writev(r7, &(0x7f0000000a40)=[{&(0x7f0000000980)}], 0x1) landlock_restrict_self(r5, 0x0) timer_create(0x1, &(0x7f0000000200)={0x0, 0x10, 0x4, @thr={&(0x7f0000000140)="d2ebc45d0771e5c4093b33f758892302e5248bd64c7f422c9067e4c91b51e880b11a999d15b2536e8be094dd15786b77c4a780245a075f967cfa39f8a4aba48a8313a7381c145e939fa3e1d3e28d5dca6ca0ad9bcf6ea555204f692e2a8309b5dd2904e86ba17fa45fe52cdc8e8a", &(0x7f00000001c0)="a7e7b0130017707192795596a3e63395e8d18c66da353b7c1db1cf28cc0c6e84228e03ba2eae7cde8bd1f52178aa2f26de486bd17021b72d84ed561b"}}, &(0x7f0000000280)) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmsg(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)=""/116, 0x74}, {&(0x7f00000003c0)=""/140, 0x8c}, {&(0x7f0000000480)=""/184, 0xb8}, {&(0x7f0000000540)=""/107, 0x6b}, {&(0x7f00000005c0)=""/100, 0x64}], 0x5, &(0x7f0000000680)=""/97, 0x61}, 0x10140) connect$netlink(r4, &(0x7f0000000000)=@unspec, 0xc) mount$fuse(0x20000000, 0x0, 0x0, 0xaaba8c, 0x0) recvmsg$can_j1939(r3, &(0x7f0000000240)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.011068089s ago: executing program 4 (id=3427): r0 = syz_open_dev$sndpcmp(&(0x7f00000002c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80104132, &(0x7f0000000300)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0x0, 0x10000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10, 0x4}, {}, {0xe, 0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x406c841}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x60, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c1000003e0007012ebd700004101c000100000004000002041001"], 0x101c}, 0x1, 0xffffffffff600000, 0x0, 0x600}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r8, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl2\x00', r8, 0x4, 0xd, 0x4, 0x2, 0xc5ceef0795697128, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x20, 0x40, 0x2, 0x6}}) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2", 0x4}], 0x1, &(0x7f0000000980)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a7ce45002bdb85e47ab3e39597e422ffab456dd963a00000000180000000000000017010000040000000602000000400000180000000000000017010000030000000100000000", @ANYRES32=0x0], 0x60}], 0x1, 0x8001) sendmsg$NL80211_CMD_START_NAN(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x14}}, 0x0) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @local}, 0x2, 0x3}}, 0x2e) setsockopt$sock_attach_bpf(r3, 0x84, 0x84, &(0x7f0000000000), 0x90) sendmsg$kcm(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000440)="25c886be38a88e5c80d1e427641536227ec94a58b4f06e9f583a919fee67bb92b960093226721b5a7c4bbd12192bc3e18d01cf89fccc4c2f6847e9c7236eb4eed4875b963dbbb092afe56affcd6aa45bf21c227ca6e4e909f71dd03d1717970fbefed27c3257e9b0c5e2acf70912fa5ffe1bc4e5021d61be46a5794348d43be65a36372675e6aa9141178070296ca5dec1", 0x91}, {&(0x7f0000000340)="a7b5f845ff904a6fb481ad427df5674006c88136ed15340c65bdc10960cf00abdc", 0x21}, {&(0x7f0000000680)="d90642c16c542485c385597fe276edd6c8f9a32858930db9049e651fa3ceccf5ce1114e75f2bf8836e19d7179aa09bd51ac765f429b5f4d4a9d80454781e2c8840efda59fbf80b50ed4195bc62c8e6bde9ba007bc9d1c7e7b2356a56bb30eb51af786c03d7cf8bc3a9042967282ed873270e66bf59db2d3f41f062fc522d19f4dbe1a11ae04e9d4b4b9a44e12455401814804e2c49c1ff2bbc42ec29413b3e89a860a1b62b3e1296a062d23a159186fab84839658b15db6cb31d87c939ad79b5c14bc5296ff6a696b5ced809383efda13fc7a2afaeee4d309212c337c019", 0xde}, {&(0x7f0000000780)="b894ac097fd02040d49a37708111c92abee4a314160ab14715908943d34ccbe89aea11e77323b8c7bef5127eac939a2ba4f0f0d70e0bf8f8ce92fce594068da44f46e87da495f2638557a10b5d7b7088f1ba2dd2c62bbadc311e32bc1bbbec523ea86e0ca6442a1aa29c528ee40845f27bb0dc7e9c8d2ee0c0842c74cbbcc0cdbcce057aba2ead2a73af12bd08173ebdb6908a0dfea2bf096a93c44e806d29baa6fb0b52066baf95c4577fd6cbe14687487a760dc9250a474efeed3caad4b2ad233d6010375325f4420125d1d097be5a8c88", 0xd2}, {&(0x7f0000000580)="619060ebba872a8430de344ae728cc46a895ccbd50ad3b5407f5017f5edf5533d833978458d4d6856e65e8288fc61d63dc21b8eda801f270ab35843db86216addac33d6350401b598a09e7fbfcfbbbac25c9b01992c3e12d8412ad9591f423e1d222", 0x62}, {&(0x7f0000000880)="f730df6bda40a4e838c412f4662e30f507e3902648a525c06f542383563d24a6ff5603a27b01d2616fae8008a8b0447124fb3e52a902874a0e2ccdafa4f91a4e7872ffc2e14b353d1d31a22251b43a3f67a362a185ba71e526988874324b8f9253e089fde64fd19ef0b5058110d9e0812e64ea5688f1209a24c147da14879919cf9d0254223562a1766e191a134cdc0a61b52267be6cae9e0632d81e065b5f98bc56bc", 0xa3}, {&(0x7f0000000500)="c6905fd557260a948952e2b502f857ed9a094103fa86ea852ebaa2db5449e3d7a29a3f2df27e23cedc667d2a179e83e63755d9881d8f99", 0x37}, {&(0x7f0000000940)="ea3c31fa549525f4e4a028447b25109d66d2a1534351", 0x16}], 0x8}, 0x40005) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRESOCT=r5, @ANYRES32=0x0, @ANYBLOB="67a9fde5020076786c000000000000000000000000ed949c56d0bd44533cdf408080fd366aa579f5abb78dff9a0900c259c2045ba5811b517c9ef441777d2b9855647a61124f764fd95cd0e5bf5358a461880304979b2203cd8349b2acd5dcdad07429554c01e4aa80b93bebbaada40000000000000000", @ANYRESOCT=r6, @ANYRESHEX=r6], 0x3}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) openat$ppp(0xffffff9c, &(0x7f0000000140), 0x8000, 0x0) splice(r1, 0x0, r10, 0x0, 0x4ffe6, 0x0) 3.246420921s ago: executing program 0 (id=3428): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (fail_nth: 7) 2.74431709s ago: executing program 4 (id=3429): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006000)=ANY=[@ANYBLOB="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"], 0x34dc}}, 0x0) 2.744109988s ago: executing program 0 (id=3430): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f0000000180)=""/172, 0x2000022c}], 0x3) 2.687091941s ago: executing program 4 (id=3431): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="0800050003000000fdf8a09b250718eb357ea63df9425e8d0281cb5f00b975760f3c26e81a78b4e0f261b675203c584656e897ad28492ca19b3cf8648ae8e0c962cb6836c38faf8209ef"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="80000000", @ANYRES16=r6, @ANYBLOB="050000000000000000000f0008000300", @ANYRES32=r7, @ANYBLOB="41000e00800000000802110000000802110000015050505050500000000000000000000064000910040600000000000006020400250300000076060f073b000800000000080026006c09000008000c006400000008000d00000000000800a50000000000"], 0x80}}, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03800000000000001cac40b645dc2e270012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB], 0x4c}}, 0x1) r10 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_STOP_AP(r10, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0, 0x28}}, 0x0) getsockname$packet(r10, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r14, @ANYBLOB], 0x48}}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) r16 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r16, 0x8933, &(0x7f00000000c0)) sendmsg$nl_route_sched(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x403, {0x0, 0x0, 0x0, r11, {0x0, 0xd}}}, 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 2.64469604s ago: executing program 0 (id=3432): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) unshare(0x20000400) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x210901, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) r7 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r7, 0xc040564a, &(0x7f00000000c0)) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="82"]) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0x0, 0x0, 0x101, 0x19}}}]}, 0x78}}, 0x0) r10 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r10, 0x80284504, &(0x7f0000000040)=""/95) syz_emit_ethernet(0xa2, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ee527e006c3c0000000000000000000000000000000000ff020000000000000000000000000001000300000000000005020000c910ff01"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, 0xffffffffffffffff, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000006ff0000000002000000180001801400040000000000000000000000000000000001"], 0x2c}}, 0x0) sendmsg$nl_xfrm(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="b800000014000100"/27, @ANYRES8=r0, @ANYRES64=r12], 0xb8}}, 0x8881) 2.480255936s ago: executing program 4 (id=3433): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64=0xffffffffffffffff], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x14, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)={0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x18, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r3, @ANYRESHEX=r3, @ANYRES8=r1, @ANYRESOCT=r1, @ANYRES16=r0, @ANYRES16=r0, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="7b1e58564677b8f0c4", @ANYRES16=r2], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a000014001000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000480)={'vxcan0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) openat$audio(0xffffff9c, &(0x7f0000000100), 0xc0100, 0x0) r8 = socket(0x5, 0x2, 0x6) bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r6, 0x3}, 0x18) socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r9], 0x20}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@0J'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) r10 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$setownex(r10, 0x6, &(0x7f00000006c0)) fcntl$setownex(0xffffffffffffffff, 0x25, &(0x7f0000000040)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x3b, &(0x7f0000000240)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c830102030109021c5e2900010000000009042900000202010005240600f10005230000000d240f010000000000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="0000040000004331ab6245643650e9395fe5"], 0x0, 0x0, 0x0, 0x0}) 2.386554881s ago: executing program 1 (id=3434): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x61, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x1, 0xfb, 0xc0, 0x7, [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x5, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x1, 0x6, 0xc}, [@acm={0x4, 0x24, 0x2, 0x1}, @dmm={0x7, 0x24, 0x14, 0x1480, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x5, 0x4, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xf4, 0x9, 0xe}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x9, 0x4, 0x7}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x6, 0x40, 0x7, 0x10, 0x9}, 0x2a, &(0x7f0000000100)={0x5, 0xf, 0x2a, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "78e6c4d01163ae0d7b430075815dfa36"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xae, 0x8c}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0x6, 0x1}]}, 0x2, [{0x20, &(0x7f0000000140)=@string={0x20, 0x3, "6d0c4d9265188b7168d5346731548dd3a08f681a8869da7187312b1b006e"}}, {0x86, &(0x7f0000000180)=ANY=[@ANYBLOB="86033c51927b3819935f78c300e0dc6f564a8741ee8faea35dffceb76a02d5fc0fbb1e52f9cd3b9deefe27e1eae8263f68e299d312c9c37da357533e3b4a439dfbb2646b46dc1f4dd9c6a2f6da54be53b34f996ff03e77a08211bacdcfd3867a6abf5537c1a68c0191c29d279457886c3e55127a7552b6"]}]}) syz_usb_control_io$uac1(r0, &(0x7f0000000200)={0xc, &(0x7f0000000280)={0x0, 0x8, 0xc2, {0xc2, 0xe, "51b3c655432726f2b4da028cf136de90ae86a5f805d3cc784a3e51315bfb6069684808b9d4f04615068adda253a39a24e36ff17a92b635663327e5119246ff83ef0df4edb853e178a01f593a683be5a8fed44dd0647998ba52f6145a295dbfe4150191b8881920f93762cedd78d59cccb722479e421e48c4300b155dc62ae74427936bb1ba7f8016e710ca910933c10e09f994f9ed4d24c96a4c975f51973d4cad9d3e9b9a57b39fc3501ad2d51f2bc2e7b1e2b64d31f40a2f76466f09e341e0"}}, &(0x7f0000000380)={0x0, 0x3, 0xb4, @string={0xb4, 0x3, "19b8b1941a1fd2ec70a652facba2c44f10e421efb0a5e1424d354d4d16ba2bded3440ef665c8621ffdcd52688669a4ad88fa30e181c0b0f7e5051543a53ca0709f641a5a2ff55b1159b47256512848b23e5e22645a5e00510f23196e7eea85dce3e2982943c4ffb8f5f81a3abffe60ac5d630c11402da03b95fa4b9624defeb06ca9669bdecb3ebbff524c165525805f202916e0d174e60d08cb4dc3863d2842ecaac3d5526544219a53fc35a87ccad23279"}}}, &(0x7f00000006c0)={0x24, &(0x7f0000000440)={0x20, 0x17, 0x9c, "0944f344d3eb2967569366853226bb4d9ba2a6c07ec9aa9da4d2f63fb24e4dd2343791c2c51db003a62eb68b26733f3576ef16075313e989c2fd76a73815d5b25b0467d69a0382f3ad8184c4f1049078e273942371e951e0787872371497f3362ef8953213bc9a5a9c3c5d11af36911dccccb913073f2b4b1b6e69e4179e05ff5eb0dbb1eb88113243d4f6c13ea75952772a0d417a3cb5453afa100f"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000580)={0x20, 0x81, 0x1, "98"}, &(0x7f00000005c0)={0x20, 0x82, 0x1, "cc"}, &(0x7f0000000600)={0x20, 0x83, 0x1, '9'}, &(0x7f0000000640)={0x20, 0x84, 0x4, "86d84f21"}, &(0x7f0000000680)={0x20, 0x85, 0x3, "9edf03"}}) syz_usb_control_io(r0, 0x0, 0x0) 2.068609291s ago: executing program 2 (id=3435): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munmap(&(0x7f00001a2000/0x1000)=nil, 0x1000) shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffc000/0x3000)=nil) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f00002c9000/0x1000)=nil, 0x1000, 0x0, 0x28011, r0, 0x4000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4340000060a0b04000000000000000002000000883404802800018007000100637400001c000280080001400000000208000240000000160500030000000000200001800800010064757000140002800800014000000013080001400000000e140001800e000100636f6e6e6c696d6974000000983301800e000100696d6d6564696174650000008433028008000140000000103010028005000100f6000000041001001ef89b8f1e963378ffe7710ed4e05718232e2c96b2f696ca64fc26f0a85120259491893d117cae43701009219da76f27f1169833c19889f884cfebc08226cb5c9632a543017d994f2f700a2d63609d19dfd07740a2e46d2cd1c59458140a520097aeda7df5f0aa677c49c4ff924bf22bbfed20e0810263fc087e2a483e8a4efd1eb0590a15da638df646fa7cf6ff916372918c20e6355e0fc9a671db5413e0af152d189a8178a5ff35d7b87d5dee94b02b76611d249b3c6c6ba40090440e2ed2fc255976c261436902616b2c534ba94e643bd01e2d4814bd04783cca4b68083f92eefe9166453fce8eed2145c694bf21cda2c8e38a61d4f9396caacfc007c18cc97ab5328b43a0b6830e8a242768e2ad1c924fa598209224b74aaf4cf29730741702ba11439730e158f2fd91c6881a189d1aaa67771f2feb8a5fe55e929423eb596f92de5446b90da74aed9ae80b47b5bb66b9f8bb6eab57bf17e1d87d3bc5644e5984619de9c689c3ac39d543b74f3fe22f87ae959bdeaf636b73537e09b0f6e9f9b1651f53856099cf402fa851540beb174f1adacd95b889e67fd2e6cb29573c4769dc8a4287c623b2037257af816a838b34ce867589d14429d1611ca324a1c0d17cec22690696787b99d5c599e83564bf481cad821a26c7a82699788b6e9f33bf2724e92f349793ae04bb2797f076bc7835b73dc7cd22cf693346abd73a05ceeee1f299597c86cf069e2b4e735df9441418b05d978ca1ad59e1c20e8d7a03a26f099965a0a8598862d5f8788235d9388e029cc8516749e8a6d1a0b001a76d69d0a0c1a67a4fdafa4ce23fe36081b8da9262bba9e83eba0453d04453d09766ad57f6d88eeee7ab3e3125b5b9d453e9937aef365833b32a86ea9ce12663dce3d06b6c982b44df4ec06c8d11fbee30a20c822d73fda94c0a2f848fc25673aeea3d905a5098731cc5299313e23283e40927b4880cc1f76f598cb80b177caab019185e0829be31dd051b092963ad0fcfe38ee1b1feee86660f15a2c4d75f149606e5bdca5ef7100f116cc2241d9809efe031bfdf0e59483ffe3d048958ce074605a3d412b72fe3c602f987e691353f88657b300b068dd6c5e72ad097e2397c465a1e9d8bda12a0018e031886350eb8dcdf3f728d36e27a5eadd2c42d216180c1c8c8361f68e20820f6360aec98347023751032b32a237b748847a51ba247a4ed4a338fc5edff499ec1c88f78f7ad357db4f8fdfc8ef821139ff5ee7e184ce9496beb4d8b33ce88150c1d837b626a417b79fe7ad3e3b75a2f6aada5cb1fa51ed98a129f6081b9b7b7f4541c1f78ce9e296951f78816bf43cbdcdc0a6c901df8e83262ac1525f687813305c58d4ecfcce992489f0c9ec59ce141718f5ca86c5d05b8dc3f46d15174e6ffde55d26c29b31f821e35d8a42b8cc899f7ec950ae8c2612b289a9c6951e10e63b14077e1085072ca90d7a2992db9b50b2bcae9033559e14836f71c2e6f936d3d63c3a55d7b22b2aa1967ba385c2cc7c9362ab2fec17c570f9e669777661711f25bd78054b851f77d41feed5d30b02aef5f6a50976f6e75f163f2254d849f01448fe5d16a16a49d315f4b4022848beb4c1baa528685273820230196612fa17b9b02cbe7f69a82c381f9eeea548535d1fdb3ee242c6412afe5499f3c7a5e07352ab68fe4ae8027d6b41c745b0969f872bc48256172496504d7c147cf1705a7ef0a0d02c0256571e27bad52e36d58a9b2071da2a7b4b1abb0b9feb53737e2a5eaa1adfea057969d00123a0ab2447a9e7e15846d1828e0d79e5d13798570174752f22d0bcfc88ecdcc88e0b0a65d61c03b9b1bbc58f48cb8698a28990161ca0abed015552e9612043d6f29e8f50bb4d5a282e0279b047112289868e3c5b1496c3d348b5b474a08b05d88cf7e74f1bf8f154ff6e52f4e5cff569a5154b51c40f7b2237746fb85d7f8d4f0226ff8b22349872c1427c80ae75cfebccfeb2553c38519ee64a2df603e61067893b13778dc8e4f4e602fec48775c4b8bb81957cd5ca52c07079f86589d8787bf17fdc960f5d2907ccfd2322b526d720943e1615a5308ba3a4bc01d0ea8c719fcd4bdd6c7391946e5f88b1b0d0faeddcdc93886b1f56db6cf8b990511f62c25af34d199ef92110f9846781d4676702712b29b8b6cfb3193d332a3e6e6c60941f0549c8f44b4e3232efc999bedc176002e34f5d59ce4e2f44160a90b27c1754bb2293537c7feac4b306071fd9af418bd1aaf6fb9477f9bd481d8b294c4b8919547cd4188f03d1205352020662f0d69dc85236be8c6d2ce08c6906ec7389fcfc9e772f4ede2d6f502deed604931deb8400be83f9d67469087eaf0b984432d990718238924827f8a4f501816a1a0dc9671a5de2a289d8fed80ab25e084a4996fd98c89a576877d86958b725736f6c71279eab23d4a4d00f6162062a03d48cff09fd2548403e6e53e54d6e59d46a335e1e73cfe6a1f0569b4b448b0e082b590d230d7bcb48c0be7c76b69beafc66923a5116f4e714bf7f7c73cc6282a269e6d4c2443860da4f5656deddbf993152f4bcbe0023723b395eca3ed3031bdbe015fa3f2ad8117632e4697e911e3075dbcd3712f4967616c1a6de84df92e01c99338f42bf82462b333e6feb058eef0db749c57eea8c052b1a03790043240f0e9f4fcdaf2bc36c9c84a860d692383e86354f10959f2817456b8ec94c617331bf65c351b276af3dd4b523de91367128bbef55655316ffce93a6defbcbedaac5f61a951391e4023531be843a53c7790552fe1a4f00a2be03ec2b77e2faa0cd26edd0def9b039b59aaef6e9787232a472aab24a4cead6ebd7ad7c76cff2cb978c4fe85053c597aee36e3fb93b80215789d28f911db5ee9f01381e9b013ce7208440763f0aa65296d18d241ca87440b995a56790bdf566825e867f7fe1fa8399b16a2bdf665c8b4c00debedae3288e6bc4ccacdb03c71bbe507c9599cfd6774aae81953e9f820631b0051ff2c7d8193714c473f035f07dd93b0cfaf6579d2e3fcd5d6a17dde474244509766835bbe00ccdbdeaa6bfc0827b20c66ad2c7a4fcacc8e1024c93cbb8327b93c546438c4268930b6eb74f335d7daac25cbed116aeb1aa6507787eb9cfeb084d9787ff4f1dffb128f6f132dbf41ac0c1aeeb74b6bcce5588dceb06dd87c20ce2198ac810e986d1c9fbbc630a6ebdbf71236ff1e7113e4cb6ed8beace7d1f7e1fc5751bb5045cf1965db1b76e138a416d472e9146327f5fc42c268eb67e88f679bfe70469f41ca3f3bcf766a951766b865d238e0a7a6acd6a32669aab1abec29cf4d3653f68dd7e2bad89edda1c61fdf1354a1637b39c63e025aa0e1132d6f7212b0200766252371523cf9fb686fd567f848c76843a9be98eab58c27a38eea37a5341c5354cb771104226d5de07e66f8e5830a708cf0be8add3d4d5da9893f163aad45168c32d12a4be395f98623e594d3a93db231f32753c3eedfa0eb5a398de00bc99e6a59dbf51aecce75945d5162241108842731d0e4068c4906eaf50b7456a0fc216feeb548ac7ed7096059f176860e2d739941b46478d5d7ee9a99c926494f1f1286849fa2c1c42eef1be3ba324fec131096fca431c3b7143ab7058cbfff1717268bf47c24dde6b372164826521e192e1a5271afa74d2a6a7906eec15626fd595b0befd157fb48f516196f25c4f03c4c620c6e52d567bf14f7588ffc02dba70da379f3d6ef381335feca0441f15bc3c3ef7a6f6a2bd443e75e24d587a7a8c2d00c73dd041511f694e390c876512fa354c48cf0e21acffb873512a18c51e594b69357483d88588d79bf198f91086fd7abac8b371bea7e35dcb65da2243793ff26be46a3406f93c74ee67d7e0a083c45849b81662eb29798cb16b8d8ade9c9a76cc784f40dae8f7188522d9c017222831b4beb3c7dc56c76ba938d87132dcaeb46f29923726a4fedc80dc57446eef137608afea12aef1a48b0cbeecc6893aacfe005f0910e34a0d7e5d47c6311a6adb76383f3704d09f38e548cef371648ebcb9b3db2c08d4e63135a1164e1e6d38d261ccb6ff0ba3f30b9f4dce81051221b42f79da7dc88b8b08336f630fca6d075c4bb70cb6ef019b2a0fe9de6596bdcf0cb09623045afa5fa4aad7c758b8ded7ae1a378b320b4a73b7ba1468e7cf1469e66f64a5263d29cf26ed829fb31809fa586f832cc1e873fe3f96e8ded8901a3b890de11d1afa86d277730442632091c805b686a67053c2a2420eff17467b6af3d5999d967f97833d405f6ac951ed0926cd318f9b8437febebddcf32db6db33c206899a77dbd66c9a9026f41b7721be7d6089e78e5c17636592f8db467fe0226f9bbd5cbe3d99745dce9be4428402f8ca4b3530837c07615c0eaddcfca88d86846a9d8d272a8b9fa88cb98b4e6e1ae9d56183e347e672406233b01f5ab2d083023ac39a24f0e937c045ea910bfa243a00e2f528e994c0d4c6fc5bdedfbbcbca6e88dea46654793ceff661315e50dab8af61ee55bd4dfedfcd065c3b36b37e2b4ead33caf678478b0f03092bab6b441e282ebc803b9a539395c076630b9f8335c46b22a7125a30ebf5318f738922e7a5c667c8059813cda7cb10ed65519addab2df5067dc476b1a4d21b9037fb9ebb9e653921e25c94913472e5c3a084d216fb62723667041f5cbd778659ce8c26c752213cb1424de99a8e5fe85b9cce3dbaaafe7fdc6e41c26310afda7150b3271073e6b7d565731118c2fdda7ff771dd529f834117ad8fd456e0587493c0b6ccbfbfaeb62f4c40fef6e2570435f253cf90e79889d0bd858f0d173f4ec48c769f11cf967843637447afeadc5b42998dd2735ee70ef354220a880ad24549939500d626a5d4b10ddb7b251865c53f2034dfb569655915c981c612e50102b772894510b6fda069fac9f22c4a869e40c7aca07d65d247a8870df425de9bd92fd962d60c9a9200223f5df16bcc06051b6de92fe0b6a286fdeb19e30e1d5c75e8b4be1a79b549482c91afcfc1356c9c20091fcab32584c4adc70899be606b60685363acec1153d1f55328ec834aed0e7f38972c3102eb3f2dde6d38707cf5c2ecadfffedf82a0b4f672ee95850552aed998a72e92145980456bd50aa446034d3539495ee6896cb4d0a321b7c3059e3567b18791f081b63840a728176b91728e084169858e0e5812615f19acf262ba281a0b0c56c1715b53c4f1a11dbbfdb9684f952d80cb4daa1c3f86c0396bd4097022463c22875a914361d828670adda52f408d8e4fb98acaf94c6daff4068518c122022569d822e1c13a9efba329ec80713f5cc1c0ea8e58c770822bdec8fcdae7a80f952e907b2360b48893d73e4bc2673679bec3e8802890ecbb2908b2db23b8a11f683c35b8527d131309f74ac03865b7cb6463e8eb543154d9615c3d5420d1c373f2f6e2a08c867907bd69d8887c7c82085b8ec2076aa334b5f22ae03b8de3283e38cd9a0d77a722baf9a03a6720f2d6d53762ccf74d7b62a200764f273bd6edca1b605a48fb932be4c28e754a9be7f3f3d85ee421be777a9e90b295bb79ce1ad68f14208c7e2470b3217cbd924d3b88cd321cdaa83920b93812c9d0b9d8396fb16280205e9ec1c9cf5b2719c458ad40d902fbd23610b09fa2c72f4961d1db11a45d1f2742149ba6d1fcbd1b45c3ed4d98a137296e9b3534bed69b9df647c31abd2f452fc19d5c1ba29ca3e9ab32248b4d107b45464fd46e8ff3b8ffa410f1977b59742d4de94e5a6e714bfdb3eddb2b3a6488f20000280080003400000000108000180fffffffc0900020073797a310000000008000140000000040c1302802000028008000180fffffffb0900020073797a310000000008000340000000042c0002800900020073797a32000000000900020073797a3200000000080003400000000208000340000000042c0002800900020073797a310000000008000180fffffffc0900020073797a300000000008000180ffffffffed000100c9e42b71fe3f70d72a91049098d137f74fb771e3ca7f9b05ec86b038d886e5167b7ca22c0bbefea2c7b39db2d8f5485fab07eef2fd57dede849ff62b874b25026e5cc9299476e8758384dea92d9ddccd2ebdbf887f32b546ac76fa7d5e689b1bc96f70e9694c3618f15bb030ef84735bc0a6287c106851fed40a43cabe504936b63703f12b2429dd60f3556702272938ef431968405b0d5604054fa6ab4d5553749be4764f845c411994f00cc5e156b23c7574beb6bf5528600228e6ad55058b742c9c58b1e0cbb1c605a88d5ec8310c4a3c77913078c4b182d4849980e349408a3bea9ee45dedb0370000002d0001005924802b74cbd8ea694a4d85f6c1e78542f90ff831da30307fbfb92c8cb7e9f9b30ad1491ee4bbae4d0000005600010003f544779ec58c89ffdb437175f354c0fe8fff87a5fee3a8a0ab0ab9f5a579ba3d5391c2d3c716d0106bb1a66da1af1a57b9849afad4c6170ce48cab86e4921aba79c3e12e5ccd0906c3d7dc341dde69719500008b000100fd505dc24e2551383ee07a8b78dcd94f3c2a88e87ddab471a4952320f1e356a855d4af54465180d7e9e461ba81b31b62a3c1270bbaa30ba8943e52b02bdeb75f9ed3f6b1d7c5eb59c7fd99503450fc947209cfa9915c1c3a1c835cc790ba6e9974a2f88422433f8e95b83923b024240683771621cd9ce48acfa7b11cce4886bedc9563bb85f66a001800028008000340000000020900020073797a3200000000240002800800034000000001080003400000000108000180fffffffc0800034000000002041001005867fdf5a776bc8636c18532001c598039215ba5ee9f8ad12e72032091c510c0c3c8c2ae5e2f6cb4c976f312faa9655201764fb044059219439b61e00accfdeb5c0b6c19160490eedfd4c330776c08cd3f60bb1ea3f36a4abe3abdf26a038f822844186853f656e9ed57c0a980304e01967bd5983b068996e91767c8c79004ea0a3b3553c02310fd3bba8d5c7f5c9388b6c8152eb4bbf7d76f969529e087ace994c6993d862db05b81ef6943d213b47399308f08932f189e662f8ba999b6c77b66c374bff13db88e8bb42fbb9b833d67b5e8c4aeddd8446642b392b96a4e6cd1cbd7b099abbfdf78994e7fc558d4a0cd5a9dd79c8dbbbc754e4d6d856878011e74f533caa2ef8332ee9a6c5272b3efc49b6058123b2c44ce44e7622242ac884ea9b2fb4074ea010e224331b40b11d406146814dd8998578b9717899399a63e037a5fe6ff09291a9bf4a355396af3e3f8c4540c17b54c16f63e829d5ae8dd6829c7eb719c6d4cc798132ef2e39874320b51a55aba5c1a910aba6b0f41236943f0f949341a030bf76654852055b294c4cf48f850347c3f85b08074eafbe142b21019e705eafedd4bf3f0c4f678e02454cb84c39ee1d68ad735111c6721fc58f39573bcaac002143af2bbea7c0b92f6435a54ef2812e1ff676c9c9d000612c0bbf9fd4990e0272f471f00606228a6969a2ed2f8e09505ce67d365e5faff3580f36ca2ea34af334cf432dc1a49654765a81da11aa3aee52aa8204d5de6694a5e357b4c1d2e13362e13a42d48af075449fe61fef7bc94e4eb3822fb7ea3f1c5ea678bf8f4b5f4d7d547682f09d106d3c354f20e953b5f21959c764ec7e09e4f20153c60c14ab48e72d34db7c3b59e77425da14a2390603bf71ef60a174e84a9a834f6d41353b8eac9ce5b81ae7e09eb88bc446648fa792096243b01b5662b22af8020dab41166390d2d658543a46167e90ff271d505a8dd68270a2daeb6617b6fa67c0f9c2bf1d72c73c58dd2c6e8524a5a8a104854e5c78cab240a22b2439b96e14e958a43e835f1fca32629fa7f63a54971c21378459b1f06b6b5958a43b052802ef56b3666c3b62ae8c3cf29cc13eaf38d9d31f2c7df4ceb5a6268c3e21c0ee00ee115d995ec9db934d47c1881ed87c6eb6411cb0beb7a945557bf011a55c01ac939ae906754c363d1717b44fbc566b8c129cf9042af944b96b59d8e3a7fd5e1c9e74260dd4ea5c88b10ba1953513fe5b19cb8d485e0d24017341ae5f84b009107534663054a3d0641393ccc59967dae495ee8f1dd51415465730a4118b0298c36a34c4703a23a3219de57eed01f06a84575e7ccc6b24f046ce8229e8d3fcf12d7dee37272f5a5013b3820914fd5ae7bf8226a57880b69362e319c13e951953a54d4456358f1bef2ffaa2a7865d860662a46e6bec027bba17d171024dbc216b66358c7fd7722e612f77bac0e6b67041e04f2934d0cf19aec3b052af12525077f664947f2f4dc193fa744de7355d9606835fe0927ba95540a55d1d5832a42a881c435f4f1f23a329a95b6bae7a7b0f0eeedc21a439635bb96c9b76b7b7a7bb9d25bac5d7ec48fa4c627b0ff03d59f28f383e48bf04508f6c615e8f72364b187bb31cecacb0bb4f3776d60e3213a4249628fff10db47f0835f01bfdc2d9144fd09a73e14ddc8b398a9846f441115db041b9bccdfac69983fb180e0bff53ef134420906bf9b5a38859cbc309dc016d09c715dfa6e43ae69149b0c5386a53bf70aa44f0b76224251dac5b7dcafa6fe720dd9a09ccebf84ef15faf3b410569b14588140df584cf7cd542026c0bc728bc4d10827395e70dbdf4af040a5310d89db0e812ea11d8524396560790dcb134370809190af9e2db981873e49c9f6210fecbbaefebf41f25dac92f7307ecb55e6d08c1a43d7ad398c1141e94f2b40fd98fa301ee459f881064c60a45a99e1388e646e46708d9e255e117bfe289074e11fe47f36d498be20dde3c12b9b92017911eb78731f4399d5b7854949ce2c61fd77fa5d139b3e90772f0b5455d17d04d8f2f7fdbe3376ce578d5cfe2e5f22fd7e91ebbdcd03dd2cbcfa0e61cac13bfa12467dd6e5dfc2db457b2d789dd1d616960c1661a4c5a45e748deb7055d4481fe03bb9a5540338fd547383a53f38c21dc75628fe447dede4d162be212ed84aa3e175a1bd9df628ab1eff47d1c108495f4ab15bd7a8e60aabd06680e18528603781e3385606a498f8a5908e6f93911521b564d9aad465d613f71f787386e874425cf96f52e5f5e47d0119184e0f0f41a3a717fc86f0730bd4245c73243864fb39ab659d18341077a60472a1399ba9858a075d95e3d590b87f9301785022420703cabb7f4db435debf78b531ed16fc70162cbcb96d3ca813348c10e91fdeff881409ae67e94ad5b68226adeaa21d0d3df97e53acca596a90f593e7312326df5e25d31eb9de40b28ece71c4f1d577b3b95f5ec4ce3808b4aa8de6fa6fa4e6fdb4f850d85578f1a3d57fa664114a7215b175b12438c24d921715c5070c2d2aae7dd433a35a439a105c994e6aa170a20f9740e1d2aae4c7a4b6c3055785e48ef1a60a751a4ecc35a3554e593a7a1bedd8af057278eedca6121bba3af76a53277041bb1f2872b34b71339597e63572673bf8cadd7052f093c54d3175cf6e3875d0ccb42e6be805ae29d17baf04a66364dd9609c386741f47d62efccb3ed702b2a97598ce78dd2673852ee5391488b699ec392913b7772e4b7376d01c2547291d95c8c5fcfc48d3b014564dc19e51d26f0a3f86ad04df86cda3cd3789730d8efcb7ee7587e2c2f23be609b553a4622f4cb6544045b79df0b3d970afab54861c7009b432704a3c41584c4e7f456c43b872125fb26f4a3569142f334cafb1b8661cef1a8968a922f6f6c4616fa222053b8d4cacfc651e612847773c19945dcb6c32dd09aa875fa990c3897ffc3f32d022b564073c168c7cf291d901c9db44aad0f035f88f402b1e42dfde0f6f2ebe9caa8cea8e09124827b731395505f75608644bb1deda3f7f2eefe7bc706c30bda12f41be2f16658a4391ecb9d4a2e130e62c8cc51517edfbdd7bc3dfced48d59ad6b93c8ca2bfda723b28c4a982505b1880f9f0e2e9523820a5d2330f178e9357357385f386fdcf9833847bce97baa34c289376a43ebec4a1d1497454ad2aa2aaca9388141f6d31dc69882f3669db7cbf4857253ba1efcc50552259199e864dc419d19e020e1ef29b779ea6b80da902e8c22b8fb276961d734803ecab15afa9953d67359e898dd14747b6086baf456d3452b1aeb72801a1efca1dad546aede85324320eb3c676e5598b1446d1766f6aed6b6206a5d57146c056d966659a72eec8f1ce5a1aaa9b379ee6bd5f7f4d5763bebc75909bec1ad6c8bc1c78ed3a46f99c6aa73e2f2c0ace963f5949d7f75c3b6a22f20e7c8a531b356783441072edc5c4bd3043bca878fdbd8838dde9a09cbf8add5dbd584ea53705b6e23c0df2f0c3a24ef4a98d80c0675739d2270616748586de827051367dbc5ff31621837988050982767cd740672606964eac5421510812d5f52ae1a0f6eb1443a1db1d9a0b140828e71ac7ccdd573f350c69c61b60eac055f32e1a61ddd37fd688d40b94279e101fb2cf882d46d405e01240c023bcd0728508d62cf707b9f07af616a3c0d98b90391e26e2cb838b80eaf7b4a84f10364a1a24dd51eacb2ab97f0fd92ed5cd23a6749c9801dcda14ad5199dc9b30859e753ac0cff2b1353d66fe42f366696f77c767914060623df0e95d23904a767013b06f8877c8c791f557a277f149abea894d958942723df31ada6e852360be373872c3b08fdca0bb2ae1eb7629d4dc9c768a33ac069de96327a278ca879c5d786149e6fa12872188b35655a5a92dc9225e987aea6561c78f11f56ebeb36ba19c8667c24ec7ce4610250dc2d44b89acf6fbeedc0271cd917b79163d084b5d7de523a4f219ca0429f50dfd01781b8144aeb81033ebf6b5182166170452477bc63773c6b386670e36f1e8a54f5466edeac657ab161d2cf58a38d42378aa2c807f4d98d3e76e49c8d287d3d0b33401433e9ce4501ba836db60dd66925815c7e6d7d8b5f5d1f45f0e97ea4d6cb14e44f24ada2adbdc606f4980828c751d06be92abd6a3ca8916486862042dcb06fa87fb285ec337e26e3c4e4fbceb807be95967a916d7f4bf9c2f17e384c361b3c4fabde3ad002a312ddb3a77e85a119f3af5672c404b330fd447e2a8c02be3cef1a7b1d35714cbf115293e91f02ef2bf9f8d908a048c719a8956ffc4d2c48978b2df265977514398160b704743cdad46a0cdec265c81c94c896ab062d871200869064e5e31876299ab975ac4815c37df288e21f5da358692b44d2d32d481693d25d5b0f3cb40f63d305db7756d088ef3ebb8984ef2e93d9030fecdec654d17c543b7b68b9345c1bb0226169639c718ed1cfa2ca4196d4a4349c298a9445d4d1b3c216c1e75f8c5b8a17c8c456be02d7ef20e68af1b5cbfd4b28d56414a82f77b33aa8f7c3766ecd8a00913ebfd9508c2bba2c71b6ea8ed6ccfc027096a665a8055182f24dcbd4c91479dfbe20822150b80602b4372123afb01209c7fa54f486492915ed6a407a2c44034aa20a9a989075f3c2e21e707745468edf0c08757c16aa0e9298b134211fadd0b94f2dfad330eac139d5d81ea250427e2ac3b7225b92360759a889ce6c565431754139a8af9fa8ff563b6cf8b6e6cbc32c8d387e7a1ed785647544462a071082604bc44c9e027e091875d8a230345050ea3c79a6acb533f75559f3ae1b530020e9049658b7a1000a125abaf3837eb8516401ba436c880f89e4ecb5c2991363a0eeaca1f5b619f62a7e793824cac5c1fafb38e3e113f81e5eff92f06c662ccf1a8178f256dfb9197c419cd151b5e4b2268dbabcfce484cd3fed163ffbeb495a39b20f47ffcce70584be007ead29f40f05635e63f64d3634082aaf56e4dfeab5a4ab11efc2a6c5f13254d358a6e80c91cb8a6be4e64a0739f4a648cf52ef9e290b72dadbc07c3bab4189230630801be19e4ef19b64150f7f959f73a5dbc2b52df626a948583c4e418d7a1eac3dfe699bd25c0144f7e49eb9231c8badb9b8c8385eac4b9027a97416b18d05bd0c60d39d807ead780de42930706fb0eaeddcb29407545e79537a16c112b9bb211042e3eaab27178ca8583d3264f0f672311c1e382dfead177dc05f10f2a942900e2cc55736731cf4b78888775239ba2e47889ecb9c7152086bd051b3a7e2efc08345693cbcf948ccc3d334f595e4fad02d6d66061490f0562d8bb6546f092fac149f20e683c346551bd17fa91b45a65f0a08b30cd8caba1c66ce3d561a921c6522e22a138b09c0b91e3959ff9a2a1849c674730c23094944357275c265665c325d28bb9a2b7b09814169828c2e34d7efdafa9495c15d6f74bdb5ce16824ad795c98a73c736bd20fe3ddf8577577be45f276a436de575669bdc8859917c063bfc25fefe56176bb4c00d3d5483a84a3e3adf2b0da356d0aca74b3dceeb694647cf8d3d1f31bfcb0c81d4e5b11e1bba438a8d6796155fed60bf3b48013d89a05def2917e8e164bb362b919c98e47567ee88bb153d47b781376993ba06928fc7125c5e7cd8eeb5d9ebf9b52104490800d69ddbd7458a26c08fa08465d33f08ef9fee54ab25b76a164a33c3b69a40395cbef2462703c0d430653b0b34c8a927957dca2ad0c9ae0710ad9b2f5eed9c55ad8388cb4fb2459404fc1699d853d541364c00028008000180fffffffc0900020073797a310000000008000340000000010900020073797a31000000000900020073797a310000000008000340000000020900020073797a3100000000341002802c0002800900020073797a30000000000900020073797a320000000008000180fffffffe08000180fffffffc0410010068425ad434ea1c3c088c450692e962855c0b709a9fb6c90f615760a362b89004b3481c2af4ca283d536b6ee87fe43804219eb00bf91336ee3776903c1fb5c911093035c4f9dc690ff24988140da4c480ec12eb686fc50529c403fb74261b9a98eae7687e7534b72dc1ca7f140526da7312f1ed4985593e1ed9598efd74ef5da518a1214200e6d0a950382189180ba6c35eaec299952aed778f2fa7e1c6495eb487a4c2cd45b84d924713127450ad6670d3bb60b9bbde9777d4964dec256b69c784fb538cf080325c887d66c878e93ade444395921dcde2fff52a53c84ad7c0a58d83b7723b6f940aa26cf7bd230830a8a04007fd6e326dc006f5914bc07ada82e85ce058ef2d8b0f8127e881d996d410eca32df8b992d8cd73c92a66135a12bba9dd37e46577a0335aafdd56654a3ed2fdc2404d0425fba8fc0d97faa069ddeb0ff3e7cef0b5c28367180d395c71b8bf5581cffb5083db445363bf7b68cda3537f74b8e94c1865b0337df9a0eee158ee29acbb3094464422df683720c41f7e93f8adecc10f9d6623aa84df72908eaad669f9cf7e100aec94812c6c3f67827c3c0b9b12c9a01c273ed5527dcd32ff883e2f131c9ea694f5781a2f90ed28c151fc94f3ac431064346c2629dc9f6cfd544d283e7d07a75324f383943709d3207e7930f46e74497c6bb6f6a60119b3a49ebe3eddb8086fcfe29ed94cfd54d95e25b40468d0c16b08a70fb88b18d48b4e0f92bc0b0d047df5b00326a2f4846564657cc10872757e776e6e302f4e21d106ab21fe5d62e72347b90a0130258f818176513ca28093ef1365ec91bb6f48a31606fd54d6b29c944eb415e74e71c0c32cd32001af5603e56dbfe4d1986a5264ca52005fef0e579f1527c70894215c597ee50b3646d7b0fbbd83978d4d51b704fc24a032a8b9e5d5468c9d993bc1fe2759a0b4069ebdc95b7a19dfdd094079e42b02694ef604828ea645ec42d0c7a4e8cd977226979192d25ec2b74299449514023564ee813d329c4f830dc6b526518fc9a26cee4a817eed78fd742ca41d4f147ae4dd27f38e039e37f4fae59e88c8621259266300abfec0bc6129b2ecc04e0140cef86f64228c9f037f7ba606783d3ff515948e0f98fe85af5239808c6b6c6ea042a9bf579a8f426077649883f799f891ab39a5b6d09e57b8515c76f9ed4998b2291791439feec65cd36ce1220730c37d99ef5a342ea2c9205e353cd0d04b56983cbfc42ea80f96be3a33aefcff7dad7786fbdd96d473cf40488176e5ea86a79851e2ce7794dcd5f66580a42548f120e2e834931a76a99a97caf3b6a7741e70e019f635d6990e4c37be6c439d84a847877e82dd06df509af456796a3c71b58640bbc11fe2c726d91680a21f7ab908b592962d12da434ccf03722d92a528b6df39a00b65bec99288da0c7ea099e485d291b7ef7839bd2f20c676c94d636bbac7ea51883a7f9f5293b6357c5842dae90f533c63ec1ba832f0d470a6a482a6e43a94423ed30b163f51a9a3d5ceb8963f8ded19739e2ecbe40cae176e0b9a9cab3e9750ea165dbe3f6e39562ba8744dc7a7bd662e7f62040bf76d6c8cf8f9f7927fd21055fa6739ac987a2385d8315435afbb14fec736a42686052d6a62fc1dd08459998459407df7ba884a4ab19c756c081de98d854e0a83f03be2f73c146deb0727df3c0a46b60bf74eacb1422867384a43001ba68bda7f7b0c1b9004aef0e9739988dd72ec5e7f66c2bb5f0d8c98ca346b4cf107f692c2e45dae0def7031be04da33c8d5cbc018935ba00b6953a4501080eda6aa2388240ca1b9ea88e113c8b0d4fb06e67cbb4bd566b3b89a140753885e5d7820cb1272b0556d78159cd8eeec44b82ae42a4d458173e1365ccbd435aedd003189548a04b84f1dd07aeb07abba71ca40672d32691b01a9fc0c9362ffbe97bdb3ebc25c7ffccf62081769c24f0776b5d593a2eea40f76e812927037378795679e659265be5beab4a412439dc3d6f165d35561c6e787fe69c6ee5a9615612f923e3a2adfd5b00ce5c1439fe50d1e31357bd1243dd0dfc4a8c41a43453169a0163a7039e8802b5583e9821273bdd08703c5494e9a703db53fc98c032b9d61f995657446602dbfae443244f8124062854e1a699bd267b949dd5332386152a0ec0ec6e34b745aaf5d4e57b2dd7215302a76237d4331d45bcb0efd880d895a502f56d90dc6cd56402cdf1df40bc98e94431f7c5ae8f2ec8930f78df2cfa58e818271ca0527761c48f3a174dc8482b36f4ee966f052e612dec5cebe695f71d93c7161427a245d523091cbf65f784e2aea0f20f7338b14ef35314cba4bf253d2a344d9a2f13bd4de79801d8d95385571cccad43aaa7bd2b767ffc0825ca8822bb0ef6503022145d3959e6c75608a06d4acb219a99cf86a4d0e06378e3691668cca855fb4ddd630343e4b50a1be11d6c50479f511a1aae580fa4fdb5c1ad6482379e486cafbee7421756b1fa2c6a9d3aff6fa7defa6f23d1ab60af9f6ceb9641a5d4c13d369741ec2a39c401a67a023687a8029190c99576ca95c0f917f1a16bd5930451cae57c2ade1775b12ab78f6fcf4d80dc8c56b453319fb8bedaa8dd5fdf9e0352772ecaad649373ee7fd248ea969b44b4795c53f0978e9ff0ac881d493345cf5938a7877f2b498b0569f7d2721ae387748bf367033b9e34a650a67cbd688478741c346fdc444a3aa625724e03f165b6fbdcc3e8055525ab77959696e044ecdfc5e8e347f8b0685cf3b6e64533d9d7a30cc30348a61d43e9a7809c38ac46c6a66056bf878661d700f4ff7f9e16e03805bf257cc7b3fab275de312f5495e5a6b175aa40768406aaef3ed9fb8991e14deb8dc2cc2d5fc1fdf310dfd5cbf35df8938b81985c7ed279ccc3d95b3c6834c93c8e4f8a644fe864b605b5dadd28d0891ba9952f51a82c22d4691a3f2d7e6445cf68e6b49c700622140e716d71558f6893e810f259905e25d2dd0e5bccd388348fb9ec345546420268a71205f772f96787a2f930a20ef67c740b2e73a9604bdaa7f72d7bc4dd2bec295386329d777510511850e8d8db05f98013e70d3f5601aa8c3e129b63286f53c319c32fdb261c2882575e5435bc849f3cf93fddb1ddd523833ecb175465e50d543389adf3e90aefebdabf08e87bbf39f34faf057ed74d48d62999080e7ad98692b5b414acb84b3dc234c2e2baaf4bfc8b4f31c676615292ea5c1d677bed03f2b31509522e44a0d79e2bbfd71956a9a8b55929804316ce8f932d5b183d3d5f45e2a02cffb409108ab48a6ba28db8349d7ec1f6c3472d606fea25c43377514d29d896168eb1551cbcb26f17ddf6b3d6b82c40791ea870c527479e4734d405010dc53fb894ad72b85961b6412e107f7006140f21244c7f1afbf9187c8ea76c94c7658bfccfdf7f03502c72ec99a692e4919d540b05a26cc505eced7f154c1a6aceb86abcc46d1ef414fd036ced48c7bbe33242ec1c0a61c150dcfbb3a254dd4b249fe9715d16f513a48cbbe642868fbf6002be2b5c100ecc926467ce161c1409f3d053e61bc2e76bc5cce26e08d442c5142cb837f228ae2e0229aef8aae81fc4f76410d5c8a6cb5e2258d34f55602c5550e669fb4e95f81c43d4613ef87d36aa835045e5523c99ed74efe9ecd29eaf04504ae22fcb0694311639e9f72356786aaa7baff14b693cd411e594763ac78e0c3c58a281902092a2f84a752b352db8a1d9d90c264511f66958b2c926a3a3a67ecdc19e9af50cd23be4d7a140b57df8e4361bc9ea0e4d1d0826a59e37ce26d38f69208fcb2a4e43c4c2b913278919acb508a01ec18c6b21c568ee0ddfd8a59a403d9bb6c68997f55373ded937b2238aca248a5448d38ef3d94903c62c55a15b49bf2fbe6d2acd62cfcbabba37ab1fb26be8b388e0c8d3952f1daab550a6f1121d9a17c7612571d481f803ef7dc1213396982dffd8032834c6a06977f33e677caf01e0a3fe97968bfed16113eaa3cb5539a9947007ef27a0e7f81e936a17743c609dd2ff5b643989d2b39e88e1eb5d7825a715ff06dc7351c1f34afccca1c29274f5f9ad7677bccbcfce7df30bf217cb80bf416204bfe4c17a4113fa4c449bc7616722f28c695bd085fc860dd163d102fc616dfe9e4efe1d6cf06f3353ce6da2966308029d312bad7cf25c69d1af1f73fd680f370e7c8f5b007721d0e12e3cf064e149193d69fd30590cf73532a3ddb698057d545b73fc404eb53a10074831a390ee33bb78955299ffd2518054d3c23612bf4b2c8e4ca9c0c2fc3e8853de3e0454094cce9e832598ab1bfb29da9cb15be0c604d48bce4465e97efb60ccb688ed26d8db1a0be274e995a3ac1d2a480ba2914eeb6201158cba207b9d575661237ab54c57cfdc27fdf4334c6feca9862b7e2030e1b91b1e5ba54f9f95fc81b63e128c525f4de12f7a9153fba243a7b4b19789e916df762d330afe1891cd587c2e6d2c77193ca09ab7f1055ea242f2c97b365ab1bd1854b903394565d662d07002e56337438db994e32f2396da5666ba46d85d1212f95df66dffcf6296d294a92d2bb0560a80d72f1f32534aec5d160ee6eeca4ded6f6e4f6066990bd61de8e65a5c7469a408495846383526667ac5754125d9bca82db9c5a26ac0a560894e8ba751af433f0656dc806e838c0f66017d8af30cf4180e4b09b4eaf18919daf28036f1997c8ccb5e13c397e9c8582312f0315301a12d23fd8ae64e22a979d872cb935561c10d488cce885c75dc35c4f276138f6378d54888afcd1d01de01b0839aa83918480842ee9cf2dd9d437f03bdb2f9c4aaba42374119643131bd7395721f2160a97a9d05671ca921ec5f2c7c6123c15816b0e7112bd83b9ff923e21c5a66f5ebc42db1088c8e32e5fce3fec85e2de8288c79265a6a2cf6b5227e93a708395cbbce46cf89610ab22dbe3d5592c4bc74addb01b80f40bbe0997367452891a1d65855fd3079d8ba2ff6531f19b771b9f956bde26832573765a3289469ca393327e788d1bf355ee5632f6d2d1f42286e0f94b9ae8a3d82d63790d5b55cf0944e6defd4461d5578483a0df7e8ce5c7ec036df0706d0d83f5a64025d13d85f7b5493d241356ca5b95024e6207429ceac4501b604acfd9b85269f4b48b4648993307a7798a04763dbae4868290d07ec4d44f688ff1d1c84112302ec5c98b44bca469010ad85c44e29b5f309d4edda9ded7dc1c2af94dc9e2af3c6d9ad89a682dd84ae86946e70c34919cc7eec59009b9275e5262cb5e6dc26d833827582d0707e8c40748aebb71779d4ce4aa0c4b24b5bc9c0e6a4d51635a69415a046400abe1ef3299114e43e58a9f8bcf5e825ba47f21cd8311a03158532dbf3655c3981ea2784af5c8e017011d73a66994a02fac074700b75099bcb1d3bbce52281f3ffa3eb5589bfeab43f615c92088adbc202630f7b2d383dc1b57b94e8aec309ce06a742d92cab38bb1f1a2085929938c38eadc4cc7a7d8ee953166b6bbae58b910d785a5396b10933b34468159512c7482a75f71e23776bb0be926d809949e132d7fa6c74368ff58bd86aa7e4caeca4a4bbc73c0ba991c1cab9b1c9000425a34eb65d6980d32393bcdd696ca3404cb5d34ea908f114020f79b6f9630626de4cfe0994363abefd6e2508c56919b5c0c5f4969e237850fb2ecd130820ee160008246a245a8d2a7a5131ea7d525fc5f20f72cc6bd1e04b30520c056a30e588a619da3214aee7f8ac6ecb0b921375b1e0494af1d0181fbd2bc5b46bda4eddef8907dda9f2f7c00018011000100666c6f775f6f66666c6f616400000000640002800900010073797a32000000000900010073797a32000000000900010073797a31000000000900010073797a32000000000900010073797a32000000000900010073797a32000000000900010073797a30000000000900010073797a3100000000140001800d00010073796e70726f7879000000000900010073797a30000000000900020073797a3200"], 0x34dc}}, 0x0) 2.038094649s ago: executing program 3 (id=3436): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) msgsnd(0x0, 0x0, 0x8, 0x0) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000200)={0x40, 0x15, 0x4, 'a@ro'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000012c0)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000100)="820ab12ee518464ac6", 0x9}], 0x1, &(0x7f0000000580)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r3, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0x41}]) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)={0x0, 0xd, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000a00)={0x0, 0x0, 0x4, "1b2ee791"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000840)={0x20, 0xc, 0x4, "f4950fe2"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x10, &(0x7f0000000140)={0x20, 0x0, 0x4, "bd823f9d"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000740)={0x40, 0x8, 0x4d, "1497910b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x5, &(0x7f0000000240)='B', 0x1) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x18, &(0x7f0000000500)={0x40, 0x10, 0x4, "e8ba7de6"}, 0x0, 0x0, 0x0, 0x0}) 1.336114407s ago: executing program 2 (id=3437): socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='map_files\x00') syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86ddf9fffffffffffffffc010000000000000000000000000000fe80000000000000"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.026784075s ago: executing program 0 (id=3438): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000002b80)=ANY=[], 0x130) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000240)=0x3, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x6, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r2, @ANYBLOB="02000000000000000a00020005c702673b892c1952af9eb984db0180"], 0x34}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000100)={@loopback, 0x4c, r2}) 541.493837ms ago: executing program 0 (id=3439): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0003040000002203"]}, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xff}}) syz_usb_control_io$uac1(r1, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB]}, 0x0) 436.099978ms ago: executing program 1 (id=3440): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_012={0x1, 0x2, 0x0, 'W'}, @main=@item_012={0x2, 0x0, 0xb, "c11d"}]}}, 0x0}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000080)=0x2, 0x4) sendmsg$can_raw(r3, &(0x7f0000000300)={&(0x7f0000000800)={0x1d, r1}, 0x10, &(0x7f0000000880)={&(0x7f0000000840)=@can={{}, 0x0, 0x0, 0x0, 0x0, "ded27feeba7ca62a"}, 0x10}}, 0x0) r4 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="c2f624", 0x3, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000380)={'sit0\x00', r1, 0x1, 0x20, 0x5, 0x1eb3, {{0xa, 0x4, 0x1, 0x3f, 0x28, 0x68, 0x0, 0x4, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp={0x44, 0x8, 0x6b, 0x0, 0x4, [0x200]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}}) sendmsg$TEAM_CMD_NOOP(r5, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x140, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r1}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0x9c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xd4, 0xd, 0x5, 0x2}, {0x800, 0x7, 0x3, 0xffff}, {0x6, 0x8, 0x7, 0x1fb}, {0xb16, 0x3, 0x2, 0x7fff}, {0x6, 0x13, 0xf5, 0x6}]}}}]}}]}, 0x140}, 0x1, 0x0, 0x0, 0x10}, 0x48000) mkdir(&(0x7f0000000100)='./file0\x00', 0x6) keyctl$update(0x2, r4, &(0x7f00000000c0)="ae74b5a2", 0x4) 299.020819ms ago: executing program 2 (id=3441): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f000060c000/0x4000)=nil, 0x4000, 0x16) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f00006c9000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000b80)=0x5e6de1f3) sendto$inet6(r0, 0x0, 0x0, 0x24044005, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @loopback}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000024000000000011907800000000000000004e244e20001090780200000000000000d4a9f379b278a9914919580a4799fc0e6b2e0a0e5d7ab27ba8a133fb0da791c3944817cd279e00000000cc96c6febb9a2d4521c74dce82d5266bba69d07facad890c3f377c"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2000}, 0x10, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x18d) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x2000, r2}, 0x0) landlock_restrict_self(r1, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r3, &(0x7f0000000600)=[{&(0x7f0000000240)="01000000", 0x4}, {&(0x7f0000000280)="f697079a161cfb7702311e629acda76933ddd0c24174eb4d4d28f9", 0x1b}, {&(0x7f00000002c0)="c27d037369597e0a4e", 0x9}], 0x3, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000040), 0x12) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}}) inotify_init1(0x800) r7 = openat$cgroup_freezer_state(r4, &(0x7f0000000380), 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x0) write$cgroup_freezer_state(r7, 0x0, 0x0) 179.030128ms ago: executing program 2 (id=3442): syz_open_dev$tty1(0xc, 0x4, 0x1) fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d4f7713b71725b2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value}, 0x90) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f00000013c0)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x23, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae06}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xab2c21f0}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9b5}, @map_idx={0x18, 0x7}, @generic={0x9, 0xb, 0xf, 0xe4da, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0xb035, 0x0, 0x0, 0x40f00, 0x3f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0xe, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], &(0x7f00000008c0)=[{0x5, 0x1, 0xb, 0x3}], 0x10, 0xfffffd4f, @void, @value}, 0x94) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0x108, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffcd, 0xffffffffffffff2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async, rerun: 64) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xa6, 0xd6, 0xb7, 0x40, 0x6cd, 0x10c, 0xaf0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb6, 0x7e, 0xbb}}]}}]}}, 0x0) (async, rerun: 64) epoll_create1(0x0) r2 = socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) (async) r4 = dup2(r3, r2) ioctl$SIOCGETVIFCNT(r4, 0x89e0, 0x0) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @void, @value, @void, @value}, 0x50) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socket$netlink(0x10, 0x3, 0x0) (async) pipe(&(0x7f0000000100)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000002c00)={'ip6gretap0\x00', 0x0}) (async) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) (async) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x4b3, 0x3103, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x3, 0x44, {0x9, 0x21, 0x1, 0x8, 0x1, {0x22, 0x87}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x3d, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x4, 0x6}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x310, 0x2, 0x5, 0x6, 0x8}, 0x12, &(0x7f0000000300)={0x5, 0xf, 0x12, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x20, 0x5, 0x1, 0x7fff}]}, 0x1, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x3c0a}}]}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) 0s ago: executing program 2 (id=3443): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x28, 0x3, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x3}, @CTA_FILTER_REPLY_FLAGS={0x8}]}]}, 0x28}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @value=0xe82}) add_key$user(&(0x7f0000000200), &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000480)="a64547f02d24ef452b126e6b4ee0848331045276a2dada029f6feb61fefcc850639a2d2217a4c525abf430b2ff722f5cebae237de618f52f93495a5cdaa00f30b4da4148d4e0cad2831de99f500b35d48bbf6a414bfbeb4c4612", 0x5a, 0xffffffffffffffff) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r2 = epoll_create1(0x0) ppoll(&(0x7f00000002c0)=[{r2, 0x481}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000140)={0xc0000015}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d972a440b72040150500000003010902120001000000000904000000ff000000"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0xc0, 0x31, 0x7, {0x7, 0x30, "9105a623eb"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000100)={0x0, 0x22, 0x8, {[@global=@item_4={0x3, 0x1, 0x1, "abf90e09"}, @local=@item_012={0x0, 0x2, 0x8}, @local=@item_012={0x1, 0x2, 0x4, '('}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfffb, 0x81, 0x1, {0x22, 0xa35}}}}, &(0x7f0000000400)={0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="00146200000048774b6e57fe43140e421a173e21acdc7e44b510075770a13c4d0ecc9cf47a24ad51424b7cf249c9cf23ce9b1c0aeae630baee401d033cabe27573b4264a7bb1880460d825087b8004d1bdf6b13488e3bdfa10747b4a9e1f099bd9214073c1ed12cf"], &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6b}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000300)={0x20, 0x1, 0xa5, "17f4f67eac956409723eb4f9ff6bc9dd1008668e06ea494aab3434bf922d505c71fe38c85b7b2827a968bae539b7309010ec51c5c403f3162c5e850c325fe9615d01c3da5ade143842a6d2b4a154161132b9b54d7f8867fdff5c21695a38d88c4176e5f72b081785e8665ebc7674664d7dc2bcfce9caeba4b48346c5f87fd948db8728a97e1046461bf806fb1197a87f327576bd93e21054186eeee85215695211e0aa2a4d"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x5}}) kernel console output (not intermixed with test programs): adv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.891597][T16850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.906810][T16850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.933624][T16850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.980381][T13978] usb 3-1: config 1 interface 0 has no altsetting 0 [ 736.989885][T13978] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 736.999157][T16630] veth1_macvtap: entered promiscuous mode [ 737.021860][T13978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.028406][T16698] 8021q: adding VLAN 0 to HW filter on device team0 [ 737.036586][T13978] usb 3-1: Product: syz [ 737.036611][T13978] usb 3-1: Manufacturer: syz [ 737.036632][T13978] usb 3-1: SerialNumber: syz [ 737.100372][T16630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.113315][T16630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.123471][T16630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.134192][T16630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.146432][T16630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 737.157688][T16850] hsr_slave_0: entered promiscuous mode [ 737.164184][T16850] hsr_slave_1: entered promiscuous mode [ 737.171000][T16850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 737.178782][T16850] Cannot create hsr debugfs directory [ 737.220805][ T2582] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.228038][ T2582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 737.283911][T16630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.299910][T16630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.310610][T16630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.321766][T16630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.333660][T16630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 737.349570][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.356774][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 737.373445][ T1068] bridge_slave_1: left allmulticast mode [ 737.379758][ T1068] bridge_slave_1: left promiscuous mode [ 737.385574][ T1068] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.395138][ T1068] bridge_slave_0: left allmulticast mode [ 737.402232][ T1068] bridge_slave_0: left promiscuous mode [ 737.410581][ T1068] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.681426][T13978] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 86 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 737.881149][ T1068] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 737.892349][ T1068] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 737.904447][ T1068] bond0 (unregistering): Released all slaves [ 737.917807][T16630] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.926918][T16630] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.935645][T16630] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.945665][T16630] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.112101][T10841] Bluetooth: hci2: command tx timeout [ 738.252099][T16771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.266527][ T5284] usb 3-1: USB disconnect, device number 86 [ 738.441048][T16874] usblp0: removed [ 738.530996][ T1068] hsr_slave_0: left promiscuous mode [ 738.541867][ T1068] hsr_slave_1: left promiscuous mode [ 738.555475][ T1068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 738.578354][ T1068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 738.592497][ T1068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 738.604379][ T1068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 738.635809][ T1068] veth1_macvtap: left promiscuous mode [ 738.642850][ T1068] veth0_macvtap: left promiscuous mode [ 738.649991][ T1068] veth1_vlan: left promiscuous mode [ 738.655433][ T1068] veth0_vlan: left promiscuous mode [ 739.715545][ T1068] team0 (unregistering): Port device team_slave_1 removed [ 739.844003][ T1068] team0 (unregistering): Port device team_slave_0 removed [ 740.177891][T10841] Bluetooth: hci2: command tx timeout [ 740.475514][ T1068] team0 (unregistering): Port device batadv0 removed [ 740.838333][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.853426][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.891176][T16771] 8021q: adding VLAN 0 to HW filter on device team0 [ 740.952548][T16698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 740.990697][T16698] veth0_vlan: entered promiscuous mode [ 741.075803][T16698] veth1_vlan: entered promiscuous mode [ 741.114798][T16938] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3248'. [ 741.135215][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.142461][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.162699][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.169924][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.209956][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.246040][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.296554][T16771] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 741.309445][T16771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 741.338935][T16698] veth0_macvtap: entered promiscuous mode [ 741.349187][T16771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 741.397974][T16771] veth0_vlan: entered promiscuous mode [ 741.409864][T16771] veth1_vlan: entered promiscuous mode [ 741.420464][T16698] veth1_macvtap: entered promiscuous mode [ 741.639131][T16771] veth0_macvtap: entered promiscuous mode [ 741.648930][T16771] veth1_macvtap: entered promiscuous mode [ 741.665211][T16771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 741.676037][T16771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.686054][T16771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 741.698140][T16771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.711268][T16771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 741.722253][T16771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 741.733021][T16771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.743391][T16771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 741.754138][T16771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.766416][T16771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 741.817024][T16850] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 741.865555][T16771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.874822][T16771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.883975][T16771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.892797][T16771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.913456][T16698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 741.946097][T16698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.965788][T16698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 741.981529][T16698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.991845][T16698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 742.010919][T16698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.024352][T16698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 742.066493][T16850] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 742.104753][T16698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 742.125726][T16698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.136174][ T5295] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 742.144612][T16698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 742.157118][T16698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.167928][T16698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 742.179905][T16698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.195407][T16698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 742.210210][T16850] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 742.233189][T16850] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 742.252940][T16698] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.265890][T10841] Bluetooth: hci2: command tx timeout [ 742.271475][T16698] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.282695][T16698] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.286108][ T5295] usb 3-1: Using ep0 maxpacket: 32 [ 742.291554][T16698] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.308590][ T5295] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 742.321472][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.322108][T15265] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 742.330171][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.354460][ T5295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 742.384414][ T5295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 742.401921][ T5295] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 742.434569][ T5295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.455699][ T5295] usb 3-1: config 0 descriptor?? [ 742.462040][T16953] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 742.498618][ T5295] hub 3-1:0.0: USB hub found [ 742.529515][T15265] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.05 [ 742.535302][ T1068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.541293][T15265] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 742.573941][ T1068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.586261][T15265] usb 1-1: SerialNumber: syz [ 742.614255][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.652366][T15265] usb 1-1: config 0 descriptor?? [ 742.659563][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.739061][ T5295] hub 3-1:0.0: 2 ports detected [ 742.755210][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.784050][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.861000][T16850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.962280][T16850] 8021q: adding VLAN 0 to HW filter on device team0 [ 743.022471][ T2935] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.029688][ T2935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 743.064686][ T2582] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.071942][ T2582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 743.226483][ T5286] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 743.285188][T15265] usb 1-1: Firmware version (0.0) predates our first public release. [ 743.303432][T15265] usb 1-1: Please update to version 0.2 or newer [ 743.412478][ T5286] usb 2-1: Using ep0 maxpacket: 16 [ 743.433781][ T5286] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 743.474814][T16850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 743.495513][ T5286] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 743.541000][ T5286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.576608][T15265] usb 1-1: USB disconnect, device number 64 [ 743.612853][ T5286] usb 2-1: config 0 descriptor?? [ 743.665366][ T5286] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input82 [ 743.787318][ T5288] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 743.861620][T16850] veth0_vlan: entered promiscuous mode [ 743.892578][T16850] veth1_vlan: entered promiscuous mode [ 743.973525][T16991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.989804][T16850] veth0_macvtap: entered promiscuous mode [ 744.004363][ T5288] usb 4-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 744.014429][T16850] veth1_macvtap: entered promiscuous mode [ 744.029433][T16991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.046113][ T5288] usb 4-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 744.082011][ T5288] usb 4-1: config 4 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 116 [ 744.098422][T16850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.119537][ T5288] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 744.139074][T16850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.153504][T16850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.164493][T16850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.164847][ T5288] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 744.196071][T16850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.200514][ T5288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.223103][T16989] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 744.232675][T16850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.262844][T16850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.278882][T16850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.298102][T16850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 744.329377][ T4668] bcm5974 2-1:0.0: could not read from device [ 744.348338][T16975] bcm5974 2-1:0.0: could not read from device [ 744.372647][ T5286] usb 2-1: USB disconnect, device number 39 [ 744.374106][T16850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 744.414085][T16850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.441213][T16850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 744.463190][T16850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.473345][T16850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 744.490083][T16850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.504831][T16850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 744.516615][T16850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.538312][T16850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 744.582433][T16850] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.594220][T16850] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.616658][T16850] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.625445][T16850] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.671011][ T5288] ath6kl: Failed to submit usb control message: -71 [ 744.680402][ T5288] ath6kl: unable to send the bmi data to the device: -71 [ 744.688046][ T5288] ath6kl: Unable to send get target info: -71 [ 744.703722][ T5288] ath6kl: Failed to init ath6kl core: -71 [ 744.720720][ T5288] ath6kl_usb 4-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 744.772511][ T5288] usb 4-1: USB disconnect, device number 95 [ 744.824764][ T2582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.838407][ T2582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.866382][ T1068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.874368][ T1068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.027838][T17003] bond_slave_0: entered promiscuous mode [ 745.033573][T17003] bond_slave_1: entered promiscuous mode [ 745.040547][T17003] vlan2: entered promiscuous mode [ 745.045630][T17003] bond0: entered promiscuous mode [ 745.051651][T17003] vlan2: entered allmulticast mode [ 745.058674][T17003] bond0: entered allmulticast mode [ 745.064187][T17003] bond_slave_0: entered allmulticast mode [ 745.086612][T17003] bond_slave_1: entered allmulticast mode [ 745.106895][T17003] bond0: left allmulticast mode [ 745.111867][T17003] bond_slave_0: left allmulticast mode [ 745.118736][T17003] bond_slave_1: left allmulticast mode [ 745.124446][T17003] bond0: left promiscuous mode [ 745.131455][T17003] bond_slave_0: left promiscuous mode [ 745.137104][T17003] bond_slave_1: left promiscuous mode [ 745.347094][T16953] netlink: 'syz.2.3251': attribute type 29 has an invalid length. [ 745.378040][T16953] netlink: 'syz.2.3251': attribute type 29 has an invalid length. [ 745.419671][T16992] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 745.419997][ T5313] usb 3-1: USB disconnect, device number 87 [ 745.693702][T17022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3260'. [ 745.707928][ T5285] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 745.899872][ T5285] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 745.916062][ T5285] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 745.930920][ T5285] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 745.948759][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 745.957907][ T5285] usb 4-1: SerialNumber: syz [ 746.184924][ T5285] usb 4-1: 0:2 : does not exist [ 746.239881][T17033] syz.2.3264 (17033): drop_caches: 2 [ 746.254736][T17033] syz.2.3264 (17033): drop_caches: 2 [ 746.376185][T15265] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 746.393940][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 746.419979][ T5285] usb 4-1: USB disconnect, device number 96 [ 746.458357][ T5253] udevd[5253]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 746.536313][T15265] usb 1-1: Using ep0 maxpacket: 32 [ 746.543245][T15265] usb 1-1: config 7 has an invalid interface number: 75 but max is 0 [ 746.552186][T15265] usb 1-1: config 7 has no interface number 0 [ 746.558423][T15265] usb 1-1: config 7 interface 75 altsetting 1 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 746.569491][T15265] usb 1-1: config 7 interface 75 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 746.580240][T15265] usb 1-1: config 7 interface 75 has no altsetting 0 [ 746.589274][T15265] usb 1-1: New USB device found, idVendor=3275, idProduct=0085, bcdDevice=17.a0 [ 746.598563][ T5313] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 746.599069][T15265] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.619359][T15265] usb 1-1: Product: syz [ 746.623610][T15265] usb 1-1: Manufacturer: syz [ 746.629560][T15265] usb 1-1: SerialNumber: syz [ 746.766181][ T5313] usb 5-1: Using ep0 maxpacket: 16 [ 746.787037][ T5313] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 746.801604][ T5313] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 746.812178][ T5313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.842017][ T5313] usb 5-1: config 0 descriptor?? [ 746.871069][ T5313] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input83 [ 747.020148][T15265] em28xx 1-1:7.75: New device syz syz @ 480 Mbps (3275:0085, interface 75, class 75) [ 747.057190][T15265] em28xx 1-1:7.75: Video interface 75 found: isoc [ 747.117806][T15265] em28xx 1-1:7.75: unknown em28xx chip ID (0) [ 747.153898][ T2582] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.215353][T17051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.229024][T15265] em28xx 1-1:7.75: reading from i2c device at 0xa0 failed (error=-5) [ 747.247911][T17051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.266237][T17050] binder: BINDER_SET_CONTEXT_MGR already set [ 747.275933][T15265] em28xx 1-1:7.75: board has no eeprom [ 747.289485][T17050] binder: 17049:17050 ioctl 4018620d 200001c0 returned -16 [ 747.322394][ T2582] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.371553][ T4668] bcm5974 5-1:0.0: could not read from device [ 747.376439][T15265] em28xx 1-1:7.75: Identified as PLEX PX-BCUD (card=98) [ 747.410975][T15265] em28xx 1-1:7.75: Currently, V4L2 is not supported on this model [ 747.420919][T17053] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1135657877 (1135657877 ns) > initial count (827395580 ns). Using initial count to start timer. [ 747.442781][ T5288] em28xx 1-1:7.75: Binding DVB extension [ 747.450080][ T5288] em28xx 1-1:7.75: no endpoint for DVB mode and transfer type 0 [ 747.458616][T17043] bcm5974 5-1:0.0: could not read from device [ 747.468020][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.474575][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.495098][T15265] usb 1-1: USB disconnect, device number 65 [ 747.503697][T15265] em28xx 1-1:7.75: Disconnecting em28xx [ 747.506250][ T4668] bcm5974 5-1:0.0: could not read from device [ 747.509504][ T5288] em28xx 1-1:7.75: failed to pre-allocate USB transfer buffers for DVB. [ 747.559857][ T5313] usb 5-1: USB disconnect, device number 83 [ 747.584052][ T5288] em28xx 1-1:7.75: Remote control support is not available for this card. [ 747.605579][ T5248] bcm5974 5-1:0.0: could not read from device [ 747.609858][ T2582] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.634180][T15265] em28xx 1-1:7.75: Closing input extension [ 747.646983][ T4668] bcm5974 5-1:0.0: could not read from device [ 747.714141][T15265] em28xx 1-1:7.75: Freeing device [ 747.852928][T17063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3273'. [ 747.882410][ T2582] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.165475][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 748.179145][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 748.192612][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 748.210774][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 748.220872][ T5236] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 748.229784][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 748.330606][ T2582] bridge_slave_1: left allmulticast mode [ 748.337410][ T2582] bridge_slave_1: left promiscuous mode [ 748.343200][ T2582] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.367203][ T2582] bridge_slave_0: left allmulticast mode [ 748.372935][ T2582] bridge_slave_0: left promiscuous mode [ 748.378972][ T2582] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.487106][T13978] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 748.663354][T13978] usb 1-1: Using ep0 maxpacket: 32 [ 748.671635][T13978] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 748.693802][T13978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 748.719746][T13978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 748.752528][T13978] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 748.767168][T13978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.797889][T13978] usb 1-1: config 0 descriptor?? [ 748.820405][T17071] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 748.834676][T13978] hub 1-1:0.0: USB hub found [ 749.065688][T13978] hub 1-1:0.0: 2 ports detected [ 749.083955][ T2582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 749.102135][ T2582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 749.115783][ T2582] bond0 (unregistering): Released all slaves [ 749.367090][T17077] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3277'. [ 749.754487][T17082] netlink: 'syz.3.3277': attribute type 29 has an invalid length. [ 749.776925][T17077] netlink: 'syz.3.3277': attribute type 29 has an invalid length. [ 749.914723][T17054] coredump: 42(syz.2.3269): interrupted: fatal signal pending [ 749.930158][ T2582] hsr_slave_0: left promiscuous mode [ 749.969072][T17054] coredump: 42(syz.2.3269): written to core: VMAs: 31, size 97292288; core: 55590590 bytes, pos 92905472 [ 749.980536][ T2582] hsr_slave_1: left promiscuous mode [ 750.009361][ T2582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 750.051397][ T2582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 750.094554][ T2582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 750.126209][ T2582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 750.172199][T17103] syz.4.3282 (17103): drop_caches: 2 [ 750.181699][ T2582] veth1_macvtap: left promiscuous mode [ 750.216301][ T2582] veth0_macvtap: left promiscuous mode [ 750.248021][ T2582] veth1_vlan: left promiscuous mode [ 750.264877][ T2582] veth0_vlan: left promiscuous mode [ 750.311829][T17103] syz.4.3282 (17103): drop_caches: 2 [ 750.336492][ T5236] Bluetooth: hci1: command tx timeout [ 750.513515][T17110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3284'. [ 750.922410][T17115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3285'. [ 751.254633][ T2582] team0 (unregistering): Port device team_slave_1 removed [ 751.320092][ T2582] team0 (unregistering): Port device team_slave_0 removed [ 751.326387][ T5287] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 751.466096][ T5287] usb 4-1: device descriptor read/64, error -71 [ 751.706145][ T5287] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 751.836155][ T5287] usb 4-1: device descriptor read/64, error -71 [ 751.957464][ T5287] usb usb4-port1: attempt power cycle [ 752.003368][T17071] netlink: 'syz.0.3274': attribute type 29 has an invalid length. [ 752.028242][T17072] chnl_net:caif_netlink_parms(): no params data found [ 752.064329][T17124] netlink: 'syz.0.3274': attribute type 29 has an invalid length. [ 752.098768][ T5288] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 752.132635][ T5288] usb 1-1: USB disconnect, device number 66 [ 752.288731][T17072] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.322911][T17072] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.342652][ T5287] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 752.363819][T17072] bridge_slave_0: entered allmulticast mode [ 752.373413][T17072] bridge_slave_0: entered promiscuous mode [ 752.403563][ T5287] usb 4-1: device descriptor read/8, error -71 [ 752.411002][T17072] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.428111][ T5236] Bluetooth: hci1: command tx timeout [ 752.439578][T17072] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.449676][T17072] bridge_slave_1: entered allmulticast mode [ 752.461785][T17072] bridge_slave_1: entered promiscuous mode [ 752.531512][T17072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 752.553336][T17072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 752.676067][ T5287] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 752.723647][ T5287] usb 4-1: device descriptor read/8, error -71 [ 752.753305][ T2582] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.849599][T17072] team0: Port device team_slave_0 added [ 752.867276][ T5287] usb usb4-port1: unable to enumerate USB device [ 752.926868][ T2582] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.971615][T17072] team0: Port device team_slave_1 added [ 753.065984][T13978] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 753.095180][ T2582] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.181918][ T2582] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.198841][T17072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 753.206486][T17072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 753.233473][T13978] usb 1-1: Using ep0 maxpacket: 16 [ 753.238821][T17072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 753.252475][T13978] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 753.253761][T17072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 753.274308][T13978] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 753.287487][T17072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 753.313840][T13978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.344024][T17072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 753.362457][T13978] usb 1-1: config 0 descriptor?? [ 753.399801][T13978] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input84 [ 753.530065][T17072] hsr_slave_0: entered promiscuous mode [ 753.547228][T17072] hsr_slave_1: entered promiscuous mode [ 753.563840][T17072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 753.583630][T17072] Cannot create hsr debugfs directory [ 753.670045][T17155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.710631][T17155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.840095][T10841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 753.850915][T10841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 753.865163][T10841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 753.886697][T10841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 753.892828][ T4668] bcm5974 1-1:0.0: could not read from device [ 753.919121][ T2582] bridge_slave_1: left allmulticast mode [ 753.924844][ T2582] bridge_slave_1: left promiscuous mode [ 753.940354][ T2582] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.951591][T10841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 753.962055][T13978] usb 1-1: USB disconnect, device number 67 [ 753.972282][T10841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 753.980779][T17146] bcm5974 1-1:0.0: could not read from device [ 753.997368][ T4668] bcm5974 1-1:0.0: could not read from device [ 754.011757][ T2582] bridge_slave_0: left allmulticast mode [ 754.011821][ T5253] bcm5974 1-1:0.0: could not read from device [ 754.024025][ T2582] bridge_slave_0: left promiscuous mode [ 754.032952][ T2582] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.479240][T17174] syz.4.3295 (17174): drop_caches: 2 [ 754.497392][ T5236] Bluetooth: hci1: command tx timeout [ 754.559186][T17174] syz.4.3295 (17174): drop_caches: 2 [ 754.914507][ T2582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 754.927008][ T2582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 754.939592][ T2582] bond0 (unregistering): Released all slaves [ 755.181444][T17185] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3300'. [ 755.409991][ T2582] hsr_slave_0: left promiscuous mode [ 755.424775][ T2582] hsr_slave_1: left promiscuous mode [ 755.431167][ T2582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 755.436475][ T5285] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 755.438856][ T2582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 755.446275][ T5313] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 755.461890][ T2582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 755.469732][ T2582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 755.498903][ T2582] veth1_macvtap: left promiscuous mode [ 755.504606][ T2582] veth0_macvtap: left promiscuous mode [ 755.511477][ T2582] veth1_vlan: left promiscuous mode [ 755.517860][ T2582] veth0_vlan: left promiscuous mode [ 755.629715][ T5313] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 755.645602][ T5313] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 755.659957][ T5313] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 755.669313][ T25] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 755.677291][ T5285] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 755.686613][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.694973][ T5313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.706328][ T5285] usb 5-1: config 0 descriptor?? [ 755.718873][ T5313] usb 1-1: config 0 descriptor?? [ 755.730473][ T5285] cp210x 5-1:0.0: cp210x converter detected [ 755.741007][ T5313] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 755.826813][ T25] usb 4-1: device descriptor read/64, error -71 [ 755.942174][ T5285] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 755.970692][ T5285] cp210x 5-1:0.0: querying part number failed [ 755.986037][ T5285] usb 5-1: cp210x converter now attached to ttyUSB0 [ 755.986234][T17186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.042376][T17186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.096163][ T25] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 756.101149][ T5236] Bluetooth: hci3: command tx timeout [ 756.141717][T17186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.150791][T17186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.167830][T17188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.185167][T17186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.194059][T17188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.216554][T17186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.231088][ T5313] usb 1-1: USB disconnect, device number 68 [ 756.276088][ T25] usb 4-1: device descriptor read/64, error -71 [ 756.364314][ T2582] team0 (unregistering): Port device team_slave_1 removed [ 756.385533][ T25] usb usb4-port1: attempt power cycle [ 756.429829][ T2582] team0 (unregistering): Port device team_slave_0 removed [ 756.576066][ T5236] Bluetooth: hci1: command tx timeout [ 756.760484][ T25] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 756.796232][ T25] usb 4-1: device descriptor read/8, error -71 [ 757.045980][ T25] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 757.067361][ T25] usb 4-1: device descriptor read/8, error -71 [ 757.101152][T17198] tc_dump_action: action bad kind [ 757.103996][ T5288] usb 5-1: USB disconnect, device number 84 [ 757.114965][ T5288] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 757.124418][ T5288] cp210x 5-1:0.0: device disconnected [ 757.176684][ T25] usb usb4-port1: unable to enumerate USB device [ 757.488736][T17163] chnl_net:caif_netlink_parms(): no params data found [ 757.652621][T17072] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 757.668475][T17072] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 757.692455][T17072] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 757.804731][T17072] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 757.827303][T17163] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.854013][T17163] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.880064][T17163] bridge_slave_0: entered allmulticast mode [ 757.897591][T17163] bridge_slave_0: entered promiscuous mode [ 757.915157][T17163] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.934498][T17163] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.949938][T17163] bridge_slave_1: entered allmulticast mode [ 757.965334][T17163] bridge_slave_1: entered promiscuous mode [ 758.043812][T17163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 758.069225][T17163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 758.156965][T17163] team0: Port device team_slave_0 added [ 758.172625][T17163] team0: Port device team_slave_1 added [ 758.178910][ T5236] Bluetooth: hci3: command tx timeout [ 758.399011][T17163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 758.416167][T17163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 758.446717][T17163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 758.580270][T17163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 758.620626][T17163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 758.656102][T17163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.701334][T17225] batadv_slave_1: entered promiscuous mode [ 758.725765][T17224] batadv_slave_1: left promiscuous mode [ 758.810992][T17072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 758.893187][T17163] hsr_slave_0: entered promiscuous mode [ 758.909526][T17163] hsr_slave_1: entered promiscuous mode [ 759.155092][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.220872][T17072] 8021q: adding VLAN 0 to HW filter on device team0 [ 759.363211][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.441868][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.449191][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 759.608603][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.661557][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.668802][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 759.794413][T10841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 759.805115][T10841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 759.815467][T10841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 759.827177][T10841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 759.835550][T10841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 759.838036][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.867301][T10841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 760.256886][T10841] Bluetooth: hci3: command tx timeout [ 760.576464][ T11] bridge_slave_1: left allmulticast mode [ 760.582290][ T11] bridge_slave_1: left promiscuous mode [ 760.614053][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.657278][ T11] bridge_slave_0: left allmulticast mode [ 760.673409][ T11] bridge_slave_0: left promiscuous mode [ 760.681520][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.876106][ T5287] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 760.986173][T13978] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 761.031374][ T5287] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.041918][ T5287] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 761.057406][ T5287] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 761.067022][ T5287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.078435][ T5287] usb 4-1: config 0 descriptor?? [ 761.087025][ T5287] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 761.144159][T13978] usb 1-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 761.165073][T13978] usb 1-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 761.177038][T13978] usb 1-1: config 4 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 116 [ 761.187772][T13978] usb 1-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 761.201515][T13978] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 761.211515][T13978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.224833][T17275] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 761.226664][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 761.253231][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 761.269272][ T11] bond0 (unregistering): Released all slaves [ 761.320601][T17163] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 761.357292][T17272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.380073][T17272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.415702][T17163] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 761.465099][T17272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.476600][T17272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.493813][T17163] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 761.511832][T17272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.524005][T17163] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 761.541410][T17272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.611133][T17072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 761.631314][ T5288] usb 4-1: USB disconnect, device number 105 [ 761.654437][T13978] ath6kl: Failed to submit usb control message: -71 [ 761.672435][T13978] ath6kl: unable to send the bmi data to the device: -71 [ 761.682107][T13978] ath6kl: Unable to send get target info: -71 [ 761.697369][T13978] ath6kl: Failed to init ath6kl core: -71 [ 761.716769][T13978] ath6kl_usb 1-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 761.740915][T13978] usb 1-1: USB disconnect, device number 69 [ 761.772752][T17255] chnl_net:caif_netlink_parms(): no params data found [ 761.837793][ T11] hsr_slave_0: left promiscuous mode [ 761.843708][ T11] hsr_slave_1: left promiscuous mode [ 761.850198][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 761.858934][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 761.867293][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 761.874840][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.897767][ T11] veth1_macvtap: left promiscuous mode [ 761.903316][ T11] veth0_macvtap: left promiscuous mode [ 761.912904][ T11] veth1_vlan: left promiscuous mode [ 761.919120][ T11] veth0_vlan: left promiscuous mode [ 761.936149][T10841] Bluetooth: hci2: command tx timeout [ 762.336042][T10841] Bluetooth: hci3: command tx timeout [ 762.587618][ T11] team0 (unregistering): Port device team_slave_1 removed [ 762.658531][ T11] team0 (unregistering): Port device team_slave_0 removed [ 762.866731][T15265] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 763.038241][T15265] usb 4-1: Using ep0 maxpacket: 16 [ 763.062896][T15265] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 763.083496][T15265] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 763.108523][T15265] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 763.117932][T15265] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 763.129473][T15265] usb 4-1: SerialNumber: syz [ 763.138444][T17290] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 763.355227][T17290] loop0: detected capacity change from 0 to 7 [ 763.369743][T17290] Dev loop0: unable to read RDB block 7 [ 763.375608][T17290] loop0: unable to read partition table [ 763.401733][T17072] veth0_vlan: entered promiscuous mode [ 763.432318][T17290] loop0: partition table beyond EOD, truncated [ 763.432582][T17296] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 763.453833][T17290] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 763.453833][T17290] ) failed (rc=-5) [ 763.468604][T13978] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 763.514915][T17255] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.545543][T17255] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.566144][T17255] bridge_slave_0: entered allmulticast mode [ 763.576196][T17255] bridge_slave_0: entered promiscuous mode [ 763.585074][T17255] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.592414][T17255] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.599926][T17255] bridge_slave_1: entered allmulticast mode [ 763.606854][T13978] usb 1-1: device descriptor read/64, error -71 [ 763.612625][T17255] bridge_slave_1: entered promiscuous mode [ 763.671178][T17255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 763.692866][T17072] veth1_vlan: entered promiscuous mode [ 763.717760][T17255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 763.796974][T17255] team0: Port device team_slave_0 added [ 763.809401][T17255] team0: Port device team_slave_1 added [ 763.867140][T13978] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 763.894107][T17255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 763.902853][T15265] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 763.915469][T17255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 763.965146][T17255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 763.989926][T17255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 763.997180][T17255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 764.026604][T10841] Bluetooth: hci2: command tx timeout [ 764.026870][T13978] usb 1-1: device descriptor read/64, error -71 [ 764.038745][T17255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 764.082166][T17072] veth0_macvtap: entered promiscuous mode [ 764.139460][T17072] veth1_macvtap: entered promiscuous mode [ 764.146423][T13978] usb usb1-port1: attempt power cycle [ 764.174825][T17072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.193752][T17072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.205533][T17072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.224857][T17072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.237713][T17072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 764.273013][T17072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 764.290262][T17072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.302273][T17072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 764.317463][T17072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.332124][T17072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 764.383523][T17255] hsr_slave_0: entered promiscuous mode [ 764.394331][T17255] hsr_slave_1: entered promiscuous mode [ 764.401332][T17255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 764.428441][T17255] Cannot create hsr debugfs directory [ 764.479580][T17072] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.492797][ T5288] usb 4-1: USB disconnect, device number 106 [ 764.499441][T13978] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 764.506292][T17072] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.522060][T17072] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.528525][ T5288] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 764.544126][T17072] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.566729][T13978] usb 1-1: device descriptor read/8, error -71 [ 764.593097][T17163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 764.726716][T17163] 8021q: adding VLAN 0 to HW filter on device team0 [ 764.783880][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.791072][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 764.816422][T13978] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 764.850158][T13978] usb 1-1: device descriptor read/8, error -71 [ 764.907209][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.914400][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 764.967866][T13978] usb usb1-port1: unable to enumerate USB device [ 765.108742][ T1068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.124246][ T2935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.136773][T17163] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 765.160301][ T1068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.166633][T17163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 765.201575][ T2935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.331008][T17163] veth0_vlan: entered promiscuous mode [ 765.404938][T17163] veth1_vlan: entered promiscuous mode [ 765.425413][T17346] FAULT_INJECTION: forcing a failure. [ 765.425413][T17346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 765.445649][T17346] CPU: 0 UID: 0 PID: 17346 Comm: syz.1.3272 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 765.456243][T17346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 765.466345][T17346] Call Trace: [ 765.469670][T17346] [ 765.472646][T17346] dump_stack_lvl+0x241/0x360 [ 765.473854][T17163] veth0_macvtap: entered promiscuous mode [ 765.477444][T17346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 765.477479][T17346] ? __pfx__printk+0x10/0x10 [ 765.477507][T17346] ? __pfx_lock_release+0x10/0x10 [ 765.489905][T17163] veth1_macvtap: entered promiscuous mode [ 765.493024][T17346] ? lockdep_hardirqs_on+0x99/0x150 [ 765.509039][T17346] should_fail_ex+0x3b0/0x4e0 [ 765.513785][T17346] _copy_from_user+0x2f/0xe0 [ 765.518442][T17346] get_user_ifreq+0x116/0x200 [ 765.523193][T17346] sock_ioctl+0x793/0x8e0 [ 765.524088][T17163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.527560][T17346] ? __pfx_sock_ioctl+0x10/0x10 [ 765.527605][T17346] compat_sock_ioctl+0x291/0xf20 [ 765.527634][T17346] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 765.538273][T17163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.542881][T17346] ? __fget_files+0x29/0x470 [ 765.542914][T17346] ? __fget_files+0x3f3/0x470 [ 765.560932][T17163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.563112][T17346] __se_compat_sys_ioctl+0x510/0xc90 [ 765.568294][T17163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.572391][T17346] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 765.572439][T17346] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 765.583637][T17163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.588233][T17346] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 765.588281][T17346] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 765.588311][T17346] ? lockdep_hardirqs_on+0x99/0x150 [ 765.638720][T17346] __do_fast_syscall_32+0xb4/0x110 [ 765.643896][T17346] ? exc_page_fault+0x590/0x8c0 [ 765.648810][T17346] do_fast_syscall_32+0x34/0x80 [ 765.653711][T17346] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 765.660087][T17346] RIP: 0023:0xf7fe3579 [ 765.661558][T17163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.664167][T17346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 765.664191][T17346] RSP: 002b:00000000f576656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 765.664226][T17346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f1 [ 765.693778][T17163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 765.702122][T17346] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 765.702143][T17346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 765.702159][T17346] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 765.702175][T17346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 765.702204][T17346] [ 765.808307][T17163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.837745][T17163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.865446][T17163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.878551][T17163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.893324][T17163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.910757][T17163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.923088][T17163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 766.010478][T17163] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.046013][T17163] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.054788][T17163] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.085918][T17163] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.097466][T10841] Bluetooth: hci2: command tx timeout [ 766.195280][T17255] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 766.313067][T17255] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 766.342968][T17255] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 766.394339][T17255] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 766.449892][ T2935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.457869][ T2935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.468213][T17369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3325'. [ 766.493091][T17369] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.613247][ T1068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.623995][ T1068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.762165][T17377] netlink: 121 bytes leftover after parsing attributes in process `syz.3.3326'. [ 766.952584][T17255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 767.060677][T17255] 8021q: adding VLAN 0 to HW filter on device team0 [ 767.105746][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.112919][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 767.169854][T17385] netlink: 'syz.2.3292': attribute type 12 has an invalid length. [ 767.198163][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.205360][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 767.335110][T17255] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 767.346908][ T5287] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 767.435934][ T5286] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 767.480039][T17255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 767.516564][ T5287] usb 1-1: Using ep0 maxpacket: 8 [ 767.525542][ T5287] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.555543][ T5287] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.574255][ T5287] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 767.598483][ T5287] usb 1-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 767.618139][ T5286] usb 2-1: Using ep0 maxpacket: 32 [ 767.639826][ T5286] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 767.668379][T17255] veth0_vlan: entered promiscuous mode [ 767.676462][ T5287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.685350][T17402] syz.3.3331 (17402): drop_caches: 2 [ 767.690845][ T5286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 767.702482][ T5285] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 767.721145][T17255] veth1_vlan: entered promiscuous mode [ 767.745397][ T5286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 767.769011][ T5287] usb 1-1: config 0 descriptor?? [ 767.772585][ T5286] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 767.845370][ T5286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.873238][T17255] veth0_macvtap: entered promiscuous mode [ 767.898218][T17402] syz.3.3331 (17402): drop_caches: 2 [ 767.904477][ T5285] usb 3-1: config index 0 descriptor too short (expected 25183, got 18) [ 767.915015][ T5286] usb 2-1: config 0 descriptor?? [ 767.948942][T17391] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 767.949361][T17255] veth1_macvtap: entered promiscuous mode [ 767.962290][ T5285] usb 3-1: config 116 has too many interfaces: 121, using maximum allowed: 32 [ 767.979668][ T5286] hub 2-1:0.0: USB hub found [ 767.996682][ T5285] usb 3-1: config 116 has an invalid descriptor of length 0, skipping remainder of the config [ 768.041323][ T5285] usb 3-1: config 116 has 0 interfaces, different from the descriptor's value: 121 [ 768.058353][T17255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.075136][T17255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.086074][T17255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.104532][ T5285] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db59, bcdDevice=e9.9b [ 768.114638][T17255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.125129][ T5285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.140315][ T5285] usb 3-1: Product: syz [ 768.144586][ T5285] usb 3-1: Manufacturer: syz [ 768.151021][T17255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.166161][T17255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.168974][ T5285] usb 3-1: SerialNumber: syz [ 768.186178][T17255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.186252][T10841] Bluetooth: hci2: command tx timeout [ 768.203332][ T5286] hub 2-1:0.0: 2 ports detected [ 768.223314][T17255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.239220][T17255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 768.239845][T17389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.276786][T17255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.288310][T17255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.299822][T17255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.310633][T17255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.324587][T17255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.335331][T17255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.347475][T17255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.359577][T17255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.372986][T17255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 768.373144][T17389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.388132][T17255] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.398535][T17255] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.407984][T17255] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.416525][T17391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3329'. [ 768.429391][T17255] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.453889][T17389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.459736][ T5285] usb 3-1: USB disconnect, device number 88 [ 768.512423][T17389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.684696][ T5286] hub 2-1:0.0: set hub depth failed [ 768.696358][ T5286] usb 2-1: USB disconnect, device number 40 [ 768.859650][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.882811][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.959119][ T1068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.990924][ T1068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.125388][ T5287] usbhid 1-1:0.0: can't add hid device: -71 [ 769.147871][ T5287] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 769.211647][ T5287] usb 1-1: USB disconnect, device number 74 [ 769.282025][T17429] syz.4.3318 (17429): drop_caches: 2 [ 769.316832][T17431] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3334'. [ 769.365474][T17429] syz.4.3318 (17429): drop_caches: 2 [ 769.745681][T17450] batadv_slave_1: entered promiscuous mode [ 770.046333][ T5286] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 770.248512][ T5286] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 770.258225][ T5286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.280128][ T5286] usb 2-1: Product: syz [ 770.284457][ T5286] usb 2-1: Manufacturer: syz [ 770.289175][ T5286] usb 2-1: SerialNumber: syz [ 770.304977][ T5286] usb 2-1: config 0 descriptor?? [ 770.321058][ T5286] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 770.409935][T17442] batadv_slave_1: left promiscuous mode [ 770.523960][ T5287] usb 2-1: USB disconnect, device number 41 [ 770.701427][T17486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3347'. [ 770.989778][T17495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3350'. [ 771.001885][T17495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3350'. [ 771.024462][T17497] syz.3.3352 (17497): drop_caches: 2 [ 771.041186][T17497] syz.3.3352 (17497): drop_caches: 2 [ 771.096019][ T5285] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 771.267957][ T5285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.281726][ T5285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.312421][ T5285] usb 5-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 771.321654][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.338020][ T5285] usb 5-1: config 0 descriptor?? [ 771.470624][T10841] Bluetooth: hci1: unexpected subevent 0x1a length: 10 > 6 [ 771.564441][T17506] FAULT_INJECTION: forcing a failure. [ 771.564441][T17506] name failslab, interval 1, probability 0, space 0, times 0 [ 771.580070][ T5285] chicony 0003:04F2:1421.0057: hidraw0: USB HID v0.00 Device [HID 04f2:1421] on usb-dummy_hcd.4-1/input0 [ 771.585225][T17506] CPU: 0 UID: 0 PID: 17506 Comm: syz.1.3355 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 771.601754][T17506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 771.611830][T17506] Call Trace: [ 771.615133][T17506] [ 771.618085][T17506] dump_stack_lvl+0x241/0x360 [ 771.622782][T17506] ? __pfx_dump_stack_lvl+0x10/0x10 [ 771.627994][T17506] ? __pfx__printk+0x10/0x10 [ 771.632598][T17506] ? fs_reclaim_acquire+0x93/0x140 [ 771.637753][T17506] ? __pfx___might_resched+0x10/0x10 [ 771.643080][T17506] should_fail_ex+0x3b0/0x4e0 [ 771.647783][T17506] ? posix_acl_from_xattr+0xe0/0x5a0 [ 771.653085][T17506] should_failslab+0xac/0x100 [ 771.657778][T17506] ? posix_acl_from_xattr+0xe0/0x5a0 [ 771.663078][T17506] __kmalloc_noprof+0xd8/0x400 [ 771.667864][T17506] posix_acl_from_xattr+0xe0/0x5a0 [ 771.673000][T17506] do_set_acl+0xa5/0x180 [ 771.677258][T17506] path_setxattr+0x3bd/0x4d0 [ 771.681870][T17506] ? __pfx_path_setxattr+0x10/0x10 [ 771.687013][T17506] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 771.693028][T17506] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 771.699392][T17506] __ia32_sys_lsetxattr+0xb8/0xd0 [ 771.704461][T17506] __do_fast_syscall_32+0xb4/0x110 [ 771.709590][T17506] ? exc_page_fault+0x590/0x8c0 [ 771.714454][T17506] do_fast_syscall_32+0x34/0x80 [ 771.719352][T17506] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 771.725707][T17506] RIP: 0023:0xf7fe3579 [ 771.729783][T17506] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 771.749400][T17506] RSP: 002b:00000000f574556c EFLAGS: 00000206 ORIG_RAX: 00000000000000e3 [ 771.757853][T17506] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000020000040 [ 771.765840][T17506] RDX: 0000000020000540 RSI: 0000000000000024 RDI: 0000000000000000 [ 771.773825][T17506] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 771.781796][T17506] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 771.789778][T17506] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 771.797772][T17506] [ 771.800886][ C0] vkms_vblank_simulate: vblank timer overrun [ 772.161060][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.377242][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.581722][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.647606][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 772.671658][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 772.680783][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 772.690717][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 772.698619][ T5236] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 772.709770][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 772.807625][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.988375][ T5287] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 773.090709][ T11] bridge_slave_1: left allmulticast mode [ 773.133477][ T11] bridge_slave_1: left promiscuous mode [ 773.146119][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.160161][ T11] bridge_slave_0: left allmulticast mode [ 773.166073][ T11] bridge_slave_0: left promiscuous mode [ 773.167745][ T5287] usb 4-1: Using ep0 maxpacket: 16 [ 773.172116][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.221549][ T5287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 773.274185][ T5287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 773.332031][ T5287] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 773.377834][ T5287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.422002][ T5287] usb 4-1: config 0 descriptor?? [ 773.537813][T10841] Bluetooth: hci1: command tx timeout [ 773.757998][T17552] syz.2.3367 (17552): drop_caches: 2 [ 773.895494][ T5285] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 773.929477][T16992] usb 5-1: USB disconnect, device number 85 [ 773.972455][T17552] syz.2.3367 (17552): drop_caches: 2 [ 774.046203][T17564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 774.075353][T17564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 774.083912][ T5285] usb 2-1: Using ep0 maxpacket: 32 [ 774.101747][ T5285] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 774.124910][ T5287] hid-generic 0003:0158:0100.0058: unknown main item tag 0x1 [ 774.138306][ T5287] hid-generic 0003:0158:0100.0058: unexpected long global item [ 774.159150][ T5287] hid-generic 0003:0158:0100.0058: probe with driver hid-generic failed with error -22 [ 774.171900][ T5285] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 774.198097][ T5285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.223525][ T5285] usb 2-1: Product: syz [ 774.237770][ T5285] usb 2-1: Manufacturer: syz [ 774.242549][ T5285] usb 2-1: SerialNumber: syz [ 774.256962][ T5285] usb 2-1: config 0 descriptor?? [ 774.283993][ T5285] pvrusb2: Hardware description: Terratec Grabster AV400 [ 774.291522][ T5285] pvrusb2: ********** [ 774.297164][ T5285] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 774.308139][ T5285] pvrusb2: Important functionality might not be entirely working. [ 774.318495][ T5285] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 774.331577][ T5285] pvrusb2: ********** [ 774.352269][T17564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 774.375383][T17564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 774.454922][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 774.476055][T16992] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 774.491052][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 774.509123][ T11] bond0 (unregistering): Released all slaves [ 774.526875][T17547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3366'. [ 774.574110][ T5285] usb 2-1: USB disconnect, device number 42 [ 774.579274][ T2037] pvrusb2: Invalid write control endpoint [ 774.639453][T16992] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.05 [ 774.673043][T17532] chnl_net:caif_netlink_parms(): no params data found [ 774.691324][T16992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 774.700468][T16992] usb 5-1: SerialNumber: syz [ 774.715977][T16992] usb 5-1: config 0 descriptor?? [ 774.736808][T10841] Bluetooth: hci0: command tx timeout [ 774.814284][ T2037] pvrusb2: Invalid write control endpoint [ 774.821692][ T2037] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 774.835622][ T2037] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 774.845469][ T2037] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 774.865755][ T2037] pvrusb2: Device being rendered inoperable [ 774.881213][ T2037] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 774.899876][ T2037] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 774.964878][ T2037] pvrusb2: Attached sub-driver cx25840 [ 774.990779][ T2037] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 775.045211][ T2037] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 775.080073][ T11] hsr_slave_0: left promiscuous mode [ 775.100863][ T11] hsr_slave_1: left promiscuous mode [ 775.118963][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 775.136128][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 775.145649][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 775.153372][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 775.205569][ T11] veth1_macvtap: left promiscuous mode [ 775.215685][ T11] veth0_macvtap: left promiscuous mode [ 775.228638][ T11] veth1_vlan: left promiscuous mode [ 775.236290][ T11] veth0_vlan: left promiscuous mode [ 775.340877][T16992] usb 5-1: Firmware version (0.0) predates our first public release. [ 775.359677][T16992] usb 5-1: Please update to version 0.2 or newer [ 775.560930][T17588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3371'. [ 775.745527][ T5288] usb 4-1: USB disconnect, device number 107 [ 775.888815][T17596] netlink: 'syz.3.3374': attribute type 3 has an invalid length. [ 776.524680][ T11] team0 (unregistering): Port device team_slave_1 removed [ 776.581289][ T11] team0 (unregistering): Port device team_slave_0 removed [ 776.616324][ T5288] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 776.782709][ T5288] usb 2-1: Using ep0 maxpacket: 16 [ 776.801549][ T5288] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 776.811964][ T5288] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 776.822848][T10841] Bluetooth: hci0: command tx timeout [ 776.829180][ T5288] usb 2-1: string descriptor 0 read error: -22 [ 776.835495][ T5288] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 776.844869][ T5288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.379431][T17532] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.410053][T17532] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.433673][T17532] bridge_slave_0: entered allmulticast mode [ 777.451436][T17532] bridge_slave_0: entered promiscuous mode [ 777.468242][T17599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3375'. [ 777.491574][ T5288] cdc_ncm 2-1:1.0: bind() failure [ 777.518151][T17532] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.521553][ T5288] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 777.552873][T17532] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.558653][T16992] usb 5-1: USB disconnect, device number 86 [ 777.594910][ T5288] cdc_ncm 2-1:1.1: bind() failure [ 777.609514][T17532] bridge_slave_1: entered allmulticast mode [ 777.635134][T17532] bridge_slave_1: entered promiscuous mode [ 777.645802][ T5288] usb 2-1: USB disconnect, device number 43 [ 777.807531][T17532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 777.855312][T17532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 777.916195][ T5284] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 777.971952][T17532] team0: Port device team_slave_0 added [ 777.991679][T17532] team0: Port device team_slave_1 added [ 778.097568][ T5284] usb 4-1: Using ep0 maxpacket: 32 [ 778.126429][ T5284] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 778.140150][T17532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 778.146026][T16992] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 778.157530][T17532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 778.186010][ T5284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 778.215903][ T5284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 778.240254][ T5284] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 778.251646][T17532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 778.275884][ T5284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.300200][T17532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 778.305981][T16992] usb 5-1: Using ep0 maxpacket: 8 [ 778.315653][ T5284] usb 4-1: config 0 descriptor?? [ 778.324548][T17532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 778.353952][T16992] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 778.370356][T17614] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 778.376353][T16992] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 778.382000][ T5284] hub 4-1:0.0: USB hub found [ 778.398239][T17532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 778.466477][T16992] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 778.497455][T16992] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 778.518416][T16992] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 778.543688][T16992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.626548][ T5284] hub 4-1:0.0: 2 ports detected [ 778.677583][T17532] hsr_slave_0: entered promiscuous mode [ 778.700137][T17532] hsr_slave_1: entered promiscuous mode [ 778.719936][T17532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 778.728495][T17532] Cannot create hsr debugfs directory [ 778.804549][T16992] usb 5-1: GET_CAPABILITIES returned 0 [ 778.810503][T16992] usbtmc 5-1:16.0: can't read capabilities [ 778.828727][T17614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3378'. [ 778.876135][ T8] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 778.896557][T10841] Bluetooth: hci0: command tx timeout [ 779.026824][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.032723][T17618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.054705][ T5284] hub 4-1:0.0: set hub depth failed [ 779.056044][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 779.081275][ T5284] usb 4-1: USB disconnect, device number 108 [ 779.099900][T17618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.114181][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 779.165024][ T25] usb 5-1: USB disconnect, device number 87 [ 779.183242][ T8] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 779.226664][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.234746][ T8] usb 3-1: Product: syz [ 779.257251][ T8] usb 3-1: Manufacturer: syz [ 779.261977][ T8] usb 3-1: SerialNumber: syz [ 779.280222][ T8] usb 3-1: config 0 descriptor?? [ 779.341196][ T8] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 779.354050][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.512868][ T8] usb 3-1: USB disconnect, device number 89 [ 779.546395][ T35] usb 3-1: Failed to submit usb control message: -71 [ 779.553465][ T35] usb 3-1: unable to send the bmi data to the device: -71 [ 779.560789][ T35] usb 3-1: unable to get target info from device [ 779.569586][ T35] usb 3-1: could not get target info (-71) [ 779.575468][ T35] usb 3-1: could not probe fw (-71) [ 779.639020][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 779.654448][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.674893][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 779.699601][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 779.732278][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 779.742024][ T5236] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 779.762270][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 779.951735][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.969609][T17661] input: syz1 as /devices/virtual/input/input85 [ 780.074635][T17662] fuse: Unknown parameter ']#~-Ù#8¼]€Ët2ÿ2#2uô-·1$«I_UèqõÝ\è<ÂfgzÌœçÄÂ/ð)MÔë.ŠšöçŠÔ@HU£aðf«LÚc' [ 780.357900][T17674] FAULT_INJECTION: forcing a failure. [ 780.357900][T17674] name failslab, interval 1, probability 0, space 0, times 0 [ 780.371061][T17674] CPU: 1 UID: 0 PID: 17674 Comm: syz.4.3388 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 780.381548][T17674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 780.391738][T17674] Call Trace: [ 780.395058][T17674] [ 780.398029][T17674] dump_stack_lvl+0x241/0x360 [ 780.402767][T17674] ? __pfx_dump_stack_lvl+0x10/0x10 [ 780.408021][T17674] ? __pfx__printk+0x10/0x10 [ 780.412667][T17674] ? fs_reclaim_acquire+0x93/0x140 [ 780.417848][T17674] ? __pfx___might_resched+0x10/0x10 [ 780.423202][T17674] should_fail_ex+0x3b0/0x4e0 [ 780.427950][T17674] ? tomoyo_encode+0x26f/0x540 [ 780.432767][T17674] should_failslab+0xac/0x100 [ 780.437500][T17674] ? tomoyo_encode+0x26f/0x540 [ 780.442317][T17674] __kmalloc_noprof+0xd8/0x400 [ 780.447143][T17674] tomoyo_encode+0x26f/0x540 [ 780.451790][T17674] tomoyo_realpath_from_path+0x59e/0x5e0 [ 780.457485][T17674] tomoyo_path_number_perm+0x23a/0x880 [ 780.463037][T17674] ? tomoyo_path_number_perm+0x208/0x880 [ 780.468754][T17674] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 780.474815][T17674] ? __pfx_lock_acquire+0x10/0x10 [ 780.479929][T17674] ? __fget_files+0x29/0x470 [ 780.484572][T17674] ? __fget_files+0x3f3/0x470 [ 780.489307][T17674] security_file_ioctl_compat+0xc6/0x2a0 [ 780.495000][T17674] __se_compat_sys_ioctl+0xd6/0xc90 [ 780.500267][T17674] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 780.506148][T17674] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 780.512190][T17674] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 780.518588][T17674] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 780.525234][T17674] ? lockdep_hardirqs_on+0x99/0x150 [ 780.530484][T17674] __do_fast_syscall_32+0xb4/0x110 [ 780.535648][T17674] ? exc_page_fault+0x590/0x8c0 [ 780.540558][T17674] do_fast_syscall_32+0x34/0x80 [ 780.545466][T17674] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 780.551944][T17674] RIP: 0023:0xf7f40579 [ 780.556068][T17674] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 780.575736][T17674] RSP: 002b:00000000f56c656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 780.584238][T17674] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0185648 [ 780.592265][T17674] RDX: 0000000020000fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 780.600290][T17674] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 780.608411][T17674] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 780.616520][T17674] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 780.624555][T17674] [ 780.628198][T17674] ERROR: Out of memory at tomoyo_realpath_from_path. [ 780.696255][ T61] bridge_slave_1: left allmulticast mode [ 780.701980][ T61] bridge_slave_1: left promiscuous mode [ 780.728589][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.809274][ T61] bridge_slave_0: left allmulticast mode [ 780.815092][ T61] bridge_slave_0: left promiscuous mode [ 780.836859][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.975976][T10841] Bluetooth: hci0: command tx timeout [ 781.005989][T17699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3392'. [ 781.187594][ T5285] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 781.345565][T17706] input: syz0 as /devices/virtual/input/input86 [ 781.359108][T17706] input: failed to attach handler leds to device input86, error: -6 [ 781.371719][ T5285] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 781.380696][ T5285] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 781.398255][ T5285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 781.414260][ T5285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 781.426586][ T5285] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 781.440646][ T5285] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 781.450382][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.461940][ T5285] usb 5-1: config 0 descriptor?? [ 781.478969][T17696] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 781.563004][ T5313] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 781.630200][T17709] FAULT_INJECTION: forcing a failure. [ 781.630200][T17709] name failslab, interval 1, probability 0, space 0, times 0 [ 781.643239][T17709] CPU: 0 UID: 0 PID: 17709 Comm: syz.2.3397 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 781.653715][T17709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 781.663842][T17709] Call Trace: [ 781.667161][T17709] [ 781.670120][T17709] dump_stack_lvl+0x241/0x360 [ 781.674883][T17709] ? __pfx_dump_stack_lvl+0x10/0x10 [ 781.680124][T17709] ? __pfx__printk+0x10/0x10 [ 781.685811][T17709] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 781.691843][T17709] ? __pfx___might_resched+0x10/0x10 [ 781.697196][T17709] should_fail_ex+0x3b0/0x4e0 [ 781.701935][T17709] should_failslab+0xac/0x100 [ 781.706676][T17709] ? __alloc_skb+0x1c3/0x440 [ 781.711326][T17709] kmem_cache_alloc_node_noprof+0x71/0x320 [ 781.717176][T17709] __alloc_skb+0x1c3/0x440 [ 781.721639][T17709] ? __pfx___alloc_skb+0x10/0x10 [ 781.726614][T17709] pfkey_sendmsg+0x1da/0x1050 [ 781.731345][T17709] ? __lock_acquire+0x1384/0x2050 [ 781.736417][T17709] ? __pfx___might_resched+0x10/0x10 [ 781.741739][T17709] ? mark_lock+0x9a/0x360 [ 781.746126][T17709] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 781.751289][T17709] ? aa_sk_perm+0x96d/0xab0 [ 781.755844][T17709] ? __pfx_aa_sk_perm+0x10/0x10 [ 781.760724][T17709] ? __might_fault+0xaa/0x120 [ 781.765435][T17709] ? __pfx_lock_release+0x10/0x10 [ 781.770479][T17709] ? aa_sock_msg_perm+0x91/0x160 [ 781.775438][T17709] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 781.780581][T17709] __sock_sendmsg+0x221/0x270 [ 781.785277][T17709] ____sys_sendmsg+0x52a/0x7e0 [ 781.790080][T17709] ? __pfx_____sys_sendmsg+0x10/0x10 [ 781.795405][T17709] __sys_sendmsg+0x292/0x380 [ 781.800027][T17709] ? __pfx___sys_sendmsg+0x10/0x10 [ 781.805171][T17709] ? __pfx_vfs_write+0x10/0x10 [ 781.809993][T17709] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 781.816694][T17709] ? lockdep_hardirqs_on+0x99/0x150 [ 781.821909][T17709] __do_fast_syscall_32+0xb4/0x110 [ 781.827080][T17709] ? exc_page_fault+0x590/0x8c0 [ 781.831959][T17709] do_fast_syscall_32+0x34/0x80 [ 781.836860][T17709] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 781.843210][T17709] RIP: 0023:0xf740d579 [ 781.847288][T17709] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 781.866908][T17709] RSP: 002b:00000000f56d556c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 781.875339][T17709] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000040 [ 781.883327][T17709] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 781.891332][T17709] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 781.899327][T17709] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 781.907311][T17709] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 781.915317][T17709] [ 781.921999][T10841] Bluetooth: hci1: command tx timeout [ 781.928709][ T5285] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0 [ 781.964152][ T5285] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0 [ 781.967458][T17711] usb usb8: usbfs: process 17711 (syz.2.3397) did not claim interface 0 before use [ 781.971885][ T5285] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0 [ 781.981628][T17711] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 781.998504][ T5285] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0 [ 782.006436][ T5285] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0 [ 782.013959][ T5285] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0 [ 782.023862][ T5285] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0 [ 782.032005][ T5285] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0 [ 782.040038][ T5285] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0 [ 782.048192][ T5285] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0 [ 782.055680][ T5285] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0 [ 782.063765][ T5285] plantronics 0003:047F:FFFF.0059: No inputs registered, leaving [ 782.077796][ T5313] usb 4-1: string descriptor 0 read error: -22 [ 782.093742][ T5313] usb 4-1: New USB device found, idVendor=30c9, idProduct=0093, bcdDevice=18.c6 [ 782.103064][ T5313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.112424][ T5285] plantronics 0003:047F:FFFF.0059: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 782.129733][ T5313] usb 4-1: config 0 descriptor?? [ 782.148866][ T5313] usb 4-1: Found UVC 0.00 device (30c9:0093) [ 782.155903][ T5313] usb 4-1: No valid video chain found. [ 782.194744][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 782.216761][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 782.229837][ T61] bond0 (unregistering): Released all slaves [ 782.256582][T17653] chnl_net:caif_netlink_parms(): no params data found [ 782.274303][T17696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 782.306677][T17696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 782.344275][ T5285] usb 5-1: USB disconnect, device number 88 [ 782.385655][T16992] usb 4-1: USB disconnect, device number 109 [ 782.674914][T17653] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.691304][T17653] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.700074][T17653] bridge_slave_0: entered allmulticast mode [ 782.713343][T17653] bridge_slave_0: entered promiscuous mode [ 782.731528][T17653] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.743426][T17653] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.753909][T17653] bridge_slave_1: entered allmulticast mode [ 782.768883][T17653] bridge_slave_1: entered promiscuous mode [ 782.780551][T17532] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 782.822563][T17532] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 782.846363][ T61] hsr_slave_0: left promiscuous mode [ 782.862939][ T61] hsr_slave_1: left promiscuous mode [ 782.876164][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 782.893986][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 782.944315][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 782.966855][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 783.048558][ T61] veth1_macvtap: left promiscuous mode [ 783.054169][ T61] veth0_macvtap: left promiscuous mode [ 783.080864][ T61] veth1_vlan: left promiscuous mode [ 783.089846][ T61] veth0_vlan: left promiscuous mode [ 783.343264][ T5313] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 783.498364][ T5313] usb 5-1: Using ep0 maxpacket: 16 [ 783.511372][ T5313] usb 5-1: unable to get BOS descriptor or descriptor too short [ 783.524606][ T5313] usb 5-1: config 0 has no interfaces? [ 783.534284][ T5313] usb 5-1: language id specifier not provided by device, defaulting to English [ 783.545726][ T5313] usb 5-1: New USB device found, idVendor=10b8, idProduct=1e9f, bcdDevice=9f.5c [ 783.555663][ T5313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.564191][ T5313] usb 5-1: Product: syz [ 783.569844][ T5313] usb 5-1: Manufacturer: syz [ 783.579421][ T5313] usb 5-1: SerialNumber: syz [ 783.596980][ T5313] usb 5-1: config 0 descriptor?? [ 783.626946][ T5285] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 783.796015][ T5285] usb 4-1: Using ep0 maxpacket: 16 [ 783.813812][ T5285] usb 4-1: too many configurations: 15, using maximum allowed: 8 [ 783.842305][ T5285] usb 4-1: config 0 has an invalid descriptor of length 174, skipping remainder of the config [ 783.864038][ T5285] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 783.883973][ T5285] usb 4-1: config 0 has an invalid descriptor of length 174, skipping remainder of the config [ 783.898327][ T5285] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 783.915558][ T5285] usb 4-1: config 0 has an invalid descriptor of length 174, skipping remainder of the config [ 783.932829][ T5285] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 783.943572][ T5285] usb 4-1: config 0 has an invalid descriptor of length 174, skipping remainder of the config [ 783.943995][T10841] Bluetooth: hci1: command tx timeout [ 783.961253][ T5285] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 783.988512][ T5285] usb 4-1: config 0 has an invalid descriptor of length 174, skipping remainder of the config [ 784.006601][ T5285] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 784.050235][ T5285] usb 4-1: config 0 has an invalid descriptor of length 174, skipping remainder of the config [ 784.071266][ T5285] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 784.119494][ T5285] usb 4-1: config 0 has an invalid descriptor of length 174, skipping remainder of the config [ 784.139860][ T5285] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 784.155280][ T61] team0 (unregistering): Port device team_slave_1 removed [ 784.174203][ T5285] usb 4-1: config 0 has an invalid descriptor of length 174, skipping remainder of the config [ 784.194147][ T5285] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 784.211086][ T5285] usb 4-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 784.221607][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=162, SerialNumber=0 [ 784.249573][ T5285] usb 4-1: Product: syz [ 784.250076][ T61] team0 (unregistering): Port device team_slave_0 removed [ 784.272031][ T5285] usb 4-1: config 0 descriptor?? [ 784.395450][ T5285] usb 5-1: USB disconnect, device number 89 [ 784.961920][T17532] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 785.038530][T17653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 785.062352][T17653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.082936][T17532] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 785.182384][T17653] team0: Port device team_slave_0 added [ 785.230676][T17786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3403'. [ 785.295107][T17653] team0: Port device team_slave_1 added [ 785.455585][T17653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 785.468050][T17653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 785.494013][ C1] vkms_vblank_simulate: vblank timer overrun [ 785.507361][T17653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 785.530358][T17653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 785.542097][T17653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 785.579246][T17653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 785.753576][T17653] hsr_slave_0: entered promiscuous mode [ 785.771385][T17653] hsr_slave_1: entered promiscuous mode [ 785.779144][T17653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 785.792767][T17653] Cannot create hsr debugfs directory [ 786.017082][T10841] Bluetooth: hci1: command tx timeout [ 786.138377][T17532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 786.242739][T17532] 8021q: adding VLAN 0 to HW filter on device team0 [ 786.272607][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.279902][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 786.330637][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.337847][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.458232][ T5288] usb 4-1: USB disconnect, device number 110 [ 786.790948][T17532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 786.877062][T17826] kvm: user requested TSC rate below hardware speed [ 786.934504][T17653] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 786.984169][T17653] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 786.999604][T17653] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 787.042035][T17653] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 787.074090][T17532] veth0_vlan: entered promiscuous mode [ 787.087107][T17835] input: syz1 as /devices/virtual/input/input87 [ 787.145655][T17532] veth1_vlan: entered promiscuous mode [ 787.186112][T16992] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 787.228478][T17653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.247311][T17653] 8021q: adding VLAN 0 to HW filter on device team0 [ 787.284750][T17653] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 787.295256][T17653] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 787.322531][T17532] veth0_macvtap: entered promiscuous mode [ 787.345592][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.352833][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 787.364322][T16992] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 787.373895][T16992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.385324][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.392527][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 787.403158][T16992] usb 4-1: config 0 descriptor?? [ 787.429759][T17532] veth1_macvtap: entered promiscuous mode [ 787.454631][T17653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 787.492628][T17532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.505179][T17532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.515113][T17532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.525767][T17532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.535695][T17532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.549218][T17532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.561281][T17532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 787.584330][T17532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.598272][T17532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.611077][T17532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.623209][T17532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.627774][T16992] hackrf 4-1:0.0: usb_control_msg() failed -32 request 0e [ 787.640138][T17532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.640167][T17532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.641869][T17532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 787.656740][T17831] PKCS7: Unknown OID: [4] 2.19.13055.940354.15722 [ 787.687880][T17831] PKCS7: Only support pkcs7_signedData type [ 787.721776][T16992] hackrf 4-1:0.0: Could not detect board [ 787.722092][T17532] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.730458][T16992] hackrf 4-1:0.0: probe with driver hackrf failed with error -32 [ 787.741986][T17532] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.754821][T17532] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.756828][T16992] usb 4-1: USB disconnect, device number 111 [ 787.772129][T17532] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.883558][T17653] veth0_vlan: entered promiscuous mode [ 787.949220][T17653] veth1_vlan: entered promiscuous mode [ 788.035966][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.067218][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.097306][T10841] Bluetooth: hci1: command tx timeout [ 788.113373][T17851] syz.4.3411 (17851): drop_caches: 2 [ 788.171378][T17851] syz.4.3411 (17851): drop_caches: 2 [ 788.193033][T17653] veth0_macvtap: entered promiscuous mode [ 788.211443][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.213947][T17653] veth1_macvtap: entered promiscuous mode [ 788.252572][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.254562][T17653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.275257][T17653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.287875][T17653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.298869][T17653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.309653][T17653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.320653][T17653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.335893][T17653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.349893][T17653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.361818][T17653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 788.415193][T17653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.486611][T17653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.502901][T17653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.515995][T17653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.525934][T17653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.536495][T17653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.546441][T17653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.557091][T17653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.568464][T17653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 788.677251][T17653] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.686165][T17653] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.695464][T17653] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.704334][T17653] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.890304][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.906422][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.011229][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.019321][ T5285] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 789.041650][T17883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3414'. [ 789.052316][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.206638][ T5285] usb 4-1: Using ep0 maxpacket: 8 [ 789.397167][ T5285] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 789.407138][ T5285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.425930][ T5285] usb 4-1: Product: syz [ 789.435336][ T5285] usb 4-1: Manufacturer: syz [ 789.448128][ T5285] usb 4-1: SerialNumber: syz [ 789.462709][ T5285] usb 4-1: config 0 descriptor?? [ 789.686679][ T8] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 789.747573][ T5285] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 789.871900][ T8] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.05 [ 789.883050][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 789.893401][ T8] usb 2-1: SerialNumber: syz [ 789.896223][ T5313] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 789.924247][ T8] usb 2-1: config 0 descriptor?? [ 790.092740][ T5313] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 790.102113][ T5313] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 790.113397][ T5313] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 790.134405][ T5313] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 790.149659][ T5313] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 790.187265][ T5313] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 790.197995][ T5313] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 790.217442][ T5313] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 790.229289][ T5313] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 790.247271][ T5313] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 790.281764][ T5313] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 790.356636][ T5313] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 790.378064][ T5313] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 790.394453][ T5313] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 790.423296][ T5313] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 790.448115][ T5313] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 790.466389][ T5313] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 790.491200][T17915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 790.522216][T17907] can: request_module (can-proto-0) failed. [ 790.531796][ T5313] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 790.543979][ T5313] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 790.559884][T17915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 790.593034][ T5313] usb 5-1: Product: syz [ 790.611906][ T5313] usb 5-1: Manufacturer: syz [ 790.631945][ T5313] usb 5-1: SerialNumber: syz [ 790.645512][ T5313] usb 5-1: config 0 descriptor?? [ 790.669029][ T5313] yurex 5-1:0.0: Could not find endpoints [ 790.746473][ T5287] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 790.853385][ T8] usb 2-1: Firmware version (0.0) predates our first public release. [ 790.880633][T16992] usb 5-1: USB disconnect, device number 90 [ 790.893017][ T8] usb 2-1: Please update to version 0.2 or newer [ 790.906026][ T5287] usb 3-1: device descriptor read/64, error -71 [ 790.973093][ T8] usb 2-1: USB disconnect, device number 44 [ 791.156092][ T5287] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 791.246038][T15265] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 791.296296][ T5287] usb 3-1: device descriptor read/64, error -71 [ 791.412202][T15265] usb 1-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 791.423497][ T5287] usb usb3-port1: attempt power cycle [ 791.429256][T15265] usb 1-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 791.446281][T15265] usb 1-1: config 4 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 116 [ 791.456854][T15265] usb 1-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 791.470411][T15265] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 791.479576][T15265] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.492786][T17924] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 791.740233][T17933] netlink: zone id is out of range [ 791.752230][T17933] netlink: zone id is out of range [ 791.781810][T17933] netlink: set zone limit has 4 unknown bytes [ 791.855768][T15265] ath6kl: Failed to submit usb control message: -71 [ 791.863102][T15265] ath6kl: unable to send the bmi data to the device: -71 [ 791.871266][ T5287] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 791.881029][T16992] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 791.897438][ T5287] usb 3-1: device descriptor read/8, error -71 [ 791.904782][T15265] ath6kl: Unable to send get target info: -71 [ 791.912492][T15265] ath6kl: Failed to init ath6kl core: -71 [ 791.919626][T15265] ath6kl_usb 1-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 791.941391][T15265] usb 1-1: USB disconnect, device number 75 [ 792.045964][T16992] usb 2-1: Using ep0 maxpacket: 32 [ 792.053887][T16992] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 792.066663][T16992] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 792.077631][T16992] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 792.085977][T16992] usb 2-1: Product: syz [ 792.090604][T16992] usb 2-1: Manufacturer: syz [ 792.095247][T16992] usb 2-1: SerialNumber: syz [ 792.107209][T16992] usb 2-1: config 0 descriptor?? [ 792.114294][T17931] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 792.136158][ T5287] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 792.166606][ T5287] usb 3-1: device descriptor read/8, error -71 [ 792.277530][ T5287] usb usb3-port1: unable to enumerate USB device [ 792.386728][T17937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 792.397197][T17937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.412766][ T5284] usb 2-1: USB disconnect, device number 45 [ 792.502428][T17939] FAULT_INJECTION: forcing a failure. [ 792.502428][T17939] name failslab, interval 1, probability 0, space 0, times 0 [ 792.520711][T17939] CPU: 0 UID: 0 PID: 17939 Comm: syz.0.3428 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 792.531214][T17939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 792.541315][T17939] Call Trace: [ 792.544637][T17939] [ 792.547603][T17939] dump_stack_lvl+0x241/0x360 [ 792.552339][T17939] ? __pfx_dump_stack_lvl+0x10/0x10 [ 792.557601][T17939] ? __pfx__printk+0x10/0x10 [ 792.562252][T17939] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 792.568298][T17939] ? __pfx___might_resched+0x10/0x10 [ 792.573651][T17939] should_fail_ex+0x3b0/0x4e0 [ 792.578379][T17939] should_failslab+0xac/0x100 [ 792.583096][T17939] ? __alloc_skb+0x1c3/0x440 [ 792.587729][T17939] kmem_cache_alloc_node_noprof+0x71/0x320 [ 792.593593][T17939] __alloc_skb+0x1c3/0x440 [ 792.598064][T17939] ? __pfx___alloc_skb+0x10/0x10 [ 792.603056][T17939] ? dev_get_by_index+0x29c/0x2d0 [ 792.608139][T17939] batadv_netlink_set_mesh+0xcef/0x1240 [ 792.613732][T17939] genl_rcv_msg+0xb14/0xec0 [ 792.618308][T17939] ? mark_lock+0x9a/0x360 [ 792.622668][T17939] ? __pfx_genl_rcv_msg+0x10/0x10 [ 792.627735][T17939] ? __pfx_lock_acquire+0x10/0x10 [ 792.632782][T17939] ? __pfx_batadv_pre_doit+0x10/0x10 [ 792.638097][T17939] ? __pfx_batadv_netlink_set_mesh+0x10/0x10 [ 792.644112][T17939] ? __pfx_batadv_post_doit+0x10/0x10 [ 792.649510][T17939] ? __pfx___might_resched+0x10/0x10 [ 792.654825][T17939] netlink_rcv_skb+0x1e3/0x430 [ 792.659617][T17939] ? __pfx_genl_rcv_msg+0x10/0x10 [ 792.664675][T17939] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 792.669991][T17939] ? __netlink_deliver_tap+0x77e/0x7c0 [ 792.675480][T17939] genl_rcv+0x28/0x40 [ 792.679489][T17939] netlink_unicast+0x7f6/0x990 [ 792.684275][T17939] ? __pfx_netlink_unicast+0x10/0x10 [ 792.689591][T17939] ? __virt_addr_valid+0x183/0x530 [ 792.694742][T17939] ? __check_object_size+0x48e/0x900 [ 792.700058][T17939] netlink_sendmsg+0x8e4/0xcb0 [ 792.704877][T17939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 792.710214][T17939] ? __pfx_lock_release+0x10/0x10 [ 792.715271][T17939] ? aa_sock_msg_perm+0x91/0x160 [ 792.720323][T17939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 792.725630][T17939] __sock_sendmsg+0x221/0x270 [ 792.730329][T17939] ____sys_sendmsg+0x52a/0x7e0 [ 792.735118][T17939] ? __pfx_____sys_sendmsg+0x10/0x10 [ 792.740442][T17939] __sys_sendmsg+0x292/0x380 [ 792.745078][T17939] ? __pfx___sys_sendmsg+0x10/0x10 [ 792.750242][T17939] ? __pfx_vfs_write+0x10/0x10 [ 792.755080][T17939] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 792.761690][T17939] ? lockdep_hardirqs_on+0x99/0x150 [ 792.766909][T17939] __do_fast_syscall_32+0xb4/0x110 [ 792.772059][T17939] ? exc_page_fault+0x590/0x8c0 [ 792.776931][T17939] do_fast_syscall_32+0x34/0x80 [ 792.781802][T17939] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 792.788171][T17939] RIP: 0023:0xf743d579 [ 792.792281][T17939] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 792.811916][T17939] RSP: 002b:00000000f572656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 792.820367][T17939] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000380 [ 792.828363][T17939] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 792.836377][T17939] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 792.844372][T17939] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 792.852385][T17939] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 792.860389][T17939] [ 793.079838][T17945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3431'. [ 793.116938][T17945] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3431'. [ 793.131337][T17945] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3431'. [ 793.142852][T17945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3431'. [ 793.274366][ T5285] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 793.291927][ T5285] usb 4-1: USB disconnect, device number 112 [ 793.356090][ T5287] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 793.445954][ T5284] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 793.506140][ T5287] usb 1-1: Using ep0 maxpacket: 16 [ 793.516955][ T5287] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.533083][ T5287] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 793.546802][ T5287] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 793.564876][ T5287] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 793.591575][ T5287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.596192][ T5284] usb 5-1: Using ep0 maxpacket: 32 [ 793.599797][T16992] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 793.632168][ T5287] usb 1-1: config 0 descriptor?? [ 793.634464][ T5284] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 793.669533][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 793.695943][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 793.713804][ T5284] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 793.735712][ T5284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.766087][T16992] usb 2-1: Using ep0 maxpacket: 32 [ 793.766896][ T5284] usb 5-1: config 0 descriptor?? [ 793.786533][T17949] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 793.790466][T16992] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 793.802454][T16992] usb 2-1: config 0 has no interface number 0 [ 793.808232][ T5284] hub 5-1:0.0: USB hub found [ 793.825354][T16992] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 793.835095][T16992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.843355][T16992] usb 2-1: Product: syz [ 793.855183][T16992] usb 2-1: Manufacturer: syz [ 793.860095][T16992] usb 2-1: SerialNumber: syz [ 793.880433][T16992] usb 2-1: config 0 descriptor?? [ 793.892856][T16992] smsc95xx v2.0.0 [ 793.946189][ T8] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 794.099653][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 794.109413][ T8] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 794.119993][ T8] usb 4-1: config 0 has no interface number 0 [ 794.134109][ T8] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 794.144472][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.153991][ T8] usb 4-1: Product: syz [ 794.163106][ T8] usb 4-1: Manufacturer: syz [ 794.175909][ T8] usb 4-1: SerialNumber: syz [ 794.204473][ T8] usb 4-1: config 0 descriptor?? [ 794.217294][ T8] smsc95xx v2.0.0 [ 794.243450][ T5284] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 794.301042][T16992] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 794.313807][T17951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.332978][T16992] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 794.350601][T17951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.463946][T17949] netlink: 'syz.4.3433': attribute type 21 has an invalid length. [ 794.476239][T17949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3433'. [ 794.559393][ T5284] usbhid 5-1:0.0: can't add hid device: -32 [ 794.581064][ T5284] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 794.591177][T16992] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 794.613193][T16992] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 794.623798][ T8] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 794.645935][ T8] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 794.656692][T17949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.678762][ T5287] usbhid 1-1:0.0: can't add hid device: -71 [ 794.684910][ T5287] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 794.696213][T17949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.704823][ T5287] usb 1-1: USB disconnect, device number 76 [ 794.718442][T16992] usb 2-1: USB disconnect, device number 46 [ 795.527187][ T5286] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 795.536551][T16992] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 795.689068][ T5286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 795.706314][ T5286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 795.708820][T16992] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 795.716740][ T5286] usb 2-1: New USB device found, idVendor=056a, idProduct=00d1, bcdDevice= 0.00 [ 795.741497][ T5286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.746012][T16992] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 795.755795][ T5286] usb 2-1: config 0 descriptor?? [ 795.777464][T16992] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 795.787176][T16992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 795.795249][T16992] usb 1-1: SerialNumber: syz [ 796.026839][T16992] usb 1-1: 0:2 : does not exist [ 796.191834][ T5286] wacom 0003:056A:00D1.005A: Unknown device_type for 'HID 056a:00d1'. Assuming pen. [ 796.206322][ T5287] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 796.226966][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 796.230978][ T5286] wacom 0003:056A:00D1.005A: hidraw0: USB HID v0.00 Device [HID 056a:00d1] on usb-dummy_hcd.1-1/input0 [ 796.271404][ T5286] input: Wacom Bamboo 2FG 4x5 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00D1.005A/input/input88 [ 796.292262][ T4668] [ 796.294639][ T4668] ====================================================== [ 796.301677][ T4668] WARNING: possible circular locking dependency detected [ 796.308713][ T4668] 6.11.0-syzkaller-10622-gaa486552a110 #0 Not tainted [ 796.315473][ T4668] ------------------------------------------------------ [ 796.322489][ T4668] acpid/4668 is trying to acquire lock: [ 796.328046][ T4668] ffff88806bf19e20 (&hdev->ll_open_lock){+.+.}-{3:3}, at: hid_hw_open+0x28/0x170 [ 796.337244][ T4668] [ 796.337244][ T4668] but task is already holding lock: [ 796.344622][ T4668] ffff888058aa72c0 (&dev->mutex#2){+.+.}-{3:3}, at: input_open_device+0x52/0x2e0 [ 796.353787][ T4668] [ 796.353787][ T4668] which lock already depends on the new lock. [ 796.353787][ T4668] [ 796.364187][ T4668] [ 796.364187][ T4668] the existing dependency chain (in reverse order) is: [ 796.373205][ T4668] [ 796.373205][ T4668] -> #1 (&dev->mutex#2){+.+.}-{3:3}: [ 796.380698][ T4668] lock_acquire+0x1ed/0x550 [ 796.385753][ T4668] __mutex_lock+0x136/0xd70 [ 796.390799][ T4668] __input_unregister_device+0x31/0x620 [ 796.396887][ T4668] input_unregister_device+0xa3/0x100 [ 796.402787][ T4668] steam_client_ll_open+0x88/0xa0 [ 796.408351][ T4668] hid_hw_open+0xe3/0x170 [ 796.413210][ T4668] hidraw_open+0x298/0x8e0 [ 796.418151][ T4668] chrdev_open+0x521/0x600 [ 796.423086][ T4668] do_dentry_open+0x978/0x1460 [ 796.428371][ T4668] vfs_open+0x3e/0x330 [ 796.432984][ T4668] path_openat+0x2c84/0x3590 [ 796.438105][ T4668] do_filp_open+0x235/0x490 [ 796.443134][ T4668] do_sys_openat2+0x13e/0x1d0 [ 796.448340][ T4668] __ia32_compat_sys_openat+0x23f/0x290 [ 796.454417][ T4668] __do_fast_syscall_32+0xb4/0x110 [ 796.460056][ T4668] do_fast_syscall_32+0x34/0x80 [ 796.465440][ T4668] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 796.472294][ T4668] [ 796.472294][ T4668] -> #0 (&hdev->ll_open_lock){+.+.}-{3:3}: [ 796.480305][ T4668] validate_chain+0x18ef/0x5920 [ 796.485688][ T4668] __lock_acquire+0x1384/0x2050 [ 796.491072][ T4668] lock_acquire+0x1ed/0x550 [ 796.496102][ T4668] __mutex_lock+0x136/0xd70 [ 796.501132][ T4668] hid_hw_open+0x28/0x170 [ 796.505988][ T4668] input_open_device+0x191/0x2e0 [ 796.511445][ T4668] mousedev_open_device+0xc7/0x160 [ 796.517081][ T4668] mousedev_open+0x2cf/0x470 [ 796.522195][ T4668] chrdev_open+0x521/0x600 [ 796.527136][ T4668] do_dentry_open+0x978/0x1460 [ 796.532426][ T4668] vfs_open+0x3e/0x330 [ 796.537022][ T4668] path_openat+0x2c84/0x3590 [ 796.542142][ T4668] do_filp_open+0x235/0x490 [ 796.547186][ T4668] do_sys_openat2+0x13e/0x1d0 [ 796.552417][ T4668] __x64_sys_openat+0x247/0x2a0 [ 796.557806][ T4668] do_syscall_64+0xf3/0x230 [ 796.562843][ T4668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.569273][ T4668] [ 796.569273][ T4668] other info that might help us debug this: [ 796.569273][ T4668] [ 796.579510][ T4668] Possible unsafe locking scenario: [ 796.579510][ T4668] [ 796.586963][ T4668] CPU0 CPU1 [ 796.592324][ T4668] ---- ---- [ 796.597686][ T4668] lock(&dev->mutex#2); [ 796.601946][ T4668] lock(&hdev->ll_open_lock); [ 796.609236][ T4668] lock(&dev->mutex#2); [ 796.616013][ T4668] lock(&hdev->ll_open_lock); [ 796.620781][ T4668] [ 796.620781][ T4668] *** DEADLOCK *** [ 796.620781][ T4668] [ 796.628922][ T4668] 2 locks held by acpid/4668: [ 796.633597][ T4668] #0: ffff88802e21e158 (&mousedev->mutex#2){+.+.}-{3:3}, at: mousedev_open_device+0x28/0x160 [ 796.643913][ T4668] #1: ffff888058aa72c0 (&dev->mutex#2){+.+.}-{3:3}, at: input_open_device+0x52/0x2e0 [ 796.653529][ T4668] [ 796.653529][ T4668] stack backtrace: [ 796.659419][ T4668] CPU: 1 UID: 0 PID: 4668 Comm: acpid Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 796.669313][ T4668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 796.679377][ T4668] Call Trace: [ 796.682657][ T4668] [ 796.685597][ T4668] dump_stack_lvl+0x241/0x360 [ 796.690288][ T4668] ? __pfx_dump_stack_lvl+0x10/0x10 [ 796.695613][ T4668] ? __pfx__printk+0x10/0x10 [ 796.700226][ T4668] print_circular_bug+0x13a/0x1b0 [ 796.705260][ T4668] check_noncircular+0x36a/0x4a0 [ 796.710225][ T4668] ? mark_lock+0x9a/0x360 [ 796.714578][ T4668] ? __pfx_check_noncircular+0x10/0x10 [ 796.720061][ T4668] ? lockdep_lock+0x123/0x2b0 [ 796.724759][ T4668] ? validate_chain+0x11e/0x5920 [ 796.729704][ T4668] validate_chain+0x18ef/0x5920 [ 796.734574][ T4668] ? __pfx_validate_chain+0x10/0x10 [ 796.739797][ T4668] ? __pfx_validate_chain+0x10/0x10 [ 796.745022][ T4668] ? __pfx_validate_chain+0x10/0x10 [ 796.750241][ T4668] ? is_bpf_text_address+0x26/0x2a0 [ 796.755461][ T4668] ? look_up_lock_class+0x77/0x170 [ 796.760587][ T4668] ? register_lock_class+0x102/0x980 [ 796.765891][ T4668] ? __pfx_register_lock_class+0x10/0x10 [ 796.771537][ T4668] ? mark_lock+0x9a/0x360 [ 796.775876][ T4668] __lock_acquire+0x1384/0x2050 [ 796.780763][ T4668] lock_acquire+0x1ed/0x550 [ 796.785295][ T4668] ? hid_hw_open+0x28/0x170 [ 796.789817][ T4668] ? __pfx_lock_acquire+0x10/0x10 [ 796.794856][ T4668] ? __pfx___might_resched+0x10/0x10 [ 796.800154][ T4668] ? __mutex_trylock_common+0x183/0x2e0 [ 796.805732][ T4668] ? __pfx___might_resched+0x10/0x10 [ 796.811048][ T4668] ? __pfx___mutex_trylock_common+0x10/0x10 [ 796.816958][ T4668] ? __mutex_trylock_common+0x183/0x2e0 [ 796.822520][ T4668] __mutex_lock+0x136/0xd70 [ 796.827040][ T4668] ? hid_hw_open+0x28/0x170 [ 796.831556][ T4668] ? __mutex_lock+0x2ef/0xd70 [ 796.836240][ T4668] ? rcu_is_watching+0x15/0xb0 [ 796.841015][ T4668] ? trace_contention_end+0x3c/0x120 [ 796.846312][ T4668] ? hid_hw_open+0x28/0x170 [ 796.850829][ T4668] ? __pfx___mutex_lock+0x10/0x10 [ 796.855864][ T4668] ? mousedev_open_device+0x28/0x160 [ 796.861155][ T4668] ? __pfx_lock_acquire+0x10/0x10 [ 796.866191][ T4668] ? __pfx___mutex_lock+0x10/0x10 [ 796.871224][ T4668] hid_hw_open+0x28/0x170 [ 796.875564][ T4668] input_open_device+0x191/0x2e0 [ 796.880512][ T4668] mousedev_open_device+0xc7/0x160 [ 796.885639][ T4668] mousedev_open+0x2cf/0x470 [ 796.890246][ T4668] chrdev_open+0x521/0x600 [ 796.894667][ T4668] ? __pfx_apparmor_file_open+0x10/0x10 [ 796.900224][ T4668] ? __pfx_chrdev_open+0x10/0x10 [ 796.905169][ T4668] ? security_file_open+0x513/0x990 [ 796.910385][ T4668] ? __pfx_chrdev_open+0x10/0x10 [ 796.915328][ T4668] do_dentry_open+0x978/0x1460 [ 796.920105][ T4668] vfs_open+0x3e/0x330 [ 796.924182][ T4668] path_openat+0x2c84/0x3590 [ 796.928796][ T4668] ? __pfx_path_openat+0x10/0x10 [ 796.933753][ T4668] do_filp_open+0x235/0x490 [ 796.938273][ T4668] ? __pfx_do_filp_open+0x10/0x10 [ 796.943319][ T4668] ? _raw_spin_unlock+0x28/0x50 [ 796.948179][ T4668] ? alloc_fd+0x5a1/0x640 [ 796.952514][ T4668] do_sys_openat2+0x13e/0x1d0 [ 796.957222][ T4668] ? __pfx_do_sys_openat2+0x10/0x10 [ 796.962453][ T4668] ? __might_fault+0xc6/0x120 [ 796.967154][ T4668] __x64_sys_openat+0x247/0x2a0 [ 796.972016][ T4668] ? __pfx___x64_sys_openat+0x10/0x10 [ 796.977401][ T4668] ? do_syscall_64+0x100/0x230 [ 796.982178][ T4668] ? do_syscall_64+0xb6/0x230 [ 796.986868][ T4668] do_syscall_64+0xf3/0x230 [ 796.991383][ T4668] ? clear_bhb_loop+0x35/0x90 [ 796.996072][ T4668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.001977][ T4668] RIP: 0033:0x7f73cedba9a4 [ 797.006394][ T4668] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 797.026005][ T4668] RSP: 002b:00007ffe98996680 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 797.034428][ T4668] RAX: ffffffffffffffda RBX: 00007ffe98996968 RCX: 00007f73cedba9a4 [ 797.042410][ T4668] RDX: 0000000000080800 RSI: 00007ffe98996868 RDI: 00000000ffffff9c [ 797.050385][ T4668] RBP: 00007ffe98996868 R08: 00000000000000f4 R09: 00007ffe98996868 [ 797.058362][ T4668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080800 [ 797.066337][ T4668] R13: 0000000000000040 R14: 00007ffe98996968 R15: 00007ffe98996868 [ 797.074319][ T4668] [ 797.077476][ C1] vkms_vblank_simulate: vblank timer overrun [ 797.167138][T16992] usb 1-1: USB disconnect, device number 77 [ 797.181451][ T5287] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.05 [ 797.191548][ T5287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 797.210560][ T5287] usb 3-1: SerialNumber: syz [ 797.210841][ T5286] usb 2-1: USB disconnect, device number 47 [ 797.233212][ T5287] usb 3-1: config 0 descriptor?? [ 797.253234][ T8] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 797.265415][ T8] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 797.265425][T17958] coredump: 96(syz.2.3435): written to core: VMAs: 41, size 89030656; core: 68370466 bytes, pos 89038848 [ 797.296255][ T8] usb 4-1: USB disconnect, device number 113 [ 797.321703][ T5288] usb 5-1: USB disconnect, device number 91 [ 797.921197][ T5287] usb 3-1: Firmware version (0.0) predates our first public release. [ 797.930286][ T5287] usb 3-1: Please update to version 0.2 or newer [ 797.977603][ T5287] usb 3-1: USB disconnect, device number 94